.Part 5 Storage Security Best Practices and Support Information HP SAN Design Reference Guide 785355-001

ManualsBrandsHP ManualsStorageHP B-Series Remote Replication Solutions

[switchname-interface Ten-GigabitEthernet1/0/1] unicast-suppression 1

[switchname-interface Ten-GigabitEthernet1/0/1] quit

• Network (No SAN Access) Interfaces

[switchname] interface Ten-GigabitEthernet1/0/14

[switchname-interface Ten-GigabitEthernet1/0/14] port link-type trunk

[switchname-interface Ten-GigabitEthernet1/0/14] port trunk permit vlan 1001

[switchname-interface Ten-GigabitEthernet1/0/14] port trunk pvid vlan 1001

[switchname-interface Ten-GigabitEthernet1/0/14] undo port trunk permit vlan 1

[switchname-interface Ten-GigabitEthernet1/0/14] quit

• Internal 5820X FCoE module Interfaces (1/1/1-1/1/4 and/or 1/2/1-1/2/4)

[switchname] interface Ten-GigabitEthernet1/1/1

[switchname-interface Ten-GigabitEthernet1/1/1] port link-type hybrid

[switchname-interface Ten-GigabitEthernet1/1/1] port hybrid vlan 4001 tagged

[switchname-interface Ten-GigabitEthernet1/1/1] port hybrid vlan 3001 untagged

[switchname-interface Ten-GigabitEthernet1/1/1] port hybrid pvid vlan 3001

[switchname-interface Ten-GigabitEthernet1/1/1] undo port hybrid vlan 1

[switchname-interface Ten-GigabitEthernet1/1/1] stp disable

[switchname-interface Ten-GigabitEthernet1/1/1] lldp tlv-enable dot1-tlv dcbx

[switchname-interface Ten-GigabitEthernet1/1/1] priority-flow-control auto

[switchname-interface Ten-GigabitEthernet1/1/1] priority-flow-control no-drop dot1p 3

[switchname-interface Ten-GigabitEthernet1/1/1] qos trust dot1p

[switchname-interface Ten-GigabitEthernet1/1/1] quit

5. Save changes and exit system-view.

[switchname]save

[switchname]quit

6. Configure 5820 FCoE module.

a. Connect to FCoE module from 5820 CLI.

<switchname>oap connect slot 1 system subslot1

At the Login prompt, type the initial default user account, admin. At the Password prompt,

type the initial default password, password.

H3C #>admin start

H3C (admin) #>config edit

b. Create VLAN to match 5820 ToSAN VLAN.

H3C (admin-config) #> vlan 4001 create

H3C (admin-config) #> vlan 4001 add port 4-7

c. Add ToSAN VLAN to default FCF.

H3C (admin-config) #> fcf list

Verify default FCF and VLAN are FCF: 0EFC00 VLAN: 1002.

H3C (admin-config) #> fcf 0EFC00 remove vlan 1002

H3C (admin-config) #> fcf 0EFC00 add vlan 4001

d. Save and activate changes.

H3C (admin-config) #>config save

H3C (admin) #>config activate

H3C (admin) #>admin stop

e. Optionally configure FCoE module IP address for management access.

H3C #> admin start

H3C #>set setup system

(and follow prompts)

f. Return back to 5820 prompt.

H3C #> quit

Press CTRL+K to return to 5820 prompt.

392 Best practices