HP StorageWorks 8/20q and SN6000 Fibre Channel Switch Enterprise Fabric Management Suite User Guide This guide describes the HP StorageWorks Enterprise Fabric Management Suite applicaton (version 8.0.4) for the HP H-Series 8/20q and SN6000 Fibre Channel Switches (firmware version 8.0.4). Enterprise Fabric Management Suite is a workstation-based graphical user interface for managing fabrics, switches, and ports.
Legal and notice information © Copyright 2010 Hewlett-Packard Development Company, L.P. © 2000–2010 This product includes software developed by the JDOM Project (http://www.jdom.org/), Brett McLaughlin and Jason Hunter. All rights reserved. Confidential computer software. Valid license from HP required for possession, use or copying. Consistent with FAR 12.211 and 12.212, Commercial Computer Software, Computer Software Documentation, and Technical Data for Commercial Items are licensed to the U.S.
Contents 1 Using Enterprise Fabric Management Suite . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11 Installing Enterprise Fabric Management Suite . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Starting Enterprise Fabric Management Suite . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Exiting Enterprise Fabric Management Suite. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Exporting nicknames to a file . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Importing a nicknames file . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Fabric services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Enabling SNMP configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Device security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Managing the security database . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Viewing the device security database . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Configuring the security data base . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Security policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Security associations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Configuring SNMP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . SNMP configuration and trap configuration parameters . . . . . . . . . . . . . . . . . . . . . . . . . . .
JDOM license. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Contacting HP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . HP contact information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Subscription service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Documentation feedback .
47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 Tables 1 2 3 4 5 6 7 8 9 10 11 12 13 8 Switch data window buttons . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84 Stack Links data window . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89 Port Threshold Alarm Configuration dialog box . . . . . . . . . . . .
14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 Network Properties dialog box—IP fields . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 101 Network Properties dialog box—DNS fields . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 102 IPsec Configuration dialog box buttons. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 103 Create IP Security Policy dialog box fields . .
1 Using Enterprise Fabric Management Suite This chapter describes how to install and configure the Enterprise Fabric Management Suite application, which includes the EFMS Performance View application. This chapter also describes the user interface. Installing Enterprise Fabric Management Suite To install the Enterprise Fabric Management Suite application: 1. Verify that your workstation is properly equipped.
The installation process prompts you to enter the following information: • Installation folder • An 8/20q or SN6000 Fibre Channel Switch serial number and the Enterprise Fabric Management Suite license key. To use the 30-day trial license, only the switch serial number is needed. • Shortcut location Starting Enterprise Fabric Management Suite To start Enterprise Fabric Management Suite for the first time: 1.
4. Enter a fabric name, an entry switch, login name and password in the Add a New Fabric dialog box. Figure 3 Add a New Fabric dialog box A fabric name is recommended, but not required, and must be unique. • The Entry Switch field can be the IP address or Domain Name Server (DNS) name of the switch through which to manage the fabric. For more information about addresses and host names, see ”Network IP configuration” (page 100). • The factory login name and password are admin and password.
The encryption key encrypts the sensitive data in the default fabric view file so that no one can open the file without the encryption key. For information about changing this encryption key, see ”Changing the encryption key for the default fabric view file” (page 14). If an encryption key has been defined and the View File Auto Save and Load preference is enabled, the current fabric view is saved to your default fabric view file when you close future Enterprise Fabric Management Suite sessions.
Saving and opening fabric view files A fabric view file is one or more fabrics saved to a file. In addition to the Enterprise Fabric Management Suite default fabric view file, you can save and open your own fabric view files. To save a set of fabrics to a file: 1. Select File > Save View As to open the Save View dialog box. 2. Enter a name for the fabric view file or click Browse to select an existing file. Files are saved in the working directory. 3. Enter a password.
• Event browser maintains event messages in the event browser (checked/default) between Enterprise Fabric Management Suite sessions, or discards those messages (unchecked). For information about events, see ”Event browser” (page 34). • Preferred Initial Port View determines the port information type represented by the ports of the faceplate display: port type (default), port speed, port operational state, or port transceiver media.
Enterprise Fabric Management Suite user interface The Enterprise Fabric Management Suite application uses faceplate and backplate displays to manage the switches in a fabric. The interface (Figure 7) consists of a menu bar, fabric tree, graphic window, data windows (some with buttons), and data window tabs. The topology display (Figure 7) appears in the graphic window and shows all of the switches and connections in the fabric. The fabric names and switch names appear in the fabric tree.
Figure 9 shows the backplate display for a dual power supply SN6000 Fibre Channel Switch. Figure 9 SN6000 Fibre Channel Switch backplate display TIP: Mouse-over information appears when you rest the cursor over key elements in the Enterprise Fabric Management Suite interface, such as ports, LEDs, and fabric tree entries. Fabric tree The Enterprise Fabric Management Suite application enables you to manage the switches in multiple fabrics.
Next to each fabric tree entry is a small icon that uses color to indicate operational status: • A green icon indicates normal operation. • A yellow icon indicates that a switch is operational, but may require attention to maintain maximum performance. • A red icon indicates a potential failure or non-operational state, as when the switch is offline. • A blue icon indicates that a switch is unknown, unreachable, or unmanageable.
Alerts panel The Alerts panel shows all reasons for status, including faults. The Alerts panel entries are the highlighted rows between the faceplate image and the data window entries. The up/down arrows on the divider bar between the Alerts panel entries and data windows enable you to move the divider bar up or down incrementally.
Menu bars The menus and the included tasks vary depending on the type of display. For example, the Port menu and many of the Switch menu selections are only available in the faceplate display. For information on the menus, see ”Topology menu bar options” (page 21) and ”Faceplate menu bar options” (page 22). Topology display menu The Topology menu bar options, listed in Table 2, are available when a fabric is selected in the fabric tree.
Table 2 Topology menu bar options (continued) Option Sub-options View Refresh Layout Topology Toggle Auto Layout Remember Layout Wizards Configuration Wizard Help Help Topics License Info About Faceplate display menu The Faceplate menu bar options, listed in Table 3, are available when a stack or switch is selected in the fabric tree, except as noted.
Table 3 Faceplate menu bar options (continued) Option Sub-options Switch Archive These options are available only when a switch is selected in the fabric tree.
Table 3 Faceplate menu bar options (continued) Option Sub-options Stack Refresh Stack These options are available when a stack is selected in the fabric tree.
Faceplate menu bar options (continued) Table 3 Option Sub-options Security Edit Security These options are available only on a secure entry switch. Edit Security Config View Refresh Activate Security Set Deactivate Security Set View Port Types View Port States View Port Speeds View Port Media View Faceplate View Backplate Wizards Configuration Wizard Options marked with an asterisk (*) are available only when a switch is selected in the fabric tree.
Tool bar The tool bar consists of a row of graphical buttons that provide access to Enterprise Fabric Management Suite functions. The tool bar buttons are an alternative method to using the menu bar. The Tool bar options are described in Table 4.
