HP Fabric OS 6.2.
© Copyright 2012 Hewlett-Packard Development Company, L.P.
Contents Version....................................................................................................................................5 Description..............................................................................................................................5 Update recommendation.......................................................................................................6 Supersedes.......................................................................................
Port Mirroring....................................................................................................................26 10 G interoperability..........................................................................................................26 Zoning.............................................................................................................................26 Fabric Watch.......................................................................................................
Version 6.2.2f NOTE: This software conforms to the Fibre Channel (FC) standards and accepted engineering practices and procedures. Description Fabric OS 6.2.0b introduced support for the HP StorageWorks Encryption SAN Switch and the HP DC Switch Encryption FC Blade. Fabric OS 6.2.2f continues this support. These products provide the following features: • Data encryption support for B-series fabrics • Key management support for HP Secure Key Manager (SKM) Fabric OS 6.2.
• • Security enhancements ◦ IPv6 auto-configuration ◦ IPsec with IPv6 (for management port) ◦ Configurable switch-wide policy requiring authentication of all host bus adapters (HBAs) ◦ Remote Authentication Dial-In User Service (RADIUS) enhancements allowing password expiration and source IP address information ◦ LDAP enhancement allowing for an alternate domain userPrincipalName (UPN) ◦ IPv6 certified for Joint Interoperability Test Command (JITC) Approved Product List Fiber connectivity (FIC
Supersedes Fabric OS 6.2.2e, released February 2011 New feature descriptions This section describes new features introduced in Fabric OS 6.2.0a and carried forward with Fabric OS 6.2.2f. Virtual Fabrics • VF is supported on the HP StorageWorks DC SAN Backbone Director, DC04 SAN Director, HP StorageWorks 8/80 SAN Switch, and HP StorageWorks 8/40 SAN Switch.
NOTE: For information on specific switches and switch firmware supported for interop applications, see the HP StorageWorks Fabric Interoperability: Merging Fabrics Based on M-series and B-series Fibre Channel Switches Application Notes. Security enhancements • Configurable stateless IPv6 auto-configuration is supported. • IPsec with IPv6 support provides greater security for management ports and configurable security policies for IPv4/IPv6 addresses.
Optionally licensed software The following are optionally licensed features in Fabric OS 6.2.x: • Ports on Demand—Allows customers to instantly scale the fabric by provisioning additional ports via a license key upgrade (applies to select switch models). • Extended Fabrics—Provides greater than 10 km of switched fabric connectivity at full bandwidth over long distances. (Depending on the platform, the distance can be up to 3,000 km.
Temporary license support HP now supports temporary licenses or Universal Temporary Licenses. To obtain the Universal Temporary Licenses, select the StorageWorks Software Demo & Evaluation Downloads option at the HP website: http://www.software.hp.com Previously licensed software now included with base Fabric OS The capabilities described in this section are included as part of the base Fabric OS. No additional purchase or licensing is necessary.
• HP StorageWorks 16 Port 4-Gb Blade (FC4-16) • HP StorageWorks 32 Port 4-Gb Blade (FC4-32) • HP StorageWorks 4/48 SAN Director Blade (FC4-48) • HP StorageWorks Multi-Protocol Router Blade (Brocade FR4-18i) • HP StorageWorks iSCSI Director Blade (Brocade FC4-16IP), compatible with the 4/256 SAN Director model only (not supported in the DC SAN Backbone Director or DC04 SAN Director) • HP StorageWorks 8/8 and 8/24 SAN Switches (Brocade 300) • HP StorageWorks 8/40 SAN Switch (Brocade 5100) • HP
• HP StorageWorks 8/24 SAN Switch (Brocade 300) • HP StorageWorks 8/40 SAN Switch (Brocade 5100) IMPORTANT: Although the HP StorageWorks 4/8 SAN Switch uses the same hardware as the 4/16 SAN Switch, it does not support Access Gateway. The same applies to the HP StorageWorks 8/8 and 8/24 SAN Switches. Both use the same hardware, but only the 8/24, which has all ports licensed, has Access Gateway support. The 8/40 switch must also have all ports enabled in order to support Access Gateway mode.
