53-1001774-01 14 April 2010 DCFM Professional Plus User Manual Supporting DCFM 10.4.
Copyright © 2009-2010 Brocade Communications Systems, Inc. All Rights Reserved. Brocade, the B-wing symbol, BigIron, DCX, Fabric OS, FastIron, IronPoint, IronShield, IronView, IronWare, JetCore, NetIron, SecureIron, ServerIron, StorageX, and TurboIron are registered trademarks, and DCFM, Extraordinary Networks, and SAN Health are trademarks of Brocade Communications Systems, Inc., in the United States and/or in other countries.
Contents About This Document In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .xxv How this document is organized . . . . . . . . . . . . . . . . . . . . . . . . . . . .xxv Supported hardware and software . . . . . . . . . . . . . . . . . . . . . . . . . xxvi What’s new in this document . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxix Document conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Contents Management server and client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14 Logging into a server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17 Launching a remote client. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17 Clearing previous versions of the remote client . . . . . . . . . . . 18 Launching the Configuration Wizard . . . . . . . . . . . . . . . . . . . . 18 Changing your password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Contents Seed switch requirements. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54 Seed switch failover. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55 Changing the seed switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56 Chapter 3 Application Configuration In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59 Data backup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Contents Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83 Configuring the server name. . . . . . . . . . . . . . . . . . . . . . . . . . . 83 Setting the CHAP secret . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84 Configuring login security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84 Configuring the login banner display . . . . . . . . . . . . . . . . . . . . 85 Disabling the login banner . . . . . . . . . . . . . .
Contents Overwriting an assigned event filter . . . . . . . . . . . . . . . . . . . . . . . .121 Removing an event filter from a call home center . . . . . . . . . . . . .121 Removing an event filter from a device . . . . . . . . . . . . . . . . . . . . . .122 Removing an event filter from the Call Home Event Filters table .122 Searching for an assigned Event Filter . . . . . . . . . . . . . . . . . . . . . .122 Chapter 5 View management In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . .
Contents Launching Web Tools . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .143 Launching FCR configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .144 Launching HCM Agent . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .145 Adding a tool . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .146 Entering the server IP address of a tool . . . . . . . . . . . . . . . . . . . . .
Contents Launching the SMIA configuration tool on Linux and Solaris Launching a remote SMIA configuration tool. . . . . . . . . . . . . Home tab . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . CIMOM configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Certificate management . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Contents Disabling a port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Filtering port connectivity . . . . . . . . . . . . . . . . . . . . . . . . . . . . Viewing port details . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Viewing ports and port properties . . . . . . . . . . . . . . . . . . . . . Port types . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Showing connected ports . . . . . . . . . . . . . . . . . . . . . . . . . .
Contents Fabric binding overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .237 Enabling fabric binding . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 238 Disabling fabric binding. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 239 Adding switches to the fabric binding membership list . . . . 239 Adding detached devices to the fabric binding membership list 240 Removing switches from fabric binding membership . . . . . . 240 High integrity fabrics . . . . . .
Contents Policy actions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Adding an event policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Adding an Port offline policy . . . . . . . . . . . . . . . . . . . . . . . . . . Adding a PM threshold crossed policy . . . . . . . . . . . . . . . . . . Adding a security violation policy . . . . . . . . . . . . . . . . . . . . . . Defining the broadcast message action. . . . . . . . . . . . . . . . .
Contents Performance measures . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 288 Performance management requirements . . . . . . . . . . . . . . . 289 Real-time performance data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .293 Generating a real-time performance graph . . . . . . . . . . . . . 294 Filtering real-time performance data . . . . . . . . . . . . . . . . . . . 295 Exporting real-time performance data . . . . . . . . . . . . . . . . . 296 Clearing port counters . . . . .
Contents Generating performance reports . . . . . . . . . . . . . . . . . . . . . . . . . . .321 Generating zoning reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .322 Chapter 13 Role-Based Access Control In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .323 Users . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .323 Viewing the list of users. . . . . . . . . . . . . . . . . . . . . . . .
Contents application . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 345 supportSave on adapters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .347 Chapter 15 Fibre Channel over Ethernet In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .349 FCoE overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .349 DCB exchange protocol . . . . . . . . . . . . . . . . . . . . . . .
Contents QoS configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .373 Enhanced Transmission Selection . . . . . . . . . . . . . . . . . . . . . 373 Priority-based flow control . . . . . . . . . . . . . . . . . . . . . . . . . . . . 373 Creating a CEE map . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 374 Editing a CEE map . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 376 Deleting a CEE map . . . . . . . . . . . . . . . . . . . .
Contents FCIP trunking . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .408 Design for redundancy and fault tolerance . . . . . . . . . . . . . . 409 FCIP tunnel restrictions for FCP and FICON emulation features 409 FCIP Trunk configuration considerations . . . . . . . . . . . . . . . . 409 FCIP circuit failover capabilities . . . . . . . . . . . . . . . . . . . . . . . 410 Bandwidth calculation during failover . . . . . . . . . . . . . . . . . .
Contents Deleting FCIP Circuits . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .438 Displaying FCIP performance graphs. . . . . . . . . . . . . . . . . . . . . . . .439 Displaying performance graphs for FC ports . . . . . . . . . . . . . 439 Displaying FCIP performance graphs for Ethernet ports. . . . 439 Displaying tunnel properties from the FCIP tunnels dialog box . . .
Contents Steps for connecting to an LKM appliance . . . . . . . . . . . . . . . . . . .467 The NetApp DataFort Management Console . . . . . . . . . . . . . 467 Establishing the trusted link . . . . . . . . . . . . . . . . . . . . . . . . . . 468 Obtaining and importing the LKM certificate. . . . . . . . . . . . . 469 Exporting and registering the switch KAC certificates on LKM 470 LKM key vault high availability deployment . . . . . . . . . . . . . .
Contents Master keys . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .522 Active master key . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 522 Alternate master key . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 522 Master key actions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 523 Reasons master keys can be disabled . . . . . . . . . . . . . . . . . . 523 Saving the master key to a file . . . . . . . . . .
Contents Finding the logical switch from a physical chassis . . . . . . . . 559 Assigning ports to a logical switch . . . . . . . . . . . . . . . . . . . . . 559 Removing ports from a logical switch. . . . . . . . . . . . . . . . . . . 560 Deleting a logical switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 561 Configuring fabric-wide parameters for a logical fabric. . . . .
Contents Configuring LSAN zoning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Creating a new LSAN zone . . . . . . . . . . . . . . . . . . . . . . . . . . . Adding members to the LSAN zone . . . . . . . . . . . . . . . . . . . . Creating a new member in an LSAN zone . . . . . . . . . . . . . . . Activating LSAN zones . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 590 591 592 593 594 Traffic isolation zoning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Contents Configuring IP ping. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 619 Tracing IP routes. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 621 Viewing FCIP tunnel performance. . . . . . . . . . . . . . . . . . . . . . 622 Client browser troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . .623 Fabric tracking troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . .623 Firmware download troubleshooting . . . . . . . . . . . .
Contents Database tables and fields . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .684 Advanced Call Home . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 684 Capability . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 685 Client_view . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 686 Collector . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 689 Config . . . . . . . . . . . . .
About This Document In this chapter • How this document is organized . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxv • Supported hardware and software. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxvi • What’s new in this document . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxix • Document conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxxi • Additional information . . . . . . . . . . . . . .
About This Document • Chapter 15, “Fibre Channel over Ethernet,”provides information on how to configure an FCoE. • Chapter 17, “FC-FC Routing Service Management,” provides information on how to manage Fibre Channel Routing. • Chapter 18, “Encryption configuration,” provides information on configuring encryption. • Chapter 19, “Virtual Fabrics,” provides information on configuring and managing logical switches. • • • • Chapter 20, “Zoning,” provides zoning configuration instructions.
About This Document TABLE 1 Supported Hardware Device Name Terminology used in documentation Brocade 4024 switch5 Embedded 24-port, 4 Gbps FC Switch Brocade 4100 switch 32-port, 4 Gbps FC Switch 2 Brocade 4900 switch 64-port, 4 Gbps FC Switch Brocade 5000 switch3 32-port, 4 Gbps FC Interop Switch Brocade 5100 switch6 40-port, 8 Gbps FC Switch 6 80-port, 8 Gbps FC Switch Brocade 5300 switch Brocade 5410 embedded switch 6 8 Gbps 12-port Embedded Switch Brocade M5424 embedded switch 8 Gbp
About This Document TABLE 1 Supported Hardware Device Name Terminology used in documentation Brocade DCX12, 14 with FX8-24 Blades 384-port Backbone Chassis with 8 Gbps 12-FC port, 10 GbE ports, 2-10 GbE ports blade Brocade DCX12, 14 with FCoE10-24 Blades 384-port Backbone Chassis with 10 Gbps 24-port FCoE blade 7 192-port Backbone Chassis 9 Brocade DCX-4S with FC8-16, FC8-32, and FC8-48 Blades 192-port Backbone Chassis with 8 Gbps 16-FC port, 8 Gbps 32-FC port, and 8 Gbps 48-FC port blades Bro
About This Document What’s new in this document The following changes have been made since this document was last released: • Information that was added: • Added View All list • Added Export to Toolbox • Added CNA icons • Added procedure - Clearing previous version of the remote client • Added procedure - Launching the Configuration Wizard • Added procedure - Installing a patch • Added procedure - Uninstalling a patch • Added topic - VMware vCenter plug in • Added topic SMIA Configuration tool • Added pro
About This Document • • • • • • • • • • • • • • • • • • • • • • Changed procedure - Download firmware Changed HBA Sever Mapping to Host Port Mapping Changed procedure - Scheduling technical support information collection Changed procedure - Starting immediate technical support information collection Changed procedure - Launching scripts Changed procedure - Setting up advanced event filtering for a user Changed topic - Syslog forwarding Changed Top Talkers dialog box Changed topic - Thresholds and event no
About This Document Document conventions This section describes text formatting conventions and important notice formats used in this document.
About This Document Notice to the reader This document may contain references to the trademarks of the following corporations. These trademarks are the properties of their respective companies and corporations. These references are made for informational purposes only. Corporation Referenced Trademarks and Products Linus Torvalds Linux Microsoft Corporation Windows, Windows NT, Internet Explorer Netscape Communications Corporation Netscape Red Hat, Inc.
About This Document Other industry resources For additional resource information, visit the Technical Committee T11 Web site. This Web site provides interface standards for high-performance and mass storage applications for Fibre Channel, storage management, and other applications: http://www.t11.org For information about the Fibre Channel industry, visit the Fibre Channel Industry Association Web site: http://www.fibrechannel.
About This Document • Brocade 48000—Inside the chassis next to the power supply bays • Brocade DCX and DCX-4S—On the bottom right on the port side of the chassis 4. World Wide Name (WWN) Use the wwn command to display the switch WWN. If you cannot use the wwn command because the switch is inoperable, you can get the WWN from the same place as the serial number, except for the Brocade DCX.
Chapter Getting Started 1 In this chapter • User interface components . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 • Icon legend. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11 • Management server and client. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14 • License . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1 5 1 8 2 3 6 4 7 10 11 9 12 FIGURE 1 Main Window 1. Menu Bar. Lists commands you can perform on the SAN. 2. Toolbar. Provides buttons that enable quick access to dialog boxes and functions. 3. SAN tab. Displays the Master Log, Minimap, Connectivity Map (topology), and Product List. For more information, refer to the “SAN tab”. 4. View All list.
1 8. Toolbox. Provides tools for viewing the Connectivity Map as well as exporting the Connectivity Map as an image. Does not display until you discover a fabric. 9. Master Log. Displays all events that have occurred on the SAN. 10. Utilization Legend. (Enterprise edition only) Indicates the percentage ranges represented by the colored, dashed lines on the Connectivity Map. Only displays when you select Monitor > Performance > View Utilization or click the Utilization icon on the toolbar. 11. Minimap.
1 11. Port Label. Use to set the port label for the devices in the Connectivity Map. 12. Product List Search. Use to search for a device in the product list. 13. Help. Displays the Online Help. SAN tab The SAN tab displays the Master Log, Utilization Legend, Minimap, Connectivity Map (topology), and Product List. To open all areas of the View window, select View > Show Panels > All Panels or press F12.
1 Port Display buttons The Port Display buttons (Figure 4) are located at the top right of the Product List and enable you to configure how ports display. You have the option of viewing connected (or occupied) product ports, unoccupied product ports, or attached ports. Does not display until you discover a fabric. NOTE Occupied/connected ports are those that originate from a device, such as a switch. Attached ports are ports of the target devices that are connected to the originating device.
1 • Domain ID. Displays the Domain ID for the product in the format xx(yy), where xx is the normalized value and yy is the actual value on the wire. • • • • • • FC Address. Displays the Fibre Channel address of the port. • • • • • • • • • • • • Port #. Displays the number of the port. Firmware. Displays the firmware version of the product. IP Address. Displays the IP address (IPv4 or IPv6 format) of the product. Location. Displays the physical location of the product.
1 Toolbox The toolbox (Figure 5) is located at the top right side of the View window and provides tools to export the topology, to zoom in and out of the Connectivity Map, collapse and expand groups, and fit the topology to the window. Does not display until you discover a fabric. 1 2 FIGURE 5 3 4 5 6 The Toolbox 1. Export. Use to export the topology to a PNG file. 2. Zoom In. Use to zoom in on the Connectivity Map 3. Zoom Out. Use to zoom out on the Connectivity Map. 4. Fit in View.
1 • • • • • • Count. The number of times the event occurred. Module Name. The name of the module on which the event occurred. Message ID. The message ID of the event. Contributor. The name of the contributor on which the event occurred. Node WWN. The world wide name of the node on which the event occurred. Fabric Name. The name of the fabric on which the event occurred.
1 Minimap The Minimap, which displays in the lower right corner of the main window, is useful for getting a bird’s-eye view of the SAN, or to quickly jump to a specific place on the Connectivity Map. To jump to a specific location on the Connectivity Map, click that area on the Minimap. A close-up view of the selected location displays on the Connectivity Map. Use the Minimap to view the entire SAN and to navigate more detailed map views. This feature is especially useful if you have a large SAN.
1 Status bar The status bar (Figure 8) displays at the bottom of the main window. The status bar provides a variety of information about the SAN and the application. The icons on the status bar change to reflect different information, such as the current status of products, fabrics, and backup. 1 2 3 FIGURE 8 4 5 6 7 8 9 Status Bar The icons on your status bar will vary based on the licensed features on your system. 1. Connection Status. Displays the Server-Client connection status. 2.
1 Icon legend Various icons are used to illustrate devices and connections in a SAN. The following tables list icons that display on the Connectivity Map and Product List. Product icons The following table lists the manageable SAN product icons that display on the topology. Fabric OS manageable devices display with blue icons and M-EOS manageable devices display with green icons. If a device is unmanageable it displays with gray icons. Some of the icons shown display when certain features are licensed.
1 Group icons The following table lists the manageable SAN product group icons that display on the topology. Icon Description Icon Description Switch Group Host Group Storage Group Unknown Fabric Group Unmanaged Fabric Group Chassis Group Port icons The following table lists the port status icons that display in the Product List.
1 Icon Status Device Removed/Missing Down/Failed Routed In Routed Out Unknown/Link Down Event icons The following table lists the event icons that display on the topology and Master Log. For more information about events, refer to “Fault Management” on page 245.
1 Management server and client The Management application has two parts: the Server and the Client. The Server is installed on one machine and stores SAN-related information; it does not have a user interface. To view SAN information through a user interface, you must log in to the Server through a Client. The Server and Clients may reside on the same machine, or on separate machines.
1 TABLE 2 Ports (Continued) Port Number Ports Transport Description Communication Path Open in Firewall 26388 Database port (Enforced during install) TCP Port used by database Server–Database Remote ODBC– Database Yes 44301, 5, 7 MPI TCP XML-RCP port for SSL Server–Switch Yes MPI TCP XML-RCP port/HTTP port Server–Switch Yes 24600 jboss.naming.jnp.port - port 0 TCP Bootstrap JNP service port Client–Server Yes 24601 jboss.connector.ejb3.
1 TABLE 2 Ports (Continued) Port Number Ports Transport Description Communication Path Open in Firewall 55556 Launch in Context (LIC) client hand shaking port TCP Client port used to check if a Management application client opened using LIC is running on the same host Client No NOTE: If this port is in use, the application uses the next available port. 1 Port is not configurable (either in the switch or the Management server).
1 Logging into a server You must log into a Server to monitor a SAN. NOTE You must have an established user account on the Server to log in. To log into a server, complete the following steps. 1. Double-click the desktop icon or open the application from the Start menu. The Log In dialog box displays (Figure 9). FIGURE 9 Log In dialog box 2. Enter your user name and password. The defaults are Administrator and password, respectively.
1 4. Select or clear the Save password check box to choose whether you want the application to remember your password the next time you log in. 5. Click Login. 6. Click OK on the Login Banner dialog box. The Management application displays. Clearing previous versions of the remote client The remote client link in the Start menu does not automatically upgrade when you upgrade the Management application. You must clear the previous version from the Java cache.
1 4. Select Internal FTP Server or External FTP Server on the FTP Server screen and click Next. If port 21 is busy, a message displays. Click OK to close the message and continue. Once the Management application is configured make sure port 21 is free and restart the Server to start the FTP service. NOTE If you use an FTP Server which is not configured on the same machine as the Management application, the Firmware Repository feature will not be available. FIGURE 10 FTP Server screen 5.
1 If you select a specific IP address from the Server IP Configuration screen and the selected IP address changes, you will not be able to connect to the server. To change the IP address, refer to “Configuring an explicit server IP address” on page 93. c. Click Next. 6. Complete the following steps on the Server Configuration screen. NOTE Do not use port 2638 for any of these port numbers. Port 2638 is used internally by the server. FIGURE 12 a.
1 7. Complete the following steps on the SMI Agent Configuration screen. FIGURE 13 SMI Agent Configuration screen a. Enable the SMI Agent by selecting the Enable SMI Agent check box. b. Enable the SLP by selecting the Enable SLP check box. c. Enable the SSL by selecting the Enable SSL check box. d. Enter the SMI Agent port number in the SMI Agent Port # field (default is 5989). e. Click Next. 8. Verify your configuration information on the Server Configuration Summary screen and click Next. 9.
1 Changing your password To change your password, complete the following steps. 1. Double-click the desktop icon or open from the Start menu. The Log In dialog box displays. FIGURE 14 Log In dialog box 2. Enter your user name and password. The defaults are Administrator and password, respectively. If you migrated from a previous release, your username and password do not change. 3. Click Change. The Change Password dialog box displays. 4.
1 If the current password and new password are the same, the following message displays: Old and New passwords cannot be same. Use different password and try again. Press any key to continue. If the new password and confirm password do not match, the following message displays: New password and confirm password do not match. Please try again. Press any key to continue. Viewing active sessions To view the Management application active sessions, complete the following steps. 1.
1 Viewing server properties To view the Management application server properties, complete the following steps. 1. Select Server > Server Properties. The Server Properties dialog box displays (Figure 16). FIGURE 16 Server Properties dialog box 2. Click Close. Viewing port status You can view the port status for the following ports: • • • • SNMP Syslog FTP Web Server To view the port status, complete the following steps. 1. Click the port status icon ().
1 The status options are as follows: • Success—The port is listening or bound to the server. • Failed—The port fails to listen or bind to the server. • Disabled (FTP port only)—only displays when the FTP server is external. This is considered a normal status. 2. Click Close. License NOTE If your installation does not require a license key, the License dialog box does not display.
1 Entering the license key A license key is required to run the application. The key specifies the expiration date of a trial license, as well as the number of ports allowed. NOTE You are not required to enter a license key for a trial license. If you do not enter the license key during installation of Professional Plus or Enterprise editions, you can use the application, including all of its features, for a trial period of 75 days.
1 2. Enter the license key (on the Key Certificate) in the License Key field and click Update. 3. Click OK on the message. The Client closes after updating the license successfully. Restart the Server, Client and Server Management Console for the changes to take effect. 4. Open the application (double-click the desktop icon or open from the Start menu). The Log In dialog box displays. 5. Enter your user name and password. The defaults are Administrator and password, respectively.
1 4. Browse to the patch file. The patch zip file uses the following naming convention: Management_Application_Name-Major_Version-Minor_Version-Revision_Number-patch-Patch _Version.zip (for example Management_Application_Name-10-4-0-patch-a.zip). 5. Click Upgrade. If the patch process is interrupted (for example, loss of power), you must restart the patch process. The patch installer performs the following functions: • Extracts patch files to the Install_Home folder.
1 5. Go to the location of the first artifact (as shown in the src value under the file tag). 6. Copy the artifact from the extracted folder to the source folder in the Install_Home/patch-backup directory. 7. Repeat step 5 and 6 for all artifacts listed in the restore.xml folder. 8. Go to the Install_Home/conf directory. 9. Open the version.properties file in a text editor. 10. Change the patch version (patch.
1 Feature-to-firmware requirements Use the following table to determine whether the Management application features are only available with a specific version of the Fabric OS firmware, M-EOS firmware, or both, as well as if there are specific licensing requirements. Feature Fabric OS M-EOS Access Gateway (AG) AG connected to Fabric OS devices requires firmware 6.1.1 or later. AG connected to M-EOS devices requires firmware 9.9.2 or later. Call Home Requires Fabric OS 5.2 or later for supportSave.
1 Feature Fabric OS M-EOS Performance Requires Fabric OS 5.0 or later for FC_ports, end-to-end monitors, and marching ants. Requires Fabric OS 5.3 or later for GE_ports and FCIP tunnels. Requires Fabric OS 6.2 or later for Top Talkers. Requires Advanced Performance Monitoring (APM) license for End-to-end Monitoring and Top Talkers. Requires Enhanced Group Management license for HIstorical graphs and tables. Requires Fabric Watch license for Performance thresholds. Requires M-EOS and M-EOSn 9.6.
1 Accessibility features for the Management application Accessibility features help users who have a disability, such as restricted mobility or limited vision, to use information technology products successfully. The following list includes the major accessibility features in the Management application: • Keyboard shortcuts • Look and Feel Keyboard shortcuts You can use the keystrokes shown in the table below to perform common functions.
1 Look and Feel You can configure the Management application to mimic your system settings as well as define the size of the font. ‘Look’ refers to the appearance of graphical user interface widgets and ‘feel’ refers to the way the widgets behave. The Management application currently uses the ‘Management_Application Default Look and Feel’ for some of the components (for example, Layout, Minimap, and so on) and the “Java Metal Look and Feel” for others.
1 Changing the font size The Options dialog box enables you to change the font size for all components including the Connectivity map of the Management application interface. Font size changes proportionately in relation to the system resolution. For example, if the system resolution is 1024 x 768, the default font size would be 8 and large font size would be 10. 1. Select Server > Options. The Options dialog box displays. 2. Select Look and Feel in the Category list. 3.
Chapter 2 Discovery In this chapter • Fabric discovery overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Host discovery . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Viewing the discovery state. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Fabric monitoring. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Seed switch . . . . . . . .
2 NOTE Professional Plus edition can discover, but not manage the Backbone chassis.Use the device’s Element Manager, which can be launched from the Connectivity Map, to manage the device. This device cannot be used as a Seed switch. FCS policy and seed switches The Management application requires that the seed switch is the primary Fabric Content Service (FCS) switch at the time of discovery.
2 FIGURE 18 Discover Setup dialog box 2. Click Add Fabric to specify the IP addresses of the devices you want to discover. The Address Properties dialog box displays. FIGURE 19 Address Properties dialog box (IP Address tab) 3. Enter a name for the fabric in the Fabric Name field. 4. Enter an IP address for a device in the IP Address field. For seed switch requirements, refer to “Seed switch requirements” on page 54. NOTE The Backbone Chassis cannot be used as a seed switch.
2 For M-EOS devices, the Management application accepts IP addresses in IPv4 and IPv6 formats. The IPv4 format is valid when the Operating System has IPv4 mode only or dual stack mode. The IPv6 format is valid when the Operating System has IPv6 mode only or dual stack mode. If the firmware version is between M-EOS 9.6.X and 9.9.2, only the domain ID, WWN, and topology are obtained for fabric members. To manage other fabric members, you must enter specific IP addresses in the Discover Setup dialog box.
2 NOTE When you discovers Virtual Fabric-enabled switch with the SNMP v3 username “admin”, which is the same as the Fabric OS switch user, the Management application automatically creates an SNMP username “admin” in the switch by replacing the sixth username. 10. Specify the Read option by selecting Default ‘public’ or Custom. 11. If you selected Custom, enter the community string in the Custom and Confirm Custom fields. 12. Specify the Write option by selecting Default ‘private’ or Custom. 13.
2 NOTE Professional Plus edition can only discover 4 fabrics. 23. Click OK on the Discover Setup dialog box. Configuring SNMP credentials 1. Select Discover > Setup. The Discover Setup dialog box displays. 2. Select an IP address from the Available Addresses table. 3. Click Edit. The Address Properties dialog box displays. 4. Click the SNMP tab. 5. Select the SNMP version from the SNMP Version list. • If you selected v1, continue with step 6.
2 12. Enter a context name In the Context Name field. 13. Select the authorization protocol in the Auth Protocol field. 14. Enter the authorization password in the Auth Password field. • If you selected Configure for 256-Port_Director_Name, go to step 17. • If you did not select Configure for 256-Port_Director_Name, continue with step 15. 15. Select the privacy protocol in the Priv Protocol field. 16. Enter the privacy password in the Priv Password field. 17. Click OK on the Address Properties dialog box.
2 Host discovery The Management application enables you to discover individual hosts, import a group of Host from a comma separated values (CSV) file, or import all hosts from discovered fabrics. NOTE Host discovery requires HCM Agent 2.0 or later. NOTE SMI and WMI discovery are not supported. Discovering Hosts by IP address or hostname To discover a Host by IP address or hostname, complete the following steps. 1. Select Discover > Setup. The Discover Setup dialog box displays. 2. Click Add Host.
2 If an error occurs, a message displays. Click OK to close the error message and fix the problem. A Host Group displays in Discovered Addresses table with pending status. To update the status from pending you must close and reopen the Discover Setup dialog box. 10. Click Close on the Discover Setup dialog box. Importing Hosts from a CSV file To discover Hosts by importing a CSV file, complete the following steps. 1. Select Discover > Setup. The Discover Setup dialog box displays. 2. Click Add Host.
2 To configure host credentials, refer to “Configuring Brocade HBA credentials” on page 45 or “Configuring virtual machine credentials” on page 46. 8. Click OK on the Add Host Discovery dialog box. If an error occurs, a message displays. Click OK to close the error message and fix the problem. A Host Group displays in Discovered Addresses table with pending status. To update the status from pending you must close and reopen the Discover Setup dialog box. 9. Click Close on the Discover Setup dialog box.
2 If an error occurs, a message displays. Click OK to close the error message and fix the problem. A Host Group displays in Discovered Addresses table with pending status. To update the status from pending you must close and reopen the Discover Setup dialog box. 9. Click Close on the Discover Setup dialog box. Configuring Brocade HBA credentials To configure credentials for a Brocade HBA, complete the following steps. 1. Select Discover > Setup. The Discover Setup dialog box displays. 2. Click Add Host.
2 Configuring virtual machine credentials To configure credentials for a virtual machine, complete the following steps. 1. Select Discover > Setup. The Discover Setup dialog box displays. 2. Click Add Host. The Add Host Discovery dialog box displays. 3. Discover a host. To discover a host, refer to “Discovering Hosts by IP address or hostname” on page 42, “Importing Hosts from a CSV file” on page 43, or “Importing Hosts from a Fabric” on page 44. 4. Click the Host Credentials tab.
2 Editing Host credentials To edit Host credentials, complete the following steps. 1. Select Discover > Setup. The Discover Setup dialog box displays. 2. Select the Host and click Edit. The Edit Host Discovery dialog box displays. FIGURE 28 Edit Host Discovery dialog box 3. To edit Brocade HBA credentials, select the Discover Brocade HBAs in the hosts check box, if necessary, and complete the following steps. a. Enter the HCM Agent port number in the Brocade HBAs - Port field if necessary. b.
2 4. Click OK on the confirmation message. The deleted host displays in the Previously Discovered Addresses table. 5. Click Close on the Discover Setup dialog box. Viewing the discovery state The Management application enables you to view device status through the Discover Setup dialog box. To view the discovery status of a device, complete the following steps. 1. Select Discover > Setup. The Discover Setup dialog box displays. 2.
2 Troubleshooting discovery If you encounter discovery problems, complete the following checklist to ensure that discovery was set up correctly. 1. Verify IP connectivity by issuing a ping command to the switch. a. Open the command prompt. b. From the Server, type ping Switch_IP_Address. 2. Enter the IP address of the device in a browser to verify the SNMP settings. For example, http://10.1.1.11.
2 TABLE 4 Problem Resolution M-EOS seed switch discovery is not supported using SNMPv3 on the following devices: • 32-Port, 2 Gbps Switch • 16-Port, 4 Gbps Fabric Switch • 24-Port Fabric Switch • 32-Port, 4 Gbps Switch • 140-Port Director Discover the device using SNMP v1. To configure SNMP v3 and manage the device, complete the following steps. 1 Select Discover > Setup. The Discover Setup dialog box displays. 2 Select an IP address from the Available Addresses table. 3 Click Edit.
2 Virtual Fabric discovery troubleshooting The following section state possible issues and the recommended solutions for Virtual Fabric discovery errors. TABLE 5 Problem Resolution At the time of discovery, the seed switch is Virtual Fabric-enabled; however, the user does not have Chassis Admin role for the seed switch. At the time of discovery, the user does not have the Chassis Admin role for all other switches in the fabric. After discovery, a device is upgraded to Fabric OS 6.
2 Fabric monitoring NOTE Monitoring is not supported on Hosts. The upper limit to the number of HBA and CNA ports that can be monitored at the same time is 32. The same upper limit applies if switch ports and HBA ports are combined. You can select switch ports and adapter ports from a maximum of ten devices. Fabric monitoring enables discovery of and data collection for the specified fabric and all associated devices.
2 3. Click Monitor. The monitor function fails if the fabric has user-defined Admin Domains created or if the fabric is merged with another fabric already in the monitored state. 4. Click OK. Stop monitoring of a discovered fabric NOTE Monitoring is not supported on Hosts. When you stop monitoring of a fabric, you stop discovery of and data collection for the specified fabric and all associated devices. To stop monitoring a fabric and all associated devices, complete the following steps. 1.
2 You can change the seed switch as long as the following conditions are met: • The new seed switch is HTTP-reachable from the Management application. • The new seed switch is a primary FCS. • The new seed switch is running the latest Fabric OS or M-EOS version in the fabric. This operation preserves historical and configuration data, such as performance monitoring and user-customized data for the selected fabric. ATTENTION If the seed switch firmware is downgraded from Fabric OS 5.2.
2 • 140-Port Director • 256-Port Director The following M-EOS devices are seed switch-capable; however, they do not obtain fabric member information: • • • • 16-Port, 1 Gbps and 2 Gbps Switch 32-Port, 1 Gbps and 2 Gbps Switch 24-Port, 2 Gbps Switch 64-Port Director Seed switch failover The Management application collects fabric-wide data (such as, fabric membership, connectivity, name server information, zoning, and so on) using the seed switch.
2 • Updates to Fabric OS switches (such as, Virtual Fabrics, FCR, Admin Domain, Switch Name and so on) do not occur. • If the M-EOS switch is not seed switch capable and a switch joins the fabric, the IP address displays as ‘0.0.0.0’. You must manually edit the IP Address from the Discover Setup dialog box to manage the switch. • Updates to firmware version and IP address of existing members do not occur.
2 4. Select a switch to be the new seed switch from the Change Seed Switch dialog box. You can select only one switch. Only switches that are running the latest Fabric OS version in the fabric are displayed. The current seed switch is not displayed in this list. 5. Click OK. If you are not already logged in to the seed switch, the Fabric Login dialog box displays.
2 58 DCFM Professional Plus User Manual 53-1001774-01
Chapter 3 Application Configuration In this chapter • Data backup. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Data restore . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Display . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • End node display . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
3 Management server backup There are three options for backing up data to the management server: • Configuring backup to a writable CD • Configuring backup to a hard drive • Configuring backup to a network drive The Management Server is backed up to a rewritable (CD-RW) compact disk by default. Make sure you have a CD-RW disk in the CD recorder drive to ensure that backup can occur.
3 Configuring backup to a writable CD NOTE This is not recommended on a permanent basis. CDs have a limited life, and may only last a month. An error message occurs if your Management application can no longer back up to the disc. To configure the backup function to a writable CD, complete the following steps. 1. Select Server > Options. The Options dialog box displays (Figure 29). FIGURE 29 Options dialog box (Backup option) 2. Select Backup in the Category list.
3 6. Select an interval from the Backup Interval drop-down list to set how often backup occurs. 7. Verify that the CD backup directory is correct (default directory is D:\Backup). It is assumed that drive D is a CD-RW drive. You can change the directory or use the Browse button to select another directory. 8. Install the formatted disc into the CD drive. To back up to a writable CD, you must have CD-writing software installed.
3 7. Browse to the hard drive and directory to which you want to back up your data. 8. Click Apply or OK. The application verifies that the backup device exists and that the server can write to it. If the device does not exist or is not writable, an error message displays that states you have entered an invalid device. Click OK to go back to the Options dialog box and fix the error. Backup occurs, if needed, at the interval you specified.
3 7. Click Browse to choose the network share and directory to which you want to back up your data, or enter the network share and directory path. NOTE You must specify the directory in a network share format (for example, \\network-name\share-name\directory). Do not use the drive letter format (C:\directory). 8. If you want to configure backup to a network drive on a Windows system, complete the following steps. a.
3 Viewing the backup status The Management application enables you to view the backup status at a glance by providing a backup status icon on the Status Bar. The following table illustrates and describes the icons that indicate the current status of the backup function. Icon Description Backup in Progress—displays the following tooltip: “Backup started at hh:mm:ss, in progress... XX directories are backed up.
3 Starting immediate backup NOTE You must have backup privileges to use the Backup Now function. To start the backup process immediately, complete one of the following procedures: Using the Backup Icon, right-click the Backup icon and select Backup Now. OR 1. Select Server > Options. The Options dialog box displays. 2. Select Backup in the Category list. 3. Click Backup Now. The backup process begins immediately. There is no confirmation message. 4. Click Apply or OK.
3 Data restore NOTE You cannot restore data from a previous version of the Management application. NOTE You cannot restore data from a different edition of the Management application. The Management application helps you to protect your data by backing it up automatically. The data can then be restored, as necessary. The data in the following directories is automatically backed up to disk. The data includes the following items: • Backup\databases — contains database and log files.
3 Restoring data to a new server If your Management application server fails and you must recover information to a new server, restore the data (Refer to “Restoring data” on page 67 for complete instructions). Display You can reset the display to the default settings. Resetting your display You can reset your system to display the default display settings. Note that returning to current settings after a reset may require configuring each global fabric or group setting individually.
3 End node display The connectivity map can be configured to display or not display end nodes. This option enables you to set the end node display for all newly discovered fabrics. Note that disabling end node display limits the connectivity map to emphasize switch members only. Displaying end nodes To display end nodes when discovering a new fabric, complete the following steps. 1. Select Server > Options. The Options dialog box displays (Figure 30).
3 Ethernet events An Ethernet event occurs when the Ethernet link between the Management Server and the managed device is lost. You can configure the application to enable events when the Ethernet connection is lost. Enabling Ethernet events The Options dialog box enables you to configure the Management application to generate an Ethernet event after a device is offline for a specific period of time. To enable Ethernet events, complete the following steps. 1. Select Server > Options.
3 Disabling Ethernet events To disable Ethernet events, complete the following steps. 1. Select Server > Options. The Options dialog box displays. 2. Select Ethernet Event in the Category list. 3. Clear the Enable Ethernet Event check box. 4. Click Apply or OK to save your work. Event storage You can configure the number of historical events in the repository as well as how long the events will be retained. Configuring event storage To configure event storage, complete the following steps. 1.
3 3. Select the Purge Events check box. Events are purged at midnight (12:00 AM). For example, when the maximum number of events allowed limit is reached at 3:00 PM, the system purges the older events at midnight that day. 4. Enter the number of events (1 through 50000) in the repository in the Maximum Historical Event field. Older events are purged at midnight on the date the maximum event limit is reached regardless of the retention days. 5.
3 5. Select the Product tab (Figure 34) and complete the following steps to select the product properties you want to display on flyover. FIGURE 33 a. Options dialog box (Flyovers option, Product tab) Select each property you want to display in the product flyover from the Available Properties table.
3 6. Select the Connection tab (Figure 34) and complete the following steps to select the information you want to display on flyover. FIGURE 34 a. Options dialog box (Flyovers option, Connection tab) Select the protocol from the Protocol list. The default protocol is Fibre Channel. Depending on which protocol you select, some properties may not be available for all protocols. b. Select each property you want to display in the connection flyover from the Available Properties table.
3 FCoE • • • Name Node WWN MAC • • • Port# Port Type FCoE Index # c. Click the right arrow to move the selected properties to the Selected Properties table. d. Use the Move Up and Move Down buttons to reorder the properties in the Selected Properties table. The properties displayed in the Selected Properties table appear in the flyover display. 7. Click Apply or OK to save your work. Turning flyovers on or off Flyovers display when you place the cursor on a product.
3 Names You can use Names as a method of providing familiar simple names to products and ports in your SAN. Using your Management application you can: • • • • • Set names to be unique or non-unique. Fix duplicate names. Associate a name with a product or port WWN currently being discovered. Add a WWN and an associated name for a product or port that is not yet being discovered. Remove or disassociate a name from a WWN.
3 Setting names to be non-unique You can choose to allow duplicate names in your fabric. To set names to be non-unique, complete the following steps. 1. Select Server > Options. The Options dialog box displays. 2. Select Names in the Category list. 3. Select Set names to be non-unique to allow duplicate names on your system. 4. Click OK on the Options dialog box. Fixing duplicate names To fix duplicated names, complete the following steps. 1. Select Configure > Names.
3 5. Click OK to close the Configure Names dialog box. 6. Click OK on the confirmation message. Viewing names To view names associated with devices by name, complete the following steps. 1. Select Configure > Names. The Configure Names dialog box displays. 2. Select All Names from the Display list. Only devices with a name display. The table displays the Name, WWN, Operational Status, Type, and a Description of the device. 3. Click OK to close the Configure Names dialog box.