Selected ISL links in the topology display are displayed with a heavier line. Selected switches are displayed with a light blue background. You can select switches and links the following ways: • To select one switch or link, click the switch or link. • To select a group of switches or links, press the Shift or Control key while clicking each switch or link.
Using Enterprise Fabric Management Suite
2 Managing Fabrics This chapter describes the options for managing fabrics. Fabric firmware and software versions The Fabric Tracker option enables you to generate a snapshot or baseline of current system version information, which can be viewed, analyzed and compared to other snapshot files, and exported to a file. Information includes date and time, switch active firmware version, device hardware, drivers, and firmware version from FDMI.
the same timestamp, the arrow is not displayed. The scroll bars are synchronized to view the same portion of each snapshot file simultaneously. To resize each pane: 1. Click and drag the separator bar between the two panes. 2. At the top of the separator bar between the two panes, click the left/right arrows to close the corresponding pane. The left/right arrows move to one side. Exporting version snapshots to a file The Reports tab page enables you to select one report to save to a text file.
6. For security reasons, you are prompted to change your user account password initially set up by the administrator. You are prompted each time you attempt to open the fabric until you change the password. Click OK, and change the user account password. NOTE: If the entry switch has SSL (Secure Socket Layer) enabled, the switch generates and displays a Verify Certificate dialog box that you must accept before gaining access to the fabric. Removing a fabric To delete a fabric from the database: 1.
Deleting switches and links The Enterprise Fabric Management Suite application does not automatically delete switches or links that have failed or have been physically removed from the fabric Fibre Channel network. In these cases, you can delete switches and links to bring the display up to date. If you delete a switch or a link that is still active, the Enterprise Fabric Management Suite application restores it automatically. You can also refresh the display.
8. Select Switch > Reset Switch to reset the replacement switch to activate the configuration. This configuration comes from the failed switch, including the domain ID and the zoning database. 9. Reconnect the inter-switch links, target devices, and initiator devices to the replacement switch using the same ports as were used on the failed switch. Displaying fabric information The topology display is your primary tool for monitoring a fabric.
Displaying fabric status The fabric updates the topology and faceplate displays by forwarding changes in status to the management workstation as they occur. You can allow the fabric to update the display status, or you can refresh the display at any time. To refresh the topology display, do one of the following: • Click Refresh. • Select View > Refresh. • Press the F5 key. • Right-click anywhere in the background of the topology display, and select Refresh Fabric from the popup menu.
If the Event Browser is enabled using the Preferences dialog box, the next time Enterprise Fabric Management Suite is started all events from the switch log appear. If the Event Browser is disabled when Enterprise Fabric Management Suite is started and later enabled, only those events that occur after the time the Event Browser was enabled will appear. To display the Event Browser, select Fabric > Show Event Browser.
Filtering the event browser Filtering the Event Browser enables you to display only those events that are of interest based on the event severity, timestamp, source, type, and description. To filter the Event Browser, select Filter > Filter Entries. This opens the Filter Events dialog box (Figure 16). The Event Browser displays those events that meet all of the criteria in the Filter Events dialog box.
FC Ping dialog box The FC Ping dialog box (Figure 17) enables you to send an ECHO frame to a specified target and verify that the frame was returned. Figure 17 FC Ping dialog box To verify a Fibre Channel connection: 1. Select Switch > FC Ping to open the FC Ping dialog box. 2. Open the Destination drop-down list, and select a destination port. 3. Select the Port WWN or Port Address option. 4.
FC Traceroute dialog box The FC TraceRoute dialog box (Figure 18) enables you to map the route trip a frame takes from source to destination and back. Figure 18 FC TraceRoute dialog box To trace a Fibre Channel connection: 1. Select Fabric > FC TraceRoute to open the FC TraceRoute dialog box. 2. Open the Source drop-down list, and select a source port. 3. Select the Port WWN or Port Address option. 4. Open the Destination drop-down list, and select a destination port. 5.
Devices data window The Devices data window (Figure 19) displays information about name server devices and proxied devices (from configuration of TR ports) connected to the switch. To display the Devices data window, click the Devices tab below the data window. Figure 19 Devices data window Because remote devices are proxied, the following limitations in available information exist: • The Details button is disabled. • The Target/Initiator field always reads Unknown.
Table 7 Devices data window fields (continued) Field Description Active Zones The active zone to which the device belongs Row # Row number reference for each listing in the Devices data window table To display detailed information for a device listed in the Devices data window, click (i) in the Details column for that device to open the Detailed Devices Display window (Figure 20).
Editing a nickname To edit a nickname: 1. Select Fabric > Nicknames to open the Nicknames dialog box. The device entries are listed in table format. 2. Choose one of the following options: • Double-click a cell in the Nicknames column, and edit the nickname in the text field. In the Nicknames dialog box, click Apply to save the changes. • Click on a device entry in the table, and then select Edit > Edit Nickname to open the Edit Nicknames dialog box. Edit the nickname in the text field, and then click OK.
Enabling SNMP configuration To enable the SNMP configuration on a single switch: 1. Select a switch in the fabric tree or in the topology display graphic window. 2. If you selected a switch in the fabric tree, select Switch > SNMP > SNMP Properties to open the SNMP Properties dialog box. If you selected a switch in the graphic window, select Switch > SNMP Properties. 3. Select the SNMP Enabled option in the SNMP Configuration area. 4. Click OK to save the change to the database.
NOTE: When a local device is mapped over a TR_Port to a remote device, the local device and its TR_Port appear as an NPIV connected device in the remote fabric. It is possible, though not recommended, to map such a local device over a second TR_Port to a local device in a second local fabric. In this case, if you merge the two local fabrics, the transparent route becomes inactive for the devices that now have a path over an ISL, and an alarm is generated.
Transparent Routes data window The Transparent Routes data window displays the currently configured inter-fabric zones/routes using a TR_Port. Figure 21 Transparent Routes data window The Transparent Routes data window fields are described in Table 8.
The Transparent Route dialog box (Figure 22) displays detailed information about the transparent route you selected from the Transparent Routes data window. The state of the route (Active or Inactive) is shown, and Port WWN, TR Port WWN, and Status fields are displayed for both sides of the route. Device A does not necessarily correspond to the HP H-Series Fibre Channel Switch side of the route because the end points of the route could be in any order.
Adding an inter-fabric route NOTE: The Merge Auto Save option in the Config Zoning dialog box must be selected before you can open the TR Mapping Manager dialog box. For more information, see ”Merge Auto Save” (page 54). The local fabric port to be used in the inter-fabric zone must be configured as a TR_Port before the devices are mapped. For information about changing port types, see ”Port types” (page 135).
