Cisco N5K-M1600 - Expansion Module - 6 Ports Troubleshooting Manual page 84

Zoning
S e n d d o c u m e n t c o m m e n t s t o n e x u s 5 k - d o c f e e d b a c k @ c i s c o . c o m .
•
Full zone database synchronization failure across two switches
A full zone database synchronization failure may occur when two switches connect using the E or TE
port and have different zone set distribution policies. As a result of a fabric isolation/merge, one fabric
might not have the full zone set database in the running configuration.
Possible Cause
The zone set distribution takes effect while sending merge requests to the adjacent switch or while
activating a zone set.
The zone distribute policy can be set differently on two switches and that could cause synchronization
failure.
Solution
Use the show zone status command to verify the distribution policy on both switches.
Example:
When the distribute policy is set to active only the active zone set is distributed. Also verify that the
distribute policy is set to full.
To enable the full zone set and active zone set distribution to all switches on a per-VSAN basis in the
configuration mode, use the zoneset distribute full vsan <vsan-id> command.
Mismatched default zone policy in switches in VSAN causes unexpected
results when accessing storage
A mismatched default zone policy in all switches in the VSAN in the basic zone mode might cause
unexpected results for any hosts accessing storage.
Possible Cause
If the default zone policy is set to permit and if there is no active zone set for VSAN, then all the members
of the VSAN can see all the other nodes.
Solution
One approach is to migrate the zone operation mode from basic to enhanced. Enhanced zoning
synchronizes the zone configuration across all switches in the VSAN. This eliminates the possibility of
mismatched default zone policies.
•
•
Another approach is the foillowing:
Cisco Nexus 5000 Series Troubleshooting Guide
5-12
To further troubleshoot this issue, capture the output from the show tech-support zone command
and the show logging log command.
VSAN: 100 default-zone: deny distribute: active only Interop: default
mode: basic merge-control: allow
Use the show zone status command to display the status of the zone.
VSAN: 300 default-zone: deny distribute: active only Interop: default
mode: basic merge-control: allow
Use the zone default-zone command to set the default zone policy and use the zone mode enhanced
<vsan-id> command to set the operation to enhanced zoning mode.
Chapter 5 Troubleshooting SAN Switching Issues
OL-25300-01