3 Adding a name to a new device To add a new device and name it, complete the following steps. 1. Select Configure > Names. The Configure Names dialog box displays. 2. Enter the WWN of the device in the Detached WWN field. 3. Enter a name for the device in the Name field. 4. Click Add. The new device displays in the table. If you set names to be unique on the Options dialog box and the name you entered already exists, a message indicating the name already in use displays.
3 5. Click OK to close the Configure Names dialog box. 6. Click OK on the confirmation message. Editing names To edit the name associated with a device, complete the following steps. 1. Select Configure > Names. The Configure Names dialog box displays. 2. Select All Names from the Display list. Only devices with a name display. The table displays the Name, WWN, Operational Status, Type, and a Description of the device. 3. Click the name you want to edit in the Name column. 4. Edit the name and press Enter.
3 Importing Names If the name length exceeds the limitations detailed in the following table, you must edit the name (in the CSV file) before import. Names that exceed these limits will not be imported. If you migrated from a previous version, the .properties file is located in the Install_Home\migration\data folder. Device Character limit Fabric OS switch 6.2 or later 30 (24 character limit when in FICON mode) Fabric OS switch 6.1.
3 5. Click Search. All devices with the specified name (or partial name) are highlighted in the Display table. You may need to scroll to see all highlighted names. 6. Click OK to close the Configure Names dialog box. Searching for a device by WWN You can search for objects (switch, fabric, product, ports, or N Ports) by WWN (world wide name). To search for a name in the Connectivity Map, refer to “Searching for a device in the connectivity map” on page 139. To search by WWN, complete the following steps.
3 Security You can configure the Server Name, CHAP secret value, and login banner, and modify whether or not to allow clients to save passwords. When the login banner is enabled, each time a client connects to the server, the login banner displays with a legal notice provided by you. The client's users must acknowledge the login banner to proceed, otherwise they are logged out. Configuring the server name To set the CHAP secret, complete the following steps. 1. Select Server > Options.
3 5. Re-enter the password in the Retype Secret field. If the secret does not meet the application requirements or the CHAP Secret and Retype Secret entries do not match, an error message displays. Click OK to re-enter the CHAP Secret and Retype Secret values. You are about to modify the ID/Secret of this server. Check all products that this server is managing and make sure the corresponding Software ID/Secret is updated appropriately.
3 Configuring the login banner display To configure the login banner display, complete the following steps. 1. Select Server > Options. The Options dialog box displays. 2. Select Security Misc in the Category list. 3. Select the Display login banner upon client login check box. 4. Enter the message you want to display every time a user logs into this server in the Banner Message field. This field contains a maximum of 1024 characters. 5. Click Apply or OK to save your work.
3 Software Configuration The Management application allows you to configure the following software settings: • • • • • • • Client export port—A port for communication between the client and server. Discovery—HTTP or HTTP over SSL when connecting to the switch. FTP/SCP overview—Internal or external FTP server settings. IP Configuration—Configure the Ethernet ports with the IP address. Memory allocation—Memory allocation for the client and server. Server port—Server port settings.
3 3. Enter the client export port number to set a fixed port number for the client in the Client Export Port field. 4. Click Apply or OK to save your work. NOTE Changes to this option take effect after a client restart. 5. Click OK on the “changes take effect after client restart” message. Discovery You can configure connections between the switch and the Management application server. Configuring Discovery To configure discovery, complete the following steps. 1. Select Server > Options.
3 3. Choose one of the following options: • If you want to connect using HTTP, complete the following steps. a. Select the Connect using HTTP option. a. Enter the connection port number in the Port # field. Continue with step 4. • If you want to connect using HTTPS (HTTP over SSL), complete the following steps. a. Select the Connect using HTTPS (HTTP over SSL) only option. b. Enter the connection port number in the Port # field. Continue with step 4. 4. Click Apply or OK to save your work.
3 Configuring an internal FTP server To configure the internal FTP server settings, complete the following steps. 1. Select Server > Options. The Options dialog box displays (Figure 40). FIGURE 40 Options dialog box (FTP/SCP option) 2. Select FTP/SCP in the Category list. 3. Select the Use built-in FTP Server option to use the default built-in FTP server. All active fields are mandatory. 4. Change your password by entering a new password in the Password and Confirm Password fields. 5.
3 Configuring an external FTP server To configure the external FTP server settings, complete the following steps. 1. Select Server > Options. The Options dialog box displays. 2. Select FTP/SCP in the Category list. 3. Select the Use External FTP Server and/or SCP Server option. 4. Select the External FTP Server check box to configure the external FTP server. All fields are mandatory. 5. Enter the IP address for the remote host in the Remote Host IP field. 6.
3 9. Click Test to test the FTP server. A “Server running successfully” or an error message displays. If you receive an error message, make sure your credentials are correct, the server is running, the remote directory path exists, and you have the correct access permission; then try again. 10. Click OK on the message. 11. Click Apply or OK to save your work. Testing the FTP and SCP server To test the FTP and SCP server, complete the following steps. 1. Select Server > Options.
3 IP Configuration You can configure IP Configuration settings. Configuring IP Configuration settings NOTE The server binds using IPv6 address by default if your Operating System is IPv6-enabled (dual mode or IPv6 only). The server binds using IPv4 address by default if your Operating System is IPv4-enabled. Servers running in dual mode allow the client to communicate from both IPv6 and IPv4 addresses.
3 3. Choose one of the following options in the Server IP Configuration list. • Select All. Go to step 4. • Select a specific IP address. Continue with step 5. • Select localhost. Continue with step 5. When Server IP Configuration is set to All, you can select any available IP address as the Return Address. If you select a specific IP address, the Return Address list shows the same IP address and you cannot change it. 4.
3 FIGURE 42 Server IP Configuration screen a. Select an address from the Server IP Configuration list. b. Select an address from the Switch - Server IP Configuration Preferred Address list. If DNS is not configured for your network, do not select the “hostname” option from either the Server IP Configuration or Switch - Server IP Configuration Preferred Address list. Selecting the “hostname” option prevents clients and devices from communicating with the server. c. Click Next. 6.
3 Configuring the application to use dual network cards Issues with Client-to-Server connectivity can be due to different reasons. Some examples are: • The computer running the Server has more than one network interface card (NIC) installed. • The computer running the Server is behind a firewall that performs network address translation.
3 Memory allocation You can configure memory allocation for the client and server to improve performance. You can trigger switch polling when a state changes or you can poll at intervals when no state change occurs. NOTE SAN size is a consideration in selection of polling periods. Configuring memory allocation settings To configure memory allocation settings, complete the following steps. 1. Select Server > Options. The Options dialog box displays (Figure 43). 2.
3 3. Enter the memory allocation (MB) for the client in the Client Memory Allocation field. If you enter an invalid value, an error message displays with the minimum value (512 MB) allowed. Click OK and edit the value again. 4. Enter the memory allocation (MB) for the server in the Server Memory Allocation field. If your server has a minimum of 2 Gb RAM, change the default server memory value to 1024 MB. If your server is running less than 2 Gb RAM, do not change the default (512 MB).
3 Configuring asset polling Asset polling allows you set the length of time between state change polling. To maximize the efficiency of the polling feature (balance the amount of possible information with any possible performance impact), base your settings on the size of the SAN. To configure asset polling, complete the following steps. 1. Select Server > Options. The Options dialog box displays. 2. Select Memory Allocation in the Category list to set the memory allocation for the server and client. 3.
3 Server port You can configure the server port settings so that you can assign a web server port number and set the server port to be SSL-enabled. Configuring the server port To configure server settings, complete the following steps. 1. Select Server > Options. The Options dialog box displays (Figure 44). FIGURE 44 Options dialog box (Server Port option) 2. Select Server Port in the Category list. 3. Select the Enable SSL check box to enable this function for the server port. 4.
3 6. Click Apply or OK to save your work. NOTE Changes to this option take effect after application restart. 7. Click OK on the “changes take effect after application restart” message. Support mode You can configure support settings to allow enhanced diagnostics. Configuring support mode settings To configure support mode settings, complete the following steps. 1. Select Server > Options. The Options dialog box displays (Figure 45). FIGURE 45 Options dialog box (Support Mode option) 2.
3 3. Select the Log client support data - Log Level list, and select the type of log data you want to configure. Log level options include: All, Fatal, Error, Warn, Info, Debug, Trace, and Off. Default is Info. The log level options return to the default value (Info) when the client or server is restarted. 4. Select the Log server support data - Log Level list, and select the type of log data you want to configure. Log level options include: All, Fatal, Error, Warn, Info, Debug, Trace, and Off.
3 Enabling fabric tracking 1. Enable fabric tracking by choosing one of the following options: • Select a fabric on the Product List or Connectivity Map and select Monitor > Track Fabric Changes. • Right-click a fabric on the Product List or Connectivity Map and select Track Fabric Changes. The Accept Changes Summary dialog box displays. This dialog box includes the following information: • Fabric Name—Displays the name of the selected fabric.
3 Accepting changes for a fabric 1. Accept the changes to a fabric by choosing one of the following options: • Select a fabric on the Product List or Connectivity Map and select Monitor > Accept Changes. • Right-click a fabric on the Product List or Connectivity Map and select Accept Changes. The Accept Changes Summary dialog box displays. This dialog box includes the following information: • Fabric Name—Displays the name of the selected fabric.
3 104 DCFM Professional Plus User Manual 53-1001774-01
Chapter 4 Call Home In this chapter • About call home . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Showing a call home center . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Hiding a call home center . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Editing a call home center . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Enabling a call home center . . . . . . . . .
4 About call home NOTE Call Home is supported on Windows systems for all modem and E-mail call home centers and is supported on Linux and Solaris for the E-mail call home centers. Call Home notification allows you to configure the Management application Server to automatically send an e-mail or dial-in to a support center to report system problems on specified devices (switches, routers, and directors). If you are upgrading from a previous release, all of your Call Home settings are preserved.
4 • Adds an entry to the Master Log file and screen display. • Generates a XML report (only available with EMC call centers) with the switch details which is sent with the E-mail. • Generates an HTML report for E-mail-based Call Home centers. For more information about Call Home events, refer to “Call Home Event Tables” on page 659. For more information about Event Management, refer to “Fault Management” on page 245.
4 Showing a call home center To show a call home center, complete the following steps. 1. Select Monitor > Event Notification > Call Home. The Call Home dialog box displays (Figure 46). FIGURE 46 Call Home dialog box 2. Click Show/Hide Centers (beneath the Call Home Centers table). The Centers dialog box displays with a predefined list of call home centers (Figure 47). FIGURE 47 Centers dialog box 3. Select the check boxes of the call home centers you want to display and click OK.
4 Hiding a call home center NOTE Before you can hide a call home center, you must remove all assigned products. To hide a call home center, complete the following steps. 1. Select Monitor > Event Notification > Call Home. The Call Home dialog box displays. 2. Click Show/Hide Centers (beneath the Call Home Centers table). The Centers dialog box displays with a predefined list of call home centers. 3. Clear the check boxes of the call home centers you want to hide and click OK.
4 FIGURE 48 Configure Call Home Center dialog box (Brocade International or IBM option) 4. Make sure the call home center type you selected displays in the Call Home Centers list. 5. Select Enable to enable this call home center. 6. Set the time interval at which to check the call home center by selecting the Set the heartbeat interval at ___ days (1-28) check box and entering the interval in the field. 7. Enter the time out interval (default is 60 seconds) in the Time Out field. 8.
4 Editing the Brocade North America call home center Modem call home centers are only available for Brocade. To edit this call home center, complete the following steps. 1. Select Monitor > Event Notification > Call Home. The Call Home dialog box displays. 2. Select Brocade North America in the Call Home Centers table. 3. Click Edit Centers (beneath the Call Home Centers table). The Configure Call Home Center dialog box displays(Figure 49).
4 Editing an E-mail call home center E-mail call home centers are available for Brocade, IBM, and SUN. To edit one of these call home centers, complete the following steps. 1. Select Monitor > Event Notification > Call Home. The Call Home dialog box displays. 2. Select the call home center you want to edit (Brocade E-mail, IBM E-mail, or SUN E-mail) in the Call Home Centers table. 3. Click Edit Centers (beneath the Call Home Centers table). The Configure Call Home Center dialog box displays (Figure 50).
4 14. Enter a password in the SMTP Server Settings - Password field. This is a required field when the SMTP server authentication is enabled. 15. Enter the e-mail address for replies in the E-mail Notification Settings - Reply Address field. 16. Enter the customer e-mail address in the E-mail Notification Settings - Send To Address field. 17. Click Send Test to test the mail server. The selected call home center must be enabled to test the mail server.
4 7. Enter the phone number or extension of the local server in the Local Server - Modem # field. 8. Enter the identification number of the local server in the Local Server - Cabinet Serial # field. 9. Enter the site name for the local server in the Local Server - Site Name field. 10. Click Send Test to test the Connect EMC application. The selected call home center must be enabled to test the Connect EMC application. A faked event is generated and sent to the selected call home center.
4 8. Click Send Test to test the address. The selected call home center must be enabled to test the IP address. A faked event is generated and sent to the selected call home center. You must contact the call home center to verify that the event was received and in the correct format. NOTE The HP LAN Call Home alert displays the directory separation characters with a double backslash (\\) instead of a single backslash (\). 9. Click OK.
4 Testing the call home center connection Once you add and enable a call home center, you should verify that call home is functional. To verify call home center functionality, complete the following steps. 1. Select Monitor > Event Notification > Call Home. 2. Click Edit Centers (beneath the Call Home Centers table). The Configure Call Home Center dialog box displays. 3. Select the center you want to check in the Call Home Centers list. 4. Make sure that the Enabled check box is selected.
4 Viewing Call Home status You can view call home status from the main Management application window or from the Call Home Notification dialog box. The Management application enables you to view the call home status at a glance by providing a call home status icon on the Status Bar. The following table illustrates and describes the icons that indicate the current status of the call home function.
4 Assigning a device to the call home center Discovered devices (switches, routers, and directors) are not assigned to a corresponding call home center automatically. You must manually assign each device to a call home center before you use call home. To assign a device or multiple devices to a call home center, complete the following steps. 1. Select Monitor > Event Notification > Call Home. The Call Home dialog box displays. 2.
4 Removing all devices and filters from a call home center To remove all devices and filters from a call home center, complete the following steps. 1. Select Monitor > Event Notification > Call Home. The Call Home dialog box displays. 2. Select the call home center from which you want to remove devices and filters in the Call Home Center table. 3. Click the left arrow button. A confirmation message displays. 4. Click OK.
4 Assigning an event filter to a call home center Event filters allow call home center users to log in to a Management server and assign specific event filters to the devices. This limits the number of unnecessary or ‘acknowledge’ events and improves the performance and effectiveness of the call home center. You can only select one event filter at a time; however, you can assign the same event filter to multiple devices or call home centers.
4 Overwriting an assigned event filter A device can only have one event filter at a time; therefore, when a new filter is applied to a device that already has a filter, you must confirm the new filter assignment. To overwrite an event filter, complete the following steps. 1. Select Monitor > Event Notification > Call Home. The Call Home dialog box displays. 2. Select the event filter you want to apply in the Call Home Event Filters table.
4 Removing an event filter from a device To remove an event filter from a device, complete the following steps. 1. Select Monitor > Event Notification > Call Home. The Call Home dialog box displays. 2. Choose one of the following options in the Call Home Centers table: • Right-click an event filter assigned to a device and select Remove Filter. • Right-click a device to which the event filter is assigned and select Remove Filter.
Chapter 5 View management In this chapter • About view management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Creating a customized view . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Editing a customized view. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Deleting a customized view . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Copying a view . . . . . . . . . . . . . . . . . . .
5 Creating a customized view You may want to customize the Product List and Connectivity Map to simplify management of large SANs by limiting the topology size or Product List columns. For each customized view, you can specify the fabrics and hosts that display on the Connectivity Map as well as the columns and device groupings that display on the Product List. Customized view settings reside on the Server. Only users with the same login to the same Server can see and select the view settings.
5 4. Click the Hosts tab and in the Available Host table, select the fabrics you want to include in the view and use the right arrow button to move your selections to the Selected Fabrics and Hosts table. FIGURE 54 Create View dialog box - Hosts Tab 5. Click OK to save the customized view and close the Create View dialog box. The new view displays automatically in the main window of the Management application. Editing a customized view You may only edit customized views that you have created.
5 2. Use the left arrow button to remove fabrics and hosts from the Selected Fabrics and Hosts table. 3. Click the Fabrics tab, and in the Available Fabrics table, select the fabrics you want to include in the view and use the right arrow button to move your selections to the Selected Fabrics and Hosts table. 4.
5 Copying a view 1. Use one of the following methods to open the Copy View dialog box: • Select View > Manage View > Copy View > View_Name. • Select Copy View from the View All list. Does not display until you discover a fabric. The Copy View dialog box title displays the name of the view you are copying. FIGURE 57 Copy View dialog box 2. Enter a name and description of the view. 3. Click OK to save your changes and close the Copy View dialog box. 4.
5 Port Label. Select to configure which port labels display. NOTE Changes apply to the selected fabric or the fabric to which the selected item belongs. Name. Displays the name as the port label. If the port has not been given a name, the port’s WWN displays. Port Number. Displays the port number as the port label. Port Address. Displays the port address as the port label. Port WWN. Displays the port world wide name as the port label. User Port #. Displays the user’s port number as the port label.
5 • Vertical. Displays the device icons vertically. • Horizontal. Displays the device icons horizontally. • Most Connected at Center. Displays the node that has the most connections at the center of the topology. • Directional. Displays the internal nodes in a position where they mirror the external groups to which they are connected. 2. Select the Set as Default Layout check box to set your selection as the default. 3. Click OK on the Map Display Properties dialog box.
5 2. Select the Custom option and click Change. The Choose a background color dialog box displays (Figure 59). FIGURE 59 Map Display dialog box 3. Select or specify a color and preview it in the Preview pane. • To pick a color from a swatch, select the Swatches tab. Select a color from the display. • To specify a color based on hue, saturation, and brightness, click the HSB tab. Specify the hue (0 to 359 degrees), saturation (0 to 100%) and brightness (0 to 100%).
5 Changing the product label 1. Select a product in the Connectivity Map or Product List. 2. Select View > Product Label, then select one of the following options: • • • • Name (Product). Displays the product name as the product label. WWN. Displays the world wide name as the product label. IP Address. Displays the IP Address as the product label. Domain ID. Displays the domain ID as the product label. Changes apply to all fabrics present in the topology when the Product Label option is selected.
5 Grouping on the topology To simplify management, devices display in groups. Groups are shown with background shading and are labeled appropriately. You can expand and collapse groups to easily view a large topology. Collapsing groups To collapse a single group on the topology, do one of the following: • Click the icon at the top right-hand corner of the group on the topology ( ). • Double-click in the group, but not on a device.
5 4. Click the right arrow to move them to the Selected Zones list. 5. Click OK. Saving a custom connection configuration NOTE Active zones must be available on the fabric. To save a new custom connection configuration, complete the following steps. 1. Choose from one of the following options: • Select a fabric on the topology and select View > Connected End Devices > Custom. • Right-click a fabric on the topology and select Connected End Devices > Custom.
5 Customizing the main window You can customize the main window to display only the data you need by displaying different levels of detail on the Connectivity Map (topology) or Product List. Zooming in and out of the connectivity map You can zoom in or out of the Connectivity Map to see products and ports. Zooming In To zoom in on the Connectivity Map, use one of the following methods: • Click the zoom-in icon ( ) on the toolbox. • Press CTRL + NumPad+ on the keyboard. • Use the Zoom dialog box. a.
5 Showing levels of detail on the connectivity map You can configure different levels of detail on the Connectivity Map, making Management easier. View Fabrics To view only fabrics, without seeing groups, products or ports: Select View > Show> Fabrics Only. View Groups To view only groups and fabrics, without seeing products or ports: Select View > Show> Groups Only. View Products To view products, groups, and fabrics: Select View > Show> All Products.
5 Customizing application tables You can customize any table in the Management application (for example, the Master Log or the Product List) in the following ways: • • • • • • • • • Display only specific columns Display columns in a specific order Resize the columns to fit the contents Sort the table by a specific column or multiple columns Copy information from the table to another application Export information from the table Search for information Expand the table to view all information Collapse the t
5 2. Choose from the following options: • Select the check box to display a column. OR Select the column name and click Show. • Clear the check box to hide a column. OR Select the column name and click Hide. • Click Select All to select all check boxes. • Click Deselect All to clear all check boxes. • Click Restore Defaults to restore the Product List to the original settings. 3. Click OK.
5 Copying table information You can copy the entire table or a specific row to another application (such as, Notepad, Excel, Word, and so on). 1. Choose from one of the following options: • Right-click anywhere in the table and select Table > Copy Table. • Select the table row that you want to export and select Table > Copy Row. 2. Open the application to which you want to copy the Product List information. 3. Select Edit > Paste or CTRL + V. 4. Save the file.
5 Expanding and collapsing tables You can expand a table to display all information or collapse it to show only the top level. To expand the entire table, right-click anywhere in the table and select Expand All or Table > Expand All. To collapse the entire table, right-click anywhere in the table and select Collapse All or Table > Collapse All. Searching for a device in the connectivity map You can search for a device in the connectivity map by name, WWN, or device type.
5 140 DCFM Professional Plus User Manual 53-1001774-01
Chapter 6 Third-party tools In this chapter • About third-party tools . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Starting third-party tools from the application . . . . . . . . . . . . . . . . . . . . . . • Launching a Telnet session . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Launching an Element Manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Launching Web Tools. . . . . . . . . . . . . . . . . . . .
6 Starting third-party tools from the application You can open third-party tools from the Tools menu or a device’s shortcut menu. Remember that you cannot open a tool that is not installed on your computer. You must install the tool on your computer and add the tool to the Tools menu or the device’s shortcut menu. To open an application, perform the following steps. 1. Select the device. 2. Use one of the following techniques: • Select Tools > Product Menu > Tool_Name. • Select Tools > Tool_Name.
6 Launching an Element Manager Element Managers are used to manage Fibre Channel switches and directors. You can open a device’s Element Manager directly from the application. To launch a device’s Element Manager, complete the following steps. On the Connectivity Map, double-click the device you want to manage. The Element Manager displays. OR On the Connectivity Map, right-click the device you want to manage and select Element Manager > Hardware. The Element Manager displays. OR 1. Select a device. 2.
6 1. Select a Fabric OS device. 2. Select Configure > Element Manager > Hardware. Web Tools displays. OR 1. Select a Fabric OS device. 2. Click the Element Manager icon on the toolbar. Web Tools displays. Launching FCR configuration Use FCR Configuration to launch the FC Routing module, which enables you to share devices between fabrics without merging the fabrics. You can open the FC Routing module directly from the Management application.
6 Launching HCM Agent Use Brocade HCM Agent to enable and manage Brocade HBAs. You can open HCM Agent directly from the application. For more information about HCM Agent, refer to the Brocade HCM Agent Administrator’s Guide. For more information about Brocade HBAs, refer to the documentation for the specific device. To launch a device’s Element Manager, complete the following steps. NOTE You must have Device Administration privileges for the selected device to launch HCM Agent.
6 Adding a tool You can specify third-party tools so they appear on the Setup Tools dialog box. From there, you can add them to the Tools menu and then open the tools directly from the Management application. To add a tool, complete the following steps. 1. Select Tools > Setup. The Setup Tools dialog box displays. 2. Click the Tools Menu tab. 3. Click Define. The Define Tools dialog box displays (Figure 63). FIGURE 63 Define Tools dialog box 4.
6 Entering the server IP address of a tool If the third-party tool is a web-based application, you must enter the IP address of the applications server as a parameter to be able to open the application. To enter the server IP address, complete the following steps. 1. Select Tools > Setup. The Setup Tools dialog box displays. 2. Click the Tools Menu tab. The Tool Menu Items table displays all configured tools, including the tool name as it displays on the Tools menu, parameters, and keystroke shortcuts. 3.
6 The new tool displays in the Tool Menu Items table. NOTE You must click Add before clicking OK; otherwise, the new menu option is not created. 8. Click OK to save your work and close the Setup Tools dialog box. The tool you configured now displays on the Tools menu. Changing an option on the Tools menu You can edit parameters for third-party tools that display on the Tools menu. To edit a option to the tools menu, complete the following steps. 1. Select Tools > Setup.
6 If the tool is not being utilized, no confirmation message displays. 5. Click Update to remove the tool. 6. Click OK to save your work and close the Setup Tools dialog box. Adding an option to a device’s shortcut menu You can add an option to a device’s shortcut menu. 1. Select Tools > Setup. The Setup Tools dialog box displays. Click the Product Menu tab. The Product Popup Menu Items table displays all configured shortcut menu options. 2.
6 Changing an option on a device’s shortcut menu You can change the parameters for a tool that displays on a device’s shortcut menu. To edit an option to the device’s shortcut menu, complete the following steps. 1. Select Tools > Setup. The Setup Tools dialog box displays. 2. Click the Product Menu tab. The Product Popup Menu Items table displays all configured shortcut menu options. 3. Select the menu item you want to change in the Product Popup Menu Items table.
6 Removing an option from a device’s shortcut menu You can remove a tool that displays on a device’s shortcut menu. To remove an option to the device’s shortcut menu, complete the following steps. 1. Select Tools > Setup. The Setup Tools dialog box displays. 2. Click the Product Menu tab. The Product Popup Menu Items table displays all configured menu options. 3. Select the menu item you want to remove in the Product Popup Menu Items table. 4. Click Remove. 5.
6 VMware vCenter plug-in NOTE You must have host management privileges to access the Plug-in for VMware vCenter dialog box. The VMware vCenter plug-in is a web application hosted on the Management server. This web application sends dynamic HTML content to the vSphere or VI client and the client renders the HTML content.
6 Editing a vCenter server 1. Select Tools > Plug-in for VMware vCenter. The Plug-in for VMware vCenter dialog box displays. 2. Click Edit. The Edit vCenter Server dialog box displays. The Host field is not editable in the Edit vCenter Server dialog box. 3. Change the port number in the Port field. Default is 443. Valid port number are between 1 and 65535. 4. Change your user ID and password. 5. Click OK on the Edit vCenter Server dialog box. 6. Click Close on the Plug-in for VMware vCenter dialog box.
6 154 DCFM Professional Plus User Manual 53-1001774-01
Chapter 7 Server Management Console In this chapter • Server management console overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Changing server port numbers. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Restoring the database. . . . .
7 Launching the SMC on Linux and Solaris Perform the following steps to launch the server management console on Linux and Solaris systems. 1. On the Management application server, go to the following directory: Install_Directory/bin 2. Type the following at the command line: ./smc OR sh smc Services You must be logged in at the administrator (Windows systems) or root (UNIX systems) level to stop, start, and restart the Management application services.
7 Stopping all services To stop all services, complete the following steps. 1. Launch the Server Management Console. 2. Click the Services tab. 3. Click Stop to stop all services. Note that clicking Restart stops and then restarts all services. 4. Click Close to close the Server Management Console. Stopping the CIMOM services To stop the CIMOM (Common Information Model Object Manager) services, complete the following steps. 1. Launch the Server Management Console. 2. Click the Services tab. 3.
7 Starting all services NOTE The Start button restarts running services in addition to starting stopped services which causes client-server disconnect. To start all services, complete the following steps. 1. Launch the Server Management Console. 2. Click the Services tab. 3. Click Start to start all services. NOTE If the server is configured to use an external FTP server, the Server Management Console does not attempt to start the built-in FTP service. 4.
7 Authentication The Authentication function enables you to configure an authentication server and establish authentication policies. Authentication is configured to the local database by default. If you configure primary authentication to a Radius server, an LDAP server, or switch authentication, you can also configure secondary authentication to the local server.
7 8. Enter the timeout timer value (in seconds) that specifies the amount of time to wait between retries when the server is busy in the Timeout (Sec) field. 9. Enter the number of attempts to be made to reach a server before assuming it is unreachable in the Attempts field. 10. Click OK to return to the Authentication tab. 11. If you have established an active connection with the Radius server, click Test. Test attempts to contact the Radius server by issuing a ping command. 12.
7 12. Click Apply to save the configuration. Configuring switch authentication Switch authentication enables you to authenticate a user account against the switch database and the Management application server. You can configure up to three switches and specify the fall back order if one or more of the switches is not available. NOTE Switch authentication is only supported on Fabric OS devices. To configure switch authentication, complete the following steps. 1. Select the Authentication tab. 2.
7 Configuring Windows authentication Windows authentication enables you to authenticate a user account against the Windows user accounts and the Management application server when running on Windows hosts.
7 Configuring UNIX password file authentication UNIX password file (etc/password) authentication enables you to authenticate a user account against the UNIX user account and the Management application server when running on UNIX platforms. To configure UNIX password file authentication, complete the following steps. 1. Select the Authentication tab. 2. For Primary Authentication, select Password File. 3. Click Test. The Test Authentication dialog box displays. 4.
7 Displaying the client authentication audit trail All responses to authentication requests coming from clients are logged to an audit trail log file. This file is automatically backed up on the first day of every month. 1. Select the Authentication tab. 2. Click Display next to Authentication Audit Trail. The Login dialog box displays. 3. Enter your username and password in the appropriate fields and click OK. The defaults are Administrator and password, respectively.
7 FIGURE 65 Restore tab 4. Click Browse to select the path (defined in the Output Directory field on the Options dialog box - Backup pane) to the database backup location. 5. Click Restore. Upon completion, a message displays the status of the restore operation. Click OK to close the message and the Server Management Console. For the restored data to take effect, re-launch the Configuration Wizard using the instructions in “Launching the Configuration Wizard” on page 18.
7 Capturing technical support information The Technical Support Information tab of the SMC allows you to capture technical support information for the Management application as well as the configuration files for all switches in discovered fabrics. This information is saved in a zip file in a location that you specify. To capture technical support information, complete the following steps. 1. Select the Technical Support Information tab (Figure 66). FIGURE 66 Technical Support Information tab 2.
7 Upgrading HCM on the Management server The HCM Upgrade tab enables you to upgrade the Management application to include a new version of HCM. To upgrade HCM, complete the following steps. 1. Select the HCM Upgrade tab (Figure 67). FIGURE 67 HCM Upgrade tab 2. Click Browse to select the HCM installation folder location (for example, C:\Program Files\BROCADE\Adapter on Windows systems and /opt/brocade/adapter on Solaris and Linux systems). 3. Click Upgrade. 4. Click Close.
7 SMI Agent configuration The SMIA Configuration Tool enables you to configure SMI Agent settings, such as security, CIMOM, and certificate management. This tool is automatically installed with the Management application as part of the Server Management Console. This SMIA Configuration Tool consists of the following tabs: • Home—enables you to launch the following Management application dialog boxes: Discovery, Users, Options, Server, and About.
7 FIGURE 69 SMIA Configuration Tool dialog box Launching the SMIA configuration tool on Linux and Solaris NOTE All Management application services must be running before you can log into the SMIA Configuration Tool. To start the Management application services, click Start on the Server Management Console dialog box. Perform the following steps to launch the server management console on Linux and Solaris systems. 1.
7 Launching a remote SMIA configuration tool To launch a remote SMIA configuration tool, complete the following steps. 1. Open a web browser and enter the IP address of the Management application server in the Address bar. If the web server port number does not use the default (443 if is SSL Enabled; otherwise, the default is 80), you must enter the web server port number in addition to the IP address. For example, IP_Address:Web_Server_Port_Number. The Management application web start screen displays. 2.
7 Accessing Management application features To access Management application features such as, discovery, role-based access control, application configuration and display options, server properties, as well as the application name, build, and copyright, complete the following steps. 1. Click the Home tab, if necessary. 2. Select from the following to access the feature or dialog box. • • • • • • Discovery Users Options Server About Upgrade 3. Click Close to close the SMIA Configuration Tool dialog box.
7 1. Click the Authentication tab. FIGURE 70 Authentication tab 2. Select the Enable Client Mutual Authentication check box, as needed. If the check box is checked, CIM client mutual authentication is enabled. If the check box is clear (default), client mutual authentication is disabled. 3. Select the Enable Indication Mutual Authentication check box, as needed. If the check box is checked, indication mutual authentication is enabled.
7 Configuring CIMOM server authentication CIMOM server authentication is the authentication mechanism between the CIM client and the CIMOM Server. You can configure the CIMOM server to allow the CIM client to query the CIMOM server without providing credentials; however, the CIMOM server requires the Management application credentials to connect to the Management application server to retrieve the required data.
7 CIMOM configuration NOTE You must have Security Read and Write privileges to make changes on the CIMOM tab. The CIMOM tab enables you to configure the CIMOM server port, the Bind Network Address, and the CIMOM log. Configuring the SMI Agent port number To configure the SMI Agent port number, complete the following steps. 1. Click the CIMOM tab. FIGURE 71 CIMOM tab 2. Select or clear the Enable SSL check box, to enable or disable SSL for the SMI Agent.
7 4. Click Apply. NOTE Changes on this tab take effect after the next CIMOM server restart. If you disabled SSL, a confirmation message displays. Click Yes to continue. 5. Click Close to close the SMIA Configuration Tool dialog box. Configuring the Bind Network Address NOTE You must have Security Read and Write privileges to make changes on the CIMOM tab. To configure the network bind address, complete the following steps. 1. Click the CIMOM tab. 2.
7 • Finer—select to only log message data used to provide detailed trace information. • Finest—select to only log message data used to provide highly detailed trace information. • All—select to log support data for all messages. 3. Click Apply. NOTE Changes on this tab take effect after the next CIMOM server restart. 4. Click Close to close the SMIA Configuration Tool dialog box.
7 2. Select the Client or Indication from the Authentication list. The appropriate certificates display in the Certificates list. 3. Enter the full path or browse to the certificate you want to import (for example, C:\Certificates\cimom-indication-auth2.cer). You can only import certificate files with the CER extension (.cer). 4. Enter a name for the certificate in the Certificate Name field. 5. Click Import. The new certificate displays in the Certificates list and text box.
7 5. Browse to the directory where you want to export the certificate. 6. Edit the certificate name in the File Name field, if necessary. 7. Click Save. 8. Click Close to close the SMIA Configuration Tool dialog box. Deleting a certificate NOTE You must have Security Read and Write privileges to view or make changes to the Certificate Management tab. To delete a certificate, complete the following steps. 1. Click the Certificate Management tab. 2.
7 Viewing the configuration summary To view summary information about the Server configuration and the current configuration, complete the following steps. 1. Click the Summary tab. FIGURE 73 Summary tab 2. Review the summary. NOTE When the CIMOM server is stopped, the server configuration information does not display on the Summary tab. The following information is included in the summary.
7 Field/Component Description Bind Network Address Displays the Bind Network address for the Server Configuration and the Current Configuration. Log Level Displays the log level for the Server Configuration and the Current Configuration. Options include the following: • 10000—Off • 1000—Severe • 900—Warning • 800—Info (default) • 700—Config • 500—Fine • 400—Finer • 300—Finest • 0—All Managed Ports Displays the number of managed ports.
Chapter 8 Device Configuration In this chapter • Configuration repository management . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Device properties. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Enhanced group management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Firmware management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Host port mapping. . . . . . . . . . . . . . . . . .
8 FIGURE 74 Save switch configurations 2. Select the switches for which you want to save configuration files from Available Switches. 3. Click the right arrow to move the selected switches to Selected Switches. 4. Click OK. Configuration files from the selected switches are saved to the repository.
8 Restoring a switch configuration for a selected device The Restore Switch Configuration dialog box enables you to download a previously saved switch configuration to a selected device. To restore a switch configuration, complete the following steps. 1. Right-click a device in the Product List or the Connectivity Map, and select Configuration > Restore. The Restore Switch Configuration dialog box displays . 2. Select the switch configuration you want to download from the Saved Switch Configurations table.
8 Backing up a switch configuration NOTE The Enhanced Group Management (EGM) license must be activated on a switch to perform this procedure and to use the supportSave module. If a periodic backup is scheduled at the SAN level, that backup will apply to all switches from all fabrics discovered. Any new fabrics being discovered are automatically added to the list of fabrics to be backed up.
8 3. Set the Schedule parameters. These include the following: - The desired Frequency for backup operations (daily, weekly, monthly). The Day you want back up to run. If Frequency is Daily, the Day list is grayed out. If Frequency is Weekly, choices are days of the week (Sunday through Saturday). If Frequency is Monthly, choices are days of the month (1 through 31). - The Time (hour, minute) you want back up to run. The maximum age allowed before you Purge Backups.
8 Restoring a configuration from the repository 1. Right-click a device in the Product List or the Connectivity Map, and select Configuration > Configuration Repository. The Switch Configuration Repository dialog box displays. 2. Select the configuration you want to restore, and click Restore. The configuration is downloaded to the device. If necessary, the restoration process prompts you to disable and reboot the device before the configuration begins.
8 Viewing configuration file content You can view switch configuration file content in a text file. 1. Right-click a device in the Product List or the Connectivity Map, and select Configuration > Configuration Repository. The Switch Configuration Repository dialog box displays. 2. Click View. The configuration details display. If you want to save the contents as a text file, click Copy to Clipboard, paste the copy into a text editor (Notepad or Wordpad on Windows systems), and save the file. 3.
8 Searching the configuration file content To search the configuration file content, complete the following steps. 1. Right-click a device in the Product List or the Connectivity Map, and select Configuration > Configuration Repository. The Switch Configuration Repository dialog box displays. 2. Click View. The configuration details display. 3. Enter the information you want to search for in the field and click Search. The text string you are searching for is highlighted in the dialog box.
8 3. Use the file chooser to select the file from which you want to import the configuration, and click Import. Keeping a copy past the defined age limit 1. Right click a device in the Product List or the Connectivity Map, and select Configuration > Configuration Repository. The Switch Configuration Repository dialog box displays. 2. Select the check box under Keep for the configuration you want to preserve.
8 • • • • • • • • • FC Ports GigE Ports IP Ports iSCSI Ports POM Remote Ports SFP Virtual Sessions Ports Virtual FCoE Ports Depending on the device type, some of the properties listed in the following table may not be available for all products. TABLE 11 190 Device properties Field/Component Description Addressing Mode The addressing mode of the switch. Back to Edge Routing Support Whether back to edge routing is supported. Bandwidth The bandwidth of the FCIP tunnel.
8 TABLE 11 Device properties Field/Component IKE Policy # IP Address IPSec Policy # Description The IKE policy number. Also includes the following information: Authentication Algorithm Encryption Algorithm Diffie-Hellman SA Life • • • • The device’s IP address. The IPSec policy number. Also includes the following information: Authentication Algorithm Encryption Algorithm SA Life • • • L2 Capable Whether the device is Layer 2 capable. L3 Capable Whether the device is Layer 3 capable.
