Dell Brocade 300 User's Guide

Browse online or download User's Guide for Software Dell Brocade 300. Dell Brocade 300 Administrator's Guide User Manual

  • Download
  • Add to my manuals
  • Print
  • Page
    / 666
  • Table of contents
  • BOOKMARKS
  • Rated. / 5. Based on customer reviews
Page view 0
53-1002745-02
25 March 2013
®
Fabric OS
Administrator’s Guide
Supporting Fabric OS 7.1.0
Page view 0
1 2 3 4 5 6 ... 665 666

Summary of Contents

Page 1 - Fabric OS

53-1002745-0225 March 2013®Fabric OSAdministrator’s GuideSupporting Fabric OS 7.1.0

Page 2 - Document History

10 Fabric OS Administrator’s Guide53-1002745-02Telnet protocol. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .190Bl

Page 3 - Contents (High Level)

100 Fabric OS Administrator’s Guide53-1002745-02Enabling and disabling switches3FIGURE 4 Blade swap with Virtual Fabrics after the swapSwapping blades

Page 4

Fabric OS Administrator’s Guide 10153-1002745-02Power management3Using switchCfgPersistentDisable Entering switchCfgPersistentDisable with no argument

Page 5 - Contents

102 Fabric OS Administrator’s Guide53-1002745-02Equipment status3The power monitor compares the available power with the power required to determine i

Page 6

Fabric OS Administrator’s Guide 10353-1002745-02Equipment status34. Use the switchStatusShow command to further check the status of the switch.Verifyi

Page 7

104 Fabric OS Administrator’s Guide53-1002745-02Track and control switch changes3Verifying device connectivityUse the following procedure to verify de

Page 8 - Chapter 4 Routing Traffic

Fabric OS Administrator’s Guide 10553-1002745-02Track and control switch changes3switch:admin> trackchangesset 1 Committing configuration...done.3.

Page 9

106 Fabric OS Administrator’s Guide53-1002745-02Track and control switch changes3Flash 0 0MarginalPorts 0.00%[0] 0.00%[0]FaultyPorts 0.00%[0] 0.00%[0]

Page 10 - 53-1002745-02

Fabric OS Administrator’s Guide 10753-1002745-02Audit log configuration3Bad Fans contributing to DOWN status: (0..2) [2]Bad Fans contributing to MARGI

Page 11

108 Fabric OS Administrator’s Guide53-1002745-02Audit log configuration3NOTEOnly the active CP can generate audit messages because event classes being

Page 12

Fabric OS Administrator’s Guide 10953-1002745-02Duplicate PWWN handling during device login34. Enter the auditCfg --show command to view the filter co

Page 13

Fabric OS Administrator’s Guide 1153-1002745-02IP Filter policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2

Page 14

110 Fabric OS Administrator’s Guide53-1002745-02Duplicate PWWN handling during device login3Setting 2, Mixed precedenceWhen setting 2 is selected, the

Page 15

Fabric OS Administrator’s Guide 11153-1002745-02Chapter4Routing TrafficIn this chapter•Routing overview . . . . . . . . . . . . . . . . . . . . . . .

Page 16 - Chapter 15 NPIV

112 Fabric OS Administrator’s Guide53-1002745-02Routing overview4Paths and route selectionPaths are possible ways to get from one switch to another. E

Page 17

Fabric OS Administrator’s Guide 11353-1002745-02Routing overview4FSPF makes minimal use of the ISL bandwidth, leaving virtually all of it available fo

Page 18 - Section II Licensed Features

114 Fabric OS Administrator’s Guide53-1002745-02Inter-switch links4Inter-switch linksAn inter-switch link (ISL) is a link between two switches, E_Port

Page 19

Fabric OS Administrator’s Guide 11553-1002745-02Inter-switch links4Buffer creditsIn order to prevent the dropping of frames in the fabric, a device ca

Page 20

116 Fabric OS Administrator’s Guide53-1002745-02Inter-switch links4FIGURE 7 Virtual channels on a QoS-enabled ISL

Page 21

Fabric OS Administrator’s Guide 11753-1002745-02Gateway links4Gateway linksA gateway merges SANs into a single fabric by establishing point-to-point E

Page 22

118 Fabric OS Administrator’s Guide53-1002745-02Routing policies4Configuring a link through a gateway1. Connect to the switch at one end of the gatewa

Page 23 - Appendix B FIPS Support

Fabric OS Administrator’s Guide 11953-1002745-02Routing policies4Displaying the current routing policy1. Connect to the switch and log in using an acc

Page 24

12 Fabric OS Administrator’s Guide53-1002745-02Chapter 9 Installing and Maintaining FirmwareFirmware download process overview. . . . . . . . . . . .

Page 25

120 Fabric OS Administrator’s Guide53-1002745-02Routing policies4Device-based routingDevice-based routing optimizes routing path selection and utiliza

Page 26

Fabric OS Administrator’s Guide 12153-1002745-02Routing policies4CAUTIONSetting the routing policy is disruptive to the fabric because it requires tha

Page 27

122 Fabric OS Administrator’s Guide53-1002745-02Route selection4Route selectionSelection of specific routes can be dynamic, so that the router can con

Page 28

Fabric OS Administrator’s Guide 12353-1002745-02Frame order delivery4Frame order deliveryThe order in which frames are delivered is maintained within

Page 29

124 Fabric OS Administrator’s Guide53-1002745-02Frame order delivery4Using Frame Viewer to understand why frames are dropped When a frame is unable to

Page 30

Fabric OS Administrator’s Guide 12553-1002745-02Lossless Dynamic Load Sharing on ports4The -txport and -rxport options accept the arguments “-1” (for

Page 31

126 Fabric OS Administrator’s Guide53-1002745-02Lossless Dynamic Load Sharing on ports4You can disable or enable IOD when Lossless DLS is enabled. You

Page 32

Fabric OS Administrator’s Guide 12753-1002745-02Lossless Dynamic Load Sharing on ports4ICL limitationsIf ICL ports are connected during a core blade r

Page 33 - About This Document

128 Fabric OS Administrator’s Guide53-1002745-02Enabling forward error correction (FEC)4To avoid this behavior, it is recommended to define your logic

Page 34

Fabric OS Administrator’s Guide 12953-1002745-02Enabling forward error correction (FEC)4Use the following procedure to enable and disable FEC: 1. Conn

Page 35 - What’s new in this document

Fabric OS Administrator’s Guide 1353-1002745-02Limitations and restrictions of Virtual Fabrics . . . . . . . . . . . . . . . .288Restrictions on XISL

Page 36 - Document conventions

130 Fabric OS Administrator’s Guide53-1002745-02Frame Redirection4Frame RedirectionFrame Redirection provides a means to redirect traffic flow between

Page 37 - Notice to the reader

Fabric OS Administrator’s Guide 13153-1002745-02Frame Redirection4Example of creating a frame redirect zone The following example creates a redirect z

Page 38 - Getting technical help

132 Fabric OS Administrator’s Guide53-1002745-02Frame Redirection4

Page 39 - FT00X0054E9

Fabric OS Administrator’s Guide 13353-1002745-02Chapter5Managing User AccountsIn this chapter•User accounts overview . . . . . . . . . . . . . . . .

Page 40 - Document feedback

134 Fabric OS Administrator’s Guide53-1002745-02User accounts overview5Fabric OS provides four options for authenticating users: remote RADIUS service

Page 41 - Standard Features

Fabric OS Administrator’s Guide 13553-1002745-02User accounts overview5Admin Domain considerationsLegacy users with no Admin Domain specified and whos

Page 42

136 Fabric OS Administrator’s Guide53-1002745-02User accounts overview5The management channelThe management channel is the communication established b

Page 43

Fabric OS Administrator’s Guide 13753-1002745-02Local database user accounts5The assigned permissions can be no higher than the admin role permission

Page 44 - Platform services

138 Fabric OS Administrator’s Guide53-1002745-02Local database user accounts5Default accountsTable 15 lists the predefined accounts offered by Fabric

Page 45 - Management server database

Fabric OS Administrator’s Guide 13953-1002745-02Local database user accounts53. In response to the prompt, enter a password for the account. The passw

Page 46 - Adding a member to the ACL

14 Fabric OS Administrator’s Guide53-1002745-02Zone creation and maintenance . . . . . . . . . . . . . . . . . . . . . . . . . . .316Displaying existi

Page 47

140 Fabric OS Administrator’s Guide53-1002745-02Local user account database distribution5Changing the password for a different account1. Connect to th

Page 48

Fabric OS Administrator’s Guide 14153-1002745-02Password policies5Rejecting distributed user databases on the local switch1. Connect to the switch and

Page 49 - Topology discovery

142 Fabric OS Administrator’s Guide53-1002745-02Password policies5• PunctuationSpecifies the minimum number of punctuation characters that must appear

Page 50 - Disabling topology discovery

Fabric OS Administrator’s Guide 14353-1002745-02Password policies5Password expiration policyThe password expiration policy forces the expiration of a

Page 51 - Device login

144 Fabric OS Administrator’s Guide53-1002745-02Password policies5A failed login attempt counter is maintained for each user on each switch instance.

Page 52 - Port login process

Fabric OS Administrator’s Guide 14553-1002745-02The boot PROM password5Denial of service implicationsThe account lockout mechanism may be used to crea

Page 53 - Device recovery

146 Fabric OS Administrator’s Guide53-1002745-02The boot PROM password54. Enter 2. • If no password was previously set, the following message is displ

Page 54 - Daemon Description

Fabric OS Administrator’s Guide 14753-1002745-02The boot PROM password5• If a password was previously set, the following messages are displayed: Send

Page 55 - Fabric OS overview

148 Fabric OS Administrator’s Guide53-1002745-02The boot PROM password5The following options are available:4. Enter 3. 5. At the shell prompt, enter t

Page 56

Fabric OS Administrator’s Guide 14953-1002745-02Remote authentication5The passwd command applies only to the boot PROM password when it is entered fro

Page 57 - Telnet or SSH sessions

Fabric OS Administrator’s Guide 1553-1002745-02General rules for TI zones. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .356Traffic I

Page 58 - Getting help on a command

150 Fabric OS Administrator’s Guide53-1002745-02Remote authentication5The supported management access channels that integrate with RADIUS, LDAP, and T

Page 59 - • Arguments

Fabric OS Administrator’s Guide 15153-1002745-02Remote authentication5Supported LDAP optionsTable 16 summarizes the various LDAP options and Brocade s

Page 60

152 Fabric OS Administrator’s Guide53-1002745-02Remote authentication5Setting the switch authentication mode1. Connect to the switch and log in using

Page 61 - Password modification

Fabric OS Administrator’s Guide 15353-1002745-02Remote authentication5RADIUS, LDAP, and TACACS+ support all the defined RBAC roles described in Table

Page 62 - Brocade switches

154 Fabric OS Administrator’s Guide53-1002745-02Remote authentication5Fabric OS users on the RADIUS serverAll existing Fabric OS mechanisms for managi

Page 63

Fabric OS Administrator’s Guide 15553-1002745-02Remote authentication5 Brocade-AVPairs2 = "LFRoleList=admin:2,4-8,70,80,128;Chassi

Page 64 - Static Ethernet addresses

156 Fabric OS Administrator’s Guide53-1002745-02Remote authentication5For example, on a Linux FreeRADIUS Server, the user (user-za) with the following

Page 65

Fabric OS Administrator’s Guide 15753-1002745-02Remote authentication5Configuring RADIUS service on Linux consists of the following tasks: • Adding th

Page 66 - DHCP activation

158 Fabric OS Administrator’s Guide53-1002745-02Remote authentication5When you use network information service (NIS) for authentication, the only way

Page 67 - Disabling DHCP for IPv4

Fabric OS Administrator’s Guide 15953-1002745-02Remote authentication5If CHAP authentication is required, then Windows must be configured to store pas

Page 68 - IPv6 autoconfiguration

16 Fabric OS Administrator’s Guide53-1002745-02Changing bottleneck detection parameters . . . . . . . . . . . . . . . . . .384Examples of applying and

Page 69 - Date and time settings

160 Fabric OS Administrator’s Guide53-1002745-02Remote authentication5e. After returning to the Internet Authentication Service window, add additional

Page 70 - Setting the time zone

Fabric OS Administrator’s Guide 16153-1002745-02Remote authentication5c. Add Brocade-VSA macro and define the attributes as follows:• vid (Vendor-ID):

Page 71 - Network time protocol

162 Fabric OS Administrator’s Guide53-1002745-02Remote authentication5FIGURE 12 Example of the dictiona.dcm filed. When selecting items from the Add R

Page 72 - Domain IDs

Fabric OS Administrator’s Guide 16353-1002745-02Remote authentication5• LDAP authentication is used on the local switch only and not for the entire fa

Page 73 - Displaying the domain IDs

164 Fabric OS Administrator’s Guide53-1002745-02Remote authentication54. Associate the user to the group by adding the user to the group. For instruct

Page 74 - Switch names

Fabric OS Administrator’s Guide 16553-1002745-02Remote authentication53. Right click on select Properties. Click the Attribute Editor tab.4. Double-cl

Page 75 - Fabric name

166 Fabric OS Administrator’s Guide53-1002745-02Remote authentication5Two operational modes exist in LDAP authentication: FIPS mode and non-FIPS mode.

Page 76 - Switch and Backbone shutdown

Fabric OS Administrator’s Guide 16753-1002745-02Remote authentication5include /usr/local/etc/openldap/schema/cosine.schemainclude /usr

Page 77 - Powering off a Brocade switch

168 Fabric OS Administrator’s Guide53-1002745-02Remote authentication5Assigning a user to a groupBefore you can assign a user to a group, the memberOf

Page 78 - Basic connections

Fabric OS Administrator’s Guide 16953-1002745-02Remote authentication5Example to add a group member1. Create or edit a .ldif file with an entry simila

Page 79

Fabric OS Administrator’s Guide 1753-1002745-02Chapter 16 Dynamic Fabric Provisioning: Fabric-Assigned PWWNIntroduction to Dynamic Fabric Provisioning

Page 80 - Core PID addressing mode

170 Fabric OS Administrator’s Guide53-1002745-02Remote authentication5 DESC 'Brocade specific data for LDAP authentication' EQ

Page 81 - 256-area addressing mode

Fabric OS Administrator’s Guide 17153-1002745-02Remote authentication5objectClass: uidObjectcn: Sachinsn: Mishradescription: First userbrcdAdVfData: H

Page 82 - WWN-based PID assignment

172 Fabric OS Administrator’s Guide53-1002745-02Remote authentication5Configuring the TACACS+ server on LINUXFabricOS software supports TACACS+ authen

Page 83 - Showing PID assignments

Fabric OS Administrator’s Guide 17353-1002745-02Remote authentication5Configuring Admin Domain listsIf your network uses Admin Domains, you should cre

Page 84 - Backbone port blades

174 Fabric OS Administrator’s Guide53-1002745-02Remote authentication5Configuring the password expiration dateFabricOS lets you configure a password e

Page 85

Fabric OS Administrator’s Guide 17553-1002745-02Remote authentication5Adding an authentication server to the switch configuration 1. Connect to the sw

Page 86 - Setting port names

176 Fabric OS Administrator’s Guide53-1002745-02Remote authentication5Displaying the current authentication configuration 1. Connect to the switch and

Page 87 - Port identification by index

Fabric OS Administrator’s Guide 17753-1002745-02Chapter6Configuring ProtocolsIn this chapter•Security protocols . . . . . . . . . . . . . . . . . . .

