430 Fabric OS Administrator’s Guide
53-1002745-02
Configuration upload and download considerations for FA-PWWN
16
• Access Gateway platforms running Fabric OS v7.0.0 or later:
- Brocade 300
- Brocade 5100
- Brocade 6505
- Brocade 6510
• Brocade HBAs with driver version 3.0.0.0:
- Brocade 415
- Brocade 425
- Brocade 815
- Brocade 825
Configuration upload and download considerations for FA-PWWN
The configuration upload and download utilities can be used to import and export the FA-PWWN
configuration.
Brocade recommends you delete all FA-PWWNs from the switch with the configuration being
replaced before you upload or download a modified configuration. This is to ensure no duplicate
FA-PWWNs in the fabric.
Firmware upgrade and downgrade considerations for FA-PWWN
Firmware downgrading is blocked if the FA-PWWN feature is enabled on the switch. All FA-PWWN
configurations are lost if firmware is downgraded, even if it is followed by an upgrade back to
Fabric OS v7.0.0. This is done to ensure that the FA-PWWN configurations are not tampered with
when the switch is running an earlier version of the firmware.
You must also consider zone configuration, security configuration, and target ACLs when
downgrading from Fabric OS v7.0.0. If any of these (zone configuration, security configuration, and
target ACLs) have FA-PWWNs configured, the SAN network may not function properly, or at all.
Security considerations for FA-PWWN
The FA-PWWN feature can be enabled only by authorized administrators. Thus, existing user-level
authentication and authorization mechanisms should be used to ensure only authorized users can
configure this feature.
If you are concerned about security for FA-PWWN, you should configure device authentication. You
can use authentication at the device level to ensure security between the switch and the server.
Refer to “Device authentication policy” on page 210 for information about configuring device
authentication.
You can also use the Device Connection Control (DCC) policy to ensure that only an authorized
physical server can connect to a specific switch port.
To Next Page
Loading...
Need help?
General