8 TABLE 11 Device properties Field/Component Description Slot # The slot number of the trunk. Source IP Address The IP address of the of the FCIP tunnel source device. Speed (Gb/s) The speed of the port in gigabytes per second. State The device’s state, for example, online or offline. Status The operational status. Switch Name The switch name. Switch IP The switch IP address. Switch WWN The switch world wide name. Tape Pipelining Whether tape pipelining is On or Off for the FCIP tunnel.
8 7. Click OK. The new property displays above the one you selected. Editing a property label You can edit any label that you create on the Properties dialog box. To edit any field you create, complete the following steps. 1. Right-click any product icon and select Properties. The Properties dialog box displays. 2. Select the tab on which you want to edit a property. 3. Right-click the label for the property you want to edit. 4. Select Edit. The Edit Property dialog box displays. 5.
8 Deleting a property label You can delete any label that you created on any of the tabs from the Properties dialog box. To delete a label, complete the following steps. 1. Right-click any product icon and select Properties. The Properties dialog box displays. 2. Select the tab on which you want to delete a property. 3. Right-click the label for the property you want to delete. 4. Select Delete. 5. Click Yes on the confirmation message. The property you selected is deleted.
8 Firmware management A firmware file repository (Windows systems only) is maintained on the server in the following location: C:\Program Files\Install_Directory\data\ftproot\6.1.1\n.n.n\n.n.n\ The firmware repository is used by the internal FTP server that is delivered with the Management application software, and may be used by an external FTP server if it is installed on the same platform as the Management application software. The repository is not available to FTP servers on external platforms.
8 FIGURE 75 Firmware repository 3. View information about a specific firmware file by selecting the firmware file in the Firmware Repository. The Firmware Name, Release Date, and Import Date are displayed. You may also view the Release Notes, if the release notes were imported. Importing a firmware file and release notes Firmware files and release notes can be imported into the Firmware Repository. 1. Select Configure > Firmware Management. The Firmware Management dialog box displays. 2.
8 4. Type in the location of the firmware file and release notes, or use Browse to select the location. The Management application supports .zip and .gz compression file types for firmware files. 5. Click OK. You return to the Repository tab. The file is listed in the Firmware Repository when the import is complete and successful. Deleting a firmware file Firmware files can be deleted from the Firmware Repository. 1. Select Configure > Firmware Management. The Firmware Management dialog box displays. 2.
8 FIGURE 77 Firmware download 3. Select one or more switches from Available Switches. 4. Click the right arrow to move the switches to Selected Switches. 5. Select a specific version from the Firmware to Download column, or use Select Latest to automatically select the latest version. If you have your FTP or SCP Server configured to use an external FTP or SCP Server, the Firmware to Download column is empty. 6.
8 Host port mapping HBAs and Hosts discovered through a fabric can be easily identified in the topology by their product icons. For a list of products and their icons, refer to “Product icons” on page 11. Once identified in the topology, you can create Hosts and assign the HBAs to them and import an externally created Host port mapping file (.CSV) to the Management application.
8 Renaming an HBA Host To rename a Host, complete the following steps. 1. Right-click an HBA icon and select Host Port Mapping. The Host Port Mapping dialog box displays. 2. Click the Host you want to rename in the Hosts table, wait a moment, and then click it again. The Host displays in edit mode. 3. Type a new name for the Host. The name of the Host appears in the Hosts table in alphabetical order with the new name. To assign HBAs to this Host, refer to “Associating an HBA with a Host” on page 200. 4.
8 1. Right-click an HBA icon and select Host Port Mapping. The Host Port Mapping dialog box displays. 2. Select the Host to which you want to assign HBAs in the Hosts table or click New Host to create a new Host. 3. Select the HBA from the HBAs table on the left and click the right arrow. The HBA displays in the Hosts table. The HBA is now associated with the selected Host. 4. Click OK to save your changes and close the Host Port Mapping dialog box. On the Connectivity Map, the HBA displays in the Host.
8 To import Host port mapping, complete the following steps. 1. Right-click an HBA icon and select Host Port Mapping. The Host Port Mapping dialog box displays. 2. Click Import. The Import dialog box displays. 3. Browse to the file (CSV format only) you want to import. 4. Click Open on the Import dialog box. The file imports, reads, and applies all changes line-by-line and performs the following: • Checks for correct file structure and well-formed WWNs, and counts number of errors.
8 5005076717011E7D, Server1 50050767170A5AAF, Server1 To export a Host port, complete the following steps. 1. Open the Host Port Mapping dialog box by performing one of the following actions: - Select an HBA port icon in the topology view, then select Discover > Host Port Mapping. Right-click any HBA port icon in the topology view and select Host Port Mapping. Right-click any HBA port in the Device Tree and select Host Port Mapping. The Host Port Mapping dialog box displays. 2.
8 Ports You can enable and disable ports, as well as view port details, properties, type, status, and connectivity. Viewing port connectivity The connected switch and switch port information displays for all ports. To view port connectivity, choose one of the following steps: • Right-click a product icon and select Port Connectivity. • Select a product icon and select Monitor > Port Connectivity. The Port Connectivity View dialog box displays (Figure 79).
8 TABLE 13 Port connectivity properties Field Description Buffer Limited Whether buffers are limited. Buffers Needed/Allocated The ratio of buffers needed relative to the number of buffers allocated. Calculated Status The operational status. There are four possible operation status values: • Up - Operation is normal. • Down - The port is down or the route to the remote destination is disabled. • Disabled - The connection has been manually disabled.
8 TABLE 13 206 Port connectivity properties Field Description Device Type The device type; for example, target or initiator. FC4 Type The active FC4 type; for example, SCSI. FC Address The Fibre Channel address. Each FC port has both an address identifier and a world wide name (WWN). Flag Whether a flag is on or off. Hard Address The hard address of the device. Host Name The name of the Host. Long Distance Whether the connection is considered to be normal or longer distance.
8 TABLE 13 Port connectivity properties Field Description Switch Routing Policy Whether a routing policy, for example, port-based routing policy, is enabled. Switch Secure Mode Whether switch secure mode is enabled. Switch Status The operational status. There are four possible operation status values: • Up - Operation is normal. • Down - The port is down or the route to the remote destination is disabled. • Disabled - The connection has been manually disabled.
8 Filtering port connectivity To filter results from the port connectivity view, complete the following steps. 1. Click the Filter link from the Port Connectivity View dialog box The Filter dialog box displays (Figure 80). FIGURE 80 Filter dialog box 2. Click a blank cell in the Field column to select the property from which to filter the results. 3. Click a blank cell in the Relation column to select an action operation.
8 Resetting the filter Reset immediately clears all existing definitions. You cannot cancel the reset. To reset the Filter dialog box, complete the following steps. 1. Click the Filter link from the Port Connectivity View dialog box. The Filter dialog box displays. 2. Click Reset. All existing definitions are cleared automatically. You cannot cancel the reset. Enabling the filter To enable the filter, select the Filter check box. Disabling the filter To disable the filter, clear the Filter check box.
8 Viewing ports and port properties To view ports on the Connectivity Map, right-click a product icon and select Show Ports. NOTE Show Ports is not applicable when the map display layout is set to Free Form (default). NOTE This feature is only available for connected products. On bridges and CNT products, only utilized Fibre Channel ports display; IP ports do not display. To view a port’s properties, right-click on a port and select Properties, or double-click on the port.
8 Depending on the port type, some of the following properties (Table 14) may not be available for all products. TABLE 14 Port properties Field Description # Virtual Session Ports The number of virtual session ports associated with the GE port. Additional Port Info Additional error information relating to the selected port. Address The address of the port. Active FC4 Types The active FC4 types. Active Tunnels The number of active tunnels.
8 TABLE 14 212 Port properties Field Description MAC Address The Media Access Control address assigned to a network adapters or network interface cards (NICs). Manufacturer Plant The name of the manufacturer plant. Modify button Click to launch the Element Manager. Model The model number of the device. Name The name of the switch.
8 TABLE 14 Port properties Field Description Vendor The product vendor. Virtual FCoE Port Count The number of FC ports on the device. Port types On the Connectivity Map, right-click a switch icon and select Show Ports. The port types display showing which ports are connected to which products. NOTE Show Ports is not applicable when the map display layout is set to Free Form (default). NOTE This feature is only available for connected products.
8 Viewing port connection properties You can view the information about products and ports on both sides of the connection. 1. Right-click the connection between two end devices on the Connectivity Map and select Properties. OR Double-click the connection between two devices on the Connectivity Map. The Connection Properties dialog box displays. NOTE If one of the devices is in an unknown state, the Product 1 and Product 2 information displays; however, the Connections table information does not display.
8 TABLE 16 Port connection properties Field Description 2-IP Address The IP address of the second switch. 2-Trunk Whether there is a trunk on the second switch. 2-Speed (Gbps) The speed of the second switch. Selected Connection Properties table The connected device port information. Area ID (hex)/Port Index (hex) The area identifier, in hexadecimal, of the switch-to-product connection. Blocked The configuration of the switch (blocked or unblocked).
8 TABLE 16 Port connection properties Field Description Protocol The network protocol, for example, Fibre Channel. RA TOV The resource allocation time out value, in milliseconds, of the connected switch. This variable works with the E D TOV variable to determine switch actions when presented with an error condition. Sequence # The sequence number of the switch. Serial # The serial number of the switch. Slot # The slot number of the switch. Speed (Gb/s) The speed in gigabytes per second.
8 Viewing port optics To view port optics, complete the following steps. 1. Right-click the switch for which you want to view port optic information on the Connectivity Map and select Port Optics (SFP). The Port Optics (SFP) dialog box displays(Figure 83). FIGURE 83 Port Optics dialog box 2. Review the port optics information. • Slot/Port #—The slot and port number of the selected fabric. • FC Address—The Fibre Channel address of the port. • TX Power—The power transmitted to the SFP in dBm and uWatts.
8 • • • • • • • • • Vendor PN—The part number of the SFP. Vendor Rev—The revision number of the SFP. Serial #—The serial number of the SFP. Data Code—The data code. Media Form Factor—The type of media for the transceiver; for example, single mode. Connector—The type of port connector. Wave Length—The wave length. Encoding—Displays how the fiber optic cable is encoded. Voltage (mVolts)—The voltage across the port in mVolts. 3. Sort the results by clicking on the column header. 4.
8 Port Auto Disable The Port Auto Disable dialog box allows you to enable and disable the port auto disable flag on individual FC_ports or on all ports on a selected device, as well as unblock currently blocked ports. NOTE The device must be running Fabric OS 6.3 or later. Viewing the port auto disable status NOTE The device must be running Fabric OS 6.3 or later. 1. Select Configure > Port Auto Disable. The Port Auto Disable dialog box displays. FIGURE 84 Port Auto Disable dialog box 2.
8 • • • • • • • • • Port Type—Displays the port type. Port Number—Displays the port number. Port WWN—Displays the port world wide name. Port Name—Displays the port name. User Port #—Displays the user port number. PID—Displays the port identifier. Connected Port #—Displays the connected port number. Connected Port WWN—Displays the connected port world wide name. Connected Port Name—Displays the connected port name. 3. Click OK on the Port Auto Disable dialog box.
8 Disabling port auto disable on individual ports NOTE The device must be running Fabric OS 6.3 or later. 1. Select Configure > Port Auto Disable. The Port Auto Disable dialog box displays. 2. Select the fabric on which you want to disable port auto disable (PAD) from the Fabric list. 3. Choose one of the following options from the Show list to filter the port list: • All Ports (default)—Displays all ports in the fabric. • Enabled PAD—Displays only ports where PAD is enabled. 4.
8 Storage port mapping configuration The Management application enables you to see multiple ports on your storage devices in a SAN. It also displays the relationship between multiple ports and represents them as attached to a storage array (device) in the Device Tree, Topology, and Fabric views. Occasionally, there are cases where the Management application cannot see the relationship between ports attached to the same storage device.
8 4. Add storage ports to the new storage array. NOTE You must add at least one storage ports to the new storage array to save the new array in the system. For step-by-step instructions about adding ports to an array, refer to “Adding storage ports to a storage array” on page 223. 5. Click OK to save your work and close the Storage Port Mapping dialog box. Adding storage ports to a storage array To add storage ports to a storage array, complete the following steps. 1.
8 3. Click the left arrow button. The selected storage port is removed from the Storage Array list and added to the Storage Ports table. 4. Click OK to save your work and close the Storage Port Mapping dialog box. Reassigning mapped storage ports To reassign a storage port, complete the following steps. 1. To open the Storage Port Mapping dialog box, choose from one of the following approaches. - Select a storage port icon in the topology view, then select Discover > Storage Port Mapping.
8 4. Click OK on the Properties dialog box to save the storage array properties. 5. Click OK to save your work and close the Storage Port Mapping dialog box. Deleting a storage array To delete a storage array, complete the following steps. 1. Open the Storage Port Mapping dialog box by performing one of the following actions: - Select a storage port icon in the topology view, then select Discover > Storage Port Mapping.
8 Viewing storage array properties To view storage array properties, complete the following steps. 1. Open the Storage Port Mapping dialog box by performing one of the following actions: - Select a storage port icon in the topology view, then select Discover > Storage Port Mapping. - Right-click any storage port icon in the topology view and select Storage Port Mapping. Right-click any storage port in the Device Tree and select Storage Port Mapping. The Storage Port Mapping dialog box displays. 2.
8 4. Click Open on the Import dialog box. The file imports, reads, and applies all changes line-by-line and performs the following: • Checks for correct file structure (first entry must be the storage node name (WWN) and second entry must be the storage array name), well formed WWNs, and counts number of errors If more than 5 errors occur, import automatically cancels. Edit the storage port mapping file and try again.
8 Exporting storage port mapping The Storage Port Mapping dialog box enables you to export a storage port array. The export file uses the CSV format. The first row contains the headers (Storage Node Name (WWNN), Storage Array Name) for the file. Example Storage Node Name (WWNN), Storage Array Name 20000004CFBD7100,New Storage Array 20000004CFBD896E,New Storage Array 2000002037E19CED,New Storage Array To export a storage port array, complete the following steps. 1.
8 Device Technical Support You can use Technical Support to collect supportSave data (such as, RASLOG, TRACE and so on) and switch events from Fabric OS devices. You can gather technical data for M-EOS devices using the device’s Element Manager. To gather technical support information for the Management application server, refer to “Capturing technical support information” on page 166. Scheduling technical support information collection NOTE The switch must be running Fabric OS 5.2.
8 Starting immediate technical support information collection NOTE The switch must be running Fabric OS 5.2.X or later to collect technical support data. NOTE The HBA must be a managed Brocade HBA. NOTE You must have the SupportSave privilege to perform this task. To capture technical support and event information for specified devices, complete the following steps. 1. Select Monitor > Technical Support > Switch/Host SupportSave. The Technical SupportSave dialog box displays. 2.
8 Viewing technical support information To view technical support information, complete the following steps. 1. Select Monitor > Technical Support > View Repository. The Repository dialog box displays. 2. Choose from one of the following options: • Select the Switches tab to view technical support information on switches. • Select the Hosts tab to view technical support information on Hosts. 3. Click View to view the repository in an Internet browser window.
8 Copying technical support information to an external FTP server To copy the Support Save data located in the built-in FTP server to an external FTP server, complete the following steps. 1. Select Monitor > Technical Support > View Repository. The Repository dialog box displays. 2. Choose from one of the following options: • Select the Switches tab to copy technical support information on switches. • Select the Hosts tab to copy technical support information on Hosts. 3.
8 Upload Failure data capture You can use Upload Failure Data Capture to enable, disable, and purge failure data capture files as well as configure the FTP Host for the switch. NOTE Upload Failure Data Capture is only supported on Fabric OS devices. Enabling upload failure data capture 1. Select Monitor > Technical Support > Upload Failure Data Capture. The Upload Failure Data Capture dialog box displays. FIGURE 85 Upload Failure Data Capture dialog box 2.
8 Disabling upload failure data capture NOTE Upload Failure Data Capture is only supported on Fabric OS devices. 1. Select Monitor > Technical Support > Upload Failure Data Capture. The Upload Failure Data Capture dialog box displays. 2. Select one or more devices on which you want to disable automatic trace dump from the Available Switches with Upload Failure Data Capture Enabled table. 3. Click the left arrow button.
8 Configuring the upload failure data capture FTP server NOTE Upload Failure Data Capture is only supported on Fabric OS devices. NOTE Some external FTP software (such as, Filezilla and Xlight) are not supported. 1. Select Monitor > Technical Support > Upload Failure Data Capture. The Upload Failure Data Capture dialog box displays. 2. Select a device from the Available Switches with Upload Failure Data Capture Enabled table. 3. Click Change FTP Host. The Change FTP Server dialog box displays.
8 Viewing the upload failure data capture repository NOTE Upload Failure Data Capture is only supported on Fabric OS devices. 1. Select Monitor > Technical Support > View Repository. The Repository dialog box displays. 2. Select the trace dump file you want to view from the Available Support and Upload Failure Data Capture Files table. 3. Click View. The Upload Failure Data Capture repository displays.
Chapter 9 Fabric Binding In this chapter • Fabric binding overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Enabling fabric binding . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Disabling fabric binding. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Adding switches to the fabric binding membership list . . . . . . . . . . . . . . .
9 Enabling fabric binding Fabric Binding is enabled through the Fabric Binding dialog box. After you have enabled Fabric Binding, use the Fabric Membership List/Add Detached Switch to add switches that you want to allow into the fabric. NOTE In a pure Fabric OS environment, Fabric Binding is only supported on Fabric OS 5.2 or later. In a mixed Fabric OS and M-EOS environment, Fabric Binding is only supported on Fabric OS 6.0 or later and M-EOS manageable switches and fabrics. 1.
9 Disabling fabric binding Fabric Binding cannot be disabled while High Integrity Fabric is active if the switch is offline. This disables fabric binding and High Integrity Fabric on the switch, but not the rest of the fabric. Disabled switches segment from the fabric. Fabric Binding is disabled through the Fabric Binding dialog box. NOTE In a pure Fabric OS environment, Fabric Binding is only supported on Fabric OS 5.2 or later.
9 Adding detached devices to the fabric binding membership list To add a switch that does not have a physical connection and is not discovered to the fabric, complete the following steps. 1. Select Configure > Fabric Binding. The Fabric Binding dialog box displays. 2. Click Add Detached Switch. The Add Detached Switch dialog box displays. 3. Enter the domain ID of the switch in the Domain ID field. 4. Enter the node WWN of the switch in the Node WWN field. 5. Click OK on the Add Detached Switch dialog box.
9 High integrity fabrics The High Integrity Fabric (HIF) mode option automatically enables features and operating parameters that are necessary in multiswitch Enterprise Fabric environments. When HIF is enabled, each switch in the fabric automatically enforces a number of security-related features including Fabric Binding, Switch Binding, Insistent Domain IDs, and Domain Register for State Change Notifications (RSCNs).
9 High integrity fabric requirements The term high integrity fabric (HIF) refers to a set of strict, consistent, fabric-wide policies. There are several specific configuration requirements for high integrity fabrics: • Insistent domain ID (IDID) must be enabled in the participating switches. • Port-based routing must be used on the participating switches. • A policy must be set that limits connectivity to only the switches within the same fabric.
9 2. Select the fabric on which you want to activate HIF from the Fabric Name list. The HIF status displays in the High Integrity Fabric field. 3. Click Activate. For Pure Fabric OS fabrics, HIF activates the Switch Connection Control (SCC) policy, sets Insistent Domain ID, and sets the Fabric Wide Consistency Policy (FWCP) for SCC in strict mode.
9 244 DCFM Professional Plus User Manual 53-1001774-01
Chapter 10 Fault Management In this chapter • Fault management overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Event logs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Event policies. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Event notification. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
10 Event logs The Management application provides a variety of logs through which you can monitor the SAN. You can view all events that take place in the SAN through the Master Log at the bottom of the main window. You can also view a specific log by selecting an option from the Monitor menu’s Logs submenu. The logs are described in the following list: • Audit Log. Displays all ‘Application Events’ raised by the application modules and all Audit Syslog messages from the switches and Brocade HBAs.
10 Copying part of a log entry You can copy data from logs to other applications. Use this to analyze or store the data using another tool. To copy part of a log, complete the following steps. 1. Select Monitor > Logs > Log_Type. The Log_Type Logs dialog box displays the kind of log you selected. 2. Select the rows you want to copy. • To select contiguous rows, select the first row you want to copy, press Shift, and click the contiguous row or rows you want to copy.
10 Exporting the entire log You can export the log data to a tab delimited text file. To export a log, complete the following steps. 1. Select Monitor > Logs > Log_Type. The Log_Type Log dialog box displays the kind of log you selected. 2. Right-click a row and select Export Table. The Save table to a tab delimited file dialog box displays. 3. Browse to the location where you want to export the data. 4. Enter a name for the file in the File Name field. 5. Click Save.
10 5. Enter your e-mail address in the From field. 6. Click OK. E-mailing a range of event details from the Master Log NOTE You must configure e-mail notification before you can e-mail event details from the Master Log. To configure e-mail notification, refer to “Configuring e-mail notification” on page 273. To e-mail event details from the Master Log, complete the following steps. 1. Right-click an entry in the Master Log. 2. Select E-mail > Date. The E-mail dialog box displays. 3.
10 TABLE 18 Event details Event Field Description Virtual Fabric ID The virtual fabric identifier. Message ID The message text. Recommended Action The recommended action. Contributors The contributor to this event. Time (Host) The time this event occurred and the host on which it occurred. 4. Click Close to close the Event Details dialog box. Copying part of the Master Log You can copy data from logs to other applications. Use this to analyze or store the data using another tool.
10 Exporting the Master Log You can export the Master Log to a tab delimited text file. Use this to analyze or store the data using another tool. To export the Master Log, complete the following steps. 1. Right-click an entry in the Master Log. 2. Select Table > Export Table. The Save table to a tab delimited file dialog box displays. 3. Browse to the location where you want to export the data. 4. Enter a name for the file in the File Name field. 5. Click Save.
10 2. Select from the following to include or exclude event types. • To include an event type in the filter, select the event from the Available Events table and click the right arrow. • To exclude an event type from the filter, select the event from the Selected Events table and click the left arrow. 3. Click OK. 4. Select one of the following to determine what view to filter events.
10 b. Select the event column for the event from the Event Column list. All event columns are listed in alphabetical order. c. Enter all or part of the event type value in the Value Contains text box. d. Click the right arrow button to move the event type to the Additional Filters - Include these Events table. To add additional filters, repeat steps a through d. NOTE You can configure a maximum of 10 filters to be included.
10 c. Click the right arrow button to move the event type to the Additional Filters - Filter out these Events table. NOTE You can configure a maximum of 10 filters to be excluded.
10 6. Click OK. The Define Filter dialog box displays. 7. Click OK to close Define Filter dialog box. Removing an advanced event filter To remove an advanced event filter, complete the following steps. 1. Click the Filter hyper link in the Master Log. The Define Filter dialog box displays. 2. Click Advanced Filtering. The Advanced Event Filtering dialog box displays. 3. Click the Include Events tab, if necessary. 4.
10 • Authentication Event — occurs when an authentication event has been triggered. • Call Home Event — occurs when a call home event has been triggered. • Config Management Event — occurs when a configuration management event has been triggered • • • • • • • • Data Encryption Event — occurs when a data encryption event has been triggered.
10 Policy actions You can automate tasks that you perform on the SAN by configuring multiple actions to be performed when an associated trigger is fired. The following actions are available: • Broadcast Message — Displays a message to all open Clients. • Launch Script — Launches the specified application using a script. NOTE Launch scripts with a user interface or a Network file launch are not supported. • Send E-mail — Sends an e-mail message to specified recipients.
10 9. Enter all or part of the message ID associated with SNMP traps and Syslog messages in the Message ID field. If the entry matches or is part of the message ID, the policy is triggered. 10. Define the trigger in the IP Address, Node WWN, and Name list. The trigger is limited to 1024 characters. Multiple values must be separated by a semi-colon. When multiple values are entered, as long as at least one value matches in the event and all other conditions are met, an action is triggered.
10 6. Define the trigger in the IP Address, Node WWN, and Name list. The trigger is limited to 1024 characters. Multiple values must be separated by a semi-colon. When multiple values are entered, as long as at least one value matches the IP address, Node WWN, or Name in the event and all other conditions are met, an action is triggered. IP addresses can either be in IPv4 or IPv6 format and must be complete. A Node WWN is accepted with or without the colon. 7.
10 9. Select the duration type (Seconds or Minutes) from the Duration list. The maximum duration is 30 minutes. 10. Select the check box in the Actions list for each action you want to occur when this policy is triggered. For a list of the available actions, refer to “Policy actions” on page 257.
10 11. Click OK on the Add Event Policy dialog box. 12. Select the Active check box for the policy you want to activate. 13. Click OK on the Event Policies dialog box. Defining the broadcast message action You can define the content of the broadcast message that occurs when a policy is triggered. You can only edit actions from the Add Event Policy, Duplicate Event Policy, or Edit Event Policy dialog boxes.
10 Defining the launch script action NOTE Launch scripts with a user interface are not supported. You can define the path to the script that is launched when a policy is triggered. When the script launches, the Management application does not verify the existence of the script. The script must have the following characteristics: • It must reside on the Management application server.
10 Defining the send e-mail action You can define the content of the e-mail message that occurs when a policy is triggered. You can only edit actions from the Add Event Policy, Duplicate Event Policy, or Edit Event Policy dialog boxes. For step-by-step instructions on adding or editing an event policy, refer to “Adding an event policy” on page 257, “Adding an Port offline policy” on page 258, “Adding a PM threshold crossed policy” on page 259, or “Adding a security violation policy” on page 260.
10 Configuring support data capture action You can configure the Management application to start supportSave capture on Fabric OS devices when a policy is triggered. You can only edit actions from the Add Event Policy, Duplicate Event Policy, or Edit Event Policy dialog boxes.
10 Deleting a policy 1. Select Monitor > Event Policies. The Event Policies dialog box displays. 2. Select the policy you want to delete. Press Ctrl and then click to select more than one policy. 3. Click Delete. 4. Click OK on the Event Policies dialog box. Duplicating an event policy To duplicate an event policy, complete the following steps. 1. Select Monitor > Event Policies. The Event Policies dialog box displays. 2. Select the policy you want to duplicate in the Policies table. 3. Click Duplicate.
10 10. Edit the trigger in the IP Address, Node WWN, and Name list. The trigger is limited to 1024 characters. Multiple values must be separated by a semi-colon. When multiple values are entered, as long as at least one value matches the IP address, Node WWN, or Name in the event and all other conditions are met, an action is triggered. IP addresses can either be in IPv4 or IPv6 format and must be complete. A Node WWN is accepted with or without the colon. 11.
10 8. Select the duration type (Seconds or Minutes) from the Duration list. The maximum duration is 30 minutes. 9. Select the check box in the Actions list for each action you want to occur when this policy is triggered. For a list of the available actions, refer to “Policy actions” on page 257.
10 11. Select the Active check box to activate the duplicated policy. 12. Click OK on the Event Policies dialog box. Duplicating a security violation policy To duplicate a security violation policy, complete the following steps. 1. Select Monitor > Event Policies. The Event Policies dialog box displays. 2. Select the policy you want to duplicate in the Policies table. 3. Click Duplicate. The Duplicate Event Policy dialog box displays. 4.
10 Editing an event policy To edit an event policy, complete the following steps. 1. Select Monitor > Event Policies. The Event Policies dialog box displays. 2. Select the policy you want to edit in the Policies table. 3. Click Edit. The Edit Event Policy dialog box displays. NOTE You cannot edit the event policy name. 4. Edit the description (255 characters maximum) for the policy in the Description field. 5. Change the event type by selecting an event type from the Event Type list.
10 Editing an Port offline policy To edit an Port offline policy, complete the following steps. 1. Select Monitor > Event Policies. The Event Policies dialog box displays. 2. Select the policy you want to edit in the Policies table. 3. Click Edit. The Edit Event Policy dialog box displays. 4. Edit the trigger in the IP Address, Node WWN, and Name list. The trigger is limited to 1024 characters. Multiple values must be separated by a semi-colon.
10 Editing a PM threshold crossed policy To edit a PM threshold crossed policy, complete the following steps. 1. Select Monitor > Event Policies. The Event Policies dialog box displays. 2. Select the policy you want to edit in the Policies table. 3. Click Edit. The Edit Event Policy dialog box displays. 4. Edit the trigger in the IP Address, Node WWN, and Name list. The trigger is limited to 1024 characters. Multiple values must be separated by a semi-colon.
10 Editing a security violation policy To edit a security violation policy, complete the following steps. 1. Select Monitor > Event Policies. The Event Policies dialog box displays. 2. Select the policy you want to edit in the Policies table. 3. Click Edit. The Edit Event Policy dialog box displays. 4. Define the trigger in the IP Address, Node WWN, and Name list. The trigger is limited to 1024 characters. Multiple values must be separated by a semi-colon.
10 Event notification The Management application records the SAN events in the Master Log. You can configure the application to send event notifications to e-mail addresses at certain time intervals. This is a convenient way to keep track of events that occur on the SAN. You can also configure products to “call home” for certain events, notifying the service center of product problems. For instructions about configuring call home for events, refer to “Call Home” on page 105.
10 8. Enter the length of time the application should wait between notifications in the Summary Interval field and list. Notifications are combined into a single e-mail and sent at each interval setting. An interval setting of zero causes notifications to be sent immediately. ATTENTION Setting too short an interval can cause the recipient’s e-mail inbox to fill very quickly. 9.
10 FIGURE 93 a. Advanced Event Filtering dialog box - Include Events tab Select the event type you want to include from the Event Type list. All event types are listed in alphabetical order. b. Select the event column for the event from the Event Column list. All event columns are listed in alphabetical order. c. Enter all or part of the event type value in the Value Contains text box. d. Click the right arrow button to move the event type to the Additional Filters - Filter out these Events table.
10 FIGURE 94 a. Advanced Event Filtering dialog box - Include Events tab Select the event type you want to remove from the Event Type list. All event types are listed in alphabetical order. b. Enter all or part of the event type description text in the Description Contains text box (up to 40 characters). This text should be the same text that displayed in the Description field for the events that displayed on the Master Log. c.
10 SNMP trap and informs registration and forwarding You can configure the application to send SNMP traps and informs to other computers. To correctly configure trap forwarding, you must configure the target computer’s IP address and SNMP ports. To correctly configure informs, you must enable informs on the switch. Registering the management server NOTE If the source IP address does not match the switch, the Management application does not forward the SNMP traps.
10 5. Select a fabric from the Targeted Fabric list. 6. Select a severity (None, Critical, Error, Warning, Info, or Debug) from the Severity list. 7. Click OK on the SNMP Setup dialog box. Removing a host server You can remove any host server as the trap recipient on managed Fabric OS devices. To remove a host server, complete the following steps. 1. Select Monitor > SNMP Setup. The SNMP Setup dialog box displays. 2. Click the Other Recipients tab. 3. Select Remove from the Action list. 4.
10 4. Click Add. The Add/Edit Trap Recipient dialog box displays. a. (Optional) In the Description field, enter a description of the trap recipient. b. In the IP Address field, enter the trap recipient’s IP address. The Management application accepts IP addresses in IPv4 or IPv6 formats. c. Enter the trap recipient’s UDP port number, in the port field. d. Click OK on the Add/Edit Trap Recipient dialog box. 5. Click OK on the SNMP Setup dialog box.
10 Editing a destination To edit a destination, complete the following steps. 1. Select Monitor > SNMP Setup. The SNMP Setup dialog box displays. 2. Click the Trap Forwarding tab. 3. Select the destination you want to edit in the Destinations table and click Edit. The Add/Edit Trap Recipient dialog box displays. a. (Optional) In the Description field, edit the description of the trap recipient. b. In the IP Address field, edit the trap recipient’s IP address.
10 Enabling SNMP informs NOTE SNMP Informs is only supported on Fabric OS 6.3 or later switches discovered through SNMP v3. For information about discovery through SNMP v3, refer to “Discovering fabrics” on page 36. You can enable SNMP informs on all Informs-capable Fabric OS switches. To enable Informs, complete the following steps. 1. Select Monitor > SNMP Setup. The SNMP Setup dialog box displays. 2. Click the Informs tab. 3. Select the Enable informs option. 4.
10 Syslog forwarding NOTE Syslog messages are only available on Fabric OS devices and Brocade HBAs (managed using HCM Agent). Syslog forwarding is the process by which you can configure the Management application to send Syslog messages to other computers. Switches only send the Syslog information through port 514; therefore, if port 514 is being used by another application, you must configure the Management application to listen on a different port.
10 Registering a host server You can register any host server as the Syslog destination on managed Fabric OS devices. You can register different destinations for different fabrics. To register a host server, complete the following steps. 1. Select Monitor > Syslog Configuration. The Syslog Registration and Forwarding dialog box displays. 2. Click the Other Destination tab. 3. Select Add from the Action list. 4. Enter the IP address of the host server in the Syslog Destination IP Address field. 5.
10 Editing a destination To edit a destination, complete the following steps. 1. Select Monitor > Syslog Configuration. The Syslog Registration and Forwarding dialog box displays. 2. Click the Syslog Forwarding tab. 3. Select the destination you want to edit in the Destinations table and click Edit. The Add/Edit Syslog Recipient dialog box displays. a. (Optional) In the Description field, edit the description of the Syslog recipient. b. In the IP Address field, edit the Syslog recipient’s IP address.
10 Disabling Syslog forwarding You can disable Syslog forwarding on all defined destinations. To disable Syslog forwarding, complete the following steps. 1. Select Monitor > Syslog Configuration. The Syslog Registration and Forwarding dialog box displays. 2. Click the Syslog Forwarding tab. 3. Clear the Enable Syslog forwarding check box. 4. Click OK on the Syslog Registration and Forwarding dialog box.
10 286 DCFM Professional Plus User Manual 53-1001774-01
Chapter 11 Performance Data In this chapter • Performance overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Real-time performance data. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Historical performance data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • End-to-end monitoring. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Top Talker monitoring . . . . . . . . . . .
11 Performance measures Performance measures enable you to select one or more measures to define the graph or report. The measures available to you depend on the object type from which you want to gather performance data. • Tx % Utilization — available for FC, GE, Managed HBA ports, Managed CNA ports, 10GE ports, and FCIP tunnels. • Rx % Utilization — available for FC, GE, Managed HBA ports, Managed CNA ports, 10GE ports, and FCIP tunnels.
11 • Under Sized Frames — available for Managed HBA ports and Managed CNA ports. • Over Sized Frames — available for Managed HBA ports and Managed CNA ports. • Primitive Sequence Protocol Errors — available for Managed HBA ports and Managed CNA ports. • • • • Dropped Frames — available for Managed HBA ports and Managed CNA ports. Bad EOF Frames — available for Managed HBA ports and Managed CNA ports. Invalid Ordered Sets — available for Managed HBA ports and Managed CNA ports.
11 Trap recipient: 10.191.12.240 Trap port: 162 Trap recipient Severity level: 4 Community 3: private (rw) Trap recipient: 10.103.5.105 Trap port: 162 Trap recipient Severity level: 4 Community 4: public (ro) Trap recipient: 192.168.102.41 Trap port: 162 Trap recipient Severity level: 4 Community 5: common (ro) Trap recipient: 10.32.150.
11 Priv User Auth Priv User Auth Priv User Auth Priv User Auth Priv - Protocol: noPriv 3 (rw): snmpadmin3 Protocol: noAuth Protocol: noPriv 4 (ro): snmpuser1 Protocol: noAuth Protocol: noPriv 5 (ro): snmpuser2 Protocol: noAuth Protocol: noPriv 6 (ro): admin Protocol: noAuth Protocol: noPriv To set the SNMP v3 credentials on the device, use the snmpconfig --set snmpv3 command.
11 Trap Recipient's IP address : [0.0.0.0] Trap Recipient's IP address : [0.0.0.0] Trap Recipient's IP address : [0.0.0.0] - To check SNMP credentials in the Management application, complete the following steps. 1. Select Discover > Setup. The Discover Setup dialog box displays. 2. Select an IP address from the Available Addresses table. 3. Click Edit. The Address Properties dialog box displays. 4. Click the SNMP tab. 5. Select the v1 or v3 from the SNMP Version list. 6.
11 HA-MIB (yes, y, no, n): [yes] FCIP-MIB (yes, y, no, n): [yes] ISCSI-MIB (yes, y, no, n): [yes] • To collect performance on a Virtual Fabric enabled device, use the admin> userconfig --show command to make sure the Fabric OS user has access to all the Virtual Fabrics. Make sure that the SNMPv3 user name is same as the Fabric OS user name. Otherwise, the data is not collected for virtual switches with a non-default VF ID. By default the admin user has access to all Virtual Fabrics.
11 Generating a real-time performance graph You can monitor a device’s performance through a performance graph that displays transmit and receive data. The graphs can be sorted by the column headers. You can create multiple real-time performance graph instances. NOTE To make sure that statistic collection for a switch does not fail, you must configure SNMP credentials for the switch. For step-by-step instructions, refer to “Configuring SNMP credentials” on page 40.
11 Filtering real-time performance data To filter real-time performance data from the Real Time Performance Graphs dialog box, complete the following steps. 1. Open the Real Time Performance Graphs dialog box. For step-by-step instructions, refer to “Generating a real-time performance graph” on page 294. The Real Time Performance Graphs dialog box displays. FIGURE 96 Real Time Performance Graphs dialog box 2. Click Select to change the object type. 3.
11 10. Select the granularity at which you want to gather performance data from the Granularity list. 11. Select the Interpolate check box to use interpolation to fill existing gaps, if necessary. 12. (Optional) Click Other Options and select the Use Same Y-axis check box to make the Y-axis range the same for object. The Use Same Y-axis check box is only available when you select Rx MB/sec and Tx MB/sec from the Measures list.
11 Historical performance data Performance should be enabled constantly to receive the necessary historical data required for a meaningful report. The following options and features are available for obtaining historical performance data: • Collect historical performance data from the entire SAN or from a selected device. NOTE Virtual Fabric logical ISL ports are not included in performance collection. • Persist data on every polling cycle (5 minutes). • Store up to 606 records (maximum) for each port.
11 Historical performance data collection is disabled for all fabrics in the SAN. Generating a historical performance graph To generate a historical performance graph for a device, complete the following steps. 1. Select the device for which you want to generate a performance graph. 2. Choose one of the following options: • Select Monitor > Performance > Historical Graph. OR • Right-click the device or fabric and select Performance > Historical Graph. The Historical Performance Graph dialog box displays.
