1. Manuals
  2. Brands
  3. Brocade Communications Systems Manuals
  4. Storage
  5. 1606
  6. Command reference manual

Brocade Communications Systems 1606 Command Reference Manual

Brocade fabric os command reference v6.3.0 (53-1001337-01, july 2009)
Hide thumbs Also See for 1606:
1
2
3
4
5
6
Table Of Contents
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
Table of Contents

Advertisement

Quick Links

Download this manual See also: Troubleshooting Manual, Administrator's Manual
53-1001337-01
®
28 July 2009
Fabric OS
Command Reference Manual
Supporting Fabric OS v6.3.0

Advertisement

Table of Contents
loading

Related Manuals for Brocade Communications Systems 1606

Summary of Contents for Brocade Communications Systems 1606

  • Page 1 53-1001337-01 ® 28 July 2009 Fabric OS Command Reference Manual Supporting Fabric OS v6.3.0...
  • Page 2 Copyright © 2006-2009 Brocade Communications Systems, Inc. All Rights Reserved. Brocade, the B-wing symbol, BigIron, DCX, Fabric OS, FastIron, IronPoint, IronShield, IronView, IronWare, JetCore, NetIron, SecureIron, ServerIron, StorageX, and TurboIron are registered trademarks, and DCFM, Extraordinary Networks, and SAN Health are trademarks of Brocade Communications Systems, Inc., in the United States and/or in other countries.
  • Page 3 Brocade Communications Systems, Incorporated Corporate and Latin American Headquarters Asia-Pacific Headquarters Brocade Communications Systems, Inc. Brocade Communications Systems China HK, Ltd. 1745 Technology Drive No. 1 Guanghua Road San Jose, CA 95110 Chao Yang District Tel: 1-408-333-8000 Units 2718 and 2818 Fax: 1-408-333-8101 Beijing 100020, China Email: info@brocade.com...
  • Page 4 Document Title Publication Number Summary of Changes Publication Date Fabric OS Command Reference 53-1000240-01 September 2006 Fabric OS Command Reference 53-1000436-01 June 2007 Fabric OS Command Reference 53-1000599-01 Added 13 new commands, October 2007 Updated 23 commands with new options in support of v6.0. Removed 46 obsolete commands.
  • Page 5 Document Title Publication Number Summary of Changes Publication Date Fabric OS Command Reference 53-1001337-01 Added 18 new commands. July 2009 Modified 27 commands with new command operands to support new Fabric OS v6.3.0 features. Removed 6 deprecated command options. Removed 6 diagnostic commands that now require root access.
  • Page 6 Fabric OS Command Reference 53-1001337-01...

  • Page 7: Table Of Contents

    Contents About This Document In this chapter ......... . . xxi How this document is organized .
  • Page 8 authUtil ..........51 bannerSet .
  • Page 9 configDownload.........106 configList .
  • Page 10 fabricShow ..........217 fabStatsShow .
  • Page 11 fcrXlateConfig ......... .283 fddCfg.
  • Page 12 haEnable ..........357 haFailover .
  • Page 13 lfCfg ..........446 licenseAdd .
  • Page 14 pathInfo ..........519 pdShow .
  • Page 15 portCfgEport ......... . .603 portCfgEXPort .
  • Page 16 portLogShow ......... . .670 portLogShowPort.
  • Page 17 secPolicyDelete .........782 secPolicyDump .
  • Page 18 switchDisable ......... .852 switchEnable .
  • Page 19 zone ..........920 zoneAdd .
  • Page 20 Fabric OS Command Reference 53-1001337-01...

  • Page 21: About This Document

    About This Document In this chapter • How this document is organized ........xxi •...
  • Page 22 • Brocade 5100 • Brocade 5300 • Brocade 5410 • Brocade 5480 • Brocade 5424 • Brocade 5450 • Brocade 7500 • Brocade 7500E • Brocade 7600 • Brocade 7600 • Brocade 7800 Extension Switch • Brocade 8000 FCoE Switch •...

  • Page 23: What Is New In This Document

    What is new in this document The Fabric OS v6.3.0 Command Reference documents new commands and commands that were modified to support the current Fabric OS release and the new Brocade Extension Platform (Brocade 7800,and FX8-24). The following new commands have been added: •...
  • Page 24 • cfgUpload, cfgDownload - New -vf option to upload Virtual Fabric configuration parameters. (RAS) • configure - XISL use enabled by default (Logical Fabrics) • cryptoCfg New operands to support system cards, quorum size, and the Thales nCipher key vault. •...

  • Page 25: Document Conventions

    • switchShow New -portname operand. New -slot option to display blade information. Expanded output displays. • slotShow - Support for new hardware. • traceDump - New -c option to clear trace buffer content (RAS). • trunkShow - New -perf option to display trunk performance. Approximately an additional 120 help pages have been modified with miscellaneous updates and to correct documentation errors.

  • Page 26: Command Syntax Conventions

    bold text Identifies command names Identifies GUI elements Identifies keywords and operands Identifies text to enter at the GUI or CLI italic text Provides emphasis Identifies variables Identifies paths and Internet addresses Identifies document titles text Identifies CLI output code Identifies syntax examples For readability, command names in the narrative portions of this guide are presented in mixed letter case, for example, switchShow.

  • Page 27: Notice To The Reader

    CAUTION A Caution statement alerts you to situations that can be potentially hazardous to you or cause damage to hardware, firmware, software, or data. DANGER A Danger statement indicates conditions or situations that can be potentially lethal or extremely hazardous to you. Safety labels are also attached directly to products to warn of these conditions or situations.

  • Page 28: Additional Information

    Additional information This section lists additional Brocade and industry-specific documentation that you may find helpful. Brocade resources To get up-to-the-minute information, join MyBrocade at no cost to obtain a user ID and password http://my.brocade.com For practical discussions about SAN design, implementation, and maintenance, you can obtain Building SANs with Brocade Fabric Switches through: http://www.amazon.com White papers, online demos, and data sheets are available through the Brocade Web site at:...

  • Page 29: Document Feedback

    • Description of any troubleshooting steps already performed and the results • Serial console and Telnet session logs • syslog message logs 2. Switch Serial Number The switch serial number and corresponding bar code are provided on the serial number label, as shown here: *FT00X0054E9 FT00X0054E9...
  • Page 30 Fabric OS Command Reference 53-1001337-01...

  • Page 31: Using Fabric Os Commands

    Chapter Using Fabric OS Commands In this chapter • Understanding role-based access control ......1 •...

  • Page 32: Understanding Virtual Fabric Restrictions

    Understanding Virtual Fabric restrictions Appendix A, “Appendix A: Command availability” explains the Role-Based Access Control checks in place to validate command execution, and provides the RBAC permissions for the commands included in this manual. Additional command restrictions apply depending on whether Virtual Fabrics or Admin Domains are enabled in a fabric.

  • Page 33: Understanding Admin Domain Restrictions

    Understanding Admin Domain restrictions • Accounts with user or admin permissions can be granted chassis permissions. A user account with the chassis role can execute chassis-level commands at the user RBAC access level. An admin account with the chassis role can execute chassis-level commands at the admin RBAC access level.
  • Page 34 Using the command line interface • Access to the full range of Fabric OS features, given the license keys installed. • Assistance with configuration, monitoring, dynamic provisioning, and daily management of every aspect of storage area networks (SAN). • A deeper view of the tasks involved in managing a Brocade SAN. •...

  • Page 35: Fabric Os Commands

    Chapter Fabric OS Commands aaaConfig Manages RADIUS and LDAP configuration information. Synopsis aaaconfig aaaconfig --show aaaconfig --add | --change server -conf radius|ldap [-p port] [-d domain][-t timeout] [-s secret] [-a chap | pap | peap-mschapv2] aaaconfig --remove server -conf radius|ldap aaaconfig --move server -conf radius|ldap to_position aaaconfig --authspec aaa1[;aaa2 [-backup] aaaconfig --help...
  • Page 36 aaaConfig Notes Customers can use centralized RADIUS servers to manage AAA services for a switch, as defined in the RFC 2865 RADIUS specification. Fabric OS v6.1.0 and later is required to configure LDAP while in FIPS mode. Refer to the Fabric OS Administrator’s Guide for configuration procedures.
  • Page 37 aaaConfig -s secret Specifies a common secret between the switch and the RADIUS server. The secret must be between 8 and 40 characters long. This option is valid only with the -conf radius option, and it is optional. The default value is sharedsecret.
  • Page 38 aaaConfig “radius” When “radius” is specified, the first RADIUS server is contacted. If the RADIUS server is not reachable, the next RADIUS server is contacted. If the authentication fails, the authentication process does not check for the next server in the sequence. “ldap”...
  • Page 39 aaaConfig To replace the AAA service with backup option: switch:admin> aaaconfig --authspec “ldap;local” -backup See Also none Fabric OS Command Reference 53-1001337-01...
  • Page 40 Manages Admin Domain operations. Synopsis ad --activate ad_id ad --add ad_id [-d “dev_list”] [-s “switch_list”] ad --apply ad --clear [-f] ad --create ad_id [-d "dev_list"] [-s "switch_list"] ad --deactivate ad_id ad --delete ad_id ad --exec ad_id "command_list" ad --remove ad_id [-d "dev_list"] [-s "switch_list"] ad --rename ad_id new_ad_id ad --save ad --select ad_id...
  • Page 41 All switches, switch ports and devices in the fabric that are not specified in any other Admin Domain are treated as implicit members of AD0. Members added to AD0 are called explicit members. When a new Admin Domain is created, the members included in the new Admin Domain are automatically removed from the implicit member list of AD0.
  • Page 42 --create arguments Creates a new Admin Domain with optionally specified device or switch members. A newly created Admin Domain is in an activated state. It initially contains no zone database. The newly created Admin Domain remains in the transaction buffer until you issue ad --apply or ad --save. AD0 always exists.
  • Page 43 --select arg Selects an Admin Domain context. This command fails if the corresponding Admin Domain is not activated. This operation succeeds only if you have the specified Admin Domain. This command internally spawns off a new shell within the requested Admin Domain context. Type logout or exit to exit from the selected Admin Domain.
  • Page 44 number An Admin Domain can be specified by a number. Valid values include 0 through 255. AD0 and AD255 are always active. AD0 cannot be specified with --activate, --deactivate or --delete actions. AD255 can be specified only with --exec, --show and --validate actions. For all command iterations, with the exception of ad --create, the Admin Domain is specified either by a name or a number.
  • Page 45 -m mode Specifies the mode in which Admin Domain configuration information is displayed. This operand is valid only with --show and --validate. Valid values for mode include: Displays the Admin Domain configuration in the current transaction buffer. Displays the Admin Domain configuration stored in persistent memory (defined configuration).
  • Page 46 To deactivate Admin Domain 5: switch:admin> ad --deactivate 5 You are about to deactivate an AD. This operation will fail if an effective zone configuration exists in the AD Do you want to deactivate ‘5’ admin domain (yes, y, no, n): [no] y To delete AD13: switch:admin>...
  • Page 47 To display all ADs: switch:admin> ad --show Current AD: 255 : AD255 Transaction buffer configuration: --------------------------------- no configuration Defined configuration: ---------------------- AD: 1 : Active Device WWN members: 21:00:00:80:e5:12:8b:37; 21:00:00:80:e5:12:8b:55; Switch port members: 1,0; 1,1; 1,2; 1,3; 1,4; 1,5; 1,6; 1,7; 1,8; 1,9; 1,10; 1,11; 1,12;...
  • Page 48 To display the Admin Domain effective configuration information: switch:admin> ad --show -m 2 Current AD: 255 : AD255 Effective configuration: ------------------------ AD: 1 : Active Device WWN members: 21:00:00:80:e5:12:8b:37; 21:00:00:80:e5:12:8b:55; Switch port members: 1,0; 1,1; 1,2; 1,3; 1,4; 1,5; 1,6; 1,7; 1,8; 1,9; 1,10; 1,11; 1,12;...
  • Page 49 1,118; 1,120; 1,121; 2,52; 2,53; 2,54; 2,55; 1,221; AD Number: AD Name: roger_auto State: Inactive Device WWN members: 11:22:33:44:55:66:77:88*; AD Number: AD Name: AD5 State: Inactive Device WWN members: 10:00:00:06:2b:12:69:ff*; 10:00:00:06:2b:12:68:3f; Switch port members: 1,343; AD Number: AD Name: AD50 State: Active Device WWN members: 10:00:00:00:00:17:00:00;...
  • Page 50 To abort the Admin Domain management transaction buffer: switch:admin> ad --transabort You are about to abort the outstanding AD transaction. Do you want to abort the AD transaction (yes, y, no, n): [no] y To display the current Admin Domain transaction: switch:admin>...
  • Page 51 Enables Access Gateway (AG) and manages AG-specific operations. Synopsis ag --help ag --show ag --modeshow | --modeenable |--modedisable ag [--policyenable | --policydisable] policy ag --policyshow ag --mapshow [N_Port] ag [--mapset | --mapadd |--mapdel] N_Port [F_Port1; F_Port2;...] ag --pgshow [pgid] ag --pgcreate- pgid “N_Port1 [;N_Port2;...]” [-n pgname] [-m "lb; mfnm”] ag [--pgadd | --pgdel] pgid “N_Port1 [;...
  • Page 52 • Configure and display Port Group policy. • Create or remove a Port group. • Enable or disable auto port configuration (APC) modes for a Port group. • Get or set timeout value for fabric name monitoring. • Display Port Groups and Member N_Ports. •...

  • Page 53: Ag [--Policyenable | --Policydisable] Policy

    Displays the supported AG port policies and their status as either enabled or --policyshow disabled. AG supports three types of policies: • Port Grouping (pg) policy: This policy manages failover of an F_Port to a set of related N_Ports in a port group. •...

  • Page 54: Ag --Pgcreate- Pgid "N_Port1 [;N_Port2

    --mapset N_Port [F_Port1; F_Port2;...] Maps a set of F_Ports to a specified “primary” N_Port forcing all traffic from the F_Ports to be routed through this N_Port to the attached fabric. An F_Port cannot be mapped to more than one primary N_Port at any given time. F_Ports are enabled only if the N_Port is online.

  • Page 55: Ag [ --Pgsetmodes | Pgdelmodes ] Pgid "Mfnm;Lb

    --pgmapdel pgid "F_Port1[;F_Port2;...]" Removes one or more F_Ports that are part of the port group identified by the pgid from their mapping to a corresponding N_Port. The port list must be enclosed in double quotation marks. Ports must be separated by semicolons. Login balancing (LB) mode must be enabled on the port group for this command to succeed.
  • Page 56 --failovershow [N_Port] If an N_Port is specified (optional), the command displays the failover policy for this N_Port. Otherwise, the failover policy for all N_Ports is displayed. Failover is displayed as enabled (1) or disabled (0). --failbackenable [N_Port | -pg pgid] Enables the failback policy for a specified N_Port or for all N_Ports in the given port group.

  • Page 57: Ag --Persistentalpaenable 1 | 0 Mode

    --adsadd "F_Port [;F_Port2;...]" "WWN [;WWN2;...]" Adds the specified WWNs to the list of devices allowed to login to the specified F_Ports. Lists must be enclosed in double quotation marks. List members must be separated by semicolons. Replace the F_Port list with an asterisk (*) to add the specified WWNs to all the F_Ports' allow lists.
  • Page 58 Firmware Version : v6.0.0 N_Ports F_Ports : 10 Policies enabled : pg Persistent ALPA : Disabled Port Group information : PG_ID PG_Members PG_Name PG mode -------------------------------------------- SecondFabric -------------------------------------------- Fabric Information : Attached Fabric Name N_Ports --------------------------------------------- 10:00:00:05:1e:34:01:d7 0;1;2;3 --------------------------------------------- N_Port information : Port PortID Attached PWWN FO FB IP_Addr...
  • Page 59 switch:admin> ag --policyshow AG Policy Policy_Name State ------------------------------------------------------------------ Port Grouping Disabled Auto Port Configuration auto Enabled Advanced Device Security ads Enabled ------------------------------------------------------------------ 2. To enable a port grouping policy: switch:admin> ag --policyenable pg 3. To disable a port grouping policy switch:admin>...
  • Page 60 Explanation of fields in --mapshow output: Current F_Ports are the F_Ports that are currently online and mapped to a given N_Port either because they are mapped to that N_Port or as a result of N_Port failover. Configured F_Ports are the F_Ports that are explicitly mapped to this N_Port (saved in config).
  • Page 61 AG failover policy commands 1. To display failover policy settings for all N_Ports: switch:admin> ag --failovershow N_Port failover_bit --------------------------- 2. To set and display failover and failback policies on a single port: switch:admin> ag --failoverenable 1 Failover policy is enabled for port 1 switch:admin>...
  • Page 62 Port Group commands 1. To display Port Group information: switch:admin> ag --pgshow PG_ID PG_Name PG_Mode N_Ports F_Ports ----------------------------------------------- lb,mfnm 10;11 SecondFabric 4;5;6 ----------------------------------------------- 2. To create a port group “FirstFabric” that includes N_Ports 1 and 3 and has login balancing enabled: switch:admin>...
  • Page 63 6. To disable managed fabric name monitoring in port group 3: switch:admin> ag --pgdelmodes 3 "mfnm" Managed Fabric Name Monitoring mode has been disabled for Port Group 3 switch:admin> ag --pgshow PG_ID PG_Name PG_Mode N_Ports F_Ports ----------------------------------------------- lb,mfnm 4;5;6 FirstFabric 10;11 ----------------------------------------------- To get the current fabric name monitoring timeout value:...
  • Page 64 4. To add a two new device to the lists of allowed devices for ports 1 and 9: switch:admin> ag –-adsadd "3;9" "20:03:08:00:88:35:a0:12;21:00:00:e0:8b:88:01:8b" WWNs added successfully to Allow Lists of the F_Port[s] 5. To display the lists of allowed devices on the switch: switch:admin>...
  • Page 65 To remove a device entry from the database when the device is not present in the table: switch:admin> ag --deletepwwnfromdb 0:12:00:05:1e:85:92:00 20:12:00:05:1e:85:92:00 not found. Please check the device name To remove the PWWN to ALPA value for port 5 from the database and to verify the removal: switch:admin>...

  • Page 66: Agautomapbalance

    agAutoMapBalance agAutoMapBalance Controls automatic remapping of F_Ports in AG mode. Synopsis agautomapbalance --enable [-fport | -nport] [-pg Port_Group_Number | -all] agautomapbalance --disable [-fport | -nport] [-pg Port_Group_Number | -all] agautomapbalance --force agautomapbalance --show agautomapbalance --help Description Use this command to control the automatic rebalancing of F_Ports for login distribution in the event that an F_Port goes offline or an N_Port comes online.
  • Page 67 agAutoMapBalance -nport Enables automatic login redistribution in the event that one or more N_Ports come online. When automatic login redistribution is enabled, the F_Ports mapped to the current N_Ports are rebalanced among the N_Ports. Disables automatic login redistribution upon removal or addition of a --disable specified port type.
  • Page 68 agAutoMapBalance To disable automatic login redistribution on F_Port offline events: switch:admin> agautomapbalance --disable -fport To disable automatic login redistribution on F_Ports and N_Ports on port group 1 in the Access Gateway: switch:admin> agautomapbalance --enable -fport pg 1 To disable automatic login redistribution on F_Ports and N_Ports on all port groups in the Access Gateway: switch:admin>...

  • Page 69: Agshow

    agshow agshow Displays the Access Gateway information registered with the fabric. Synopsis agshow --name [ag_name] | [--local] Description This command displays the details of the F_Ports and the configured N_Ports in the Access Gateway attached to the fabric shows the following information. Name The name of the Access Gateway.
  • Page 70 agshow To display the locally registered Access Gateways: switch:admin> agshow --local Worldwide Name Ports Enet IP Addr Firmware Local/Remote Name --------------------------------------------------------------------------------- 10:00:00:05:1e:04:06:ae 10.32.173.64 v6.0.0 local L5D2_B14_4024_1 To display all Access Gateways attached to the fabric: switch:admin> agshow Worldwide Name Ports Enet IP Addr Firmware Local/Remote Name...

  • Page 71: Aliadd

    aliAdd aliAdd Adds a member to a zone alias. Synopsis aliadd “aliName”, “member[; member...]” Description Use this command to add one or more members to an existing zone alias. The alias member list cannot contain another zone alias. This command changes the defined configuration. For the change to become effective, enable the zone configuration with the cfgEnable command.

  • Page 72: Alicreate

    aliCreate aliCreate Creates a zone alias. Synopsis alicreate “aliName”, “member[; member...]” Description Use this command to create a new zone alias. The zone alias member list must have at least one member (empty lists are not allowed). The alias member list cannot contain another zone alias. Refer to the zoneCreate command for more information on name and member specifications.

  • Page 73: Alidelete

    aliDelete aliDelete Deletes a zone alias. Synopsis alidelete “aliName” Description Use this command to delete a zone alias. This command changes the defined configuration. For the change to become effective, enable the zone configuration with the cfgEnable command. For the change to be preserved across switch reboots, save the zone configuration to nonvolatile memory with the cfgSave command.

  • Page 74: Aliremove

    aliRemove aliRemove Removes a member from a zone alias. Synopsis aliremove “aliName”, “member[; member...]” Description Use this command to remove one or more members from an existing zone alias. If all members are removed, the zone alias is deleted. This command changes the defined configuration. For the change to become effective, enable the zone configuration with the cfgEnable command.

  • Page 75: Alishow

    aliShow aliShow Displays zone alias information. Synopsis alishow ["pattern"][, mode] Description Use this command to display zone configuration information. Use the pattern operand to display only matching zone alias names in the defined configuration. Notes The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 76: Aptpolicy

    aptPolicy aptPolicy Changes or displays the Advanced Performance Tuning (APT) policy. Synopsis aptpolicy [policy] aptpolicy -ap [ap_policy] Description Use this command to display and change the advanced performance tuning (APT) policies on a switch. Several internal performance tuning parameters can be modified with this command. The default parameters (AP shared Link Policy) are optimized for most SAN applications;...
  • Page 77 aptPolicy This policy optimizes the utilization of the available paths by allowing I/O traffic between different SID, DID, or OXID pairs to use different paths. All frames received on an ingress port with the same SID, DID, or OXID parameters take the same path unless there is a fabric event. Refer to dlsSet for the definition of a fabric event.