Page 88 - Swapping port area IDs

178 Fabric OS Administrator’s Guide53-1002745-02Secure Copy6Table 22 describes additional software or certificates that you must obtain to deploy secu

Page 89 - Enabling a port

Fabric OS Administrator’s Guide 17953-1002745-02Secure Shell protocol6Setting up SCP for configuration uploads and downloadsUse the following procedur

Page 90 - Setting port modes

18 Fabric OS Administrator’s Guide53-1002745-02SAN management with Admin Domains . . . . . . . . . . . . . . . . . . . . .454CLI commands in an AD con

Page 91

180 Fabric OS Administrator’s Guide53-1002745-02Secure Shell protocol6SSH public key authenticationOpenSSH public key authentication provides password

Page 92 - Setting port speeds

Fabric OS Administrator’s Guide 18153-1002745-02Secure Shell protocol6Enter login name:auserPassword:Public key is imported successfully.4. Test the s

Page 93 - (slotshow)

182 Fabric OS Administrator’s Guide53-1002745-02Secure Sockets Layer protocol6Deleting public keys on the switchUse the following procedure to delete

Page 94

Fabric OS Administrator’s Guide 18353-1002745-02Secure Sockets Layer protocol6You should upgrade to the Java 1.6.0 plug-in on your management workstat

Page 95 - Core blades

184 Fabric OS Administrator’s Guide53-1002745-02Secure Sockets Layer protocol61. Connect to the switch and log in using an account with admin permissi

Page 96 - Enabling and disabling blades

Fabric OS Administrator’s Guide 18553-1002745-02Secure Sockets Layer protocol6Obtaining certificates Once you have generated a CSR, you will need to f

Page 97 - Blade swapping

186 Fabric OS Administrator’s Guide53-1002745-02Secure Sockets Layer protocol61. Connect to the switch and log in using an account with admin permissi

Page 98 - How blades are swapped

Fabric OS Administrator’s Guide 18753-1002745-02Secure Sockets Layer protocol64. Click the Intermediate or Trusted Root tab and scroll the list to see

Page 99

188 Fabric OS Administrator’s Guide53-1002745-02Simple Network Management Protocol6Issuer: CN=Brocade, OU=Software, O=Brocade Communications, L=San Jo

Page 100 - Swapping blades

Fabric OS Administrator’s Guide 18953-1002745-02Simple Network Management Protocol6• SW-EXTTRAP Includes the swSsn (Software Serial Number) as a part

Page 101 - Power management

Fabric OS Administrator’s Guide 1953-1002745-02Ports on Demand . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .483Displa

Page 102 - Equipment status

190 Fabric OS Administrator’s Guide53-1002745-02Telnet protocol6SNMP security levels Use the snmpConfig --set seclevel command to set the security lev

Page 103 - Verifying fabric connectivity

Fabric OS Administrator’s Guide 19153-1002745-02Telnet protocol6ATTENTIONThe rule number assigned must precede the default rule number for this protoc

Page 104 - Verifying device connectivity

192 Fabric OS Administrator’s Guide53-1002745-02Listener applications6Refer to “Deleting a rule from an IP Filter policy” on page 223 for more informa

Page 105

Fabric OS Administrator’s Guide 19353-1002745-02Ports and applications used by switches6Port configurationTable 27 provides information on ports that

Page 106 - Example output from a switch

194 Fabric OS Administrator’s Guide53-1002745-02Ports and applications used by switches6

Page 107 - Audit log configuration

Fabric OS Administrator’s Guide 19553-1002745-02Chapter7Configuring Security PoliciesIn this chapter•ACL policies overview . . . . . . . . . . . . .

Page 108 - Audit filter is enabled

196 Fabric OS Administrator’s Guide53-1002745-02ACL policy management7Policies with the same state are grouped together in a Policy Set. Each switch h

Page 109

Fabric OS Administrator’s Guide 19753-1002745-02ACL policy management7Displaying ACL policiesYou can view the active and defined policy sets at any ti

Page 110

198 Fabric OS Administrator’s Guide53-1002745-02ACL policy management7Example of deleting an ACL policyswitch:admin> secpolicydelete "DCC_POLI

Page 111 - Routing Traffic

Fabric OS Administrator’s Guide 19953-1002745-02FCS policies7Example of aborting unsaved changesswitch:admin> secpolicyabortUnsaved data has been a

Page 112 - Paths and route selection

Copyright © 2013 Brocade Communications Systems, Inc. All Rights Reserved.ADX, AnyIO, Brocade, Brocade Assurance, the B-wing symbol, DCX, Fabric OS, I

Page 113 - Fibre Channel NAT

20 Fabric OS Administrator’s Guide53-1002745-02Top Talker monitors. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .510Top Ta

Page 114 - Inter-switch links

200 Fabric OS Administrator’s Guide53-1002745-02FCS policies7Table 30 shows the commands for switch operations for Primary FCS enforcement.In Fabric O

Page 115 - Virtual channels

Fabric OS Administrator’s Guide 20153-1002745-02FCS policies7Creating an FCS policy1. Connect to the switch and log in using an account with admin per

Page 116

202 Fabric OS Administrator’s Guide53-1002745-02FCS policies7FCS policy distributionThe FCS policy can be automatically distributed using the fddCfg -

Page 117 - Gateway links

Fabric OS Administrator’s Guide 20353-1002745-02Device Connection Control policies7Device Connection Control policiesMultiple Device Connection Contro

Page 118 - Routing policies

204 Fabric OS Administrator’s Guide53-1002745-02Device Connection Control policies7Creating a DCC policyDCC policies must follow the naming convention

Page 119 - Exchange-based routing

Fabric OS Administrator’s Guide 20553-1002745-02Device Connection Control policies7Deleting a DCC policy1. Connect to the switch and log in using an a

Page 120 - AP route policies

206 Fabric OS Administrator’s Guide53-1002745-02SCC Policies7Table 34 shows the behavior of a DCC policy created manually with the physical PWWN of a

Page 121 - Setting the routing policy

Fabric OS Administrator’s Guide 20753-1002745-02Authentication policy for fabric elements7Creating an SCC policy1. Connect to the switch and log in us

Page 122 - Route selection

208 Fabric OS Administrator’s Guide53-1002745-02Authentication policy for fabric elements7FIGURE 13 DH-CHAP authenticationIf you use DH-CHAP authentic

Page 123 - Frame order delivery

Fabric OS Administrator’s Guide 20953-1002745-02Authentication policy for fabric elements7Virtual Fabrics considerationsThe switch authentication poli

Page 124

Fabric OS Administrator’s Guide 2153-1002745-02Chapter 22 Managing Trunking ConnectionsTrunking overview . . . . . . . . . . . . . . . . . . . . . . .

Page 125 - ATTENTION

210 Fabric OS Administrator’s Guide53-1002745-02Authentication policy for fabric elements7Re-authenticating E_PortsUse the authUtil --authinit command

Page 126 - Lossless core

Fabric OS Administrator’s Guide 21153-1002745-02Authentication policy for fabric elements7and CT frames, except the AUTH_NEGOTIATE ELS frame, are bloc

Page 127 - Traffic flow limitations

212 Fabric OS Administrator’s Guide53-1002745-02Authentication policy for fabric elements7Authentication protocolsUse the authUtil command to perform

Page 128 - Limitations

Fabric OS Administrator’s Guide 21353-1002745-02Authentication policy for fabric elements7Secret key pairs for DH-CHAPWhen you configure the switches

Page 129 - Viewing current FEC settings

214 Fabric OS Administrator’s Guide53-1002745-02Authentication policy for fabric elements7Setting a secret key pair1. Log in to the switch using an ac

Page 130 - Frame Redirection

Fabric OS Administrator’s Guide 21553-1002745-02Authentication policy for fabric elements7FCAP configuration overviewBeginning with Fabric OS release

Page 131 - Viewing frame redirect zones

216 Fabric OS Administrator’s Guide53-1002745-02Authentication policy for fabric elements7Exporting the CSR for FCAPYou will need to export the CSR fi

Page 132

Fabric OS Administrator’s Guide 21753-1002745-02IP Filter policy7Starting FCAP authentication1. Log in to the switch using an account with admin permi

Page 133 - Managing User Accounts

218 Fabric OS Administrator’s Guide53-1002745-02IP Filter policy7Virtual Fabrics considerations: Each logical switch cannot have its own different IP

Page 134 - Role-Based Access Control

Fabric OS Administrator’s Guide 21953-1002745-02IP Filter policy71. Log in to the switch using an account with admin permissions, or an account associ

Page 135 - Role permissions

22 Fabric OS Administrator’s Guide53-1002745-02Buffer credit management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .555Buffer-to-bu

Page 136 - Managing user-defined roles

220 Fabric OS Administrator’s Guide53-1002745-02IP Filter policy7Source addressFor an IPv4 filter policy, the source address has to be a 32-bit IPv4 a

Page 137 - Local database user accounts

Fabric OS Administrator’s Guide 22153-1002745-02IP Filter policy7ProtocolTCP and UDP protocols are valid protocol selections. Fabric OS v6.2.0 and lat

Page 138 - Default accounts

222 Fabric OS Administrator’s Guide53-1002745-02IP Filter policy7Traffic type and destination IPThe traffic type and destination IP elements allow an

Page 139 - Local account passwords

Fabric OS Administrator’s Guide 22353-1002745-02IP Filter policy7IP Filter policy enforcementAn active IP Filter policy is a filter applied to the IP

Page 140 - --localaccept PWD command

224 Fabric OS Administrator’s Guide53-1002745-02Policy database distribution71. Log in to the switch using an account with admin permissions, or an ac

Page 141 - Password policies

Fabric OS Administrator’s Guide 22553-1002745-02Policy database distribution7• Manually distribute an ACL policy database — Run the distribute command

Page 142 - Password history policy

226 Fabric OS Administrator’s Guide53-1002745-02Policy database distribution7Use the chassisDistribute command to distribute IP filter policies. To di

Page 143 - Account lockout policy

Fabric OS Administrator’s Guide 22753-1002745-02Policy database distribution7ACL policy distribution to other switchesThis section explains how to man

Page 144 - Unlocking an account

228 Fabric OS Administrator’s Guide53-1002745-02Policy database distribution7Displaying the fabric-wide consistency policy1. Connect to the switch and

Page 145 - The boot PROM password

Fabric OS Administrator’s Guide 22953-1002745-02Policy database distribution7Notes on joining a switch to the fabricWhen a switch is joined to a fabri

Page 146 - Option Description

Fabric OS Administrator’s Guide 2353-1002745-02LSAN zone configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .590Use of Adm

Page 147 - New password:

230 Fabric OS Administrator’s Guide53-1002745-02Policy database distribution7Non-matching fabric-wide consistency policiesYou may encounter one of the

Page 148

Fabric OS Administrator’s Guide 23153-1002745-02Management interface security7Management interface securityYou can secure an Ethernet management inter

Page 149 - Remote authentication

232 Fabric OS Administrator’s Guide53-1002745-02Management interface security7FIGURE 14 Protected endpoints configurationA possible drawback of end-to

Page 150 - Switch configuration

Fabric OS Administrator’s Guide 23353-1002745-02Management interface security7FIGURE 16 Endpoint-to-gateway tunnel configurationRoadWarrior configurat

Page 151 - Command options

234 Fabric OS Administrator’s Guide53-1002745-02Management interface security7these values in negotiations to create IP sec SAs. You must create an SA

Page 152 - Fabric OS user accounts

Fabric OS Administrator’s Guide 23553-1002745-02Management interface security7IP sec traffic selectorThe traffic selector is a traffic filter that def

Page 153 - Item Value Description

236 Fabric OS Administrator’s Guide53-1002745-02Management interface security7The IP secConfig command does not support manipulating pre-shared keys c

Page 154 - Linux FreeRADIUS server

Fabric OS Administrator’s Guide 23753-1002745-02Management interface security7Example of creating an IP sec SA policyThis example creates an IP sec SA

Page 155

238 Fabric OS Administrator’s Guide53-1002745-02Management interface security710. Verify traffic is protected.a. Initiate a telnet, SSH, or ping sessi

Page 156 - Setting up a RADIUS server

Fabric OS Administrator’s Guide 23953-1002745-02Management interface security76. Import the pre-shared key file using the secCertUtil command. The fil

Page 157 - • Enabling clients

24 Fabric OS Administrator’s Guide53-1002745-02

Page 158

240 Fabric OS Administrator’s Guide53-1002745-02Management interface security7• Use the IP secConfig –-show policy ike –a command with the specified o

Page 159 - . IAS uses the Windows

Fabric OS Administrator’s Guide 24153-1002745-02Chapter8Maintaining the Switch Configuration FileIn this chapter•Configuration settings . . . . . . .

Page 160 - RSA RADIUS server

242 Fabric OS Administrator’s Guide53-1002745-02Configuration settings8If your user account has chassis account permissions, you can use any of the fo

Page 161 - • type1 (Vendor-Type): 1

Fabric OS Administrator’s Guide 24353-1002745-02Configuration settings8[Active Security policies][cryptoDev][FICU SAVED FILES][Banner][End][Switch Con

Page 162

244 Fabric OS Administrator’s Guide53-1002745-02Configuration file backup8• LicensesLservc – Sentinel License configuration• GE blade mode – GigE Mode

Page 163

Fabric OS Administrator’s Guide 24553-1002745-02Configuration file backup8Before you upload a configuration file, verify that you can reach the FTP se

Page 164 - Creating a group

246 Fabric OS Administrator’s Guide53-1002745-02Configuration file restoration8Configuration file restorationWhen you restore a configuration file, yo

Page 165

Fabric OS Administrator’s Guide 24753-1002745-02Configuration file restoration8If you must set up your switch again, run the commands listed in Table

Page 166 - Enabling group membership

248 Fabric OS Administrator’s Guide53-1002745-02Configuration file restoration8CAUTIONThough the switch itself has advanced error checking, the config

Page 167

Fabric OS Administrator’s Guide 24953-1002745-02Configuration file restoration8Example of configDownload without Admin Domainsswitch:admin> configd

Page 168 - Modifying an entry

Fabric OS Administrator’s Guide 2553-1002745-02FiguresFigure 1 Well-known addresses . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Page 169 - Example to add a group member

250 Fabric OS Administrator’s Guide53-1002745-02Configurations across a fabric8Activating configDownload: Switch is disabledconfigDownload complete: O

Page 170

Fabric OS Administrator’s Guide 25153-1002745-02Configuration management for Virtual Fabrics8Uploading a configuration file from a switch with Virtual

Page 171 - TACACS+ service

252 Fabric OS Administrator’s Guide53-1002745-02Configuration management for Virtual Fabrics8Wait for the configuration file to download on to the swi

Page 172 - The tac_plus.cfg file

Fabric OS Administrator’s Guide 25353-1002745-02Brocade configuration form8Brocade configuration formUse the form in Table 48 as a hard copy reference

Page 173

254 Fabric OS Administrator’s Guide53-1002745-02Brocade configuration form8

Page 174

Fabric OS Administrator’s Guide 25553-1002745-02Chapter9Installing and Maintaining Firmware In this chapter•Firmware download process overview . . . .