11 1. Select the type of ports from the Show list. 2. Right-click a device in the Available table and select Expand All. 3. Select the ports (press Ctrl or Shift and then click to select multiple ports) from which you want to gather performance data from the Available table and click the right arrow button. The selected ports move to the Select Ports table. 4. Click OK. Filtering data by time To filter data for a historical performance graph by time, complete the following steps. 1.
11 The Source and Destination icons and the Graph column do not display 12. Save this configuration by selecting Save. The Save Favorites dialog box displays. This enables you to save the selected configuration so that you can use it to generate the same type of report at a later date. 13. Enter a name for the configuration in the Favorites Name field. 14. Click OK. 15. Click Apply. The selected graph automatically displays in the Historical Performance Graph dialog box. 16.
11 4. Click Delete. 5. Click Yes on the confirmation message. 6. Click the close button (X) to close the Historical Performance Graph dialog box. End-to-end monitoring NOTE End-to-end monitoring requires a Fabric OS device. Performance enables you to provision end-to-end monitors of selected target and initiator pairs. These monitors are persisted in the database and are enabled on one of the F_ports on the connected device (the Management application server determines the port).
11 Once you have created the end-to-end monitored pair, you can view both real-time and historical performance data. For step-by-step instructions refer to “Displaying end-to-end monitor pairs in a real-time graph” on page 302 or “Displaying end-to-end monitor pairs in a historical graph” on page 302. Displaying end-to-end monitor pairs in a real-time graph To display an end-to-end monitor pair in a graph, complete the following steps. 1. Select Monitor > Performance > End-to-End Monitors.
11 Refreshing end-to-end monitor pairs The Management application enables you to rewrite the end-to-end monitors (deleted through CLI or an Element Manager) back to a device. To refresh all end-to-end monitor pairs, complete the following steps. 1. Select Monitor > Performance > End-to-End Monitors. The Set End-to-End Monitor dialog box displays. 2. Click Refresh. All end-to-end monitor pairs are rewritten back to any devices where the end-to-end monitor pairs were deleted through CLI or an Element Manager.
11 Configuring a fabric mode Top Talker monitor NOTE A fabric mode Top Talker and an end-to-end monitor cannot be configured on the same fabric. You must delete the end-to-end monitor before you configure the fabric mode Top Talker. NOTE A fabric mode Top Talker and an F_port mode Top Talker cannot be configured on the same fabric. You must delete the F_port mode Top Talker before you configure the fabric mode Top Talker. To configure a fabric mode Top Talker monitor, complete the following steps. 1.
11 • Destination Port • Destination Switch/Port 8. Click the minimize button to hide this dialog box when it is not needed.
11 Configuring an F_port mode Top Talker monitor NOTE An F_port mode Top Talker and an end-to-end monitor cannot be configured on the same F_port. You must delete the end-to-end monitor before you configure the F_port mode Top Talker. NOTE An F_port mode Top Talker and a fabric mode Top Talker cannot be configured on the same fabric. You must delete the fabric mode Top Talker before you configure the F_port mode Top Talker. To configure an F_port mode Top Talker monitor, complete the following steps. 1.
11 Deleting a Top Talker monitor To delete a Top Talker monitor, complete the following steps. 1. Select the dialog box of the Top Talker monitor you want to delete. 2. Click Close. 3. Click Yes on the ‘do you want to delete this monitor’ message. Pausing a Top Talker monitor To pause a Top Talker monitor, complete the following steps. 1. Select the dialog box of the Top Talker monitor you want to pause. 2. Click Pause.
11 Thresholds and event notification Performance allows you to apply thresholds and event notification to real-time performance data. A performance monitor process (thread) monitors the performance data against the threshold setting for each port and issues an appropriate alert to notify you when the threshold is exceeded. For information about configuring event notification, refer to Event Notification. NOTE It is not necessary to configure event notification to receive events in the master log.
11 You can only define policies for E and F/FL ports. 5. Select a measure from the Measure list. You can only define policies for the Tx and Rx % Utilization measures. You cannot add the same measure more than once. If you try to add another threshold with the same measure, the new values overwrite the older threshold values in the Selected Thresholds table. 6. Enter a percentage for the high boundary in the High Boundary field. When the counter value exceeds high boundary, an event is raised. 7.
11 4. Change the policy type from the Policy Type list. 5. Select a measure from the Measure list. You cannot add the same measure more than once. If you try to add another threshold with the same measure, the new values overwrite the older threshold values in the Selected Thresholds table. 6. Enter a percentage for the high boundary in the High Boundary field. 7. (Fabric OS only) Enter a percentage for the low boundary in the Low Boundary field. 8.
11 13. Make the threshold changes by selecting one of the following options: • To only add new thresholds, select the Keep currently set thresholds and only add new thresholds check box. • To overwrite all existing thresholds on all fabrics and devices, select the Overwrite all thresholds currently set on all switches check box. 14. Click OK on the Confirm Threshold Changes dialog box. Duplicating a threshold policy To duplicate a threshold policy, complete the following steps. 1.
11 3. Select one or more fabrics or devices to which you want to assign the policy in the Available Threshold Policies table. If you choose to assign the policy to a fabric and a M-EOS logical switch is present in the fabric, the policy is not assigned to the M-EOS logical switch. You must directly assign a policy to a M-EOS physical chassis. When you directly assign a policy to a M-EOS physical chassis, the policy is assigned to all logical switches in the physical chassis.
11 6. Make the threshold changes by selecting one of the following options: • To only add new thresholds, select the Keep currently set thresholds and only add new thresholds check box. • To overwrite all existing thresholds on all fabrics and devices, select the Overwrite all thresholds currently set on all switches check box. 7. Click OK on the Confirm Threshold Changes dialog box.
11 Enabling connection utilization NOTE Fabrics where performance data collection is not enabled display connections as thin black lines. To display the connection utilization, complete the following steps. 1. Choose from one of the following options: • Select Monitor > Performance > View Utilization • Press CTRL + U. • Click the Utilization icon ( ). If you have already enabled historical data collection, the Utilization Legend displays in the main interface window.
11 Changing connection utilization You can change the utilization percentages. To change the utilization percentages, complete the following steps. 1. Click the change link in the utilization legend. 2. Enter or select the end percentage you want for the blue line. When you make a change to the end percentage of a utilization line, you also change the start percentage for the utilization line immediately above the one you changed when you click apply.
11 316 DCFM Professional Plus User Manual 53-1001774-01
Chapter 12 Reports In this chapter • Report types. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Generating reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Viewing reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Exporting reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Printing reports . . . .
12 Generating reports To generate reports, complete the following steps. 1. Select Reports > Generate. The Generate Reports dialog box displays. 2. Select the types of reports you want to generate. • Fabric Ports • Fabric Summary 3. Select the fabrics for which you want to generate reports. 4. Click OK. The generated reports display in the View Reports dialog box. NOTE Hyperlinks in reports are active only as long as the source data is available. 5. Click Close to close the View Reports dialog box. 6.
12 If you do not see the report you want to export, generate it first by following the instructions in “Generating reports” on page 318. You can select reports by Time, Report Type, or User. 3. Select the format (PDF, HTML, or XML) you want to export to from the list to the left of the Export button. 4. Click Export. The Save dialog box displays. 5. Browse to the file location where you want to save the report and click Save. 6. Click Close to close the View Reports dialog box. 7.
12 Printing reports You can print reports through an internet browser. 1. Select Reports > View. The View Reports dialog box displays. 2. Select the report you want to print in the left pane of the dialog box. If you do not see the report you want to view, generate it first by following the instructions in “Generating reports” on page 318. NOTE Hyperlinks in reports are active only as long as the source data is available. 3. Click Show in Browser. The selected report displays in your default Web browser.
12 Generating performance reports To generate a historical performance report for a device, complete the following steps. 1. Select the device for which you want to generate a performance report. 2. Choose one of the following options: • Select Monitor > Performance > Historical Report. OR • Right-click the device and select Performance > Historical Report. The HIstorical Performance Table dialog box displays. 3. Filter the historical data by completing the following steps. a.
12 g. Click Apply. The selected report automatically displays in the View Reports dialog box. NOTE Hyperlinks in reports are active only as long as the source data is available. To print the selected report, refer to “Printing reports” on page 320. To export the selected report, refer to “Exporting reports” on page 318. To delete the selected report, refer to “Deleting reports” on page 320. 4. Click the close button (X) to close the View Reports dialog box. 5.
Chapter Role-Based Access Control 13 In this chapter • Users . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 323 • Roles. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 327 • Resource groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 330 Users The Management application enables you to create users, roles, and resource groups.
13 Adding a user account NOTE You must have the User Management privilege to perform this task. To add a user, complete the following steps. 1. Select Server > Users. The Server Users dialog box displays. 2. Click Add. The New User dialog box displays (Figure 99). FIGURE 99 New User dialog box 3. Type the description of the user in the Description field. 4. Type a unique user name (127-character limit) for the user in the User ID field. 5.
13 Editing a user account NOTE You must have the User Management privilege to perform this task. To edit a user, complete the following steps. 1. Select Server > Users. The Server Users dialog box displays. 2. Select the user whose information you want to edit in the Users table. 3. Click Edit. The Edit User dialog box displays. 4. Edit the information as necessary. 5. Click OK to save your changes and close the Edit User dialog box. 6. Click OK on the message.
13 FIGURE 100 Define Filter dialog box 4. Move events between the tables by selecting the event and clicking the appropriate arrow. 5. Set up advanced event filtering by clicking Advanced Filtering. For more information about advanced event filtering, refer to “Setting up advanced event filtering for a user” on page 274. 6. Click OK. The Server Users dialog box displays. 7. Turn on event notification for the user by selecting the check box in the E-mail Notification column of the Users table. 8.
13 4. Click OK on the confirmation message. The selected user is removed from the Server Users dialog box. 5. Click OK to close the Server Users dialog box. Roles The Management application enables you to set privileges for individual users, which enhances the security of your SAN. Creating a user role NOTE You must have the User Management privilege to perform this task.
13 3. Enter a name for the role in the Name field. 4. (Optional) Enter a description for the role in the Description field. 5. Add Read and Write access by completing the following steps. a. In the Available Privileges list, select features to which you want to allow read and write access. Press CTRL and click to select multiple features. b. Click the right arrow next to the Read & Write Privileges list. The features are moved to the Read & Write Privileges list. 6.
13 5. Remove Read and Write access by completing the following steps. a. In the Read & Write Privileges list, on the left, select features to which you want to remove read and write access. Press CTRL and click to select multiple features. b. Click the left arrow next to the Available Privileges list. The features are moved to the Available Privileges list. 6. Add Read Only access by completing the following steps. a.
13 5. Click OK on the “role removed” message. 6. Click OK to close the Server Users dialog box. Resource groups The Management application enables you to create resource groups and assign users to the selected role within that group. This enables you to configure user access by both role and fabric when you assign users to a role within the resource group. Creating a resource group NOTE You must have the User Management privilege to perform this task.
13 5. Click the Hosts tab and complete the following steps to add hosts to the resource group. FIGURE 103 Add/Edit Resource Group dialog box - Hosts tab a. Select the hosts you want to include in this group in the Available Hosts table. b. Click the right arrow button. The selected fabrics are moved to the Selected Fabrics and Hosts table. 6. Click OK to save the new resource group and close the Add/Edit Resource Group dialog box. A message box displays indicating the group was created successfully. 7.
13 5. Remove fabrics from the resource group by completing the following steps. a. Click the Fabrics tab. a. In the Selected Fabrics and Hosts table, select the fabrics you want to remove from this group. b. Click the left arrow button. The selected fabrics are moved to the Available Fabrics table. 6. Add hosts to the resource group by completing the following steps. a. Click the Hosts tab. a. In the Available Hosts table, select the hosts you want to include in this group. b.
13 4. Click Yes on the message. A message box displays indicating the group was removed successfully. 5. Click OK on the message. The Server Users dialog box displays and the resource group no longer displays in the Resource Groups list. 6. Click OK to close the Server Users dialog box. Assigning a user to a resource group NOTE You must have the User Management privilege to perform this task. You can assign users to a role under a resource group to give permissions for features and topology views.
13 Removing a user from a resource group NOTE You must have the User Management privilege to perform this task. NOTE You cannot remove the default resource group 'All Fabrics'. You can remove users from a resource group to take away permissions for features and topology views. NOTE If users are logged in when you reassign their group, they are immediately logged out. To remove a user from a resource group, complete the following steps. 1. Select Server > Users. The Server Users dialog box displays. 2.
Chapter 14 Host management In this chapter • About host management. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • HCM software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Host discovery . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Connectivity map . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • View management. . . . . .
14 HCM software The Host Connectivity Manager (HCM) is a management software application for configuring, monitoring, and troubleshooting Brocade host bus adapters (HBAs), converged network adapters (CNAs), and FC mezzanine cards in a storage area network (SAN) environment. HCM features Common HBA and CNA management software features include the following: • Discovery using the agent software running on the servers attached to the SAN, which enables you to contact the devices in your SAN.
14 Host bus adapters Brocade offers five models of Fibre Channel Host Bus Adapters (HBAs). These models provide reliable, high-performance host connectivity for mission-critical SAN environments. The Brocade HBAs are listed in Table 20. TABLE 20 Brocade Fibre Channel HBA models Model Number Description Brocade 804 Dual-port mezzanine HBA with a per-port maximum of 8 Gbps. This HBA installs in server blades that install in supported blade system enclosures.
14 Converged network adapters Table 21 describes available Brocade Converged Network Adapters (CNAs) for PCIe x 8 host bus interfaces, hereafter referred to as Brocade CNAs. These adapters provide reliable, high-performance host connectivity for mission-critical SAN environments.
14 Host discovery The Management application enables you to discover individual hosts, import a group of hosts from a CSV file, or import host names from discovered fabrics. The maximum number of host discovery requests that can be accepted is 1000. Host discovery requires HCM Agent 2.0 or later. SMI and WMI discovery are not supported. NOTE Pure Fabric discovery alone shows adapters behind Access Gateway and all adapter ports as virtual.
14 View management You can customize the topology by creating views at the managed host level in addition to the fabric level views. If you discover or import a Fabric with more than approximately 2000 devices, the devices display on the Product List, but not on the Connectivity Map. Instead, the topology area shows a message stating that the topology cannot be displayed. To resolve this issue, create a new view to filter the number of devices being discovered.
14 The Management application provides one pre-configured resource group (All Fabrics). When you create a resource group, all available roles are automatically assigned to the resource group. Once the resource group is available you can assign a user to a role within the resource group. Host management privileges You can launch the Host Connectivity Manager (HCM) if you have read and write permissions to the Host Management privilege.
14 Host performance management Real-time performance enables you to collect data from managed HBA and CNA ports. You can use real-time performance to configure the following options: • Select the polling rate from 20 seconds up to 1 minute. • Select up to 32 ports total from a maximum of 10 devices for graphing performance. • Choose to display the same Y-axis range for both the Tx MB/Sec and Rx MB/Sec measure types for easier comparison of graphs.
14 TABLE 22 Counters (Continued) FC port measures HBA port measures CNA port measures Received length error frames Received code error frames Instructions for generating real-time performance data are detailed in “Generating a real-time performance graph”. Host fault management Fault management enables you to monitor your SAN using the following methods: • Monitor logs for specified conditions and notify you or run a script when the specified condition is met.
14 Filtering event notifications The application provides notification of many different types of SAN events. If a user wants to receive notification of certain events, you can filter the events specifically for that user. NOTE The e-mail filter in the Management application is overridden by the firmware e-mail filter.
14 Host security authentication Fibre Channel Security Protocol (FC-SP) is a mechanism used to secure communication between two switches or between a switch and a device such as an HBA port. You can use either the the Management application or the HCM GUI to display the authentication settings and status. When you enable FC-SP authentication using the Management application, you can also set the authentication settings on the attached 24 - 8 Gbps FC Port, 8 - 10 Gbps CEE Port switch.
14 3. Configure the following parameters on the FCSP Authentication dialog box: a. Select the Enable Authentication check box to enable or disable the authentication policy. If authentication is enabled, the port attempts to negotiate with the switch. If the switch does not participate in the authentication process, the port skips the authentication process. The Hash type list shows the following options, but only one option, DHNULL, is supported.
14 supportSave on adapters Host management features support capturing support information for managed Brocade adapters, which are discovered in the Management application. You can trigger supportSave for multiple adapters at the same time. You can use Technical Support to collect supportSave data (such as, RASLOG, TRACE and so on) and switch events from Fabric OS devices. The switch must be running Fabric OS 5.2.X or later to collect technical support data.
14 348 DCFM Professional Plus User Manual 53-1001774-01
Chapter 15 Fibre Channel over Ethernet In this chapter • FCoE overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • QoS configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • LLDP-DCBX configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Access Control List configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
15 Enhanced Ethernet features Converged Enhanced Ethernet (CEE) is a set of IEEE 802 standard Ethernet enhancements that enable Fibre Channel convergence with Ethernet. The two basic requirements in a lossless Ethernet environment are Enhanced Transmission Selection (ETS) and priority-based flow control. These capabilities allow the Fibre Channel frames to run directly over 10 Gbps Ethernet segments without adversely affecting performance.
15 FCoE protocols supported The Brocade FCoE converged network adapter supports two layers of protocols: Ethernet link layer and FCoE layer. They are listed in the following sections. Ethernet link layer protocols supported The following protocols support the Ethernet link layer. • • • • • • • • • • • • • 802.1q (VLAN) 802.1Qaz (enhanced transmission selection) 802.1Qbb (priority flow control) 802.3ad (link aggregation) 802.3ae (10 Gb Ethernet) 802.1p (priority encoding) IEEE 1149.
15 FCoE Licensing The FCoE license enables Fibre Channel over Ethernet (FCoE) functionality on the Brocade 8000. Without the FCoE license, the Brocade 8000 is a pure L2 Ethernet switch and will not allow FCoE bridging capabilities. With the FCoE license, the FCoE Configuration dialog displays virtual FCoE port information and enables you to manage the virtual port information.
15 2. Highlight a discovered CEE switch from the Available Switches table, and click the right arrow button to move the switch to the Selected Switches Table. 3. Highlight the selected switch and click OK to start the configuration. The running configuration is saved to the selected switch, effective on the next system startup.
15 Opening the CEE Configuration dialog box 1. Launch the CEE Configuration dialog box using one of the following methods: • Select Configure > Switch > CEE from the menu bar. • Right-click the CEE switch from the device tree, and select Configure > CEE. • Right-click the CEE switch from the topology map and select Configure > CEE. The CEE Configuration dialog box displays, showing the status of all CEE-related hardware and functions.
15 CEE configuration tasks The CEE Configuration dialog box enables you to perform the following tasks: • Edit CEE ports for a selected switch. You can also add a link aggregation group (LAG) if a single switch is selected. • Edit a switch or port and configure the following CEE policies: NOTE Access Control List and Spanning Tree Protocol can also be set at the LAG level. • • • • • QoS LLDP-DCBX Access Control List Spanning Tree Protocol 802.1x • Enable or disable a LAG or CEE port.
15 Creating a CEE map to carry the LAN and SAN traffic To create a CEE map to carry the LAN and SAN traffic, complete the following steps. 1. Select Configure > Switch > CEE. The CEE Configuration dialog box displays. 2. Select the switch to edit in the CEE Ports and LAGs table and click Edit. The CEE Edit Switch dialog box displays. 3. Click the QOS tab. The CEE Edit Switch - QoS tab dialog box displays FIGURE 107 CEE Edit Switch dialog box - QOS tab 4.
15 Configuring LLDP for FCoE To configure LLDP for FCoE, complete the following steps. 1. Select Configure > Switch > CEE. The CEE Configuration dialog box displays. 2. Select the switch to edit in the CEE Ports and LAGs table and click Edit. The CEE Edit Switch dialog box displays. 3. Click the LLDP-DCBX tab. 4. The CEE Edit Switch - LLDP-DCBX tab dialog box displays. FIGURE 108 CEE Edit Switch dialog box - LLDP-DCBX tab 5. Select the LLDP profile in the LLDP Profiles table. 6.
15 Configuring the CEE interface with the CEE Map and Global LLDP profile To configure the CEE interface, complete the following steps. 1. Select Configure > Switch > CEE. The CEE Configuration dialog box displays. 2. Select the Te port connected to the CNA in the CEE Ports and LAGs table and click Edit. 3. Select the Port tab, if necessary, and select the Enable check box. 4. Select L2 from the Interface Mode list. 5. Select Converged (for Brocade CNA) or the Access (for QLogic CNA) from the L2 Mode list.
15 9. Select the FCoE check box. 10. Select the CEE interface to carry the FCoE traffic from the Selection List and click Add to add it to the Selected List. 11. Click OK on the VLAN Configuration dialog box to save your changes. 12. Close Web Tools. Creating VLAN classifiers and activating on the CEE interface NOTE This proceudre is completed using the CLI. For more information, see “CEE switch management using Telnet” on page 402.
15 Switch policies You can configure and enable a number of CEE policies on a switch, port, or link aggregation group (LAG). The following switch policy configurations apply to all ports in a LAG: • CEE map and Traffic Class map • Link Layer Discovery Protocol (LLDP) The following switch policy configurations apply to the LAG itself: • Access Control Lists (ACL) • Spanning Tree Protocol (STP) The switch policies are described in the following sections.
15 Spanning Tree Protocol policy The Spanning Tree Protocol (STP) is a Layer 2 protocol that ensures a loop-free topology for any bridged LAN (Layer-2 bridges are typically Ethernet switches). Spanning tree allows a network design to include spare (redundant) links to provide automatic backup paths if an active link fails, without the danger of bridge loops or the need to manually enable or disable these backup links. NOTE STP is not supported on internal ports.
15 Link aggregation groups Link aggregation, based on the IEEE 802.3ad protocol, is a mechanism to bundle several physical ports together to form a single logical channel or trunk. The collection of ports is called a link aggregation group (LAG). LAG configuration is not supported on internal ports. The Add LAG button is enabled when a single CEE switch or ports of a single CEE switch are selected.
15 FIGURE 109 Add LAG dialog box 4. Configure the following LAG parameters: NOTE Ports with 802.1x authentication or ports that are L2 or L3 mode-enabled are not supported in a LAG. • Status - Enabled or Disabled. You must enable the LAG to use the CEE functionality. • LAG ID - Enter the LAG identifier, using a value between 1-63. Duplicate LAG IDs are not allowed. • Interface mode - none or L2. The L3 interface mode option is displayed in the Edit LAG dialog box only.
15 6. Continue to configure the following LAG parameters. These parameters are always enabled. • Mode - Sets all ports added to the LAG members table in either Static or Dynamic mode. The default is Dynamic, Active, but LAG members can be Active or Passive if the LAG member is Dynamic. • Type - Sets the limit on the size of the LAG. The type values include Standard, where the LAG is limited to 16 ports, and Brocade, where the LAG is limited to four ports. The default is Standard.
15 Editing a CEE switch 1. Select Configure > Switch > CEE from the menu bar. The CEE Configuration dialog box displays, showing the status of all CEE-related hardware and functions. 2. Select the CEE switch from the Products/Ports table. 3. Click Edit. The Edit Switch dialog box displays (Figure 110). FIGURE 110 Edit Switch dialog box 4.
15 Editing a CEE port 1. Select Configure > Switch > CEE from the menu bar. The CEE Configuration dialog box displays, showing the status of all CEE-related hardware and functions. 2. Select a CEE port from the Products/Ports table. 3. Click Edit. The Edit Port dialog box displays. FIGURE 111 Edit Port dialog box 4. Modify the following CEE Port parameters as required: • Status - Enable or Disable. You must enable the LAG to use the CEE functionality. • Interface Mode - None or L2.
15 5. When you have finished configuring the policies, apply the settings to the CEE port. NOTE Clicking Cancel when there are pending changes launches a pop-up dialog. 6. Click OK when you have finished modifying the CEE port parameters. The CEE Confirmation and Status dialog box displays. 7. Review the changes carefully before you accept them. 8. Click Start to apply the changes, or click Close to abort the operation.
15 5. Configure the following LAG parameters: NOTE Ports with 802.1x authentication or ports that are L2/L3 mode enabled are not supported in a LAG. • Status - Enabled or Disabled. You must enable the LAG to use the CEE functionality. • LAG ID - The LAG identifier, which is not an editable field. • Interface Mode - L2 or none. For external ports, the L3 interface mode displays, in addition to None or L2.
15 NOTE If the primary or secondary IP address already exists on another interface, an error message displays in the Status area. Enabling a CEE port or LAG If you select multiple switches or multiple ports and LAGs from two or more switches, both the Enable button and the Disable button are disabled. 1. Select Configure > Switch > CEE from the menu bar. The CEE Configuration dialog box displays, showing the status of all CEE-related hardware and functions. 2.
15 Deleting a LAG You can only delete a link aggregation group (LAG) that is selected from a single switch. If you select multiple switches or multiple ports from two or more switches, the Delete button is disabled. 1. Select Configure > Switch > CEE from the menu bar. The CEE Configuration dialog box displays, showing the status of all CEE-related hardware and functions. 2. Select one or more LAGs (that can span multiple swiches) that you want to delete from the Products/Ports table. 3. Click Delete. 4.
15 CEE Performance Performance monitoring provides details about the quantity of traffic and errors a specific port or device generates on the fabric over a specific time frame. You can also use performance to indicate the devices that create the most traffic and to identify the ports that are most congested. Real Time Performance Graph You can monitor a device’s performance through a performance graph that displays transmit and receive data. The graphs can be sorted by the column headers.
15 Historical Performance Graph The Historical Performance Graph dialog box enables you to customize how you want the historical performance information to display. Generating a historical performance graph 1. Select a CEE port from the CEE Configuration dialog box, and select Historical Graph from the Performance list. A message displays, prompting you to close the CEE Configuration dialog. 2. Click OK to close the CEE Configuration dialog and open the Performance dialog box.
15 QoS configuration QoS configuration involves configuring packet classification, mapping the priority and traffic class, controlling congestion, and scheduling. The configuration of these QoS entities consist of CEE Map and Traffic Class Map configuration. In a Converged Enhanced Ethernet (CEE) configuration, Enhanced Transmission Selection (ETS) and Priority-based flow control (PFC) are configured by utilizing a priority table, a priority group table, and a priority traffic table.
15 Creating a CEE map When you create a CEE map, each of the Class of Service (CoS) options (0-7) must be mapped to at least one of the Priority Group IDs (0-7) and the total bandwidth must equal 100. All QoS, CEE map, and Traffic map configurations apply to all ports in a LAG. There can be, at the most, 16 entries in the Priority Group table. Eight of the entries are Strict Priority entries with a Priority Group ID of 15.0 to 15.7 and eight are user-definable entries with a Priority Group ID of 0-7.
15 5. Configure the following CEE Map parameters in the CEE Map table: • Name - Enter a name to identify the CEE map. If the switch is a 10 Gbps CEE/FC switch module, you cannot change the name. • Precedence - Enter a value between 1 - 100. This number determines the map’s priority. • Priority Flow Control check box - Check to enable priority flow control on individual priority groups. • CoS - Enter a Class of Service value to correspond to the Priority Group ID rows.
15 Editing a CEE map 1. Select Configure > Switch > CEE from the menu bar. The CEE Configuration dialog box displays, showing the status of all CEE-related hardware and functions. 2. Select a switch, and click Edit. 3. Click the QoS tab on the Edit Switch dialog box. The QoS dialog box displays. 4. Select a CEE Map from the CEE Maps table, and click the left arrow button to load its values to the left pane. The fields are now editable. 5.
15 Deleting a CEE map You cannot delete the CEE map of a 10 Gbps CEE/FC switch module. 1. Select Configure > Switch > CEE from the menu bar. The CEE Configuration dialog box displays, showing the status of all CEE-related hardware and functions. 2. Select a switch, and click Edit. 3. Click the QoS tab on the Edit Switch dialog box. The QoS dialog box displays. 4. Select a CEE Map that you want to delete from the CEE Maps table. 5. Click Delete. The Delete confirmation dialog displays. 6.
15 Assigning a CEE map to a port or link aggregation group A port can have either a CEE map or a Traffic Class map assigned to it, but it cannot have both. 1. Select Configure > Switch > CEE from the menu bar. The CEE Configuration dialog box displays, showing the status of all CEE-related hardware and functions. 2. Select a port or LAG, and click Edit. 3. Click the QoS tab on the Edit Port dialog box. The QoS dialog box displays. FIGURE 116 QoS, Assign a CEE Map to a port dialog box 4.
15 Creating a traffic class map 1. Select Configure > Switch > CEE from the menu bar. The CEE Configuration dialog box displays, showing the status of all CEE-related hardware and functions. 2. Select a switch, and click Edit. 3. Click the QoS tab on the Edit Switch dialog box. The QoS dialog box displays. 4. Select Traffic Class from the Map Type list. 5. Name the Traffic Class map. 6. Click the Traffic Class cell in a CoS row and directly enter a value from 0-7.
15 Editing a traffic class map 1. Select Configure > Switch > CEE from the menu bar. The CEE Configuration dialog box displays, showing the status of all CEE-related hardware and functions. 2. Select a switch, and click Edit. 3. Click the QoS tab on the Edit Switch dialog box. The QoS dialog box displays. 4. Select a Traffic Class Map from the Traffic Class Maps table, and click the left arrow button to load its values to the left pane. The fields are now editable.
15 Assigning a traffic class map to a port or link aggregation group You can assign a Traffic Class map to a port or ports under the LAG; however, a port does not require a Traffic Class map be assigned to it. A port can have either a CEE map or a Traffic Class map assigned to it, but it cannot have both. NOTE You cannot configure QoS or LLDP-DCBX on a LAG. 1. Select Configure > Switch > CEE from the menu bar.
15 LLDP-DCBX configuration Link Layer Discovery Protocol (LLDP) provides a solution for the configuration issues caused by increasing numbers and types of network devices in a LAN environment, because, with LLDP, you can statically monitor and configure each device on a network. Data Center Bridging Capability Exchange Protocol (DCBX) enables Enhanced Ethernet devices to discover whether a peer device supports particular features, such as Priority Flow Control or Class of Service (CoS).
15 4. Select the Global Configuration LLDP profile in the LLDP Profiles table. 5. Click the left arrow button to edit. 6. Select the FCoE Application and FCoE Logical Link check boxes in the Advertise table to advertise them on the network. 7. Click OK. The CEE Confirmation and Status dialog box displays. 8. Click Start on the CEE Confirmation and Status dialog box to save the changes to the switch. 9. Click Close on the CEE Configuration dialog box.
15 • DCBX - The DCBX profiles. • FCoE application - The FCoE application feature. • FCoE logical link - The logical link level for the SAN network. 6. Click the right arrow button to move the newly created profile into the DBCX Profiles table. 7. Click OK. The CEE Confirmation and Status dialog box displays. 8. Review the changes carefully before you accept them. 9. Click Start to apply the changes, or click Close to abort the operation. Editing an LLDP profile 1.
15 Deleting an LLDP profile 1. Select Configure > Switch > CEE from the menu bar. The CEE Configuration dialog box displays, showing the status of all CEE-related hardware and functions. 2. Select a switch, and click Edit. 3. Click the LLDP-DCBX tab on the Edit Switch dialog box. The LLDP Profile dialog box displays. 4. Select an existing LLDP Profile from the LLDP Profiles table in the upper right pane. NOTE You cannot delete . You can, however, edit global configurations.
15 Assigning an LLDP profile to a port or ports in a LAG You create LLDP profiles using the Edit Switch dialog box, which you access from the CEE Configuration dialog box. Global configuration parameters, which is the default selection, are displayed in the Assigned Profile table shown in Figure 119.
15 6. Click OK. The CEE Confirmation and Status dialog box displays. 7. Review the changes carefully before you accept them. The port you selected on the CEE Configuration dialog box should now be assigned to the profile you selected from the Available Profiles list. 8. Click Start to apply the changes, or click Close to abort the operation.
15 Access Control List configuration Access control lists (ACL) are sequential lists consisting of permit and deny rules. They are either Layer 3 (IP)- or Layer 2 (MAC)-specific. You can configure multiple access lists and rules and store them in the configuration. Some of the benefits of ACLs include the following: • • • • ACLs provide a measure of security. ACLs save network resources by reducing traffic. ACLs block unwanted traffic and users. ACLs reduce the chance of attacks.
15 4. Click Add and select Standard or Extended from the Add list. The Add Extended Access Control List includes all the Standard ACL features plus two additional features: Destination and Ether Type. The ACL parameters are described below. FIGURE 121 Add Extended Access Control List dialog box 5. Configure the following Access Control List parameters. NOTE You cannot duplicate Action and Source parameters in an existing Standard ACL.
15 • Count - Instructs the system to maintain a counter. • Ether Type - Specifies the Ethernet protocol being transferred in the Ethernet frame. Only one of the following Ether types is supported at a time. Address Resolution Protocol (ARP) - Ether Type 0x0806 Fibre Channel over Ethernet (FCoE) - Ether Type 0x8906 Internet Protocol, version 4 (IPv4) - Ether Type 0x0800 Custom - Ether type values must be greater than or equal to 1536 (0x0600). The range is 1536 - 65535. 6.
15 Deleting an ACL When you delete an ACL from the ACLs table, you are given the option to also remove the profile from the entities where it is currently associated. 1. Select Configure > Switch > CEE from the menu bar. The CEE Configuration dialog box displays, showing the status of all CEE-related hardware and functions. 2. Select a switch, and click Edit. 3. Click the Access Control List tab on the Edit Switch dialog box. The Access Control List dialog box displays. 4.
15 FIGURE 122 Assign ACL to port dialog box 5. Select an ACL from the Available ACLs list. The ACL name is suffixed with its type (standard or extended) in parentheses; for example, Human Resources (Extended). The details of the selected ACL are displayed in the Assigned ACL Details table, shown in Figure 122. 6. Click OK to commit the assign the ACL to the port or LAG. The CEE Confirmation and Status dialog box displays. 7. Review the changes carefully before you accept them. 8.
15 Spanning Tree Protocol configuration You can configure Spanning Tree Protocol (STP) when editing a LAG, but not when you are adding a LAG. The 8 Gbps 16-FC-ports, 10 GbE 8-Ethernet Port, and the 10 Gbps CEE/FC switch module support the following types of STP: • Spanning Tree Protocol (STP) • Rapid Spanning Tree Protocol (RSTP) - Provides for faster spanning tree convergence after a topology change.
15 Setting Spanning Tree parameters for a switch You cannot configure Spanning Tree Protocol (STP) when adding a new LAG. STP can be configured only after the LAG has been added to the switch. NOTE The ports and the ports in a link aggregation group (LAG) for the selected switch must be in Layer 2 (L2) mode. If the ports or ports in a LAG are not in L2 mode, a yellow banner displays, indicating Spanning Tree Protocol is disabled and the STP parameters are disabled as well. 1.
15 5. Configure the following Spanning Tree Protocol parameters: • Priority - The bridge priority. The value range is 0-61440 and the default value is 32768. The value must be in increments of 4096. • Mode - The spanning tree protocol mode. Options include Spanning Tree Protocol (STP), Rapid Spanning Tree Protocol (RSTP), and Multiple Spanning Tree Protocol (MSTP). • Forward Delay (sec) - The forward delay for the bridge. The value range is 4-30 seconds and the default value is 15.
15 FIGURE 124 Spanning Tree Protocol dialog box, MSTP 6. Click OK. The CEE Confirmation and Status dialog box displays. 7. Review the changes carefully before you accept them. 8. Click Start to apply the changes, or click Close to abort the operation.
15 STP configurable parameters at the port or LAG level You cannot configure Spanning Tree Protocol (STP) when adding a new LAG. STP can be configured only after the LAG has been added to the switch. Figure 125 shows the Spanning Tree Protocol (STP) parameters that are configurable at the port or LAG level. The ports and the ports in a link aggregation group (LAG) for the selected switch must be in Layer 2 (L2) mode.
15 802.1x authentication 802.1x is a standard authentication protocol that defines a client-server-based access control and authentication protocol. 802.1x restricts unknown or unauthorized clients from connecting to a LAN through publicly accessible ports. NOTE 802.1x is not supported for internal ports. A switch must be enabled for 802.1x authentication before you configure its parameters. See “Setting 802.1x parameters for a switch” for more information. Enabling 802.1x authentication 802.
15 Disabling 802.1x 1. Select Configure > Switch > CEE from the menu bar. The CEE Configuration dialog box displays, showing the status of all CEE-related hardware and functions. 2. Select a switch and click Edit. 3. Click the 802.1x tab on the Edit Switch dialog box. The 802.1x dialog box displays. 4. Clear the Enable 802.1x check box to disable 802.1x authentication. 5. Click OK. The CEE Confirmation and Status dialog box displays. 6. Review the changes carefully before you accept them. 7.
15 4. Click the Enable 802.1x check box to enable 802.1x authentication, and click OK. The 802.1x dialog box displays. 5. FIGURE 126 802.1x dialog box 6. Configure the following 802.1x parameters: • Wait Period - The number of seconds the switch waits before sending an EAP request. The value range is 15 to 65535 seconds. The default value is 30. • Retry Count - The maximum number of times that the switch restarts the authentication process before setting the switch to an unauthorized state.
15 CEE switch management using Web Tools You can open Web Tools directly from the CEE Configuration dialog box and use the Element Manager to enable and manage the CEE switch. To launch a CEE switch’s Element Manager, complete the following steps. 1. Launch the CEE Configuration dialog box using one of the following methods: • Select Configure > Switch > CEE from the menu bar. • Right-click the CEE switch from the device tree, and select Configure > CEE.
15 CEE switch management using Telnet You can use Telnet to log in and issue command line-based commands to a CEE switch. To launch a Telnet session, complete the following steps: 1. Launch the CEE Configuration dialog box using one of the following methods: • Select Configure > Switch > CEE from the menu bar. • Right-click the CEE switch from the device tree, and select Configure > CEE. • Right-click the CEE switch from the topology map and select Configure > CEE.
15 Viewing virtual FCoE ports Configuration of virtual FCoE ports requires installation of the FCoE license on the switch. 1. Select Configure > Switch > FCoE from the menu bar. The FCoE Configuration dialog box displays. 2. Select the Virtual FCoE Ports tab. The Virtual FCoE Ports tab displays. FIGURE 128 Virtual FCoE Ports dialog box 3. Select one or more virtual ports from the Products/Ports list. 4.
15 Clearing a stale entry A stale entry is a device that logged in and logged off but, because a port went down after an FLOGI was received, the device failed to receive the message. The entry in the FCoE Connected Devices table becomes stale and you must clear it manually. 1. Select a virtual FCoE port from the FCoE Configuration dialog box and click Connected Devices. The Connected Devices dialog box displays. 2. Select one or more rows from the Connected Devices table and click Disconnect.