Removing an inter-fabric route NOTE: The Merge Auto Save option in the Config Zoning dialog box must be selected before you can open the TR Mapping Manager dialog box. For more information, see ”Merge Auto Save” (page 54). To remove an inter-fabric route: 1. Select Fabric > TR Mapping Manager to open the TR Mapping Manager dialog box (Figure 23). 2. Select a TR mapping member from the TR Mapping list, and then click Remove or select Edit > Remove.
a. Choose one of the following options from Select Set of Zoning Commands to View: • Comprehensive Zoning Commands for Initial TR Setup shows the list of zoning commands to set up all the IFZs. • Zoning Commands Only for Changes to TR Mappings shows the list of zoning commands only for changes you make during this session (after opening the TR Mapping Manager dialog box).
3 Managing Fabric Zoning NOTE: If you are using Simple SAN Connection Manager (SSCM), it is recommended that you use the single initiator zoning that SSCM configures automatically. This chapter is for administrators who are not using SSCM, or who want to do custom zoning. Zoning a fabric enables you to divide the ports and devices of the fabric into zones for more efficient and secure communication among functionally grouped nodes.
resides in non-volatile or permanent memory and is therefore retained after a reset. Zones that are currently not in a zone set are considered to be part of the orphan zone set. The orphan zone set is not an actual zone set, but rather a way of displaying the zones that are not currently in a zone set. To apply zoning to a fabric, choose a zone set and activate it. When you activate a zone set, the switch distributes that zone set and its zones, excluding aliases, to every switch in the fabric.
To view zoning properties and limits on a switch: 1. On the faceplate display, select Zoning > Edit Zoning to open the Edit Zoning dialog box. 2. Choose one of the following options: • View the zoning properties/limits located directly below the zoning tool bar (Figure 28). • In the zone sets tree (left pane), right-click the Zonesets entry at the top of the tree, and then select Properties.
The Configured Zonesets data window uses display conventions for expanding and contracting entries that are similar to those used by the fabric tree. An entry handle located to the left of an entry in the tree indicates that the entry can be expanded. Click this handle or double-click the following entries to expand or collapse them: • A zone set expands to show its member zones. • A zone expands to show its members by device port World Wide Name or device port Fibre Channel address.
To apply zoning to a fabric, choose a zone set and activate it. When you activate a zone set, the switch distributes that zone set and its zones, excluding aliases, to every switch in the fabric. This zone set is then known as the active zone set. Changes can only be made to inactive zone sets, which are stored in flash (non-volatile) memory and retained after any switch reset. You must configure an inactive zone set to your needs and then activate that updated zone set to apply the changes to the fabric.
Table 10 Port/device icons Icon Description Switch port icon—When not logged in Switch port icon—When logged in NL_Port (loop) device icon—When logged in to fabric NL_Port (loop) device icon—When not logged in to fabric N_Port device icon—When logged in to fabric N_Port device icon—When not logged in to fabric Configuring the zoning database Use the Zoning Config dialog box (Figure 29) to change the Merge Auto Save, Default Zone, and Discard Inactive configuration parameters.
Default Zone The Default Zone parameter enables (Allow) or disables (Deny) communication among ports/devices that are not defined in the active zone set or when there is no active zone set. This parameter must have the same value throughout the fabric. However, the Default Zone parameter is not automatically distributed throughout the fabric and must be configured to the same state in every switch in the fabric.
Removing all zone and zone set definitions To remove all zone and zone set definitions: 1. Select a switch or stack in the fabric tree. 2. Select Zoning > Edit Zoning to open the Edit Zoning window. 3. If you selected a stack and the zoning database is not identical on all switches in the stack, choose a switch from the Select Source Switch list. Changes that you make to this switch are distributed to the other switches in the stack. 4. Select Edit > Clear Zoning. 5.
Resolving active, configured, and merged zone sets The Resolving Zoning options enable you to manage the active, configured, and merged zone sets in the zoning database. To access the Resolving Zoning dialog box options, open the faceplate display, and then select Zoning > Resolve Zoning. • Capture Active Zoning—Capture Active Zoning option copies the active zone set to the configured zone set.
Activating and deactivating a zone set You must activate a zone set to apply its zoning definitions to the fabric. When you activate a zone set, the switch distributes that zone set to the temporary zoning database on every switch in the fabric. Only one zone set can be active at one time. The purpose of the deactivate function is to suspend all fabric zoning, which results in free communication fabric-wide (when Default Zone is set to Allow) or no communication (when Default Zone is set to Deny).
Removing a zone set Removing a zone set from the database affects the member zones in the following ways. • Member zones that are members of other zone sets are not affected. • Zones that are currently not in a zone set are considered to be part of the orphan zone set. The orphan zone set is not an actual zone set, but rather a way of displaying the zones that are not currently in a zone set. To remove a zone set: 1. Select a switch or stack in the fabric tree. 2.
8. To add switch ports or attached devices to the zone, choose one of the following options: • In the zone set tree, select the zone set. In the graphic window, select the port to add to the zone. Select Edit > Add Members. • Select a port by switch port number, Fibre Channel address, or WWN in the Port/Device tree, and drag it into the zone. • Select a port by switch port number, Fibre Channel address, or WWN in the Port/Device tree. Right-click the zone, and select Add Zone Members from the popup menu. 9.
4. Choose one of the following options to add the port/device: • Select a port/device in the Port/Device tree, and drag it into the zone. To select multiple ports/devices, press and hold the Control key while selecting and dragging. • Select a port/device in the Port/Device tree. To select multiple ports/devices, press and hold the Control key while selecting. Select a zone set in the left pane. Select Edit > Add Members. • Select a port/device in the Port/Device tree.
Removing a zone member Removing a zone member affects every zone and zone set in which that zone is a member. To remove a member from a zone: 1. Select a switch or stack in the fabric tree. 2. Select Zoning > Edit Zoning to open the Edit Zoning window. 3. If you selected a stack and the zoning database is not identical on all switches in the stack, choose a switch from the Select Source Switch list. Changes that you make to this switch are distributed to the other switches in the stack. 4.
4. Select Edit > Delete Zone to open the Remove dialog box. 5. Click Yes to remove the zone from all zone sets. 6. Click Apply to display the Save Zoning and Error Check dialog box, which presents the following options: • Perform Error Check checks for zoning conflicts, such as empty zones, aliases, or zone sets. This option is recommended before saving. If errors are found, click Close and correct the errors. • Save Zoning save the changes to the zoning database with an option to activate a zone set.
4. Choose one of the following options to add the port/device: • Select a port/device in the Port/Device tree, and drag it into the alias. To select multiple ports/devices, press and hold the Control key while selecting. • Select a port/device in the Port/Device tree. Click an alias to select multiple ports/devices, press and hold the Control key while selecting. Select an alias. Select Edit > Add Members. • Select a port/device in the Port/Device tree.
4 Managing Fabric Security This chapter describes connection security and user account security concepts. It also describes the tasks to configure port security, device security, and RADIUS servers. Connection security Connection security provides an encrypted data path for switch management methods.
