User Security Considerations; Switch Configuration - HP A7533A - Brocade 4Gb SAN Switch Base Administrator's Manual

Table 97 Fabric OS commands related to FICON and FICON CUP (continued)
Command
ficoncupshow fmsmode
ficoncupshow modereg
NOTE: The Fabric OS CLI supports only a subset of the management features for FICON fabrics. The full
set of FICON CUP administrative procedures is available using the Data Center Fabric Manager and Web
Tools software features. You can also use an SNMP agent and the FICON Management Information Base
(MIB).
For information on the following tools, see the documents indicated:
• Web Tools—Web Tools Administrator's Guide
• Data Center Fabric Manager—Data Center Fabric Manager User Manual
• SNMP Agent and FICON Management Information Base (MIB)—Fabric OS MIB Reference

User security considerations

To administer FICON, you must have one of the following roles:
• Admin
• Operator
• SwitchAdmin
• FabricAdmin
The User and BasicSwitchAdmin roles are view-only. The ZoneAdmin and SecurityAdmin roles have no
access.
In an Admin Domain-aware fabric, if you use the FICON commands (ficonShow, ficonClear,
ficonCupShow, and ficonCupSet) for any Admin Domain other than AD0 and AD255, the current
switch must be a member of that Admin Domain. The output is not filtered based on the Admin Domain.

Switch configuration

Use the worksheet in
Following are FICON environment configuration settings:
• Disable dynamic load sharing (dlsReset command).
If DLS is enabled, traffic on existing ISL ports might be affected when one or more new ISLs is added
between the same two switches. Specifically, adding the new ISL might result in dropped frames as
routes are adjusted to take advantage of the bandwidth provided. By disabling DLS, you ensure that
there will be no dropped frames.
• Configure ports that are connected to 1 Gb/s channels for fixed 1 Gb/s speed. Otherwise, when using
fixed 1 Gb/s channels (both G5 and FICON Express), the FICON host might generate erroneous link
incidents when the channels are coming online. These link incidents will result in a call home. Other
than the generated link incident, the channel will come online and function normally.
• Use the port-based routing policy on any switch that has FICON devices attached. Other switches in
the fabric with Open Systems devices exclusively can still use exchange-based routing.
• Enable in-order delivery (iodSet command).
• If you have any Extended Fabrics links, enable VC translation link initialization to stabilize them. See
step 4 on page 432
portCfgLongDistance command.
• Follow standard FCP zoning practices. Domain, Area zoning when the interoperable mode is set to 2 is
supported on Logical Switches with a 256 area limit port-based area assignment only.
• Configure ports for fixed 1 Gb/s speed when there are 1 Gb/s devices attached to them and those
devices cannot auto-negotiate speed.
Description
Displays the FICON Management Server mode setting for the switch.
Displays the mode register bit settings for the switch.
Table 99 on page 509 to record your configuration information.
in Chapter 19, "Administering extended fabrics" for details on this option of the
Fabric OS 6.2 administrator guide 499