Chapter 16 Fibre Channel over IP In this chapter • FCIP services licensing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • FCIP Concepts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • IP network considerations. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • FCIP platforms and supported features. . . . . . . . . . . . . . . . . . . . . . . . . . . . • FCIP trunking . . . . . . . . . . . .
16 FCIP services licensing Most of the FCIP extension services described in this chapter require the High Performance Extension over FCIP/FC license. FICON emulation features require additional licenses. Use the licenseShow command to verify the needed licenses are present on the hardware used on both ends the FCIP tunnel. FCIP Concepts Fibre Channel over IP (FCIP) is a tunneling protocol that enables you to connect Fibre Channel SANs over IP-based networks.
16 FCIP platforms and supported features There are five Fabric OS platforms that support FCIP: • The 8 Gbps 16-FC ports, 6-Gbps ports extension switch. • The 8 Gbps 12-FC port, 10 GbE ports, 2-10 GbE ports blade (384-port Backbone Chassis, 192-port Backbone Chassis). • The 4 Gbps Extension Switch. • The 4 Gbps Router, Extension switch. • The 4 Gbps Router, Extension blade (384-port Backbone Chassis, 192-port Backbone Chassis, Director Chassis). There are differences in platform capabilities.
16 The way FCIP tunnels and virtual ports map to the physical GbE ports depends on the switch or blade model. The 8 Gbps 16-FC ports, 6-Gbps ports extension switch and 8 Gbps 12-FC port, 10 GbE ports, 2-10 GbE ports blade tunnels are not tied to a specific GbE port, and may be assigned to any virtual port within the allowed range. The 4 Gbps Router, Extension switch and 4 Gbps Router, Extension blade require tunnels to be mapped to specific GbE ports and specific virtual ports.
16 WAN IP Router 10.0.1.1 IP Router 10.0.0.1 FCIP Circuits 10.0.0.2 10.0.0.3 10.0.0.4 10.0.0.5 FCIP Circuits FCIP Tunnel 10.0.1.2 10.0.1.3 10.0.1.4 10.0.1.5 FIGURE 129 FCIP tunnel and FCIP circuits Design for redundancy and fault tolerance Multiple FCIP tunnels can be defined between pairs of 8 Gbps extension switches and 8 Gbps extension blades, but doing so defeats the concept of a multiple circuit FCIP tunnel.
16 • In a scenario where a FCIP tunnel has multiple circuits of different metrics the data will flow over the lower metric circuits unless a failover condition occurs, as described in “FCIP circuit failover capabilities”. • The maximum bandwidth for a single circuit is 1 Gbps. To utilize the entire bandwidth of an XGE (10GbE) port, you must create ten 1 Gbps circuits. FCIP circuit failover capabilities Each FCIP circuit is assigned a metric, which is used in managing failover for FC traffic.
16 Bandwidth calculation during failover The bandwidth of higher metric circuits is not calculated as available bandwidth on an FCIP tunnel until all lowest metric circuits have failed. For example, assume the following: • Circuits 0 and 1 are created with a metric of 0. Circuit 0 is created with a maximum transmission rate of 1 Gbps, and Circuit 1 is created with a maximum transmission rate of 500 Mbps. Together, Circuits 0 and 1 provide an available bandwidth of 1.5 Gbps.
16 QoS SID/DID priorities over an FCIP trunk QoS SID/DID traffic prioritization is a capability of Brocade Fabric OS Adaptive Networking licensed feature. This feature allows you to prioritize FC traffic flows between hosts and targets. Four internal TCP connections provide internal circuits for managing QoS SID/DID priorities over an FCIP tunnel, as illustrated in Figure 132.
16 IPsec and IKE implementation over FCIP Internet Protocol security (IPsec) uses cryptographic security to ensure private, secure communications over Internet Protocol networks. IPsec supports network-level data integrity, data confidentiality, data origin authentication, and replay protection.
16 The following limitations apply to using IPsec: • • • • • • • IPsec is not supported on 10GbE ports. IPsec-specific statistics are not supported. To change the configuration of a secure tunnel, you must delete the tunnel and recreate it. There is no RAS message support for IPsec. IPsec can only be configured on IPv4 based tunnels. Secure Tunnels cannot be defined with VLAN Tagged connections.
16 QOS, DSCP, and VLANs Quality of Service (QoS) refers to policies for handling differences in data traffic. These policies are based on data characteristics and delivery requirements. For example, ordinary data traffic is tolerant of delays and dropped packets, but voice and video data are not. QoS policies provide a framework for accommodating these differences in data as it passes through a network. QoS for Fibre Channel traffic is provided through internal QoS priorities.
16 TABLE 26 416 Default Mapping of DSCP priorities to L2Cos Priorities (Continued) DSCP priority/bits L2CoS priority/bits Assigned to: 11 / 001011 3 / 011 Medium QoS 15 / 001111 3 / 011 Medium QoS 19 / 010011 3 / 011 Medium QoS 23 / 010111 3 / 011 Medium QoS 27 / 011011 0 / 000 Class 3 Multicast 31 / 011111 0 / 000 Broadcast/Multicast 35 / 100011 0 / 000 Low Qos 39 / 100111 0 / 000 Low Qos 43 / 101011 4 / 100 High QoS 47 / 101111 4 / 100 High QoS 51 / 110011 4 / 100 Hig
16 Open systems tape pipelining Open Systems Tape Pipelining (OSTP) can be used to enhance open systems SCSI tape write I/O performance. To implement OSTP over FCIP, you must enable the following two features: • FCIP Fastwrite and Tape Acceleration. • FC Fastwrite. FCIP Fastwrite and Tape Acceleration When the FCIP link is the slowest part of the network, consider using FCIP Fastwrite and Tape Read and Write Pipelining.
16 FICON emulation features FICON emulation supports FICON traffic over IP WANs using FCIP as the underlying protocol. FICON emulation features support performance enhancements for specific applications. If you are using FCIP for distance extension in a FICON environment, evaluate the need for these features before you run the FCIP configuration wizard. FICON emulation may be configured by selecting Advanced Settings on the Add Tunnel or Edit Tunnel dialogs.
16 FCIP configuration guidelines FCIP configuration always involves two or more extension switches. The following should take place first before you configure a working FCIP connection from the Management application: • • • • • The WAN link should be provisioned and tested for integrity. Cabling within the data center should be completed. Equipment should be physically installed and powered on. The Management application must have management port access to the extension switches.
16 Configuring an FCIP tunnel When you configure an FCIP extension connection, you create FCIP tunnels and FCIP circuits, between two extension switches. 1. Select Configure > FCIP Tunnels. The FCIP Tunnels dialog box is displayed (Figure 133). All discovered fabrics with extension switches are listed under devices. FIGURE 133 FCIP Tunnels dialog box 2. Select the switch you want to configure under Devices.
16 3. Click the Add Tunnel button, or right-click on the switch and select Add Tunnel. The Add FCIP Tunnel dialog is displayed (Figure 134). The name of the switch you selected is displayed in the Switch field under Switch One Settings. This dialog allows you to configure settings for both switches on either end of the tunnel. FIGURE 134 Add FCIP Tunnel dialog box 4.
16 Adding an FCIP circuit When adding a new FCIP tunnel, you can add an FCIP circuit by selecting the Add Circuit button on the Add FCIP Tunnel dialog box. Additional FCIP circuits can be added to existing FCIP tunnels by clicking Add Circuit from the Circuit tab, or by right-clicking on an existing tunnel and selecting Add Circuit. FIGURE 135 Add FCIP Circuit dialog box 1. Select the GiGE Port used for the Ethernet connection on each switch.
16 The default is created from the IP address and Subnet Mask. If you want to create a route through a gateway router, click Create Non-Default Route, and select a Gateway address. 5. Enter the MTU Size. For SAN traffic, the largest possible MTU (Maximum Transmission Unit) size is generally the most efficient. If you have an active connection between switch one and switch two, click Suggest under Switch One Settings.
16 FIGURE 136 FCIP Circuit Advanced Settings - Select the Selective Ack Off check box to disable or enable selective acknowledgement. Selective acknowledgement allows a receiver to acknowledge multiple lost packets with a single ACK response. This results in better performance and faster recovery time. Normally, selective acknowledgement should not be disabled. Do not disable selective acknowledgement unless you have a specific need to do so in your operating environment.
16 Configuring FCIP tunnel advanced settings Compression, FCIP fast write and tape pipelining, IPSec and IKE policies, and FICON emulation features are configured as advanced settings. 1. Click Advanced Settings on the Add FCIP Tunnel dialog box. The Advanced Settings dialog box is displayed. This dialog box has a Transmission tab, Security tab, and FICON Emulation tab. 2. Click OK to close Advanced Settings when you have configured the features that you want to implement.l 3.
16 2. Select the desired compression mode. A Hardware compression option is available on all platforms. The 8 Gbps 16-FC ports, 6-Gbps ports extension switch and the 8 Gbps 12-FC port, 10 GbE ports, 2-10 GbE ports Extension blade provide two additional, more aggressive options for compression. The Software Moderate option enables a combination of hardware and software compression that provides more compression that hardware compression alone. This option supports up to 8 Gbps of FC traffic.
16 Configuring IPSec and IKE policies IPSec and IKE policies are configured from the Security tab. The screens and procedures are platform-dependent. Figure 138 shows the screen for the 4 Gbps Router, Extension Switch. Figure 138 shows the screen for the 8 Gbps 16-FC ports, 6-Gbit ports Extension Switch and 8 Gbps 12-FC port, 10 GbE ports, 2-10 GbE ports Extension blade. 1. Optionally, ensure that the peer switches on either end of the connection have known WWNs. This provides an added measure of security.
16 FIGURE 139 Advanced Settings Security Tab for the 8 Gbps extension switch and blade NOTE IPSec settings cannot be edited. If you want to change settings, you will need to delete the tunnel and then create a new tunnel with the new settings.
16 Configuring FICON emulation FICON emulation and acceleration features and operating parameters are configured from the FICON Emulation tab (Figure 140). Before you configure these features you must decide which features you want to implement, and you must look closely at the operational parameters to determine if values other than the default values are better for your installation. FIGURE 140 FICON Emulation configuration tab 1.
16 - FICON Tape Read Max Ops defines a maximum number of concurrent emulated tape read operations. The range is 1-32. - FICON Tape Write Timer defines a time limit for pipelined write chains. This value is be specified in milliseconds (ms). If a pipelined write chain takes longer than this value to complete, the ending status for the next write chain will be withheld from the channel. This limits processing to what the network and device can support. Too small a value limits pipelining performance.
16 Viewing General FCIP properties Take the following steps to view general FCIP properties. 1. Select an extension blade or switch from the Fabric Tree structure, or right-click an extension blade or switch on the Connectivity Map, and select Properties. 2. Select the Properties tab (Figure 142).
16 Viewing FCIP FC port properties Take the following steps to view FCIP FC port properties. 1. Select an extension blade or switch from the Fabric Tree structure, or right-click an extension blade or switch on the Connectivity Map, and select Properties. 2. Select the FC Ports tab (Figure 143).
16 Viewing FCIP Ethernet port properties Take the following steps to view Ethernet port properties. 1. Select an extension blade or switch from the Fabric Tree structure, or right-click an extension blade or switch on the Connectivity Map, and select Properties. 2. Select the GigE Ports tab (Figure 144).
16 Editing FCIP tunnels NOTE You cannot edit an active tunnel; disable the tunnel before making changes. 1. From the FCIP Tunnels dialog box, select the tunnel you want to edit. 2. Select Edit Tunnel. The Edit FCIP Tunnel dialog box displays (Figure 145). FIGURE 145 Edit FCIP Tunnel dialog box 3. Fields and parameters are as described in “Configuring an FCIP tunnel”. You can edit all editable fields and parameters.
16 Editing FCIP circuits FCIP circuit settings may be edited from the Edit FCIP Circuit dialog box. The procedure for launching this dialog box for the 4 Gbps Router, Extension Switch and Blade is different than the procedure for the 8 Gbps 16-FC ports, 6-Gbit ports Extension Switch and the 8 Gbps 12-FC port, 10 GbE ports, 2-10 GbE ports Extension blade. The 4 Gbps Router, Extension Switch and Blade have only one circuit per tunnel, and the circuit is edited as part of the tunnel.
16 FIGURE 146 Edit FCIP Circuits dialog box 5. Fields and parameters are as described in “Adding an FCIP circuit”. You can edit all editable fields and parameters. Disabling FCIP tunnels 1. From the FCIP Tunnels dialog box, select the tunnel you want to disable. 2. Select Disable Tunnel. A confirmation dialog box displays, warning you that when you delete a tunnel, you delete all associated FCIP circuits. 3. Click OK to disable the tunnel. Enabling FCIP tunnels 1.
16 A confirmation dialog box displays. 3. Click OK to enable the tunnel.
16 Deleting FCIP tunnels 1. From the FCIP Tunnels dialog box, right-click the tunnel you want to delete. 2. Select the Delete Tunnel button. A confirmation dialog box displays, warning you of the consequences of deleting a tunnel. 3. Click OK to delete the tunnel. Disabling FCIP circuits 1. From the FCIP Tunnels dialog box, right-click the tunnel that contains the circuit. 2. Select the Circuit tab. 3. Select the circuit from the circuit properties table. 4. Select Disable Circuit.
16 Displaying FCIP performance graphs You can display peformance graphs by clicking the Performance button on the FCIP Tunnels dialog box. You can also display performance graphs from Properties, as described in the following sections. Displaying performance graphs for FC ports 1. Select an extension blade or switch from the Fabric Tree structure, or right-click an extension blade or switch on the Connectivity Map, and select Properties. 2. Select the FC Ports tab. 3. Click Performance > Real Time Graph.
16 Displaying tunnel properties from the FCIP tunnels dialog box Tunnel properties can be displayed from the FCIP Tunnels dialog box. 1. Select a tunnel from the FCIP tunnels dialog box. 2. Select the Tunnel tab. Tunnel properties are displayed (Figure 147).
16 Displaying FCIP circuit properties from the FCIP tunnels dialog box Tunnel properties can be displayed from the FCIP Tunnels dialog box using the following procedure. 1. Select a tunnel from the FCIP tunnels dialog box. 2. Select the Circuit tab. Circuit properties are displayed (Figure 148).
16 Displaying switch properties from the FCIP Tunnels dialog box Switch properties are displayed on the FCIP Tunnels dialog box when you select a switch (Figure 149).
16 Displaying fabric properties from the FCIP Tunnels dialog box Fabric properties are displayed on the FCIP Tunnels dialog box when you select a fabric. (Figure 150).
16 Troubleshooting FCIP Ethernet connections 1. Select an extension blade or switch from the Fabric Tree structure, or right-click an extension blade or switch on the Connectivity Map, and select Properties. 2. Select the GigE Ports tab. 3. Select the Ethernet port. 4. Click Troubleshooting. The following options are presented: 444 - IP Ping—Tests connections between a local Ethernet port (ge0 or ge1) and a destination IP address.
Chapter 17 FC-FC Routing Service Management In this chapter • Devices that support Fibre Channel routing . . . . . . . . . . . . . . . . . . . . . . . . • Fibre Channel routing overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Guidelines for setting up FC-FC routing . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Connecting edge fabrics to a backbone fabric . . . . . . . . . . . . . . . . . . . . . . • Configuring routing domain IDs . . . . . . . . . . . . . . . . .
17 Fibre Channel routing overview Fibre Channel routing provides connectivity to devices in different fabrics without merging the fabrics. Using Fibre Channel routing, you can share tape drives across multiple fabrics without the administrative overhead, such as change management and network management, and scalability issues that might result from merging the fabrics. Fibre Channel routing allows you to create logical storage area networks (LSANs) that can span fabrics.
17 VE_Port Edge fabric 2 IP cloud Edge fabric 1 Edge fabric 3 E_Port E_Port IFL IFL IFL VEX_Port FC router EX_Port (2) = LSAN Backbone fabric FIGURE 151 A metaSAN with edge-to-edge and backbone fabrics Guidelines for setting up FC-FC routing The following are some general guidelines for setting up FC-FC routing: • Ensure that the backbone fabric ID of the FC router is the same as that of other FC routers in the backbone fabric.
17 1. Select the edge fabric you want to connect to an FC router from the Connectivity Map or Product List. 2. Right-click the edge fabric in the Connectivity Map or Product List and select Router Configuration. The Router Configuration-Connect Edge Fabric dialog box is displayed (Figure 152). The edge fabric you selected is also displayed in the title of the dialog box. Discovered extension switches capable of FC routing are displayed in the Available Routers table.
17 a. Select the port to be configured as an EX_Port. b. Ensure the backbone fabric ID of the switch is the same as that of other FC routers in the backbone fabric. The backbone fabric ID is the fabric ID that was selected in the Router Configuration-Connect Edge Fabric dialog box. c. Complete the wizard to configure the EX_Port. d. Physically connect the EX_Port to the edge fabric, if it is not already connected. 8.
17 You may need to scroll right or drag the dialog box open further to see the Domain ID column. 5. Click OK.
Chapter 18 Encryption configuration In this chapter • Encryption Center features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Encryption user privileges. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Smart card usage . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Network connections. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
18 Encryption Center features The Encryption Center dialog box (Figure 154) is the single launching point for all encryption-related configuration in the Management application. It also provides a table that shows the general status of all encryption-related hardware and functions at a glance. FIGURE 154 Encryption Center dialog box Beginning with Fabric OS version 6.
18 Encryption user privileges In the Management application, resource groups are assigned privileges, roles, and fabrics. Privileges are not directly assigned to users; users get privileges because they belong to a role in a resource group. A user can only belong to one resource group at a time. The Management application provides three pre-configured roles: • Storage encryption configuration. • Storage encryption key operations. • Storage encryption security.
18 Smart card usage Smart Cards are credit card-sized cards that contain a CPU and persistent memory. Smart cards can be used as security devices. You must have Storage Encryption Security user privileges to activate, register, and configure smart cards. Smart cards can be used to do the following: • Control user access to the Management application security administrator roles. • Control activation of encryption engines. • Securely store backup copies of master keys.
18 Registering authentication cards from a card reader When authentication cards are used, one or more authentication cards must be read by a card reader attached to a Management application PC to enable certain security sensitive operations. These include the following: • • • • • • Master key generation, backup, and restore operations. Replacement of authentication card certificates. Enabling and disabling the use of system cards. Changing the quorum size for authentication cards.
18 Registering authentication cards from the database Smart cards that are already in the Management program’s database can be registered as authentication cards. 1. From the Register Authentication Cards dialog box, select Register from Archive. The Authentication Cards dialog box displays, showing a list of smart cards in the database. 2. Select the card from the table, and click OK. 3. Wait for the confirmation dialog box indicating initialization is done, and click OK.
18 1. When the Authenticate dialog box is displayed, gather the number of cards needed, as directed by instructions on the dialog box. The currently registered cards and the assigned owners are listed in the table near the bottom of the dialog box. 2. Insert a card, and wait for the ID to appear in the Card ID field. 3. Enter the assigned password. 4. Click Authenticate. 5. Wait for the confirmation dialog box, and click OK. 6. Repeat steps two through five for each card until the quorum is reached. 7.
18 Enabling or disabling the system card requirement If you want to use a system card to control activation of an encryption engine on a switch, you must enable the system card requirement. You can use the following procedure to enable or disable the system card requirement. 1. From the Encryption Center select an encryption group, and select the Security menu. The Select Security Settings dialog is displayed. 2.
18 3. A confirmation dialog box is displayed. Click OK to confirm de-registration. The card is removed to the Registered System Cards table. Tracking smart cards Use the Smart Card Tracking dialog box to track smart card details. 1. From the Encryption Center, select Smart Card > Smart Card Tracking. The Smart Card Tracking dialog box displays (Figure 155). FIGURE 155 Smart Card asset tracking dialog box Clicking the Delete button removes a selected smart card from the Management application database.
18 Editing smart cards Use the Edit Smart Card dialog box to edit smart card details. 1. From the Encryption Center, select Smart Card > Edit Smart Card. The Edit Smart Card dialog box displays(Figure 156). FIGURE 156 Edit Smart Card dialog box 2. Insert the smart card into the card reader. 3. After the card’s ID is displayed in the Card ID field, enter the Card Password and click Login. 4. Edit the card assignment user information as needed. 5. Click OK.
18 Network connections Before you use the encryption setup wizard for the first time, you must have the following required network connections: • The management ports on all encryption switches and 384-port Backbone Chassis CPs that have encryption blades installed must have a LAN connection to the SAN management program, and must be available for discovery.
18 Encryption node initialization and certificate generation When an encryption node is initialized, the following security parameters and certificates are generated: • • • • • FIPS crypto officer FIPS user Node CP certificate A self-signed Key authentication center (KAC) certificate A Key authentication center (KAC) signing request (CSR) From the standpoint of external SAN management application operations, the FIPS crypto officer, FIPS user, and node CP certificates are transparent to users.
18 Supported encryption key manager appliances As stated under “Network connections”, a supported key management appliance must be connected on the same LAN as the management port of the encryption switches or of the Backbone Chassis Control Processors (CPs) in the case of the encryption blade. Secure communication between encryption nodes in an encryption group, and between encryption nodes and key manager appliances requires an exchange of certificates that are used for mutual authentication.
18 Steps for connecting to an RKM appliance All switches you plan to include in an encryption group must have a secure connection to the RSA Key Manager (RKM). The following is a suggested order for the steps needed to create a secure connection to RKM: 3. Export the KAC CSR to a location accessible to a Certificate Authority (CA) for signing. 4. Submit the KAC CSR for signing be a Certificate Authority (CA). 5. Import the signed certificate into the Brocade encryption node. 6.
18 4. Download and store the signed certificates. The following example submits a CSR to the demoCA from RSA. cd /opt/CA/demoCA openssl x509 -req -sha1 -CAcreateserial -in certs/KACcsr kac_RKM_cert.pem -days 365 -CA ca Importing the signed KAC certificate After a KAC CSR has been submitted and signed by a CA, the signed certificate must be imported into the switch. 1. From the Encryption Center, select Switch > Import Certificate. The Import Signed Certificate dialog box displays. 2.
18 kcn.1998-01.com.brocade:DEK_AES_256_ECB a. Click Create. b. Type the key name string into the Name field. c. Select Hardware Retail Group for Identity Group. d. Deselect Activated Keys Have Duration. e. Select AES for Algorithm. f. Select 256 for Key Size. g. Select the Mode for the respective key classes as follows: XTS for Key Class "kcn.1998-01.com.brocade:DEK_AES_256_XTS" CBC for Key Class "kcn.1998-01.com.brocade:DEK_AES_256_CCM" CBC for Key Class "kcn.1998-01.com.
18 Steps for connecting to an LKM appliance The NetApp Lifetime Key Manager (LKM) resides on an FIPS 140-2 Level 3-compliant network appliance. The encryption engine and LKM appliance communicate over a trusted link. A trusted link is a secure connection established between the Encryption switch or blade and the NetApp LKM appliance, using a shared secret called a link key.
18 Establishing the trusted link You must generate the trusted link establishment package (TEP) on all nodes to obtain a trusted acceptance package (TAP) before you can establish a trusted link between each node and the NetApp LKM appliance. 1. From the Encryption Center, select Group > Link Keys. The switch name displays in the link status table under Switch, with a Link Key Status of Link Key requested, pending LKM approval. 2. Select the switch, and click Establish.
18 Obtaining and importing the LKM certificate Certificates must be exchanged between LKM and the encryption switch to enable mutual authentication. You must obtain a certificate from LKM, and import it into the encryption group leader. The encryption group leader exports the certificate to other encryption group members. To obtain and import an LKM certificate, do the following. 1. Open an SSH connection to the NetApp LKM appliance and log in. host$ssh admin@10.33.54.231 admin@10.33.54.
18 Exporting and registering the switch KAC certificates on LKM The encryption switch self-signed KAC certificates must exported and then registered on the LKM appliance. 1. From the Encryption Center, select Switch > Export Certificate. The Export Switch Certificate dialog box displays. 2. Select Self-signed switch certificate (X.509) and click OK. A dialog box displays that allows you to save the CSR to your SAN Management Program client PC, or an external host of your choosing. 3.
18 Tape LUN and DF -compatible tape pool support • DEK Creation - The DEK is created and archived to the primary LKM only. Upon successful archival of the DEK to the primary LKM, the DEK can be used for encryption of a Tape LUN or DF-Compatible tape pool. The DEK is synchronized to a secondary LKM through LKM clustering. If DEK archival to the primary LKM fails, DEK archival is retried to the clustered secondary LKM.
18 Steps for connecting to an SKM appliance The SKM management web console can be accessed from any web browser with Internet access to the SKM appliance. The URL for the appliance is as follows: https://: Where: - is the hostname or IP address when installing the SKM appliance. is 9443 by default. If a different port number was specified when installing the SKM appliance, use that port number.
18 Configuring a Brocade group on SKM A Brocade group is configured on SKM for all keys created by Brocade encryption switches and blades. This needs to be done only once for each key vault. 1. Login to the SKM management web console using the admin password. 2. Select the Security tab. 3. Select Local Users & Groups under Users and Groups. The User & Group Configuration page displays. 4. Select Add under Local Users. 5. Create a Brocade user name and password. 6.
18 Registering the SKM Brocade group user name and password The Brocade group user name and password you created when configuring a Brocade group on SKM must also be registered on each Brocade encryption node. 1. From the Encryption Center, select Key Vault Credentials. 2. Enter the Brocade group user name and password. Keep the following rules in mind when registering the Brocade user name and password: - The user name and password must match the user name and password specified for the Brocade group.
18 Setting up the local Certificate Authority (CA) on SKM To create and install a local CA, perform the following steps: 1. Login to the SKM management web console using the admin password. 2. Select the Security tab. 3. Under Certificates & CAs, click Local CAs. 4. Enter information required by the Create Local Certificate Authority section of the window to create your local CA. - Enter a Certificate Authority Name and Common Name. These may be the same value.. Enter your organizational information.
18 7. In the Trusted Certificate Authority List, click Edit. 8. From the list of Available CAs in the right panel, select the CA you just created. Repeat these steps any time another local CA is needed. Downloading the local CA certificate from SKM The local CA certificate you created using the procedure for “Setting up the local Certificate Authority (CA) on SKM” on page 475 must be saved to your local system. Later, this certificate must be imported onto the Brocade encryption group leader nodes. 1.
18 11. Enter the required data in the Sign Certificate Request section of the window. - Select the CA name from the Sign with Certificate Authority drop down box. Select Server as the Certificate Purpose. Enter the number of days before the certificate must be renewed based on your site's security policies. The default value is 3649 or 10 years. 12. Paste the copied certificate request data into the Certificate Request box. 13. Click Sign Request.
18 Creating an SKM High Availability cluster The HP SKM key vault supports clustering of HP SKM appliances for high availability. If two SKM key vaults are configured, they must be clustered. If only a single SKM appliance is configured, it may be clustered for backup purposes, but the backup appliance will not be directly used by the switch. The procedures in this section will establish a cluster configuration on one SKM appliance and then transfer that configuration to the remaining appliances.
18 Adding SKM appliances to the cluster If you are adding an appliance to an existing cluster, select the Cluster Settings section of the window, click Download Cluster Key and save the key to a convenient location, such as your computer's desktop. To add SKM appliances to the cluster you are creating, you will need the original cluster member’s local IP address, local port number, and the location of the cluster key you downloaded, as specified in “Creating an SKM High Availability cluster” on page 478.
18 Signing the Brocade encryption node KAC certificates The KAC certificate signing request generated when the encryption node is initialized must be exported for each encryption node and signed by the Brocade local CA on SKM. The signed certificate must then be imported back into the encryption node. 1. From the Encryption Center, select Switch > Export Certificate. The Export Switch Certificate dialog box displays. 2. Select Public Key Certificate Request (CSR) and click OK.
18 Steps for connecting to a TEMS appliance TEMS provides a web user interface for management of clients, keys, admins, and configuration parameters. A Thales officer creates domains, groups, and managers (a type of administrator), assigns groups to domains and assigns managers to manage groups. Managers are responsible for creating clients and passwords for the groups they manage.
18 2. Enter the management IP address information under Management Interface. 3. Enter the client IP address information under KM Server Interface. 4. Enter a host name for the appliance, internet or intranet domain, and, if used, the primary and secondary DNS IP address under Common Settings. 5. Set Service Settings as shown in Figure 158.
18 FIGURE 160 TEMS Clients tab 7. Click the Add Client tab. 8. Paste or type in the user name from step 4 in the Name field. 9. Enter a password in the Password and Verify Password fields. 10. Select the group brocade from the group pull down menu. 11. Click on Add Client. A TEMS client user is created and is listed in the table.
18 Establishing TEMS key vault credentials on the switch The credentials established for the TEMS client must be presented to TEMS by the switch. 1. From the Encryption Center, select Switch > Key Vault Credentials. The Key Vault Credentials dialog box displays (Figure 161). FIGURE 161 Key Vault Credentials 2. Copy exactly the user name and password used when creating the TEMS client.
18 Gathering information Before you use the encryption setup wizard for the first time, you should also have a detailed configuration plan in place and available for reference. The encryption setup wizard assumes the following: • You have a plan in place to organize encryption devices into encryption groups. • If you want redundancy and high availability in your implementation you have a plan to create high availability (HA) clusters of two encryption switches or blades to provide failover support.
18 Creating a new encryption group The following steps describe how to start and run the encryption setup wizard, and then create a new encryption group. NOTE When a new encryption group is created, any existing tape pools in the switch are removed. 1. Select Configure > Encryption from the menu bar. The Encryption Center dialog box displays. FIGURE 162 Encryption Center - No Group Defined dialog box 2. Select a switch from the encryption group.
18 4. Click Next. Create a new encryption Group is pre-selected. This is the correct selection for creating a new group. FIGURE 163 Designate Switch Membership dialog box 5. Enter an Encryption Group Name for the encryption group (the maximum length of the group name is 15 characters; letters, digits, and underscores are allowed) and select the Automatic failback mode. NOTE If the name you enter for the encryption group already exists, a pop-up warning message displays.
18 FIGURE 164 Select Key Vault dialog box 7. Select the Key Vault Type. The choices are the following: - RSA Key Manager (RKM) NetApp Link Key Manager (LKM) HP Secure Key Manager (SKM) Thales Encryption Manager for Storage (TEMS) Tivoli Key Lifetime Manager (TKLM) Different options are available depending on which key vault type you choose. NOTE TKLM is not supported in the current Fabric OS version. It will be added in a version.
18 When you select RKM, the options are a shown in Figure 165. a. Enter the IP address or host name for the primary key vault. If you are clustering RKM appliances for high availability, IP load balancers are used to direct traffic to the appliances. Use the IP address of the load balancer. b. Enter the name of the file that holds the primary key vault’s public key certificate or browse to the location by clicking the Browse button. c.
18 When you select LKM, the options are as shown in Figure 166. a. Enter the IP address or host name for the primary key vault. b. Enter the name of the file that holds the primary key vault’s public key certificate or browse to the location by clicking the Browse button. c. If you are using a backup key vault, also enter the IP address or host name, and the name of the file holding the backup key vault’s public key certificate in the fields provided. FIGURE 166 LKM Key Vault Options d. Click Next.
18 When you select SKM, the options are as shown in Figure 167. a. Enter the IP address or host name for the primary key vault. b. Enter the name of the file that holds the primary key vault’s public key certificate or browse to the location by clicking the Browse button. c. Enter the user name and password you established for the Brocade user group. d.
18 When you select TEMS, the options are as shown in Figure 168. a. Enter the IP address or host name for the primary key vault. b. Enter the name of the file that holds the primary key vault’s public key certificate or browse to the location by clicking the Browse button. c. Enter the user name and password you created for the Brocade group TEMS client. d.
18 When you select TKLM, the options are as shown in Figure 169. a. Enter the IP address or host name for the primary key vault. b. Enter the name of the file that holds the primary key vault’s public key certificate or browse to the location by clicking the Browse button. c. If you are using a backup key vault, also enter the IP address or host name and the name of the file holding the backup key vault’s public key certificate in the fields provided. FIGURE 169 TKLM Key Vault Options d. Click Next.
18 FIGURE 170 Specify Public Key Certificate filename dialog box 8. Specify the name of the file where you want to store the public key certificate that is used to authenticate connections to the key vault, and click Next. The certificate stored in this file is the switch’s public key certificate. You will need to know this path and file name to install the switch’s public key certificate on the key management appliance. 9. Click Next.
18 FIGURE 171 Specify Master Key File Name dialog box 10. Enter a file name, or browse to the desired location. 11. Enter the passphrase, which is required for restoring the master key. The passphrase can be between eight and 40 characters, and any character is allowed. 12. Re-type the passphrase for verification.
18 13. Click Next. The Confirm Configuration panel displays the encryption group name and switch public key certificate file name you specified, shown in Figure 172. FIGURE 172 Confirm Configuration dialog box 14. Click Next to confirm the displayed information. The Configuration Status displays, as shown in Figure 173. The configuration status steps vary slightly depending on the key vault type. • A progress indicator shows that a configuration step is in progress.
18 FIGURE 173 Configuration Status dialog box The Management application sends API commands to verify the switch configuration. The CLI commands are detailed in the Fabric OS Encryption Administrator’s Guide, “Key vault configuration.” • Initialize the switch If the switch is not already in the initiated state, the Management application performs the cryptocfg --initnode command.
18 • Create a new master key The Management application checks for a new master key. New master keys are generated from the Encryption Group Properties dialog box, Security tab. See “Creating a new master key” on page 531 for more information. • Save the switch’s public key certificate to a file The Management application saves the KAC certificate into the specified file. • Back up the master key to a file The Management application saves the master key into the specified file.
18 Adding a switch to an encryption group The setup wizard allows you to either create a new encryption group, or add an encryption switch to an existing encryption group. Use the following procedure to add a switch to an encryption group. 1. Select Configure > Encryption from the menu bar. The Encryption Center dialog box displays. 2. Select the switch to be to be added to the group. The switch must not already be in an encryption group. 3.
18 FIGURE 175 Add Switch to Existing Encryption Group dialog box 5. Select the group to which you want to add the switch, and click Next. The Specify Public Key Certificate Filename panel displays. FIGURE 176 Add switch to an encryption group - Specify Public Key Certificate filename dialog box 6. Specify the name of the file where you want to store the public key certificate that is used to authenticate connections to the key vault, and click Next.
18 FIGURE 177 Add switch to an encryption group - Confirm Configuration dialog box 7. Click Next to confirm the displayed information. The Configuration Status displays. • A progress indicator shows that a configuration step is in progress. A green check mark indicates successful completion of all steps for that Configuration Item. A red stop sign indicates a failed step. • All Configuration Items have green check marks if the configuration is successful.
18 8. Note Important Next Steps! below this message, and click Next. Instructions for installing public key certificates for the encryption switch are displayed. These instructions are specific to the key vault type. Copy or print these instructions. FIGURE 179 Add switch to an encryption group - Next Steps dialog box 9. Click Finish to exit the Configure Switch Encryption wizard.
18 FIGURE 180 Engine Operations tab 2. Select the engine you want to replace in the Engine list. 3. Select the engine you want to use as the replacement in the Replacement list. 4. Click Replace. All containers hosted by the current engine (Engine list) are replaced by the new engine (Replacement list). Creating high availability (HA) clusters A high availability (HA) cluster is a group of exactly two encryption engines.
18 4. Select an available encryption engine, and a destination HA cluster under High-Availability Clusters. Select New HA Cluster if you are creating a new cluster. 5. Click the right arrow to add the encryption engine to the selected HA cluster. FIGURE 181 HA Clusters tab NOTE If you are creating a new HA cluster, a dialog box displays requesting a name for the new HA cluster. HA Cluster names can have up to 31 characters. Letters, digits, and underscores are allowed.
18 Swapping engines in an HA cluster Swapping engines is useful when replacing hardware. Swapping engines is different from removing an engine and adding another because when you swap engines, the configured targets on the former HA cluster member are moved to the new HA cluster member. To swap engines, select one engine from the right tree (see Figure 181) and one unclustered engine from the list on the left, and click the double-arrow button. NOTE The two engines being swapped must be in the same fabric.
18 Adding encryption targets Adding an encryption target maps storage devices and hosts to virtual targets and virtual initiators within the encryption switch. NOTE It is recommended that you zone the host and target together before configuring them for encryption. If the host and target are not already zoned, you can still configure them for encryption, but afterward you will need to zone the host and target together, and then click the Commit button to commit the changes.
18 5. Click Next to begin. The Select Encryption Engine dialog box displays. The list of engines depends on the scope being viewed. • If the Targets dialog box is showing all targets in an encryption group, the list includes all engines in the group. • If the Targets dialog box is showing all targets for a switch, the list includes all encryption engines for the switch. • If the Targets dialog box is showing targets for a single encryption engine, the list contains only that engine.
18 6. Select the encryption engine (blade or switch) you want to configure, and click Next. The Select Target panel displays. This panel lists all target ports and target nodes in the same fabric as the encryption engine. The Select Target list does not show targets that are already configured in an encryption group. There are two available methods for selecting targets: select from the list of known targets or manually enter the port and node WWNs. FIGURE 184 Select Target dialog box 508 a.
18 7. Click Next. The Select Hosts panel displays. This panel lists all hosts in the same fabric as the encryption engine. There are two available methods for selecting hosts: select from a list of known hosts or manually enter the port and node world wide names. FIGURE 185 Select Hosts dialog box a. Select a maximum of 1024 hosts from the Host Ports in Fabric list, and click the right arrow to move the host to the Selected Hosts list.
18 FIGURE 186 Name Container dialog box 10. Click Next. The Confirmation panel displays.
18 11. Click Next to confirm the displayed information. The Configuration Status displays the target and host that are configured in the target container, as well as the virtual targets (VT) and virtual initiators (VI). NOTE If you can view the VI/VT Port WWNs and VI/VT Node WWNs, the container has been successfully added to the switch. FIGURE 188 Configuration Status dialog box 12. Review the configuration. If you want to save a copy of the instructions, click the Copy to Clipboard button.
18 13. Click Next to confirm the configuration. The Important Instructions dialog box displays. FIGURE 189 Important Instructions dialog box 14. Review the instructions about post-configuration tasks you must complete after you close the wizard. 15. Click Finish to exit the Configure Storage Encryption wizard.