• Cisco switches: MDS 9216A, MDS 9216i, MDS 9506, MDS 9509, MDS 9120, MDS 9140, MDS 9124, and MDS 9134 running SAN OS 3.2(3), 3.3(2), 3.3(3), 3.3(4), 3.3(4a) and 3.3(5) with Brocade Fabric OS 6.2.2x • Cisco switches: MDS 9216i, MDS 9222i, MDS 9124, MDS 9124e, MDS 9134, MDS 9506, MDS 9509, and MDS 9513 running NX-OS 4.2(7d) with Fabric OS 6.2.2e • Cisco switches: MDS 9222i, MDS 9124, MDS 9124e, MDS 9134, MDS 9506, MDS 9509, and MDS 9513 running NX-OS 5.0(4) with Fabric OS 6.2.
Prerequisites Table 1 (page 14) lists the supported Fabric OS firmware versions. HP recommends using the latest supported firmware versions to get the greatest benefit from the SAN. For a list of retired products, see the HP website: http://www.hp.com IMPORTANT: The Fabric OS versions listed in the Earliest compatible version column in Table 1 (page 14) are the earliest versions supported by HP for connection to switches running Fabric OS 6.2.2f at the time of its release.
Table 1 Supported Fabric OS versions (continued) Model Earliest compatible version Recommended version HP StorageWorks DC SAN Backbone Director 6.3.2d 7.0.15 Brocade 8-Gb SAN Switch for HP BladeSystem c-Class 6.3.2d 7.0.1 HP StorageWorks EVA4400 embedded switch module, 8-Gb Brocade 6.3.2d 7.0.1 HP StorageWorks DC04 SAN Director 6.3.2d 7.0.1 HP StorageWorks SAN Director 16 Port 8-Gb FC Blade (FC8-16) 6.3.2d 7.0.1 HP StorageWorks SAN Director 6 Port 10-Gb ISL Blade (FC10-6) 6.3.2d 7.0.
3 HP strongly recommends that M-EOS products operate with the most recent version of M-EOS that supports interoperability. For information about HP support of interoperable fabrics, see HP StorageWorks Merging Fabrics Based on M-series and B-series Fibre Channel Switches Application Notes, available at http://www.hp.com. 4 When routing to an M-EOS edge fabric using frame redirection, the fabric must have a Fabric OS-based product to configure the frame redirection zone information.
Table 3 DC Director blade support matrix (continued) Director blade Number of blades The DC04 SAN Director requires Fabric OS 6.2.0a or later, and supports up to four blades. FS8-18 (DC Switch Encryption FC blade) Supported with Fabric OS 6.2.
New OUI Support on B-Series platforms Overview The OUI (Organizationally Unique Identifier) value is part of a Fibre Channel WWN that uniquely identifies the manufacturer of Fibre Channel products. The OUI values assigned to Brocade are used by Fabric OS to validate certain fabric interoperability support. The currently assigned OUI/WWN values are nearing exhaustion, necessitating Brocade to use a new OUI value for WWN assignment. The new OUI value for Brocade is 00:05:33.
blade, and Brocade HBAs. Enterprise class customers who want to manage departmental SANs can consider deploying this product. • HP Network Advisor Enterprise—An application designed for enterprise-class customers that provides unparalleled performance and scalability (24 physical fabrics and up to 9,000 switch ports).
Table 5 Feature support in interopmodes 2 and 3 (continued) Fabric OS Features (supported in interopmode 0) IM = interopmode IM 2 IM 3 Zone Activation Support Yes Yes11 Traffic Isolation Zones1 Yes No Frame Redirection (devices attached to Fabric OS)1 Yes Yes11 Frame Redirection (devices attached to M-EOS)1 Yes Yes11 Frame Redirection over FCR10 Yes Yes11 FCR Fabric Binding (route to M-EOS fabric with Fabric Binding)9 Yes Yes L2 Fabric Binding Yes No* DCC policies No No SCC polici
Table 5 Feature support in interopmodes 2 and 3 (continued) Fabric OS Features (supported in interopmode 0) IM = interopmode Fabric OS 6.2.