  • Page 78: Auditcfg

    auditCfg auditCfg Modifies and displays the audit log filter configuration. Synopsis auditcfg --class audit_class auditcfg --enable |--disable auditcfg --severity severity_level auditcfg --show Description Use this command to configure the audit logging and to display the audit log configuration. This command allows you to set filters by configuring certain classes, to add or remove any of the classes in the filter list, to set severity levels for audit messages, and to enable or disable audit filters.
  • Page 79 auditCfg switch:admin> auditcfg --show Audit filter is disabled. 1-ZONE 2-SECURITY 3-CONFIGURATION 4-FIRMWARE 5-FABRIC Severity level: INFO See Also auditDump Fabric OS Command Reference 53-1001337-01...

  • Page 80: Auditdump

    auditDump auditDump Displays or clears the audit log. Synopsis auditdump -s | -show auditdump -c | -clear Description Use this command to display or clear the audit log on the switch. The audit log persistently saves the most recent 256 log entries on the switch. On modular platforms, the entries are not shared across CPs.

  • Page 81: Authutil

    authUtil authUtil Displays and sets the authentication configuration. Synopsis authutil authutil --show authutil --set option value authutil --policy -sw option | -dev option authutil --authinit [slotnumber]/portnumber[, [slotnumber/]portnumber...] | allE Description Use this command to display and set local switch authentication parameters. Use --set to change authentication parameters such as protocol, Diffie-Hellman group (DH group), or hash type.
  • Page 82 authUtil and a higher level of security. When DH group is set to a specified value, only that DH group is enabled. Specifying “*” enables all DH groups 0, 1, 2, 3, and 4, in that order. This means that in authentication negotiation, the NULL DH group s given priority over all other groups.
  • Page 83 authUtil authinit [slotnumber/]portnumber [, [slotnumber]/portnumber...| allE Re-initiates authentication on selected ports after changing the DH-CHAP group, hash type, and shared secret between a pair of switches. This command does not work on Private, Loop, NPIV and FICON devices. The command can re-initiate authentication only if the device was previously authenticated.
  • Page 84 authUtil To set the Device policy to passive mode: switch:admin> authutil --policy -dev passive Warning: Activating the authentication policy requires DH-CHAP secrets on both switch and device. Otherwise, the F-port will be disabled during next F-port bring-up. (yes, y, no, n): [no] y ARE YOU SURE Device authentication is set to PASSIVE To set the device authentication policy to “on”...

  • Page 85: Bannerset

    bannerSet bannerSet Sets the banner on the local switch. Synopsis bannerset [banner] Description Use this command to set the banner on the local switch. The banner is a string of alphanumeric characters. It is displayed whenever you log in to a switch. The banner can be created using the banner operand or by entering the bannerSet command without an operand, making the session interactive.

  • Page 86: Bannershow

    bannerShow bannerShow Displays the banner text. Synopsis bannershow Description Use this command to display the contents of the banner. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS commands" and Appendix A, "Command Availability"...

  • Page 87: Bcastshow

    bcastShow bcastShow Displays broadcast routing information. Synopsis bcastshow Description Use this command to display the broadcast routing information for all ports in the switch. The broadcast routing information indicates all ports that are members of the broadcast distribution tree: ports that are able to send and receive broadcast frames. Normally, all F_Ports and FL_Ports are members of the broadcast distribution tree.

  • Page 88: Bladecfggemode

    bladeCfgGeMode bladeCfgGeMode Configures a 1 GbE port or a 10 GbE port on the Brocade FX8-24 blade. Synopsis bladecfggemode --set mode -slot slot_number bladecfggemode --show -slot slot_number | -all bladecfggemode --help Description Use this command to configure the GbE port mode on the Brocade FX8-24 extension blade or to display the configuration.
  • Page 89 bladeCfgGeMode To display the GbE port mode for all configured slots: switch:admin> bladecfggemode --show –all bladeCfgGeMode: Blade in slot 1 is configured in 1GigE Mode 1GigE mode: only the ge0-9 ports are enabled (xge0 and xge1 are disabled) bladeCfgGeMode: Blade in slot 4 is configured in 10GigE Mode 10GigE mode: only xge0 and xge1 are enabled (ge0-9 ports are disabled) See Also...

  • Page 90: Bladedisable

    bladeDisable bladeDisable Disables all user ports on a blade. Synopsis bladedisable slotnumber Description Use this command to disable all user ports on a blade. All Fibre Channel ports on the blade are taken offline. If the switch was connected to a fabric through this blade, the remaining switches reconfigure, and the switch reconfigures based on the other blade ports.
  • Page 91 bladeDisable ------ In_Sync Disabled ------ In_Sync Disabled ------ In_Sync Disabled ------ In_Sync Disabled ------ In_Sync Disabled ------ In_Sync Disabled ------ In_Sync Disabled ------ In_Sync Disabled ------ In_Sync Disabled ------ In_Sync Disabled ------ In_Sync Disabled ------ In_Sync Disabled ------ In_Sync Disabled ------ In_Sync Disabled...

  • Page 92: Bladeenable

    bladeEnable bladeEnable Enables all user ports on a blade. Synopsis bladeenable slotnumber Description Use this command to enable all user ports on a blade. All ports within the blade that did not fail the power-on self-test (POST) are enabled (except for persistently disabled ports). They may come online if connected to a device, or remain offline if disconnected.
  • Page 93 bladeEnable switch:admin> slotshow Slot Blade Type Status --------------------------------- SW BLADE ENABLED UNKNOWN VACANT UNKNOWN VACANT SW BLADE ENABLED CP BLADE ENABLED CP BLADE ENABLED SW BLADE ENABLED UNKNOWN VACANT UNKNOWN VACANT UNKNOWN VACANT See Also bladeDisable, chassisDisable, chassisEnable, portEnable, portDisable, switchDisable, switchShow Fabric OS Command Reference 53-1001337-01...

  • Page 94: Bladeswap

    bladeSwap bladeSwap Swaps the area numbers for matching port pairs of two blades. Synopsis bladeSwap -src source_slot -dest destination_slot Description Use this command to swap the area numbers for matching port pairs of two blades. All ports must qualify for swapping for this command to succeed. It validates that the blades in the indicated slots are of the same type, have the same number of ports, and that the port pairs are in the same partition.

  • Page 95: Bootluncfg

    bootLunCfg bootLunCfg Transparently configures the boot LUN for an HBA. Synopsis bootluncfg --add HBA_WWN PWWN LUN_ID bootluncfg --delete HBA_WWN [PWWN LUN_ID] bootluncfg --show bootluncfg --help Description Use this command to configure the boot LUN for an HBA. Existing fabric-based boot LUN discovery allows the host's boot LUN information to be stored in the fabric zone database by using a zone name that contains the PWWN of an HBA port.

  • Page 96: Bottleneckmon

    bottleneckMon bottleneckMon Monitors and reports latency bottleneck conditions on F_Ports. Synopsis bottleneckmon --enable [ -alert ] [-thresh threshold] [-time window] [-qtime quiet_time] [slot/]port_list [[slot ]port_list] ... bottleneckmon --disable [slot ]/port_list [[slot ]port_list] ... bottleneckmon --show [-interval interval ] [-span span_size] [slot/]port bottleneckmon --status bottleneckmon --help Description...
  • Page 97 bottleneckMon Quiet Time (s) The minimum number of seconds between consecutive alerts. The --status option displays a listing of ports for which bottleneck detection is enabled. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 98 bottleneckMon -qtime quiet_time Specifies the minimum number of seconds between consecutive alerts. The default is 300 seconds. The maximum is 86400 seconds (24 hours). Disables bottleneck detection on one or more specified ports. If Virtual --disable Fabrics are enabled on the switch, the ports do not need to belong to the logical switch in whose context the command is issued.
  • Page 99 bottleneckMon To display bottleneck statistics on a specified port: switch:admin> bottleneckmon --show -interval 5 -span 30 2/24 ============================================================= Mon Jun 15 18:54:35 UTC 2009 ============================================================= Percentage of From affected secs ============================================================= Jun 15 18:54:30 Jun 15 18:54:35 80.00% Jun 15 18:54:25 Jun 15 18:54:30 40.00% Jun 15 18:54:20...

  • Page 100: Bpportloopbacktest

    bpPortLoopbackTest bpPortLoopbackTest Sends and receives data from the same BP port to perform a functional test of the port. Synopsis bpportloopbacktest [--slot slotnumber][ -nframes count] -pklen count] -lb_mode mode] [-spd_mode mode ] -bpports itemlist ] Description Use this command to verify the functional operation of the switch. The test sends frames from a specified blade processor (BP) port transmitter and loops the frames back into the same BP port’s receiver.
  • Page 101 bpPortLoopbackTest This command is currently supported only on the Brocade Encryption platform at a default speed of 4 Gbps and a loopback mode of 7. Use portLoopBackTest on all other platforms. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 102 bpPortLoopbackTest Info: Vader port 5 recovering Rx Fifo Ob1 portloopbacktest on ports 80-90 PASSED Test Complete: bpportloopbacktest Pass 1 of 1 Duration 0 hr, 0 min & 24 sec (0:0:24:599). Cleaning up after test..passed. Diagnostics When it detects failures, the test may report one or more of the following error messages. If errors persist, contact Technical Support.

  • Page 103: Bpturboramtest

    bpTurboRamTest bpTurboRamTest bpTurboRamTest - MBIST test for AP Blade BP ASICs. Synopsis bpturboramtest [--slot slotnumber][ -passcnt count ] [ -bpports itemlist ] Description Use this command to verify the on-chip static random access memory (SRAM) located in the Blade Processor (BP) ASICs of the Application Processor (AP) blade. The command makes use of the memory built-in self-test (MBIST) circuitry.
  • Page 104 bpTurboRamTest Example To run the test in default mode: switch:admin> bpturboramtest Running bpturboramtest ....Board Init Running Vader bist test Vader bist test PASSED Running Ob1 bist test Ob1 bist test PASSED BIST test PASSED on all ASIC(s) Test Complete: bpturboramtest Pass 1 of 1 Duration 0 hr, 1 min &...

  • Page 105: Cfgactvshow

    cfgActvShow cfgActvShow Displays effective zone configuration information. Synopsis cfgactvshow Description Use this command to display the effective zone configuration information. The current configuration is a single zone configuration that is currently in effect. The devices that an initiator sees are based on this configuration. The effective configuration is built when a specified zone configuration is enabled.

  • Page 106: Cfgadd

    cfgAdd cfgAdd Adds a member to a zone configuration. Synopsis cfgadd "cfgName", "member[ ;member...]" Description Use this command to add one or more members to an existing zone configuration. This command changes the Defined Configuration. For the change to take effect, enable the configuration with the cfgEnable command.

  • Page 107: Cfgclear

    cfgClear cfgClear Clears all zone configurations. Synopsis cfgclear Description Use this command to clear all zone information in the transaction buffer. All defined zone objects in the transaction buffer are deleted. If an attempt is made to commit the empty transaction buffer while a zone configuration is enabled, you are warned to first disable the enabled zone configuration or to provide a valid configuration with the same name.

  • Page 108: Cfgcreate

    cfgCreate cfgCreate Creates a zone configuration. Synopsis cfgcreate "cfgName", "member[ ;member...]" Description Use this command to create a new zone configuration. This command changes the Defined Configuration (see cfgShow). For the change to become effective, enable the configuration with the cfgEnable command. For the change to be preserved across switch reboots, save the configuration to nonvolatile memory with the cfgSave command.

  • Page 109: Cfgdelete

    cfgDelete cfgDelete Deletes a zone configuration. Synopsis cfgdelete "cfgName" Description Use this command to delete a zone configuration. This command changes the Defined Configuration (see cfgShow). For the change to become effective, enable the configuration with the cfgEnable command. For the change to be preserved across switch reboots, save the configuration to nonvolatile memory with the cfgSave command.

  • Page 110: Cfgdisable

    cfgDisable cfgDisable Disables a zone configuration. Synopsis cfgdisable Description Use this command to disable the current zone configuration. The fabric returns to non-zoning mode, in which all devices see each other. This command ends and commits the current zoning transaction buffer to both volatile and nonvolatile memory.

  • Page 111: Cfgenable

    cfgEnable cfgEnable Enables a zone configuration. Synopsis cfgenable cfgName Description Use this command to enable a zone configuration. The command builds the specified zone configuration . It checks for undefined zone names, zone alias names, or other inconsistencies, by expanding zone aliases, removing duplicate entries, and then installing the effective configuration. If the build fails, the previous state is preserved (zoning remains disabled, or the previous effective configuration remains in effect).

  • Page 112: Cfgmcdtmode

    cfgMcdtmode cfgMcdtmode Configures zoning features in McDATA Fabric mode. Synopsis cfgMcdtMode [--enable | --disable | --help] [safezoning | defaultzoning] Description Use this command to enable or disable either the McDATA safe zoning feature or the McDATA default zoning feature. Enabling or disabling safezoning or default zoning on one switch in the fabric enables or disables the specific feature fabric-wide, meaning that the feature is disabled or enabled on all switches in the fabric.

  • Page 113: Cfgremove

    cfgRemove cfgRemove Removes a member from a zone configuration. Synopsis cfgremove “cfgName”, “member[; member...]” Description Use this command to remove one or more members from an existing zone configuration. If all members are removed, the zone configuration is deleted. This command changes the Defined Configuration (see cfgShow). For the change to become effective, enable the configuration with the cfgEnable command.

  • Page 114: Cfgsave

    cfgSave cfgSave Saves zone configuration to nonvolatile memory. Synopsis cfgsave Description Use this command to save the current zone configuration. This command writes the defined configuration and the name of the effective configuration to nonvolatile memory in all switches in the fabric.

  • Page 115: Cfgsaveactivetodefined

    cfgSaveActiveToDefined cfgSaveActiveToDefined Saves the active (effective) zoning configuration to the defined configuration in McDATA Fabric mode. Synopsis cfgSaveActiveToDefined Description Use this command in McDATA Fabric mode to move the effective zoning configuration to the defined configuration database. If the Defined Database contains a configuration with the same name, it is replaced.

  • Page 116: Cfgshow

    cfgShow cfgShow Displays zone configuration information. Synopsis cfgshow ["pattern"] [, mode] Description Use this command to display zone configuration information. If no operand is specified, all zone configuration information (both defined and effective) displays. If the local switch has an outstanding transaction, this command displays the most recently edited zone configuration that has not yet been saved.
  • Page 117 cfgShow Examples To display all zone configurations that start with "Test": switch:admin> cfgshow "Test*" cfg: Test1 Blue_zone cfg: Test_cfg Red_zone; Blue_zone To display all zone configuration information: switch:admin> cfgshow Defined configuration: cfg: USA1 Blue_zone cfg: USA_cfg Red_zone; Blue_zone zone: Blue_zone 1,1;...

  • Page 118: Cfgsize

    cfgSize cfgSize Displays zone and Admin Domain database size details. Synopsis cfgsize [integer] Description Use this command to display the size details of the zone database and the Admin Domain database. When executed in non-AD255 context, the size details include the Zone DB maximum size, the committed size, and the transaction size.
  • Page 119 cfgSize To display Admin Domain and zone database information in AD255 context: switch:admin> cfgsize Maximum AD and Zone DB size - 1045274 bytes Total Committed AD and Zone DB size - 3390 bytes AD and Zone DB uncommitted space available - 1041884 bytes Total AD and Zone Transaction buffer size 0 bytes AD Database Size:...

  • Page 120: Cfgtransabort

    cfgTransAbort cfgTransAbort Aborts the current zoning transaction. Synopsis cfgtransabort [token] Description Use this command to abort the current zoning transaction without committing it. All changes made since the transaction was started are removed and the zone configuration database is restored to the state before the transaction was started.

  • Page 121: Cfgtransshow

    cfgTransShow cfgTransShow Displays information about the current zoning transaction. Synopsis cfgtransshow Description Use this command to display the ID of the current zoning transaction. In addition, the command provides information on whether or not the transaction can be aborted. The transaction cannot be aborted if it is an internal zoning transaction.

  • Page 122: Chassisbeacon

    chassisBeacon chassisBeacon Sets chassis beaconing mode. Synopsis chassisbeacon [mode] Description Use this command to enable or disable beaconing on a chassis. Chassis beaconing can be used to locate a failing port. When beaconing mode is turned on, the port LEDs flash green at various rates across the chassis. The beaconing continues until you turn it off.

  • Page 123: Chassisconfig

    chassisConfig chassisConfig Displays or sets the configuration of the Brocade 48000. Synopsis chassisconfig [-f][option] Description This command is retained for legacy reasons only. It has nothing to do with Virtual Fabrics and chassis configuration related to the Virtual Fabric feature. The chassisConfig command is supported ONLY on the Brocade 48000 and ONLY option 5 is supported.

  • Page 124: Chassisdistribute

    chassisDistribute chassisDistribute Distributes IP filter policies. Synopsis chassisdistribute -db policy_db -fid FID | -domain domain_list [-force] Description Use this command to manually distribute IP Filter policies. The behavior of this command depends on whether Virtual Fabrics are enabled or disabled. •...
  • Page 125 chassisDistribute -fid FID Specifies the logical switch from which the distribution should originate. The logical switch is identified by its fabric ID (FID). When a FID is specified, the database is distributed to all chassis that are connected to the logical switch and are configured to accept the distribution.

  • Page 126: Chassisenable

    chassisEnable chassisEnable Enables all user ports in a chassis. Synopsis chassisenable Description Use this command to enable a Virtual Fabric-aware chassis. All Fibre Channel ports that passed the power-on self test (POST) are enabled. They may come online if connected to a device, or remain offline if disconnected.

  • Page 127: Chassisdisable

    chassisDisable chassisDisable Disables all user ports in a chassis. Synopsis chassisdisable [-force] Description Use this command to disable a Virtual Fabric-aware chassis. All Fibre Channel ports are taken offline. This command prompts for confirmation unless the -force option is used. If the chassis is partitioned into logical switches that are part of logical fabrics, the remaining switches in these fabrics reconfigure.

  • Page 128: Chassisname

    chassisName chassisName Displays or sets the chassis name. Synopsis chassisname [name] Description Use this command to display or change the name associated with the chassis. Enter this command without parameters to display the current chassis name. Use this command with the name operand to assign a new chassis name. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 129: Chassisshow

    chassisShow chassisShow Displays all field replaceable units (FRUs). Synopsis chassisshow Description Use this command to inventory and display the FRU header content for each object in the chassis and chassis backplane version. Refer to the Table 1 for more information about the lines and their meaning. TABLE 1 Command output descriptions Line...
  • Page 130 chassisShow Examples To display all FRUs for a switch: switch:user> chassisshow Chassis Backplane Revision: 1C SW BLADE Slot: 3 Header Version: Power Consume Factor: -180 Factory Part Num: 60-0001532-03 Factory Serial Num: 1013456800 Manufacture: Day: 12 Month: Year: 2001 Update: Day: 15 Month: Year: 2001...

  • Page 131: Clihistory

    cliHistory cliHistory Name Displays switch command history. Synopsis clihistory Description This command saves the following information whenever a command is executed on the switch: • Timestamp • Username • IP address of the Telnet session • Options • Arguments This command displays the local CLI command history. The information is saved as part of supportSave as the CH file.

  • Page 132: Cmsh

    cmsh cmsh Opens the CEE command shell. Description Use this command to open a shell for managing 10 GbE interfaces and L2/L3 protocol services. The CEE management shell provides a hierarchical CLI interface. Refer to the Fabric OS Converged Enhanced Ethernet Command Reference and the Fabric OS Converged Enhanced Ethernet Administrator’s Guide for information on using the CEE commands and configuration procedures.
  • Page 133 cmsh To create an FCoE VLAN: switch:admin> cmsh switch:admin>en switch:admin>#conf t switch:admin>(config)#protocol lldp switch:admin>(conf-lldp)# advertise dcbx-fcoe-app-tlv switch:admin>(conf-lldp)# advertise dcbx-fcoe-logical-link-tlv switch:admin>(conf-lldp)#exit switch:admin>(config)#exit switch:admin>(config)# vlan classifier rule 1 proto fcoe encap ethv2 switch:admin>(config)# vlan classifier rule 2 proto fip encap ethv2 switch:admin>(config)# vlan classifier group 1 add rule 1 switch:admin>(config)# vlan classifier group 1 add rule 2 switch:admin>(config)#interface vlan 5 switch:admin>(conf-if-vl-5 )#fcf forward...

  • Page 134: Configdefault

    configDefault configDefault Resets the non-persistent configuration data to factory defaults. Synopsis configdefault [-fid FID | -all] Description Use this command to reset the non-persistent configuration settings to their factory defaults. Beginning with Fabric OS v6.2.0, configuration data is grouped into chassis information and switch information.
  • Page 135 configDefault Note that configDefault does not completely remove all FCIP tunnels and GbE IP address information. This may be an issue when attempting to use the same information to create new tunnels or modify the existing ones. When issuing configDefault on the Brocade 7500 or on the FR4-18i blade, it persistently disables the ports.

  • Page 136: Configdownload

    configDownload configDownload Downloads configuration data to the system. Synopsis configdownload configdownload [- all ] [-p ftp | -ftp ] [”host”,”user”,”path” [,”passwd”]] configdownload [- all ] [-p scp| -scp ] [”host”,”user”,”path”] configdownload [- all ] [-local | -USB | -U [”file”]] configdownload [ -fid -FID [-sfid FID ] | -chassis |- all ] [-p ftp | -ftp ] [”host”,”user”,”path”...
  • Page 137 configDownload Download the entire configuration including the data for all logical switches and for the chassis (-all). The interactive version of the command (no operands) prompts for input on only the parameters the user is allowed to execute. • In a non-Virtual Fabric environment, this command by default downloads the switch configuration.
  • Page 138 configDownload Security parameters and the switch’s identity cannot be changed by configDownload. Parameters such as the switch name and IP address are ignored; they are lines in the configuration file that begin with “boot”. Security parameters and version stamp are ignored; they are the lines in the configuration file that begin with “sec”.
  • Page 139 configDownload -sfid FID Specifies an alternate source switch configuration to be downloaded to the target logical switch specified by -fid. When no source FID is specified, the configuration file corresponding to the logical switch -fid FID is downloaded. When a source FID is specified, the configuration corresponding to the logical switch specified by the source FID is downloaded instead.
  • Page 140 configDownload configDownload operation may take several minutes to complete for large files. Do you want to continue [y/n]: y Password: Activating configDownload: Switch is disabled configDownload complete: All config parameters are downloaded To download the switch configuration data to the current logical switch from an external FTP server (no chassis permissions): switch:admin>...