18 Configuring hosts for encryption targets Use the Encryption Target Hosts dialog box to edit (add or remove) hosts for an encrypted target. NOTE Hosts are normally selected as part of the Configure Storage Encryption wizard but you can also edit hosts later using the Encryption Target Hosts dialog box. 1. Select Configure > Encryption from the menu bar. The Encryption Center dialog box displays. 2. Select the encryption group, switch, or encryption engine containing the storage device to be configured.
18 Adding target disk LUNs for encryption You can add a new path to an existing disk LUN or add a new LUN and path by launching the Add New Path wizard. Take the following steps to launch the Add New Path wizard. 1. Select Configure > Encryption. The Encryption Center dialog box displays. 2. Right-click a group, switch, or encryption engine or select a group, switch, or encryption engine from the Encryption Devices table and select Disk LUNs. The Encryption Disk LUN view displays (Figure 191).
18 The Select Initiator Port dialog box displays. 6. Select the initiator port from the Initiator Port list. 7. Click Next. LUN discovery is launched, and a progress bar displays. There are four possible outcomes: - A message displays indicating No LUNs are discovered. Click OK to dismiss the message and exit the wizard. - A message displays indicating LUNs are discovered, but are already configured. Click OK to dismiss the message and exit the wizard.
18 Remote replication LUNs The Symmetrix Remote Data Facility (SRDF) transmits data that is being written to a local Symmetrix array to a remote symmetrix array. The replicated data facilitates a fast switchover to the remote site for data recovery. SRDF supports the following methods of data replication: • Synchronous Replication provides real-time mirroring of data between the source Symmetrix and the target Symmetrix systems.
18 FIGURE 194 Basic SRDF configuration with Brocade encryption switches Metadata requirements and remote replication When the metadata and key ID are written, the primary metadata on blocks 1 to 16 is compressed and encrypted. However, there are scenarios where these blocks are not compressible, and the metadata is not written to the media. If blocks 1 to 16 are not compressible on local source device and metadata is not written, obtaining the correct DEK for the remote target device becomes problematic.
18 • The New LUN option is used only if an RKM key vault is configured for the encryption group. • The New LUN option can be used only if replication is enabled for the encryption group. • If the local LUN contains host data, configuring it with the New LUN option would cause the data on the last 3 blocks of the LUN to be lost. Before using the New LUN option, you must migrate the contents of the LUN to another LUN that is larger by at least 3 blocks.
18 Adding Target Tape LUNs for encryption You configure a Crypto LUN by adding the LUN to the CryptoTarget container and enabling the encryption property on the Crypto LUN. You must add LUNs manually. After you add the LUNs, you must specify the encryption settings. When configuring a LUN with multiple paths, the same LUN policies must be configured on all the LUN’s paths.
18 8. Select the desired encryption mode. • If you change a LUN policy from Native Encryption or DF-Compatible Encryption to Clear Text, you disable encryption. • The LUNs of the target which are not enabled for encryption must still be added to the CryptoTarget container with the Clear Text encryption mode option. NOTE The Re-keying interval can only be changed for disk LUNs.
18 9. Select target port B, click LUNs, then click Add. Select the LUNs to be encrypted and the encryption policies for the LUNs, making sure that the encryption policies match the policies specified in the other path. 10. Click Commit to make the LUN configuration changes effective in both paths simultaneously. The Management application does not automatically commit LUN configuration changes.
18 To rebalance an encryption engine, do the following. 1. Select Configure > Encryption from the menu bar. The Encryption Center dialog box displays. 2. Select an encryption engine and select Engine > Re-Balance from the menu bar, or right click on the encryption engine, and select Re-Balance. A warning message displays, cautioning you about the potential disruption of disk and tape I/O, and telling you that the operation may take several minutes. 3. Click Yes to begin re-balancing.
18 Master key actions Master key actions are as follows: • Backup master key, which is enabled any time a master key exists. • Restore master key, which is enabled when no master key exists or the previous master key has been backed up. • Create new master key, which is enabled when no master key exists or the previous master key has been backed up. Reasons master keys can be disabled Master key actions are disabled if unavailable.
18 4. Select Backup Master Key as the Master Key Action. The Master Key Backup dialog box displays, but only if the master key has already been generated. FIGURE 195 Backup Destination (to file) dialog box 5. Select File as the Backup Destination. 6. Enter a file name, or browse to the desired location. 7. Enter the passphrase, which is required for restoring the master key. The passphrase can be between eight and 40 characters, and any character is allowed. 8. Re-type the passphrase for verification. 9.
18 Saving a master key to a key vault Use the following procedure to save the master key to a key vault. 1. Select Configure > Encryption from the menu bar. The Encryption Center dialog box displays. 2. Select an encryption group from the tree, and click Properties. 3. Select the Security tab. 4. Select Backup Master Key as the Master Key Action. The Backup Master Key for Encryption Group dialog box displays. FIGURE 196 Backup Destination (to key vault) dialog box 5.
18 Saving a master key to a smart card set A card reader must be attached to the SAN Management application PC to complete this procedure. Recovery cards can only be written once to back up a single master key. Each master key backup operation requires a new set of previously unused smart cards. NOTE Windows operating systems do not require smart card drivers to be installed separately; the driver is bundled with the operating system.
18 FIGURE 197 Backup Destination (to smart cards) dialog box 5. Select A Recovery Set of Smart Cards as the Backup Destination. 6. Enter the recovery card set size. 7. Insert the first blank card and wait for the card serial number to appear. 8. Run the additional cards needed for the set through the reader. As you read each card, the card ID displays in the Card Serial# field. Be sure to wait for the ID to appear. 9.
18 Restoring a master key from a file Use the following procedure to restore the master key from a file. 1. Select Configure > Encryption from the menu bar. The Encryption Center dialog box displays. 2. Select an encryption group from the tree, and click Properties. 3. Select the Security tab. 4. Select Restore Master Key as the Master Key Action. The Restore Master Key for Encryption Group dialog box displays. FIGURE 198 Select a Master Key to Restore (from file) dialog box 5.
18 Restoring a master key from a key vault Use the following procedure to restore the master key from a key vault. 1. Select Configure > Encryption from the menu bar. The Encryption Center dialog box displays. 2. Select an encryption group from the tree, and click Properties. 3. Select the Security tab. 4. Select Restore Master Key as the Master Key Action. The Restore Master Key for Encryption Group dialog box displays. FIGURE 199 Select a Master Key to Restore (from key vault) dialog box 5.
18 Restoring a master key from a smart card set A card reader must be attached to the SAN Management application PC to complete this procedure. Use the following procedure to restore the master key from a set of smart cards. 1. Select Configure > Encryption from the menu bar. The Encryption Center dialog box displays. 2. Select an encryption group from the tree, and click Properties. 3. Select the Security tab. 4. Select Restore Master Key as the Master Key Action.
18 10. Insert the next card, and repeat step 8 and step 9. 11. Continue until all the cards in the set have been read. 12. Click OK. Creating a new master key Though it is generally not necessary to create a new master key, you may be required to create one due to circumstances such as the following: • The previous master key has been compromised. • Corporate policy might require a new master key every year for security purposes.
18 Zeroizing an encryption engine Zeroizing is the process of erasing all data encryption keys and other sensitive encryption information in an encryption engine. You can zeroize an encryption engine manually to protect encryption keys. No data is lost because the data encryption keys for the encryption targets are stored in the key vault. Zeroizing has the following effects: • All copies of data encryption keys kept in the encryption switch or encryption blade are erased.
18 A confirmation dialog box describing consequences and actions required to recover launches. 4. Click YES to zeroize the encryption engine. Encryption Targets dialog box The Encryption Targets dialog box enables you to send outbound data that you want to store as ciphertext to an encryption device. The encryption target acts as a virtual target when receiving data from a host, and as a virtual initiator when writing the encrypted data to storage.
18 FIGURE 202 Encryption Targets dialog box TABLE 29 Feature Description Add button Launches the Storage Encryption Setup Wizard, which enables you to configure a new target for encryption. It is the first step in configuring encryption for a storage device. It is recommended that you zone the host and target together before you add container information. • Note: If the group is in OK-Converged mode, the group leader can communicate with all members.
18 TABLE 29 Feature Description Hosts button Launches the Encryption Target Hosts dialog box, where you can configure hosts to access the selected encryption target. LUNs button Launches the Encryption Target LUNs dialog box, where you can display existing LUNs and add new LUNs. The button is enabled only if there are hosts associated with the targets. Commit button Commits LUN changes, including adding, removing, or modifying disk or tape LUNs.
18 Disk device decommissioning A disk device needs to be decommissioned when any of the following occur: • The storage lease expires for an array, and devices must be returned or exchanged. • Storage is reprovisioned for movement between departments. • An array or device is removed from service. In all cases, all data on the disk media must be rendered inaccessible. Device decommissioning deletes all information that could be used to recover the data.
18 Displaying and deleting decommissioned key IDs When disk LUNs are decommissioned, the process includes the disabling of the key record in the key vault and indicating that the key has been decommissioned. These decommissioned keys are still stored on the switch. You can display them, copy them, and delete them as an additional security measure. 1. Select Configure > Encryption from the menu bar. The Encryption Center dialog box displays. 2. Right click on the switch, and select Decommissioned keyids.
18 FIGURE 203 Encryption Properties dialog box • • • • Switch Properties table - the properties associated with the selected switch. Name - the name of the selected switch. Node WWN - the world wide name of the node. Switch Status - the health status of the switch. Possible values are Healthy, Marginal, Down, Unknown, Unmonitored, and Unreachable. • Switch Membership Status - the alert or informational message description which details the health status of the switch.
18 • Domain ID - the domain ID of the selected switch. • Firmware Version - the current encryption firmware on the switch. • Primary Key Vault Link Key Status - the possible statuses are as follows: - Not Used – the key vault type is not LKM. - No Link Key – no access request was sent to an LKM yet, or a previous request was not accepted. - Waiting for LKM approval – a request was sent to LKM and is waiting for the LKM administrator’s approval.
18 • HA Cluster Name - the name of the HA cluster (for example, Cluster1), if in an HA configuration. The name can have a maximum of 31 characters. Only letters, digits, and underscores are allowed. • Media Type - the media type of the encryption engine. Possible values are Disk and Tape. • Re-Balance Recommended - A value of Yes or No indicating whether or not LUN re-balancing is recommended for an encryption engine that is hosting both disk and tape LUNs.
18 1. Find the Set State To entry under Encryption Engine Properties. 2. Click the field and select Enabled. 3. Click OK. Disabling the encryption engine state from Properties To disable the encryption engine, complete the following steps. 1. Find the Set State To entry under Encryption Engine Properties. 2. Click the field and select Disabled. 3. Click OK.
18 Viewing and editing group properties To view encryption group properties, complete the following steps. 1. Select Configure > Encryption. The Encryption Center dialog box displays. 2. If groups are not visible in the Encryption Devices table, select View > Groups from the menu bar. The encryption groups display in the Encryption Devices table. 3. Select a group from the Encryption Devices table, and select Group > Properties from the menu bar, or right-click the group and select Properties.
18 General tab The properties displayed in the General tab are described below. • Encryption group name - the name of the encryption group. • Group status - the status of the encryption group, which can be OK-Converged or Degraded. Degraded means the group leader cannot contact all of the configured group members. • Deployment mode - the group’s deployment mode, which is transparent. • Failback mode - The group’s failback mode, which can be automatic or manual.
18 Members tab Remove button You can click the Remove button to remove a selected switch or an encryption group from the encryption group table. • You cannot remove the group leader unless it is the only switch in the group. If you remove the group leader, the Management application also removes the HA cluster, the target container, and the tape pool (if configured) that are associated with the switch.
18 FIGURE 205 Removal of switch warning Figure 206 shows the warning message that displays if you click Remove to remove an encryption group.
18 Security tab The Security tab (Figure 207) displays the status of the master key for the encryption group. NOTE You must enable encryption engines before you back up or restore master keys. Master key actions are as follows: • Create a new master key, which is enabled when no master key exists or the previous master key has been backed up. • Back up a master key, which is enabled any time a master key exists.
18 HA Clusters tab HA clusters are groups of encryption engines that provide high availability features. If one of the engines in the group fails or becomes unreachable, the other cluster member takes over the encryption and decryption tasks of the failed encryption engine. An HA cluster consists of exactly two encryption engines. See “Creating high availability (HA) clusters” on page 503.
18 Link Keys tab Connections between a switch and an NetApp LKM key vault require a shared link key. Link keys are used only with LKM key vaults. They are used to protect data encryption keys in transit to and from the key vault. There is a separate link key for each key vault for each switch. The link keys are configured for a switch but are stored in the encryption engines, and all the encryption engines in a group share the same link keys.
18 Tape Pools tab Tape pools are managed from the Tape Pools tab. Figure 209 displays the tape pools tab. FIGURE 209 Encryption Group Properties - Tape Pools tab • If you want to remove a tape pool, select one or more tape pools in the list and click Remove. • To modify the tape pool, remove the entry and add a new tape pool. See “Adding tape pools” on page 550 for more information. Tape pools overview Tape cartridges and volumes may be organized into a tape pool (a collection of tape media).
18 Adding tape pools A tape pool can be identified by either a name or a number, but not both. Tape pool names and numbers must be unique within the encryption group. When a new encryption group is created, any existing tape pools in the switch are removed and must be added. 1. Select Configure > Encryption from the menu bar. The Encryption Center dialog box displays. 2. If groups are not visible in the Encryption Devices table, select View > Groups from the menu bar.
18 6. Select the Encryption Mode. Choices include Clear Text, DF-Compatible Encryption, and Native Encryption. DF-Compatible Encryption is valid only when LKM is the key vault. The Key Lifespan (days) field is editable only if the tape pool is encrypted. If Clear Text is selected as the encryption mode, the key lifespan is disabled. NOTE You cannot change the encryption mode after the tape pool I/O begins. DF-compatible encryption requires a DF-compatible encryption license to be present on the switch.
18 552 DCFM Professional Plus User Manual 53-1001774-01
Chapter 19 Virtual Fabrics In this chapter • Virtual Fabrics overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 553 • Virtual Fabrics requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 554 • Configuring Virtual Fabrics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
19 TABLE 32 Virtual Fabrics terms Term Definition Physical chassis The physical switch or chassis from which you create logical switches and fabrics. Logical switch A collection of zero or more ports that act as a single Fibre Channel (FC) switch. When Virtual Fabrics is enabled on the chassis, there is always at least one logical switch: the default logical switch. You must assign each logical switch (default or general) in the same chassis to a different logical fabric.
19 Table 33 lists the Virtual Fabric-capable physical chassis and the number of logical switches allowed for each of those physical chassis. TABLE 33 Maximum number of logical switches per chassis Physical chassis Number of logical switches allowed 40-port, 8 Gbps FC Switch 3 80-port, 8 Gbps FC Switch 4 384-port Backbone Chassis 8 192-port Backbone Chassis 8 For the 40-port, 8 Gbps FC Switch and the 80-port, 8 Gbps FC Switch, any port can be assigned to any logical switch.
19 This procedure describes the general steps you take to enable the Virtual Fabrics feature and configure logical fabrics. The logical fabrics in this example span multiple physical chassis, and the logical switches in each fabric communicate using an XISL in the base fabric. 1. Enable Virtual Fabrics in each physical chassis. See “Enabling Virtual Fabrics on a discovered device” on page 556 for instructions. 2. Set up base switches in each physical chassis: a.
19 1. Right-click the physical chassis in the topology and select Enable Virtual Fabric. For a list of physical chassis that are Virtual Fabrics-capable, refer to “Virtual Fabrics requirements” on page 554. 2. Click OK on the warning message. Note that all ports are placed in the default logical switch and any EX_ports are persistently disabled.
19 This assigns the new logical switch to a logical fabric. If the logical fabric does not exist, this creates a new logical fabric as well as assigning the new logical switch. 7. (Optional) Clear the Base Fabric for Transport check box to configure the switch to not use XISLs.
19 The Logical Switch Change Confirmation and Status dialog box displays with a list of all changes you made in the Logical Switches dialog box. NOTE Ports are disabled before moving from one logical switch to another. 19. Select the Re-Enable ports after moving them check box. 20. (Optional) Select the Unbind Port Addresses while moving them check box. 21. Click Start to send these changes to the affected chassis. NOTE Most changes to logical switches will disrupt data traffic in the fabric.
19 1. Select a switch on the Product List or Connectivity Map and select Configure > Logical Switches. The Logical Switches dialog box displays. 2. Select the physical chassis from which you want to assign ports in the Chassis list. 3. Select the ports you want to include in the logical switch from the Ports table. 4. Right-click anywhere in the Existing Logical Switches table and select Table > Expand All. 5. Select the logical switch in the Existing Logical Switches table. 6. Click the right arrow button.
19 7. (Optional) Perform the following steps to assign the ports to a logical switch other than the default logical switch: a. Select the destination logical switch in the Existing Logical Switches table. b. Click the right arrow button. The ports display in the selected logical switch node in the Existing Logical Switches table. 8. Click OK on the Logical Switches dialog box.
19 NOTE Most changes to logical switches will disrupt data traffic in the fabric. The status of each change is displayed in the Status column and Status area in the dialog box. 9. When the changes are complete, click Close. Configuring fabric-wide parameters for a logical fabric When you create a logical switch, you must assign it to a fabric and configure fabric-wide parameters. All the switches in a fabric must have the same fabric-wide settings.
19 All of the logical fabric templates have the same name, “NewFabric”. You can differentiate among the templates by the FID number. You can now create logical switches using the fabric-wide settings in the logical fabric template. To assign logical switches, refer to “Creating a logical switch or base switch” on page 557. NOTE When you close the Logical Switches dialog box, the logical fabric templates are automatically deleted.
19 1. Select a switch on the Product List or Connectivity Map and select Configure > Logical Switches. The Logical Switches dialog box displays. 2. Right-click anywhere in the Existing Logical Switches table and select Table > Expand All. 3. Select the logical switch you want to move to another logical fabric. 4. Click Edit. The Edit Properties dialog box displays. 5. Change the FID in the Logical Fabric ID field. 6. Click OK on the Edit Properties dialog box.
19 3. Select the logical switch you want to change to a base switch. 4. Click Edit. The Edit Properties dialog box displays. 5. Clear the Base Fabric for Transport check box. This check box is applicable only to logical switches that are not base switches. 6. Select the Base Switch check box. 7. Click OK on the Edit Properties dialog box. The Base Switch column in the Existing Logical Switches table now displays Yes for the logical switch. 8. Click OK on the Logical Switches dialog box.
19 566 DCFM Professional Plus User Manual 53-1001774-01
Chapter 20 Zoning In this chapter • Zoning overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Zoning configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • LSAN zoning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Traffic isolation zoning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Zoning administration . . . .
20 • QoS zones Assign high or low priority to designated traffic flows. Quality of Service (QoS) zones are normal zones with additional QoS attributes that you select when you create the zone. • Traffic Isolation zones (TI zones) Isolate inter-switch traffic to a specific, dedicated path through the fabric. See “Traffic isolation zoning” on page 594 for more information. Online zoning Online zoning allows you to do the following: • • • • • • View both defined and active zone information in the fabric.
20 Accessing zoning Most of the zoning tasks are performed from the Zoning dialog box. You can access the Zoning dialog box from the main screen of the Management application using any of the following methods: • • • • Select Configure > Zoning > Fabric. Click the Zoning icon on the toolbar. Right-click a port, switch, switch group, or fabric in the device list and select Zoning. Right-click a port, switch, switch group, or fabric in the Connectivity Map and select Zoning.
20 TABLE 35 .
20 The supported maximum zone database size is 1 MB. Configuring zoning for the SAN The following procedure provides an overview of the steps you must perform to configure zoning for the SAN. Note that for any zoning-related procedure, changes to a zone database are not saved until you click OK or Apply on the Zoning dialog box. If you click Cancel or the close button (X), no changes are saved. 1. Select Configure > Zoning > Fabric. The Zoning dialog box displays. 2.
20 This identifies the target entity for all subsequent zoning actions and displays the zoning database for the selected entity. 4. Click New Zone. A new zone displays in the Zones list. 5. Type the desired name for the zone. For zone name requirements and limitations, refer to “Zoning naming conventions” on page 569. 6. (Optional—Fabric OS only) Set the QoS for the zone by right-clicking the zone and selecting QoS > Priority_Level (High, Medium, or Low).
20 Depending on what type of zone you selected, the following information is included in the zone properties: • Zone Name—The name of the zone. • Zone Configs Containing This Zone—The number of zone configurations to which this zone belongs. • • • • • Total Zone Members—The number of zone members in the selected zone. Number of Aliases—The number of aliases in this zone. Zone Members Contained by Aliases—The number of zone members in the selected alias.
20 A message may display informing you that one or some of the selected potential members cannot be zoned. Click OK to close the message box. Reconsider your selections and make corrections as appropriate. 8. For offline zone databases only, complete the following steps to save the zone configuration into the switch from the offline zone database: a. Select Save to Switch from the Zone DB Operation list. b. Click Yes on the confirmation message.
20 If you enter a WWN that has been used by a discovered device, a message displays informing you of this and instructing you to enter a port WWN. Click OK to close the message box and enter an appropriate WWN. c. (Optional) Click the Assign Name check box and enter a name in the field. If a name was previously assigned, the name appears in the field and a message displays asking whether you want to overwrite the existing name.
20 a. Select the Existing Switch Port Name option. b. Select a name from the list. OR Create a new member by domain and port index by choosing one of the following options: • Select the Domain, Port Index (decimal) option and enter domain and port values in the fields. • Select the Domain, Port Index (hex) option and enter domain and port values in the fields. 8. Click OK to save your changes and close the Add Zone Member dialog box.
20 7. Add the new member by alias name by completing the following steps. a. Select the Existing Alias option. b. Select an alias from the list. OR Create a new alias by completing the following steps. a. Select the New Alias option. b. Enter a name in the New Alias field. c. Assign the alias by choosing one of the following options: • Select the WWN option and enter the WWN in the field.
20 4. Select the zoning database you want from the Zone DB list. 5. Click Zoning Policies. The Zoning Policies dialog box displays. NOTE The format and content of this dialog box vary slightly depending on Interop Mode, the target selected in the Zoning Scope list, and whether safe zoning mode is enabled. If safe zoning mode is enabled, the Default Zone button is disabled. If you want to enable the default zone, you must disable the safe zoning mode. 6.
20 7. Click OK to apply your changes and close the Zoning Policies dialog box. 8. Click OK or Apply on the Zoning dialog box to save your changes. Creating a zone alias An alias is a logical group of port index numbers and WWNs. Specifying groups of ports or devices as an alias makes zone configuration easier, by enabling you to configure zones using an alias rather than inputting a long string of individual members.
20 The Edit Alias dialog box displays. 6. Add members to the alias by completing the following steps. 7. a. Select WWN or Domain, Port Index to choose how to display the objects in the Potential Members list. b. Show all discovered fabrics in the Potential Members list by right-clicking in the Potential Members list and selecting Expand All. c. Select one or more members that you want to add to the alias in the Potential Members list.
20 The Export Alias dialog box displays. 5. Browse to the location to which you want to export the zone alias data. 6. Enter a name for the export file in the File Name field. 7. Click Export Alias. 8. Click OK or Apply on the Zoning dialog box to save your changes. Renaming a zone alias 1. Select Configure > Zoning > Fabric. The Zoning dialog box displays. 2. Click the Zone DB tab if that tab is not automatically displayed. 3. Select Alias from the Type list. 4.
20 A message displays informing you that any zones or zone configurations you have changed will be saved in the zone database, and warning you to make sure no other user is making changes to the same areas. Viewing zone configuration properties 1. Select Configure > Zoning > Fabric. The Zoning dialog box displays. 2. Click the Zone DB tab if that tab is not automatically displayed. 3. Select an FC fabric from the Potential Members list.
20 7. Click OK or Apply to save your changes. A message displays informing you that any zones or zone configurations you have changed will be saved in the zone database, and warning you to make sure no other user is making changes to the same areas. Activating a zone configuration For FC fabrics and router fabrics, when a zone configuration is active, its members can communicate with one another. Only one zone configuration can be active at any given time.
20 2. Click the Zone DB tab if that tab is not automatically displayed. 3. Select an FC fabric from the Zoning Scope list. This identifies the target entity for all subsequent zoning actions and displays the zoning database for the selected entity. 4. Select the zone configuration you want to activate in the Zone Configs list. 5. Click Activate. The Management application begins performing various checks.
20 When you click Yes, a busy window displays indicating the activation is in progress. A status field informs you whether the activation succeeded or failed. When it succeeds, icons for the active zone configuration and its zones display green. When it fails, the message includes the reason for the failure. 8. Click OK to continue. The Activate Zone Config dialog box is closed and the Zone DB tab displays. 9. Click OK.
20 1. Select Configure > Zoning > Fabric. The Zoning dialog box displays. 2. Click the Zone DB tab if that tab is not automatically displayed. 3. Select a zone database from the Zone DB list. 4. Select Save As from the Zone DB Operation list. The Save Zone DB As dialog box displays. 5. Enter a name for the database in the Zone DB Name field. 6. Click OK. 7. Select an FC fabric from the Zoning Scope list.
20 A message displays informing you that refresh will overwrite the selected database. Click Yes to continue. 5. Click OK. A message displays informing you that any zones or zone configurations you have changed will be saved in the zone database, and warning you to make sure no other user is making changes to the same areas.
20 5. Set the display for the database areas by selecting one of the following from the Comparison View list: • Storage-to-Host Connectivity—Displays only storage and host devices. • Host-to-Storage Connectivity—Displays only host and storage devices. • Full (Zone Configs, Zones, Aliases)—Displays all zone configurations, zones, and aliases. 6. Set the level of detail for the database areas by selecting one of the following options from the Tree Level list.
20 Note that if a zone is removed from a zone configuration, it is removed only from that single zone configuration. However, if the zone is removed from the list of zones, it is removed from all zone configurations. 15. Click Save As to save the editable zone database in the offline repository. Saving a zone database to a switch 1. Select Configure > Zoning > Fabric. The Zoning dialog box displays. 2. Select a zone database from the Zone DB list. 3. Select Save to Switch from the Zone DB Operation list.
20 4. Browse to the zone database file (.xml format). 5. Click Import Zone DB. 6. Click OK to save your work and close the Zoning dialog box. Rolling back changes to the offline zone database Use this procedure to reverse changes made to an offline zone database. 1. Select Configure > Zoning > Fabric. The Zoning dialog box displays. 2. Select the zone database you want to roll back from the Zone DB list. You must select an offline zone database that has a value in the Last Saved to Fabric column.
20 NOTE You cannot add an LSAN zone to a zone configuration. 7. Click Activate. The Activate LSAN Zones dialog box displays. 8. Review the information in this dialog box. 9. Click OK to activate the LSAN zones and close the dialog box. A message box displays informing you that the zones you change will be saved in the zone database and asking whether you want to proceed. Click Yes to confirm the activation, or No to cancel the activation.
20 A message box displays informing you that the zones you change will be saved in the zone database and asking whether you want to proceed. Click Yes to confirm the activation, or No to cancel the activation. When you click Yes, a busy window displays indicating the activation is in progress. A status field informs you whether the activation succeeded or failed. When it succeeds, icons for the active zone configuration and its zones display green.
20 11. Click OK to close the dialog box. Creating a new member in an LSAN zone Use this procedure to add a member to an LSAN zone when the member is not listed in the Potential Members list of the Zone DB tab. For instructions to add a member to a zone when the member is listed in the Potential Members list, refer to the procedure “Adding members to the LSAN zone” on page 592. 1. Select a backbone fabric from the Connectivity Map or Product List. 2. Select Configure > Zoning > LSAN Zoning (Device Sharing).
20 10. Click OK to continue. All LSAN zones are activated on the selected fabrics and saved to the Zone DB. 11. Click OK to close the dialog box. Activating LSAN zones 1. Select a backbone fabric from the Connectivity Map or Product List. 2. Select Configure > Zoning > LSAN Zoning (Device Sharing). The Zone DB tab of the Zoning dialog box displays. 3. Click Activate. The Activate LSAN Zones dialog box displays. 4. Review the information in this dialog box. 5.
20 Enhanced TI zones In Fabric OS 6.4.0 or higher, ports can be in multiple TI zones. Zones with overlapping port members are called enhanced TI zones (ETIZ).
20 3. Select an FC fabric from the Zoning Scope list. This identifies the target entity for all subsequent zoning actions and displays the zoning database for the selected entity. 4. Select Domain, Port Index from the Type list. 5. If you want to show all discovered fabrics in the Potential Members list, right-click in the Potential Members list and select Display All. 6. Create the traffic isolation zones. For specific instructions, refer to “Creating a traffic isolation zone” on page 596. 7.
20 A message displays informing you that any zones you have changed will be saved in the zone database, and warning you to make sure no other user is making changes to the same areas. Adding members to a traffic isolation zone NOTE Traffic isolation zones are configurable only on a Fabric OS device. Use this procedure to add a member to a zone when the member is listed in the Potential Members list of the Zone DB tab. Only ports can be added as members to a traffic isolation zone.
20 Enabling a traffic isolation zone NOTE Traffic isolation zones are configurable only on a Fabric OS device. Use this procedure to enable a traffic isolation zone. When a zone configuration in the same zone database is activated, the enabled TI zones are also activated at that time. Traffic isolation zones are enabled by default when you create them. 1. Select Configure > Zoning > Fabric. The Zoning dialog box displays. 2. Click the Zone DB tab if that tab is not automatically displayed. 3.
20 Enabling failover on a traffic isolation zone NOTE Traffic isolation zones are configurable only on a Fabric OS device. 1. Select Configure > Zoning > Fabric. The Zoning dialog box displays. 2. Click the Zone DB tab if that tab is not automatically displayed. 3. Select an FC fabric from the Zoning Scope list. This identifies the target entity for all subsequent zoning actions and displays the zoning database for the selected entity. 4.
20 4. Right-click the traffic isolation zone you want to disable failover on in the Zones list and clear the Configured Failover check box. 5. Click OK or Apply to save your changes. A message displays informing you that any zones or zone configurations you have changed will be saved in the zone database, and warning you to make sure no other user is making changes to the same areas. Zoning administration This section provides instructions for performing administrative functions with zoning.
20 5. Set the display for the database areas by selecting one of the following from the Comparison View list: • Storage-to-Host Connectivity—Displays only storage and host devices. • Host-to-Storage Connectivity—Displays only host and storage devices. • Full (Zone Configs, Zones, Aliases)—Displays all zone configurations, zones, and aliases. 6. Set the level of detail for the database areas by selecting one of the following options from the Tree Level list.
20 Using the following procedure you can do the following: • Set a different limit for each fabric. • Set limits on some fabrics while allowing other fabrics to have unlimited changes. • Set a limit for fabrics that will be discovered later. NOTE You must have the Zoning Set Edit Limits privilege to perform this task. 1. Select Configure > Zoning > Set Change Limits. The Set Change Limits for Zoning Activation dialog box displays. 2. Click Change Count for the fabric on which you want to set limits.
20 NOTE If you delete something in error, click Cancel on the Zoning dialog box to exit without saving changes since the last operation (Apply or Activate). When you reopen the dialog box, the zone is restored. 6. Click OK or Apply to save your changes. A message displays informing you that any zones or zone configurations you have changed will be saved in the zone database, and warning you to make sure no other user is making changes to the same areas. Deleting a zone alias 1.
20 6. Click OK or Apply to save your changes. A message displays informing you that any zones or zone configurations you have changed will be saved in the zone database, and warning you to make sure no other user is making changes to the same areas.
20 4. Select Clear All from the Zone DB Operation list. 5. Click Yes on the confirmation message. The message box closes and, when successful, the Fabric Zone DB is cleared of all zoning configurations. 6. Click OK to close the Zoning dialog box. Removing all user names from a zone database Use this procedure to remove all user names from the selected offline zone database. 1. Select Configure > Zoning > Fabric. The Zoning dialog box displays. 2. Select an FC fabric from the Zoning Scope list.
20 If you key in a new name, press Enter to save the name. Depending on the characters included in the name you enter, a message may display informing you the name contains characters that are not accepted by some switch vendors, and asking whether you want to proceed. Click Yes to continue, or No to cancel the renaming. (For zone name requirements and limitations, refer to “Zoning naming conventions” on page 569.) 6. Click OK or Apply to save your changes.
20 The duplicated zone configuration or sets display in the Zone Configs list. 5. (Optional) Type a new name for the zone configuration. If you key in a new name, press Enter to save the name. Depending on the characters included in the name you enter, a message may display informing you the name contains characters that are not accepted by some switch vendors, and asking whether you want to proceed. Click Yes to continue, or No to cancel the renaming.
20 4. Select the zone member in the Zones list that you want to find in the Potential Members list. Press SHIFT or CTRL and click each zone to select more than one zone. 5. Click Find < between the Potential Members list and the Zones list. • If the member is found, it is highlighted in the Potential Members list. • If the member is not found, a message displays informing you of this. Click OK to close the message box.
20 • If the zone is not found, a message displays informing you of this. Click OK to close the message box. Listing zone members Use this procedure to identify the zone in the active zone configuration of the fabric to which an individual port belongs and the members of that zone. Note that the procedure is performed from the main view of the Management application. 1. On the product device list of the Management application, expand the list of products to show the ports. 2.
20 Removing a zone from a zone configuration Use the following procedure to remove a zone from a zone configuration. Note that the zone is not deleted; it is only removed from the zone configuration. 1. Select Configure > Zoning > Fabric. The Zoning dialog box displays. 2. Click the Zone DB tab if that tab is not automatically displayed. 3. Select an FC fabric from the Zoning Scope list.
20 7. Click OK or Apply on the Zoning dialog box to save your changes. A message displays informing you that any zones or zone configurations you have changed will be saved in the zone database, and warning you to make sure no other user is making changes to the same areas. Renaming a zone 1. Select Configure > Zoning > Fabric. The Zoning dialog box displays. 2. Click the Zone DB tab if that tab is not automatically displayed. 3. Select an FC fabric from the Zoning Scope list.
20 Depending on the characters included in the name you enter, a message may display informing you the name contains characters that are not accepted by some switch vendors, and asking whether you want to proceed. Click Yes to continue, or No to cancel the renaming and consider your options. 7. Click OK or Apply to save your changes.
20 A message displays informing you that any zones or zone configurations you have changed will be saved in the zone database, and warning you to make sure no other user is making changes to the same areas. Replacing an offline device by WWN The Management application enables you to replace an offline device by WWN from all zones and zone aliases in the selected zone DB. 1. Select Configure > Zoning > Fabric. The Zoning dialog box displays. 2. Select an FC fabric from the Zoning Scope list.
20 3. Select Offline Utility from the Zone DB Operation list. The Offline Device Management dialog box displays. 4. Make sure the Remove column check box, for the offline device you want to replace, is clear. 5. Select Name (default is WWN) in the corresponding Replace Using list. 6. Select the name of the offline device in the corresponding Replace Using list.
Chapter 21 Troubleshooting In this chapter • FC troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • IP troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Client browser troubleshooting. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Fabric tracking troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Launch Client troubleshooting . . . . .
21 Tracing FC routes The Management application enables you to select a source port and a destination port and displays the detailed routing information from the source port or area on the local switch to the destination port or area on another switch. Trace route cannot be performed on the offline devices or virtual devices. NOTE Trace route is only supported on Fabric OS switches running Fabric OS 5.2 or later. To trace routes, complete the following steps. 1.
21 • Reverse Route. This tab shows the path from the destination port to the source port. NOTE This reverse route may sometimes be different from the forward route. • FC Ping. This tab shows the minimum, maximum and average round trip times between the selected device port WWNs and the domain controller. It details whether the selected device port WWNs are zoned or not. It also shows the number of frames sent to the device port, frames rejected, frames timed-out and frames received by the device port. 6.
21 3. Click OK. The following diagnostic tests are performed: • • • • • • Device Status Switch port health status Zone configuration in the fabric LSAN zone configuration in edge fabrics Edge fabric - FC router physical connection status. Active ACL DCC policy check (Fabric OS only) The Device Connectivity Troubleshooting Results dialog box displays. If no problems are found, the diagnostic test is marked with a check mark.
21 4. Click OK. The following checks are performed on the selected fabrics: • Are the selected fabrics configured with an FC Router? • Are the selected fabrics connected to the same backbone fabric? • Is sharing of devices between backbone and edge fabric supported? The Fabric Device Sharing Diagnosis Results dialog box displays with the details of the fabrics selected for diagnosis, the details of the tests performed, the results of the test, as well as short description of the test results. 5.
21 TABLE 37 FCIP IP Ping Response Details Field or Component Description Status Always displays ‘Completed’. If there is a failure, an error message displays instead of the IP Ping Result dialog box. Packets Sent Always displays ‘4. This is not configurable. Packets Received The number of received responses. Packets Lost Equal to the number of packets sent minus the number of packets received. Packet Lost percentage The number of packets lost expressed as a percentage of the packets sent.
21 Tracing IP routes The Management application enables you to select an source and a target and displays the detailed routing information from the source port or area on the local switch to the destination port or area on another switch. Trace route cannot be performed on the offline devices or virtual devices. NOTE Trace route is only supported on Fabric OS devices running Fabric OS 5.2 or later. To trace routes, complete the following steps. 1. Select Configure > IP Troubleshooting > Trace Route.
21 7. Click Close on the IP Traceroute Result dialog box. 8. Click Cancel on the IP Traceroute dialog box. Viewing FCIP tunnel performance NOTE IP Performance is only supported on the 4 Gbps Router, Extension Switch and Encryption Blade running Fabric OS 5.2 or later. NOTE If you run IP Performance over a link also being used for production traffic, it will impact the production traffic performance. To view FCIP tunnel performance, complete the following steps. 1.
21 7. Field/Component Description DELAY The average round trip time to send a packet of data and receive the acknowledgement. PMTU (Path Maximum Transmission Unit) The largest packet size that can be transmitted over the end-to- end path without fragmentation. This value is measured in bytes and includes the IP header and payload. IP Performance tries the configured Fabric OS Jumbo MTU value (anything over 15000, then 1500, then 1260. The value displayed in the table is the largest value that worked.
21 Problem Resolution If you configured an internal FTP server and the Management application server is running IPv6, firmware download is not supported. Choose from one of the following options: • If the Management application is running IPv6 only, configure an external FTP server. • If the Management application is running IPv4 and IPv6, configure IPv4 to be the preferred address.
21 Launch Client troubleshooting The following section states a possible issue and the recommended solution if you are unable to launch the client. Problem Resolution Incorrect (down level) remote client short cut displays in Start menu after Management application upgrade. The remote client link in the Start menu does not automatically upgrade when you upgrade the Management application. To remove the old link and launch the correct remote client version, complete the following steps.