Page 175 - Example enabling TACACS+

256 Fabric OS Administrator’s Guide53-1002745-02Firmware download process overview9You can download Fabric OS to a Backbone, which is a chassis; and t

Page 176 - Example for TACACS+

Fabric OS Administrator’s Guide 25753-1002745-02Firmware download process overview9Upgrading and downgrading firmwareUpgrading means installing a newe

Page 177 - Configuring Protocols

258 Fabric OS Administrator’s Guide53-1002745-02Preparing for a firmware download9Preparing for a firmware downloadBefore executing a firmware downloa

Page 178 - Secure Copy

Fabric OS Administrator’s Guide 25953-1002745-02Preparing for a firmware download95. Connect to the switch and log in using an account with admin perm

Page 179 - Secure Shell protocol

26 Fabric OS Administrator’s Guide53-1002745-02Figure 36 Illegal ETIZ configuration: two paths from one port to two devices on the same remote domain

Page 180 - SSH public key authentication

260 Fabric OS Administrator’s Guide53-1002745-02Firmware download on switches9Firmware download on switchesBrocade fixed-port switches maintain primar

Page 181

Fabric OS Administrator’s Guide 26153-1002745-02Firmware download on switches9Upgrading firmware for Brocade fixed-port switches1. Take the following

Page 182 - Browser and Java support

262 Fabric OS Administrator’s Guide53-1002745-02Firmware download on a Backbone9Firmware download on a BackboneATTENTIONTo successfully download firmw

Page 183 - SSL configuration overview

Fabric OS Administrator’s Guide 26353-1002745-02Firmware download on a Backbone9Upgrading firmware on Backbones (including blades)There is only one ch

Page 184 - Example of exporting a CSR

264 Fabric OS Administrator’s Guide53-1002745-02Firmware download on a Backbone9If an AP blade is present: At the point of the failover, an autoleveli

Page 185 - Obtaining certificates

Fabric OS Administrator’s Guide 26553-1002745-02Firmware download from a USB device9Slot 7 (CP1, active): Firmware has been downloaded to the secondar

Page 186 - The browser

266 Fabric OS Administrator’s Guide53-1002745-02FIPS support9Downloading from the USB device using the relative path1. Log in to the switch using an a

Page 187

Fabric OS Administrator’s Guide 26753-1002745-02FIPS support9NOTEIf FIPS mode is enabled, all logins should be handled through SSH or direct serial me

Page 188 - • FibreAlliance MIB trap

268 Fabric OS Administrator’s Guide53-1002745-02Testing and restoring firmware on switches9Power-on firmware checksum testFIPS requires the checksums

Page 189 - SNMP and Virtual Fabrics

Fabric OS Administrator’s Guide 26953-1002745-02Testing and restoring firmware on switches9User Name: userfooFile Name: /home/userfoo/v7.0.0Password:

Page 190 - Telnet protocol

Fabric OS Administrator’s Guide 2753-1002745-02Figure 77 MetaSAN with imported devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Page 191 - Unblocking Telnet

270 Fabric OS Administrator’s Guide53-1002745-02Testing and restoring firmware on Backbones9Testing and restoring firmware on BackbonesThis procedure

Page 192 - Listener applications

Fabric OS Administrator’s Guide 27153-1002745-02Testing and restoring firmware on Backbones98. Verify the failover.a. Connect to the Backbone on the a

Page 193 - Port configuration

272 Fabric OS Administrator’s Guide53-1002745-02Testing and restoring firmware on Backbones9ATTENTIONStop! If you have completed step 11, then you hav

Page 194

Fabric OS Administrator’s Guide 27353-1002745-02Validating a firmware download9Validating a firmware downloadValidate the firmware download by running

Page 195 - Configuring Security Policies

274 Fabric OS Administrator’s Guide53-1002745-02Validating a firmware download9

Page 196 - ACL policy management

Fabric OS Administrator’s Guide 27553-1002745-02Chapter10Managing Virtual FabricsIn this chapter•Virtual Fabrics overview . . . . . . . . . . . . . .

Page 197 - Deleting an ACL policy

276 Fabric OS Administrator’s Guide53-1002745-02Logical switch overview10This chapter describes the logical switch and logical fabric features. For in

Page 198 - Example of removing a member

Fabric OS Administrator’s Guide 27753-1002745-02Logical switch overview10After you enable Virtual Fabrics, you can create up to seven additional logic

Page 199 - FCS policies

278 Fabric OS Administrator’s Guide53-1002745-02Logical switch overview10FIGURE 19 Fabric IDs assigned to logical switchesPort assignment in logical s

Page 200

Fabric OS Administrator’s Guide 27953-1002745-02Logical switch overview10A given port is always in one (and only one) logical switch. The following sc

Page 201 - Creating an FCS policy

28 Fabric OS Administrator’s Guide53-1002745-02

Page 202 - FCS policy distribution

280 Fabric OS Administrator’s Guide53-1002745-02Logical switch overview10FIGURE 21 Logical switches connected to devices and non-Virtual Fabrics switc

Page 203 - DCC policy restrictions

Fabric OS Administrator’s Guide 28153-1002745-02Management model for logical switches10Management model for logical switchesYou can use one common IP

Page 204 - Creating a DCC policy

282 Fabric OS Administrator’s Guide53-1002745-02Logical fabric overview10Logical fabric and ISLsFigure 23 shows two physical chassis divided into logi

Page 205 - Deleting a DCC policy

Fabric OS Administrator’s Guide 28353-1002745-02Logical fabric overview10Base switch and extended ISLsAnother way to connect logical switches is to us

Page 206 - SCC Policies

284 Fabric OS Administrator’s Guide53-1002745-02Logical fabric overview10Think of the logical switches as being connected with logical ISLs, as shown

Page 207 - Creating an SCC policy

Fabric OS Administrator’s Guide 28553-1002745-02Logical fabric overview10By default, the physical ISL path is favored over the logical path (over the

Page 208 - E_Port authentication

286 Fabric OS Administrator’s Guide53-1002745-02Account management and Virtual Fabrics10Account management and Virtual FabricsWhen user accounts are c

Page 209

Fabric OS Administrator’s Guide 28753-1002745-02Supported platforms for Virtual Fabrics10Supported port configurations in Brocade BackbonesSome of the

Page 210 - Device authentication policy

288 Fabric OS Administrator’s Guide53-1002745-02Limitations and restrictions of Virtual Fabrics10Virtual Fabrics interaction with other Fabric OS feat

Page 211 - AUTH policy restrictions

Fabric OS Administrator’s Guide 28953-1002745-02Limitations and restrictions of Virtual Fabrics10Refer to “Supported port configurations in Brocade Ba

Page 212 - Authentication protocols

Fabric OS Administrator’s Guide 2953-1002745-02TablesTable 1 Daemons that are automatically restarted. . . . . . . . . . . . . . . . . . . . . . . . .

Page 213 - Secret key pairs for DH-CHAP

290 Fabric OS Administrator’s Guide53-1002745-02Enabling Virtual Fabrics mode10Enabling Virtual Fabrics modeA fabric is said to be in Virtual Fabrics

Page 214 - Setting a secret key pair

Fabric OS Administrator’s Guide 29153-1002745-02Configuring logical switches to use basic configuration values10Use the following procedure to disable

Page 215 - FCAP configuration overview

292 Fabric OS Administrator’s Guide53-1002745-02Creating a logical switch or base switch103. Enter n at the prompts to configure system and cfgload at

Page 216 - Importing CA for FCAP

Fabric OS Administrator’s Guide 29353-1002745-02Executing a command in a different logical switch context10Example The following example creates a log

Page 217 - IP Filter policy

294 Fabric OS Administrator’s Guide53-1002745-02Deleting a logical switch10switchMode: NativeswitchRole: PrincipalswitchDomain: 14switchId: fffc0eswit

Page 218 - Saving an IP Filter policy

Fabric OS Administrator’s Guide 29553-1002745-02Adding and moving ports on a logical switch10Example of deleting the logical switch with FID 7switch_4

Page 219 - IP Filter policy rules

296 Fabric OS Administrator’s Guide53-1002745-02Displaying logical switch configuration10Displaying logical switch configurationUse the following proc

Page 220 - Destination port

Fabric OS Administrator’s Guide 29753-1002745-02Changing a logical switch to a base switch10Checking and logging message: fid = 5.Please enable your s

Page 221 - Protocol

298 Fabric OS Administrator’s Guide53-1002745-02Setting up IP addresses for a Virtual Fabric10Configure...Fabric parameters (yes, y, no, n): [no] y

Page 222 - Default policy rules

Fabric OS Administrator’s Guide 29953-1002745-02Configuring a logical switch to use XISLs10Configuring a logical switch to use XISLs When you create a

Page 223 - IP Filter policy enforcement

Fabric OS Administrator’s Guide 353-1002745-02Contents (High Level)Section I Standard FeaturesChapter 1 Understanding Fibre Channel Services . . . .

Page 224 - Policy database distribution

30 Fabric OS Administrator’s Guide53-1002745-02Table 37 Supported services. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Page 225 - Distribution

300 Fabric OS Administrator’s Guide53-1002745-02Creating a logical fabric using XISLs10Creating a logical fabric using XISLsThis procedure describes h

Page 226

Fabric OS Administrator’s Guide 30153-1002745-02Creating a logical fabric using XISLs104. Configure the logical switches in each chassis:a. Connect to

Page 227 - Fabric-wide enforcement

302 Fabric OS Administrator’s Guide53-1002745-02Creating a logical fabric using XISLs10

Page 228

Fabric OS Administrator’s Guide 30353-1002745-02Chapter11Administering Advanced ZoningIn this chapter•Zone types . . . . . . . . . . . . . . . . . . .

Page 229

304 Fabric OS Administrator’s Guide53-1002745-02Zoning overview11• QoS zonesAssign high or low priority to designated traffic flows. QoS zones are reg

Page 230

Fabric OS Administrator’s Guide 30553-1002745-02Zoning overview11FIGURE 29 Zoning exampleApproaches to zoningTable 53 lists the various approaches you

Page 231 - Management interface security

306 Fabric OS Administrator’s Guide53-1002745-02Zoning overview11Zone objectsA zone object is any device in a zone, such as: • Physical port number or

Page 232 - Endpoint-to-gateway tunnel

Fabric OS Administrator’s Guide 30753-1002745-02Zoning overview11The types of zone objects used to define a zone can be mixed. For example, a zone def

Page 233 - Security associations

308 Fabric OS Administrator’s Guide53-1002745-02Zoning overview11The different types of zone configurations are:• Defined ConfigurationThe complete se

Page 234 - IP sec policies

Fabric OS Administrator’s Guide 30953-1002745-02Zoning overview11Identifying the enforced zone typeUse the following procedure to identify zones and z

Page 235 - IKE policies

Fabric OS Administrator’s Guide 3153-1002745-02Table 78 VCs assigned to QoS priority for frame prioritization in CS_CTL auto mode . . 521Table 79 Tr

Page 236 - Creating the tunnel

310 Fabric OS Administrator’s Guide53-1002745-02Broadcast zones11Best practices for zoningThe following are recommendations for using zoning:• Always

Page 237

Fabric OS Administrator’s Guide 31153-1002745-02Broadcast zones11Figure 30 illustrates how broadcast zones work with Admin Domains. Figure 30 shows a

Page 238

312 Fabric OS Administrator’s Guide53-1002745-02Zone aliases11High availability considerations with broadcast zonesIf a switch has broadcast zone-capa

Page 239

Fabric OS Administrator’s Guide 31353-1002745-02Zone aliases11Creating an aliasUse the following procedure to create an alias: 1. Connect to the switc

Page 240

314 Fabric OS Administrator’s Guide53-1002745-02Zone aliases11inconsistent. The inconsistency will result in differentEffective Zoning configurations

Page 241 - Configuration settings

Fabric OS Administrator’s Guide 31553-1002745-02Zone aliases11The cfgSave command ends and commits the current zoning transaction buffer to nonvolatil

Page 242 - Configuration file format

316 Fabric OS Administrator’s Guide53-1002745-02Zone creation and maintenance11Zone creation and maintenanceFabric OS allows you to create zones to be

Page 243 - Chassis section

Fabric OS Administrator’s Guide 31753-1002745-02Zone creation and maintenance11To create a broadcast zone, use the reserved name “broadcast”.3. Enter

Page 244 - Configuration file backup

318 Fabric OS Administrator’s Guide53-1002745-02Zone creation and maintenance11Example Adding members to a zone switch:admin> zoneadd matt, "z

Page 245

Fabric OS Administrator’s Guide 31953-1002745-02Zone creation and maintenance11alias: jeff 30:00:00:05:1e:a1:cd:02; 40:00:00:05:1e:a1:cd:04alias: jone

Page 246 - Restrictions

32 Fabric OS Administrator’s Guide53-1002745-02

Page 247 - Command Displays

320 Fabric OS Administrator’s Guide53-1002745-02Zone creation and maintenance11alias: jake 4,7; 8,9; 14,11alias: jeff 30:00:00:05:1e:a1:cd:02; 40:00:0

Page 248 - Restoring a configuration

Fabric OS Administrator’s Guide 32153-1002745-02Zone creation and maintenance11The cfgSave command ends and commits the current zoning transaction buf

Page 249

322 Fabric OS Administrator’s Guide53-1002745-02Zone creation and maintenance11Viewing a zone in the defined configurationUse the following procedure

Page 250 - Security considerations

Fabric OS Administrator’s Guide 32353-1002745-02Zone creation and maintenance111,1; 1,2alias: array1 21:00:00:20:37:0c:76:8c; 21:00:00:20:37:0c:71:02a

Page 251

324 Fabric OS Administrator’s Guide53-1002745-02Zone creation and maintenance11alias: loop1 21:00:00:20:37:0c:76:85; 21:00:00:20:37:0c:71:df3. Enter t

Page 252

Fabric OS Administrator’s Guide 32553-1002745-02Zone creation and maintenance11If you enter yes, and the cfgSave operation completes successfully then

Page 253 - Brocade configuration form

326 Fabric OS Administrator’s Guide53-1002745-02Default zoning mode11Default zoning modeThe default zoning mode controls device access if zoning is no

Page 254

Fabric OS Administrator’s Guide 32753-1002745-02Zone database size11switch:admin> cfgsave WARNING!!!The changes you are attempting to save will ren

Page 255

328 Fabric OS Administrator’s Guide53-1002745-02Zone configurations11Zone configurationsYou can store a number of zones in a zone configuration databa

Page 256

Fabric OS Administrator’s Guide 32953-1002745-02Zone configurations11Adding zones (members) to a zone configurationUse the following procedure to add

Page 257 - HA sync state

Fabric OS Administrator’s Guide 3353-1002745-02About This DocumentIn this chapter•How this document is organized . . . . . . . . . . . . . . . . . .