Port security Port binding ties a specific device WWN to a physical port number. Using the Port Binding dialog box, you can enable/disable port binding for the port and add WWNs to the list of WWNs bound to the port. The dialog box displays the port binding data received from the switch for the selected port. To bind a WWN to a port: 1. Select a switch in the fabric tree. 2. Select a port, and select Port > Port Binding to open the Port Binding dialog box (Figure 30). 3.
Each switch maintains its own security database consisting of the active security set (if one has been activated), configured security sets, and groups. A switch may have more than one configured security set, but only one security set may be active. The security database has the following limits: • Maximum number of security sets is 4. • Maximum number of security groups is 16. • Maximum number of members in a group is 1000. • Maximum total number of group members is 1000.
Viewing the device security database Device security information is available in the Configured Security data window and the Active Security data window. These data windows are available only on a secure (SSL enabled) entry switch. To establish a secure connection, the SSL service must be enabled on the entry switch before you log in. For information about enabling the SSL service, see ”Managing system services” (page 97).
To view the properties of a security set or security group: 1. Select the entry switch in the fabric tree. 2. Click Security on the toolbar, or select Security > Edit Security to open the Edit Security dialog box (Figure 31). 3. Select a security set or security group, and select Edit > Properties to open the Properties dialog box.
Restoring the security database from a file To restore a security database from a file: 1. Select the entry switch in the fabric tree. 2. Click Security on the toolbar, or select Security > Edit Security to open the Edit Security dialog box (Figure 31). 3. Select File > Open to open the Open dialog box. 4. Browse for and select a previously saved security database file, and click Open. The security database appears in the Edit Security dialog box.
Removing a security set To remove a security set: 1. Select the entry switch from the fabric tree. 2. Click Security on the toolbar, or select Security > Edit Security to open the Edit Security dialog box (Figure 31). 3. Select a security set, and select Edit > Remove Security Set. You cannot delete the orphan zone set. 4. Click Yes to confirm the security set removal. 5. Click Apply to display the Save Security dialog box. 6. Click Save Security to apply changes to switch. 7.
8. Click Close to close the Save Security dialog box. Removing a group from all security sets To remove a group from all security sets: 1. Select the entry switch from the fabric tree. 2. Click Security on the toolbar, or select Security > Edit Security to open the Edit Security dialog box (Figure 31). 3. Select a group in a security set, and select Edit > Remove Security Group from All Security sets. 4. Click Yes to confirm the security group removal. 5.
5. Select a security group type from the Security Group Type drop-down menu. A security set is limited to one group of each type. • ISL for secure connections to other switches • Port for secure connections to devices • MS for secure connections to devices that issue management server commands. 6. Click OK to save the change. 7. Click Apply to display the Save Security dialog box. 8. Click Save Security to apply changes to switch. 9.
You can also click Generate to create a random secondary secret. Re-type the secondary secret in the Confirm Secondary field. If the initiator does not support either hash, the link becomes isolated. 8. For ISL groups when fabric binding is enabled (see ”Configuring the security data base” (page 69)), in the Domain ID Binding field, enter the domain ID (1–239) for the switch.
RADIUS server and can be managed centrally and separately from the clients. In addition, no passwords are exchanged between the RADIUS server and its clients. Authentication of requests from a RADIUS client to the server and responses from the server to a client can also be authenticated. This requires sharing a secret between the server and client. The accounting RADIUS supports the auditing of the users and switch services such as Telnet, FTP, and switch management applications.
9. In the Secret field, enter the server secret. A secret is required for all RADIUS servers. The secret is used when generating and checking the Message-Authenticator attribute. 10. Click Add Server to add the server. 11. Click the Modify Authentication Order tab, and verify that Device Authentication Order and User Authentication Order options are set to either Radius or Radius Local for Radius Authentication to be implemented. • Local—Attempts to authenticate using the local switch password database.
Editing RADIUS server information Editing information of a RADIUS server involves changing the configuration of a RADIUS server. Figure 40 Radius Server Information dialog box—Edit server To edit information of a RADIUS server: 1. Select a switch in the fabric tree. 2. Select Switch > Radius Servers to open the Radius Server Information dialog box (Figure 40). 3. Click the Edit Server tab, and select the server to be edited In the server list at the top of the dialog box. 4.
Modifying authentication order RADIUS server information Editing information of a RADIUS server involves changing the configuration of a RADIUS server. Figure 41 Radius Server Information dialog box—Modify authentication order To modify the authentication order information of a RADIUS server: 1. Select a switch in the fabric tree. 2. Select Switch > Radius Servers to open the Radius Server Information dialog box (Figure 41). 3.
5 Managing Switches This chapter describes the tasks used to manage switches in the fabric. The switches supported by the Enterprise Fabric Management Suite application are: • HP StorageWorks 8/20q Fibre Channel Switch • HP StorageWorks SN6000 Single Power Supply Fibre Channel Switch • HP StorageWorks SN6000 Dual Power Supply Fibre Channel Switch Managing user accounts Only the Admin account can manage user accounts with the User Account Administration dialog boxes.
Creating user accounts A switch can have a maximum of 15 user accounts. Figure 42 User Account Administration dialog box—Add account To create a user account on a switch: 1. Select a switch or stack in the fabric tree. 2. Select Switch > User Accounts to open the User Account Administration dialog box. For a stack, select Stack > User Accounts. 3. Click the Add Account tab to open the Add Account tab page (Figure 42). 4.
7. Click Close to close the User Account Administration dialog box. Figure 43 User Account Administration dialog box—Remove account Changing a user account password A user can change the password for their account, but only the Admin account user can change the password for another user’s account. If the user’s original password is not known, the Admin account user must remove the account and then add the account with the new password. To change the password for an account on a switch: 1.
8. Click Close to close the User Account Administration dialog box. Figure 44 User Account Administration dialog box—Change password Modifying a user account To modify a user account on a switch: 1. Select a switch or stack in the fabric tree. 2. Select Switch > User Accounts to open the User Account Administration dialog box. For a stack, select Stack > User Accounts. 3. Click the Modify Account tab to display the Modify Account dialog box (Figure 45). 4.
9. Click Close to close the User Account Administration dialog box.
Switch data window The Switch data window (Figure 46) displays the current network and switch information for the selected switch. To open the Switch data window, click the Switch tab below the data window. Figure 46 Switch data window Information in the Switch data window is grouped and accessed by the Summary, Status, Network, User Login, Firmware, Services, Zones/Security, and Advanced buttons. Click a button to display the switch information for the selected data category (Figure 46).
Table 11 Switch data window fields (continued) Field Description First Port Address Switch Fibre Channel address World Wide Name Switch World Wide Name Serial Number Number assigned to each chassis Reason for Status Reason for the operational state Vendor Switch manufacturer MAC Address Media Access Control address Negotiated Domain ID Domain ID currently being used by the fabric Configured Domain ID Domain ID, defined by network administrator Domain ID Lock Domain ID lock status.
