ADMINISTRATOR GUIDE FABRIC OS.pdf - 53-1001336-01 28 July...

Unformatted text preview: 53-1001336-01 28 July 2009 Fabric OS Administrator’s Guide Supporting Fabric OS v6.3.0 Copyright © 2007-2009 Brocade Communications Systems, Inc. All Rights Reserved. Brocade, the B-wing symbol, BigIron, DCX, Fabric OS, FastIron, IronPoint, IronShield, IronView, IronWare, JetCore, NetIron, SecureIron, ServerIron, StorageX, and TurboIron are registered trademarks, and DCFM, Extraordinary Networks, and SAN Health are trademarks of Brocade Communications Systems, Inc., in the United States and/or in other countries. All other brands, products, or service names are or may be trademarks or service marks of, and are used to identify, products or services of their respective owners. Notice: This document is for informational purposes only and does not set forth any warranty, expressed or implied, concerning any equipment, equipment feature, or service offered or to be offered by Brocade. Brocade reserves the right to make changes to this document at any time, without notice, and assumes no responsibility for its use. This informational document describes features that may not be currently available. Contact a Brocade sales office for information on feature and product availability. Export of technical data contained in this document may require an export license from the United States government. The authors and Brocade Communications Systems, Inc. shall have no liability or responsibility to any person or entity with respect to any loss, cost, liability, or damages arising from the information contained in this book or the computer programs that accompany it. The product described by this document may contain “open source” software covered by the GNU General Public License or other open source license agreements. To find out which open source software is included in Brocade products, view the licensing terms applicable to the open source software, and obtain a copy of the programming source code, please visit . Brocade Communications Systems, Incorporated Corporate and Latin American Headquarters Brocade Communications Systems, Inc. 1745 Technology Drive San Jose, CA 95110 Tel: 1-408-333-8000 Fax: 1-408-333-8101 E-mail: [email protected] Asia-Pacific Headquarters Brocade Communications Systems China HK, Ltd. No. 1 Guanghua Road Chao Yang District Units 2718 and 2818 Beijing 100020, China Tel: +8610 6588 8888 Fax: +8610 6588 9999 E-mail: [email protected] European Headquarters Brocade Communications Switzerland Sàrl Centre Swissair Tour B - 4ème étage 29, Route de l'Aéroport Case Postale 105 CH-1215 Genève 15 Switzerland Tel: +41 22 799 5640 Fax: +41 22 799 5641 E-mail: [email protected] Asia-Pacific Headquarters Brocade Communications Systems Co., Ltd. (Shenzhen WFOE) Citic Plaza No. 233 Tian He Road North Unit 1308 – 13th Floor Guangzhou, China Tel: +8620 3891 2000 Fax: +8620 3891 2111 E-mail: [email protected] Document History Title Publication number Summary of changes Date Fabric OS Procedures Guide 53-0000518-02 First released edition. April 2003 Fabric OS Procedures Guide 53-0000518-03 Revised for Fabric OS v4.2.0. December 2003 Fabric OS Procedures Guide 53-0000518-04 Revised to include switch-specific information. March 2004 Fabric OS Procedures Guide 53-0000518-05 Revised for Fabric OS v4.4.0. September 2004 Fabric OS Procedures Guide 53-0000518-06 Revised to add RADIUS and SSL procedures. October 2004 Fabric OS Administrator’s Guide 53-0000518-07 Revised book title. Added information about 200E, 4012, and 48000 switches. April 2005 Fabric OS Administrator’s Guide 53-1000043-01 Revised for Fabric OS v5.1.0. January 2006 Title Publication number Summary of changes Fabric OS Administrator’s Guide 53-1000043-02 June 2006 Removed SilkWorm 4016 and 4020 from supported switches; FCIP chapter updates. Fabric OS Administrator’s Guide 53-1000239-01 Revised for Fabric OS v5.2.0 features. Added new hardware platforms: Brocade FC4-48 and FC4-16IP. Fabric OS Administrator’s Guide 53-1000448-01 15 June 2007 Added Fabric OS v5.3.0 features. Added support for new hardware platforms: Brocade 7600, FA4-18, and FC10-6. Fabric OS Administrator’s Guide 53-1000598-01 Added Fabric OS v6.0.0 features. Added support for new hardware platforms: Brocade DCX Backbone, FC8-16, FC8-32, and FC8-48. 19 October 2007 Fabric OS Administrator’s Guide 53-1000598-02 Changed “DCX” and “DCX director” to the correct name: Brocade DCX Backbone. Also, added the word “director” to the 48000. 22 January 2008 Fabric OS Administrator’s Guide 53-1000598-03 Added Fabric OS v6.1.0 features. Added support for new hardware platforms: Brocade 5300, 5100, and 300. 12 March 2008 Fabric OS Administrator’s Guide 53-1000598-04 Updated document to streamline content. No new hardware or Fabric OS features. 18 July 2008 Fabric OS Administrator’s Guide 53-1001185-01 Added Fabric OS v 6.2.0 software features and support for new hardware platforms: Brocade DCX-4S. 24 November 2008 Fabric OS Administrator’s Guide 53-1001336-01 Added Fabric OS v6.3.0 software features and support for new hardware platforms. July 2009 Fabric OS Administrator’s Guide 53-1001336-01 Date September 2006 iii iv Fabric OS Administrator’s Guide 53-1001336-01 Contents Figures Tables About This Document In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxxiii How this document is organized . . . . . . . . . . . . . . . . . . . . . . . . . . xxxiii Supported hardware and software . . . . . . . . . . . . . . . . . . . . . . . . xxxiv What’s new in this document. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxxv Document conventions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxxvi Notice to the reader . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxxviii Additional information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxxviii Getting technical help. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxxix Document feedback . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xl Section I Chapter 1 Standard Features Performing Basic Configuration Tasks In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 Fabric OS overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 Fabric OS command line interface . . . . . . . . . . . . . . . . . . . . . . . . . . . 2 Console sessions using the serial port. . . . . . . . . . . . . . . . . . . . . 2 Telnet or SSH sessions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 Getting help on a command . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4 Password modification . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 Default account passwords. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 The Ethernet interface on your switch. . . . . . . . . . . . . . . . . . . . . . . . . 6 Virtual Fabrics and the Ethernet interface . . . . . . . . . . . . . . . . . . 6 Displaying the network interface settings . . . . . . . . . . . . . . . . . . 6 Static Ethernet addresses. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7 DHCP activation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8 IPv6 autoconfiguration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10 Date and time settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11 Setting the date and time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11 Time zone settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11 Network time protocol . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13 Fabric OS Administrator’s Guide 53-1001336-01 v Domain IDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14 Displaying the domain IDs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14 Setting the domain ID . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15 Switch names . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15 Customizing the switch name . . . . . . . . . . . . . . . . . . . . . . . . . . . 16 Chassis names . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16 Customizing chassis names . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16 Switch activation and deactivation . . . . . . . . . . . . . . . . . . . . . . . . . . 16 Disabling a switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16 Enabling a switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17 Switch and enterprise-class platform shutdown. . . . . . . . . . . . . . . . 17 Powering off a Brocade switch . . . . . . . . . . . . . . . . . . . . . . . . . . 17 Powering off a Brocade enterprise-class platform . . . . . . . . . . 17 Basic connections . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18 Device connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18 Switch connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18 Chapter 2 Performing Advanced Configuration Tasks In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21 PIDs and PID binding overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21 Core PID addressing mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22 Fixed addressing mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22 10-bit addressing mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22 256-area addressing mode. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23 WWN-based PID assignment . . . . . . . . . . . . . . . . . . . . . . . . . . . 23 Ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25 Setting port names . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26 Port identification by slot and port number . . . . . . . . . . . . . . . . 26 Port identification by port area ID. . . . . . . . . . . . . . . . . . . . . . . . 27 Port identification by index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27 Swapping port area IDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28 Port activation and deactivation . . . . . . . . . . . . . . . . . . . . . . . . . 28 Setting port speeds . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29 Setting the same speed for all ports on the switch. . . . . . . . . . 29 Blade terminology and compatibility . . . . . . . . . . . . . . . . . . . . . . . . . 30 CP blades . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31 Core blades . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32 Port and application blade compatibility . . . . . . . . . . . . . . . . . . 32 Enabling and disabling blades . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33 Enabling blades . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33 Disabling blades. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34 Blade swapping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34 Swapping blades . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35 Swapping blades . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37 Power conservation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37 Powering off a port blade . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38 Powering on a port blade . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38 vi Fabric OS Administrator’s Guide 53-1001336-01 Inter-chassis links . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38 Supported topologies. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39 Gateway links . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40 Configuring a link through a gateway . . . . . . . . . . . . . . . . . . . . . 41 Equipment status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41 Checking switch operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41 Verifying High Availability features (directors and enterprise-class platforms only) . . . . . . . . . . . . . . . . . . . . . . . . . 41 Verifying fabric connectivity. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43 Verifying device connectivity . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43 Track and control switch changes . . . . . . . . . . . . . . . . . . . . . . . . . . . 43 Enabling the track changes feature . . . . . . . . . . . . . . . . . . . . . . 44 Displaying the status of the track changes feature. . . . . . . . . . 