Page 258 - HA sync state Remedy

330 Fabric OS Administrator’s Guide53-1002745-02Zone configurations11Enabling a zone configurationThe following procedure ends and commits the current

Page 259 - Connected switches

Fabric OS Administrator’s Guide 33153-1002745-02Zone configurations11Deleting a zone configurationUse the following procedure to delete a zone configu

Page 260 - Firmware download on switches

332 Fabric OS Administrator’s Guide53-1002745-02Zone configurations11alias: array1 21:00:00:20:37:0c:76:8c; 21:00:00:20:37:0c:71:02alias: array2 21:00

Page 261

Fabric OS Administrator’s Guide 33353-1002745-02Zone object maintenance11Clearing all zone configurationsUse the following procedure to clear all zone

Page 262

334 Fabric OS Administrator’s Guide53-1002745-02Zone object maintenance114. Enter the cfgShow command to verify the new zone object is present.switch:

Page 263

Fabric OS Administrator’s Guide 33553-1002745-02Zone object maintenance11You are about to expunge one configuration or member. This action could resul

Page 264

336 Fabric OS Administrator’s Guide53-1002745-02Zone configuration management11Zone configuration managementYou can add, delete, or remove individual

Page 265 - Viewing the USB file system

Fabric OS Administrator’s Guide 33753-1002745-02Zone merging11Adding a new fabric that has no zone configuration information to an existing fabric is

Page 266 - FIPS support

338 Fabric OS Administrator’s Guide53-1002745-02Zone merging11• Merging two fabrics Both fabrics have identical zones and configurations enabled, incl

Page 267 - The firmwareDownload command

Fabric OS Administrator’s Guide 33953-1002745-02Zone merging11Zone merging scenariosThe following tables provide information on merging zones and the

Page 268

34 Fabric OS Administrator’s Guide53-1002745-02• Chapter 11, “Administering Advanced Zoning,” provides procedures for use of the Brocade Advanced Zoni

Page 269

340 Fabric OS Administrator’s Guide53-1002745-02Zone merging11Switch A and Switch B have different defined configurations. Switch B has an effective c

Page 270

Fabric OS Administrator’s Guide 34153-1002745-02Zone merging11TABLE 58 Zone merging scenarios: TI zonesDescription Switch A Switch B Expected resultsS

Page 271

342 Fabric OS Administrator’s Guide53-1002745-02Concurrent zone transactions11NOTEWhen merging mixed versions of Fabric OS where both sides have defau

Page 272

Fabric OS Administrator’s Guide 34353-1002745-02Concurrent zone transactions11u30:FID128:admin> cfgsave You are about to save the Defined zoning co

Page 273

344 Fabric OS Administrator’s Guide53-1002745-02Concurrent zone transactions11

Page 274

Fabric OS Administrator’s Guide 34553-1002745-02Chapter12Traffic Isolation ZoningIn this chapter•Traffic Isolation Zoning overview . . . . . . . . .

Page 275 - Managing Virtual Fabrics

346 Fabric OS Administrator’s Guide53-1002745-02Traffic Isolation Zoning overview12Figure 31 shows a fabric with a TI zone consisting of the following

Page 276 - Logical switch overview

Fabric OS Administrator’s Guide 34753-1002745-02Traffic Isolation Zoning overview12For example, in Figure 31 on page 346, if the dedicated ISL between

Page 277

348 Fabric OS Administrator’s Guide53-1002745-02Traffic Isolation Zoning overview12• Ensure that there are multiple paths between switches.Disabling f

Page 278 - Physical chassis

Fabric OS Administrator’s Guide 34953-1002745-02Traffic Isolation Zoning overview12FSPF routing rules and traffic isolationAll traffic must use the lo

Page 279

Fabric OS Administrator’s Guide 3553-1002745-02The following hardware platforms are supported by this release of Fabric OS:• Fixed-port switches:- Bro

Page 280

350 Fabric OS Administrator’s Guide53-1002745-02Enhanced TI zones12FIGURE 34 Dedicated path is not the shortest pathNOTEFor information about setting

Page 281 - Logical fabric overview

Fabric OS Administrator’s Guide 35153-1002745-02Enhanced TI zones12Illegal configurations with enhanced TI zonesWhen you create TI zones, ensure that

Page 282 - Logical fabric and ISLs

352 Fabric OS Administrator’s Guide53-1002745-02Traffic Isolation Zoning over FC routers12In this example traffic from the Target to Domain 2 is route

Page 283 - Base switch and extended ISLs

Fabric OS Administrator’s Guide 35353-1002745-02Traffic Isolation Zoning over FC routers12FIGURE 38 Traffic Isolation Zoning over FCRIn addition to se

Page 284

354 Fabric OS Administrator’s Guide53-1002745-02Traffic Isolation Zoning over FC routers12TI zones within an edge fabricA TI zone within an edge fabri

Page 285 - Logical fabric formation

Fabric OS Administrator’s Guide 35553-1002745-02Traffic Isolation Zoning over FC routers12TI zones within a backbone fabricA TI zone within a backbone

Page 286

356 Fabric OS Administrator’s Guide53-1002745-02General rules for TI zones12Limitations of TI zones over FC routersBe aware of the following when conf

Page 287

Fabric OS Administrator’s Guide 35753-1002745-02General rules for TI zones12For example, in Figure 41, the TI zone was configured incorrectly and E_Po

Page 288

358 Fabric OS Administrator’s Guide53-1002745-02Supported configurations for Traffic Isolation Zoning12E-Port TrunksTrunk members in TI zone: 8Trunk m

Page 289 - Restrictions on moving ports

Fabric OS Administrator’s Guide 35953-1002745-02Limitations and restrictions of Traffic Isolation Zoning12Trunking with TI zonesIf you implement trunk

Page 290 - Enabling Virtual Fabrics mode

36 Fabric OS Administrator’s Guide53-1002745-02• Updated the Note in “In-flight encryption and compression overview” on page 393.• In “Encryption and

Page 291 - Example

360 Fabric OS Administrator’s Guide53-1002745-02Admin Domain considerations for Traffic Isolation Zoning12• To include a trunk group in a TI zone, you

Page 292

Fabric OS Administrator’s Guide 36153-1002745-02Virtual Fabrics considerations for Traffic Isolation Zoning12Virtual Fabrics considerations for Traffi

Page 293

362 Fabric OS Administrator’s Guide53-1002745-02Virtual Fabrics considerations for Traffic Isolation Zoning12FIGURE 43 Creating a TI zone in a logical

Page 294 - Deleting a logical switch

Fabric OS Administrator’s Guide 36353-1002745-02Traffic Isolation Zoning over FC routers with Virtual Fabrics12Traffic Isolation Zoning over FC router

Page 295

364 Fabric OS Administrator’s Guide53-1002745-02Creating a TI zone12Creating a TI zoneYou create and modify TI zones using the zone command. Other zon

Page 296

Fabric OS Administrator’s Guide 36553-1002745-02Creating a TI zone12Example TI zone creation The following examples create a TI zone named “bluezone”,

Page 297

366 Fabric OS Administrator’s Guide53-1002745-02Creating a TI zone12Creating a TI zone in a base fabric1. Connect to the switch and log in using an ac

Page 298

Fabric OS Administrator’s Guide 36753-1002745-02Modifying TI zones12Modifying TI zonesUsing the zone --add command, you can add ports to an existing T

Page 299

368 Fabric OS Administrator’s Guide53-1002745-02Changing the state of a TI zone12Example of modifying a TI zoneTo add port members to the existing TI

Page 300

Fabric OS Administrator’s Guide 36953-1002745-02Deleting a TI zone12Deleting a TI zoneUse the zone --delete command to delete a TI zone from the defin

Page 301

Fabric OS Administrator’s Guide 3753-1002745-02Notes, cautions, and warningsThe following notices and statements are used in this manual. They are lis

Page 302

370 Fabric OS Administrator’s Guide53-1002745-02Troubleshooting TI zone routing problems12Example displaying information about all TI zones in the def

Page 303 - Administering Advanced Zoning

Fabric OS Administrator’s Guide 37153-1002745-02Setting up TI over FCR (sample procedure)12Setting up TI over FCR (sample procedure)The following exam

Page 304 - Zoning overview

372 Fabric OS Administrator’s Guide53-1002745-02Setting up TI over FCR (sample procedure)12The Fabric has 3 switchesb. Enter the following commands to

Page 305 - Approaches to zoning

Fabric OS Administrator’s Guide 37353-1002745-02Setting up TI over FCR (sample procedure)12c. Enter the following commands to reactivate your current

Page 306 - Zone objects

374 Fabric OS Administrator’s Guide53-1002745-02Setting up TI over FCR (sample procedure)12

Page 307 - Zone configurations

Fabric OS Administrator’s Guide 37553-1002745-02Chapter13Bottleneck DetectionIn this chapter•Bottleneck detection overview . . . . . . . . . . . . . .

Page 308 - Zoning enforcement

376 Fabric OS Administrator’s Guide53-1002745-02Bottleneck detection overview13• If the bottleneck detection feature detects ISL congestion, you can u

Page 309 - Item Description

Fabric OS Administrator’s Guide 37753-1002745-02Supported configurations for bottleneck detection13You can use the bottleneckMon command to specify al

Page 310 - Broadcast zones

378 Fabric OS Administrator’s Guide53-1002745-02Supported configurations for bottleneck detection13High availability considerations for bottleneck det

Page 311

Fabric OS Administrator’s Guide 37953-1002745-02Credit Loss13Credit LossFabric OS v7.1 and later supports back-end credit loss detection back-end port

Page 312

38 Fabric OS Administrator’s Guide53-1002745-02Additional informationThis section lists additional Brocade and industry-specific documentation that yo

Page 313 - Adding members to an alias

380 Fabric OS Administrator’s Guide53-1002745-02Enabling bottleneck detection on a switch13The following credit loss recovery methods are supported fo

Page 314 - Deleting an alias

Fabric OS Administrator’s Guide 38153-1002745-02Displaying bottleneck detection configuration details133. Repeat step 1 and step 2 on every switch in

Page 315

382 Fabric OS Administrator’s Guide53-1002745-02Setting bottleneck detection alerts13Switch-wide sub-second latency bottleneck criterion:=============

Page 316 - Zone creation and maintenance

Fabric OS Administrator’s Guide 38353-1002745-02Setting bottleneck detection alerts13FIGURE 48 Affected seconds for bottleneck detectionThe -time para

Page 317

384 Fabric OS Administrator’s Guide53-1002745-02Changing bottleneck detection parameters13Setting a congestion alert only This example enables a conge

Page 318

Fabric OS Administrator’s Guide 38553-1002745-02Changing bottleneck detection parameters13NOTEEntering a --config command changes only those settings

Page 319 - Replacing zone members

386 Fabric OS Administrator’s Guide53-1002745-02Changing bottleneck detection parameters13Switch-wide sub-second latency bottleneck criterion:========

Page 320 - Deleting a zone

Fabric OS Administrator’s Guide 38753-1002745-02Changing bottleneck detection parameters13Congestion threshold for alert - 0.700Averaging time for ale

Page 321

388 Fabric OS Administrator’s Guide53-1002745-02Advanced bottleneck detection settings13Switch-wide alerting parameters:==============================

Page 322

Fabric OS Administrator’s Guide 38953-1002745-02Excluding a port from bottleneck detection13• You want greater-than-default (sub-second) latency sensi

Page 323 - Validating a zone

Fabric OS Administrator’s Guide 3953-1002745-021. General Information• Switch model• Switch operating system version• Error numbers and messages recei

Page 324 - Example warning message

390 Fabric OS Administrator’s Guide53-1002745-02Excluding a port from bottleneck detection13For trunking, if you exclude a slave port from bottleneck

Page 325

Fabric OS Administrator’s Guide 39153-1002745-02Displaying bottleneck statistics13Switch-wide sub-second latency bottleneck criterion:================

Page 326 - Default zoning mode

392 Fabric OS Administrator’s Guide53-1002745-02Disabling bottleneck detection on a switch13Disabling bottleneck detection on a switchWhen you disable

Page 327 - Zone database size

Fabric OS Administrator’s Guide 39353-1002745-02Chapter14In-flight Encryption and CompressionIn this chapter•In-flight encryption and compression over

Page 328

394 Fabric OS Administrator’s Guide53-1002745-02In-flight encryption and compression overview14FIGURE 49 Encryption and compression on 16 Gbps ISLsThe

Page 329

Fabric OS Administrator’s Guide 39553-1002745-02In-flight encryption and compression overview14Bandwidth limitsFabric OS supports up to 32 Gbps of dat

Page 330 - Enabling a zone configuration

396 Fabric OS Administrator’s Guide53-1002745-02In-flight encryption and compression overview14The port level authentication security feature must be

Page 331 - Deleting a zone configuration

Fabric OS Administrator’s Guide 39753-1002745-02In-flight encryption and compression overview141NoNoNoNo2NoNoNoNo3NoNoNoNo4NoNoNoNo5NoNoNoNo6NoNoNoNo7

Page 332

398 Fabric OS Administrator’s Guide53-1002745-02In-flight encryption and compression overview14portHealth: No Fabric Watch LicenseAuthentication: None

Page 333 - Zone object maintenance

Fabric OS Administrator’s Guide 39953-1002745-02Configuring encryption and compression14Virtual Fabrics considerationsThe E_Ports and EX_Ports in the

Page 334 - Deleting a zone object

4 Fabric OS Administrator’s Guide53-1002745-02Appendix A Port Indexing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Page 335 - Renaming a zone object

40 Fabric OS Administrator’s Guide53-1002745-02Document feedbackQuality is our first concern at Brocade and we have made every effort to ensure the ac

Page 336 - Zone merging

400 Fabric OS Administrator’s Guide53-1002745-02Configuring encryption and compression14Notes• If you need to disable authentication on a port that ha

Page 337

Fabric OS Administrator’s Guide 40153-1002745-02Configuring encryption and compression14Viewing the encryption and compression configurationTo determi

Page 338 - , even though members of the

402 Fabric OS Administrator’s Guide53-1002745-02Configuring encryption and compression14Changing port speed on encryption/compression enabled ports Th

Page 339 - Zone merging scenarios

Fabric OS Administrator’s Guide 40353-1002745-02Configuring encryption and compression14• Because encryption adds more payload to the port in addition

Page 340

404 Fabric OS Administrator’s Guide53-1002745-02Configuring encryption and compression14For additional information about configuring DH-CHAP authentic

Page 341

Fabric OS Administrator’s Guide 40553-1002745-02Configuring encryption and compression144. Enable the port with the portEnable command.After enabling

Page 342 - Concurrent zone transactions

406 Fabric OS Administrator’s Guide53-1002745-02Encryption and compression examples14Encryption and compression examplesThe following examples show co

Page 343 - Sample output:

Fabric OS Administrator’s Guide 40753-1002745-02Encryption and compression examples14Example of enabling encryption and compression on an E_PortThis e

Page 344

408 Fabric OS Administrator’s Guide53-1002745-02Encryption and compression examples14Are you done? (yes, y, no, n): [no] y Saving data to key store...