Table 11 Switch data window fields (continued) Field Description Test Fault Code Code value for the last recorded diagnostic test status recorded on the switch Network Group IPv4 Enabled Internet Protocol version 4 Enabled or Disabled IPv4 Address Internet Protocol version 4 address IPv4 Subnet Mask Mask that determines the IP address subnet IPv4 Gateway Gateway address IPv6 Enabled Internet Protocol version 6 Enabled or Disabled IPv6 Address Mask that determines the IP address subnet IPv6 G
Table 11 Switch data window fields (continued) Field Description Services Group NTP Client Enabled Enables switches to synchronize their time to a centralized server. Enabled or Disabled. NTP Server Address IP address of the centralized NTP server. Ethernet connection to NTP server is required. FDMI Enable Fabric Device Management Interface status. If enabled, device information can be obtained, managed, and saved through the fabric using Name Service Management Server functions.
Table 11 Switch data window fields (continued) Field Description Discard Inactive Automatically removes the previously active zone set when a zone set is activated on a switch Implicit Hard Zoning Introduces hardware enforcement of zoning regardless of type. All zones and all supported zone member types have hardware enforcement.
Stack Links data window The Stack Links data window displays information about all switch links for a stack of switches in the faceplate display. This information includes the switch names, the port number at the end of each link, and the link status icon. To open the Stack Links data window, click a stack icon in the fabric tree, and click the Stack Links tab below the data window in the stack faceplate display.
Configuring port threshold alarms You can configure the switch to generate alarms for selected events. Configuring an alarm involves the following: • Choosing an event type • Specifying rising and falling triggers • Specifying a sample window • Enabling or disabling the alarm To configure port threshold alarms: 1. Select a switch in the fabric tree. 2. Select Switch > Port Threshold Alarm Configuration to open the Port Threshold Alarm Configuration dialog box (Figure 49).
NOTE: The switch downs a port if a rising trigger alarm is not cleared after three consecutive sample windows. Generate rising trigger alarm; eligibility ends Generate rising trigger alarm; eligibility ends Rising Trigger Event Count Generate falling trigger alarm; eligibility is reset Falling Trigger Sample Window Figure 50 Port threshold alarm example 8. Enter a sample window in seconds. The sample window defines the period of time in which to count events. 9.
The NTP Server Discovery and NTP Server IP Address fields become active, and allow you to select a discovery method (Static, DHCP, DHCPv6) and to specify an IP address (IPv4 or IPv6). Figure 51 Date/Time dialog box To manually set the date and time on a switch: 1. Select a switch or a stack in the fabric tree. 2. Select Switch > Set Date/Time to open the Date/Time dialog box. For a stack, select Stack > Set Date/Time. 3.
Resetting a switch Resetting a switch reboots the switch using the configuration parameters in memory. Depending on the reset type, a switch reset may include a Power On Self Test (POST) and may disrupt traffic. Table 13 describes the types of switch resets. Table 13 Switch resets Reset Type Description Hot Reset Resets a switch without a Power On Self Test. This reset activates the pending firmware, but does not disrupt switch traffic.
To open the Switch Properties dialog box (Figure 52), choose one of the following options: • Open the faceplate display for the switch you are configuring, and then select Switch > Switch Properties. • Right-click a switch graphic in the faceplate display, and then select Switch Properties from the popup menu. Figure 52 Switch Properties dialog box Domain ID and Domain ID lock The domain ID is a unique Fibre Channel identifier for the switch.
Symbolic name The symbolic name is a user-defined name of up to 32 characters that identifies the switch. The symbolic name is used in the displays and data windows to help identify switches. The following characters may not be used in the symbolic name: pound sign (#), semi-colon (;), and comma (,). Switch administrative states The switch administrative state determines the operational state of the switch.
To view detailed FDMI information for a device, click the Devices tab, and click (i) in the Details column of the Devices data window. The Detailed Devices Display dialog box displays the specific information for that device. For more information, see ”Devices data window” (page 39). Advanced switch properties (timeout values) The Advanced Switch Properties dialog box (Figure 53) enables you to set the timeout values for all ports on the switch, and is available only on the entry switch.
Managing system services The System Services dialog box (Figure 54) provides a central location for you to enable or disable any of the external user services such as Simple Network Management Protocol (SNMP), embedded web applet, command line interface, Network Time Protocol (NTP), Common Information Model (CIM), and Call Home. To display the System Services dialog box, select Switch > Services.
• NTP (Network Time Protocol)—Enables the switch to obtain its time and date settings from an NTP server. Configuring NTP on all of your switches and your workstations synchronizes the date/time settings across the fabric and prevents difficulties with SSL certificates and event logs. • CIM (Common Information Model)—Enables management of the switch through third-party applications that use CIM. • FTP (File Transfer Protocol)—Enables file transfers to the switch using FTP.
• Refresh the stack to update the faceplate display with current information for all switches in the stack • Select all ports on all switches in the stack. Security consistency checklist The Security Consistency Checklist dialog box (Figure 55) enables you to view current security-related settings, such as, firmware versions, embedded GUI, in-band management, date/time on switches.
5. After making changes, click OK to put the new values into effect. Figure 56 Network Properties dialog boxes Network IP configuration The IP configuration identifies the switch on the Ethernet network, determines which network discovery method to use, and enables/disables the IPv4 and IPv6 network addressing. An IPv4 address is 32 bits and consists of four blocks of decimal numbers, with each block separated by a period. Each block can have up to three numbers.
Table 14 Network Properties dialog box—IP fields Field Description IPv4 Network Enable this option to permit the IPv4 addressing format to be used anytime you are required to enter an IP address. CAUTION: Disabling this option prevents you from using an IPv4 IP address for system services. IPv6 Network Enable this option to permit the IPv6 addressing format to be used anytime you are required to enter an IP address.
Network DNS configuration The Network Properties dialog box has two tabs: IP and DNS. Click the DNS tab to open the Network Properties DNS dialog box (Figure 56). Use the Network Properties DNS dialog box to enable the DNS Client on the switch and the DNS server to map domain names to IP addresses. Table 15 describes the network DNS configuration parameters. Table 15 Network Properties dialog box—DNS fields Field Description DNS Client Select this option to enable the Domain Name Service client.
Network IP Security Network IP Security provides encryption-based security for IP version 4 and IP version 6 communications through the use of security policies and associations. The security policy database is the set of all security policies configured on the switch. To manage IP security associations and policies: 1. Select an entry switch in the fabric tree. 2. Select Switch > Network > Ipsec Properties to open the IPsec Configuration dialog box (Figure 57).
Security policies A security policy defines the following parameters: • Connection source and destination • Data traffic direction: inbound or outbound • Protocols for which to protect data traffic • Security protocols; Authentication Header (AH) or Encapsulating Security Payload (ESP) • Level of protection: IP Security, discard, or none Policies can define security for host-to-host, host-to-gateway, and gateway-to-gateway connections; one policy for each direction.
