958-000276-007, March 2005)

• IP Access Control List—This allows users to establish a list of IP addresses

from which the switch is allowed to accept connections. This prevents users

who have a ccess to the Ethernet LAN from attempting to access the Fibre

Channel switches. Connection attempts from unauthorized IP addresses are

ignored by the switch, making it appear that no device is connected. This

is primarily intended for environments that are not on a private, inaccessible

subnet, such as when installed in most c abinet configurations with a dual-NIC

HAFM appliance processor.

Advanced Fabric Diagnostics

This provides tools to m onitor the fabric and identify potential problems before

they impact network and application performance. Tools include ISL Fencing, new

switch-centric Fabric a n d Embedded Port Logs, an Audit Log for the embedded user

interfaces, and access to the Digital Diagnostic capabilities included with newer SFP

transceivers.

ISL Fencing

Also called Port Fencing, this feature allows customers to set up policies for blocking

an ISL when problems occur that cause an ISL to “bounce” or repeatedly at tempt to

establish a connection. Any time an ISL is brought up or down, a fabric rebuild occurs,

which can cause disruption in some environments. ISL Fencing will lessen the likelihood

of having a problematic ISL connection disrupt a SAN.

To configure this feature, users set policies with thresholds based on the number of

port events occurring during a set tim e period. If a p ort generates enough events to

exceed the policy threshold, the port is automatically blocked and the user is notified.

Transmit and receive traffic is disabled until the user can investigate, solve the problem,

and manually unblock the port.

Embedded Audit Log

The Audit log is a new log available through CLI and EWS. This is not the same Audit

Log available through HAFM. The log records all configuration changes to the switch to

provide data for analyzing problems caused by configuration changes.

Embedded Port Log

The Embedded Port Log is a new log that records all Fibre Channel traffic from or to the

embedded port. This log is actually implemented as two logs, one that allows entry

wrapping and one that stops a dding entries when filled. The logs allow filtering based

on Class F frames, as well as by port number, to isolate specific events or problems.

This feature is intended for advanced users to diagnose a nd troubleshoot traffic

problems within a SAN. The Embedded Port Log is available via EWS, CLI, and HAFM.