Page 345 - Traffic Isolation Zoning

Fabric OS Administrator’s Guide 40953-1002745-02Encryption and compression examples14Rate Limit OFFEX Port OFFMirror Port OFFCredit Recovery ONF_Port

Page 346 - TI zone failover

Fabric OS Administrator’s Guide 4153-1002745-02SectionIStandard FeaturesThis section describes standard Fabric OS features, and includes the following

Page 347

410 Fabric OS Administrator’s Guide53-1002745-02Encryption and compression examples14Examples of disabling encryption and compressionThis example disa

Page 348

Fabric OS Administrator’s Guide 41153-1002745-02Working with EX_Ports14Working with EX_Ports An EX_Port is a type of E_Port (expansion port) that conn

Page 349

412 Fabric OS Administrator’s Guide53-1002745-02Working with EX_Ports14NOTEIf trunking is enabled, be aware that the ports creating the bandwidth limi

Page 350 - Enhanced TI zones

Fabric OS Administrator’s Guide 41353-1002745-02Working with EX_Ports14This command is used to set up secret keys for the DH-CHAP authentication.The m

Page 351

414 Fabric OS Administrator’s Guide53-1002745-02Working with EX_Ports14QOS Port AEPort Auto Disable: OFFRate Limit OFFEX Port ONMirror Port OFFCredit

Page 352

Fabric OS Administrator’s Guide 41553-1002745-02Working with EX_Ports14FCR:admin> portcfgexport 1 Port 1 info Admin: enabledState: OKPid format: co

Page 353

416 Fabric OS Administrator’s Guide53-1002745-02Working with EX_Ports14characters. Setting up secret keys does not initiate DH-CHAPauthentication. If

Page 354

Fabric OS Administrator’s Guide 41753-1002745-02Working with EX_Ports14NPIV PP Limit: 126CSCTL mode: OFFD-Port mode: OFFCompression: OFFEncryption: ON

Page 355

418 Fabric OS Administrator’s Guide53-1002745-02Working with EX_Ports14EX_Port commandsSee the Fabric OS Command Reference for more details on these E

Page 356 - General rules for TI zones

Fabric OS Administrator’s Guide 41953-1002745-02Chapter15NPIVIn this chapter•NPIV overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Page 357

42 Fabric OS Administrator’s Guide53-1002745-02

Page 358

420 Fabric OS Administrator’s Guide53-1002745-02NPIV overview15Index Port Address Media Speed State Proto=============================================

Page 359 - Trunking with TI zones

Fabric OS Administrator’s Guide 42153-1002745-02Configuring NPIV15Configuring NPIVThe NPIV feature is enabled by default. You can set the number of vi

Page 360

422 Fabric OS Administrator’s Guide53-1002745-02Enabling and disabling NPIV15VC Link Init OFFLocked L_Port OFFLocked G_Port

Page 361

Fabric OS Administrator’s Guide 42353-1002745-02Viewing NPIV port configuration information15Viewing NPIV port configuration information1. Connect to

Page 362

424 Fabric OS Administrator’s Guide53-1002745-02Viewing NPIV port configuration information15switch:admin> portshow 2portName: 02portHealth: HEALTH

Page 363

Fabric OS Administrator’s Guide 42553-1002745-02Chapter16Dynamic Fabric Provisioning: Fabric-Assigned PWWNIn this chapter•Introduction to Dynamic Fabr

Page 364 - Creating a TI zone

426 Fabric OS Administrator’s Guide53-1002745-02User- and auto-assigned FA-PWWN behavior16NOTEFor the server to use the FA-PWWN feature, it must be us

Page 365 - Example TI zone creation

Fabric OS Administrator’s Guide 42753-1002745-02Configuring FA-PWWNs16This section includes an FA-PWWN configuration procedure for each of the followi

Page 366

428 Fabric OS Administrator’s Guide53-1002745-02Configuring FA-PWWNs163. Enter the fapwwn --show -ag all command: You should see output similar to the

Page 367 - Modifying TI zones

Fabric OS Administrator’s Guide 42953-1002745-02Supported switches and configurations for FA-PWWN163. Enter the fapwwn --show -port all command: You s

Page 368

Fabric OS Administrator’s Guide 4353-1002745-02Chapter1Understanding Fibre Channel Services In this chapter•Fibre Channel services overview . . . . .

Page 369 - Displaying TI zones

430 Fabric OS Administrator’s Guide53-1002745-02Configuration upload and download considerations for FA-PWWN16• Access Gateway platforms running Fabri

Page 370

Fabric OS Administrator’s Guide 43153-1002745-02Restrictions of FA-PWWN16NOTEWhen creating the DCC policy, use the physical device WWN and not the FA-

Page 371 - FIGURE 47 TI over FCR example

432 Fabric OS Administrator’s Guide53-1002745-02Access Gateway N_Port failover with FA-PWWN16

Page 372

Fabric OS Administrator’s Guide 43353-1002745-02Chapter17Managing Administrative DomainsIn this chapter•Administrative Domains overview . . . . . . .

Page 373

434 Fabric OS Administrator’s Guide53-1002745-02Administrative Domains overview17NOTEDo not confuse an Admin Domain number with the domain ID of a swi

Page 374

Fabric OS Administrator’s Guide 43553-1002745-02Administrative Domains overview17Admin Domain featuresAdmin Domains allow you to do the following:• De

Page 375 - Bottleneck Detection

436 Fabric OS Administrator’s Guide53-1002745-02Administrative Domains overview17Table 65 lists each Admin Domain user type and describes its administ

Page 376 - How bottlenecks are reported

Fabric OS Administrator’s Guide 43753-1002745-02Administrative Domains overview17For example, if DeviceA is not a member of any user-defined Admin Dom

Page 377

438 Fabric OS Administrator’s Guide53-1002745-02Administrative Domains overview17FIGURE 54 Fabric with AD0 and AD255Home Admin Domains and loginYou ar

Page 378

Fabric OS Administrator’s Guide 43953-1002745-02Administrative Domains overview17• For user-defined accounts, the home Admin Domain defaults to AD0 bu

Page 379 - Credit Loss

44 Fabric OS Administrator’s Guide53-1002745-02Management server1Management server — The management server provides a single point for managing the fa

Page 380

440 Fabric OS Administrator’s Guide53-1002745-02Administrative Domains overview17If a device is a member of an Admin Domain, the switch port to which

Page 381

Fabric OS Administrator’s Guide 44153-1002745-02Administrative Domains overview17Figure 55 on page 441 shows an unfiltered view of a fabric with two s

Page 382

442 Fabric OS Administrator’s Guide53-1002745-02Admin Domain management for physical fabric administrators17Admin Domain compatibility, availability,

Page 383

Fabric OS Administrator’s Guide 44353-1002745-02Admin Domain management for physical fabric administrators17Setting the default zoning mode for Admin

Page 384 - Setting a latency alert only

444 Fabric OS Administrator’s Guide53-1002745-02Admin Domain management for physical fabric administrators17ad --select 2555. Enter the ad --create co

Page 385

Fabric OS Administrator’s Guide 44553-1002745-02Admin Domain management for physical fabric administrators17Creating a new user account for managing A

Page 386

446 Fabric OS Administrator’s Guide53-1002745-02Admin Domain management for physical fabric administrators17Removing an Admin Domain from a user accou

Page 387

Fabric OS Administrator’s Guide 44753-1002745-02Admin Domain management for physical fabric administrators17Deactivating an Admin DomainIf you deactiv

Page 388

448 Fabric OS Administrator’s Guide53-1002745-02Admin Domain management for physical fabric administrators17• To save the Admin Domain definition, ent

Page 389

Fabric OS Administrator’s Guide 44953-1002745-02Admin Domain management for physical fabric administrators174. Enter the appropriate command based on

Page 390

Fabric OS Administrator’s Guide 4553-1002745-02Management server database1Platform services and Virtual FabricsEach logical switch has a separate plat

Page 391

450 Fabric OS Administrator’s Guide53-1002745-02Admin Domain management for physical fabric administrators17Deleting all user-defined Admin DomainsWhe

Page 392

Fabric OS Administrator’s Guide 45153-1002745-02Admin Domain management for physical fabric administrators173. Enter the zone --copy command to copy t

Page 393

452 Fabric OS Administrator’s Guide53-1002745-02Admin Domain management for physical fabric administrators17FIGURE 57 AD0 and two user-defined Admin D

Page 394 - Encryption

Fabric OS Administrator’s Guide 45353-1002745-02Admin Domain management for physical fabric administrators1710:00:00:00:02:00:00:00; 10:00:00:00:03:00

Page 395

454 Fabric OS Administrator’s Guide53-1002745-02SAN management with Admin Domains17Validating an Admin Domain member listYou can validate the device a

Page 396 - Example output

Fabric OS Administrator’s Guide 45553-1002745-02SAN management with Admin Domains17CLI commands in an AD contextThe CLI command input arguments are va

Page 397

456 Fabric OS Administrator’s Guide53-1002745-02SAN management with Admin Domains17Displaying an Admin Domain configurationYou can display the members

Page 398 - Availability considerations

Fabric OS Administrator’s Guide 45753-1002745-02SAN management with Admin Domains17You cannot switch to another Admin Domain context from within the s

Page 399

458 Fabric OS Administrator’s Guide53-1002745-02SAN management with Admin Domains17Admin Domains, zones, and zone databasesAdmin Domains introduce two

Page 400

Fabric OS Administrator’s Guide 45953-1002745-02SAN management with Admin Domains17The AD zone database also has the following characteristics:- Each

Page 401

46 Fabric OS Administrator’s Guide53-1002745-02Management server database1If the list is empty (the default), the management server is accessible to a

Page 402 - Limitations and restrictions

460 Fabric OS Administrator’s Guide53-1002745-02SAN management with Admin Domains17LSAN zone names in AD0 are never converted for backward-compatibili

Page 403

Fabric OS Administrator’s Guide 46153-1002745-02SectionIILicensed FeaturesThis section describes optionally licensed Brocade Fabric OS features and in

Page 404 - Configuring compression

462 Fabric OS Administrator’s Guide53-1002745-02

Page 405 - Disabling compression

Fabric OS Administrator’s Guide 46353-1002745-02Chapter18Administering LicensingIn this chapter•Licensing overview. . . . . . . . . . . . . . . . . .

Page 406

464 Fabric OS Administrator’s Guide53-1002745-02Licensing overview18Table 69 lists the optionally licensed features that are available in Fabric OS 7.

Page 407

Fabric OS Administrator’s Guide 46553-1002745-02Licensing overview18Advanced FICON Acceleration • Allows use of specialized data management techniques

Page 408

466 Fabric OS Administrator’s Guide53-1002745-02Licensing overview18Enterprise ICL Allows you to connect more than four chassis in a fabric using ICLs

Page 409 - Enabling compression

Fabric OS Administrator’s Guide 46753-1002745-02Licensing overview18Table 70 lists licensed features, each feature’s associated license name, and, if

Page 410

468 Fabric OS Administrator’s Guide53-1002745-02Licensing overview18FCIP High Performance Extension over FCIP/FC NOTE: Local and attached switches. Li

Page 411 - Working with EX_Ports

Fabric OS Administrator’s Guide 46953-1002745-02Licensing overview18Logical switch No license required. N/ALong distance Extended Fabrics Local and at

Page 412 - Example Setting a secret key

Fabric OS Administrator’s Guide 4753-1002745-02Management server database1Example of adding a member to the management server ACLswitch:admin> msco

Page 413

470 Fabric OS Administrator’s Guide53-1002745-02Brocade 7800 Upgrade license18Brocade 7800 Upgrade licenseThe Brocade 7800 has four Fibre Channel (FC)

Page 414

Fabric OS Administrator’s Guide 47153-1002745-02ICL licensing18ICL licensingBrocade ICL links operate between the core blades of the DCX 8510 Backbone

Page 415

472 Fabric OS Administrator’s Guide53-1002745-02ICL licensing18ICL 8-link licenseThe ICL 8-link license activates half of the ICL bandwidth for each I

Page 416

Fabric OS Administrator’s Guide 47353-1002745-028G licensing18Example switchShow output if no Enterprise ICL license is installedA message such as the

Page 417

474 Fabric OS Administrator’s Guide53-1002745-02Slot-based licensing18Slot-based licensingSlot-based licensing is used on the Brocade DCX and DCX 8510

Page 418 - EX_Port commands

Fabric OS Administrator’s Guide 47553-1002745-0210G licensing18Assigning a license to a slotUse the following procedure to assign a licence to a slot:

Page 419 - NPIV overview

476 Fabric OS Administrator’s Guide53-1002745-0210G licensing18After applying a 10G license to the Brocade 6510or 6520 chassis or to a 16 Gbps FC blad

Page 420 - 10-bit addressing mode

Fabric OS Administrator’s Guide 47753-1002745-0210G licensing18aTFPNFXGLmABANMGtT4LfSBJSDLWTYD3EFrr4WGAEMBA10 Gigabit FCIP/Fibre Channel (FTR_10G) lic

Page 421 - Configuring NPIV

478 Fabric OS Administrator’s Guide53-1002745-02Temporary licenses18aTFPNFXGLmABANMGtT4LfSBJSDLWTYD3EFrr4WGAEMBA10 Gigabit FCIP/Fibre Channel (FTR_10G

Page 422 - Enabling and disabling NPIV

Fabric OS Administrator’s Guide 47953-1002745-02Temporary licenses18• FICON Management Server (CUP) license• Extended Fabrics license• High Performanc

