HP SN3000B

584 pages

To Next Page

To Next Page

To Previous Page

To Previous Page

Loading...

114 Fabric OS Administrator’s Guide

53-1002446-01

The authentication model using RADIUS and LDAP

5

Table of Contents

Default Chapter3
- Default Chapter3
  - Table of Contents3
  - About this Document31
- Standard Features39
Chapter 1 Understanding Fibre Channel Services41
- In this Chapter41
- Fibre Channel Services Overview41
- Figure 1 Well-Known Addresses41
- Management Server42
- Platform Services42
- Management Server Database44
- Topology Discovery47
- Device Login48
- High Availability of Daemon Processes51
- Table 1 Daemons that Are Automatically Restarted51
Chapter 2 Performing Basic Configuration Tasks53
- In this Chapter53
- Fabric os Overview53
- Fabric os Command Line Interface54
- Password Modification57
  - Default Account Passwords57
- The Ethernet Interface on Your Switch58
- Date and Time Settings63
- Domain Ids66
- Switch Names68
  - Customizing the Switch Name68
- Chassis Names68
  - Customizing Chassis Names68
- Fabric Name69
- Switch Activation and Deactivation70
  - Disabling a Switch70
  - Enabling a Switch70
- Switch and Backbone Shutdown70
  - Powering off a Brocade Switch70
  - Powering off a Brocade Backbone71
- Basic Connections71
  - Device Connection71
  - Switch Connection72
Chapter 3 Performing Advanced Configuration Tasks73
- In this Chapter73
- Pids and PID Binding Overview73
- Ports77
- Blade Terminology and Compatibility82
- Enabling and Disabling Blades86
- Blade Swapping88
- Power Management91
  - Powering off a Port Blade91
  - Powering on a Port Blade91
- Equipment Status92
- Track and Control Switch Changes93
- Audit Log Configuration96
  - Verifying Host Syslog Prior to Configuring the Audit Log97
  - Configuring an Audit Log for Specific Event Classes97
- Configuring FLOGI-Time Handling of Duplicate PWWN98
  - Setting the Behavior for Handling Duplicate Pwwns99
  - Table 8 Duplicate PWWN Behavior: Existing Login Takes Precedence over Second Login 60 Table 9 Duplicate PWWN Behavior: Second Login Overrides Existing Login99
Chapter 4 Routing Traffic101
- In this Chapter101
- Routing Overview101
- Inter-Switch Links104
- Gateway Links106
- Routing Policies108
- Route Selection110
  - Dynamic Load Sharing111
- Frame Order Delivery112
  - Forcing In-Order Frame Delivery Across Topology Changes112
  - Restoring Out-Of-Order Frame Delivery Across Topology Changes74112
- Lossless Dynamic Load Sharing on Ports113
- Enabling Forward Error Correction115
- Frame Redirection116
Chapter 5 Managing User Accounts119
- In this Chapter119
- User Accounts Overview119
- Local Database User Accounts123
- Local Account Database Distribution126
- Password Policies127
- The Boot PROM Password131
- The Authentication Model Using RADIUS and LDAP135
Chapter 6 Configuring Protocols153
- In this Chapter153
- Security Protocols153
- Table 18 Secure Protocol Support153
- Secure Copy154
- Secure Shell Protocol155
  - SSH Public Key Authentication155
- Secure Sockets Layer Protocol158
- Simple Network Management Protocol163
- Telnet Protocol165
  - Blocking Telnet165
  - Unblocking Telnet167
- Listener Applications167
- Ports and Applications Used by Switches167
Chapter 7 Configuring Security Policies169
- In this Chapter169
- ACL Policies Overview169
  - How the ACL Policies Are Stored169
  - Policy Members170
- ACL Policy Management170
- FCS Policies173
- DCC Policies176
- SCC Policies180
- Authentication Policy for Fabric Elements181
- IP Filter Policy191
- Policy Database Distribution198
- Management Interface Security204
Chapter 8 Maintaining the Switch Configuration File215
- In this Chapter215
- Configuration Settings215
  - Configuration File Format216