21 Problem Resolution Unable to log into the Client (the application does not launch when you use a valid user name and password and exceptions are thrown in the client side). Use one the following procedures to configure the IP address in the host file. Windows operating systems 1 Log in using the 'Administrator' privilege. 2 Select Start > Run. 3 Type drivers in the Open field and press Enter. 4 Go to the ‘etc’ folder and open the ‘hosts’ file using a text editor.
21 Problem Resolution Duplicate name error. If you configured the Management application to only allow unique names and you try to use a name that already exists in the fabric.
21 Performance troubleshooting The following section states a possible issue and the recommended solution for Performance errors. Problem Resolution An error message with the following text displays: Real Time statistics collection has failed. Please see master log for details. Make sure that the following prerequisites for Performance Monitoring Data collection are met.
21 Problem Resolution An error message with the following text displays: Real Time statistics collection has failed. Please see master log for details. 2 DCFM Professional Plus User Manual 53-1001774-01 To collect data, the SNMP credentials in the Management application and switch must match. SNMP v1 or v3: The community strings entered in the Address Properties dialog box SNMP tab must match the one entered in the switch.
21 Problem Resolution An error message with the following text displays: Real Time statistics collection has failed. Please see master log for details. 3 To collect GigE port and FCIP statistics, you must enable the FCIP-MIB capability.
21 Problem Resolution An error message with the following text displays: Real Time statistics collection has failed. Please see master log for details. 5 To collect data on Virtual Fabric-enabled switches, the Fabric OS user must have access to all Virtual Fabrics. The SNMPv3 user name must be the same as the Fabric OS user name. If the SNMPv3 and Fabric OS user names do not match, data is not collected for the virtual switches with the non-default VF ID.
21 Port Fencing troubleshooting The following section states a possible issue and the recommended solution for Port Fencing errors. TABLE 40 Problem Resolution In a pure M-EOS fabric, fabric level policy information (for example, Port Fencing Link threshold) is stored in database based on the principle switch WWN. Therefore, if you add a switch to the fabric and the new switch becomes the Principle switch, the Management application cannot obtain the policy information and the threshold is not applied.
21 Problem Resolution Unable to launch the SMC on a Windows Vista or Windows 7 system The Windows Vista or Windows 7 system enables the User Access Control (UAC) option by default. When the UAC option is enabled, the SMC cannot launch. If the SMC does not launch, use one of the following options to disable the UAC option: The following are the various ways we can disable UAC in vista: Disable using msconfig by completing the following steps. 1 Select Start > Run.
21 Problem Resolution Unable to launch the SMC on a Windows Vista or Windows 7 system continued Disable using the Group Policy by completing the following steps. You can perform this procedure on you local machine using Local Group Policy editor or for many computers at the same time using the Active Directory-based Group Policy Object (GPO) editor. To disable using the Local Group Policy editor, complete the following steps. 1 On your local Vista computer, select Start > Run. 2 Type gpedit.
21 View All list troubleshooting The following section states a possible issue and the recommended solution for View All list errors. Problem Resolution View All list does not display. The View All list does not display until you discover a fabric. To discover a fabric, refer to “Discovering fabrics” on page 36. View All list does not display and there are discovered fabrics.
21 636 DCFM Professional Plus User Manual 53-1001774-01
Appendix A Application menus In this appendix • Main menus . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 637 • Shortcut menus . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 645 Main menus The menu bar is located at the top of the main window. The following table outlines the many functions available on each menu. Menu Command Command Options Server Menu Users.
A Menu Application menus Command Command Options Manage View. Select to set up the Management application view. Create View. Select to create a new view. Display View. Select to display by View All or by a view you create. Levels. Select to display by All Levels, Products and Ports, Product Only, or Ports Only. Copy View. Select to copy a view. Delete View. Select to delete a view. Edit View. Select to edit a view. Zoom. Select to configure the zoom percentage. Show.
Application menus Menu Command A Command Options IP Address. Select to display the IP Address (IPv4 or IPv6 format) as the product label. Domain ID. Select to display the domain ID as the product label. Port Label. Select to configure which port labels display. Name. Select to display the name as the port label. Port #. Select to display the port number as the port label. Port Address. Select to display the port address as the port label. Port WWN.
A Menu Application menus Command Command Options Save. Select to save device configurations to the repository. Save Running to Startup. Select to save the CEE running configuration to the startup configuration on selected switches. Requires at least one discovered CEE switch. Restore. Select to restore device configurations from the repository. CEE. Select to manage a CEE switch, port, or link aggregation group (LAG). FCoE. Select to manage an FCoE port. Configuration Repository.
Application menus Menu Command A Command Options Fabric Binding. Select to configure whether switches can merge with a selected fabric, which provides security from accidental fabric merges and potential fabric disruption when fabrics become segmented because they cannot merge. Port Fencing. Select to configure port fencing to protect your SAN from repeated operational or security problems experienced by ports. Port Auto Disable.
A Menu Application menus Command Command Options HIstorical Data Collection. Select how to monitor historical data by choosing one of the following options: • Enable SAN Wide • Enable Selected • Disable All End-to-End Monitors. Select to monitor end-to-end connections. Configure Thresholds. Select to monitor thresholds. Clear Counters. Select to clear all port statistics counters. Top Talkers.
Application menus Menu Command A Command Options Event. Select to display errors related to SNMP traps and Client-Server communications. Fabric. Select to display the events related to the selected fabric. FICON. Select to display the FICON events related to the selected device or fabric. Product Status. Select to display operational status changes of managed products. Security. Select to display security information. Syslog. Select to display Syslog events related to the selected device or fabric.
A Menu Application menus Command Command Options License. Select to view or change your License information. About Management_Application_Name. Select to view the application information, such as the company information and release number.
Application menus A Shortcut menus You can use the Management application interface main menu to configure, monitor, and troubleshoot your SAN components. The instructions for using these features are documented in the subsequent chapters of this manual. For each SAN component, you can optionally right-click the component and a shortcut menu displays. The table below details the command options available for each component.
A Application menus Component Menu/Submenu Commands Comments Port Display > Occupied Product Ports UnOccupied Product Ports Attached Ports Switch to Switch Connections Only available from Product List. Collapse or Expand Only available from Connectivity Map Table > Copy 'Fabric_Name' Copy Row Copy Table Export Row Export Table Search Select All Size All Columns To Fit Expand All Collapse All Customize Only available from Product List.
Application menus Component Menu/Submenu Commands A Comments Element Manager > Hardware Ports Admin Router Admin Configuration > Save Save Running to Startup (CEE-capable switch) Restore CEE (CEE-capable switch) FCoE (CEE-capable switch) Schedule Backup Configuration Repository Replicate > Configuration Security Swap Blades Firmware Management Zoning Does not display when switch is in a Core Switch group, Chassis group or Isolated device group, or when it is in Access Gateway mode.
A Application menus Component Menu/Submenu Commands Comments Enable / Disable > Enable Disable Telnet Telnet through Server Configured in Setup Tools. May be more than one item. Setup Tools Product Only enabled when the fabric is tracked, and the product is removed and joins another fabric. Other Ports > Does not display when an Access Gateway mode device is attached to multiple fabrics. Accept Change Only enabled in tracked FC Fabrics.
Application menus Component Menu/Submenu Commands A Comments Events Port Connectivity Port Fencing Web Server Configured in Setup Tools. May be more than one item. Telnet Disabled when the device does not have an IP address assigned or discovered. Telnet through Server Disabled when the device does not have an IP address assigned or discovered. Setup Tools Product Only enabled when the fabric is tracked, and the product is removed and joins another fabric.
A Application menus Component Menu/Submenu Commands Comments Configuration > (Fabric OS only) Save Restore Schedule Backup Configuration Repository Replicate > Configuration Security Swap Blades Firmware Management (Fabric OS only) Events Technical Support > (Fabric OS only) Switch/Host SupportSave Upload Failure Data Capture View Repository Port Display > Occupied Product Ports UnOccupied Product Ports Attached Ports Switch to Switch Connections Only available from Product List.
Application menus Component A Menu/Submenu Commands Comments Emulex Configuration Tool Only available for Emulex devices. Launches with Origin in context for routed device. SANSurfer Only available for Qlogic HBAs. Configured in Setup Tools. May be more than one item. Host Only available in Fabric view for managed HBAs. Setup Tools Show Ports Show Connections Fabric > Fabric1 Fabric2 Only available for HBAs under the Host node.
A Application menus Component Menu/Submenu Commands Comments Table > Copy 'Device_Name Group' Copy Row Copy Table Export Row Export Table Search Select All Size All Columns To Fit Expand All Collapse All Customize Only available from Product List. Properties Router Phantom Domains Accept Change Only available for tracked FC Fabrics. Only enabled when a plus or minus icon is present. Show Connections Displays as disabled because this component does not display in the Connectivity Map.
Application menus Component Menu/Submenu Commands A Comments Enable / Disable > Enable Disable Connected Port Port Display > Occupied Product Ports UnOccupied Product Ports Attached Ports Switch to Switch Connections Only available from Product List. Table > Copy 'Device_Name Group' Copy Row Copy Table Export Row Export Table Search Select All Size All Columns To Fit Expand All Collapse All Customize Only available from Product List. Collapse All Only available from Product List.
A Application menus Component Menu/Submenu Commands Comments Table > Copy 'Device_Name Group' Copy Row Copy Table Export Row Export Table Search Select All Size All Columns To Fit Expand All Collapse All Customize Only available from Product List. Properties HBA Port Servers Does not display for routed devices and discovered Hosts. Performance > Real Time Graphs Only available for occupied, managed ports. Disabled when all ports are offline.
Application menus Component Menu/Submenu Commands Comments Port Display > Occupied Product Ports UnOccupied Product Ports Attached Ports Switch to Switch Connections Only available from Product List. Table > Copy 'Device_Name Group' Copy Row Copy Table Export Row Export Table Search Select All Size All Columns To Fit Expand All Collapse All Customize Only available from Product List. A Properties Giga-Bit Ethernet Port Performance > Real-Time Graph Modify Launches Element Manager.
A Application menus Component Menu/Submenu Commands Comments Properties Trunk Port Display > Occupied Product Ports UnOccupied Product Ports Attached Ports Switch to Switch Connections Only available from Product List. Table > Copy 'Device_Name Group' Copy Row Copy Table Export Row Export Table Search Select All Size All Columns To Fit Expand All Collapse All Customize Only available from Product List.
Application menus Component A Menu/Submenu Commands Comments Table > Copy 'Component' Copy Table Export Table Search Select All Size All Columns To Fit Expand All Collapse All Customize Some form of this shortcut menu is available for all tables in the Management interface.
A 658 Application menus DCFM Professional Plus User Manual 53-1001774-01
Appendix B Call Home Event Tables In this appendix This section provides information about the specific events that display when using Call Home. This information is shown in the following Event Tables. • Call Home Event Table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • # CONSRV Events Table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • # Thermal Event Reason Codes Table . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
B Call Home Event Tables Event Reason Code FRU Code / Event Type Description Severity 201 PWR/HW Power supply DC voltage failure. 3 202 PWR/HW Power supply thermal failure. 3 208 PWR/HW Power supply false shutdown. 3 210 PWR/HW Power supply i2c bus failure. 3 300 FAN/HW A cooling fan propeller has failed. 3 301 FAN/HW A cooling fan propeller has failed (two failed propellers). 3 302 FAN/HW A cooling fan propeller has failed.
B Call Home Event Tables # CONSRV Events Table Event Reason Code FRU Code/Event Type Description Severity 504 DVP/LIM/HW M-EOS: Port module failure. 3 506 DVP/PORT Fibre Channel port failure 3 509 DVP/PORT Fibre Channel path failure. 0 511 LIM/DVP LIM SPP failure. 3 514 DVP/ LIM/PORT SFP/XFP optics failure. 3 517 LIM LIM SPP Offline. 3 530 LIM/DVP LIM Power-up diagnostic failure. 3 536 LIM/DVP Internal Frame Error port anomaly - threshold exceeded.
B Call Home Event Tables # Brocade Events Table Event Reason Code FRU Code/Event Type Description Severity 1009 MS-1009 Error in registered link incident record (RLIR) 4 1402 FW-1402 Flash usage is out of range (Fabric OS version 6.
Appendix User Privileges C In this appendix • About User Privileges. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 663 • About Roles and Access Levels . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 681 About User Privileges The Management application provides the User Administrator with a high level of control over what functions individual users can see and use.
C TABLE 41 User Privileges Privileges and Application Behavior Privilege Description No Privilege Read-Only Read/Write Active Session Management Allows you view active client sessions and disconnect an unwanted user. Disables the Active Sessions command from the Server menu. Enables the Active Sessions command from the Server menu. Disables all commands and functions on the dialog box except the Close and Help. Enables the Active Sessions command from the Server menu.
User Privileges TABLE 41 C Privileges and Application Behavior (Continued) Privilege Description No Privilege Read-Only Read/Write CEE Management Allows you to configure CEE devices. Disables the Switch > CEE command from the Configure menu. Enables the Switch > CEE command from the Configure menu. Disables all commands and functions on the dialog box except the Close, Cancel, and Help. Enables the Switch > CEE command from the Configure menu.
C TABLE 41 User Privileges Privileges and Application Behavior (Continued) Privilege Description No Privilege Read-Only Read/Write Event Management Allows you to define rules with event triggers and actions. Disables the Event Policies menu item. Enables access to the Event Policies menu item and allows existing rules to be selected and viewed. Disables all action buttons on the tab. Enables access to the Event Policies menu item and enables all functions on the tab.
User Privileges TABLE 41 C Privileges and Application Behavior (Continued) Privilege Description No Privilege Read-Only Read/Write Fault Management Allows you to control access to the SNMP Trap Registration and Forwarding dialog box, the Event Storage option of the Options dialog box, the Syslog Registration and Forwarding dialog box, as well as the Export and Clear functions in the Event Log dialog box and the Show and Hide functions in the Customize Columns dialog box.
C TABLE 41 User Privileges Privileges and Application Behavior (Continued) Privilege Description No Privilege Read-Only Read/Write FCIP Management Allows you to configure FCIP tunnels and troubleshooting of IP interfaces (IP performance, IP ping and IP trace route). Disables the Configure > FCIP Tunnel and Configure > IP Troubleshooting commands. Disables the FCIP Tunnel command on the Fabric right-click menu. Enables the Configure > FCIP Tunnel and Configure > IP Troubleshooting commands.
User Privileges TABLE 41 C Privileges and Application Behavior (Continued) Privilege Description No Privilege Read-Only Read/Write High Integrity Fabric For Fabric OS devices, allows you to set Fabric Binding and Insistent Domain IDs. For M-EOS devices, allows you to activate the High Integrity Fabric, which activates Fabric Binding, Switch Binding, Insistent Domain ID, Rerouting Delay, and Domain RSCNs. Disables the High Integrity Fabric command from the Configure menu.
C User Privileges TABLE 41 Privileges and Application Behavior (Continued) Privilege Description No Privilege Read-Only Read/Write LSAN Zoning Allows you to edit and activate LSAN zones for the LSAN fabrics that are available within the Zoning dialog box. Prerequisite: Both the backbone fabrics as well as all directly connected edge fabrics must be added to a resource group and a user with LSAN Zoning privilege must be assigned to this specific resource group.
User Privileges TABLE 41 C Privileges and Application Behavior (Continued) Privilege Description No Privilege Read-Only Read/Write Performance Allows you to configure the performance subsystem, the display of performance graphs, and threshold settings. Disables entire Performance submenu of the Monitor menu as well as the right-click Performance Graph(s) command on ports and switch products. Disables the Port Optics command on the right-click menu.
C TABLE 41 User Privileges Privileges and Application Behavior (Continued) Privilege Description No Privilege Read-Only Read/Write Product Maintenance An Element Manager privilege that enables maintenance functions. Disables the functions described in the Element Manager User Manual for which you do not have rights. Displays the message, “You do not have rights to perform this action.” For Fabric OS devices, the log in dialog box for the switch displays. Same as No Privilege.
User Privileges TABLE 41 C Privileges and Application Behavior (Continued) Privilege Description No Privilege Read-Only Read/Write Report Allows you to generate and view the following reports: • Fabric Ports • Fabric Summary Disables the View command and the Generate command on the Reports menu.
C User Privileges TABLE 41 Privileges and Application Behavior (Continued) Privilege Description No Privilege Read-Only Read/Write Setup Tools Allows you to define and place commands on product icons and in the Tools menu. Disables the Setup Tools command on the Tools menu. Any existing Tools and/or right-click commands already defined or defined by others are available for use; however, you cannot configure new items.
User Privileges TABLE 41 C Privileges and Application Behavior (Continued) Privilege Description No Privilege Read-Only Read/Write Software Configuration Parameters Allows you to configure some of the properties of the client and server of the management application. Disables the Software Configuration Parameters folder and subpages in the Options dialog box. The configuration cannot be viewed.
C TABLE 41 User Privileges Privileges and Application Behavior (Continued) Privilege Description No Privilege Read-Only Read/Write Storage Encryption Key Operation Allows you to configure storage encryption key operation, including selecting storage devices and LUNs, viewing switch, group, or engine properties, viewing storage device encryption properties, initiating manual LUN re-keying, enabling and disabling an engine, zeroizing an engine, restoring a Master Key, and all smart card operations.
User Privileges TABLE 41 C Privileges and Application Behavior (Continued) Privilege Description No Privilege Read-Only Read/Write Storage Encryption Security Allows you to configure storage encryption security, including creating a new encryption group, adding a switch to an existing group, zeroizing an encryption engine, backing up or restoring a master key, and enabling encryption functions after a power cycle. Disables all functions from the dialog box except view.
C TABLE 41 User Privileges Privileges and Application Behavior (Continued) Privilege Description No Privilege Read-Only Read/Write User Management Allows you to create and define users and groups, as well as assign privileges and views to groups. Disables the Users command on the main Server menu and the Users button on the main tool bar.
User Privileges TABLE 41 C Privileges and Application Behavior (Continued) Privilege Description No Privilege Read-Only Read/Write Zoning Offline Allows you to edit the zone database in offline mode and save the zone database to the repository or to the switch. In Zoning dialog box, the Zone DB list includes offline zones; however, if an offline zone is selected, the contents are not loaded into the Zoning dialog box.
C User Privileges TABLE 41 Privileges and Application Behavior (Continued) Privilege Description No Privilege Read-Only Read/Write Zoning Online Allows you to edit any of the fabric zone databases in the available fabrics within the Zoning dialog box from the client side and then save to the switch. In Zoning dialog box, the Zone DB list includes online and offline zones; however, if an online zone is selected, the contents are not loaded into the Zoning dialog box.
User Privileges C About Roles and Access Levels The Management application provides seven pre-configured roles (System Administrator, Security Administrator, Zone Administrator, Operator, Security Officer, Network Administrator, and Host Administrator); however, System Administrators can also create roles manually. Refer to “Creating a user role” on page 327 for instructions. The System Administrator is the only pre-configured role with Read and Write access to all features.
C User Privileges TABLE 42 Features and User Groups Access Levels (Continued) Feature Roles with Read/Write Access Roles with Read-Only Access Performance System Administrator, Host Administrator Operator Port Fencing System Administrator Operator Product Administration System Administrator Product Maintenance System Administrator Product Operation System Administrator, Operator Properties Edit System Administrator, Host Administrator Operator Report System Administrator Operator Ro
Appendix D Sybase and Derby Database Fields In this appendix • Advanced Call Home . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Capability . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Client_view . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Collector . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
D Sybase and Derby Database Fields • Zoning 1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 773 • Zoning 2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 775 Database tables and fields Advanced Call Home NOTE The primary keys are marked by an asterisk (*). TABLE 43 ACH_CALL_CENTER Field Definition Format ID * int NAME TABLE 44 Name of the Call Center.
D Sybase and Derby Database Fields TABLE 47 ACH_EVENT_FILTER_MAP Field Definition Format FILTER_ID * ID of the event filter. int EVENT_ID * Event ID which needs to be associated with the filter. int TABLE 48 Size ACH_EVENT Field Definition ID * Format Size int REASON_CODE Reason code of the event. varchar 256 FRU_CODE FRU code of the event. varchar 256 DESCRIPTION Description of the event. varchar 256 SEVERITY Severity of the event. int TYPE Type of the event.
D Sybase and Derby Database Fields TABLE 52 CARD Field Definition Format ID * Size int CORE_SWITCH_ID * Core switch DB ID. int SLOT_NUMBER The number of the physical slot in the chassis where the blade is plugged in. For fixed blades, SlotNumber is zero. smallint TYPE ID of the blade to identify the type. smallint EQUIPEMNT_TYPE The type of the blade. It is either SW BLADE or CP BLADE. varchar 16 STATE State of the blade, such as ENABLED or DISABLED.
D Sybase and Derby Database Fields TABLE 54 USER_ (Continued) Field Definition Format Size PASSWORD User password. varchar 128 EMAIL User e-mail ID. varchar 1024 NOTIFICATION_ENABLED Flag for e-mail notification. smallint TABLE 55 USER_PREFERENCE Field Definition Format Size USER_NAME * User name whose preferences are saved. It corresponds to user_name in USER_table. varchar 128 CATEGORY * The name for a set of related preferences.
D Sybase and Derby Database Fields TABLE 58 CLIENT_VIEW_MEMBER Field Definition Format CLIENT_VIEW_ID * Foreign key to CLIENT_VIEW table. int FABRIC_ID * Foreign key to FABRIC table. int Definition Format TABLE 59 FABRIC Field ID * Size int SAN_ID Foreign key to SAN table; usually 1 since there is only one SAN. int SEED_SWITCH_WWN WWN of the virtual switch used as seed switch to discover the fabric. char 23 NAME User-assigned fabric name.
D Sybase and Derby Database Fields Collector TABLE 60 FABRIC_CHECKSUM Field Definition Format FABRIC_ID * Fabric ID, foreign key to the FABRIC table. int CHECKSUM_KEY * Type of checksum, e.g. device data or zone data. varchar 32 CHECKSUM Actual checksum value. varchar 16 Size TABLE 61 Size FABRIC_COLLECTION Field Definition Format FABRIC_ID * Fabric ID, foreign key to the FABRIC table. int COLLECTOR_NAME * Name of the collector, e.g.
D Sybase and Derby Database Fields TABLE 63 FABRIC (Continued) Field Definition Format AD_ENVIRONMENT 1 = there are user-defined ADs in this fabric. smallint MANAGED 1 = it is an actively "monitored" fabric; otherwise, it is an "unmonitored" fabric. smallint MANAGEMENT_STATE Bit map to indicate various management indications for the fabric. smallint TRACK_CHANGES 1 = changes (member switches, ISL and devices) in the fabric are tracked.
D Sybase and Derby Database Fields TABLE 66 VIRTUAL_SWITCH_CHECKSUM Field Definition Format VIRTUAL_SWITCH_ID * DB ID of virtual switch. int CHECKSUM_KEY * Checksum key. varchar 32 CHECKSUM Checksum value. varchar 16 Size TABLE 67 Size CORE_SWITCH_CHECKSUM Field Definition Format CORE_SWITCH_ID * DB ID. int CHECKSUM_KEY * Checksum type. varchar 32 CHECKSUM Checksum value.
D Sybase and Derby Database Fields TABLE 69 SECURITY_POLICY Field Definition Format Size VIRTUAL_SWITCH_ID * DB ID of virtual_switch. int POLICY_NUMBER* IPSec Policy Number. The number can range from 1 to 32. smallint POLICY_TYPE* Type of the Policy. The possible values are IKE or IPSec smallint ENCRYPTION_ALGORITHM Encryption Algorithm for the policy.The following are the possible Encryption: NONE,DES,3DES,AES-128,AES-256,AES-CM-128 or AES-CM-256.
D Sybase and Derby Database Fields TABLE 71 FIRMWARE_FILE_DETAIL (Continued) Field Definition Format RELEASE_DATE Release date of the firmware file. timestamp IMPORTED_DATE Imported date of the file to the Management application. timestamp FIRMWARE_FILE_SIZE Firmware file size. int FIRMWARE_LOCATION Firmware file location in the Management application repository. varchar 1024 RELEASE_NOTES_ LOCATION Release notes file location in the Management application repository.
D Sybase and Derby Database Fields TABLE 75 SWITCH_CONFIG Field Definition Format NAME Name of the switch configurations uploaded from the switch either on demand or through scheduler. int ID* varchar Size 64 SWITCH_ID ID of the switch from which the configuration has been uploaded. int BACKUP_DATE_TIME The date/time stamp at which the configuration has been uploaded. timestamp CONFIG_DATA The actual switch configuration data.
D Sybase and Derby Database Fields Device TABLE 79 DEVICE_PORT Field Definition ID* Format Size int NODE_ID DB ID of the device node to which this port belongs. int DOMAIN_ID Domain ID of the switch to which this device port is attached. int WWN Device port WWN. char 23 SWITCH_PORT_WWN WWN of the switch port to which this device port is attached. char 23 NUMBER Switch port number to which this device is attached. smallint PORT_ID Device port ID.
D Sybase and Derby Database Fields TABLE 80 FICON_DEVICE_PORT (Continued) Field Definition Format Size TAG FICON device property, e.g., 809a or 809b. varchar 16 FLAG FICON device property, e.g., 0x10 (hex). varchar 8 PARAMS FICON device property string, e.g., Valid channel port. varchar 16 Format Size TABLE 81 DEVICE_NODE Field Definition ID* int FABRIC_ID Fabric DB ID to which this device node belongs. int WWN Device node WWN.
D Sybase and Derby Database Fields TABLE 83 DEVICE_ENCLOSURE Field Definition ID* Format Size int FABRIC_ID ID of the fabric to which the device enclosure belongs. int NAME Name of the Device enclosure. varchar 256 TYPE Type of Device enclosure - Storage Array/Server. varchar 32 ICON Type of Icon. int OS Operating System. varchar 256 APPLICATIONS Application which created device enclosure. varchar 256 DEPARTMENT Department using this device enclosure.
D Sybase and Derby Database Fields TABLE 84 FABRIC (Continued) Field Definition Format SECURE 1 = it is secured fabric. smallint AD_ENVIRONMENT 1 = there are user-defined ADs in this fabric. smallint MANAGED 1 = it is an actively "monitored" fabric; otherwise, it is an "unmonitored" fabric. smallint MANAGEMENT_STATE Bit map to indicate various management indications for the fabric. smallint TRACK_CHANGES 1 = changes (member switches, ISL and devices) in the fabric are tracked.
Sybase and Derby Database Fields TABLE 85 DEVICE_PORT_INFO Name Source MISSING TIME DEVICE_PORT.MISSING_TIME, NPV PHYSICAL DEVICE_PORT.NPV_PHYSICAL TYPE NUMBER FICON_DEVICE_PORT.TYPE_NUMBER MODEL NUMBER FICON_DEVICE_PORT.MODEL_NUMBER MANUFACTURER FICON_DEVICE_PORT.MANUFACTURER MANUFACTURER PLANT FICON_DEVICE_PORT.MANUFACTURER_PLANT SEQUENCE NUMBER FICON_DEVICE_PORT.SEQUENCE_NUMBER TAG FICON_DEVICE_PORT.TAG FLAG FICON_DEVICE_PORT.FLAG PARAMS FICON_DEVICE_PORT.
D Sybase and Derby Database Fields TABLE 86 700 DEVICE_INFO (Continued) Name Source DEVICE PORT TYPE DEVICE_PORT.TYPE DEVICE PORT SYMBOLICE NAME DEVICE_PORT.SYMBOLIC_NAME FC4_TYPE DEVICE_PORT.FC4_TYPE, IP_PORT DEVICE_PORT.IP_PORT HARDWARE_ADDRESS DEVICE_PORT.HARDWARE_ADDRESS DEVICE PORT TRUSTED DEVICE_PORT.TRUSTED DEVICE PORT MISSING DEVICE_PORT.MISSING COS DEVICE_PORT.COS NPV_PHYSICAL DEVICE_PORT.NPV_PHYSICAL SWITCH PORT ID SWITCH_PORT.ID SWITCH PORT WWN SWITCH_PORT.
D Sybase and Derby Database Fields TABLE 86 DEVICE_INFO (Continued) Name Source VIRTUAL SWITCH ID SWITCH_INFO.ID VIRTUAL SWITCH NAME SWITCH_INFO.NAME OPERATIONAL STATUS SWITCH_INFO.OPERATIONAL_STATUS SWITCH_MODE SWITCH_INFO.SWITCH_MODE VIRTUAL SWITCH WWN SWITCH_INFO.WWN VIRTUAL SWITCH DOMAIN ID SWITCH_INFO.DOMAIN_ID VIRTUAL_FABRIC_ID SWITCH_INFO.VIRTUAL_FABRIC_ID BASE_SWITCH SWITCH_INFO.BASE_SWITCH VIRTUAL SWITCH STATE SWITCH_INFO.STATE VIRTUAL SWITCH STATUS SWITCH_INFO.
D Sybase and Derby Database Fields TABLE 88 DEVICE_NODE_INFO (Continued) Name Source CAPABILITY DEVICE_NODE.CAPABILITY_ TRUSTED DEVICE_NODE.TRUSTED CREATION TIME DEVICE_NODE.CREATION_TIME MISSING DEVICE_NODE.MISSING MISSING TIME DEVICE_NODE.MISSING_TIME, PROXY DEVICE DEVICE_NODE.PROXY_DEVICE AG DEVICE_NODE.AG, NAME USER_DEFINED_DEVICE_DETAIL.NAME USER DEFINED TYPE USER_DEFINED_DEVICE_DETAIL.TYPE IP ADDRESS USER_DEFINED_DEVICE_DETAIL.IP_ADDRESS CONTACT USER_DEFINED_DEVICE_DETAIL.
D Sybase and Derby Database Fields TABLE 90 EE_MONITOR_STATS_30MIN Field Definition Format ID* int EE_MONITOR_ID int CREATION_TIME timestamp ACTIVE_STATE smallint TX double precision RX double precision CRCERRORS double TABLE 91 EE_MONITOR_STATS_2HOUR Field Definition Format ID* int EE_MONITOR_ID int CREATION_TIME timestamp ACTIVE_STATE smallint TX double precision RX double precision CRCERRORS double TABLE 92 Definition ID* Format Size int MONITOR_ID The Numbe
D Sybase and Derby Database Fields TABLE 93 EE_MONITOR_STATS_1DAY (Continued) Field Definition Format CREATION_TIME timestamp ACTIVE_STATE smallint TX double precision RX double precision CRCERRORS double Size Event/FM TABLE 94 RECIPIENT_TYPE Field Definition Format ID* int TYPE TABLE 95 Type of the recipient (Syslog or SNMP).
D Sybase and Derby Database Fields TABLE 98 EVENT_SUB_TYPE Field Definition ID* Format Size int EVENT_TYPE_ID Unique Event Sub type ID int DESCRIPTION Description of Event Sub Type varchar 255 Format Size TABLE 99 SNMP_CREDENTIALS Field Definition ID* int VIRTUAL_SWITCH_ID Virtual switch ID for which this instance of the SNMP credentials apply. int RECIPIENT_ID Refers to recipient in the MESSAGE_RECIPIENT table.
D Sybase and Derby Database Fields TABLE 99 SNMP_CREDENTIALS (Continued) Field Definition Format Size AUTH_PASSWORD The localized secret key used by the authentication protocol for authenticating messages. This is applicable if the agent is configured to operate in SNMPv3. varchar 64 PRIV_PROTOCOL An indication of whether messages sent or received on behalf of this user can be encrypted and if so, which privacy protocol to use.
D Sybase and Derby Database Fields TABLE 101 EVENT Field Definition ID* Format Size int SWITCH_ID ID of the switch. int PARENT_ID ID of the Parent. int 255 SOURCE_NAME Name of the source from which the event originated. varchar 32 SOURCE_ADDR IP Address of the source from which the event originated. varchar 50 EVENT_SOURCE Source from which the event is generated. varchar 32 SINK_SOURCE Sink Source of the event (Syslog/SNMP Trap/errlog/Application).
D Sybase and Derby Database Fields TABLE 101 EVENT (Continued) Field Definition Format Size EVENT_CATEGORY Category of the event varchar 64 DISCOVERY_TYPE Discovery type of the product varchar 64 MANAGEMENT_LINK Management link status varchar 255 OPERATIONAL_STATUS Operational Status of the switch from which the event is triggered varchar 255 NODE_WWN WWN of the node from which the event is triggered varchar 23 PORT_WWN WWN of the port from which the event is triggered varchar
D Sybase and Derby Database Fields TABLE 103 EVENT_NOTIFICATION (Continued) Field Definition Format Size USER_NAME User name for authentication. varchar 256 PASSWORD Password for authentication. varchar 256 NOTIFICATION_INTERVAL Time interval between successive event notifications. int NOTIFICATION_UNIT Time interval Unit: 0 = Seconds 1 = Minutes 2 = Hours smallint TEST_OPTION Time interval Unit: 0 = Send test to configured e-mail address. 1 = Send test to all enabled users.
D Sybase and Derby Database Fields TABLE 104 EVENT_RULE (Continued) Field Definition Format LAST_MODIFIED_TIME Rules last edited time. timestamp SELECTED_TIME_UNIT Timestamp unit of the selected rule: 0 = second 1 = Minutes 2 = Hours smallint TABLE 105 Size EVENT_RULE_ACTION Field Definition ID* Format Size int RULE_ID The rule ID present in the Event_Rule Table.
D Sybase and Derby Database Fields TABLE 107 FABRIC Field Definition ID* Format Size int SAN_ID Foreign key to SAN table; usually 1 since there is only one SAN. int SEED_SWITCH_WWN WWN of the virtual switch used as seed switch to discover the fabric. char 23 NAME User-assigned fabric name. varchar 256 CONTACT User-assigned "contact" for the fabric. varchar 256 LOCATION User-assigned "location" for the fabric. varchar 256 DESCRIPTION User-assigned fabric description.
D Sybase and Derby Database Fields TABLE 108 Source MANAGEMENT_STATE FABRIC.MANAGEMENT_STATE LAST_FABRIC_CHANGED FABRIC.LAST_FABRIC_CHANGED SECURE FABRIC.SECURE AD_ENVIRONMENT FABRIC.AD_ENVIRONMENT MANAGED FABRIC.MANAGED CONTACT FABRIC.CONTACT LOCATION FABRIC.LOCATION DESCRIPTION FABRIC.DESCRIPTION CREATION_TIME FABRIC.CREATION_TIME LAST_SCAN_TIME FABRIC.LAST_SCAN_TIME LAST_UPDATE_TIME FABRIC.LAST_UPDATE_TIME TRACK_CHANGES FABRIC.TRACK_CHANGES TYPE FABRIC.
D Sybase and Derby Database Fields FC Port Stats TABLE 110 FC_PORT_STATS Field Definition ID* Format int SWITCH_ID References the ID in CORE_SWITCH table. int PORT_ID References the ID in SWITCH_PORT table. int TX Transmission (TX) value in bytes. double RX Receive (RX) value in bytes. double TX_UTILIZATION Transmit utilization value in percentage. double RX_UTILIZATION Receive utilization value in percentage. double‘ CREATION_TIME The polling time.
D Sybase and Derby Database Fields TABLE 111 FC_PORT_STATS_30MIN (Continued) Field Definition SIGNALLOSSES double SEQUENCEERRORS double INVALIDTRANSMISSIONS double CRCERRORS double DATA_GAPS_IN5MIN smallint TABLE 112 Definition Format ID* int SWITCH_ID int PORT_ID int TX double RX double TX_UTILIZATION double RX_UTILIZATION double‘ CREATION_TIME timestamp ACTIVE_STATE smallint LINKFAILURES double TXLINKRESETS double RXLINKRESETS double SYNCLOSSES double SIGNALLOS
D Sybase and Derby Database Fields TABLE 113 FC_PORT_STATS_1DAY (Continued) Field Definition Format RX_UTILIZATION double‘ CREATION_TIME timestamp ACTIVE_STATE smallint LINKFAILURES double TXLINKRESETS double RXLINKRESETS double SYNCLOSSES double SIGNALLOSSES double SEQUENCEERRORS double INVALIDTRANSMISSIONS double CRCERRORS double DATA_GAPS_IN5MIN smallint DATA_GAPS_IN30MIN smallint DATA_GAPS_IN2HOUR smallint DCFM Professional Plus User Manual 53-1001774-01 Size 715
D Sybase and Derby Database Fields FCIP TABLE 114 FCIP_TUNNEL Field Definition Format ID* int ETHERNET_PORT_ID GigE Port ID on which the tunnel is created. int TUNNEL_ID Tunnel ID for that GigE Port. smallint VLAN_TAG VLAN Tag on the tunnel (if present). int SOURCE_IP Source IP on which the tunnel is created. char 64 DEST_IP Destination IP on the other end of tunnel. char 64 LOCAL_WWN Local port WWN for the tunnel. char 23 REMOTE_WWN_RESTRICT Remote Port WWN for the tunnel.
Sybase and Derby Database Fields TABLE 115 D FCIP_TUNNEL_INFO (Continued) Name Source WAN_TOV_ENABLED FCIP_TUNNEL.WAN_TOV_ENABLED TUNNEL_STATUS FCIP_TUNNEL.TUNNEL_STATUS COMPRESSION_ENABLED FCIP_TUNNEL_DETAILS.COMPRESSION_ENABLED TURBO_WRITE_ENALBED FCIP_TUNNEL_DETAILS.TURBO_WRITE_ENABLED TAPE_ACCELERATION_ENABLED FCIP_TUNNEL_DETAILS.TAPE_ACCELERATION_ENABLED IKE_POLICY_NUM FCIP_TUNNEL_DETAILS.IKE_POLICY_NUM IPSEC_POLICY_NUM FCIP_TUNNEL_DETAILS.
D Sybase and Derby Database Fields TABLE 115 Source REMOTE PORT WWN FCIP_PORT_TUNNEL_MAP.TUNNEL_ID = FCIP_TUNNEL.ID and FCIP_PORT_TUNNEL_MAP.SWITCHPORT_ID = PORT.ID) REMOTE_PORT_WWN REMOTE NODE WWN FCIP_PORT_TUNNEL_MAP.TUNNEL_ID = FCIP_TUNNEL.ID and FCIP_PORT_TUNNEL_MAP.SWITCHPORT_ID = PORT.ID) REMOTE_NODE_WWN TABLE 116 FCIP_PORT_TUNNEL_MAP Field Definition Format SWITCHPORT_ID* Switch Port ID. int TUNNEL_ID* FCIP Tunnel ID.