Firmware upgrades and downgrades Upgrading to Fabric OS 6.2.2f is allowed only from Fabric OS 6.1.0a or later. The policy to support only one-level migration, which began with Fabric OS 6.0.0, provides more reliable and robust migrations for customers. By having fewer major changes in internal databases, configurations, and subsystems, the system is able to perform the upgrade more efficiently, ensuring a truly seamless and nondisruptive process for the fabric.
Firmware upgrade instructions IMPORTANT: HP recommends that users upgrade to Fabric OS 6.2.2f as soon as possible. Upgrading to Fabric OS 6.2.2f is allowed only from Fabric OS 6.1.x. For guidelines, see (page 6). NOTE: With the introduction of Fabric OS 6.1.1, certain features and functions were removed from Web Tools (resident in the firmware) and migrated to the Data Center Fabric Manager (DCFM) management application. This has been carried forward to Fabric OS 6.2.x.
• In order to support nondisruptive Hot Code Load on an HP StorageWorks 8/40 SAN Switch with VF enabled, the total zoning DB size for the entire chassis should not exceed 1 MB. • A switch with VF enabled cannot use Port Mirroring or participate in a fabric that uses IP filter or password database distribution or administrative domains. You must disable the VF feature before deploying it in a fabric that uses these features. Licensing behavior When operating a switch with Fabric OS 6.2.
NOTE: After upgrading to this firmware release, if users want to enable the Adaptive Networking QoS feature on 4-Gb platforms and on the Extended Fabrics E_Ports on both 4-Gb and 8-Gb platforms, they must do so explicitly through the available user interfaces. FC Routing All FCR switches must be running Fabric OS 6.2.1x or later in order to support M-EOS 239 Domain Mode on the Mi10K. FCR backbone fabric ID changes • With 8-Gb director blades, the switch must be disabled to change the backbone fabric ID.
FCAP • Due to limitations with the certificates, FCAP authentication cannot be supported on user-defined logical switches. FCAP will continue to function with existing certificates for non-VF and the default logical switch of VF enabled switches. Note that authutil is not restricted from other logical switches at this time, and it can still be enabled on unsupported LS. • The pkicert (1.06) utility can cause evm errors.
(saved on the switch with pre-Fabric OS 6.2.0 code) is merged with a switch with the same alias member WWN in lower case characters, the merge fails, because the switches do not recognize these zoning configurations as being the same. For more information and workaround solutions, see the latest Fabric OS Administrator Guide.
Extended Fabrics and R_RDY flow control • Starting with Fabric OS 5.1, the Extended Fabrics feature is supported with R_RDY flow control (R_RDY flow control mode can be enabled using the portCfgISLMode command). R_RDY flow control mode that uses IDLE primitives does not support frame-based trunking for devices such as Time Division Multiplexor (TDM). To overcome this limitation and provide support for frame-based trunking with Extended Fabrics, Fabric OS 6.2.
(FF)/ARB (FF) for initialization and fill words. The portcfgfillword command, first introduced in Fabric OS 6.1.2, configures the ARB(FF)/ARB(FF) implementation. portCfgFillWord command The portCfgFillWord command configures the fill word for a single 8-Gb FC port. • Syntax: portcfgfillword [slotnumber/]portnumber, mode • Description: Use this command to configure the fill word for an 8-Gb FC port. (It does not apply to a non-8-Gb FC port.
◦ Changing the mode after Fabric OS 6.1.2x has been installed If you change the mode after installing Fabric OS 6.1.2x or later, with the exception as noted above for 6.2.0a and 6.2.0b, the portCfgFillWord command changes the configuration parameter in accordance with the selected mode, and automatically disables/enables the port for which the command was invoked. Subsequent Link Initializations will default to the new mode setting).
Logical Switch has been created with default configurations. Please configure the Logical Switch with appropriate switch and protocol settings before activating the Logical Switch. Web Tools functionality moved to DCFM The functionality that was moved from Web Tools 6.1.1 to DCFM applies to all versions of DCFM and also applies to Fabric OS 6.2.x. Table 7 (page 31) describes these changes. Table 7 Web Tools functionality in DCFM Function Add unzoned devices Web Tools 6.1.