- Configuration File Backup218
  - Uploading a Configuration File in Interactive Mode219
- Configuration File Restoration219
- Configurations Across a Fabric223
  - Downloading a Configuration File from One Switch to Another same Model Switch224
  - Security Considerations224
- Configuration Management for Virtual Fabrics224
- Brocade Configuration Form227
- Table 45 Brocade Configuration and Connection227
Chapter 9 Installing and Maintaining Firmware229
- In this Chapter229
- Firmware Download Process Overview229
- Preparing for a Firmware Download232
- Firmware Download on Switches234
  - Switch Firmware Download Process Overview234
- Firmware Download on a Backbone235
  - Backbone Firmware Download Process Overview236
- Firmware Download from a USB Device239
- FIPS Support240
- Test and Restore Firmware on Switches242
  - Testing a Different Firmware Version on a Switch242
- Test and Restore Firmware on Backbones244
  - Testing Different Firmware Versions on Backbones244
- Validating a Firmware Download246
Chapter 10 Managing Virtual Fabrics249
- In this Chapter249
- Virtual Fabrics Overview249
- Logical Switch Overview250
- Logical Fabric Overview254
- Management Model for Logical Switches259
- Account Management and Virtual Fabrics259
Chapter 11 Administering Advanced Zoning275
- In this Chapter275
- Special Zones275
- Zoning Overview276
- Broadcast Zones282
- Zone Aliases284
- Zone Creation and Maintenance287
- Default Zoning Mode290
  - Setting the Default Zoning Mode291
  - Viewing the Current Default Zone Access Mode292
- Zone Database Size292
- Zone Configurations292
- Zone Object Maintenance298
- Zone Configuration Management300
- Security and Zoning300
- Zone Merging301
Chapter 12 Traffic Isolation Zoning307
- In this Chapter307
- Traffic Isolation Zoning Overview307
  - TI Zone Failover308
  - Figure 31 Traffic Isolation Zone Creating a Dedicated Path through the Fabric308
  - Table 58 Traffic Behavior When Failover Is Enabled or Disabled in TI Zones309
  - FSPF Routing Rules and Traffic Isolation310
  - Figure 32 Fabric Incorrectly Configured for TI Zone with Failover Disabled310
  - Figure 33 Dedicated Path Is the Only Shortest Path311
  - Figure 40 Figure311
- Enhanced TI Zones312
  - Figure 34 Dedicated Path Is Not the Shortest Path312
  - Figure 35 Enhanced TI Zones312
  - Illegal Configurations with Enhanced TI Zones313
- Traffic Isolation Zoning over FC Routers314
  - Figure 37 Illegal ETIZ Configuration: Two Paths from One Port314
  - Figure 38 Traffic Isolation Zoning over FCR315
  - Figure 39 TI Zone in an Edge Fabric315
  - TI Within an Edge Fabric315
  - TI Within a Backbone Fabric316
  - Limitations of TI Zones over FC Routers317
- General Rules for TI Zones317
- Supported Configurations for Traffic Isolation Zoning318
  - Additional Configuration Rules for Enhanced TI Zones319
  - Trunking with TI Zones319
- Limitations and Restrictions of Traffic Isolation Zoning319
- Admin Domain Considerations for Traffic Isolation Zoning320
- Virtual Fabric Considerations for Traffic Isolation Zoning320
- Figure 42 Dedicated Path with Virtual Fabrics321
- Figure 43 Creating a TI Zone in a Logical Fabric321
- Figure 44 Creating a TI Zone in a Base Fabric321
- Traffic Isolation Zoning over FC Routers with Virtual Fabrics322
- Figure 45 Example Configuration for TI Zones over FC Routers in Logical Fabrics322
- Creating a TI Zone323
  - Figure 46 Logical Representation of TI Zones over FC Routers in Logical Fabrics323
  - Creating a TI Zone in a Base Fabric325
- Modifying TI Zones326
- Changing the State of a TI Zone327
- Deleting a TI Zone328
- Displaying TI Zones328
- Troubleshooting TI Zone Routing Problems329
- Setting up TI over FCR (Sample Procedure)330