Page 423

48 Fabric OS Administrator’s Guide53-1002745-02Management server database15. At the “select” prompt, enter 1 to display the access list so you can ver

Page 424

480 Fabric OS Administrator’s Guide53-1002745-02Temporary licenses18Expired licensesOnce a temporary license has expired, you can view it through the

Page 425

Fabric OS Administrator’s Guide 48153-1002745-02Viewing installed licenses18Viewing installed licensesUse the following procedure to view all installe

Page 426 - Configuring FA-PWWNs

482 Fabric OS Administrator’s Guide53-1002745-02Removing a licensed feature18Use the following procedure to add a licensed feature: 1. Connect to the

Page 427

Fabric OS Administrator’s Guide 48353-1002745-02Ports on Demand184. Enter the licenseShow command to verify the license is disabled.switch:admin> l

Page 428

484 Fabric OS Administrator’s Guide53-1002745-02Ports on Demand18Ports on Demand is ready to be unlocked in the switch firmware. Its license key may b

Page 429

Fabric OS Administrator’s Guide 48553-1002745-02Ports on Demand18 First Ports on Demand license - additional 16 port upgrade licenseSdSSc9SyRSTeXTd

Page 430

486 Fabric OS Administrator’s Guide53-1002745-02Ports on Demand18For the embedded switch modules, the Dynamic POD feature detects and assigns ports to

Page 431 - Restrictions of FA-PWWN

Fabric OS Administrator’s Guide 48753-1002745-02Ports on Demand18switch:admin> licenseport --method dynamicThe POD method has been changed to dynam

Page 432

488 Fabric OS Administrator’s Guide53-1002745-02Ports on Demand18Ports assigned to the full POD license:0, 9, 10, 11, 12, 13, 14, 15, 16, 21, 22, 23Re

Page 433

Fabric OS Administrator’s Guide 48953-1002745-02Ports on Demand18After a port is assigned to the POD set, the port is licensed until it is manually re

Page 434

Fabric OS Administrator’s Guide 4953-1002745-02Topology discovery1Number of Associated Node Names: 1Associated Node Names:10:00:00:60:69:20:15:75Clear

Page 435 - Admin Domain access levels

490 Fabric OS Administrator’s Guide53-1002745-02Ports on Demand18

Page 436 - System-defined Admin Domains

Fabric OS Administrator’s Guide 49153-1002745-02Chapter19Inter-chassis LinksIn this chapter•Inter-chassis links . . . . . . . . . . . . . . . . . . .

Page 437

492 Fabric OS Administrator’s Guide53-1002745-02ICLs for the Brocade DCX 8510 Backbone family19NOTEYou cannot interconnect a Brocade DCX Backbone fami

Page 438 - Home Admin Domains and login

Fabric OS Administrator’s Guide 49353-1002745-02ICLs for the Brocade DCX Backbone family19NOTEBrocade recommends that you have a maximum of eight ICLs

Page 439 - Admin Domain member types

494 Fabric OS Administrator’s Guide53-1002745-02Virtual Fabrics considerations for ICLs19FIGURE 60 DCX-4S allowed ICL connectionsThe following ICL con

Page 440 - Admin Domains and switch WWNs

Fabric OS Administrator’s Guide 49553-1002745-02Supported topologies for ICL connections19Supported topologies for ICL connectionsYou can connect the

Page 441 - Fabric Visible to AD4 User

496 Fabric OS Administrator’s Guide53-1002745-02Supported topologies for ICL connections19FIGURE 62 Full nine-mesh topologyDuring an ICL break in the

Page 442

Fabric OS Administrator’s Guide 49753-1002745-02Supported topologies for ICL connections19FIGURE 63 64 Gbps ICL core-edge topology

Page 443 - Creating an Admin Domain

498 Fabric OS Administrator’s Guide53-1002745-02Supported topologies for ICL connections19

Page 444

Fabric OS Administrator’s Guide 49953-1002745-02Chapter20Monitoring Fabric PerformanceIn this chapter•Advanced Performance Monitoring overview . . .

Page 445

Fabric OS Administrator’s Guide 553-1002745-02ContentsAbout This DocumentHow this document is organized . . . . . . . . . . . . . . . . . . . . . . .

Page 446 - Activating an Admin Domain

50 Fabric OS Administrator’s Guide53-1002745-02Topology discovery1*MS Topology Discovery enabled locally.*MS Topology Discovery Enable Operation Compl

Page 447 - Deactivating an Admin Domain

500 Fabric OS Administrator’s Guide53-1002745-02Advanced Performance Monitoring overview20Restrictions for installing monitors• Advanced Performance M

Page 448 - Renaming an Admin Domain

Fabric OS Administrator’s Guide 50153-1002745-02End-to-end performance monitoring20Access Gateway considerations for Advanced Performance MonitoringEE

Page 449 - Deleting an Admin Domain

502 Fabric OS Administrator’s Guide53-1002745-02End-to-end performance monitoring20Virtual Fabrics considerations: If Virtual Fabrics is enabled, the

Page 450

Fabric OS Administrator’s Guide 50353-1002745-02End-to-end performance monitoring20This monitor (Monitor 1) counts the frames that have an SID of 0x01

Page 451

504 Fabric OS Administrator’s Guide53-1002745-02End-to-end performance monitoring20The perfSetPortEEMask command sets a mask for the domain ID, area I

Page 452 - AD0 with three zones

Fabric OS Administrator’s Guide 50553-1002745-02Frame monitoring20perfmonitorshow --class monitor_class [slotnumber/]portnumber [interval]Example of d

Page 453

506 Fabric OS Administrator’s Guide53-1002745-02Frame monitoring20NOTEThe Advanced Performance Monitoring license is required to use the fmMonitor com

Page 454

Fabric OS Administrator’s Guide 50753-1002745-02Frame monitoring20The value of the offset must be between 0 and 63, in decimal format. Byte 0 indicate

Page 455 - CLI commands in an AD context

508 Fabric OS Administrator’s Guide53-1002745-02Frame monitoring20Adding frame monitors to a portIf the switch does not have enough resources to add a

Page 456

Fabric OS Administrator’s Guide 50953-1002745-02Frame monitoring20Example The following example displays the existing frame types and associated bit p

Page 457

Fabric OS Administrator’s Guide 5153-1002745-02Device login1Device loginA device can be storage, a host, or a switch. When new devices are introduced

Page 458 - • AD zone databases

510 Fabric OS Administrator’s Guide53-1002745-02Top Talker monitors20Top Talker monitorsTop Talker monitors determine the flows (SID and DID pairs) th

Page 459 - Admin Domains and LSAN zones

Fabric OS Administrator’s Guide 51153-1002745-02Top Talker monitors20How do Top Talker monitors differ from EE monitors? EE monitors provide counter s

Page 460 - Configuration file sections

512 Fabric OS Administrator’s Guide53-1002745-02Top Talker monitors20FIGURE 66 Fabric mode Top Talker monitors on FC router do not monitor any flowsFI

Page 461 - Licensed Features

Fabric OS Administrator’s Guide 51353-1002745-02Top Talker monitors20Adding a Top Talker monitor to a port (port mode)1. Connect to the switch and log

Page 462

514 Fabric OS Administrator’s Guide53-1002745-02Top Talker monitors20The output is sorted based on the data rate of each flow. If you do not specify t

Page 463 - Administering Licensing

Fabric OS Administrator’s Guide 51553-1002745-02Trunk monitoring20Deleting all fabric mode Top Talker monitors1. Connect to the switch and log in usin

Page 464 - Available Brocade licenses

516 Fabric OS Administrator’s Guide53-1002745-02Performance data collection201. Connect to the switch and log in using an account with admin permissio

Page 465

Fabric OS Administrator’s Guide 51753-1002745-02Chapter21Optimizing Fabric BehaviorIn this chapter•Adaptive Networking overview . . . . . . . . . . .

Page 466

518 Fabric OS Administrator’s Guide53-1002745-02Ingress Rate Limiting21• Ingress Rate LimitingIngress Rate Limiting restricts the speed of traffic fro

Page 467

Fabric OS Administrator’s Guide 51953-1002745-02QoS: SID/DID traffic prioritization21Virtual Fabrics considerationsIf Virtual Fabrics is enabled, the

Page 468

52 Fabric OS Administrator’s Guide53-1002745-02Device login1Fabric login process A device performs a fabric login (FLOGI) to determine if a fabric is

Page 469

520 Fabric OS Administrator’s Guide53-1002745-02QoS: SID/DID traffic prioritization21Table 76 shows a basic comparison between CS-CTL-based and QoS zo

Page 470 - Brocade 7800 Upgrade license

Fabric OS Administrator’s Guide 52153-1002745-02CS_CTL-based frame prioritization21CS_CTL-based frame prioritizationCS_CTL-based frame prioritization

Page 471 - ICL licensing

522 Fabric OS Administrator’s Guide53-1002745-02CS_CTL-based frame prioritization21NOTEIf a switch is running a firmware version earlier than Fabric O

Page 472 - Enterprise ICL license

Fabric OS Administrator’s Guide 52353-1002745-02QoS zone-based traffic prioritization21Set CSCTL QoS Mode to 1 to enable auto mode, establishing the s

Page 473 - 8G licensing

524 Fabric OS Administrator’s Guide53-1002745-02QoS zone-based traffic prioritization21To preserve existing trunk groups, before you install the Adapt

Page 474 - Slot-based licensing

Fabric OS Administrator’s Guide 52553-1002745-02QoS zones21switch:admin> portcfgshow (output truncated)Ports of Slot 0 16 17 18 19 20 21 22 23 24 2

Page 475 - 10G licensing

526 Fabric OS Administrator’s Guide53-1002745-02QoS zones21The switch automatically sets the priority for the “host,target” pairs specified in the zon

Page 476

Fabric OS Administrator’s Guide 52753-1002745-02QoS zones21NOTEBy default, QoS is enabled on 8-Gbps ports, except for long-distance 8-Gbps ports. QoS

Page 477

528 Fabric OS Administrator’s Guide53-1002745-02QoS zones21The following are requirements for establishing QoS over FCRs:• QoS over FC routers is supp

Page 478 - Temporary licenses

Fabric OS Administrator’s Guide 52953-1002745-02QoS zones21FIGURE 70 Traffic prioritization in a logical fabricSupported configurations for QoS zone-b

Page 479 - Date change restriction

Fabric OS Administrator’s Guide 5353-1002745-02High availability of daemon processes1Duplicate Port World Wide NameAccording to Fibre Channel standard

Page 480 - Universal temporary licenses

530 Fabric OS Administrator’s Guide53-1002745-02Setting QoS zone-based traffic prioritization21• Traffic prioritization is enforced on the egress port

Page 481 - Adding a licensed feature

Fabric OS Administrator’s Guide 53153-1002745-02Setting QoS zone-based traffic prioritization21The portCfgQos command does not affect QoS prioritizati

Page 482 - Removing a licensed feature

532 Fabric OS Administrator’s Guide53-1002745-02Setting QoS zone-based traffic prioritization over FC routers21Setting QoS zone-based traffic prioriti

Page 483 - Ports on Demand

Fabric OS Administrator’s Guide 53353-1002745-02Chapter22Managing Trunking ConnectionsIn this chapter•Trunking overview . . . . . . . . . . . . . . .

Page 484 - Displaying installed licenses

534 Fabric OS Administrator’s Guide53-1002745-02Trunking overview22Types of trunkingTrunking can be between two switches, between a switch and an Acce

Page 485 - Dynamic Ports on Demand

Fabric OS Administrator’s Guide 53553-1002745-02Supported configurations for trunking22License requirements for trunkingAll types of trunking require

Page 486

536 Fabric OS Administrator’s Guide53-1002745-02Supported platforms for trunking22Trunks operate best when the cable length of each trunked link is ro

Page 487

Fabric OS Administrator’s Guide 53753-1002745-02Recommendations for trunk groups22Recommendations for trunk groupsTo identify the most useful trunk gr

Page 488 - Reserving a port license

538 Fabric OS Administrator’s Guide53-1002745-02Configuring trunk groups22Configuring trunk groupsAfter you install the Trunking license, you must re-

Page 489

Fabric OS Administrator’s Guide 53953-1002745-02Displaying trunking information221. Connect to the switch and log in using an account assigned to the

Page 490

54 Fabric OS Administrator’s Guide53-1002745-02High availability of daemon processes1webd Webserver daemon used for WebTools (includes httpd as well).

Page 491 - Inter-chassis Links

540 Fabric OS Administrator’s Guide53-1002745-02Trunk Area and Admin Domains22 Rx: Bandwidth 16.00Gbps, Throughput 1.67Gbps (12.12%) Tx+Rx: Band

Page 492 - Domain 2

Fabric OS Administrator’s Guide 54153-1002745-02EX_Port trunking22For additional information on configuring long distance, see “Configuring an extende

Page 493

542 Fabric OS Administrator’s Guide53-1002745-02EX_Port trunking22Masterless EX_Port trunkingEX_Port trunking is masterless except for EX_Ports on Bac

Page 494

Fabric OS Administrator’s Guide 54353-1002745-02F_Port trunking22The following is an example of a master EX_Port and a slave EX_Port displayed in swit

Page 495 - Mesh topology

544 Fabric OS Administrator’s Guide53-1002745-02F_Port trunking22FIGURE 72 Switch in Access Gateway mode without F_Port masterless trunkingFIGURE 73 S

Page 496 - Core-edge topology

Fabric OS Administrator’s Guide 54553-1002745-02F_Port trunking22Use the following procedure on the edge switch connected to the Access Gateway module

Page 497

546 Fabric OS Administrator’s Guide53-1002745-02F_Port trunking22c. Enable the trunk on the ports by using the portTrunkArea command.switch:admin>

Page 498

Fabric OS Administrator’s Guide 54753-1002745-02F_Port trunking22DCC Policy DCC policy enforcement for the F_Port trunk is based on the Trunk Area; th

Page 499 - Monitoring Fabric Performance

548 Fabric OS Administrator’s Guide53-1002745-02F_Port trunking22Table 81 describes the PWWN format for F_Port and N_Port trunk ports.F_Port trunking

Page 500

Fabric OS Administrator’s Guide 54953-1002745-02Displaying F_Port trunking information22• If F_Port trunking is enabled on some ports in the default s

Page 501 - Maximum number of EE monitors

Fabric OS Administrator’s Guide 5553-1002745-02Chapter2Performing Basic Configuration TasksIn this chapter•Fabric OS overview . . . . . . . . . . . .

Page 502 - Adding EE monitors

550 Fabric OS Administrator’s Guide53-1002745-02Enabling the DCC policy on a trunk area22switch:admin> portdisable 0-2switch:admin> porttrunkare

Page 503

Fabric OS Administrator’s Guide 55153-1002745-02Chapter23Managing Long-Distance FabricsIn this chapter•Long-distance fabrics overview . . . . . . . .