1 Viewing FCIP tunnels is supported in Web Tools 6.1.1, but New, Edit Config, and Delete are available only in DCFM. 2 In Web Tools, non-local switch port id/WWN can be added using text box. Encryption behavior • HP recommends that the encrypted LUN containers be created when all of the nodes/Encryption Engines (EE) in the Data Encryption Key (DEK)/High Availability Cluster (HAC) are up and enabled.
message stating that the encryption engine is busy and a forced commit is required for the changes to take effect. A forced commit command halts all active rekeying processes running in all Crypto Target Containers and corrupts any LUN engaged in a rekeying operation. There is no recovery for this type of failure.
• The HP Encryption Switch and HP Encryption blade support registration of only one HPSKM Key Vault for Fabric OS 6.2.2x. Multiple HP SKM Key Vaults can be clustered at the SKM server level. Registration of a second SKM key vault is not blocked.
• The Encryption SAN Switch and Encryption FC blade do not support QoS. When using encryption or Frame Redirection, participating flows should not be included in QoS Zones. • With Windows and Veritas Volume Manager/Veritas Dynamic Multipathing, when LUN sizes less than 400 MB are presented to the Encryption SAN Switch for encryption, a host panic can occur. Fabric OS 6.2.2f does not support this configuration.
NOTE: When configuring multipath LUNs, care should be taken to add LUN 0 on all of the paths, subject to the following considerations: • If LUN 0 presented by the back-end target is a controller LUN (not a disk LUN; that is, not visible in the discoverLUN output), add LUN 0 to the container as a clear text LUN. Make sure all of the paths have this LUN 0 added for MPIO operation (EVA configuration, for example).
Table 8 Fabric OS 6.2.1 closed defects (continued) Closed defect summary Solution During a stress test with switchdisable/switchenable of all switches Fixed in Fabric OS 6.2.1 in a fabric, we observed both verify failure and a switch panic in the RTE module. A small timing window exists due to a corner case where, if a device sends Fixed in Fabric OS 6.2.1 PLOGI before the route is set up, it could cause PLOGI to drop in single switch fabric.
Table 8 Fabric OS 6.2.1 closed defects (continued) Closed defect summary Solution HA failover on HP StorageWorks DC SAN director times out, causing a switch reboot. Fixed in Fabric OS 6.2.1 Daemons may panic during FID (logical switch) deletion and creation if there is no significant time delay between the deletion and creation. The switch becomes unresponsive and the daemon panics. Fixed in Fabric OS 6.2.
Table 8 Fabric OS 6.2.1 closed defects (continued) Closed defect summary Solution Unable to get F_Ports (trunk ports) data from Web Tools, but CLI works. Fixed in Fabric OS 6.2.1 Fabric becomes unstable after changing EX_Port trunk to E_Port trunk. Switches bounce between reachable and unreachable in edge fabric. Fixed in Fabric OS 6.2.1 Fabric OS 6.2 RADIUS Calling-station-ID (31) implementation is used for Fixed in Fabric OS 6.2.
Table 9 Fabric OS 6.2.1a closed defects (continued) SMI failed to discover all switches over EX_Port after hafailover, and reports LOGIN FAILED after the GPL2 query targeted to the translate domain is rejected. Fixed in Fabric OS 6.2.1a SFP power supply values are not displayed correctly after doing a nondisruptive firmware upgrade to Fabric OS 6.2.1. Fixed in Fabric OS 6.2.1a High CPU load from DCFM doing supportsave causes the port to go offline with a laser FLT/link reset. Fixed in Fabric OS 6.2.
Fabric OS 6.2.2 fixes Table 11 (page 41) lists defects closed in the Fabric OS 6.2.2 firmware release. In addition to including all fixes from previous 6.2.1x releases, 6.2.2 contains all fixes included in the 5.3.2c, 6.0.1a, 6.1.1d, 6.1.2b and 6.2.0g releases. Table 11 Fabric OS 6.2.2 closed defects Closed defect summary Solution HP StorageWorks 4/256 SAN Director with multiprotocol router blade does not see new device across LSAN after upgrade from Fabric OS 5.x non-disruptively to Fabric OS 6.2.x.