  • Page 141: Configlist

    configList configList Lists uploaded configuration files. Synopsis configlist -local|-USB|-U Description This command displays a list of names, sizes, and creation dates of configuration files saved on the local chassis or on an attached USB device. These files are created when the configUpload command is executed with the -local or the -USB option.

  • Page 142: Configremove

    configRemove configRemove Deletes a saved configuration file. Synopsis configremove -local|-USB|-U [file] Description This command deletes a configuration file that was previously saved to the local chassis or to an attached USB device by using the configUpload command. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 143: Configshow

    configShow configShow Displays system configuration settings. Synopsis configshow -pattern “pattern” configshow [-all | -fid FID| -chassis] [-local|-USB|-U] [file] [-pattern "pattern"] Description Use this command to display system configuration settings. Some but not all of these parameters are set by the configure and configureChassis commands. Beginning with Fabric OS v6.2.0, configuration data is grouped into chassis information and switch information.
  • Page 144 configShow -USB | -U [file] Displays the content of a configuration file that was previously created by configUpload and stored on an attached USB device. The output can be optionally filtered by -pattern “pattern”. If file is omitted, the command prompts for a file name.
  • Page 145 configShow fips.selftests:0 ipfilter.0.name:default_ipv4 ipfilter.0.numofrules:12 ipfilter.0.rule.1:0,0x23,0,0,6,22 ipfilter.0.rule.10:0,0x23,0,0,17,123 ipfilter.0.rule.11:0,0x63,0,0,6,600,1023 ipfilter.0.rule.12:0,0x63,0,0,17,600,1023 ipfilter.0.rule.2:0,0x23,0,0,6,23 ipfilter.0.rule.3:0,0x23,0,0,6,897 ipfilter.0.rule.4:0,0x23,0,0,6,898 ipfilter.0.rule.5:0,0x23,0,0,6,111 ipfilter.0.rule.6:0,0x23,0,0,6,80 ipfilter.0.rule.7:0,0x23,0,0,6,443 ipfilter.0.rule.8:0,0x23,0,0,17,161 ipfilter.0.rule.9:0,0x23,0,0,17,111 ipfilter.0.state:3 ipfilter.0.type:0 ipfilter.1.name:default_ipv6 ipfilter.1.numofrules:12 ipfilter.1.rule.1:0,0x23,0,0,6,22 ipfilter.1.rule.10:0,0x23,0,0,17,123 ipfilter.1.rule.11:0,0x63,0,0,6,600,1023 ipfilter.1.rule.12:0,0x63,0,0,17,600,1023 ipfilter.1.rule.2:0,0x23,0,0,6,23 ipfilter.1.rule.3:0,0x23,0,0,6,897 ipfilter.1.rule.4:0,0x23,0,0,6,898 ipfilter.1.rule.5:0,0x23,0,0,6,111 ipfilter.1.rule.6:0,0x23,0,0,6,80 ipfilter.1.rule.7:0,0x23,0,0,6,443 ipfilter.1.rule.8:0,0x23,0,0,17,161 ipfilter.1.rule.9:0,0x23,0,0,17,111 ipfilter.1.state:3 ipfilter.1.type:1 [output truncated] To filter the content to display only the password configuration: switch :admin>...
  • Page 146 configShow FOS version = v6.2.0.0 Number of LS = 3 [Switch Configuration Begin : 0] SwitchName = Spirit_66 Fabric ID = 20 [Boot Parameters] boot.name:Spirit_66 boot.ipa:10.32.228.66 boot.licid:10:00:00:05:1e:41:5c:c1 boot.mac:10:00:00:05:1e:41:5c:c1 boot.device:eth0 boot.gateway.ipa:10.32.224.1 [Configuration] acl.clear:0 ag.port.nfportfailback:0x0 ag.port.nfportfailover:0x0 ag.port.nfporttopo.0:0x0 ag.port.nfporttopo.1:0x0 ag.port.nfporttopo.10:0x0 ag.port.nfporttopo.11:0x0 ag.port.nfporttopo.12:0x0 ag.port.nfporttopo.13:0x0 ag.port.nfporttopo.14:0x0 ag.port.nfporttopo.15:0x0 ag.port.nfporttopo.16:0x0...

  • Page 147: Configupload

    configUpload configUpload Uploads system configuration data to a file. Synopsis configupload configupload [-all] [-p ftp | -ftp] [”host”,”user”,”path”,[”passwd”]] configupload [-all] [-p scp| -scp] [”host”,”user”,”path”] configupload [-all] [-force] [-local | USB |-U] [“file”] configupload [-fid FID | -chassis | -all ] [-p ftp | -ftp] [”host”,”user”,”path”,[”passwd”]] configupload [-fid FID | -chassis | -all ] [-p scp| -scp] [”host”,”user”,”path”] configupload [-fid FID | -chassis | -all ] [-force] [-local | USB |-U] [“file”] configupload [-vf] [-p ftp | -ftp] [”host”,”user”,”path”,[”passwd”]]...
  • Page 148 configUpload You can use FTP or SCP to upload configuration files to an external host, or you can save the configuration in a predetermined directory on the local chassis or on an attached USB device. If the specified file already exists, this command prompts you to overwrite the file. Specify -force to overwrite the file without confirmation.
  • Page 149 configUpload “passwd” Specifies the account password when you use the FTP protocol. Quotation marks are optional. -local Uploads a specified configuration file to a predetermined directory on the local chassis. This option requires a file name. -USB | -U Uploads a specified configuration file to a predetermined directory on an attached USB device.
  • Page 150 configUpload To upload the system configuration file for a logical switch with FID 8 to an attached USB device: switch:admin> configupload -fid 8 -ftp -USB config.txt To upload the Virtual Fabric configuration of the current platform to an external FTP server: switch:admin>...

  • Page 151: Configure

    configure configure Changes switch configuration settings. Synopsis configure Description Use this command to change switch configuration settings. Beginning with Fabric OS v6.2.0, configuration data is grouped into chassis information and switch information. Each configuration type is managed separately. For information on file format and specific parameters contained in each section, refer to the configUpload help page.
  • Page 152 configure The configure command runs in interactive mode and presents you with a series of hierarchical menus. Each top-level menu and its associated submenus consist of a text prompt, a selection of valid values, and a default value (in brackets). The following keys control the execution of the command: Return When entered at a prompt with no preceding input, the command accepts the...
  • Page 153 configure Allow XISL Use An extended interswitch link (XISL) is an interswitch link (ISL) that connects the logical switch to the base switch and carries traffic for multiple logical fabrics. This feature is supported only on Virtual Fabric-aware platforms under the following conditions: Virtual Fabrics must be enabled on the switch, and the switch cannot be a base switch.
  • Page 154 configure WAN_TOV Wide area network time out value specified in milliseconds. This timer is the maximum frame time out value for a WAN, if any, interconnecting the Fibre Channel islands. MAX_HOPS Maximum hops is an integer that denotes the upper limit on the number of hops a frame might have to traverse to reach any destination port from any source port across the fabric.
  • Page 155 configure BB Credit The buffer-to-buffer (BB) credit represents the number of buffers available to attached devices for frame receipt. The range of allowed values varies depending on other system settings (see Unicast-only Operation). Insistent Domain ID Mode When this mode is set, the switch attempts to acquire from the fabric the domain number programmed in its "Switch Fabric Settings."...
  • Page 156 configure Note that the maximum logins per port parameter can be configured only for external ports. Zoning Operation Parameters Table 5 lists the configurable zoning operation parameters. TABLE 5 Zoning operation parameters Field Type Default Range Disable NodeName Zone Boolean Checking Disable NodeName Zone Checking Specify 1 to disable using node WWN when specifying nodes in the zone...
  • Page 157 configure Descriptions of the Arbitrated Loop Parameter fields are as follows: Send FAN frames? Specifies that fabric address notification (FAN) frames be sent to public loop devices to notify them of their node ID and address. When set to 1, frames are sent;...
  • Page 158 configure Examples To enable XISL use on a logical switch with FID 20: switch:admin> setcontext 20 switch:admin>switchdisable switch:admin>configure Configure... Change fabric parameters? Y Change domain[30]: Allow XISL Use [no]: yes Enable a 256 Area Limit[0]: R_A_TOV: (4000..120000) [10000] E_D_TOV: (1000.. 5000) [2000] WAN_TOV: (0..30000) [0] MAX_HOPS: (7..19) [7] Data field size: (256..2112) [2112]...

  • Page 159: Configurechassis

    configureChassis configureChassis Changes chassis-level system configuration settings. Synopsis configurechassis Description Use this command to modify chassis-level system configuration settings. Beginning with Fabric OS v6.2.0, configuration data is grouped into chassis information and switch information. Each configuration type is managed separately. Use the configure command to modify switch configuration parameters.
  • Page 160 configureChassis Custom Attributes Table 11 lists custom attributes that may be modified. TABLE 11 Configurable custom attributes Application Attribute Type Default Range Custom Config Index (0 to ignore): Number 0-10000 config Index OEM custom configuration. This attribute is for internal use only. System Settings The following system-related parameters are configurable on a Virtual Fabric-aware switch.

  • Page 161: Cryptocfg

    cryptoCfg cryptoCfg Name Performs encryption configuration and management functions. Synopsis cryptocfg --help -nodecfg cryptocfg --help -groupcfg cryptocfg --help -hacluster cryptocfg --help -devicecfg cryptocfg --help -transcfg Description Use the cryptoCfg command to configure and manage the Brocade Encryption Switch and the FS8-18 encryption blade.
  • Page 162 cryptoCfg Function 1. Node configuration Synopsis cryptocfg --help -nodecfg cryptocfg --initnode cryptocfg --initEE [slot_number] cryptocfg --regEE [slot_number] cryptocfg --enableEE [slot_number] cryptocfg --disableEE [slot_number] cryptocfg --export -scp -dhchallenge vault_IP_address | -currentMK | -KACcert |-KACcsr| -CPcert] host_IP host_username host_file_path cryptocfg --export -usb -dhchallenge vault_IP_address | -currentMK | -KACcert | -KACcsr |-CPcert dest_filename cryptocfg --import -scp local_name host_IP host_username host_file_path cryptocfg --import -usb dest_filename source_filename...
  • Page 163 cryptoCfg • EE Slot: Encryption engine slot number. • SP state: Security processor state. For a complete listing of SP states, refer to the Encryption Administrator’s Guide, Appendix A. • Current master key ID (or primary link key ID) - Key ID or zero if not configured. •...
  • Page 164 cryptoCfg Initializes the encryption engine (EE). This command generates critical --initEE security parameters (CSPs) and certificates in the CryptoModule’s security processor (SP). The CP and the SP perform a certificate exchange to register respective authorization data. Initialization must be performed on every encryption engine before configuration options may be set and encryption may be enabled.
  • Page 165 cryptoCfg host_username Specifies the user name for the host. Depending on your host configuration, the command may prompt for a password. host_file_path Specifies the fully qualified path to the file on the host to which the file is to be exported. This includes the file name. Make sure to name your certificates so you can track the file type and the originator switch, for example, name_cpcert.pem.
  • Page 166 cryptoCfg host_file_path Specifies the fully qualified path of the file to be imported. The path must include the file name. -usb Imports a file from a mounted USB storage device. This command is valid only on nodes that have an attached USB device. When -usb is specified, the following operands are required: dest_filename Specifies the name to be assigned to the imported file.
  • Page 167 cryptoCfg vault_IP_addr Specifies the IP address of the NetApp LKM appliance. This operand is required. Accepts the LKM Diffie-Hellman response from the specified NetApp LKM --dhresponse appliance and generates the link key on the node on which this command is issued.
  • Page 168 cryptoCfg Displays node configuration information. This command requires one of the --show following mutually exclusive operands: -localEE Displays encryption engine information local to the node. -file -all Displays all imported certificates. The -all parameter is required with the --show -file command. Function 2.
  • Page 169 cryptoCfg With the exception of the --help and --show commands, all group configuration functions must be performed from the designated group leader. The encryption switch or blade on which you create the encryption group becomes the designated group leader. The group leader distributes all relevant configuration data to the member nodes in the encryption group.
  • Page 170 cryptoCfg Group leader node name: the node WWN Encryption group state: CONVERGED = Encryption group formed successfully. CONVERGING = Encryption group partially formed, member nodes may still be in discovery process. DEGRADED = Nodes lost connection with the group. • For each node, the display includes the following: Node Name: the node WWN State: DISCOVERED = The node is part of the encryption group.
  • Page 171 cryptoCfg --create -encgroup Creates an encryption group. The node on which this command is invoked becomes the group leader. You must specify a name when creating an encryption group. encryption_group_name Specifies the name of the encryption group to be created. The name can be up to 15 characters long and include alphanumeric characters and underscores.
  • Page 172 cryptoCfg cert_label Specifies the key vault certificate label. This operand is required when removing the registration for a key vault. --reg -KACcert Registers the signed node certificate. After being exported and signed by the external signing authority, the signed node certificate must be imported back into the node and registered for a successful two-way certificate exchange with the key vault.
  • Page 173 cryptoCfg value Specifies the heartbeat time-out in seconds. The default value is 2 seconds. Valid values are integers in the range between 1 and 30 seconds. --set -quorumsize Sets the quorum size used to authenticate functions that require a quorum of authentication cards.
  • Page 174 cryptoCfg --leave_encryption_group Clears the node's states pertaining to the node's membership in the encryption group. This command is invoked from the member node that is to be ejected from the encryption group.The node must be online (in DISCOVERED state) for this command to succeed. To remove a node that is not online (in DISCOVERING State), use --dereg -membernode.
  • Page 175 cryptoCfg -srcfile filename Specifies the file name when restoring the master key from a file in the predetermined directory on the switch. Use this operand when the master key was backed up to a file rather than to a key vault. The -keyID and the -srcfile operands are mutually exclusive.
  • Page 176 cryptoCfg Description Use these cryptoCfg commands to configure and manage High Availability (HA) clusters. An HA cluster consists of two encryption engines configured to host the CryptoTargets and to provide the active/standby failover and failback capabilities in a pair-wise relationship in a single fabric.
  • Page 177 cryptoCfg node_WWN Specifies the WWN of the switch or chassis to which the encryption engine belongs. This operand is optional; if omitted, only the HA cluster name is defined. You may add EEs separately with the --add -haclustermember command. slot_number Specifies the encryption engine slot number on bladed systems.
  • Page 178 cryptoCfg HA_cluster_name Specifies the HA cluster member to be replaced. The HA cluster name must be specified when this operand is used. This operand is optional. It is not needed if the encryption engine to be replaced is not part of an HA cluster. current_node_WWN [slot_number] Specifies the WWN of the encryption engine to be replaced.
  • Page 179 cryptoCfg cryptocfg --modify -LUN crypto_target_container_name LUN_Num initiator_PWWN [-encryption_format native | DF_compatible] [-encrypt | -cleartext] [-enable_encexistingdata | -disable_encexistingdata] [-enablerekey time_period | -disable_rekey] cryptocfg --remove -LUN crypto_target_container_name LUN_Num initiator_PWWN cryptocfg --enable -LUN crypto_target_container_name LUN_Num initiator_PWWN cryptocfg --create -tapepool -label pool_label | -num pool_num [-encryption_format native | DF_compatible] [-encrypt | -cleartext] [-key_lifespan time_in_days | none]...
  • Page 180 cryptoCfg The CryptoTarget container (CTC) and associated Crypto LUN configuration is always configured from the group leader node, and the configuration is subsequently propagated to all members in the encryption group. CTC configuration uses a transaction model. Configuration changes must be committed before they take effect.
  • Page 181 cryptoCfg Encryption mode: encrypt or cleartext Encryption format: (brocade) native or DF-compatible Tape policy type: pool-based, LUN-based Encrypt existing data: disabled or enabled Rekey: disabled or enabled Key life: the key lifespan (in days) Volume/Pool label: the label for the tape volume or tape pool LUN state: Encrypted, Cleartext, or Disabled (Data state is cleartext but metadata exists on the LUN, or vice versa.) Encryption algorithm: AES256-ECB (DF_compatible), AES256-GCM (native) or None...
  • Page 182 cryptoCfg • Rekey: enabled or disabled • LUN state: refer to the appendix in the Fabric OS Encryption Administrator’s Guide • Encryption algorithm: AES256 -XTS (disk), AES256-CCM (tape), or none • Key ID state: Re-key • Key ID: numeric identifier •...
  • Page 183 cryptoCfg VI PID: virtual initiator PID • Number of LUNs: numeric value • For each LUN: LUN number: numeric value LUN type: disk, tape drive, tape medium changer, tape attached medium changer, offline/unknown, or unsupported/other LUN serial number: alpha-numeric ID Encryption mode: encrypt or cleartext Encryption format: native or DF-compatible Encrypt existing data: enabled or disabled...
  • Page 184 cryptoCfg Rekey: disabled or enabled Key ID state: Read, Write, or Key ID not applicable Key life (in days): numeric value Volume/pool label: user-defined label Rekey status: numeric value If re-key or tape sessions are in progress, the command shows: •...
  • Page 185 cryptoCfg Host (initiator) PID: hoist PID VI: virtual initiator port WWN and node WWN VI PID: virtual initiator PID LUN Number: numeric identifier LUN Serial Number: alpha-numeric identifier Percentage complete: numeric value Re-Key state displays one of the following: • Read Phase •...
  • Page 186 cryptoCfg Block size: numeric value (in KB) Size of the LUN (in bytes) Current logical block address (LBA) being processed Re-Key Role: Primary Or Backup Use the --show -tape_sessions command to display all tape sessions in progress on the local node or for a specific container.
  • Page 187 cryptoCfg --create -container Creates a CryptoTarget container (CTC) for a disk or a tape storage device. The target device port WWN must be specified and one or more initiator port WWNs (PWWNs) may optionally be specified. Additional initiator PWWNs may be added after the CryptoTarget container is created.
  • Page 188 cryptoCfg crypto_target_container_name Specifies the name of the CTC to be deleted. Use cryptocfg --show -container for a listing of valid CTC names. --failback -EE Performs a manual failback of all CTCs that were failed over earlier to another encryption engine within an HA cluster to a "new" specified encryption engine. This command generates an error if the specified current encryption engine and new encryption engine are not members of the same HA cluster or if the current encryption engine or the new encryption engine are offline.
  • Page 189 cryptoCfg --remove -initiator Removes an initiator from the specified CTC. This command is valid only on the group leader. The following operands are required when removing an initiator: crypto_target_container_name Specifies the name of the CTC fro which the initiator is to be removed. initiator_PWWN Specifies the initiator port WWN.
  • Page 190 cryptoCfg -keyID keyID Specifies the Key ID. Use this operand only if the LUN was encrypted but does not include the metadata containing the keyID for the LUN. This is a rare case for LUNS encrypted in Brocade native mode. However for LUNS encrypted with DataFort v2.0, a Key ID is required, because these LUNs do not contain any metadata.
  • Page 191 cryptoCfg LUN_Num | range Specifies the LUN number either as a 16-bit (2 bytes) number in hex notation (for example, 0x07) or as a 64-bit (8 bytes) number in WWN format (for example, 0:07:00:00:00:00:00:00). The LUN number must be zero when a tape LUN is specified and the tape drive is a single LUN device.
  • Page 192 cryptoCfg --enable -LUN Forces the LUN to become enabled for encryption from a disabled state. This command must be executed on the local switch that is hosting the LUN. No commit is required after executing this command. This command proceeds with a warning and prompts for confirmation.
  • Page 193 cryptoCfg -encrypt | -cleartext Enables encryption or cleartext (no encryption). By default, cleartext is enabled. -key_lifespan time_in_days | none Specifies the lifespan of the encryption key in days. The key expires after the specified number of days. The default value is none, which means the key does not expire until the value is set.
  • Page 194 cryptoCfg Resumes a suspended re-key session for a specified disk LUN at the --resume_rekey termination point. A re-key session may terminate prematurely due to unrecoverable medium or hardware errors. When a re-key session terminates prematurely, the system logs CRITICAL RASlog and re-key operation failure status messages.
  • Page 195 cryptoCfg --show -LUN Displays Crypto LUN configuration or runtime status information for a specified CTC. This command is valid on all nodes. The following operands are supported: crypto_target_container_name Specifies the CTC for which to display the Crypto LUN information. LUN_Num Specifies the number of the LUN for which to display information.
  • Page 196 cryptoCfg Function 5. Transaction management Synopsis cryptocfg --help transcfg cryptocfg --commit [-force] cryptocfg --transabort transaction_ID cryptocfg --transshow Description Use these cryptoCfg commands to manage the transaction mechanism for those functions that require configuration changes to be committed before they take effect. These functions include “3.
  • Page 197 cryptoCfg A. Node configuration To initialize a node and generate certificates (output shows what is generated and where it is stored): cryptocfg initnode SecurityAdmin:switch> This will overwrite all identification and authentication data ARE YOU SURE (yes, y, no, n): [no] y Notify SPM of Node Cfg Operation succeeded.
  • Page 198 cryptoCfg To deregister a member node: SecurityAdmin:switch> cryptocfg --dereg -membernode 10:00:00:05:1e:53:b6:80 Operation succeeded. To generate a trusted link establishment package (TEP): SecurityAdmin:switch>cryptocfg --dhchallenge 10.33.54.231 Operation succeeded. To issue the DH response to retrieve the TAP from the NetApp LKM appliance: SecurityAdmin:switch>cryptocfg --dhresponse 10.33.54.231 Operation succeeded.
  • Page 199 cryptoCfg To delete the encryption group “brocade”: SecurityAdmin:switch> cryptocfg --delete -encgroup brocade Encryption group create status: Operation Succeeded. To register a NetApp LKM appliance as the primary key vault "LKM1": SecurityAdmin:switch>cryptocfg --reg -regkeyvault LKM1 lkmcert.pem 10.33.54.231 primary decru-lkm-1 Register key vault status: Operation Succeeded. To set the key vault type to LKM: SecurityAdmin:switch>cryptocfg --set -keyvault LKM Set key vault status: Operation Succeeded.
  • Page 200 cryptoCfg Enter the passphrase: passphrase Recover master key status: Operation succeeded. To display the encryption group configuration: SecurityAdmin:switch>cryptocfg --show -groupcfg Encryption Group Name: Failback mode: Auto Heartbeat misses: Heartbeat timeout: Key Vault Type: System Card: Disabled Primary Key Vault: IP address: 10.32.49.57 Certificate ID: 3D2-LKM2-B10-57...
  • Page 201 cryptoCfg SP state: Operational; Need Valid KEK Current Master KeyID: 00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00 Alternate Master KeyID: 00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00 No HA cluster membership Node Name: 10:00:00:05:1e:39:14:00 State: DEF_NODE_STATE_DISCOVERED Role: MemberNode IP Address: 10.32.244.60 Certificate: enc1_cpcert.pem Current Master Key State: Not configured Current Master KeyID: 00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00 Alternate Master Key State:Not configured Alternate Master KeyID:...
  • Page 202 cryptoCfg To add another encryption engine to HA cluster HAC2: SecurityAdmin:switch> cryptocfg --add -haclustermember HAC2 10:00:00:05:1e:53:74:87 3 EE Node WWN: 10:00:00:05:1e:53:74:87 Slot number: 3 Detected Add HA cluster member status: Operation succeeded. To display the changes (Note that "HAC2" is in the "defined" state until the transaction is committed): SecurityAdmin:switch>...
  • Page 203 cryptoCfg E. Storage device configuration 1. Create a zone that includes initiator and target. a. Determine the device configuration. FabricAdmin:switch>nsshow Type Pid COS PortName NodeName TTL(sec) N 010600; 2,3;10:00:00:00:c9:2b:c9:3a;20:00:00:00:c9:2b:c9:3a; na NodeSymb: [35] "Emulex LP9002 FV3.82A1 DV5-4.81A4 " Fabric Port Name: 20:06:00:05:1e:41:9a:7e Permanent Port Name: 10:00:00:00:c9:2b:c9:3a Port Index: 6 Share Area: No...
  • Page 204 cryptoCfg FabricAdmin:switch>cryptocfg --commit Operation Succeeded 4. Display the CTC configuration. FabricAdmin:switch>cryptocfg --show -container my_disk_tgt -cfg Container name: my_disk_tgt Type: disk EE node: 10:00:00:05:1e:41:9a:7e EE slot: Target: 20:0c:00:06:2b:0f:72:6d 20:00:00:06:2b:0f:72:6d 20:00:00:05:1e:41:4e:1d 20:01:00:05:1e:41:4e:1d Number of host(s): Configuration status: committed Host: 10:00:00:00:c9:2b:c9:3a 20:00:00:00:c9:2b:c9:3a 20:02:00:05:1e:41:4e:1d 20:03:00:05:1e:41:4e:1d Number of LUN(s): Operation Succeeded 5.
  • Page 205 cryptoCfg Encryption format: native Encrypt existing data: disabled Rekey: disabled LUN state: Encryption enabled Encryption algorithm: AES256-XTS Key ID state: Read write Key ID: 3a:21:6a:bd:f2:37:d7:ea:6b:73:f6:19:72:89:c6:4f Key creation time: Sun Jun 1 20:21:32 2008 Operation Succeeded 9. Display Crypto LUN configuration. FabricAdmin:switch>cryptocfg --show -LUN my_disk_tgt 0 10:00:00:00:c9:2b:c9:3a -cfg EE node: 10:00:00:05:1e:41:9a:7e...
  • Page 206 cryptoCfg FabricAdmin:switch> cryptocfg --show -container -all -cfg Encryption group name: brocade Number of Container(s): 2 Container name: pc21_stk10k Type: tape EE node: 10:00:00:05:1e:53:8a:28 EE slot: Target: 50:01:04:f0:00:b2:ea:6c 50:01:04:f0:00:b2:ea:6b 20:00:00:05:1e:53:8a:24 20:01:00:05:1e:53:8a:24 Number of host(s): Configuration status: committed Host: 10:00:00:06:2b:0f:41:0c 20:00:00:06:2b:0f:41:0c 20:02:00:05:1e:53:8a:24 20:03:00:05:1e:53:8a:24 Number of LUN(s): Container name: pc23_hplto3...
  • Page 207 cryptoCfg 20:36:00:05:1e:53:74:fd 20:37:00:05:1e:53:74:fd VI PID: 012806 Number of LUN(s): LUN number: LUN type: disk LUN serial number: 20000004CF6E582C Encryption mode: encrypt Encryption format: native Encrypt existing data: enabled Rekey: enabled LUN state: First time re-key is in progress Encryption algorithm: AES256-XTS Key ID state: Re-key...
  • Page 208 cryptoCfg Tape session number: Number of uncompressed blocks: 37466 Number of compressed blocks: 36587 Number of uncompressed bytes: 2455059456 Number of compressed bytes: 1138031028 LUN number: Tape session number: Number of uncompressed blocks: Number of compressed blocks: Number of uncompressed bytes: Number of compressed bytes: Operation succeeded.