Table 17 Create IP Security Policy dialog box fields (continued) Field Description Destination Address IP address (version 4 or 6) or DNS host name of the host, switch, or gateway receiving data. If you specified an IP address for the SourceAddress, the DestinationAddress must use the same IP version format. Destination Prefix Length IPv4 or IPv6 subnet mask length. IPv4 [0..32], IPv6 [0..
Security associations A security association defines the encryption algorithm and encryption key to apply when called by a security policy. A security policy may call several associations at different times, but each association is related to only one policy. The security association database is the set of all security associations. IP Security configurations can be complex: it is possible to unintentionally configure policies and associations that isolate a switch from all communication.
Table 18 Create IP Security Association dialog box fields (continued) Field Description Authentication Algorithm with which to authenticate the source or destination: • HMAC-MD5 • HMAC-SHA1 • HMAC-SHA256 • AES-XCBC-MAC Authentication Key Key string to use for authentication Encryption Algorithm with which to encrypt outbound data or decrypt inbound data: • DES-CBC • 3DES-CBC • NULL • BLOWFISH-CBC • AES-CBC • TWOFISH-CBC Encryption Key Key string to use in encrypting or decrypting data Configuring
5. Click OK to save and activate the changes. Figure 60 SNMP Properties dialog box NOTE: Since Read Community, Trap Community, and Write Community settings are like passwords and are write-only fields, the current settings are displayed as asterisks. Table 19 describes the SNMP Properties dialog box fields. Table 19 SNMP Properties dialog box fields Field Description SNMP Enabled Enables or disables SNMP communication with other switches in the fabric.
Table 19 SNMP Properties dialog box fields (continued) Field Description Trap Version Specifies the SNMP version (1 or 2) with which to format traps. Trap 1 Enabled Enables or disables the trap. if disabled, traps are not sent to trap monitoring stations and the trap settings are not configurable. Trap Address Specifies the IP address to which SNMP traps are sent. A maximum of 5 trap addresses are supported. The default address for trap 1 is 10.0.0.254. The default address for traps 2–5 is 0.0.0.0.
Adding an SNMP v3 user To enable SNMP v3 security and add an SNMP v3 user: 1. Select the entry switch in the fabric tree. 2. Select Switch > SNMP > SNMP v3 Manager to open the SNMP v3 Manager dialog box (Figure 61). 3. Check the SNMP v3 Security checkbox to enable SNMP v3 security for the specified SNMP v3 users. 4. Select Edit > Add New User to open the SNMP v3 User Editor dialog box (Figure 62) and enter information in the fields described in Table 20.
Modifying an SNMP v3 user To modify an SNMP v3 user: 1. Select the entry switch in the fabric tree. 2. Select Switch > SNMP > SNMP v3 Manager to open the SNMP v3 Manager dialog box (Figure 61). 3. Select a user in the user list, and select Edit > Edit User to open the SNMP v3 User dialog box. 4. Modify the entries as needed, and click OK. For information about the entry fields, see Table 20. 5. Click OK to save the settings and close the SNMP v3 User Editor dialog box. 6.
Table 21 Call Home Setup dialog box fields Field Description Primary SMTP: (active) (active) indicates that the Primary SMTP (Simple Mail Transfer Protocol) is the SMTP server that Call Home uses when transmitting email messages. Call Home operates as an SMTP sending agent. After any system configuration, the Primary SMTP server becomes the active SMTP server, if it is enabled and has a non-default address defined (0.0.0.0 is the default).
Table 21 Call Home Setup dialog box fields (continued) Field Description Reply To Email Address: Email address used by mail reading programs to determine the address to send the reply to the message received. This value overrides the use of the From: address as the recipient for a reply message. Throttle Duplicates: Boolean setting that indicates whether duplicate messages should be suppressed and accumulated.
Creating a profile To create a profile: 1. Select Edit > Add New Profile to open the Call Home Profile Editor dialog box (Figure 65) 2. Enter profile information in the fields described in Table 22, and click OK to save the changes. 3. In the Call Home Profile Manager dialog box (Figure 64), click Apply to activate the changes.
Editing a profile To edit or rename a profile: 1. Select a profile from the list of profiles (Figure 64) in the Call Home Profile Manager dialog box, and select Edit > Edit Profile. 2. The Call Home Profile Editor dialog box (Figure 65) appears populated with information for the selected profile. Enter profile information in the Call Home Profile Editor dialog box. The fields are described in Table 22. 3. Click OK to save the changes. 4.
Applying all profiles on a switch to other switches You can apply all profiles on a switch to one or more switches in a fabric using the Call Home Profile Multiple Switch Apply dialog box (Figure 66). The Call Home Profile Multiple Switch Apply dialog box (Figure 66) appears if you select the Apply Changes to Multiple Switches in Fabric option on the Call Home Profile Manager dialog box (Figure 64), and click Apply.
Using the Call Home message queue Use the Call Home Message Queue dialog box (Figure 67) to access the logged call home statistics. Click Update Stats to refresh with the most recent switch Call Home information. Click Clear Queue to clear the current statistics. Figure 67 Call Home Message Queue dialog box Testing Call Home profiles To test a Call Home profile with the current Call Home configuration: 1. Select a switch in the fabric tree. 2.
Testing a switch The Switch Diagnostics dialog box (Figure 70) enables you to test and verify the operational status of switches (online and offline).
Archiving a switch You can create an .XML archive file containing the configuration parameters. This archive file can be used to restore the configuration on the same switch or on a replacement switch. You can also use the archive file as a template for configuring new switches to add to a fabric. Basically any data received by Enterprise Fabric Management Suite is archived. Passwords are not archived.
Restoring a switch Restoring a switch loads the archived switch configuration parameters to the switch. The administrative state of the switch must be set to Offline using the Switch Properties dialog box before an archive can be used in the restore process. The switch type archive must be compatible with the switch to be restored. For more information, see ”Archiving a switch” (page 119).
• Configured Zoning—Restores all configured zone sets, zones, and aliases in the switch’s zoning database, excluding the active zone set • Nicknames—Restores the last saved nickname configuration • Call Home—Restores all Call Home configuration and profile settings • IP security configuration—Restores all profiles and associations • RADUIS server—Restores all RADIUS server configurations • Device security—Restores all security sets and groups, except group primary and secondary secrets 6.
Table 23 Factory default configuration settings (continued) Setting Value Network Discovery Static Remote Logging False Remote Logging Host IP Address 10.0.0.254 NTP Client Enabled False NTP Server IP Address 10.0.0.254 Contact Undefined Location Undefined Trap Enabled False Trap Port 162 Trap Address Trap 1: 10.0.0.254; Traps 2–5: 0.0.0.