Table 11 Fabric OS 6.2.2 closed defects (continued) Closed defect summary Solution Link timeout occurs on switch port connected to any Access Gateway during Fixed in Fabric OS 6.2.2 hafailover/reboot of AG switch with rlsdisable=0, causing traffic Workaround prior to update: Disable RLS disruption. as follows:Configure→system services→disable RLS probing If Fabric Watch fwalarms is turned off and Errlog is turned on, fabric watch daemon can crash causing a switch panic. Fixed in Fabric OS 6.2.
Table 11 Fabric OS 6.2.2 closed defects (continued) Closed defect summary Solution Fabric Watch SFP messages get logged after upgrade to Fabric OS 6.1.1b, Fixed in Fabric OS 6.2.2 due to I2C read values of 0xff and I2C NACK error case not being properly handled. Switch gets nsd panic when third-party switch in interopmode 3 and Fabric Fixed in Fabric OS 6.2.2 OS 6.2 sends invalid frames.
Table 11 Fabric OS 6.2.2 closed defects (continued) Closed defect summary Solution a large volume of F-Class traffic, a potential exists for an edge switch to be faulted due to lack of response from the core director. In a rare circumstance with a switch running Fabric Watch, a panic can occur after fwd terminated with exit code:134, exit sig:17, and parent sig:0 when IPC buffer is overrun on a busy system. Fixed in Fabric OS 6.2.
Table 12 Fabric OS 6.2.2a closed defects Closed defect summary Solution After a target port bounce, the FC FastWrite host cannot recognize the target due to a cam setup problem on the backend port used by FC FastWrite. Fixed in Fabric OS 6.2.2a After upgrading to Fabric OS 6.2.x, the 400 MP Router or Multiprotocol Fixed in Fabric OS 6.2.2a Router blade detects a credit problem on virtual channel 0, causing a frame drop on FCIP and FC FastWrite, and the host is unable to recognize the target.
Table 13 Fabric OS 6.2.2b closed defects (continued) Closed defect summary Solution No cascaded FICON CUP connectivity on 4/256 Director with 8Gb blade Fixed in Fabric OS 6.2.2b when E_Port and F_Port are on different ASICs on the blade. Under heavy CPU load, SFP laser fault condition may cause links to reset. Fixed in Fabric OS 6.2.2b (New parameter added to Fabric OS 6.2.2b to allow adjustment of SFP polling interval to avoid laser faults.
Table 14 Fabric OS 6.2.2c closed defects (continued) Closed defect summary Solution /fabos/libexec/webdconfigure as root to set "HTTP Enable" to yes. Or schedule a window, disable switch, and configdownload a file with http.enable:1 [end] when switch is at FOS 6.1.x to correct the configuration. If the switch is already stuck in a reboot loop, login as root via serial console, copy and paste the following command string into console as one line before the next reboot: sed 's/http.enabled:1/http.
Table 15 Fabric OS 6.2.2d closed defects (continued) Closed defect summary Solution When Access Gateway mode is enabled, switch Fixed in Fabric OS 6.2.2d. panics occur during upgrades from FOS 6.1.x to FOS 6.2.2c. This does not occur when upgrading from FOS 6.1.x to any other FOS 6.2 release. Fabric Watch messages (FW-1186 and FW-1190) with invalid values can be logged at the first Fabric Watch polling cycle after the slotstatsclear command is issued. Fixed in Fabric OS 6.2.2d.
Table 16 Fabric OS 6.2.2e closed defects (continued) Closed defect summary Solution Switch, HP 8/8 (8)-ports Enabled SAN, HP 8/24 Base 16-ports Enabled SAN Switch Switch, HP 8/40 Base 24-ports Enabled SAN Switch, and the HP 8/40 Power Pack+ 24-ports SAN Switch. Access Gateway is not displayed by the DCFM client Fixed in Fabric OS 6.2.2e. when utilizing an EOS seed switch.
Table 17 Fabric OS 6.2.2e closed defects (continued) Closed defect summary Solution 0. No data is being sent on the loop for an extended period of time. SNMP traps and related RASLOGs may not be generated as expected. For example, SNMP-1008 messages and traps stop while a port is bouncing every 20 minutes. Fixed in Fabric OS 6.2.2f. A kernel panic may occur while accessing the compact Fixed in Fabric OS 6.2.2f. flash and may result in a switch reboot.