Page 504 - Deleting EE monitors

552 Fabric OS Administrator’s Guide53-1002745-02Extended Fabrics device limitations23• Optimized switch buffering When Extended Fabrics is installed o

Page 505 - Frame monitoring

Fabric OS Administrator’s Guide 55353-1002745-02Configuring an extended ISL23• Dynamic Mode (LD) — LD calculates buffer credits based on the distance

Page 506 - Maximum number of offsets

554 Fabric OS Administrator’s Guide53-1002745-02Configuring an extended ISL23portcfglongdistance [slot/]port [distance_level] [vc_translation_link_ini

Page 507 - Deleting frame types

Fabric OS Administrator’s Guide 55553-1002745-02Buffer credit management231. Connect to the switch and log in using an account assigned to the admin r

Page 508 - Displaying frame monitors

556 Fabric OS Administrator’s Guide53-1002745-02Buffer credit management23Buffer-to-buffer flow control is flow control between adjacent ports in the

Page 509

Fabric OS Administrator’s Guide 55753-1002745-02Buffer credit management23Smaller frame sizes need more buffer credits. Two commands are available to

Page 510 - Top Talker monitors

558 Fabric OS Administrator’s Guide53-1002745-02Buffer credit management23Allocating buffer credits based on full-sized framesYou can allocate buffer

Page 511

Fabric OS Administrator’s Guide 55953-1002745-02Buffer credit management23• If QoS is not enabled:(Reserved Buffer for Distance Y) = (X * LinkSpeed /

Page 512

56 Fabric OS Administrator’s Guide53-1002745-02Fabric OS command line interface2Although many different software and hardware configurations are teste

Page 513

560 Fabric OS Administrator’s Guide53-1002745-02Buffer credit management23• 8 — the number of reserved buffer credits already allocated to that port.

Page 514

Fabric OS Administrator’s Guide 56153-1002745-02Buffer credit management23Configuring buffers for a single port directlyTo configure the number of buf

Page 515 - Trunk monitoring

562 Fabric OS Administrator’s Guide53-1002745-02Buffer credit management23To determine the number of buffers required, perform the following steps:1.

Page 516 - Performance data collection

Fabric OS Administrator’s Guide 56353-1002745-02Buffer credit management23switch:admin> portbuffershow 17User Port Lx Max/Resv Avg Buf

Page 517 - Optimizing Fabric Behavior

564 Fabric OS Administrator’s Guide53-1002745-02Buffer credit management23For the FC8-x port blades, the first number in the Unreserved buffer credits

Page 518 - Ingress Rate Limiting

Fabric OS Administrator’s Guide 56553-1002745-02Buffer credit management23NOTEThe distances in this table assume that QoS is enabled. If QoS is disabl

Page 519

566 Fabric OS Administrator’s Guide53-1002745-02Buffer credit recovery23Buffer credit recovery Buffer credit recovery (CR) allows links to recover aft

Page 520 - • Enable QoS on E_Ports

Fabric OS Administrator’s Guide 56753-1002745-02Buffer credit recovery23For an F_Port on a Brocade switch or Access Gateway connected to an adapter, t

Page 521 - Supported configurations

568 Fabric OS Administrator’s Guide53-1002745-02Forward error correction on long-distance links23The following example enables buffer credit recovery

Page 522

Fabric OS Administrator’s Guide 56953-1002745-02Chapter24Using FC-FC Routing to Connect FabricsIn this chapter•FC-FC routing overview . . . . . . . .

Page 523

Fabric OS Administrator’s Guide 5753-1002745-02Fabric OS command line interface2• In a Windows environment enter the following parameters:• In a UNIX

Page 524 - • Have QoS disabled

570 Fabric OS Administrator’s Guide53-1002745-02FC-FC routing overview24A Fibre Channel router (FC router) is a switch running the FC-FC routing servi

Page 525 - QoS zones

Fabric OS Administrator’s Guide 57153-1002745-02FC-FC routing overview24• The Backbones have a limit of 128 EX_Ports for each chassis.Refer to the Net

Page 526 - QoS on E_Ports

572 Fabric OS Administrator’s Guide53-1002745-02Fibre Channel routing concepts24Fibre Channel routing conceptsFibre Channel routing introduces the fol

Page 527 - QoS over FC routers

Fabric OS Administrator’s Guide 57353-1002745-02Fibre Channel routing concepts24• Logical SANs (LSANs)An LSAN is defined by zones in two or more edge

Page 528

574 Fabric OS Administrator’s Guide53-1002745-02Fibre Channel routing concepts24• Fabric ID (FID)Every EX_Port and VEX_Port uses the fabric ID (FID) t

Page 529

Fabric OS Administrator’s Guide 57553-1002745-02Fibre Channel routing concepts24FIGURE 76 Edge SANs connected through a backbone fabric• Phantom domai

Page 530

576 Fabric OS Administrator’s Guide53-1002745-02Fibre Channel routing concepts24FIGURE 77 MetaSAN with imported devicesFC-FC routing topologiesThe FC-

Page 531

Fabric OS Administrator’s Guide 57753-1002745-02Fibre Channel routing concepts24Phantom domainsA phantom domain is a domain created by the Fibre Chann

Page 532

578 Fabric OS Administrator’s Guide53-1002745-02Fibre Channel routing concepts24FIGURE 79 EX_Port phantom switch topologyAll EX_Ports or VEX_Ports con

Page 533 - Managing Trunking Connections

Fabric OS Administrator’s Guide 57953-1002745-02Setting up FC-FC routing24Identifying and deleting stale xlate domainsIf a remote edge fabric goes unr

Page 534 - Masterless trunking

58 Fabric OS Administrator’s Guide53-1002745-02Fabric OS command line interface2Connecting to Fabric OS using TelnetUse the following procedure to con

Page 535 - Port groups for trunking

580 Fabric OS Administrator’s Guide53-1002745-02Setting up FC-FC routing244. Configure IFLs for edge and backbone fabric connection. (Refer to “Inter-

Page 536 - Requirements for trunk groups

Fabric OS Administrator’s Guide 58153-1002745-02Backbone fabric IDs24RyeSzRScycazfT0G:Integrated Routing licenseIf you are connecting to a Fabric OS o

Page 537

582 Fabric OS Administrator’s Guide53-1002745-02FCIP tunnel configuration24ATTENTIONIn a multi-switch backbone fabric, modification of the FID within

Page 538 - Configuring trunk groups

Fabric OS Administrator’s Guide 58353-1002745-02Inter-fabric link configuration24Refer to the Fibre Channel over IP Administrator’s Guide for instruct

Page 539

584 Fabric OS Administrator’s Guide53-1002745-02Inter-fabric link configuration24Hash Algorithm: N/AEdge fabric's primary wwn: N/AEdge fabric&apo

Page 540 - Trunk Area and Admin Domains

Fabric OS Administrator’s Guide 58553-1002745-02Inter-fabric link configuration248. After identifying such ports, enter the portCfgPersistentEnable co

Page 541 - EX_Port trunking

586 Fabric OS Administrator’s Guide53-1002745-02Inter-fabric link configuration24Edge fabric's primary wwn: N/AEdge fabric's version stamp:

Page 542 - Configuring EX_Port trunking

Fabric OS Administrator’s Guide 58753-1002745-02FC router port cost configuration24-------------------------------------------------------------------

Page 543 - F_Port trunking

588 Fabric OS Administrator’s Guide53-1002745-02FC router port cost configuration24Port cost considerationsThe router port cost has the following cons

Page 544

Fabric OS Administrator’s Guide 58953-1002745-02EX_Port frame trunking configuration24------------------------7/3 10007/4 10

Page 545

Fabric OS Administrator’s Guide 5953-1002745-02Fabric OS command line interface2The commands in the following table provides help files for the indica

Page 546 - Category Description

590 Fabric OS Administrator’s Guide53-1002745-02LSAN zone configuration24For information about setting up E_Port trunking on an edge fabric, refer to

Page 547

Fabric OS Administrator’s Guide 59153-1002745-02LSAN zone configuration24NOTEThe "LSAN_" prefix must appear at the beginning of the zone nam

Page 548

592 Fabric OS Administrator’s Guide53-1002745-02LSAN zone configuration243. Enter the zoneCreate command to create the LSAN lsan_zone_fabric75, which

Page 549 - Disabling F_Port trunking

Fabric OS Administrator’s Guide 59353-1002745-02LSAN zone configuration24This action will replace the old zoning configuration with thecurrent configu

Page 550

594 Fabric OS Administrator’s Guide53-1002745-02LSAN zone configuration24Setting the maximum LSAN countYou can set the maximum number of LSAN zones, o

Page 551

Fabric OS Administrator’s Guide 59553-1002745-02LSAN zone configuration24You can specify two types of tags:• Enforce tag – Specifies which LSANs are t

Page 552 - Long -distance link modes

596 Fabric OS Administrator’s Guide53-1002745-02LSAN zone configuration24lsan_f2_f1 (H1, D1)lsan_f2_f3 (H1, D2)The LSAN in the host fabric does not ne

Page 553 - Configuring an extended ISL

Fabric OS Administrator’s Guide 59753-1002745-02LSAN zone configuration24• The tag is from 1 through 8 alphanumeric characters.• You can configure onl

Page 554

598 Fabric OS Administrator’s Guide53-1002745-02LSAN zone configuration241. Log in to the FC router as admin.2. Enter the fcrlsan --remove command to

Page 555 - Buffer credit management

Fabric OS Administrator’s Guide 59953-1002745-02LSAN zone configuration24With LSAN zone binding, each FC router in the backbone fabric stores only the

Page 556

6 Fabric OS Administrator’s Guide53-1002745-02Chapter 2 Performing Basic Configuration TasksFabric OS overview . . . . . . . . . . . . . . . . . . . .

Page 557 - Fibre Channel data frames

60 Fabric OS Administrator’s Guide53-1002745-02Fabric OS command line interface2Example cliHistory command output from admin login switch:admin> cl

Page 558 - • If QoS is enabled:

600 Fabric OS Administrator’s Guide53-1002745-02LSAN zone configuration24LSAN zone binding considerations• Without LSAN zone binding, the maximum numb

Page 559

Fabric OS Administrator’s Guide 60153-1002745-02LSAN zone configuration24FC router matrix definitionDepending on the structure of the backbone fabric,

Page 560

602 Fabric OS Administrator’s Guide53-1002745-02LSAN zone configuration24Setting up LSAN zone binding1. Log in to the FC router as admin.2. Enter the

Page 561

Fabric OS Administrator’s Guide 60353-1002745-02Proxy PID configuration24Proxy PID configurationWhen an FC router is first configured, the PIDs for th

Page 562

604 Fabric OS Administrator’s Guide53-1002745-02Inter-fabric broadcast frames24Inter-fabric broadcast framesThe FC router can receive and forward broa

Page 563

Fabric OS Administrator’s Guide 60553-1002745-02Resource monitoring24You can monitor FC router resources using the fcrResourceShow command. The fcrRes

Page 564

606 Fabric OS Administrator’s Guide53-1002745-02FC-FC routing and Virtual Fabrics2420 | 8 3421 | 8 3422 | 8 3423 | 8 34FC-FC routing and Virtual F

Page 565 - Downgrade considerations

Fabric OS Administrator’s Guide 60753-1002745-02FC-FC routing and Virtual Fabrics24• Although the Brocade 6510 and 6520 supports up to four logical sw

Page 566 - Buffer credit recovery

608 Fabric OS Administrator’s Guide53-1002745-02FC-FC routing and Virtual Fabrics24FIGURE 83 Logical representation of EX_Ports in a base switchBackbo

Page 567

Fabric OS Administrator’s Guide 60953-1002745-02Upgrade and downgrade considerations for FC-FC routing24FIGURE 84 Backbone-to-edge routing across base

Page 568

Fabric OS Administrator’s Guide 6153-1002745-02Password modification2Notes:• SSH login CLI logs are not recorded in the command line history. • The CL

Page 569 - FC-FC routing overview

610 Fabric OS Administrator’s Guide53-1002745-02Displaying the range of output ports connected to xlate domains241. Log in to a switch in the edge fab

Page 570

Fabric OS Administrator’s Guide 61153-1002745-02AppendixAPort IndexingThis appendix shows how to use the switchShow command to determine the mapping a

Page 571

612 Fabric OS Administrator’s Guide53-1002745-02Port IndexingA740 3 20 5 ------ -- 16G No_Module FC741 3 21 5 ------ -- 16G No_Module FC742 3 22 5 ---

Page 572 - • Inter-fabric link (IFL)

Fabric OS Administrator’s Guide 61353-1002745-02Port IndexingAExample of port indexing on an FC8-64 blade on a Brocade DCX-4S Backbone.The Brocade DCX

Page 573 - • Proxy PID

614 Fabric OS Administrator’s Guide53-1002745-02Port IndexingAExample of port indexing on an FS8-18 blade on a DCX 8510-8 BackboneThis example shows t

Page 574 - • MetaSAN

Fabric OS Administrator’s Guide 61553-1002745-02AppendixBFIPS SupportIn this appendix•FIPS overview. . . . . . . . . . . . . . . . . . . . . . . . . .