To install a license key and upgrade the switch: 1. Select a switch in the fabric tree. 2. Select Switch > Features to open the Feature Licenses dialog box (Figure 72). Figure 72 Feature Licenses dialog box 3. Click Add to open the Add License Key dialog box (Figure 73). Figure 73 Add License Key dialog box 4. Enter the license key in the Key box, and click Get Description.
3. Click Browse to define a location for the support file, or type the path in the text field. You can rename the support file at this time. The default file name is dump_support.tgz, and the default location is your working directory. 4. Click Start to begin the process of creating and downloading the support file to your workstation. Observe the status in the Status area. 5. After the support file is saved to your workstation, click Close to close the Download Support File dialog box.
To install firmware on a switch: 1. Select a switch in the fabric tree. 2. Select Switch > Load Firmware to open the Load Firmware dialog box (Figure 75) 3. Select an image file in one of the following ways: • Select a firmware image file from the Version drop-down list. • Change the folder (path). Click Browse to search for a different firmware image file, select the folder, and then click Rescan to search the selected folder. Figure 75 Load Firmware dialog box for a single switch 4.
Managing Switches
6 Managing Ports This chapter describes port management tasks. Viewing port information The faceplate display uses color and text to show the port type, operational state, transmission speed, and media status. To display number and status information for a port, position the cursor over a port on the faceplate display. The status information changes depending on the View menu option selected. Green ports indicate active; gray ports indicate inactive.
Table 24 Port Information data window buttons (continued) Button Description Media—Transceiver specifications and vendor information (Table 28) DDM—Digital Diagnostics Monitoring (DDM); transceiver temperature, voltage, current, and power values (Table 29) Table 25 Port Information data window—Summary Fields Description Port Address Port Fibre Channel address Administrative Port Type Administrative port type (G, GL, F, FL, TR, or Donor).
Table 26 Port Information data window—Advanced Field Description MFS Mode Multiple Frame Sequence bundling status Configured I/O Stream Guard Configured RSCN message suppression status. If supported, status can be enabled, disabled, or automatically determined by the switch. Operational I/O Stream Guard The actual RSCN message suppression status. If supported, status can be enabled, disabled, or automatically determined by the switch. Device Scan Device scan status.
Table 26 Port Information data window—Advanced Field Description MFS Mode Multiple Frame Sequence bundling status Configured I/O Stream Guard Configured RSCN message suppression status. If supported, status can be enabled, disabled, or automatically determined by the switch. Operational I/O Stream Guard The actual RSCN message suppression status. If supported, status can be enabled, disabled, or automatically determined by the switch. Device Scan Device scan status.
Table 26 Port Information data window—Advanced Field Description MFS Mode Multiple Frame Sequence bundling status Configured I/O Stream Guard Configured RSCN message suppression status. If supported, status can be enabled, disabled, or automatically determined by the switch. Operational I/O Stream Guard The actual RSCN message suppression status. If supported, status can be enabled, disabled, or automatically determined by the switch. Device Scan Device scan status.
Table 26 Port Information data window—Advanced Field Description MFS Mode Multiple Frame Sequence bundling status Configured I/O Stream Guard Configured RSCN message suppression status. If supported, status can be enabled, disabled, or automatically determined by the switch. Operational I/O Stream Guard The actual RSCN message suppression status. If supported, status can be enabled, disabled, or automatically determined by the switch. Device Scan Device scan status.
Table 30 Port Statistics data window fields (continued) Field Description LIP(F7,F7) A loop initialization primitive frame used to acquire an AL_PA LIP(F8,AL_PS) Denotes a loop failure detected by the L_port identified by AL_PS LIP(F8,F7) A loop initialization primitive frame used to indicate that a Loop Failure has been detected at its receiver and does not have a valid AL_PA Login Count Number of device logins that have occurred on the switch Logout Count Number of device logouts that have oc
Configuring ports Use the drop-down lists in the Port Properties dialog box to change the following parameters: • Port symbolic name • Port types • Port states • Port speeds • I/O StreamGuard • Device scan The port settings or characteristics are configured using the Port Properties dialog box (Figure 80). To open the Port Properties dialog box, select one or more ports, open the Port menu, and then select Port Properties.
Table 31 Port Properties dialog box fields (continued) State Description I/O Stream Guard The I/O Stream Guard option suppresses the Registered State Change Notification (RSCN) messages on a port basis. I/O Stream Guard should be enabled only on ports connected to initiator devices. To change, click in the field, and select an option from the drop-down list. The options are: • Enable–Suppresses the reception of RSCN messages from ports for which I/O Stream Guard is enabled.
Table 32 Port types (continued) State Description GL_Port Generic loop port—Self-discovers as an F_Port, FL_Port, or an E_Port. GL_Port is the default port type. A single device on a public loop attempts to configure first as an F_Port, then if that fails, as an FL_Port. E_Port Expansion port—The mode that a G_Port or GL_Port is in when attached by an ISL (inter-switch link) to another fibre channel switch.
Table 34 Port administrative states State Description Online Activates and prepares port to send data. Offline Prevents port from receiving signal and accepting a device login. Diagnostics Prepares port for testing and prevents the port from accepting a device login. Downed Disables the port. Port speeds SFP ports with 8Gb SFPs installed can transmit and receive at 2-Gb/s, 4-Gb/s, or 8-Gb/s. XPAK ports can transmit and receive at 10-Gb/s or 20-Gb/s.
Port media status To display the port media status: 1. Select a switch or stack in the fabric tree. 2. Select View> View Port Media. Table 36 describes the port media types and status. Table 36 Port media status Media icon Description Optical SFP, online (green/black), logged-in, active, and ready to send data.
4. For each port, check (enable) or uncheck (disable) the checkbox in the Device Scan column. To apply the same value for all selected ports, check the Device Scan checkbox at the bottom of the dialog box. 5. Click OK. Auto Performance Tuning and AL Fairness The Auto Performance Tuning feature enables the switch to dynamically control the MFS_Enable, VI_Enable and LCF_Enable features based on the operational state of the port.
from one donor port for a total of 30 credits (15+15=30). This supports communication over the following approximate distances: • 50 km at 1 Gb/s (30÷0.6) • 25 km at 2 Gb/s (30÷1.2) • 12 km at 4 Gb/s (30÷2.4) • 6 km at 8 Gb/s (30÷4.8) Extending credits requires a minimum cable length that is dependent on transmission speed, but is independent of the number of credits borrowed. Extending credits using short cables can cause excessive port resets.
NOTE: As credits are used, the Logged-In LEDs on the corresponding donor ports illuminate continuously. In addition, donor port Activity LEDs reflects the same traffic as the recipient port. Donor ports whose credits are being used are unavailable for device connections. Moving a licensed port The mPort Technology feature enables you to move a port license from one SFP port to another SFP port that is currently unlicensed. If all SFP ports are licensed, this feature does not apply.