44 Viewing the switch status policy threshold values . . . . . . . . . . 44 Setting the switch status policy threshold values . . . . . . . . . . . 45 Audit log configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46 Auditable event classes. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47 Verifying host syslog prior to configuring the audit log . . . . . . . 48 Configuring an audit log for specific event classes . . . . . . . . . . 48 High availability of daemon processes . . . . . . . . . . . . . . . . . . . . . . . 49 Chapter 3 Understanding Fibre Channel Services In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51 Fibre Channel services overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51 The Management Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52 Platform services. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52 Platform services in a Virtual Fabric. . . . . . . . . . . . . . . . . . . . . . 52 Enabling platform services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53 Disabling platform services. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53 Management server database . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53 Displaying the management server ACL . . . . . . . . . . . . . . . . . . 54 Adding a member to the ACL . . . . . . . . . . . . . . . . . . . . . . . . . . . 54 Deleting a member from the ACL . . . . . . . . . . . . . . . . . . . . . . . . 55 Viewing the contents of the management server database . . . 56 Clearing the management server database . . . . . . . . . . . . . . . 57 Topology discovery . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57 Displaying topology discovery status . . . . . . . . . . . . . . . . . . . . . 57 Enabling topology discovery . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57 Disabling topology discovery . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57 Chapter 4 Routing Traffic About this chapter. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59 Routing overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59 Path versus route selection. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59 FSPF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60 Fibre Channel NAT . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60 Fabric OS Administrator’s Guide 53-1001336-01 vii Routing policies. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61 Displaying the current routing policy . . . . . . . . . . . . . . . . . . . . . 61 Exchange-based routing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62 Port-based routing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62 AP route policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62 Routing in Virtual Fabrics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63 Route selection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64 Dynamic load sharing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64 Static route assignment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64 Frame order delivery . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65 Forcing in-order frame delivery across topology changes. . . . . 66 Restoring out-of-order frame delivery across topology changes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 66 Lossless Dynamic Load Sharing on ports . . . . . . . . . . . . . . . . . . . . . 66 Configuring lossless dynamic load sharing on ports . . . . . . . . . 66 Lossless dynamic load sharing in Virtual Fabrics . . . . . . . . . . . 66 Frame Redirection. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67 Creating a frame redirect zone . . . . . . . . . . . . . . . . . . . . . . . . . . 68 Deleting a frame redirect zone . . . . . . . . . . . . . . . . . . . . . . . . . . 68 Viewing redirect zones. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 68 Chapter 5 Managing User Accounts In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69 User accounts overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69 Role-Based Access Control (RBAC). . . . . . . . . . . . . . . . . . . . . . . 70 The management channel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73 Local database user accounts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74 Default accounts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74 Local account passwords . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75 Local account database distribution . . . . . . . . . . . . . . . . . . . . . . . . . 76 Distributing the local user database . . . . . . . . . . . . . . . . . . . . . 76 Accepting distribution of user databases on the local switch . 76 Rejecting distributed user databases on the local switch . . . . 77 Password policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77 Password strength policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77 Password history policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 78 Password expiration policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79 Account lockout policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79 The boot PROM password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81 Setting the boot PROM password for a switch with a recovery string . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81 Setting the boot PROM password for a director with a recovery string . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82 Setting the boot PROM password for a switch without a recovery string . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83 Setting the boot PROM password for a director without a recovery string . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84 viii Fabric OS Administrator’s Guide 53-1001336-01 The authentication model using RADIUS and LDAP . . . . . . . . . . . . . 85 Setting the switch authentication mode . . . . . . . . . . . . . . . . . . 87 Fabric OS user accounts . . . . . . . . . . . . . . . . . . . . . . . . . . . . ....
View Full Document