HP StorageWorks Fabric OS 6.0.1a release notes (AA-RWFMA-TE, June 2008)

Topic Description
IPSec for FR4-18i blade
and 400 Multi-protocol
Router
IPSec implementation details:
Pre-shared key
Main m ode (IKE negotiation protocol)
Tunnel mode in Encapsulating Security Payload (ESP)
IPSec specicstatisticsnotprovided
No NAT or IPv6 support
Jumbo fram es will not be supported on secure tunnels.
Internet Control Message Protocol (ICMP) redirect is not supported for
IPSec-enabled tunnels.
Only a single secure tunnel will be allowed on a port. Non-secure tunnels will
not be a llowed on the same port as secure tunnels.
Modify operations are not allowed on secure tunnels. To change the
conguration of a secure tunnel, you must rst delete the tunnel and then
recreate it with the desired options.
Onlyasinglerouteissupportedonaninterfacewithasecuretunnel.
An IPSec tunnel cannot be created using the same local IP address if ipperf
is active and using the same local IP address (source IP address).
Unidirectional supported throughput is approximately 104Mbytes/sec and
bidirectional supported throughput is approximately 90Mbytes/sec.
An IPSec tunnel takes longer to come online than a non-IPSec tunnel.
Fabric OS 6.x does not support IPSec with VLAN tagging.
VLAN tagging support and IPSec support are mutually exclusive on a
per-tunnel basis.
IPv6 FCIP Tunnels
Fab
ric OS 6.x does not support compression for IPv6 FCIP Tunnels
Fab
ric OS 6.x does not support IPSec for IPv6 tunnels.
Distance mode
Distance setting is not persistent. After a conguration upload s and downloads,
distance settings will be lost, and the desired distance will be shown as 0.
Fibre Channel Routing
(FCR) switch
If a Multi-protocol (MP) Router is present in the backbone fabric, the command
fosconfig - disable fcr maytakeupto8minutestocomplete. If
the MP Router is replaced by a FR4-18i or 400 Multi-protocol Router, the
command completes immediately.
EX_Port trunking is not enabled by default.
FCR switch does not support an edge fabric with one McDATA switch set to
never principal. The EX_Port connected to that edge fabric will not come up.
FCR switch does not support edge fabrics that consist of McDATA switches
with domain ID offset. The EX_Port connected to that edge fabric may fail the
RDIprocessandnotcomeup. EX_Portscomeupdisabled(failtoinitializein
time) if attached to a Native mode switch running EOS 9.x that has non-default
DID offset congured.
Diagnostics
All ofin e diagnostics commands should be used only when the switch is
disabled.
POST can fail if new SFPs are added during POST. SFPs should only be added
while the switch is online” or if the switch is powered off.
When you use the diagnostic command s systemVerification and
diagSetBurnin, the switch or blade will fault when the burn-in error log
is full. Clear the burn-in log before running systemVerification or
diagSetBurnin.
If there are ISLs present on the switch that are not used for routing (due to them
having higher linkcosts) , disable the links before running spinfab.
High Availability (HA)
If there is an already segmented port and backbone d evices are exported to
an edge fabric, a build fabric / fabric reconguration can occur after running
haFailover. Ensure that there are no segmented ports before upgrading
rmware.
HP StorageWorks Fabric OS 6.0.1a release notes
13