  • Page 209: Datatypeshow

    dataTypeShow dataTypeShow Displays sample data stream types used in some diagnostic commands. Synopsis datatypeshow [-seed value] Description Use this command to display sample data stream types used in diagnostic commands. There are 20 different sample data types. The command displays an example of each data stream. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 210: Date

    date date Displays or sets the switch date and time. Synopsis date [“newdate”] Description Use this command to display or set the date and time. All switches maintain current date and time in flash memory. Date and time are used for logging events. Normal switch operation does not depend on the date and time;...
  • Page 211 date Examples To display the current date and time and then modify it: switch:admin> date Fri Jan 29 17:01:48 UTC 2007 switch:admin> date "0227123007" Thu Feb 27 12:30:00 UTC 2007 See Also errShow, ficonCupSet, ficonCupShow, portLogShow, tsClockServer, tsTimeZone, upTime Fabric OS Command Reference 53-1001337-01...

  • Page 212: Dbgshow

    dbgShow dbgShow Displays current values of debug and verbosity levels of the specified module. Synopsis dbgshow [module_name] Description Use this command to display the current values of debug and verbosity levels of the specified module. If no module name is specified, displays debug and verbosity levels of all modules. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 213: Defzone

    defZone defZone Sets or displays the default zone access mode. Synopsis defzone [--noaccess | --allaccess | --show] Description Use this command to display or set the Default Zone access mode. Setting the Default Zone mode initializes a zoning transaction (if one is not already in progress), and create reserved zoning objects.
  • Page 214 defZone Sets the default zone access mode to All Access, initiates a zoning --allaccess transaction (if one is not already in progress), and deletes the reserved zoning objects by performing the equivalent to the following zoning commands: cfgDelete “d_efault_Cfg” zoneDelete “d_efault_Zone” A cfgSave, cfgEnable, or cfgDisable command must be performed subsequent to the use of this command to commit the changes and distribute them to the fabric.

  • Page 215: Diagclearerror

    diagClearError diagClearError Clears the diagnostics failure status. Synopsis diagclearerror [[--slot] slotnumber] -all Description Use this command to clear the diagnostics failure status. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS commands" and Appendix A, "Command Availability"...

  • Page 216: Diagdisablepost

    diagDisablePost diagDisablePost Disables power-on self-test (POST). Synopsis diagdisablepost Description Use this command to disable POST. A reboot is not required for this command to take effect. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 217: Diagenablepost

    diagEnablePost diagEnablePost Enables power-on self-test (POST) execution at next reboot. Synopsis diagenablepost Description Use this command to enable POST. A reboot is not required for this command to take effect. POST includes two phases: POST Phase I mainly tests hardware and POST Phase II tests system functionality.

  • Page 218: Diaghelp

    diagHelp diagHelp Displays diagnostic command information. Synopsis diaghelp Description Use this command to display a short description of diagnostic commands. Use default operands when running diagnostics commands. Non-default settings require detailed knowledge of the underlying hardware and are intended for support personnel only. Contact support if you want to use these operands.

  • Page 219: Diagpost

    diagPost diagPost Sets or displays diagnostic POST configuration. Synopsis diagpost [mode | -show] Description Use this command to enable or disable Power-On-Self-Test) POST. The mode is saved in flash memory (and stays in that mode) until the next execution of diagPost. The mode becomes active as soon as this command is executed;...

  • Page 220: Diagretry

    diagRetry diagRetry Sets or displays diagnostic retry mode. Synopsis diagretry [mode | -show] Description Use this command to enable retry mode if the mode value is nonzero and to disable the retry mode if the mode value is 0. The mode is saved in flash memory (and stays in that mode) until the next execution of diagRetry.

  • Page 221: Diagshow

    diagShow diagShow Displays diagnostics status. Synopsis diagshow [--slot number][-uports itemlist][-bports itemlist][-use_bports value] Description Use this command to display the diagnostics status for the specified list of blade or user ports. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 222: Dbgshow

    dbgShow dbgShow Displays current values of debug and verbosity levels of the specified module. Synopsis dbgshow module_name Description Use this command to display the current values of debug and verbosity levels of the specified module. If no module name is specified, displays debug and verbosity levels of all modules. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 223: Distribute

    distribute distribute Distributes data to switches in a fabric. Synopsis distribute -p policy_list -d switch_list Description Use this command to distribute data to a specified list of switches in the fabric. The distributed data must be from the list of currently supported policy sets: Switch Connection Control Policy Device Connection Control Policy Password Database and Password Configuration Policy...
  • Page 224 distribute Examples To distribute the Switch Connection Control Policy and Device Connection Control Policy to domains 3 and 5 in the fabric: switch:admin> distribute -p “SCC;DCC” -d “3;5” To distribute the Switch Connection Control Policy, FCS Policy, and Password database to all domains in the fabric that support the distribute feature: switch:admin>...

  • Page 225: Dlsreset

    dlsReset dlsReset Disables the dynamic load sharing (DLS) option. Synopsis dlsreset Description Use this command to turn off DLS when a fabric change occurs. Refer to dlsSet for a full description of load sharing. This command should be used only if devices connected to the fabric cannot handle occasional routing changes correctly.

  • Page 226: Dlsset

    dlsSet dlsSet Enables the dynamic load sharing (DLS) option. Synopsis dlsset Description Use this command to turn on DLS when a fabric change occurs. Routing is based on the incoming port and the destination domain. This means that all traffic coming in from a port (either from an E_Port or an FX_Port) and directed to the same remote domain is routed through the same output E_Port.

  • Page 227: Dlsshow

    dlsShow dlsShow Displays the setting of the dynamic load sharing (DLS) option. Synopsis dlsshow Description Use this command to display whether DLS is on or off. One of two messages displays: DLS is set The DLS option is turned on. Load sharing is reconfigured with every change in the fabric, and existing routes can be moved to maintain optimal balance.

  • Page 228: Dnsconfig

    dnsConfig dnsConfig Sets, displays, or removes domain name service (DNS) parameters. Synopsis dnsconfig Description Use this command to display, set, or remove the domain name service parameters. The domain name service parameters are the domain name and the name server IP address for primary and secondary name servers.

  • Page 229: Enclosureshow

    enclosureShow enclosureShow Displays attributes of the switch enclosure. Synopsis enclosureshow attribute Description Use this command to display attributes of the switch enclosure, including the vendor-specific enclosure identifier and the identifier of the enclosure interface to which the switch is attached. This command applies to products that are embedded in a blade server or storage chassis.

  • Page 230: Errclear

    errClear errClear Clears all error log messages for all switch instances on this control processor (CP). Synopsis errclear Description Use this command to clear all internal and external error log messages for all switch instances on the CP where the command is executed. For products that have a single processor, all error log messages are cleared.

  • Page 231: Errdelimiterset

    errDelimiterSet errDelimiterSet Sets the error log start and end delimiters for messages sent to the console and syslog. Synopsis errdelimiterset [-s "start delimiter string"][-e "end delimiter string"] Description Use this command to set the error log start and end delimiters for log messages sent to the console and syslog.

  • Page 232: Errdump

    errDump errDump Displays the error log without pagination. Synopsis errdump [-a |-r ] Description Use this command to dump external error log messages without any page breaks. When executed without operands, this command prints all error messages for the logical switch context in which the command is executed.
  • Page 233 errDump 2008/08/25-10:13:41, [ZONE-1022], 9037, CHASSIS, INFO, Spir_67, The effective configuration has changed to meh. 2008/08/25-11:35:04, [FABR-1001], 9041, CHASSIS, WARNING, Spir_67, port 0, incompatible Long distance mode. 2008/08/25-11:39:35, [LOG-1000], 9043, CHASSIS, INFO, Spir_67, Previous message repeated 1 time(s) [output truncated] See Also errDelimiterSet, errFilterSet, errShow Fabric OS Command Reference 53-1001337-01...

  • Page 234: Errfilterset

    errFilterSet errFilterSet Sets a filter for an error log destination. Synopsis errfilterset [-d “destination"][-v severity] Description Use this command to set a filter for an error log destination. A filter is set based on the severity level of the messages. If no parameters are specified, this command displays the filters that are currently in use.

  • Page 235: Errmoduleshow

    errModuleShow errModuleShow Displays all the defined error log modules. Synopsis errmoduleshow Description Use this command to display a list of all defined error log modules. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 236: Errshow

    errShow errShow Displays the error log messages with pagination. Synopsis errshow [-a |-r ] Description Use this command to display external error log messages one at a time. When executed without operands, this command prints the error messages for the logical switch context in which the command is executed.
  • Page 237 errShow 2008/08/25-10:13:41, [ZONE-1022], 9037, CHASSIS, INFO, Spir_67, The effective configuration has changed to meh. [Type <CR> to continue, Q<CR> to stop: 2008/08/25-11:35:04, [FABR-1001], 9041, CHASSIS, WARNING, Spir_67, port 0, incompatible Long distance mode. [Type <CR> to continue, Q<CR> to stop: 2008/08/25-11:39:35, [LOG-1000], 9043, CHASSIS, INFO, Spir_67, Previous message repeated 1 time(s) [Type <CR>...

  • Page 238: Exit

    exit exit Logs out from a shell session. Synopsis exit Description Use this command to log out from a Telnet, SSH, rlogin or serial port session. Telnet and rlogin connections are closed; the serial port returns to the prompt. login: The exit command is an accepted synonym for logout, as is typing Ctrl-D at the beginning of a line.

  • Page 239: Fabportshow

    fabPortShow fabPortShow Displays fabric port information. Synopsis fabportshow [slotnumber/]portnumber Description Use this command to display the state of a port, relative to the fabric, as well as a list of pending commands. The following information displays: Port The port number. State The state of the port: Port Offline...
  • Page 240 fabPortShow 0x00000800 Zoning has completed 0x00001000 Segmented by Platform Management 0x00002000 Segmented due to no license 0x00004000 Segmented due to E_Port disabling 0x00008000 DIA already sent for that port 0x00010000 RDI already sent 0x00020000 Port is true T port 0x00040000 Port received an ELP 0x00080000 Port received an ELP RJT...
  • Page 241 fabPortShow Examples To display fabric port information: switch:admin> fabportshow 4/14 Fabric Port Information: ======================== Port: State: List: 0x10068418 List Count: Flags: 0x280120 nbrWWN: 10:00:00:60:69:80:06:cf nbrPort: lr_tid: 0x1005dbd8, IDLE STATE red_ports: 10 11 62 63 Open commands pending: ====================== No commands pending See Also portShow Fabric OS Command Reference...

  • Page 242: Fabretryshow

    fabRetryShow fabRetryShow Displays the retry count of the fabric commands. Synopsis fabretryshow Description Use this command to display the retry count of the fabric commands. The SW_ISL (ISL ports) information displays the retry count for the following fabric commands: Exchange Link Parameters Exchange Fabric Parameters HA_EFP Exchange Fabric Parameters used during warm recovery...

  • Page 243: Fabriclog

    fabricLog fabricLog Displays (all users) or manipulates (admin) the fabric log. Synopsis fabriclog -s | --show fabriclog -c | --clear fabriclog -d | --disable fabriclog -e | --enable fabriclog -r size | --resize size fabriclog -h | --help Description Use this command to display, clear, disable, enable, or resize the fabric log. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 244 fabricLog 01:08:53.066 *Removing all nodes from port F2,P0 F2,P0 01:08:53.066 SCN Port Offline;g=0x40 F2,T3 F2,P0 01:08:53.068 *Removing all nodes from port F2,P0 F2,P0 01:08:53.068 *Snd slv port (1) (-1) (2) F2,NA F2,NA 01:08:53.068 SCN Port Offline;g=0x42 F2,I4 F2,P0 01:08:53.072 *Removing all nodes from port F2,P0 F2,P0 01:08:53.072 *Snd slv port (8) (-1) (2)

  • Page 245: Fabricprincipal

    fabricPrincipal fabricPrincipal Sets the principal switch selection mode. Synopsis fabricprincipal --help|-h fabricprincipal [--show|-q] fabricprincipal --enable [-priority|-p priority] [-force|-f] fabricprincipal --disable fabricprincipal [-f] mode Description Use this command to set principal switch selection mode for a switch and to set priorities for principal switch selection.
  • Page 246 fabricPrincipal [-f ] mode Sets the principal switch mode. Specify 1 to enable principal switch mode. Specify 0 to disable principal switch mode. Optionally use the -f operand to force a fabric rebuild. Mode changes take effect when the fabric rebuilds. This operand is optional.

  • Page 247: Fabricshow

    fabricShow fabricShow Displays fabric membership information. Synopsis fabricshow [-membership | -chassis ] Description Use this command to display information about switches in the fabric. If the switch is initializing or is disabled, the message “no fabric” is displayed. In a mixed fabric, fabricshow must be executed on a switch that runs Fabric OS v5.3.0 or later;...
  • Page 248 fabricShow 66: fffc42 10:00:00:60:69:00:05:91 192.168.64.60 192.168.65.60 "sw60" 67: fffc43 10:00:00:60:69:10:60:1f 192.168.64.187 0.0.0.0 "sw187" The Fabric has 4 switches To show a mixed fabric with IPv4 and IPv6-configured switches: sw5:admin> fabricShow Switch ID Worldwide Name Enet IP Addr FC IP Addr Name --------------------------------------------------------------------------------- 1: fffc41...

  • Page 249: Fabstatsshow

    fabStatsShow fabStatsShow Displays the fabric statistics. Synopsis fabstatsshow Description Use this command to display the statistics for the fabric. The following information is displayed: • Number of times a switch domain ID has been forcibly changed • Number of E_Port offline transitions •...
  • Page 250 fabStatsShow Sec Incompatibility: Sec Violation: ECP Error: Duplicate WWN: Eport Isolated: See Also fabRetryShow Fabric OS Command Reference 53-1001337-01...

  • Page 251: Fabswitchshow

    fabSwitchShow fabSwitchShow Displays the fabric switch state structure information. Synopsis fabswitchshow Description Use this command to display the fabric switch state structure information. This command is strictly for debugging; it is not intended as a user command. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 252: Fandisable

    fanDisable fanDisable Disables a fan unit. Synopsis fandisable unit Description Use this command to disable a non-faulty fan unit by setting the RPM speed to 0. Notes This command is not available on non-bladed systems except for the Brocade 4100, 4900, and 5300.

  • Page 253: Fanenable

    fanEnable fanEnable Enables a fan unit. Synopsis fanenable unit Description Use this command to set a previously disabled fan unit back to the default RPM speed. Notes This command is not available on non-bladed systems except for the Brocade 4100, 4900, and 5300.

  • Page 254: Fanshow

    fanShow fanShow Displays fan status and speed. Synopsis fanshow Description Use this command to display the current status and speed of each fan in the system. Fan status is displayed as: Fan is functioning correctly. absent Fan is not present. below minimum Fan is present but rotating too slowly or stopped.

  • Page 255: Fastboot

    fastboot fastboot Reboots the Control Processor (CP), bypassing Power-On Self-Tests (POST). Synopsis fastboot Description Use this command to immediately reboot the CP. This command is similar to reboot, but skips POST when the system comes back up, reducing boot time significantly. If POST was previously disabled using the diagDisablePost command, then fastboot is the same as reboot.

  • Page 256: Fastwritecfg

    fastWriteCfg fastWriteCfg Enables or disables the FC Fastwrite feature. Synopsis fastwritecfg --enable | --disable [slot] fastwritecfg --show Description Use this command to configure FC Fastwrite on a blade in a given slot. Fastwrite minimizes storage latency and improves the number of write transactions per second over long distances. A blade can be configured either to support FC Fastwrite or FCIP (default supported when FC Fastwrite is disabled).
  • Page 257 fastWriteCfg To disable FC Fastwrite: switch:admin> fastwritecfg disable 7 !!!! WARNING !!!! Disabling this feature requires power-cycling of the affected blade to take effect and may take up to 5 minutes to complete. Non-bladed switches will be rebooted. In all cases, data traffic on all the ports (FC and GbE) of the blade will be disrupted.

  • Page 258: Fcipchiptest

    fcipChipTest fcipChipTest Tests functionality of components in the FCIP complex. Synopsis fcipchiptest [--slot slotnumber][-testtype type][-unit number] Description Use this command to verify the internal registers and memory of the network processor, FCIP FPGA, compression processor, and GigPHY. Notes The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 259 fcipChipTest Diagnostics When a failure is detected, the test might report one or more of the following error messages: CHIP_TEST_ERR CHIP_TEST_CHIP_INIT_ERR CHIP_TEST_IMAGE_VER_ERR CHIP_TEST_TIMEOUT_ERR CHIP_TEST_HEARBEAT_ERR CHIP_TEST_INVALID_RESULT See Also fcipPathTest Fabric OS Command Reference 53-1001337-01...