Chapter 13 Bottleneck Detection335
- In this Chapter335
- Bottleneck Detection Overview335
- Supported Configurations for Bottleneck Detection338
- Advanced Bottleneck Detection Settings339
- Enabling Bottleneck Detection on a Switch340
- Excluding a Port from Bottleneck Detection341
- Displaying Bottleneck Detection Configuration Details342
- Changing Bottleneck Parameters343
- Displaying Bottleneck Statistics345
  - Disabling Bottleneck Detection on a Switch346
Chapter 14 In-Flight Encryption and Compression347
- In this Chapter347
- In-Flight Encryption and Compression Overview347
- Configuring Encryption and Compression350
- Encryption and Compression Example355
  - Example of Enabling Encryption and Compression on a Port356
  - Example of Disabling Encryption and Compression358
Chapter 15 NPIV361
- In this Chapter361
- NPIV Overview361
- Configuring NPIV363
- Enabling and Disabling NPIV364
- Viewing NPIV Port Configuration Information365
  - Viewing Virtual PID Login Information366
Chapter 16 Dynamic Fabric Provisioning: Fabric-Assigned WWN367
- In this Chapter367
- Introduction to Dynamic Fabric Provisioning Using FA-PWWN367
- User- and Auto-Assigned FA-PWWN Behavior368
  - Checking for Duplicate FA-Pwwns368
- Configuring FA-Pwwns368
- Supported Switches and Configurations for FA-PWWN371
- Firmware Upgrade and Downgrade Considerations for FA-PWWN372
- Security Considerations for FA-PWWN372
- Configuration Upload and Download Considerations for FA-PWWN372
- Restrictions of FA-PWWN373
- Access Gateway N_Port Failover with FA-PWWN373
Chapter 17 Managing Administrative Domains375
- In this Chapter375
- Administrative Domains Overview375
- Admin Domain Management for Physical Fabric Administrators384
- SAN Management with Admin Domains396
- Licensed Features403
Chapter 18 Administering Licensing405
- In this Chapter405
- Licensing Overview405
- Table 65 Available Brocade Licenses406
- Table 66 License Requirements and Location Name by Feature411
- Brocade 7800 Upgrade License412
- ICL Licensing412
- 8G Licensing414
- Slot-Based Licensing414
- 10G Licensing415
  - Enabling 10 Gbps Operation on an FC Port416
  - Enabling the 10-Gbe Ports on an FX8-24 Blade418
- Temporary Licenses419
- Viewing Installed Licenses421
- Activating a License421
- Adding a Licensed Feature421
- Removing a Licensed Feature422
- Ports on Demand423
Chapter 19 Inter-Chassis Links431
- In this Chapter431
- Icls for the Brocade DCX 8510 Backbone Family432
  - Figure 58 Minimum Configuration for 64 Gbps Icls432
  - ICL Trunking on the Brocade DCX 8510-8 and DCX 8510-4433
- Icls for the Brocade DCX Backbone Family433
  - ICL Trunking on the Brocade DCX and DCX-4S434
- Virtual Fabrics Considerations for Icls434
- Figure 59 DCX-4S Allowed ICL Connections434
- Supported Topologies for ICL Connections435
Chapter 20 Monitoring Fabric Performance437
- In this Chapter437
- Advanced Performance Monitoring Overview437
- End-To-End Performance Monitoring439
- Frame Monitoring444
- Top Talker Monitors448
- Trunk Monitoring453
- Saving and Restoring Monitor Configurations453
- Performance Data Collection454
Chapter 21 Optimizing Fabric Behavior455
- In this Chapter455
- Adaptive Networking Overview455
- Ingress Rate Limiting456
  - Limiting Traffic from a Particular Device457
  - Disabling Ingress Rate Limiting457
- Qos: SID/DID Traffic Prioritization457
  - License Requirements for SID/DID Prioritization458
- CS_CTL-Based Frame Prioritization458
- Enabling CS_CTL-Based Frame Prioritization459
- Disabling CS_CTL-Based Frame Prioritization459
- Qos Zone-Based Traffic Prioritization459
- Qos Zones462
- Setting Qos Zone-Based Traffic Prioritization467
- Setting Qos Zone-Based Traffic Prioritization over FC Routers469