NOTE: The online port diagnostic test is not allowed on a TR_Port. If attempted, an error message appears stating that an online port diagnostic test is not allowed on a TR port. Figure 84 Port Diagnostics dialog box To test a port: 1. Select one or more ports in the faceplate display. 2. Select Port > Port Diagnostics. 3. Choose one of the following options: • Select Online Port Diagnostics to open the Port Diagnostics dialog box. Select the port to test from the Select Port drop-down list.
Graphing port performance The EFMS Performance View application displays port performance using graphs, plotting data communication rates and total errors for selected ports (Figure 85). When plotting data communication rates, you can choose frames/second or KBytes/second. The maximum number of open graphs is 64. The fabric status appears in text format after the fabric name in the fabric tree.
To prevent EFMS Performance View from prompting you to save the default Fabric View file between sessions, set Auto Load and Save Graphing Environment to Enable (default). For more information, see ”Setting EFMS Performance View preferences” (page 145).
Setting EFMS Performance View preferences To set EFMS Performance View preferences: 1. Select File > Preferences to open the Preferences dialog box (Figure 88). Figure 88 Preferences dialog box—EFMS Performance View 2. Set the following preferences: • Working Directory: Change the location of the working directory in which to save files. • Browser Location: Change the location of the browser used to view the online help.
Displaying Graphs You can open a maximum of 64 graphs at one time. To display graphs: 1. Select Fabric > Add Fabric, or click Add to open the Add a New Fabric dialog box. 2. Enter a fabric name, an IP address, an account name, and a password, and then click OK. 3. Set the graphing options and polling frequency. By default, EFMS Performance View plots total bytes transmitted and received at a polling frequency of once per second.
Customizing graphs To choose the information to be plotted, select Graph > Modify Graph Options. You can also right-click on a graph, and select Modify Graph Options. This opens the Default Graph Options dialog box (Figure 90). Figure 90 Default Graph Options dialog box To modify the graph options: 1. Choose the units for the graph: • Select the Show Bytes Data on Graph option to plot data in KBytes/second. • Select the Show Frames Data on Graph option to plot data in frames/second. 2.
• HSB—Click the HSB tab. Select a color using any of the following: • Click in the color palette. • Select the H, S, or B button and use the slide to vary the value. • Enter values in the H, S, or B input fields. • RGB—Click the RGB tab. Select a color by moving the slides to adjust the values for red, blue, and green, or enter values in the input fields. 5. Select the corresponding option to apply changes to all graphs, the currently selected graph, or only new graphs. 6.
7 Support and Other Resources Document conventions and symbols Document conventions Table 38 Convention Element Medium blue text: Figure 1 Cross-reference links and email addresses Medium blue, underlined text (http://www.hp.
• The name "JDOM" must not be used to endorse or promote products derived from this software without prior written permission. For written permission, please contact license@jdom.org. • Products derived from this software may not be called "JDOM", nor may "JDOM" appear in their name, without prior written permission from the JDOM Project Management (pm@jdom.org).
• HP StorageWorks 8/20q and SN6000 Fibre Channel Switch Rack Mount Kit Quick Start Installation Instructions • • • • • • • • • HP StorageWorks 8/20q Fibre Channel Switch Quick Start Installation Instructions HP StorageWorks 8/20q Fibre Channel Switch Installation and Reference Guide HP StorageWorks 8/20q Fibre Channel Switch QuickTools Switch Management User Guide HP StorageWorks 8/20q Fibre Channel Switch Command Line Interface Guide HP StorageWorks SN6000 Fibre Channel Switch Quick Start Installation In
Support and Other Resources
Glossary active zone set The zone set that defines the current zoning for the fabric. active firmware The firmware image on the switch that is in use. Activity LED A port LED that indicates when frames are entering or leaving the port. administrative state State that determines the operating state of the port or switch. The configured administrative state is stored in the switch configuration. The configured administrative state can be temporarily overridden using the command line interface.
Fabric view file A file containing a set of fabrics that were opened and saved during a previous Enterprise Fabric Management Suite session. Fan Fail LED An LED that indicates that a cooling fan in the switch is operating below standard. FC Fibre Channel FCID Fibre Channel address FDISC Fabric discovery. Discover F_Port Service Parameters. FDMI Fabric Device Management Interface flash memory Memory on the switch that contains the switch control firmware.
MIB Management Information Base NDCLA Nondisruptive Code Load and Activation NL_Port Node Loop Port. A Fibre Channel device port that supports arbitrated loop protocol. N_Port Node Port. A Fibre Channel device port in a point-to-point or fabric connection. NDP Neighborhood Discovery Protocol NPIV N_Port ID Virtualization NTP Network Time Protocol orphan zone set Zones that are currently not in a zone set are considered to be part of the orphan zone set.
user account An object stored on a switch consisting of an account name, password, authority level, and expiration date. VCCI Voluntary Control Council for Interference World Wide Name (WWN) A unique 64-bit address assigned to a device by the device manufacturer. XPAK A transceiver device that plugs into the Fibre Channel port that enables 10-Gb/s or 20-Gb/s transmission speed. zone A set of ports or devices grouped together to control the exchange of information.
Index A current administrative state 95 account name 79 Active Security data window 68 Active Zoneset data window 51 Admin account 79 Admin authority 79 administrative state port 136 switch 95 Advanced Switch Properties 96 AL Fairness 139 alarm configuration 90 description 35 aliases 49 archive 119 authentication device 74 user 74 Auto Performance Tuning 139 Auto Save 69 auto save default fabric view file 15 graphing options 145 B beacon 91 Broadcast 95 browser location 15, 145 requirements 11 C Call Ho
fabric services security 41 fabric view file auto save 145 open 31 save 15, 31 Faceplate display 22 factory default values 121 FDMI - see Fabric Device Management Interface Fibre Channel ping 37 traceroute 38 firmware installation 124 G graph print 148 rescale 148 statistics 148 type 148 graphic window 19 group create 72 remove from all security sets 72 group member add to group 73 modify 74 remove 74 H hard reset 93 help, obtaining 150, 151 help, online 16 hosts 38 hot reset 93 HP storage website 151 Sub
Port Statistics data window 131 preferences Enterprise Fabric Management Suite 15 Performance View 145 processor 11 profile copy 115 create 114 edit 115 Tech_Support_Center 115 R RADIUS - See Remote Authentication Dial-In User Service RADIUS server add 75 authentication order 78 edit configuration 77 remove 76 rediscover fabric 31 refresh 34, 83 Remote Authentication Dial-In User Service server 74 remote logging 94 reset port 141 switch 93 S Secure Shell 65 Secure Socket Layer 65 security connection 65 de
extended credits 139 zoning 50 working directory Enterprise Fabric Management Suite 15 Performance View 145 workstations 11 X XML archive file 119 Z zone sets 49 zones 49 zoning concepts 49 database 50, 52 limits 50 wizard 50 160