  • Page 260: Fciphelp

    fcipHelp fcipHelp Displays FCIP command information. Synopsis fciphelp Description Use this command to display a listing of Fibre Channel over IP (FCIP) commands with short descriptions for each command. FCIP commands require an FCIP license. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 261: Fcippathtest

    fcipPathTest fcipPathTest Tests the data path of the FCIP complex. Synopsis fcippathtest [--slot slotnumber][-unit number][-path mode][-nframes count][-length data_length] [-compress mode] Description Use this command to verify the data paths in the FCIP complex. All data path modes run tests by comparing Fibre Channel frames or data packets transmitted from and received by the network processor due to the designated loopback.
  • Page 262 fcipPathTest -length data_length Specifies the data length of the frames used in the test (Brocade 7500/FR4-18i only). The default is 1,024; the maximum is 2,112 FC frames and 8,196 data packets. -compress mode Specifies the compression device for which to select or to bypass data compression for the test (Brocade 7500/FR4-18i only).

  • Page 263: Fclunquery

    fcLunQuery fcLunQuery Displays a list of LUN IDs and LUNs for all accessible targets. Synopsis fclunquery [-w wwn | -s] Description Use this command to display a list of LUN IDs and LUNs for all accessible targets. Notes The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 264: Fcoe

    FCoE FCoE Manages and displays FCoE configuration. Synopsis fcoe --cfgshow [[slot]port] fcoe --disable [slot]port fcoe --enable [slot]port fcoe --loginshow [[slot]port] fcoe --fcmapset -vlan vid fcmapid fcoe --fcmapunset -vlan vid fcoe --fipcfg -advintvl intvl fcoe --fipcfgshow fcoe --resetlogin [-teport slot/port | -device wwn ] fcoe --help Description Use this command to configure and display the status of FCoE ports, FCoE Initialization Protocol...
  • Page 265 FCoE Unsets the FCMAP for a specified VLAN. Devices previously logged in are --fcmapunset disconnected. -vlan vid Specifies the VLAN ID for which the FCMAP is unset. Configures FIP multicast advertisement intervals. --fipcfg -advintvl intvl Specifies the interval in seconds. The minimum interval value is 0 and the maximum value is 300.
  • Page 266 FCoE 851600 Online FCoE VF-Port 1 VN-Port(s) 851700 Online FCoE VF-Port 1 VN-Port(s) 851800 Online FCoE VF-Port 1 VN-Port(s) 851900 Online FCoE VF-Port 1 VN-Port(s) 851a00 Online FCoE VF-Port 1 VN-Port(s) 851b00 Online FCoE VF-Port 1 VN-Port(s) 851c00 Online FCoE VF-Port 1 VN-Port(s) 851d00 Online...
  • Page 267 FCoE To display FIP and FCMAP configurations on the Brocade 8000: switch:admin> fcoe --fipcfgshow FIP Unsolicited Advertisement Interval = 0 ======================================== VLAN fcmap ======================================== 0xefc00 [Default fcmap] ======================================== To display devices logged into FCoE port 0/2 on the Brocade FCoE10-24: switch:admin>...

  • Page 268: Fcoelogincfg

    fcoeLoginCfg fcoeLoginCfg Manages or displays the FCoE login configuration. Synopsis fcoelogincfg --show [-switch swwn | -logingroup lgname] [-saved]] | [-mergestatus] fcoelogincfg --save fcoelogincfg --transshow fcoelogincfg --transabort fcoelogincfg --purge -conflicting [-nonexisting] fcoelogincfg --purge -nonexisting [-conflicting] fcoelogincfg --enable fcoelogincfg --disable Description Use this command to save, abort, or display the current FCoE login configuration, including ongoing transactions and the effective (saved) configuration.
  • Page 269 fcoeLoginCfg Enables the FCoE login configuration management on the switch. This allows --enable only configured Enode VN_Ports to log in. Use the fcoeLoginGroup command to configure allowed Enode VN_Ports. Disables the FCoE login configuration management on the switch. This allows --disable unrestricted login on Enode V_Ports.

  • Page 270: Fcoelogingroup

    fcoeLoginGroup fcoeLoginGroup Creates and manages FCoE login group configuration. Synopsis fcoelogingroup --create lgname -self |-switch swwn [-allowall | member; member;…] fcoelogingroup --delete lgname fcoelogingroup --add lgname member; member;… [-port port] fcoelogingroup --remove lgname wwn fcoelogingroup --rename lgname newlgname fcoelogingroup --help Description Use this command to create or modify the FCoE login management configuration fabric-wide.
  • Page 271 fcoeLoginGroup -port port Specifies the embedded FCoE port for which to allow login. This operand is optional; if unspecified, members of the login group are allowed to log into all FCoE ports. Removes VN_Port devices from the login group. --remove lgname Specifies the name of the login group from which VN_Port devices are to be removed.

  • Page 272: Fcping

    fcPing fcPing Sends a Fibre Channel Extended Link Service (ELS) Echo request to a pair of ports or to a single destination. Synopsis fcping [--number frames][--length size][--interval wait][--pattern pattern] [--bypasszone] [--quiet] [source] destination [--help] Description Use this command to send a Fibre Channel ELS Echo request to a pair of ports (a source and a destination) or to a single device.
  • Page 273 fcPing --pattern pattern Specifies up to 16 "pad" bytes, which are used to fill out the request frame payload sent. This is useful for diagnosing data-dependent problems in the fabric link. The pattern bytes are specified as hexadecimal characters. For example, --pattern ff fills the request frame with instances of the number 1.
  • Page 274 fcPing received reply from 0x20800: 12 bytes time:1008 usec received reply from 0x20800: 12 bytes time:1038 usec received reply from 0x20800: 12 bytes time:1010 usec 5 frames sent, 5 frames received, 0 frames rejected, 0 frames timeout Round-trip min/avg/max = 1006/1044/1159 usec Pinging 22:00:00:04:cf:75:63:85 [0x217d9] with 12 bytes of data: Request timed out Request timed out...
  • Page 275 fcPing switch:admin> fcping 20:00:00:00:c9:3f:7c:b8 Destination: 20:00:00:00:c9:3f:7c:b8 Pinging 20:00:00:00:c9:3f:7c:b8 [0x370501] with 12 bytes of data: received reply from 20:00:00:00:c9:3f:7c:b8: 12 bytes time:825 usec received reply from 20:00:00:00:c9:3f:7c:b8: 12 bytes time:713 usec received reply from 20:00:00:00:c9:3f:7c:b8: 12 bytes time:714 usec received reply from 20:00:00:00:c9:3f:7c:b8: 12 bytes time:741 usec received reply from 20:00:00:00:c9:3f:7c:b8: 12 bytes time:880 usec 5 frames sent, 5 frames received, 0 frames rejected, 0 frames timeout Round-trip min/avg/max = 713/774/880 usec...

  • Page 276: Fcplogclear

    fcpLogClear fcpLogClear Clears the FCPD debug information log. Synopsis fcplogclear Description Use this command to clear the debug information logged by the Fibre Channel Protocol daemon (FCPD). Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 277: Fcplogdisable

    fcpLogDisable fcpLogDisable Disables the FCPD debug information log (debug command). Synopsis fcplogdisable Description Use this command to disable the logging of debug information by the Fibre Channel Protocol daemon (FCPD). Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 278: Fcplogenable

    fcpLogEnable fcpLogEnable Enables the FCPD debug information log (debug command). Synopsis fcplogenable Description Use this command to enable Fibre Channel Protocol daemon (FCPD) logging. Debug information logging is enabled by default. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 279: Fcplogshow

    fcpLogShow fcpLogShow Displays the FCPD debug information log (debug command). Synopsis fcplogshow Description Use this command to display the debug information logged at various stages during the Fibre Channel Protocol daemon (FCPD) device probing. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 280: Fcpprobeshow

    fcpProbeShow fcpProbeShow Displays the Fibre Channel Protocol (FCP) probe information. Synopsis fcpprobeshow [slotnumber/]portnumber Description Use this command to display the Fibre Channel Protocol daemon (FCPD) device probing information for the devices attached to the specified F_Port or FL_Port. This information includes the number of successful logins and SCSI INQUIRY commands sent over this port and a list of the attached devices.

  • Page 281: Fcprlsshow

    fcpRlsShow fcpRlsShow Displays the Fibre Channel Protocol (FCP) Read Link Status (RLS) information. Synopsis fcprlsshow [slotnumber/]portnumber Description Use this command to display the FCP RLS information for an F_Port or FL_Port. This information describes the number of loss-of-signal, loss-of-sync, CRC errors, and other failure events that have been detected on the specified port.

  • Page 282: Fcrbcastconfig

    fcrBcastConfig fcrBcastConfig Displays or sets the broadcast frame forwarding option. Synopsis fcrbcastconfig --show fcrbcastconfig --enable -f fabric id fcrbcastconfig --disable -f fabric id fcrbcastconfig --help Description Use this command to enable or disable the broadcast frame option or to display the current configuration.
  • Page 283 fcrBcastConfig To display the new configuration: switch:admin> fcrbcastconfig show Broadcast configuration is enabled for FID: 2 128 See Also bcastshow, portRouteShow Fabric OS Command Reference 53-1001337-01...

  • Page 284: Fcrchiptest

    fcrChipTest fcrChipTest Tests the functionality of FC Router FPGA. Synopsis fcrchiptest [--slot slotnumber] [-unit number] [-testtype type] Description Use this command to test the FC Router Field-programmable gate array (FPGA). This test verifies that all SRAM and register data bits in each ASIC can be independently written and read successfully.
  • Page 285 fcrChipTest Examples To run all tests on slot 7 and FC Router FPGA 1: switch:admin> fcrchiptest slot 7 -unit 1 -testtype 0 Running fcrchiptest ....Test Complete: fcrchiptest Pass 1 of 1 Duration 0 hr, 0 min & 4 sec (0:0:4:351). passed.

  • Page 286: Fcrconfigure

    fcrConfigure fcrConfigure Sets FC Router configuration parameters. Synopsis fcrconfigure Description Use this command to configure the FC Router parameters for this platform. This is an interactive command. This command cannot execute on a system with the FC Router feature enabled. First disable FC routing by using fosConfig or disable the switch with switchDisable.

  • Page 287: Fcredgeshow

    fcrEdgeshow fcrEdgeshow Displays the FIDs of all configured EX_Ports. Synopsis fcredgeshow fcredgeshow [-fid FabricID] fcredgeshow --help Description Use this command without operand to display information about all Fabric IDs (FIDs) that have been created on the chassis and are assigned to EX_Ports. When a FID is specified, fcredgeshow displays information for all EX_Ports configured with the specified FID.
  • Page 288 fcrEdgeshow To display a FID for which no EX_Ports are configured: switch:admin> fcredgeshow -fid 29 No EX-ports with FID 29 See Also fcrPhyDevShow, fcrProxyDevShow, fcrRouteShow, lsanZoneShow, switchShow, fcrfabricshow Fabric OS Command Reference 53-1001337-01...

  • Page 289: Fcrfabricshow

    fcrFabricShow fcrFabricShow Displays the FC Routers on a backbone fabric. Synopsis fcrfabricshow Description Use this command to display information about FC Routers that exist in an FC Router backbone fabric. The existing syntax is maintained for IPv6 support. When IPv6 addresses are not configured, the output of fcrFabricShow displays the IPv4 format.
  • Page 290 fcrFabricShow FC Router WWN: 10:00:00:05:1e:39:51:67, Dom ID: Info: 10.33.36.96, "Scimitar" EX_Port Neighbor Switch Info (enet IP, WWN, name) ------------------------------------------------------------------------ 10.33.35.80 10:00:00:05:1e:38:01:e7 "B10_3"* FC Router WWN: 10:00:00:05:1e:39:a6:7e, Dom ID: Info: 10.32.66.210, 210::10:32:66:210 "Neptune210" EX_Port Neighbor Switch Info (enet IP, WWN, name) ------------------------------------------------------------------------ 10.20.30.176 10:00:00:05:1e:35:bf:1d...

  • Page 291: Fcrlsan

    fcrlSan fcrlSan Configures and displays LSAN policies. Synopsis fcrlsan fcrlsan --add -enforce tag | -speed tag fcrlsan --remove -enforce tag | -speed tag fcrlsan --show -enforce | -speed | all fcrlsan --help Description Use this command to add or remove LSAN tags, or to display existing tags in the configuration. LSAN tagging optimizes an FC router's behavior based on a specified subset of LSANS.
  • Page 292 fcrlSan Displays the specified tag from the LSAN tag configuration. --show Displays the command usage. --help -enforce tag Accepts only the LSANs from the edge fabric that matches the specified tag string into the local FCR database. A valid tag is a string of a maximum of eight characters.

  • Page 293: Fcrlsancount

    fcrLsanCount fcrLsanCount Displays or sets the maximum LSAN count. Synopsis fcrlsancount [max-lsan-count] Description Use this command to set or display the maximum number of LSAN zones that can be configured on the edge fabric. By default, the maximum LSAN count is set to 3000, which is also the minimum. This command lets you create more LSANs on your edge fabric, up to 5000, if needed to support additional devices.

  • Page 294: Fcrlsanmatrix

    fcrLsanMatrix fcrLsanMatrix Creates, edits and displays LSAN fabric or FCR matrix information, which binds the LSAN Zone and device database information to specified edge fabric IDs or FCRs. Synopsis fcrlsanmatrix fcrlsanmatrix --add -lsan FID FID | -fcr wwn wwn fcrlsanmatrix --remove -lsan FID FID | -fcr wwn wwn fcrlsanmatrix --apply -lsan | -fcr | -all fcrlsanmatrix --cancel -lsan | -fcr | -all fcrlsanmatrix --display -lsan | -fcr | -all...
  • Page 295 fcrLsanMatrix • Display the information saved in the cache. • Clear the information from the cache and revert to the saved value. • Display the information that is saved in the persistent memory (CLI command with no option). • Display the static and default/dynamic binding of the backbone to show which edge fabrics or FCRs can access each other.
  • Page 296 fcrLsanMatrix Examples For the following example, assume that the backbone has the following online edge fabrics (FIDs): 1, 2, 4, 5, 7, 8, 10 (currently, 14, 19 are not available). To add the LSAN Zone Matrix data: switch:admin > fcrlsanmatrix add 4 5 switch:admin >...
  • Page 297 fcrLsanMatrix 10:32:16:90:28:dd:d0:03 0bf001 2a0900 Imported 10:32:16:91:24:dd:d0:07 0bf002 520c00 Imported 10:32:16:91:25:dd:d0:06 01f002 4e3000 Imported 10:00:00:06:2b:0d:29:31 09f002 482200 Imported 10:32:16:90:29:dd:d0:07 08f002 2a0a00 Imported 10:32:16:91:24:dd:d0:05 09f001 48a100 Imported 10:32:16:91:25:dd:d0:03 08f001 520f00 Imported 10:00:00:06:2b:0d:29:30 01f002 4e1400 Imported 10:00:00:06:2b:0d:2f:ed 03f002 480200 Imported 10:00:00:06:2b:0d:33:4d 01f001 4e1800 Imported 10:00:00:06:2b:0e:4d:c9 03f001...
  • Page 298 fcrLsanMatrix To zero out database execute the following commands: fcrlsanmatrix --add -lsan 0 0 fcrlsanmatrix --add -fcr 00:00:00:00:00:00:00:00 00:00:00:00:00:00:00:00 fcrlsanmatrix --apply -all • In a dual backbone configuration, execute fcrlsanmatrix --fabricview on the FCR switches to confirm that the shared edge fabric FIDs have the same access in both backbones. •...

  • Page 299: Fcrpathtest

    fcrPathTest fcrPathTest Tests the data path connection between the FC Router FPGA and the central ASIC. Synopsis fcrpathtest [--slot slotnumber][-unit number][-path mode][-nframes count] Description Use this command to verify the data path connecting the FC Router field-programmable gate array (FPGA) and the central ASIC by sending frames from the FC Router FPGA port N transmitter, and looping the frames back into the same port’s receiver.
  • Page 300 fcrPathTest Notes The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS commands" and Appendix A, "Command Availability" for details. This command is supported only on Brocade FR4-18i blades and Brocade 7500 platforms. The switch must be offline for this test to run.
  • Page 301 fcrPathTest DIAG-STATS The ASIC internal error counters detected an error in the received frame. This error is similar to ERRSTATS, but includes verifying the Tx/Rx frame count statistics. The DIAG-STATS error can be caused by a faulty SFP or indicate deeper problems in the main board or ASIC.

  • Page 302: Fcrphydevshow

    fcrPhyDevShow fcrPhyDevShow Displays the FC Router physical device information. Synopsis fcrphydevshow [-a][-f FID][-w wwn][-c][-d] Description Use this command to display the physical (real) devices that are configured to be exported to other fabrics. A device is considered to be configured to be exported to another fabric if it is a member of an LSAN zone.
  • Page 303 fcrPhyDevShow Examples To display the physical devices relevant to this FC Router: fcr:admin> fcrphydevshow Device Physical Exists in Fabric ----------------------------------------- 10:00:00:00:c9:2b:6a:68 c70000 50:05:07:65:05:84:09:0e 0100ef 50:05:07:65:05:84:0b:83 0100e8 Total devices displayed: 3 See Also fcrFabricShow, fcrProxyDevShow, fcrRouteShow, lsanZoneShow, switchShow Fabric OS Command Reference 53-1001337-01...

  • Page 304: Fcrproxyconfig

    fcrProxyConfig fcrProxyConfig Displays or configures proxy devices presented by an FC Router. Synopsis fcrproxyconfig [-s importedFID devWWN slot][-r importedFID devWWN] Description Use this command to display or set the persistent configuration of proxy devices presented by the local FC Router. If no optional operand is provided, the command displays the persistent proxy device configuration;...
  • Page 305 fcrProxyConfig “WWN does not exist in any proxy device slot” is displayed if the WWN does not exist in any slot for the specified edge fabric. “Too many proxy slots configured. Remove some unused proxy device WWNs from their slots using the -r operand and try again.” is displayed if all slots are used for the specified edge fabric.

  • Page 306: Fcrproxydevshow

    fcrProxyDevShow fcrProxyDevShow Displays FC Router proxy device information. Synopsis fcrproxydevshow [-a][-f fabricid][-w wwn] Description Use this command to display the proxy devices presented by FC Router EX_Ports and information about the proxy devices. A proxy device is a virtual device presented in to a fabric by an FC Router. A proxy device represents a real device on another fabric.
  • Page 307 fcrProxyDevShow -f fabricid Display the proxy devices in the specified fabric that are relevant to this FC Router. -w wwn Displays proxy devices with the specified port WWN. Examples To display the physical devices relevant to this FC Router: switch:admin> fcrphydevshow Device Physical Exists...

  • Page 308: Fcrresourceshow

    fcrResourceShow fcrResourceShow Displays FC Router physical resource usage. Synopsis fcrresourceshow Description Use this command to display the FC Router-available resources. The maximum number allowed versus the currently used is displayed for various resources. The command output includes: LSAN Zones The maximum versus the currently used LSAN zones. LSAN Devices The maximum versus the currently used LSAN device database entries.
  • Page 309 fcrResourceShow Notes Only configured EX/VEX_Ports are displayed The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS commands" and Appendix A, "Command Availability" for details. Operands none Examples...

  • Page 310: Fcrrouterportcost

    fcrRouterPortCost fcrRouterPortCost Displays or sets an FC Router port cost. Synopsis fcrrouterportcost [[slotnumber/]portnumber] [cost] Description Use this command to set or display the cost of the FC router ports. You can set the cost of the link to one of two fixed values: 1000 or 10000. The option 0 sets the cost of the link to the default value based on link type (EX/VEX).
  • Page 311 fcrRouterPortCost To display the cost on an EX_Port: switch:admin> fcrrouterportcost 7/10 0 switch:admin> fcrrouterportcost 7/10 Port Cost ------------------------ 7/10 1000 To set the cost of an EX_Port and display the result: switch:admin> fcrrouterportcost 7/10 10000 switch:admin> fcrrouterportcost 7/10 Port Cost ------------------------ 7/10 10000...

  • Page 312: Fcrrouteshow

    fcrRouteShow fcrRouteShow Displays FC Router route information. Synopsis fcrrouteshow Description Use this command to display routes through the FC Router backbone fabric to accessible destination fabrics. An FC Router backbone fabric is the fabric that contains the E_Ports of this platform and routes inter-fabric traffic between imported fabrics, creating a meta-SAN.

  • Page 313: Fcrxlateconfig

    fcrXlateConfig fcrXlateConfig Configures a translate (xlate) domain's domain ID and state of persistence for both the EX_Port-attached fabric and the backbone fabric. Synopsis fcrxlateconfig fcrxlateconfig importedFID exportedFID preferredDomainID fcrxlateconfig --remove | -r importedFID exportedFID fcrxlateconfig --enable persistxd fcrxlateconfig --disable persistxd fcrxlateconfig --help Description Use this command to display a translate (xlate) domain ID or change the preferred domain ID and...
  • Page 314 fcrXlateConfig Operands This command has the following operands: fcrxlateconfig Sets the preferred domain ID (1-239) to preferredDomainID for the translate phantom domain and saves the configuration persistently. The translate domain must be inactive to set the preferred domain ID. The following operands are required: importedFID Specifies the fabric ID (1 through 128) of the fabric that contains the...
  • Page 315 fcrXlateConfig To set the preferred domain ID of the translate domain created in fabric 2, which represents the remote fabric 3, to a value of 8: switch:admin> fcrxlateconfig 2 3 8 xlate domain already configured, overwrite?(n) y To clear the preferred domain ID of the translate domain created in fabric 2, which represents remote fabric 3: switch:admin>...

  • Page 316: Fddcfg

    fddCfg fddCfg Manages the fabric data distribution configuration parameters. Synopsis fddcfg --showall fddcfg --localaccept policy_list fddcfg --localreject policy_list fddcfg --fabwideset policy_list Description Use this command to manage the fabric data distribution configuration parameters. These parameters control the fabric-wide consistency policy. Switches can be locally configured to allow or reject a security policy.
  • Page 317 fddCfg To set the Fabric-Wide Consistency Policy as tolerant, omit the "S". A valid policy set should be of the form "SCC:S;DCC;FCS". To set the fabric-wide policy to NULL (default) or no fabric-wide consistency, use the policy Set "". Supported policies are Switch Connection Control (SCC), Device Connection Control (DCC), and Fabric Configuration Server (FCS).

