Send documentation comments to mdsfeedback-doc@cisco.com
36-6
Cisco MDS 9000 Family Fabric Manager Configuration Guide
OL-17256-03, Cisco MDS NX-OS Release 4.x
Chapter 36 Configuring FICON
About FICON
Refer to the Cisco MDS 9500 Series Hardware Installation Guide and the Cisco MDS 9200 Series
Hardware Installation Guide.
• High-availability FICON-enabled director—The Cisco MDS 9500 Series combines nondisruptive
software upgrades, stateful process restart and failover, and full redundancy of all major components
for a new standard in director-class availability. It supports up to 528 autosensing, 4/2/1-Gbps,
10-Gbps, FICON or FCP ports in any combination in a single chassis. See Chapter 17, “Configuring
High Availability.”
• Infrastructure protection—Common software releases provide infrastructure protection across all
Cisco MDS 9000 platforms. See Chapter 15, “Software Images.”
• VSAN technology—The Cisco MDS 9000 Family provides VSAN technology for
hardware-enforced, isolated environments within a single physical fabric for secure sharing of
physical infrastructure and enhanced FICON mixed support. See Chapter 26, “Configuring and
Managing VSANs.”
• Port-level configurations—There are BB_credits, beacon mode, and port security for each port. See
the “About Buffer-to-Buffer Credits” section on page 20-25, “Identifying the Beacon LEDs” section
on page 20-19, and Chapter 24, “Configuring Trunking.”
• Alias name configuration—Provides user-friendly aliases instead of the WWN for switches and
attached node devices. See Chapter 30, “Configuring and Managing Zones.”
• Comprehensive security framework—The Cisco MDS 9000 Family supports RADIUS and
TACACS+ authentication, Simple Network Management Protocol Version 3 (SNMPv3), role-based
access control, Secure Shell Protocol (SSH), Secure File Transfer Protocol (SFTP), VSANs,
hardware-enforced zoning, ACLs, fabric binding, Fibre Channel Security Protocol (FC-SP), LUN
zoning, read-only zones, and VSAN-based access control. See Chapter 41, “Configuring RADIUS
and TACACS+” Chapter 45, “Configuring FC-SP and DHCHAP,” and Chapter 47, “Configuring
Fabric Binding.”
• Traffic encryption—IPSec is supported over FCIP. You can encrypt FICON and Fibre Channel
traffic that is carried over FCIP. See Chapter 44, “Configuring IPsec Network Security.”
• Local accounting log—View the local accounting log to locate FICON events. See the “MSCHAP
Authentication” section on page 41-24 and “Local AAA Services” section on page 41-26.
• Unified storage management—Cisco MDS 9000 FICON-enabled switches are fully IBM CUP
standard compliant for in-band management using the IBM S/A OS/390 I/O operations console. See
the “CUP In-Band Management” section on page 36-37.
• Port address-based configurations—Configure port name, blocked or unblocked state, and the
prohibit connectivity attributes. See the “Configuring FICON Ports” section on page 36-24.
• You can display the following information:
–
Individual Fibre Channel ports, such as the port name, port number, Fibre Channel address,
operational state, type of port, and login data.
–
Nodes attached to ports.
–
Port performance and statistics.
See the “Calculating FICON Flow Load Balance” section on page 36-39.
• Configuration files—Store and apply configuration files. See the “FICON Configuration Files”
section on page 36-28.
• FICON and Open Systems Management Server features if installed. —See the “VSANs for FICON
and FCP Mixing” section on page 36-5.
• Enhanced cascading support—See the “CUP In-Band Management” section on page 36-37.