- Disabling Qos Zone-Based Traffic Prioritization469
Chapter 22 Managing Trunking Connections471
- In this Chapter471
- Trunking Overview471
- Requirements for Trunk Groups473
- Figure 69 Trunk Group Configuration for the Brocade 5100473
- Supported Configurations for Trunking474
  - High Availability Support for Trunking474
- Supported Platforms for Trunking474
- Recommendations for Trunking Groups475
- Configuring Trunk Groups475
- Enabling Trunking on a Port or Switch476
- Disabling Trunking on a Port or Switch476
- Displaying Trunking Information477
- ISL Trunking over Long Distance Fabrics478
- Ex_Port Trunking478
- F_Port Trunking480
- Configuring F_Port Trunking for Access Gateway485
- Configuring F_Port Trunking for Brocade Adapters486
- Displaying F_Port Trunking Information486
- Disabling F_Port Trunking487
- Enabling the DCC Policy on a Trunk Area487
Chapter 23 Managing Long Distance Fabrics489
- In this Chapter489
- Long Distance Fabrics Overview489
- Extended Fabrics Device Limitations490
- Long Distance Link Modes490
- Configuring an Extended ISL491
  - Enabling Long Distance When Connecting to TDM Devices492
- Buffer Credit Management493
- Buffer Credit Recovery501
Chapter 24 Using FC-FC Routing to Connect Fabrics503
- In this Chapter503
- FC-FC Routing Overview503
- Fibre Channel Routing Concepts506
- Setting up FC-FC Routing513
  - Verifying the Setup for FC-FC Routing513
- Backbone Fabric Ids515
  - Assigning Backbone Fabric Ids515
- FCIP Tunnel Configuration516
- Inter-Fabric Link Configuration516
  - Configuring an IFL for both Edge and Backbone Connections516
- FC Router Port Cost Configuration520
  - Port Cost Considerations521
  - Setting Router Port Cost for an Ex_Port521
- Ex_Port Frame Trunking Configuration522
- LSAN Zone Configuration523
- Proxy PID Configuration536
- Fabric Parameter Considerations536
- Inter-Fabric Broadcast Frames537
- Resource Monitoring538
- FC-FC Routing and Virtual Fabrics539
- Upgrade and Downgrade Considerations for FC-FC Routing542
  - How Replacing Port Blades Affects Ex_Port Configuration542
  - Figure 82 Backbone-To-Edge Routing Across Base Switch Using FC Router in Legacy Mode542
- Displaying the Range of Output Ports Connected to Xlate Domains543
- Interoperation of Fabric os and M-EOS Fabrics Using FC Router545
Appendix A Interoperation of Fabric os and M-EOS Fabrics Using FC Router545
- In this Appendix545
- Interoperability Overview545
- Establishing Interoperability547
- Fabric Configurations for Interconnectivity548
- Port Indexing555
Appendix B Port Indexing559
- FIPS Support559
Appendix C FIPS Support559
- In this Appendix559
- FIPS Overview559
- Zeroization Functions559
- FIPS Mode Configuration561
- Preparing the Switch for FIPS565
- Hexadecimal Conversion569
- Hexadecimal Overview569
  - Example Conversion of the Hexadecimal Triplet Ox616000569
  - Table 89 Decimal to Hexadecimal Conversion Table570
Appendix D Hexadecimal Conversion573
- Index573

Other manuals for HP SN3000B

Reference Guide70 pages

Quick Start Instructions8 pages

Troubleshooting Guide138 pages

Specifications18 pages

Quickspecs20 pages

Related product manuals

Preview: HP SN6000B

Preview: HP StorageWorks SN6000

HP StorageWorks SN6000

Preview: HP Switch

HP A3600-24-SFP

Preview: HP StorageWorks 8/20q

HP StorageWorks 8/20q

Preview: HP V1910 Switch Series

HP V1910 Switch Series

Preview: HP 5130 EI Switch Series

HP 5130 EI Switch Series

Preview: HP ProCurve 2910al Switch

HP ProCurve 2910al Switch

HP 2920-24G Switch J9726A

Preview: HP A5500 SI Switch Series

HP A5500 SI Switch Series

Preview: HP 1800 24G - ProCurve Switch

HP 1800 24G - ProCurve Switch

StorageWorks 8/24 - SAN Switch