  • Page 318: Fdmicacheshow

    fdmiCacheShow fdmiCacheShow Displays abbreviated remote FDMI device information, according to remote domain ID. Synopsis fdmicacheshow Description Use this command to display FDMI cache information for remote domains only. The state of each remote domain, identified by its domain ID, is shown to be unknown, known, unsupported, or error.

  • Page 319: Fdmishow

    fdmiShow fdmiShow Displays detailed FDMI device information. Synopsis fdmishow Description Use this command to display FDMI information for all HBAs and ports. Detailed FDMI information is displayed for local HBAs and ports. This information includes the HBA with its corresponding ports, along with their respective attributes. Only abbreviated FDMI information is shown for HBA and ports on remote switches.

  • Page 320: Ficonclear

    ficonClear ficonClear Clears the records from the specified FICON database. Synopsis ficonclear database Description Use this command to remove records from the local FICON database. The command effect depends on the specified database. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 321: Ficoncupset

    ficonCupSet ficonCupSet Sets FICON-CUP parameters for a switch. Synopsis ficoncupset fmsmode enable | disable ficoncupset modereg bitname 0 | 1 ficoncupset MIHPTO seconds Description Use this command to set FICON-CUP (Control Unit Port) parameters for a switch. All parameters can be set while the switch is online.
  • Page 322 ficonCupSet To set the ASM bit in the mode register for the switch: switch:admin> ficoncupset modereg ASM 1 Active=Saved Mode bit is set to 1 To set the MIHPTO value to 60 seconds: switch:admin> ficoncupset MIHPTO 60 MIHPTO has been changed to 60 seconds See Also ficonCupShow Fabric OS Command Reference...

  • Page 323: Ficoncupshow

    ficonCupShow ficonCupShow Displays FICON-CUP parameters for a switch. Synopsis ficoncupshow fmsmode ficoncupshow modereg [bitname] ficoncupshow MIHPTO Description Use this command to display FICON-CUP (Control Unit Port) parameters for a switch. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 324 ficonCupShow To display the ASM bit in the mode register for the switch: switch:user> ficoncupshow modereg ASM To display the MIHPTO value for the CUP: switch:user> ficoncupshow MIHPTO MIHPTO for the CUP: 60 seconds See Also ficoncupset Fabric OS Command Reference 53-1001337-01...

  • Page 325: Ficonhelp

    ficonHelp ficonHelp Displays a list of FICON support commands. Synopsis ficonhelp Description Use this command to display a list of FICON support commands with descriptions. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 326: Ficonshow

    ficonShow ficonShow Displays the contents of the specified FICON database. Synopsis ficonshow database [fabric] where database is one of the following: ficonshow RNID [fabric] ficonshow LIRR [fabric] ficonshow SwitchRNID [fabric] ficonshow RLIR [fabric] ficonshow ILIR [fabric] Description Use this command to display the contents of a FICON database. The ficonShow database operand is the name of the database to display.
  • Page 327 ficonShow Blower [unit number] The Blower. FRU Part Number Displays the FRU part number. FRU Serial Number Displays the FRU serial number. Incident Count Displays the incident count. This number increases by 1 for each incident within the individual switch. Link Incident Description Same as Link Incident Type.
  • Page 328 ficonShow 0xe0 Vendor-specific. Byte BB 0x00 Unspecified class. 0x01 Direct access storage device, if it is a storage port; otherwise, not channel-to-channel capable. 0x02 Magnetic tape, if it is a storage port; otherwise, a reserved field for a channel port. 0x03 Input unit record, if it is a storage port;...
  • Page 329 ficonShow Protocol Displays whether the traffic is using FICON or FCP. Registered Node WWN Displays the device's node world wide name associated with the device HBA. Registered Port WWN Displays the device's channel or storage CU port world wide name associated with the device HBA.
  • Page 330 ficonShow Sequence Number: 0000000169CA tag: 102b {Fmt Type PID Registered Port WWN Registered Node WWN flag Parm 0x18 N 502e00 50:05:07:64:01:40:0f:ca 50:05:07:64:00:c1:69:ca 0x10 0x200105 Type number: 002064 Model number: Manufacturer: Plant of Manufacture: 02 Sequence Number: 0000000169CA tag: 052e To display the local and remote LIRR database: switch:admin>...
  • Page 331 ficonShow Plant of Manufacture: 02 Sequence Number: 0000000169CA tag: 2e00 Switch Port WWN Switch Node WWN Flag Node Parameters 20:2e:00:60:69:80:1e:4e 10:00:00:60:69:80:1e:4e 0x00 0x200a2e Switch Part Number: 060-0001501-05 Switch Serial Number: 0FT02X801E4E Domain: 20480 The local RLIR database has 1 entry. To display the local ILIR database: switch:user>...

  • Page 332: Fipscfg

    fipsCfg fipsCfg Configures FIPS (Federal Information Processing Standards) mode. Synopsis fipscfg --enable [fips | selftests | bootprom] fipscfg --disable [fips | selftests | bootprom] fipscfg --zeroize fipscfg --show | --showall fipscfg --force fips fipscfg --verify fips Description Use this command to configure FIPS mode on the switch. In this mode, only FIPS-compliant algorithms are allowed.
  • Page 333 fipsCfg --force fips This option enables FIPS mode even if prerequisites are not met, except under the following two conditions: 1. In a dual-CP system if HA is not in sync between the two CPs. 2. If selftests is in a disabled state. --verify fips Scans the prerequisites for enabling FIPS and print the failure/success cases.
  • Page 334 fipsCfg To enable FIPS after prerequisites have been met: switch:admin> fipscfg --enable fips FIPS mode has been set to : Enabled Please reboot the system switch:admin> fipscfg --show FIPS mode is : Enabled See Also none Fabric OS Command Reference 53-1001337-01...

  • Page 335: Firmwarecommit

    firmwareCommit firmwareCommit Commits switch firmware. Synopsis firmwarecommit Description Use this command to commit a firmware download to a CP. This command copies an updated firmware image to the secondary partition and commits both partitions of the CP to an updated version of the firmware.

  • Page 336: Firmwaredownload

    firmwareDownload firmwareDownload Downloads firmware from a remote host, a local directory, or a USB device. Synopsis To invoke the command in interactive mode: firmwaredownload To download FOS firmware over a network: firmwaredownload [ -s [ -b | -n ] ] [ -p ftp | scp ] [ -c ] [ -o ] host, user, pfile, passwd To download SAS/SA firmware over a network: firmwaredownload -a sas | dmm | application [ -t slotnumber(s) ] [ -p ftp | scp ] [ -c ] [ -o ] host, user, pfile, passwd...
  • Page 337 firmwareDownload For each standalone switch in your fabric, complete all firmware download changes before issuing the firmwareDownload command on the next switch to ensure a nondisruptive download. If firmwareDownload is interrupted due to an unexpected reboot as a result of a software error or power failure, the command automatically recovers the corrupted secondary partition.
  • Page 338 firmwareDownload pfile Specify a fully qualified path for the firmware pfile. Absolute path names may be specified using forward slashes (/). passwd Specify a password. This operand can be omitted, if the firmware is accessible through a local directory or an attached USB device, or if no password is required by the FTP server.
  • Page 339 firmwareDownload Do you want to continue [Y]: y The firmware is being downloaded to the Standby CP. It may take up to 10 minutes. To download the firmware to both CPs on a dual-CP chassis with an attached USB device (You would execute the same command on a single-CP switch with USB support.
  • Page 340 firmwareDownload virtualization applications on these blades. WARNING: YOU HAVE ELECTED TO DISABLE THE VERSION COMPATIBILITY CHECKING FEATURE. THIS CAN CAUSE THE VIRTUALIZATION SERVICES TO STOP WORKING. If you want to check the version compatibility, please exit and re-enter this command without the "-c" option. Do you want to continue [Y]: y To download SAS firmware and remove the installed SA image at the same time: switch:admin>...

  • Page 341: Firmwaredownloadstatus

    firmwareDownloadStatus firmwareDownloadStatus Displays the status of a firmware download. Synopsis firmwaredownloadstatus Description Use this command to display an event log that records the progress and status of events during FOS, SAS, and SA firmwaredownload. The event log is created by the current firmwaredownload command and is kept until another firmwaredownload command is issued.
  • Page 342 firmwareDownloadStatus To display the status of a firmware download on a switch: switch:admin> firmwaredownloadstatus [1]: Fri Feb 15 22:17:03 2007 Firmware is being downloaded to the switch. This step may take up to 30 minutes. [2]: Fri Feb 15 22:20:54 2007 Firmware has been downloaded to the secondary partition of the switch.
  • Page 343 firmwareDownloadStatus Slot 8 (FR4-18i): Firmware commit has started on the blade. This may take up to 10 minutes. [10]: Mon Dec 19 18:50:51 2007 Slot 8 (FR4-18i): The commit operation has completed successfully. [11]: Mon Dec 19 18:55:39 2007 Slot 5 (CP0, active): Firmware has been downloaded successfully on Standby CP. [12]: Mon Dec 19 18:55:46 2007 Slot 5 (CP0, active): Standby CP reboots.

  • Page 344: Firmwarekeyshow

    firmwareKeyShow firmwareKeyShow Displays the public key used for signed firmware validation. Synopsis firmwarekeyshow Description This command displays the contents of the public key used for validating the integrity of firmware images when signed firmware validation is enabled. Notes A firmware key should be installed on every switch as a part of the Fabric OS installation. The presence of a firmware key does not imply that the firmware signature is checked during firmwareDownload.

  • Page 345: Firmwarekeyupdate

    firmwareKeyUpdate firmwareKeyUpdate Updates the public key used for signed firmware validation. Synopsis firmwarekeyupdate firmwarekeyupdate [-p ftp|scp] host,user,keyfile,passwd firmwarekeyupdate -U keyfile Description Use this command to update the public key used for firmware signature validation. The firmware key can be updated over the network, or, if the switch supports this option, from an attached USB device.
  • Page 346 firmwareKeyUpdate user Specify a user name for FTP or SSH server access. This operand can be omitted, if the firmware key is accessible on a local directory or by anonymous FTP server access. A user name other than “anonymous” is required for SSH server access.

  • Page 347: Firmwarerestore

    firmwareRestore firmwareRestore Restores the former active firmware image. Synopsis firmwarerestore Description Use this command to restore the former active Fabric OS firmware image. This command can only be run if auto commit was disabled during the firmwaredownload. This command cannot be used to restore SAS and SA images.

  • Page 348: Firmwareshow

    firmwareShow firmwareShow Displays the Fabric OS versions on all firmware partitions in the system. Synopsis firmwareshow Description Use this command to display the FOS, SAS, and SA firmware versions. The command shows the firmware versions on both the primary and secondary partitions of the storage device. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 349: Fosconfig

    fosConfig fosConfig Displays or modifies Fabric OS features. Synopsis fosconfig --enable feature fosconfig --disable feature fosconfig --show Description Use this command to enable or disable a feature, or to display the current operating status of features on a switch. This command can be run while the switch is online. The following features are supported (refer to the Notes for limitations): •...
  • Page 350 fosConfig Enables Virtual Fabrics. By default, Virtual Fabrics are disabled. Before enabling the Virtual Fabrics, ensure that there are no Administrative Domains (ADs) in effect. Administrative Domains must be disabled before enabling Virtual Fabrics. This command prompts for confirmation, because the chassis reboots after this command is executed.
  • Page 351 fosConfig To enable the FC Routing service: switch:admin> fosconfig --enable fcr FC Routing service is enabled To enable the iSCSI service: switch:admin> fosconfig --enable iscsi iSCSI service is enabled To disable the iSCSI service: switch:admin> fosconfig --disable iscsi iSCSI service is disabled To enable Virtual Fabrics: switch:admin>...

  • Page 352: Frureplace

    fruReplace fruReplace Provides an interactive interface to help replace a field replaceable unit (FRU). Synopsis frureplace fru Description Use this command to replace a FRU. The command automatically performs the necessary backup and restore operations to accommodate the replacement. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 353: Fspfshow

    fspfShow fspfShow Displays Fabric Shortest Path First (FSPF) protocol information. Synopsis fspfshow Description Use this command to display FSPF protocol information and internal data structures of the FSPF module. The command displays the fields listed in the following table. TABLE 13 fspfShow display fields Field Description...
  • Page 354 fspfShow Examples To display FSPF protocol information: switch:admin> fspfshow version domainID = 131 switchOnline = TRUE domainValid = TRUE isl_ports[0] = 0x00000000 isl_ports[1] = 0x74000000 trunk_ports[0] = 0x00000000 trunk_ports[1] = 0x02000000 f_ports[0] = 0x00400000 f_ports[1] = 0x00000000 seg_ports[0] = 0x00000000 seg_ports[1] = 0x00000000 active_ports[0] = 0x00400000...

  • Page 355: Fwalarmsfilterset

    fwAlarmsFilterSet fwAlarmsFilterSet Enables or disables alarms for Fabric Watch. Synopsis fwalarmsfilterset [mode] Description Use this command to configure alarm filtering for Fabric Watch. By turning off the alarms, all non-environment class alarms are suppressed. By turning on the alarms, all class alarms are generated.

  • Page 356: Fwalarmsfiltershow

    fwAlarmsFilterShow fwAlarmsFilterShow Displays alarm filtering for Fabric Watch. Synopsis fwalarmsfiltershow Description Use this command to display whether alarm filtering is enabled or disabled. Notes This command requires a Fabric Watch license. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 357: Fwclassinit

    fwClassInit fwClassInit Initializes all classes under Fabric Watch. Synopsis fwclassinit Description Use this command to initialize all classes under Fabric Watch. The command should only be used after installing a Fabric Watch license to start licensed Fabric Watch classes. Refer to fwConfigure for a list of classes.

  • Page 358: Fwconfigreload

    fwConfigReload fwConfigReload Reloads the Fabric Watch configuration. Synopsis fwconfigreload Description Use this command to reload the Fabric Watch configuration. This command should only be used after downloading a new Fabric Watch configuration file from a host. Notes This command requires a Fabric Watch license. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 359: Fwconfigure

    fwConfigure fwConfigure Displays and modifies the Fabric Watch configuration. Synopsis fwconfigure fwconfigure --enable --port portNumber fwconfigure --disable --port portNumber Description Use this command to display and modify threshold information for the Fabric Watch configuration. Switch elements monitored by Fabric Watch are divided into classes, which are further divided into areas.
  • Page 360 fwConfigure TABLE 14 fwConfigure Fabric Watch classes and areas Class Area Fabric E_Port downs Fabric reconfigure Domain ID changes Segmentation changes Zone changes Fabric<->QL Fabric logins SFP state changes E_Port Link loss (E_Port) Sync loss (E_Port) Signal loss (E_Port) Protocol error (E_Port) Invalid words (E_Port) Invalid CRCS E_Port) RX Performance (E_Port)
  • Page 361 fwConfigure In Access Gateway mode, only the following classes are supported. F/FL_Port (Copper) class is supported only on Embedded platforms. TABLE 15 Access Gateway mode Class Area Environmental Temperature Fan* Power Supply* Temperature Current Voltage Port Link failure Sync loss Signal loss Protocol error Invalid words...
  • Page 362 fwConfigure Operands This command has the following optional operands: --enable --port portNumber Enables all thresholds associated with a certain port. --disable --port portNumber Disables all thresholds associated with a certain port. Examples To configure thresholds in Fabric OS mode: switch:admin> fwconfigure 1 : Environment class 2 : SFP class 3 : Port class...
  • Page 363 fwConfigure Select a class => : (1..6) [6] 1 1 : Temperature 2 : Fan 3 : Power Supply 4 : return to previous page Select an area => : (1..4) [4] 1 Index ThresholdName Status CurVal LastEvent LasteventTime LastVal LastState ================================================================================ 1 envTemp001 enabled 23 C...

  • Page 364: Fwfrucfg

    fwFruCfg fwFruCfg Displays or modifies FRU state alert configuration. Synopsis fwfrucfg [--show] Description Use this command to configure field-replaceable unit (FRU) states and actions. Based on these configuration settings, Fabric Watch generates action when a FRU state changes. To configure email alerts, use fwMailCfg.

  • Page 365: Fwhelp

    fwHelp fwHelp Displays Fabric Watch command information. Synopsis fwhelp Description Use this command to display the commands that configure Fabric Watch. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS commands" and Appendix A, "Command Availability"...

  • Page 366: Fwmailcfg

    fwMailCfg fwMailCfg Displays and configures Fabric Watch email alerts. Synopsis fwmailcfg Description Use this command to display or modify the configuration and status of the Fabric Watch email alert in the switch. Switch elements monitored by Fabric Watch are divided into classes, and email alerts are based on the classes.
  • Page 367 fwMailCfg : Show Mail Configuration Information : Disable Email Alert : Enable Email Alert : Send Test Mail : Set Recipient Mail Address for Email Alert : Relay Host IP Configuration : Quit Select an item => : (1..7) [7]5 Mail Config Menu -------------------------------------- : Environment class...

  • Page 368: Fwportdetailshow

    fwPortDetailShow fwPortDetailShow Displays the port information for specified user ports. Synopsis fwportdetailshow [--p portNumber] | [--s portState] Description Use this command to print the overall status of a specified port. The output of this command is different for IPv4 and IPv6 addresses. The overall status is calculated based on the following contributors: Port Errors: Number of link loss occurrences exceeded limit for time period...
  • Page 369 fwPortDetailShow --s portState Yields a port detail report for the specified portState. Valid portState entries are: Report based on all healthy ports Report based on all marginal ports Report based on all faulty ports Report based on all offline ports If no option is specified, all ports are displayed.
  • Page 370 fwPortDetailShow To retrieve a port detailed report: switch:user> fwportdetailshow Port Detail Report Report time: 05/21/2007 11:22:58 PM Switch Name: switch IP address: 192.168.163.237 Port Exception report [by Healthy] --------Port-Errors------------ -----SFP-Errors---- Port# Type State Dur(H:M) LFA LSY LSI PER INW CRC PSC BLP STM SRX STX SCU SVO ----------------------------------------------------------------------------- HEALTHY 409:09...

  • Page 371: Fwsamshow

    fwSamShow fwSamShow Generates switch availability monitor (SAM) report. Synopsis fwsamshow Description Use this command to display a switch availability monitor (SAM) report. This report displays uptime and downtime for each port and enables you to check if a particular port is failing more often than the others.
  • Page 372 fwSamShow See Also portShow, switchShow Fabric OS Command Reference 53-1001337-01...

  • Page 373: Fwset

    fwSet fwSet Sets port persistence time. Synopsis fwset --port --persistence seconds Description Use this command to set port persistence time, a parameters controlled by Fabric Watch. Port persistence time specifies the time in seconds during which a port must persistently be in a marginal state before being labeled as such.

  • Page 374: Fwsettocustom

    fwSetToCustom fwSetToCustom Sets boundary and alarm levels to custom values. Synopsis fwsettocustom Description Use this command to set boundary and alarm levels to custom values for all classes and areas in Fabric Watch. Fabric Watch uses two types of settings: factory default settings and user-defined custom settings. •...
  • Page 375 fwSetToCustom 1 : Temperature 2 : Fan 3 : Power Supply 4 : return to previous page Select an area => : (1..4) [4] 1 Index ThresholdName Status CurVal LastEvent LasteventTime LastVal LastState ================================================================================ envTemp001 enabled 24 C inBetween Thu Feb 14 01:21:36 2008 24 C In_Range envTemp004...
  • Page 376 fwSetToCustom : change custom buffer 18 : return to previous page : apply threshold boundary changes 10 : cancel threshold boundary changes Select choice => : (1..18) [18] See Also fwSetToDefault, fwConfigure, fwHelp, fwShow Fabric OS Command Reference 53-1001337-01...

  • Page 377: Fwsettodefault

    fwSetToDefault fwSetToDefault Returns boundary and alarm levels to default values. Synopsis fwsettodefault Description Use this command to return boundary and alarm levels to defaults for all classes and areas in Fabric Watch. Fabric Watch uses two types of settings: factory default settings and user-defined custom settings. •...
  • Page 378 fwSetToDefault 1 : Temperature 2 : Fan 3 : Power Supply 4 : return to previous page Select an area => : (1..4) [4] 1 Index ThresholdName Status CurVal LastEvent LasteventTime LastVal LastState ================================================================================ envTemp001 enabled 24 C inBetween Thu Feb 14 01:21:36 2008 24 C In_Range envTemp004...
  • Page 379 fwSetToDefault : change custom buffer 18 : return to previous page : apply threshold boundary changes 10 : cancel threshold boundary changes Select choice => : (1..18) [18] See Also fwSetToCustom, fwConfigure, fwHelp, fwShow Fabric OS Command Reference 53-1001337-01...

  • Page 380: Fwshow

    fwShow fwShow Displays the class thresholds monitored by Fabric Watch. Synopsis fwshow [--port --persistence] | [--disable --port] Description Use this command to display the thresholds monitored by Fabric Watch. This command also displays the port persistence time and ports with all disabled thresholds. For a description of the class thresholds supported in Fabric OS and the restrictions that apply to some of the classes in terms of support for V/VE/VEX ports and GbE ports, refer to the help page for fwConfigure or consult the Fabric Watch Administrator's Guide.
  • Page 381 fwShow : E-Port class : F/FL Port (Optical) class : Alpa Performance Monitor class : End-to-End Performance Monitor class : Filter Performance Monitor class 10 : Security class 11 : Resource class 12 : Quit => : (1..12) [12] 1 Select an item 1 : Temperature 2 : Fan...
  • Page 382 fwShow Event 1 occurred 10 times, last at 16:49:02 on 12/09/2011 * Event 5 occurred 1 time, last at 16:30:23 on 12/09/2011 Callbacks: No callbacks are registered. To show port persistence time: switch:admin> fwshow --port --persistence FW: current port persistence time = 18s To display ports that have all thresholds disabled: switch:user>...
  • Page 383 Displays shell history. Synopsis history Description Use this command to view the shell history. The shell history mechanism is similar to the UNIX shell history facility. The h command displays the 20 most recent commands typed into the shell; the oldest commands are replaced as new ones are entered.

