HP StorageWorks Fabric OS 5.2.0b Release Notes (AA-RWEYB-TE, February 2007)

FC Routing
• If an HP StorageWorks MP Router is present in the backbone fabric, the
command fcrDisable may take up to 8 minutes to complete. If the
MP Router is replaced by a B-Series MP Router blade (FR4-18i) or an HP
StorageW orks 400 MP Router, the command completes immediately.
• EX_Port trunking is not enabled by default.
Security
Remove any password enforced expiration of admin or root accounts
before downgrading firmware to 5.0.1 or lower versions.
Diagnostics
• All offline diagnostics commands should b e used only when th e switch
is disabled.
• POST can fail if new SFPs are added during POST. SFPs should only be
added while the switch is “online” or if the switch is powered off.
• When you use the diagnostic commands systemVerification and
diagSetBurnin, the switch or blade will fault when the burn-in error
log is full. Clear the burn-in log before running systemVerification
or diagSetBurnin.
• If there are ISLs present on the switch that are not used for routing because
they have higher linkcosts, disable the links before running spinfab.
HA
If there i s an already segmented port and backbone devices are exported
to an edge fabric, a build fabric/fabric reconfiguration can occur after
running haFailover. Ensure that there are no segmented ports before
upgrading firmware.
IPSe
cforB-SeriesMP
Rout
er blade (FR4-18i)
• IPS
ec implementation details:
—Pr
e-shared key
—Ma
in mode (IKE negotiation protocol)
—Tu
nnel mode in Encapsulating Security Payload (ESP)
• IP
Secspecificstatisticsnotprovided.
• No
NAT or IPV6 support
• F
astWrite and Tape Pipelining will not be supported in conjunction with
s
ecure tunnels.
• Jumbo frames will not be supported on secure tunnels.
• ICMP redirect is not suppor ted for IPSec-enabled tunnels.
• Onlyasinglesecuretunnelwillbeallowedonaport.Non-securetunnels
will not be allowed on the same port as secure tunnels.
• Modify operations are not allowed on secure tunnels. To change the
configuration of a secure tunnel, you must first delete the tunnel and then
recreate it with the desired options.
• Only a single route is supported on an interface with a secure tunnel.
• An IPSec tunnel cannot be created using the same local IP address if
ipperf is active and using the same local IP address (source IP address).
• Unidirectional supported throughput is ~104Mbytes/sec and
bidirectional supported throughput is ~90Mbytes/sec.
• An IPSec tunnel takes longer to come online than a non-IPSec tunnel.
Fabric OS 5.2.0b
17