Page 575 - Proxy devices

616 Fabric OS Administrator’s Guide53-1002745-02Zeroization functionsBFCSP Challenge Handshake Authentication Protocol (CHAP) SecretsecAuthSecret –-re

Page 576 - FC-FC routing topologies

Fabric OS Administrator’s Guide 61753-1002745-02FIPS mode configurationBPower-on self testsA power-on self-test (POST) is invoked by powering on the s

Page 577 - Phantom domains

618 Fabric OS Administrator’s Guide53-1002745-02FIPS mode configurationBLDAP in FIPS modeYou can configure your Microsoft Active Directory server to u

Page 578

Fabric OS Administrator’s Guide 61953-1002745-02FIPS mode configurationBSetting up LDAP for FIPS mode1. Log in to the switch using an account with adm

Page 579 - Setting up FC-FC routing

62 Fabric OS Administrator’s Guide53-1002745-02The switch Ethernet interface2Changing the default account passwords at login Use the following procedu

Page 580

620 Fabric OS Administrator’s Guide53-1002745-02FIPS mode configurationB4. Set up LDAP according to the instructions in “LDAP configuration and Micros

Page 581 - Backbone fabric IDs

Fabric OS Administrator’s Guide 62153-1002745-02Preparing a switch for FIPSBExporting an LDAP switch certificateThis procedure exports the LDAP CA cer

Page 582 - FCIP tunnel configuration

622 Fabric OS Administrator’s Guide53-1002745-02Preparing a switch for FIPSBOverview of steps1. Remove legacy OpenSSH DSA keys.2. Optional: Configure

Page 583

Fabric OS Administrator’s Guide 62353-1002745-02Preparing a switch for FIPSB4. Optional: Set the authentication protocols.a. Enter the authUtil --set

Page 584

624 Fabric OS Administrator’s Guide53-1002745-02Preparing a switch for FIPSB• System services: No• cfgload attributes: Yes• Enforce secure config Uplo

Page 585

Fabric OS Administrator’s Guide 62553-1002745-02Preparing a switch for FIPSBNOTEPasswords of the default accounts (admin and user) should be changed a

Page 586

626 Fabric OS Administrator’s Guide53-1002745-02Preparing a switch for FIPSB

Page 587 - • 10,000 for a VEX_Port IFL

Fabric OS Administrator’s Guide 62753-1002745-02AppendixCHexadecimal ConversionHexadecimal overviewHexadecimal, also known as hex, is a numeral system

Page 588 - Port cost considerations

628 Fabric OS Administrator’s Guide53-1002745-02Hexadecimal ConversionCDecimal-to-hexadecimal conversion tableTABLE 90 Decimal-to-hexadecimal conversi

Page 589

Fabric OS Administrator’s Guide 62953-1002745-02Hexadecimal ConversionCHexabac adaeaf b0b1b2b3b4Decimal 181 182 183 184 185 186 187 188 189 190Hex b5

Page 590 - LSAN zone configuration

Fabric OS Administrator’s Guide 6353-1002745-02The switch Ethernet interface2NOTEWhen you change the Ethernet interface settings, open connections suc

Page 591

630 Fabric OS Administrator’s Guide53-1002745-02Hexadecimal ConversionC

Page 592

Fabric OS Administrator’s Guide 63153-1002745-02IndexNumerics10 Gbps operation on an FC port, enabling, 47610-bit addressing mode, 8010G license, 475–

Page 593

632 Fabric OS Administrator’s Guide53-1002745-02policy distribution to other switches, 227policy management, 196–199policy members, 196removing policy

Page 594 - LSAN Zone Limit 5000

Fabric OS Administrator’s Guide 63353-1002745-02switch members, 440switch port members, 439switch WWN, 440switching context, 456system-defined, 436TAC

Page 595 - Speed tag

634 Fabric OS Administrator’s Guide53-1002745-02auto-assigned FA-PWWN behavior, 426auto-leveling, FR4-18i blade, 264, 270automatic PID assignment, ena

Page 596 - Rules for LSAN tagging

Fabric OS Administrator’s Guide 63553-1002745-02bottleneckMon command, 376, 380, 381, 382, 385, 390, 391, 392Broadcast server, described, 44broadcast

Page 597 - Removing an LSAN tag

636 Fabric OS Administrator’s Guide53-1002745-02chassis names, 75chassis, changing name of, 75chassisDistribute command, 224, 226chassisName command,

Page 598 - LSAN zone binding

Fabric OS Administrator’s Guide 63753-1002745-02frameLog, 124haDisable, 146haFailover, 147, 272haShow, 103, 262, 263, 271haSyncStart, 263help, 58ifMod

Page 599 - FIGURE 81 LSAN zone binding

638 Fabric OS Administrator’s Guide53-1002745-02ssh-keygen, 180sshUtil, 180, 182, 622sshutil, 257supportSave, 39switchCfgPersistentDisable, 100switchC

Page 600 - How LSAN zone binding works

Fabric OS Administrator’s Guide 63953-1002745-02access methods, Web Tools, 55audit log, 107authentication, 403authentication policy, 207–217browser se

Page 601 - LSAN fabric matrix definition

64 Fabric OS Administrator’s Guide53-1002745-02The switch Ethernet interface2Host Name: ecp1Gateway IP Address: 10.1.2.3IPFC address for virtual fabri

Page 602 - Setting up LSAN zone binding

640 Fabric OS Administrator’s Guide53-1002745-02DD_Port, described, 84daemon processes and High Availability, 53daemon, tac_plus, 172daemons automatic

Page 603 - Proxy PID configuration

Fabric OS Administrator’s Guide 64153-1002745-02compression, 405CS_CTL-based frame prioritization, 522DHCP, 67F_Port trunking, 549failover in TI zones

Page 604 - Resource monitoring

642 Fabric OS Administrator’s Guide53-1002745-02edge-to-edge routing, 581EE monitorsabout, 501adding, 502clearing statistic counters, 505defined, 499d

Page 605

Fabric OS Administrator’s Guide 64353-1002745-02displaying information, 542masterless, 542supported configurations and platforms, 542Exchange Link Par

Page 606

644 Fabric OS Administrator’s Guide53-1002745-02command line interface, 56, 56–59default roles, 134feature interaction with Virtual Fabrics, 288intera

Page 607

Fabric OS Administrator’s Guide 64553-1002745-02See also: FC.Fibre Channel Authentication Protocol. See: FCAP.Fibre Channel Common Transport (FC-CT) p

Page 608

646 Fabric OS Administrator’s Guide53-1002745-02port configurations supported, 286port restrictions, 286FL_Port, described, 84FLOGI, 52defined, 51FC-S

Page 609

Fabric OS Administrator’s Guide 64753-1002745-02TACACS+, 173home LFMicrosoft Active Directory, 165OpenLDAP, 170RADIUS, 155TACACS+, 173host syslog, ver

Page 610

648 Fabric OS Administrator’s Guide53-1002745-02policy rules, 219policy rules using service names, 220saving policy, 218supported actions, 221supporte

Page 611 - Port Indexing

Fabric OS Administrator’s Guide 64953-1002745-02in FIPS mode, 618installing certificates, 620IPv4 and IPv6 support, 162non-FIPS mode restrictions, 162

Page 612

Fabric OS Administrator’s Guide 6553-1002745-02The switch Ethernet interface2Setting the static addresses for the Ethernet network interfaceUse the fo

Page 613

650 Fabric OS Administrator’s Guide53-1002745-02blockedchargen, 192daytime, 192discard, 192echo, 192ftp, 192rexec, 192rlogin, 192rsh, 192rstats, 192ru

Page 614

Fabric OS Administrator’s Guide 65153-1002745-02management serverdisplaying ACL, 46viewing database, 48management server database, 45–49Management ser

Page 615 - FIPS Support

652 Fabric OS Administrator’s Guide53-1002745-02null encryption support for IKE policies, 240Oon-demand ports, 483–489activating, 485available ports,

Page 616 - Zeroization functions

Fabric OS Administrator’s Guide 65353-1002745-02disabling, 45enabling, 45Virtual Fabrics, 45platforms, FC-FC routing supported, 570PLOGI, 52defined, 5

Page 617 - FIPS mode configuration

654 Fabric OS Administrator’s Guide53-1002745-02deactivation, 89decommissioning, 90deleting Top Talker monitor on, 514disabling, 90disabling dynamic P

Page 618 - LDAP in FIPS mode

Fabric OS Administrator’s Guide 65553-1002745-02portDecom command, 90portDisable command, 90, 538portEnable command, 89, 485portEncCompShow command, 3

Page 619 - Setting up LDAP for FIPS mode

656 Fabric OS Administrator’s Guide53-1002745-02QoS zone-based traffic prioritization, 523disabling, 532High Availability considerations, 528limitatio

Page 620 - Key Sub-key

Fabric OS Administrator’s Guide 65753-1002745-02upgrading temporary slot-based licenses, 479Virtual Fabrics, 288XISLs, 289rexec listener application,

Page 621 - Preparing a switch for FIPS

658 Fabric OS Administrator’s Guide53-1002745-02length, 213setting, 214viewing list of, 213secure copy protocol. See: SCP.Secure Fabric OS policies, 1

Page 622 - Enabling FIPS mode

Fabric OS Administrator’s Guide 65953-1002745-02security levels, 190SNMPv1secure protocol, 178SNMPv2secure protocol, 178SNMPv3secure protocol, 178swit

Page 623

66 Fabric OS Administrator’s Guide53-1002745-02The switch Ethernet interface2DHCP activationSome Brocade switches have DHCP enabled by default. Fabric

Page 624 - Zeroizing for FIPS

660 Fabric OS Administrator’s Guide53-1002745-02switch database distribution setting, 224unique names for logical, 74user-defined accounts, 137viewing

Page 625 - Displaying FIPS configuration

Fabric OS Administrator’s Guide 66153-1002745-02setting interactively, 71time zone settings, 69–71time, synchronizing local and external, 71time-based

Page 626

662 Fabric OS Administrator’s Guide53-1002745-02UU_Port, described, 84unblocking telnet access, 191universal temporary licensedefined, 478described, 4

Page 627 - Hexadecimal Conversion

Fabric OS Administrator’s Guide 66353-1002745-02configDownload restrictions, 252configUpload restrictions, 252configuration management, 250configuring

Page 628

664 Fabric OS Administrator’s Guide53-1002745-02Zzeroization functions for FIPS, 615zeroizing for FIPS, 624zoneaccess mode, viewing current, 327access

Page 629

Fabric OS Administrator’s Guide 66553-1002745-02zoneRemove command, 318zoneShow command, 322zoningadvanced, 303–342advanced commands, 304defined, 304e

Page 630

666 Fabric OS Administrator’s Guide53-1002745-02

Page 631 - Numerics

Fabric OS Administrator’s Guide 6753-1002745-02The switch Ethernet interface25. You can confirm that the change has been made using the ipAddrShow com

Page 632

68 Fabric OS Administrator’s Guide53-1002745-02The switch Ethernet interface2DHCP [On]:off switch:admin>Example of disabling DHCP for IPv4 using a

Page 633

Fabric OS Administrator’s Guide 6953-1002745-02Date and time settings2Date and time settingsSwitches maintain the current date and time inside a batte

Page 634

Fabric OS Administrator’s Guide 753-1002745-02Chapter 3 Performing Advanced Configuration TasksPort Identifiers (PIDs) and PID binding overview . . .

Page 635

70 Fabric OS Administrator’s Guide53-1002745-02Date and time settings2When you set the time zone for a switch, you can perform the following tasks:• D

Page 636

Fabric OS Administrator’s Guide 7153-1002745-02Date and time settings2Setting the time zone interactivelyUse the following procedure to set the curren

Page 637

72 Fabric OS Administrator’s Guide53-1002745-02Domain IDs2Use the following procedure to synchronize the local time with an external source: 1. Connec

Page 638

Fabric OS Administrator’s Guide 7353-1002745-02Domain IDs2Displaying the domain IDsUse the following procedure to display device domain IDs: 1. Connec

Page 639

74 Fabric OS Administrator’s Guide53-1002745-02Switch names2Setting the domain IDUse the following procedure to set the domain ID:1. Connect to the sw

Page 640

Fabric OS Administrator’s Guide 7553-1002745-02Chassis names2Chassis namesBrocade recommends that you customize the chassis name for each platform. So

Page 641

76 Fabric OS Administrator’s Guide53-1002745-02Switch activation and deactivation2High availability considerations for fabric namesFabric names locall

Page 642

Fabric OS Administrator’s Guide 7753-1002745-02Switch and Backbone shutdown2Powering off a Brocade switchUse the following procedure to gracefully shu

Page 643

78 Fabric OS Administrator’s Guide53-1002745-02Basic connections2Basic connectionsBefore connecting a switch to a fabric that contains switches runnin

Page 644

Fabric OS Administrator’s Guide 7953-1002745-02Chapter3Performing Advanced Configuration TasksIn this chapter•Port Identifiers (PIDs) and PID binding

Page 645

8 Fabric OS Administrator’s Guide53-1002745-02Audit log configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .107Verifyin

Page 646

80 Fabric OS Administrator’s Guide53-1002745-02Port Identifiers (PIDs) and PID binding overview3Core PID addressing modeCore PID is the default PID fo

Page 647

Fabric OS Administrator’s Guide 8153-1002745-02Port Identifiers (PIDs) and PID binding overview3• Shared area limitations are removed on 48-port and 6

Page 648

82 Fabric OS Administrator’s Guide53-1002745-02Port Identifiers (PIDs) and PID binding overview3WWN-based PID assignmentWWN-based PID assignment is di

Page 649

Fabric OS Administrator’s Guide 8353-1002745-02Port Identifiers (PIDs) and PID binding overview3Use the following procedure to enable automatic PID as

Page 650

84 Fabric OS Administrator’s Guide53-1002745-02Ports3PortsPorts provide either a physical or virtual network connection point for a device. Brocade de

Page 651

Fabric OS Administrator’s Guide 8553-1002745-02Ports3The different blades that can be inserted into a chassis are described as follows:• Control proce

Page 652

86 Fabric OS Administrator’s Guide53-1002745-02Ports3Upgrade and Downgrade considerations For an upgrade, unless both CP8 external Ethernet ports are

Page 653

Fabric OS Administrator’s Guide 8753-1002745-02Ports3Port identification by slot and port numberThe port number is a number assigned to an external po

Page 654

88 Fabric OS Administrator’s Guide53-1002745-02Ports3Configuring a device-switch connection To configure an 8G (and 8G only) connection between a devi

Page 655

Fabric OS Administrator’s Guide 8953-1002745-02Ports31. Connect to the switch and log in using an account with admin permissions.2. Enable the portSwa

Page 656

Fabric OS Administrator’s Guide 953-1002745-02Local database user accounts . . . . . . . . . . . . . . . . . . . . . . . . . . . . .137Default account

Page 657

90 Fabric OS Administrator’s Guide53-1002745-02Ports3Disabling a portUse the following procedure to disable a port: 1. Connect to the switch and log i

Page 658

Fabric OS Administrator’s Guide 9153-1002745-02Ports3• When selecting autonegotiation, you can choose the specific link operating modes that are adver

Page 659

92 Fabric OS Administrator’s Guide53-1002745-02Ports3Example of setting the port mode to 10 Mbps half-duplex operation To force the link for the eth0

Page 660

Fabric OS Administrator’s Guide 9353-1002745-02Blade terminology and compatibility3Setting port speed for a port octetYou can use the portCfgOctetSpee

Page 661

94 Fabric OS Administrator’s Guide53-1002745-02Blade terminology and compatibility3TABLE 6 Port blade terminology, numbering, and platform supportSupp

Page 662

Fabric OS Administrator’s Guide 9553-1002745-02Blade terminology and compatibility3CP bladesThe control processor (CP) blade provides redundancy and a

Page 663

96 Fabric OS Administrator’s Guide53-1002745-02Enabling and disabling blades3Port and application blade compatibilityTable 6 on page 94 identifies whi

Page 664

Fabric OS Administrator’s Guide 9753-1002745-02Blade swapping3Enabling bladesUse the following procedure to enable a blade: 1. Connect to the switch a

Page 665

98 Fabric OS Administrator’s Guide53-1002745-02Blade swapping3• Blade swapping is not supported when swapping to a different model of blade or a diffe

Page 666

Fabric OS Administrator’s Guide 9953-1002745-02Blade swapping3The preparation process also includes any special handling of ports associated with logi

Comments to this Manuals

No comments