  • Page 384: Hadisable

    haDisable haDisable Disables the High Availability feature. Synopsis hadisable Description Use this command to disable the High Availability (HA) feature on a switch. If the HA feature is already disabled, this command does nothing. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 385: Hadump

    haDump haDump Displays High Availability status information. Synopsis hadump Description Use this command to display information about the status of the High Availability (HA) feature on a switch. This command displays the following information: • Local CP state (slot number and CP ID) •...
  • Page 386 haDump SWITCH Ethernet IP Address: 10.32.227.64 Ethernet Subnetmask: 255.255.240.0 Fibre Channel IP Address: 220.220.220.64 Fibre Channel Subnetmask: 255.255.240.0 Ethernet IP Address: 10.32.227.66 Ethernet Subnetmask: 255.255.240.0 Host Name: cp0 Gateway IP Address: 10.32.224.1 Ethernet IP Address: 10.32.227.67 Ethernet Subnetmask: 255.255.240.0 Host Name: cp1 Gateway IP Address: 10.32.224.1 Slot 10 eth0: 10.32.227.69/20...

  • Page 387: Haenable

    haEnable haEnable Enables the High Availability feature. Synopsis haenable Description Use this command to enable the High Availability (HA) feature on a switch. If the HA feature is already enabled, this command has no effect. If the HA is disabled, this command enables it. The standby CP reboots as part of the process. The command displays a warning message and prompts for confirmation before rebooting the CP.

  • Page 388: Hafailover

    haFailover haFailover Forces the failover mechanism so that the standby control processor (CP) becomes the active CP. Synopsis hafailover Description Use this command to force the failover mechanism to occur so that the standby CP becomes the active CP. In case the active and standby CPs are not synchronized or the system is not in redundant mode, the command aborts.

  • Page 389: Hashow

    haShow haShow Displays control processor (CP) status. Synopsis hashow Description Use this command to display control processor status. The display includes: • Local CP state (slot number and CP ID), warm or cold, recovering or recovered. • Remote CP state (slot number and CP ID). •...
  • Page 390 haShow Operands none Examples To display CP status on a Brocade 48000, first on a healthy standby CP and then on a faulty standby CP: switch:admin> hashow Local CP (Slot 6, CP1): Active, Cold Recovered Remote CP (Slot 5, CP0): Non-Redundant switch:admin>...

  • Page 391: Hasyncstart

    haSyncStart haSyncStart Enables High Availability state synchronization. Synopsis hasyncstart Description Use this command to enable the High Availability (HA) state synchronization. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, “Using Fabric OS commands” and Appendix A, “Command Availability”...

  • Page 392: Hasyncstop

    haSyncStop haSyncStop Disables High Availability state synchronization. Synopsis hasyncstop Description Use this command to temporarily disable High Availability (HA) synchronization. Notes Disabling HA synchronization may cause failover to be disruptive. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 393: Help

    help help Displays command help information. Synopsis help [command] help [-p | -page] help --help Description Use this command without an operand to display an alphabetical listing of commands for which help is available. When used without an operand, the command listing displays without page break.
  • Page 394 help auditdump Display audit log authutil Get and set authentication configuration bannerset Set security banner bannershow Display security banner bcastshow Display broadcast routing information bladedisable Disables all user ports on a blade. bladeenable Enables all User Ports on a blade. Type <CR>...

  • Page 395: Historylastshow

    historyLastShow historyLastShow Displays the latest entry in the field replaceable unit (FRU) history log. Synopsis historylastshow Description Use this command to display the latest entry of the history log, which records insertion and removal events for field-replaceable units (FRUs), such as blades, power supplies, fans, and world wide name (WWN) cards.

  • Page 396: Historymode

    historyMode historyMode Displays or sets the mode of the field replaceable unit (FRU) history log. Synopsis historymode [ rot | fi ] Description Use this command to display or set the mode of the history buffer, which records the insertion and removal of FRUs on a switch or chassis.

  • Page 397: Historyshow

    historyShow historyShow Displays the entire field replaceable unit (FRU) history log. Synopsis historyshow Description Use this command to display the entire history log, which records insertion and removal events for field-replaceable units (FRUs), such as blades, power supplies, fans, and world wide name (WWN) cards.
  • Page 398 historyShow Unit 1 Inserted at Tue Aug 14 11:03:45 2001 Factory Part Number: 40-0000031-03 Factory Serial Number: 1013456800 SW BLADE Slot 3 Removed at Tue Aug 14 12:10:09 2001 Factory Part Number: 60-0001532-03 Factory Serial Number: 1013456800 CP BLADE Slot 6 Removed at Tue Aug 14 13:45:07 2001 Factory Part Number: 60-0001604-02...

  • Page 399: Httpcfgshow

    httpCfgShow httpCfgShow Displays the Java plug-in version used by Web. Synopsis httpcfgshow Description Use this command to display the version of the Java plug-in supported by Web Tools. This command also displays the URL from which the plug-in can be downloaded. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 400 Displays a process summary. Synopsis i [processID] Description Use this command to display information about a specified process or about all processes running on the local switch. One line is displayed per process. Fields displayed with this command include those shown in Table TABLE 17 Command field description...
  • Page 401 Operands This command has the following operand: processID Specifies the process name or process ID for the process to display. Examples To display information about process ID 433: switch:admin> i 433 PPID C PRI NI ADDR WCHAN TTY TIME 000 S 1283 5c64 ? 00:00:02 fabricd...

  • Page 402: Iclcfg

    iclCfg iclCfg Enables or disables Inter-chassis links (ICL). Synopsis iclcfg --enable slot/icl_group iclcfg --disable slot/icl_group iclcfg --persistentenable slot/icl_group iclcfg --persistentdisable slot/icl_group iclcfg --help Description Use this command to enable or disable an inter-chassis link (ICL) or to enable or disable an ICL persistently.
  • Page 403 iclCfg To enable the ICL for ports 16-31 persistently: switch:user> iclcfg --persistentdnable 8/1 See also none Fabric OS Command Reference 53-1001337-01...

  • Page 404: Ifmodeset

    ifModeSet ifModeSet Sets the link operating mode for a network interface. Synopsis ifmodeset [“interface”] Description Use this command to set the link operating mode for a network interface. An operating mode is confirmed with a y or yes at the prompt. If the operating mode selected differs from the current mode, the change is saved and the command exits.
  • Page 405 ifModeSet serial console port. Are you sure you really want to do this? (yes, y, no, n): [no] y Proceed with caution. Auto-negotiate (yes, y, no, n): [no] y Advertise 100 Mbps / Full Duplex (yes, y, no, n): [yes] y Advertise 100 Mbps / Half Duplex (yes, y, no, n): [yes] y Advertise 10 Mbps / Full Duplex (yes, y, no, n): [yes] y Advertise 10 Mbps / Half Duplex (yes, y, no, n): [yes] y...

  • Page 406: Ifmodeshow

    ifModeShow ifModeShow Displays the link operating mode and MAC address for a network interface. Synopsis ifmodeshow interface Description Use this command to display the link operating mode and MAC address for a network interface. On the CP of a Brocade DCX or DCX-S4, this command supports eth0 and eth3 as interface parameters.
  • Page 407 ifModeShow To display the active interface: ras010:root> ifmodeshow bond0 Currently Active Slave: eth0 See Also ifModeSet Fabric OS Command Reference 53-1001337-01...

  • Page 408: Interfaceshow

    interfaceShow interfaceShow Displays FSPF interface information. Synopsis interfaceshow [slotnumber/][portnumber] Description Use this command to display the two data structures associated with FSPF interfaces (E_Ports) on the switch: • The permanently allocated interface descriptor block (IDB). • The neighbor data structure. This data structure is allocated when a switch port becomes an E_Port.
  • Page 409 interfaceShow nghbId Domain ID of the neighbor (adjacent) switch. idbNo IDB number. Should be equal to port_number remPort Port number on the remote switch connected to this port. nflags Internal FSPF flags. initCount Number of times this neighbor was initialized without the interface going down.
  • Page 410 interfaceShow attLsuOut Number of attempted transmissions of LSUs to the neighbor switch. nLsuOut Number of LSUs transmitted to the neighbor switch. attLsaOut Number of attempted transmissions of LSAs to the neighbor switch. nLsaOut Number of LSAs transmitted to the neighbor switch. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 411 interfaceShow delay lastScn = 16 &dbRetransList = 0x1008c6a0 &lsrRetransList = 0x1008c6c4 &lsrAckList = 0x1008c6e8 inactTID = 0x1008c768 helloTID = 0x1008c7a0 dbRtxTID = 0x1008c7d8 lsrRtxTID = 0x1008c848 inactTo = 80000 helloTo = 2000 rXmitTo = 5000 nCmdAcc nInvCmd nHloIn nInvHlo nLsuIn nLsaIn attHloOut nHloOut...

  • Page 412: Interopmode

    interopMode interopMode Manages Brocade switch interoperability with McDATA switches. Synopsis interopmode --show interopmode --help interopmode --disable interopmode --enable [-mcdata | -IM2 | -im2] [-defaultzone | -safezone] [-domainoffset domain_offset ] interopmode --enable [-openmcdata | -IM3 | -im3] [-domainoffset domain_offset ] interopmode [mode [-z McDataDefaultZone | -s McDataSafeZone]] Description Use this command to enable or disable Brocade switch interoperability with McDATA Enterprise OS (M-EOS) switches within a Brocade fabric, to configure the domain ID offset, and to enable safe...
  • Page 413 interopMode Notes The interopMode command must be executed on all Brocade switches in the fabric. Certain restrictions apply when changing Fabric Modes. Refer to the Fabric OS Administrator’s Guide for more information. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 414 interopMode -s Safe Zone Specify 1 to enable the McDATA Safe Zone feature. Specify 0 to disable the McDATA Safe Zone feature. Examples To display the current interop mode and command usage: switch:admin> interopmode --show InteropMode: McDATA Fabric ( IM2 ) Default Zone: Off Safe Zone: Off Domain Id offset: 0x20...
  • Page 415 interopMode To try to switch from 239 Domain ID mode in IM3 to IM 2 (this command fails unless you change the domain offset as well to a value supported in IM2): switch:admin> interopmode --enable -mcdata The switch effective and defined configuration will be lost if interop Mode is changed.

  • Page 416: Ioddelayreset

    iodDelayReset iodDelayReset Resets the user-defined IOD delay settings to default values. Synopsis ioddelayreset domain_id Description Use this command to reset the user-defined IOD delay settings to default values (-1). This command resets IOD delay values for a specified domain ID that was previously configured with the iodDelaySet command.

  • Page 417: Ioddelayshow

    iodDelayShow iodDelayShow Displays the user-defined IOD delay settings for specified domains. Synopsis ioddelayshow [ domain_id ] Description Use this command to display the user-defined IOD delay settings for all domains in the fabric or for a specified domain ID. This command only displays delay values for domain IDs, for which the IOD delay parameter has been previously set with the iodDelaySet command.

  • Page 418: Iodreset

    iodReset iodReset Disables in-order delivery (IOD) on a switch. Synopsis iodreset Description Use this command to disable in-order delivery enforcement on the local switch. IOD is disabled by default, and can only be disabled after it has been enabled with the iodSet command. This command disables the legacy IOD enforcement only.

  • Page 419: Iodset

    iodSet iodSet Enables in-order delivery (IOD) with or without frame drop. Synopsis iodset iodset --enable -losslessDLS iodset --disable -losslessDLS iodset --show iodset --help Description Use this command to enforce in-order delivery of frames during a fabric topology change and to enable dynamic load sharing (DLS) without frame loss.
  • Page 420 iodSet The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS commands" and Appendix A, "Command Availability" for details. Operands This command has the following operands: --enable -lossLessDls Enables the lossless DLS feature.

  • Page 421: Iodshow

    iodShow iodShow Displays the in-order delivery (IOD) setting. Synopsis iodshow Description Use this command to display the IOD setting on the switch. By default, IOD is disabled. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 422: Ipaddrset

    ipAddrSet ipAddrSet Sets the Ethernet and FC IP addresses. Synopsis ipaddrset [-ipv6 ] [--add x:x:x:x:x:x:x/n | --delete] ipaddrset [-cp cp_number | -chassis ] [-ipv6 ] [--add x:x:x:x:x:x:x/n | --delete] ipaddrset [-slot slot_umber] [-eth0 | -eth1] [--add x.x.x.x/n | --delete] ipaddrset [-slot slot_number] -gate [--add x.x.x.x | --delete] ipaddrset -ls FID --add IPv4_address/prefix ipaddrset -ls FID --delete ipaddrset -ipv6 [-auto | -noauto]...
  • Page 423 ipAddrSet • Use the -auto and -noauto options to enable or disable stateless IPv6 auto configuration. • Use the -ls option with appropriate arguments to set or delete the IPv4 Fibre Channel address and prefix for the IPFC interface of a logical switch. In a Virtual Fabric environment, each logical fabric is represented by a separate IPFC network interface.
  • Page 424 ipAddrSet -slot number On a chassis with a blade processor (BP), specifies the slot number. On standalone platforms with a hidden BP, such as the AP76500, this parameter is not accepted. -ipv6 [-auto | -noauto] Enables or disables stateless IPv6 auto configuration on a switch or chassis. When auto configuration is enabled, the host automatically performs configuration of IPv6 addresses and periodic non-disruptive re-configuration.
  • Page 425 ipAddrSet To configure a local IPv4 Ethernet address on a Brocade FC4-16E in a chassis (prefix required): switch:admin> ipaddrset -slot 1 -eth0 add 10.12.34.123/24 To configure a local IPv4 Ethernet address on an AP7600 with a hidden BP: switch:admin>ipaddrset -eth0 add 10.12.34.123/24 To configure an IPv4 FC address for the IPFC interface associated with a logical switch with fabric ID 123:...
  • Page 426 ipAddrSet Interactive command usage examples To set the IPv4 address details for a switch chassis in interactive mode: switch:admin> ipaddrset -chassis Ethernet IP Address [192.168.166.148]: Ethernet Subnetmask [255.255.255.0]: Committing configuration...Done. To enable DHCP on a standalone, non-AP platform: switch:admin> ipaddrset Ethernet IP Address [192.168.74.102]: Ethernet Subnetmask [255.255.255.0]: Gateway IP Address [192.168.74.1]:...

  • Page 427: Ipaddrshow

    ipAddrShow ipAddrShow Displays IP address information for a switch or control processor (CP). Synopsis ipaddrshow ipaddrshow [-cp cp_number] | -chassis ipaddrshow -slot slot_numb [-eth0 | -eth1 | -gate] Description Use this command to display the IP addresses configured in the system. The -cp option displays the IP address for a specified CP on modular platforms, or use the command without arguments to display the IP address on a standalone switch, or the IP addresses for both CPs on a chassis.
  • Page 428 ipAddrShow • stateless - Acquired through stateless auto configuration. IP Address state: • tentative • preferred • deprecated Refer to the RFC 2462 specification for more information. On modular platforms with intelligent blades, the addresses configured for each slot can be shown with the -slot option.
  • Page 429 ipAddrShow Backplane IP address of CP0 : 10.0.0.5 Backplane IP address of CP1 : 10.0.0.6 IPv6 Autoconfiguration Enabled: Yes Local IPv6 Addresses: chassis 0 stateless fd00:60:69bc:63:205:1eff:fe39:e45a/64 preferred chassis 0 stateless fec0:60:69bc:63:205:1eff:fe39:e45a/64 preferred cp 0 stateless fd00:60:69bc:63:205:1eff:fe40:6230/64 preferred cp 0 stateless fec0:60:69bc:63:205:1eff:fe40:6230/64 preferred cp 1 stateless fd00:60:69bc:63:205:1eff:fe39:ff2a/64 preferred cp 1 stateless fec0:60:69bc:63:205:1eff:fe39:ff2a/64 preferred IPv6 Gateways:...

  • Page 430: Ipfilter

    ipfilter ipfilter Manages the IP filter policies. Synopsis ipfilter --create policyname -type ipv4 | ipv6 ipfilter --clone policyname -from src_policyname ipfilter --show [policyname] ipfilter --save [policyname] ipfilter --activate policyname ipfilter --delete policyname ipfilter --addrule policyname -rule rule_number -sip source IP -dp dest port -proto protocol -act permit | deny ipfilter --delrule policyname -rule rule number ipfilter --transabort...
  • Page 431 ipfilter case. The policy type identifies the policy as an IPv4 or IPv6 filter. You can create a maximum of eight IP filter policies. --create policyname -type ipv4 | ipv6 Creates an IP filter policy with the specified name and type. The policy created is stored in a temporary buffer and is lost if the policy is not saved to the persistent configuration.
  • Page 432 ipfilter The following arguments are supported with the --addrule option: -sip Specifies the source IP address. For filters of type IPv4, the address must be a 32-bit address in dot notation, or a CIDR-style IPv4 prefix. For filters of type IPv6, the address must be a 12- bit IPv6 address in any format specified by RFC, or a CIDR-style IPv6 prefix.
  • Page 433 ipfilter Name: default_ipv6, Type: ipv6, State: active Rule Source IP Protocol Dest Port Action permit permit permit permit permit permit permit permit permit permit 600 - 1023 permit 600 - 1023 permit Name: ex1, Type: ipv6, State: defined (modified) Rule Source IP Protocol Dest Port...
  • Page 434 ipfilter To create an IPv4-type IP filter policy: switch:admin> ipfilter --create ex2 -type ipv4 To add a rule to the created policy “ex2”: switch:admin> ipfilter --addrule ex2 -sip 10.32.69.99 -dp 23 -proto tcp -act permit To display the IP filter policies, including the new policy: switch:admin>...

  • Page 435: Ipsecconfig

    ipsecConfig ipsecConfig Configures Internet Protocol security (IPsec) policies for Ethernet management interfaces. Synopsis ipsecconfig --enable [default] --disable ipsecconfig --add | --modify type [subtype] [arguments] ipsecconfig --delete [type] arguments ipsecconfig --flush manual-sa ipsecconfig --show type [subtype] arguments ipsecconfig --help [command type subtype] Description Use this command to configure the Internet Protocol Security (IPsec) feature for traffic flows on switch Ethernet management interfaces, or to display the current configuration.
  • Page 436 ipsecConfig • Modify existing IPsec and IKE policies. • Delete existing policies and SAs from the configuration database. • Flush existing SAs from the kernel SA database (SADB). • Display policy parameters. Representation of IP addresses When configuring IPsec policies, IP addresses and ports must be specified in the following format: IP address IPv4 addresses are expressed in dotted decimal notation consisting of numeric characters (0-9) and periods (.), for example,...
  • Page 437 ipsecConfig type Specifies the policy to be created. Supported policies include: policy ips Creates or modifies an IPsec policy. This policy determines the security services afforded to a packet and the treatment of a packet in the network. An IPsec policy allows classifying IP packets into different traffic flows and specifies the actions or transformations performed on IP packets on each of the traffic flows.
  • Page 438 ipsecConfig -mode tunnel|transport Specifies the IPsec transform mode. In tunnel mode, the IP datagram is fully encapsulated by a new IP datagram using the IPsec protocol. In transport mode, only the payload of the IP datagram is handled by the IPsec protocol inserting the IPsec header between the IP header and the upper-layer protocol header.
  • Page 439 ipsecConfig -ltbyte number Specifies the SA proposal’s lifetime in bytes. The SA expiries after the specified number of bytes have been transmitted. This operand is optional. Defines the Security Association. An SA specifies the IPsec protocol (AH or ESP), the algorithms used for encryption and authentication, and the expiration definitions used in security associations of the traffic.
  • Page 440 ipsecConfig policy ike Creates or modifies an IKE policy configuration. No subtype is required with this command. The command defines the following IKE policy parameters: IKE version, IP address of the remote entity, IP address of the local entity, encryption algorithm, hash algorithm, PRF algorithm, DH group, authentication method, path and filename of the pre-shared key.
  • Page 441 ipsecConfig The following operands are optional (use secCertUtil import to import the key files to the local and remote systems): -psk file Specifies the pre-shared key filename. -pubkey file Specifies the public key filename (in X.509 PEM format). -privkey file Specifies the private key filename (in X.509 PEM format).
  • Page 442 ipsecConfig -ipsec ah|esp Specifies the IPsec protocol. Encapsulating Security Payload (ESP) provides confidentiality, data integrity and data source authentication of IP packets, and protection against replay attacks. Authentication Header (AH) provides data integrity, data source authentication, and protection against replay attacks but, unlike ESP, does not provide confidentiality. -action discard|bypass|protect Specifies the IPsec protection type regarding the traffic flows.
  • Page 443 ipsecConfig Deletes a specified policy or all policies of a certain type from the --delete configuration database. You can delete IPsec policies, IKE policies, and SADB entries. When deleting IPsec policies, you have the option to delete specific components only, such as the transform or the selector, and recreate these components without having to recreate the entire policy.
  • Page 444 ipsecConfig selector Displays IPsec selector parameters including IPsec policy name, IP address of the local entity, IP address of the remote entity, direction of traffic flow (inbound or outbound), upper layer protocol used, and IPsec transform index. transform Displays IPsec transform parameters including IPsec policy name, key management protocol (version) or manual SA, processing option for selected IP traffic, IPsec mode (tunnel or transport), IP address of the local entity, IP address of the remote entity, and SA proposal.
  • Page 445 ipsecConfig Example 1 Secure traffic between two systems using AH protection with MD5 and configure IKE with pre-shared keys. The two systems are a switch, BROCADE300 (IPv4 address 10.33.74.13), and an external UNIX server (10.33.69.132 1. On the system console, log into the switch as Admin and enable IPsec. switch:admin>...
  • Page 446 ipsecConfig 4. Configure the SA proposal lifetime in seconds. switch:admin> ipsecconfig --add policy ips sa-proposal -t IPSEC-ESP -lttime 280000 -sa ESP01 5. Import the public key for the BROCADE300 (Brocade300.pem), the private key for BROCADE300 (Brocade300-key.pem), and the public key of the external host (remote-peer.pem) in X.509 PEM format from the remote certificate server (10.6.103.139).
  • Page 447 ipsecConfig 3. Create an IPsec SA policy named ESP01, which uses ESP protection with 3DES. switch:admin> ipsecconfig --add policy ips sa -t ESP01 -p esp -enc 3des_cbc 4. Create an IPsec proposal IPSEC-AHESP to use an AH01 and ESP01 bundle. switch:admin>...
  • Page 448 ipsecConfig IPsec display commands To display the IPSec IKE Policy: switch:admin> ipsecconfig --show policy ike -a IKE-01 version:ikev2 remote:10.33.69.132 local-id:10.33.74.13 remote-id:10.33.69.132 encryption algorithm: 3des_cbc hash algorithm: hmac_md5 prf algorithm: hmac_md5 dh group: 2 1 auth method:rsasig public-key:"/etc/fabos/certs/sw0/thawkcert.pem" private-key:"/etc/fabos/certs/sw0/thawkkey.pem" peer-public-key:"/etc/fabos/certs/sw0/spiritcert.pem To display the outbound and inbound SAs in the kernel SA database: switch:admin>...
  • Page 449 ipsecConfig To display all IPsec transforms: switch:admin> ipsecconfig --show policy ips transform -a policy-A-B action:auto_ipsec mode:transport local:10.33.69.132 remote:10.33.74.13 sa-proposal:ipsec-esp-a-b ike-policy:remote-B To display all IPsec traffic selectors: switch:admin> ipsecconfig --show policy ips selector -a slt-A-B-any local:10.33.69.132 remote:10.33.74.13 direction:outbound upper-layer-protocol:any transform-used:policy-A-B slt-B-A-any local:10.33.74.13 remote:10.33.69.132 direction:inbound...
  • Page 450 ipsecConfig References [DISR] "DOD IPv6 Standards Profiles for IPv6 Capable Products", v2.0 (6/15/2007). [NIST] "A Profile for IPv6 in the U.S. Government", v1.0 (1/31/2007). [4301] Kent, S. and K. Seo, "Security Architecture for the Internet Protocol", RFC 4301 (Dec 2005). [4302] Kent, S., "IP Authentication Header", RFC4302 (Dec 2005).