D Sybase and Derby Database Fields TABLE 117 FCIP_TUNNEL_DETAILS (Continued) Field Definition Format FICON_TAPE_WRITE_ EMULATION_ENABLED Whether this is enabled on that tunnel. smallint FICON_TAPE_READ_ EMULATION_ENABLED Whether this is enabled on that tunnel. smallint FICON_DEBUG__FLAGS FICON_DEBUG_FLAGS for that particular tunnel. double Size FCIP Tunnel Stats TABLE 118 FCIP_TUNNEL_STATS Field Definition ID* Format int TUNNEL_DBID References the ID in FCIP_TUNNEL table.
D Sybase and Derby Database Fields TABLE 119 FCIP_TUNNEL_STATS_30MIN (Continued) Field Definition DROPPED PACKETS double precision COMPRESSION double precision LATENCY double precision LINK_RETRANSMITS double precision ACTIVE_STATE smallint TABLE 120 Definition Format ID* int TUNNEL_DBID int SWITCH ID int CREATION TIME timestamp TX double precision RX double precision TX_UTILIZATION double precision RX_UTILIZATION double precision DROPPED PACKETS double precision COMPRES
D Sybase and Derby Database Fields TABLE 121 FCIP_TUNNEL_STATS_1DAY (Continued) Field Definition Format LINK_RETRANSMITS double precision ACTIVE_STATE smallint TABLE 122 Size FCIP_TUNNEL Field Definition ID* Format Size int ETHERNET_PORT_ID GigE Port ID on which the tunnel is created. int TUNNEL_ID Tunnel ID for that GigE Port. smallint VLAN_TAG VLAN Tag on the tunnel (if present). int SOURCE_IP Source IP on which the tunnel is created.
D Sybase and Derby Database Fields TABLE 123 GIGE_PORT_STATS (Continued) Field Definition Format DROPPED PACKETS Number of dropped packets. double precision COMPRESSION The compression value. double precision LATENCY The latency value. double precision BANDWIDTH The bandwidth value.
D Sybase and Derby Database Fields TABLE 126 GIGE_PORT_STATS_1DAY Field Definition Format ID* int SWITCH ID int PORT_ID int CREATION TIME timestamp TX double precision RX double precision TX_UTILIZATION double precision RX_UTILIZATION double precision DROPPED PACKETS double precision COMPRESSION double precision LATENCY double precision BANDWIDTH double precision Size ISL TABLE 127 ISL_INFO Name Source ID ISL.ID FABRIC_ID ISL.FABRIC_ID COST ISL.COST TYPE ISL.
D Sybase and Derby Database Fields TABLE 128 ISL_TRUNK_INFO Name Source ID ISL_TRUNK_GROUP.ID COST ISL_INFO.COST TYPE ISL_INFO.TYPE SOURCE PORT NUMBER ISL_INFO.SOURCE_PORT_NUMBER SOURCE SWITCH ID ISL_INFO.SOURCE_SWITCH_ID SOURCE SWITCH IP ADDRESS SOURCE_CORE_SWITCH.IP_ADDRESS SOURCE SWITCH WWN SOURCE_VIRTUAL_SWITCH.WWN MASTER PORT ISL_INFO.SOURCE_DOMAIN_ID SOURCE SWITCH NAME ISL_INFO.SOURCE_SWITCH_NAME SOURCE SWITCH PORT ID ISL_INFO.SOURCE_SWITCH_PORT_ID DEST PORT NUMBER ISL_INFO.
D Sybase and Derby Database Fields TABLE 130 FABRIC Field Definition ID* Format Size int SAN_ID Foreign key to SAN table; usually 1 since there is only one SAN. int SEED_SWITCH_WWN WWN of the virtual switch used as seed switch to discover the fabric. char 23 NAME User-assigned fabric name. varchar 256 CONTACT User-assigned "contact" for the fabric. varchar 256 LOCATION User-assigned "location" for the fabric. varchar 256 DESCRIPTION User-assigned fabric description.
D Sybase and Derby Database Fields TABLE 132 ISL_TRUNK_GROUP Field Definition Format ID* Size int VIRTUAL_SWITCH_ID Virtual switch DB ID. int MASTER_USER_PORT Port number of master port. smallint License TABLE 133 LICENSE_FEATURE_MAP Field Definition Format LICENSE_ID* Foreign Key (SWITCH_LICENSE.ID) and is part of the primary key. integer FEATURE_ID* Foreign Key (LICENSED_FEATURE.ID) and is part of the primary.
D Sybase and Derby Database Fields Encryption Device TABLE 137 KEY VAULT Field Definition ID* Format Size int IP_ADDRESS The IP Address (IPv4, IPv6, or hostname) of the key vault. varchar PORT_NUMBER The TCP port number for the key vault. int PUBLIC_CERTIFICATE The key vault’s public key certificate. Switches use varchar this to establish a secure connection to the key vault. 4096 CRETIFICATE_LABEL A text name to identify the certificate.
D Sybase and Derby Database Fields TABLE 138 CRYPTO_SWITCH Field Definition Format Size KAC_CERTIFICATE The public key certificate, in PEM format, of the switch’s Key Archive Client module. This certificate is installed on key vaults to establish secure communication between this switch and the key vault. varchar 4096 PRIMARY_VAULT_ CONNECTIVITY_STATUS The status of the network connection between this switch and the primary key vault.
D Sybase and Derby Database Fields TABLE 139 ENCRYPTION GROUP Field Definition Format ACTIVE_MASTER_KEY_STAT US The operational status of the "master key" or "Key Encryption Key (KEK)" used to encrypt Data Encryption Keys in a key vault. Not used for NetApp LKM key vaults. 0 = not used 1 = required but not present 2 = present but not backed up 3 = okay smallint ALT_MASTER_KEY_STATUS The operational status of an alternate "master key" used to access older data encryption keys.
D Sybase and Derby Database Fields TABLE 140 ENCRYPTION_TAPE_POOL Field Definition Format Size TAPE_POOL_NAME User-supplied name or number for the tape pool. This is the same name or number specified in the tape backup application. Numbers are stored in hex. varchar 64 TAPE_POOL_OPERATION_M ODE Specifies which type of encryption should be used by tape volumes in this tape pool. 0 = Native 1 = DF-compatible.
D Sybase and Derby Database Fields TABLE 143 QUORUM_CARD_GROUP_MAPPING Field Definition ID Format int ENCRYPTION_GROUP_ID Foreign key reference to the ENCRYPTION_GROUP for which an authorization card is registered. int SMART_CARD_ID Foreign key reference to the SMART_CARD that is registered as an authorization card for the encryption group. int Definition Format TABLE 144 Size HA CLUSTER Field ID* Size int NAME User-supplied name for the HA Cluster.
D Sybase and Derby Database Fields TABLE 145 SMART CARD Field Definition Format Size GROUP_NAME 'The name of the Encryption Group used to initialize the card. For recovery set cards, this identifies which group’s master key is backed up on the card. varchar 64 CREATION_TIME The date and time that the card was initialized. For recovery set cards, this is the date and time the master key was written to the card.
D Sybase and Derby Database Fields Encryption Container TABLE 147 CRYPTO HOST Field Definition ID* Format Size int CRYPTO_TARGET_CONTAIN ER_ID Foreign key reference to the int CRYPTO_TARGET_CONTAINER that contains this host. VI_NODE_WWN Node WWN of Virtual Initiator that represents this host. char 23 VI_PORT_WWN Port WWN of Virtual Initiator that represents this host.
D Sybase and Derby Database Fields TABLE 149 CRYPTO LUN Field Definition Format ID* 734 Size int CRYPTO_TARGET_ CONTAINER_ID Foreign key reference to the CRYPTO_TARGET_CONTAINER that contains the host for which these LUNs are configured. int SERIAL_NUMBER The LUN serial number, used to identify the physical LUN. varchar ENCRYPTION_STATE Boolean. True (1) if LUN is being encrypted. False (0) if cleartext. smallint STATUS Not currently used but left in for possible future use.
D Sybase and Derby Database Fields TABLE 149 CRYPTO LUN Field Definition Format DECRYPT_EXISTING_DATA Not used. When configuring disk LUN that was previously encrypted and is to become cleartext, this property tells the switch whether or not to start a re-keying operation to decrypt the existing LUN data. This property does not need to be persisted. This feature is no longer supported in Fabric OS. smallint KEY_ID Hex-encoded binary key vault ID for the current data encryption key for this LUN.
D Sybase and Derby Database Fields TABLE 150 ENCRYPTION ENGINE Field Definition Format SYSTEM_CARD_STATUS Indicates whether a System Card is currently inserted in the Encryption Engine, and whether the card is valid or not. This feature is not yet supported. smallint WWN_POOLS_AVAILABLE Not used. Previously used to indicate the number of WWN pools remaining for allocation on this encryption engine. This feature is no longer supported.
Sybase and Derby Database Fields D TABLE 152 Name Source CRYPTO HOST ID LUN.CRYPTO_HOST_ID CRYPTO LUN ID LUN.ID CRYPTO_LUN_ID LUN NUMBER LUN.LUN_NUMBER CRYPTO TARGET CONTAINER ID LUN.CRYPTO_TARGET_CONTAINER_ID SERIAL NUMBER LUN.SERIAL_NUMBER ENCRYPTION STATE LUN.ENCRYPTION_STATE STATUS LUN.STATUS REKEY_INTERVAL LUN.REKEY_INTERVAL VOLUME_LABEL_PREFIX LUN.VOLUME_LABEL_PREFIX LAST_REKEY_DATE LUN.LAST_REKEY_DATE LAST_REKEY_STATUS LUN.LAST_REKEY_STATUS LAST_REKEY_PROGRESS LUN.
D Sybase and Derby Database Fields Meta SAN TABLE 153 LSAN_DEVICE Field Definition Format ID* int BB_FABRIC_ID Backbone fabric DB ID. int FCR_FABRIC_ID FID assigned to edge fabric. int DEVICE_PORT_WWN Device port WWN of physical device. char 23 PHYSICAL_PID PID of physical device.
D Sybase and Derby Database Fields TABLE 156 FABRIC (Continued) Field Definition Format TYPE Type of fabric: 0 = legacy fabric 1 = base fabric 2 = logical fabric smallint SECURE 1 = it is a secured fabric. smallint AD_ENVIRONMENT 1 = there are user-defined ADs in this fabric. smallint MANAGED 1 = it is an actively "monitored" fabric; otherwise, it is an "unmonitored" fabric. smallint MANAGEMENT_STATE Bit map to indicate various management indications for the fabric.
D Sybase and Derby Database Fields TABLE 158 IFL_INFO Name Source ID IFL.ID EDGE_FABRIC_ID IFL.EDGE_FABRIC_ID FCR SWITCH ID FCR_PORT.VIRTUAL_SWITCH_ID EDGE_PORT_WWN IFL.EDGE_PORT_WWN BB_FABRIC_ID IFL.BB_FABRIC_ID BB_PORT_WWN IFL.BB_PORT_WWN BB_RA_TOV IFL.BB_RA_TOV BB_ED_TOV IFL.BB_ED_TOV BB_PID_FORMAT IFL.BB_PID_FORMAT EDGE SWITCH ID SWITCH_PORT.VIRTUAL_SWITCH_ID EDGE PORT ID SWITCH_PORT.ID EDGE PORT NUMBER SWITCH_PORT.USER_PORT_NUMBER EDGE PORT TYPE SWITCH_PORT.
D Sybase and Derby Database Fields TABLE 160 IP_ROUTE (Continued) Field Definition Format Size FLAG Flag. int CHECKSUM Check Sum. varchar 64 Others TABLE 161 SYSTEM_PROPERTY Field Definition Format Size NAME* The name of the property. char 64 VALUE The value for the property. VARCHAR 2048 Field Definition Format Size OUI* Vendor OUI, 6-digit hexadecimal number which can have leading digits as zero. char 6 VENDOR Vendor name.
D Sybase and Derby Database Fields Port Fencing TABLE 166 PORT_FENCING_POLICY Field Definition Format ID* int NAME Name of the policy. The length of the field should be 62 because M-EOS switch supports only maximum 62 characters. varchar TYPE 0 = ISL Protocol 1 = Link 2 = Security smallint THRESHOLD_LIMIT Threshold Limits for M-EOS Switch. int THRESHOLD_DURATION Duration In minutes for M-EOS Switch. int DEFAULT_POLICY 1 = the default port fencing policies. 0 = the non-default policies.
D Sybase and Derby Database Fields Quartz TABLE 168 QRTZ_JOB_DETAILS Field Definition Format Size JOB_NAME* Name of the job. varchar 80 JOB_GROUP* Name of the job group. varchar 80 DESCRIPTION Description of the job (optional). varchar 120 JOB_CLASS_NAME The instance of the job that will be executed. varchar 128 IS_DURABLE Whether the job should remain stored after it is orphaned.
D Sybase and Derby Database Fields TABLE 170 Field Definition Format size TRIGGER_NAME* Name of the trigger varchar 80 TRIGGER_GROUP* name of the trigger group varchar 80 REPEAT_COUNT number of times to repeat numeric 13,0 REPEAT_INTERVAL interval for first and second job numeric 13,0 TIMES_TRIGGERED Number of times the corresponding trigger fired numeric 13,0 TABLE 171 QRTZ_FIRED_TRIGGERS Field Definition Format size ENTRY_ID* Fired instance ID.
D Sybase and Derby Database Fields TABLE 174 QRTZ_JTRIGGER_LISTENERS Field Definition Format Size TRIGGER_NAME* Name of the trigger. varchar 80 TRIGGER_GROUP* Name of the trigger group. varchar 80 TRIGGER_LISTENER* The listener action. varchar 80 TABLE 175 QRTZ_BLOB_TRIGGERS Field Definition Format Size TRIGGER_NAME* Name of the trigger. varchar 80 TRIGGER_GROUP* Name of the trigger group. varchar 80 BLOB_DATA The Scheduler info.
D Sybase and Derby Database Fields Reports TABLE 180 REPORT_TYPE Field Definition Format ID* Meta Data for available reports. int NAME Report name. varchar 128 DESCRIPTION Report type description. varchar 256 Format Size TABLE 181 Size GENERATED_REPORT Field Definition ID* int NAME Report name. varchar TYPE_ID Report type. int EFCM_USER The Management application user who has generated this report. varchar REPORT_OBJECT Report object BLOB.
D Sybase and Derby Database Fields TABLE 185 PRIVILEGE Field Definition ID* Size int NAME TABLE 186 Format Privilege Name. varchar 128 Size PRIVILEGE_GROUP_MAP Field Definition Format GROUP_ID* Privilege group ID. int PRIVILEGE_ID* Privilege ID. int 128 Format Size TABLE 187 PRIVILEGE_GROUP Field Definition ID* int NAME TABLE 188 Privilege group name. 128 ROLE_PRIVILEGE_INFO name Source ID ROLE.ID ROLE NAME ROLE.NAME ROLE DESCRIPTION ROLE.
D Sybase and Derby Database Fields TABLE 191 RESOURCE_GROUP Field Definition Format ID* int NAME Resource group name. varchar 128 DESCRIPTION Resource group description. varchar 512 Size TABLE 192 RESOURCE_FABRIC_MAP Field Definition Format RESOURCE_GROUP_ID* Resource group ID. int FABRIC_ID* Fabric ID, which is in the resource group. int TABLE 193 748 Size USER_ROLE_RESOURCE_INFO name Source RESOURCE GROUP ID RESOURCE_GROUP.
D Sybase and Derby Database Fields SNMP TABLE 194 SNMP_CREDENTIALS Field Definition ID* Format Size int VIRTUAL SWITCH_ID Virtual switch ID for which this instance of the SNMP credentials apply. int RECIPIENT_ID Recipient in the MESSAGE_RECIPIENT table. int POR)_NUMBER Port number of the SNMP agent on the switch for get and set requests. smallint RETRY_COUNT Number of times to retry if get/set request to the SNMP agent times out. Default value is 3.
D Sybase and Derby Database Fields TABLE 194 Definition Format Size PRIV_PROTOCOL An indication of whether messages sent or received on behalf of this user can be encrypted and if so, which privacy protocol to use. The current values for this field are: usmNoPrivProtocol and usmDESPrivProtocol. This is applicable if the agent is configured to operate in SNMPv3. varchar 16 PRIV_PASSWORD The localized secret key used by the privacy protocol for encrypting and decrypting messages.
D Sybase and Derby Database Fields TABLE 195 SNMP_PROFILE (Continued) Field Definition Format Size AUTH_PROTOCOL An indication of whether or not messages sent or received on behalf of this user can be authenticated and if so, which authentication protocol to use. The supported values for this field are: usmNoAuthProtocol, usmHMACMD5AuthProtocol, and usmHMACSHAAuthProtocol. This is applicable if the agent is configured to operate in SNMPv3.
D Sybase and Derby Database Fields Stats TABLE 197 FAVORITES Field Definition Format ID* int NAME Name of the favorite. varchar 64 USER_ The application user credentials. varchar 128 TOP_N The top number of ports(5,10,15,20). varchar 40 SELECTION_FILTER Types of ports (FC/FCIP/GE) and End-to-End Monitors. varchar 40 FROM_TIME The time interval in which the graph is shown. Time interval can be predefined or custom.
D Sybase and Derby Database Fields TABLE 199 STATS_AGING Field Definition ID* Format int FIVE_MIN_VALUE Configured maximum samples value for the five minute table. int THIRTY_MIN_VALUE Configured maximum samples value for the thirty minute table. int TWO_HR_VALUE Configured maximum samples value for the two hour table. int ONE_DAY_VALUE Configured maximum samples value for the one day table. int MAX_SAMPLES_VALUE The maximum number of samples value, i.e., 3456.
D Sybase and Derby Database Fields Switch TABLE 202 VIRTUAL-SWITCH Field Definition Format ID* 754 Size int LOGICAL_ID Logical ID of the switch. smallint NAME Switch name. varchar 64 WWN WWN of the switch. char 23 VIRTUAL_FABRIC_ID Virtual fabric ID. If VF enabled then will have the VFID; otherwise it will be -1. smallint DOMAIN_ID Domain ID of the switch. smallint BASE_SWITCH 1 = this is a base switch; otherwise, 0.
D Sybase and Derby Database Fields TABLE 203 CORE_SWITCH Field Definition ID* Format Size int IP_ADDRESS IP address of the switch. varchar 128 WWN Chassis WWN. char 23 NAME Switch name. varchar 64 CONTACT Any associated contact name, obtained through SNMP. varchar 256 LOCATION Physical location, obtained through SNMP. varchar 256 DESCRIPTION User assigned description, obtained through SNMP. varchar 256 TYPE SWBD type number as given by Fabric OS.
D Sybase and Derby Database Fields TABLE 203 CORE_SWITCH (Continued) Field Definition Format NIC_PROFILE_ID NIC profile of the Management application server host used by this switch to communicate in interactive configuration and other operations. It determines which Management application host IP used by this switch. int MANAGING_SERVER_IP_ ADDRESS IP address of the server which is currently managing this switch. Used for M-EOS switch only. It does not apply to Fabric OS switches.
Sybase and Derby Database Fields TABLE 205 SWITCH_INFO name Source NIC_PROFILE_ID CORE_SWITCH.NIC_PROFILE_ID MANAGING_SERVER_IP_ADDRESS CORE_SWITCH.MANAGING_SERVER_IP_ADDRESS ID VIRTUAL_SWITCH.ID NAME VIRTUAL_SWITCH.NAME OPERATIONAL_STATUS VIRTUAL_SWITCH.OPERATIONAL_STATUS SWITCH_MODE VIRTUAL_SWITCH.SWITCH_MODE AD_CAPABLE VIRTUAL_SWITCH.AD_CAPABLE WWN VIRTUAL_SWITCH.WWN ROLE VIRTUAL_SWITCH.ROLE FCS_ROLE VIRTUAL_SWITCH.FCS_ROLE DOMAIN_ID VIRTUAL_SWITCH.
D Sybase and Derby Database Fields TABLE 206 SWITCH_MODEL Field Definition Format ID* int SWBD_TYPE Switch type number, universally used by all the Management application module implementation. smallint SUBTYPE Switch subtype. At present no subtypes for existing model records are defined. smallint DESCRIPTION Model description, such as FC link speed, port count and whether multi-card (director) class switch or other type of switch. varchar 32 MODEL Switch model string.
D Sybase and Derby Database Fields Switch details TABLE 208 CORE_SWITCH_DETAILS Field Definition Format Size CORE_SWITCH_ID* DB ID. int ETHERNET_MASK Subnet mask. char 64 FC_MASK Subnet mask for FC IP. char 64 FC_IP Fibre Channel IP address. char 64 FC_CERTIFICATE smallint SW_LICENSE_ID char 23 SUPPLIER_SERIAL_ NUMBER Serial number of the chassis.
D Sybase and Derby Database Fields TABLE 208 CORE_SWITCH_DETAILS (Continued) Field Definition Format Size STBY_CP_PRI_FW_VERSIO N Standby CP primary firmware version. varchar 128 STBY_CP_SEC_FW_VERSIO N Standby CP secondary firmware version. varchar 128 TYPE SWBD number as assigned by embedded SW depending upon the switch type / platform. smallint EGM_CAPABLE 1 = the switch is EGM-capable. smallint SUB_TYPE SWBD sub type number.
D Sybase and Derby Database Fields TABLE 209 CORE_SWITCH (Continued) Field Definition Format LAST_SCAN_TIME timestampty LAST_UPDATE_TIME Time when this record was last updated. timestamp SYSLOG_REGISTERED 1 if the Management application server is registered with the switch to receive Syslog. smallint CALL_HOME_ENABLED 1 if "call home" is enabled for this switch. smallint SNMP_REGISTERED 1 if the Management application server is registered with the switch to receive SNMP traps.
D Sybase and Derby Database Fields TABLE 210 762 SWITCH_DETAILS_INFO Name Source MANAGING_SERVER_IP_ADDRESS CORE_SWITCH.MANAGING_SERVER_IP_ADDRESS ID VIRTUAL_SWITCH.ID NAME VIRTUAL_SWITCH.NAME OPERATIONAL_STATUS VIRTUAL_SWITCH.OPERATIONAL_STATUS SWITCH_MODE VIRTUAL_SWITCH.SWITCH_MODE AD_CAPABLE VIRTUAL_SWITCH.AD_CAPABLE WWN VIRTUAL_SWITCH.WWN ROLE VIRTUAL_SWITCH.ROLE FCS_ROLE VIRTUAL_SWITCH.FCS_ROLE DOMAIN_ID VIRTUAL_SWITCH.DOMAIN_ID VIRTUAL_FABRIC_ID VIRTUAL_SWITCH.
Sybase and Derby Database Fields TABLE 210 SWITCH_DETAILS_INFO Name Source PART_NUMBER CORE_SWITCH_DETAILS.PART_NUMBER CHECK_BEACON CORE_SWITCH_DETAILS.CHECK_BEACON TIMEZONE CORE_SWITCH_DETAILS.TIMEZONE FMS_MODE CORE_SWITCH_DETAILS.FMS_MODE MAX_PORT CORE_SWITCH_DETAILS.MAX_PORT CHASSIS_SERVICE_TAG CORE_SWITCH_DETAILS.CHASSIS_SERVICE_TAG BAY_ID CORE_SWITCH_DETAILS.BAY_ID TYPE_NUMBER CORE_SWITCH_DETAILS.TYPE_NUMBER MODEL_NUMBER CORE_SWITCH_DETAILS.
D Sybase and Derby Database Fields Switch port TABLE 211 GIGE_PORT Field Definition Format ID* int SWITCH_PORT_ID ID for the GigE Port in SWITCH_PORT. int PORT_NUMBER GigE Port Number(0 for ge0 and 1 for ge1). int SLOT_NUMBER Slot number on which the GigE Port is present. int ENABLED Enabled or disabled. smallint SPEED Port speed details. int MAX_SPEED Port maximum speed supported. int MAC_ADDRESS MAC Address of that port. varchar 64 PORT_NAME GigE Port Name.
D Sybase and Derby Database Fields TABLE 212 SWITCH_PORT (Continued) Field Definition Format Size MAC_ADDRESS MAC address of this port. varchar 64 varchar 64 PORT_MOD TYPE Port type. The specific mode currently enabled for the port. varchar 16 FULL_TYPE Port type. varchar 128 STATUS The current status of the switch port. varchar 64 varchar 16 255 HEALTH STATUS_MESSAGE Status message if any.
D Sybase and Derby Database Fields TABLE 212 Definition Format NPIV_CAPABLE Instance NPIV mode capability: 1 = indicates port has NPIV capability 2 = NPIV license is enabled smallint NPIV_ENABLED Whether NPIV mode is enabled. smallint FC_FAST_WRITE_ENABLED 1 = FC fast write is enabled.
D Sybase and Derby Database Fields TABLE 213 GIGE_PORT_INFO (Continued) name Source INTERFACE_TYPE GIGE_PORT.INTERFACE_TYPE CHECKSUM GIGE_PORT.CHECKSUM FCIP_CAPABLE GIGE_PORT.FCIP_CAPABLE ISCSI_CAPABLE GIGE_PORT.ISCSI_CAPABLE INBAND_MANAGEMENT_STATUS GIGE_PORT.INBAND_MANAGEMENT_STATUS VIRTUAL SWITCHID SWITCH_PORT.VIRTUAL_SWITCH_ID USER PORT NUMBER SWITCH_PORT.
D Sybase and Derby Database Fields TABLE 217 FPORT_TRUNK_MEMBER Field Definition Format GROUP_ID* Foreign key to the PORT_TRUNK_GROUP table. INT PORT_NUMBER* Member user port number. SMALLINT WWN Member port WWN. CHAR 23 Format Size TABLE 218 VIRTUAL_SWITCH Field Definition ID* 768 Size int LOGICAL_ID Logical ID of the switch. smallint NAME Switch name. varchar 64 WWN WWN of the switch. char 23 VIRTUAL_FABRIC_ID Virtual fabric ID.
D Sybase and Derby Database Fields TABLE 218 VIRTUAL_SWITCH (Continued) Field Definition Format CRYPTO_CAPABLE 0 = the switch is not crypto-enabled; if capable it will have non-zero value smallint FCR_CAPABLE 0 = the switch is not FCR-enabled; if capable it will have non-zero value smallint FCIP_CAPABLE 0 if the switch is not FCIP-enabled; if capable it will have non-zero value smallint Size Switch SNMP info TABLE 219 VIRTUAL_SWITCH Name Source PHYSICAL SWITCH ID PHYSICAL_SWITCH_ID PH
D Sybase and Derby Database Fields TABLE 219 VIRTUAL_SWITCH Name Source BASE SWITCH BASE_SWITCH MAX ZONE CONFIG SIZE MAX_ZONE_CONFIG_SIZE CREATION TIME CREATION_TIME LAST UPDATE TIME LAST_UPDATE_TIME USER NAME SWITCH_INFO.
D Sybase and Derby Database Fields Threshold TABLE 220 SWITCH_THRESHOLD-SETTING Field Definition Format SWITCH_ID* References the ID in CORE_SWITCH table. int POLICY_ID* References the ID in THRESHOLD_POLICY table. int STATUS The status of applied to the switch. smallint OVERRIDDEN Policy is overridden or not overridden. smallint DESCRIPTION Description about the status of policy applied to the switch.
D Sybase and Derby Database Fields TABLE 225 THRESHOLD_MEASURE (Continued) Field Definition Format LOW_BOUNDARY Configured low boundary threshold value for measure ID. int BUFFER_SIZE Configured buffer size for measure ID. int POLICY_ID* References the ID in THRESHOLD_POLICY table. int Size User Interface TABLE 226 AVAILABLE_FLYOVER_PROPERTY Field Definition Format ID* int NAME Name of the available property to be included in the flyover display.
D Sybase and Derby Database Fields TABLE 229 TOOL_PATH (Continued) Field Definition Format Size PATH Path of the tool where installed or available. varchar 1057 WORKING_FOLDER Working folder for that application. varchar 512 Format Size TABLE 230 PRODUCT_APP Field Definition ID* int MENU_TEXT Name of the product menu. varchar 256 PROP1_KEY First condition name to be satisfied by a selected product to launch a particular tool.
D Sybase and Derby Database Fields TABLE 231 ZONE_DB (Continued) Field Definition Format MCDATA_DEFAULT_ZONE McData switch default zoning mode. smallint MCDATA_SAFE_ZONE McData switch safe zoning mode. smallint ZONE_CONFIG_SIZE Zone configuration string length. int TABLE 232 ZONE_DB_USERS Field Definition Format ID* Size int ZONE_DB_ID PK of the owning zone DB. int USER_NAME List of users currently editing this zone DB.
D Sybase and Derby Database Fields Zoning 2 TABLE 236 ZONE_ALIAS_IN_ZONE Field Definition Format ZONE_ALIAS_ID* PK of the zone alias. int ZONE_ID* PK of the zone. int 23 Definition Format Size TABLE 237 Size ZONE_ALIAS Field ID* int ZONE_DB_ID PK of the owning ZONE_DB. int NAME The zone alias name. varchar 64 Format Size TABLE 238 ZONE_ALIAS_MEMBER Field Definition ID* int TYPE Zone alias member type: 2 = WWN 4 = D,P smallint VALUE Member value (D,P or WWN).
D Sybase and Derby Database Fields TABLE 241 ZONE_DB Field Definition ID* Size int FABRIC_ID PK of the owning fabric. NAME Zone DB name for offline Zone DBs. varchar OFFLINE Offline Zone DB (1 = offline). smallint CREATED Created timestamp. timestamp LAST_MODIFIED Last modified timestamp. timestamp LAST_APPLIED Last saved to switch timestamp. timestamp CREATED_BY Created by user name. varchar 128 LAST_MODIFIED_BY Last modified by user name.
Index A access assigning, 324 changing, 325 removing, 326 access levels defined, 681 features, 681–682 roles, 681 accessing FTP server folder, 88 ACK emulation, device level, 429 activating event policies, 264 LSAN zones, 594 zone configuration, 583 active session management, roles and access levels, 681 active sessions, viewing, 23 Adaptive Rate Limiting (ARL), 411 add/delete properties, roles and access levels, 681 adding, 257 destination for syslog forwarding, 283 detached devices to fabric binding, 240
Index C call home, 106 centers assigning a device, 118 assigning event filters, 120 disabling, 116 editing, 109 Brocade International, 109 e-mail, 112 EMC, 113 HP LAN, 114 IBM, 109 modem, 111 enabling, 115 enabling support save, 115 hiding, 109 removing a device, 118 removing all devices and filters, 119 removing event filters, 121 test connection, 116 viewing, 108 configuring, 106 roles and access levels, 681 status, determining, 10 system requirements, 107 viewing status, 117 call home event filters tabl
Index configuring asset polling, 98 call home, 106 client export port, 86 discovery, 36, 87 e-mail notification, 273 encrypted storage in a multi-path environment, 511 explicit server IP address, 93 external FTP server, 90 FCIP advanced settings, 425 FCIP tunnels, 420 FICON emulation, 429 FTP server, 88 internal FTP server, 89 IP configuration, 92 IP interfaces, 420 IP routes, 420 IPSec and IKE policies, 427 LDAP server, 160 login banner, 85 login security, 84 LSAN zoning, 590 memory allocation, 96 NIS aut
Index deactivating event policies, 264 deactivating zone configuration, 585 default background color, changing, 130 default community strings, 41 default desktop color, changing, 130 default zone (fabrics) disabling, 577 enabling, 577 defining broadcast messages, 261 e-mail messages, 263, 264 launch script path, 262 defining, event filter, 119 delete switch configuration, 188 deleting end-to-end monitoring pairs, 303 event policies, 265 fabrics, 41 FCIP tunnels, 438 historical performance graph, 300 offlin
Index displaying event details, 248, 249 FCIP performance graphs for Ethernet ports, 439 FCIP performance graphs for FC ports, 439 firmware repository, 195 master log event details, 248, 249 downloading firmware, 197 dual network cards, configuration, 95 duplicate names,fixing, 77 duplicating event policies, 265 ISL offline policies, 266 PM threshold crossed policies, 267 security violation policies, 268 zone alias, 606 zone configuration, 606 zones, 605 Dynamic Load Sharing (DLS), 242 E edge fabrics abou
Index encryption group properties using the restore master key, 532 viewing encryption group properties, 542 encryption group properties dialog box General tab, 543 HA Clusters tab, 504, 547 Link Keys tab, 547, 548 Members tab, 543 Tape Pools tab, 549 encryption properties viewing properties, 537 encryption switch or group, removing using the management application, 544 encryption targets adding to virtual targets and virtual initiators within the encryption switch, 506 configuring hosts for, 513 using the
Index F fabric binding adding detached devices, 240 adding switches, 239 disabling, 239 enabling, 238 overview, 237 removing switches, 240 roles and access levels, 681 Fabric OS seed switch version, 53 Fabric OS feature listing, 30 fabric tracking roles and access levels, 681 fabrics deleting, 41 discovering, 35 IPv6 discovery, 35 monitoring, 52 status, determining, 10 zone database, clearing, 604 Fastwrite, 417 fault management roles and access levels, 681 FC Address for inactive iSCSI devices, 210, 216 F
Index feature active session management, 681 add/delete properties, 681 backup, 681 call home, 106, 681 CEE management, 681 configuration management, 681 diagnose and troubleshooting, 681 discovery setup, 681 e-mail event notification setup, 681 event management, 681 fabric binding, 681 fabric tracking, 681 fault management, 681 FCIP management, 681 FCoE management, 681 FICON management, 681 firmware management, 681 high integrity fabric, 681 host management, 681 license update, 681 licensing requirements,
Index graphs FCIP performance for Ethernet ports, 439 FCIP performance for FC ports, 439 group background color, changing, 129 grouping overview, 132 groups collapsing, 132 determining, 334 expanding, 132 finding users in, 334 overview, 132 groups, changing color, 129 groups, icons, 12 guidelines FCIP configuration, 419 H HA clusters creating, 503 removing engines from, 504 requirements for, 503 swapping engines in, 505 HBAs associating to servers, 200 unassociating, 202 HCM features, 336 software overvie
Index L launch remote client, 17 launch script path defining, 262 launch scripts, 262 requirements, 262 launching Server Management Console, 155 SMIA Configuration Tool, 168 launching FCR configuration, 144 launching HCM Agent, 145 launching Telnet, 142 launching Web Tools, 143 layout, changing, 128 layout, overview, 127 LDAP server configuring, 160 license keys entering, 25 license update roles and access levels, 681 licensing, 25 FCIP services, 406 Lifetime Key Manager (LKM) description of, 467 link keys
Index master log, 7 copying, 250 copying parts, 250 displaying, 248, 249 exporting, 251 filtering events, 251 McDATA fabric mode, 578 membership list, fabric binding adding detached devices, 240 adding switches, 239 removing switches, 240 memory allocation configuration, 96 configuring asset polling, 98 menu bar, 3 Configure, 639 Discover, 639 Edit, 637 Help, 643 Monitor, 641 Server, 637 Tools, 643 View, 637 M-EOS feature listing, 30 merging zone databases, 587 metaSAN, 446 minimap, 9 anchoring, 9 attachin
Index performance monitoring overview, 287 performance measures, 288 thresholds, 308 performance reports generating, 321 physical map customizing views, 123 default background color, changing, 130 displaying connections, 129 group background color, changing, 129 layout, changing, 128 layout, overview, 127 levels of detail, 135 port display, changing, 131 port label, changing, 131 product label, changing, 131 showing connected ports, 213 viewing port types, 213 viewing ports, 210 zooming in, 134 zooming out
Index Q QoS implementation in FCIP, 415 QoS priorities per FCIP circuit, 412 R Radius server configuring, 159 RBAC adding user accounts, 324 assigning users to resource groups, 333 creating resource groups, 330 creating user roles, 327 deleting user accounts, 326 editing resource groups, 331 editing user accounts, 325 editing user roles, 328 removing resource groups, 332 removing user roles, 329 removing users from resource groups, 334 resource groups, 330 roles, 327 user list, 323 user privileges, 663 us
Index resource groups assigning users, 333 creating, 330 editing, 331 RBAC, 330 removing, 332 removing users, 334 restore switch configuration, 186 restore data, 67 restore master key wizard, 532 restoring database, 164 reviewing backup events, 66 role based access control. See RBAC. role-based access control.
Index setup tools, 141 adding menu options, 147 adding to device shortcut menu, 149 changing menu options, 148 changing option on device shortcut menu, 150 changing server address, 147 removing menu options, 148 removing option from device shortcut menu, 151 roles and access levels, 682 showing levels of detail, physical map, 135 showing ports connected, 213 procedure, 210 smart cards configuring, 454 removing using the management application, 459 saving to a file, 459 SMIA Configuration Tool launching, 16
Index syslog forwarding adding a destination, 283 description, 282, 344 disabling, 285 editing a destination, 284 enabling, 284 registering host server, 283 registering management server, 282 removing a destination, 284 removing host server, 283 T tab Authentication (SMC), 159, 160, 161, 162, 163, 164 Services (SMC), 164 tab Ports (SMC), 158 tab Technical Support Information (SMC), 166 tab, Services (SMC), 156 table # Brocade events, 662 # CONSRV event, 661 # thermal event reason codes, 661 call home even
Index technical support information copying to an external FTP server, 232 deleting, 232 emailing, 231 immediate, 230 technical support information collection scheduling, 229 technical support information, capturing, 166 technical support information, viewing, 231 Telnet launching session, 142 testing FTP server, 91 third-party tools adding, 141 adding menu option, 147 adding to device shortcut menu, 149 changing menu options, 148 changing option on device shortcut menu, 150 changing server address, 147 re
Index user privileges defined, 453, 663 RBAC, 663 resource groups, 453, 663 user roles creating, 327 editing, 328 removing, 329 users access levels, 681 adding, 324 assigning to resource groups, 333 changing, 325 determining permissions, 334 disconnecting, 23 filtering events for, 325, 344 finding in groups, 334 privileges, 663 RBAC, 323 removing, 326 removing from resource groups, 334 viewing all, 323 users, total, 10 using from encryption group properties dialog, 532 V V1 destination adding, 278 V3 dest
Index zone adding to comnfiguration, 582 alias, 579 creating, 571 creating LSAN, 591 removing, 610 traffic isolation, adding members, 597 traffic isolation, creating, 596 traffic isolation, disabling, 598 traffic isolation, disabling failover, 599 traffic isolation, enabling, 598 traffic isolation, enabling failover, 599 zone alias creating, 579 deleting, 603 editing, 579 exporting, 580 zone alias, duplicating, 606 zone alias, removing objects, 580 zone alias, renaming, 581 zone configuration activating, 5
Index 796 DCFM Professional Plus User Manual 53-1001774-01
