Dpvm Configuration; Npv And Port Security; Verifying Npv - Cisco MDS 9000 Series Configuration Manual

Verifying NPV

S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m

DPVM Configuration

When NPV is enabled, the following requirements must be met before you configure DPVM on the NPV
core switch:
•
•
For details about DPVM configuration, see the Cisco MDS 9000 Family NX-OS Fabric Configuration
Guide.

NPV and Port Security

Port security is enabled on the NPV core switch on a per interface basis. To enable port security on the
NPV core switch for devices logging in via NPV, you must adhere to the following requirements:
•
•
Once these requirements are met, you can enable port security as you would in any other context. For
details about enabling port security, see the Cisco MDS 9000 Family NX-OS Security Configuration
Guide.
Verifying NPV
To view all the NPV devices in all the VSANs that the aggregator switch belongs to, enter the show fcns
database command.
switch# show fcns database
VSAN 1:
--------------------------------------------------------------------------
FCID TYPE PWWN (VENDOR) FC4-TYPE:FEATURE
--------------------------------------------------------------------------
0x010000 N 20:01:00:0d:ec:2f:c1:40 (Cisco) npv
0x010001 N 20:02:00:0d:ec:2f:c1:40 (Cisco) npv
0x010200 N 21:00:00:e0:8b:83:01:a1 (Qlogic) scsi-fcp:init
0x010300 N 21:01:00:e0:8b:32:1a:8b (Qlogic) scsi-fcp:init
Total number of entries = 4
For additional details (such as IP addresses, switch names, interface names) about the NPV devices you
see in the show fcns database output, enter the show fcns database detail command.
switch# show fcns database detail
------------------------
VSAN:1 FCID:0x010000
Cisco MDS 9000 Family NX-OS Interfaces Configuration Guide
7-12
You must explicitly configure the WWN of the internal FLOGI in DPVM. If DPVM is configured
on the NPV core switch for an end device that is connected to the NPV device, then that end device
must be configured to be in the same VSAN. Logins from a device connected to an NPV device will
fail if the device is configured to be in a different VSAN. To avoid VSAN mismatches, ensure that
the internal FLOGI VSAN matches the port VSAN of the NP port.
The first login from an NP port determines the VSAN of that port. If DPVM is configured for this
first login, which is the internal login of the NPV device, then the NPV core switch's VSAN F port
is located in that VSAN. Otherwise, the port VSAN remains unchanged.
The internal FLOGI must be in the port security database; in this way, the port on the NPV core
switch will allow communications/links.
All the end device pWWNs must also be in the port security database.
Chapter 7 Configuring N Port Virtualization
OL-19445-02, Cisco MDS NX-OS Release 4.2(x)