  • Page 451: Iscsicfg

    iscsiCfg iscsiCfg Configures or displays iSCSI entities. Synopsis iscsicfg create auth -u username -s CHAP_secret [-h] iscsicfg --modify auth -u username -s CHAP_secret [-h] iscsicfg --delete auth -u username [-h] iscsicfg --clear auth [-h] iscsicfg --show auth [-u username] [-h] iscsicfg --easycreate tgt [-w port_wwn] [-h] iscsicfg --easycreate tgt -s iscsicfg --create tgt -t target_name [-h]...
  • Page 452 iscsiCfg iscsicfg --show transaction [-h] iscsicfg --clear all [-h] iscsicfg --commit all [-f] [-h] Description Use this command to configure all iSCSI entities (such as authentication (CHAP), discovery domains (DD), discovery domain sets (DDSet), iSCSI virtual targets (VT), and LUN maps). Common actions include --add, --delete, --modify, --show, --enable and --disable;...
  • Page 453 iscsiCfg --modify tgt -t target_name -a auth_method [-h] Associates the authentication method auth_method with the target. Valid values for auth_method are CHAP and none. If CHAP is specified, then either one-way or mutual CHAP is enforced, based on the login frame from the host. --addusername tgt -t target_name -u user_list [-h] Binds user names defined in AUTH database to the specific target.
  • Page 454 iscsiCfg --show dd [-d dd_name] [-h] Displays the DD database; dd_name is optional. ddset Discovery Domain Set parameters. Actions on ddset are: --create ddset -n ddset_name -d dd_list [-h] Creates a DD set entry with the specified ddset_name and dd_list. The DDs in dd_list must already exist.
  • Page 455 iscsiCfg --commit all [-f] [-h] Commits the iSCSI configuration database to nonvolatile memory. Any modifications made to the database are not saved until an explicit --commit all is issued. If multiple switches in the fabric have uncommitted changes, this operation is rejected. The -f option needs to be used in this case to force the commit operation, in which case uncommitted changes on other switches are erased.
  • Page 456 iscsiCfg To bind user CHAP to a target: switch:admin> iscsicfg --addusername tgt-t iqn.2005-10.com.brocade.tgt1 -u user1 The operation completed successfully. To unbind user CHAP from a target: switch:admin> iscsicfg --deleteusername tgt -t iqn.2005-10.com.brocade.tgt1 -u user1 The operation completed successfully. To clear the target database: switch:admin>...
  • Page 457 iscsiCfg To display the DD database: switch:admin> iscsicfg --show dd Number of records found: 1 Name: mynewdd Status: Defined Num. Members: iqn.2222-23.mytest1 iqn.2343-58.newtest1 iqn.2222-23.mytest3 To create a DD set entry: switch:admin> iscsicfg --create ddset -n myddset -d mynewdd The operation completed successfully. To add a new member to an existing DD set (the new DD, iscsidd3, must exist already) switch:admin>...
  • Page 458 iscsiCfg To display the iSCSI initiators that attempted to log in: switch:admin> iscsicfg --show initiator Number of records found: 1 Name IP Address iqn.1991-05.com.brocade:initiator1 172.16.14.101 switch:admin> iscsicfg --show initiator -i iqn.1991-05.com.brocade:initiator1 Initiator details are: Name IP Address iqn.1991-05.com.brocade:isi154116.englab.brocade.com 172.16.14.101 No. of targets currently accessible to the specified initiator are: 4 iqn.2222-12.com.brocade:tgt1 iqn.2222-12.com.brocade:tgt2 iqn.2002-12.com.brocade:50:06:0e:80:00:43:80:a2...

  • Page 459: Iscsichiptest

    iscsiChipTest iscsiChipTest Performs functional test of components in iSCSI complex. Synopsis iscsichiptest --slot slotnumber -testtype type -unit GigEports Description Use this command to verify the memory of the network processor and iFlipper FPGA. Notes This command is supported only on the Brocade FR4-16IP blade. On all other platforms, this command displays the message: “Command not applicable to this platform.

  • Page 460: Iscsihelp

    iscsiHelp iscsiHelp Displays a list of iSCSI support commands. Synopsis iscsihelp Description Use this command to display a list of iSCSI support commands with descriptions. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 461: Iscsipathtest

    iscsiPathTest iscsiPathTest Performs functional test of components in iSCSI complex. Synopsis iscsipathtest --slot slotnumber -unit number -path mode -nframes count Description Use this command to verify the functions of the network processor and the iSCSI complex. Multiple frames or data packets are transmitted from the Network processor to designated loopback points and sent back.

  • Page 462: Iscsiportcfg

    iscsiPortCfg iscsiPortCfg Displays or modifies iSCSI port parameters. Synopsis iscsiportcfg --clearstats slot/geport iscsiportcfg --default slot/geport iscsiportcfg --show slot/geport [-v] iscsiportcfg --modify slot/geport options Description Use this command to display or modify the iSCSI port parameters. The default iSCSI port settings are as follows: TABLE 18 Default iSCSI port settings Setting...
  • Page 463 iscsiPortCfg Displays port-level protocol parameters, statistics, and session information --show on the specified port. Options include: Specifies verbose mode, which displays the initiator IP, TSID, and the number of connections in addition to the other port-level information. slot Specifies the slot number. This parameter only supports FC4-16IP blades in Brocade 48000 directors.
  • Page 464 iscsiPortCfg iSCSI Abort Task Set: iSCSI Clear ACA: iSCSI Clear Task Set: iSCSI LUN Reset: iSCSI Target Reset: iSCSI Task Reassign: Non FCP in PDU: Non FCP in Octet: 2576 Non FCP out PDU: Non FCP out Octet: 1352 Session details: Session Number: iSCSI Session Type: Normal...

  • Page 465: Iscsisessioncfg

    iscsiSessionCfg iscsiSessionCfg Displays iSCSI session/connection details, clears the associated counters, or deletes an iSCSI session/connection. Synopsis iscsisessioncfg clearstats [-i initiator_iqn] [-t target_iqn] iscsisessioncfg delete [-i initiator_iqn] [-t target_iqn] iscsisessioncfg show [-i initiator_iqn] [-t target_iqn] Description Use this command to display iSCSI session/connection details, clear the associated counters, or delete an iSCSI session/connection.
  • Page 466 iscsiSessionCfg Max. Burst Length 256KB 256KB First Burst Length 512B 64KB Max outstanding R2T Default time to retain Default time to wait Error recovery level Initial R2T iSCSI Operating Login Parameters: Connection Level Connection Index: Parameter Name Self Value Peer Value Max.

  • Page 467: Iscsiswcfg

    iscsiSwCfg iscsiSwCfg Displays or configures the iSCSI switch level configuration. Synopsis iscsiswcfg enableconn -s slot number | all iscsiswcfg disableconn -s slot number | all iscsiswcfg showconn -s slot number | all iscsiswcfg modifygw -t target name iscsiswcfg showgw Description Use this command to display the iSCSI switch level configuration and to configure the iSCSI connection redirection and target name prefix.

  • Page 468: Islshow

    islShow islShow Displays interswitch link (ISL) information. Synopsis islshow Description Use this command to display the current connections and status of the interswitch link (ISL) for each port on a switch. The command output includes the following information: • Node world wide name (WWN) •...

  • Page 469: Isnsccfg

    isnscCfg isnscCfg Displays or modifies the configuration state of the iSNS client operation. Synopsis isnsccfg --set slot | geport -s server_ip isnsccfg --set -m -s server_ip isnsccfg --reregister isnsccfg --show isnsccfg --clear Description Use this command to display and update the configuration state of the iSNS client daemon. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 470 isnscCfg To register the iSNS objects: switch:admin> isnsccfg --reregister Initiated re-register of iSNS objects with iSNS server To clear the IP address of iSNS server: switch:admin> isnsccfg --clear Cleared iSNS server configuration. See Also none Fabric OS Command Reference 53-1001337-01...

  • Page 471: Itemlist

    itemList itemList Lists parameter syntax information. Synopsis item_list = element | element white item_list element = item | item - item item = num | slot [white]/ [white] num slot = num num = hex | int int = int digit | digit hex = 0x hex digit | hex hex digit digit = 0|1|2|3|4|5|6|7|8|9 hex digit = digit |A|B|C|D|E|F|a|b|c|d|e|f...
  • Page 472 itemList The exact type of list varies, depending on the test and the parameter; however, the most common are blade ports and user ports. A list of blade ports is most commonly used by ASIC-level tests such as turboRamTest and represents which ports on the current blade (specified with --slot number) are tested.

  • Page 473: Killtelnet

    killTelnet killTelnet Terminates an open Telnet session. Synopsis killtelnet Description Use this command to terminate an open Telnet session. The command lists all current Telnet and serial port login sessions and information such as session number, login name, idle time, IP address of the connection, and timestamp of when the login session was opened.

  • Page 474: Ldapcfg

    ldapCfg ldapCfg Maps LDAP AD server roles to default switch roles. ldapcfg --maprole ldaprole switchrole ldapcfg --unmaprole ldaprole ldapcfg --show ldapcfg --help Description Use this command to map a Lightweight Directory Access Protocol (LDAP) Active Directory (AD) server role to one of the default roles available on a switch. This command also provides an option to remove an existing mapping.
  • Page 475 ldapCfg Displays a table of existing mappings between LDAP roles and their --show corresponding switch role. Displays the command usage. --help Examples To display current LDAP and switch role map: switch:admin> ldapcfg --show LDAP Role Switch Role ------------------------------------------------ ldapadmin admin ldapuser user SANfabadmin...

  • Page 476: Lfcfg

    lfCfg lfCfg Configures and displays logical fabrics. Synopsis lfcfg [--show | --showall] -cfg lfcfg [--show | --showall] -lisl [-v] lfcfg --lislenable lfcfg --help Description Use this command to display logical fabric configuration information, to determine the status of logical interswitch links (LISLs), and to enable LISLs between logical switches. A logical switch is a partition created on a physical switch that shares the physical resources of the base fabric while functioning as an independent entity in a "virtual"...
  • Page 477 lfCfg When lfCfg is issued within a logical switch context, only the configuration regarding that switch and the fabrics reachable from that switch is displayed. When the command is issued in a chassis context the information for all chassis in the base fabric reachable from the current chassis is displayed.
  • Page 478 lfCfg Logical switch: 2 Base switch: YES Fabric Id: 2 State: Online(1) Switch WWN: 10:00:00:05:1e:0b:a4:41 To display information for all fabrics in all chassis reachable from the base fabric: switch:admin> lfcfg --showall -cfg ------------------------------ Chassis: 1 ------------------------------ Chassis WWN: 10:00:00:05:1e:39:82:64 Number of Partitions: 2 Base switch domain: 1 Logical switch: 2...

  • Page 479: Licenseadd

    licenseAdd licenseAdd Adds a license key to a switch. Synopsis licenseadd license Description Use this command to add a license key to a switch. Some features of the switch and the fabric to which it is connected are optional, licensed products. Without a valid license installed for such products, their services are not available.

  • Page 480: Licensehelp

    licenseHelp licenseHelp Displays commands used to administer license keys. Synopsis licensehelp Description Use this command to display a list of the commands used to administer license keys. Notes The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 481: Licenseidshow

    licenseIdShow licenseIdShow Displays the system license ID. Synopsis licenseidshow Description Use this command to display the license ID of the system. Some features of the switch and the fabric are optional, licensed products. Without a license installed for such products, the services provided by these features are not available. This command displays the system license ID used for generating and validating licenses on the system.

  • Page 482: Licenseport

    licensePort licensePort Manages Dynamic Ports On Demand (DPOD) licenses. Synopsis licenseport --release port licenseport --reserve port licenseport --show lcenseport --method dynamic | static Description Use this command to manage and display Dynamic Ports on Demand (DPOD) license assignments. Dynamic Ports On Demand (DPOD) is an optional feature available on all embedded platforms. DPOD takes the expansion capability of static Ports On Demand (POD) and adds the flexibility of activating any available port as long as a valid license is available.
  • Page 483 licensePort To release a port from a Dynamic POD license assignment and to display the assignments: switch:admin> licenseport release 22 switch:admin> licenseport show 24 ports are available in this switch 1 POD license is installed Dynamic POD method is in use 24 port assignments are provisioned for use in this switch: 12 port assignments are provisioned by the base switch license 12 port assignments are provisioned by the first POD license...

  • Page 484: Licenseremove

    licenseRemove licenseRemove Removes or deactivates a license key. Synopsis licenseremove license Description Use this command to remove an existing license key from a switch or to deactivate the license key. The existing license key must be entered exactly as shown by licenseShow, including case. When the key has been removed, use the licenseShow command to verify that the key and the associated product have been uninstalled.
  • Page 485 licenseRemove 8 Gig FC license Expiry Date 03/06/2009 License is expired Hf7MBEEGCFNmTAWXXF99RtHXQN4RRtM3mLGtrWZLAMaTaAY9EB: Storage Application Services license Expiry Date 03/07/2009 See Also licenseAdd, licenseHelp, licenseIdShow, licenseShow Fabric OS Command Reference 53-1001337-01...

  • Page 486: Licenseshow

    licenseShow licenseShow Displays current license keys. Synopsis licenseshow Description Use this command to display current license keys, along with a list of licensed products enabled by these keys. Depending on the type of license, this command displays the following information: Permanent licenses License key Associated product...
  • Page 487 licenseShow To display the license keys on a switch with temporary (expired) licenses installed: switch:admin> licenseShow 7QmYFYJrmDgE9tTS4AYXB9trYSGtMtrQZSTK4ZSC7FC9ZAYAgE: Integrated Routing license Expiry Date 01/16/2008 License is expired 33YBfZfKZ3tQKrRJJRtgmS3JDtCL99P4fYrJYQP7GffS4ASmNE: Enterprise Bundle license Expiry Date 01/16/2008 License is expired To display the license keys on a switch with universal time-based and slot-based licenses installed (the first two examples show time-based, the third one shows a slot-based license): switch:admin>...

  • Page 488: Licenseslotcfg

    licenseSlotCfg licenseSlotCfg Configures and displays slot-based licensed features. Synopsis licenseslotcfg –-add feature slot licenseslotcfg –-remove feature slot licenseslotcfg –-show licenseslotcfg –-help Description Use this command to configure and manage licenses for the Brocade FX8-24 extension blade on the slot where the blade is installed. Slot-based licenses allow you to select the slots the license will enable up to the purchased capacity and thereby increase existing capacity without disrupting the slots for which licensed features are already enabled.
  • Page 489 licenseSlotCfg Displays the command usage. –-help Examples To add a license key for the slot-based Advance Extension feature for eight slots: switch:admin> licenseadd DXXtN3LmRSMWCSW3XmfSBPfrWKLZ3HMTN73rP9GANJMA adding license-key [DXXtN3LmRSMWCSW3XmfSBPfrWKLZ3HMTN73rP9GANJMA] To display the installed license (new license in bold): switch:admin> licenseshow SSezcSec9RXTf0dj: Performance Monitor license KgrfCBHgRtfBrGKH4D7f9S3FBX7K3MtTtBHKrYHA4CMB: 10 Gigabit Ethernet (FTR_10G) license Capacity 8...
  • Page 490 licenseSlotCfg Advanced Extension (FTR_AE) license Capacity 8 Consumed 4 Configured Blade Slots 3,4,11,12 switch:admin> licenseslotcfg --show FTR_10G license - blade slots configured = 1,3,5,12 FTR_AE license - blade slots configured = 3,4,11,12 FTR_AFA license - blade slots configured = 3,4 To deactivate the Advanced Extension license on slots 3 and 12, and to display the: results: switch:admin>...
  • Page 491 licenseSlotCfg To remove the Advanced Extension license completely (marked inactive): switch:admin> licenseremove DXXtN3LmRSMWCSW3XmfSBPfrWKLZ3HMTN73rP9GANJMA removing license-key [DXXtN3LmRSMWCSW3XmfSBPfrWKLZ3HMTN73rP9GANJMA] switch:admin> licenseshow SSezcSec9RXTf0dj: Performance Monitor license KgrfCBHgRtfBrGKH4D7f9S3FBX7K3MtTtBHKrYHA4CMB: 10 Gigabit Ethernet (FTR_10G) license Capacity 8 Consumed 4 Configured Blade Slots 1,3,5,12 A7N9rATZLYgFa7JBfmGEJKETgCMHFGQMY4gfLmGAa4GA: Advanced FICON Acceleration (FTR_AFA) license Capacity 6 Consumed 2 Configured Blade Slots 3,4...

  • Page 492: Linkcost

    linkCost linkCost Sets or displays the Fabric Shortest Path First (FSPF) cost of a link. Synopsis linkcost [[slotnumber/]portnumber [cost]] Description Use this command to set or display the cost of an interswitch link (ISL). The cost of a link is a dimensionless positive number.
  • Page 493 linkCost cost Specifies the static cost of the link connected to the specified port. Valid values are 0 to 65,535. Assigning a value outside this range will fail and generate an error. A value of 0 removes the static cost and the port reverts to its default link cost.

  • Page 494: Login

    login login Logs in as new user. Synopsis login Description Use this command to log in to the switch with another user name and password, without first logging out from the original session. If you originally connected through a Telnet or rlogin session, that session is left open.

  • Page 495: Logout

    logout logout Logs out from a shell session. Synopsis logout Description Use this command to log out from a shell session. Remote login connections are closed and the local serial connections return to the login prompt. The exit command is accepted as a synonym for logout, as is Ctrl-D at the beginning of a line. Operands none Examples...

  • Page 496: Lsanzoneshow

    lsanZoneShow lsanZoneShow Displays logical SAN zone information. Synopsis lsanzoneshow [-s] [-f fabricid] [-w wwn] [-z zonename] Description Use this command to display the inter-fabric zones or LSAN zones. These zones are normal WWN zones created in FC Router EX_Port-connected fabrics and backbone fabrics. The LSAN zones are identified by the text string “lsan_”...
  • Page 497 lsanZoneShow Examples To display the LSAN zones: switch:admin> lsanzoneshow Fabric ID: 4 Zone Name: lsan_fcr10_0 50:05:07:65:05:84:0b:83 50:05:07:65:05:84:09:0e 10:00:00:00:c9:2b:6a:68 21:00:00:20:37:18:22:55 Fabric ID: 5 Zone Name: lsan_fcr11_0 10:00:00:00:c9:2b:6a:68 21:00:00:20:37:18:22:55 50:05:07:65:05:84:0b:83 50:05:07:65:05:84:09:0e switch# See Also fcrFabricShow, fcrPhyDevShow, fcrProxyDevShow, fcrRouteShow, switchShow Fabric OS Command Reference 53-1001337-01...

  • Page 498: Lscfg

    lsCfg lsCfg Configures and manages a logical switch Synopsis lscfg --create FID [-b | -base] [-f | -force] lscfg --delete FID lscfg --config FID -slot [slot | slot_range] -port [ port | port_range] [-f |-force] lscfg restore_to_default FID lscfg restore_slot_to_default slot lscfg --change FID [[-newfid FID] | [-base]] [-force] lscfg --show [-provision] lscfg --help...
  • Page 499 lsCfg Specifies the Fabric ID. Each logical switch in a chassis is assigned a unique fabric identifier. The FID address space is shared between logical switches and EX_Ports. Valid FID values are integers between 1 and 128. The default logical switch is assigned FID 128 by default. This operand is required. -b | -base Creates a base logical switch on the chassis.
  • Page 500 lsCfg -b | -base Turns an existing logical switch into a base switch. When this command is issued on a switch that is already a base switch, this command removes the base switch properties. This command disables the current logical switch. After making the change, you must re-enable the switch.
  • Page 501 lsCfg To assign ports to a logical switch: switch:admin> lscfg --config 2 -port 10-12 This operation requires that the affected ports be disabled. Would you like to continue [y/n]?: y Making this configuration change. Please wait... Configuration change successful. Please enable your ports/switch when you are ready to continue. To assign ports to a logical switch without confirmation: switch:admin>...
  • Page 502 lsCfg Port ------------------------------------------------------------------- 128 | 128 | 128 | 128 | 128 | 128 | 128 | 128 | 128 | 128 | Port ------------------------------------------------------------------- 128 | 128 | 128 | 128 | 128 | 128 | 128 | 128 | 128 | 128 | To make logical switch FID 1 the base switch without confirmation: switch:admin>...

  • Page 503: Lsdbshow

    lsDbShow lsDbShow Displays the Fabric Shortest Path First (FSPF) link state database. Synopsis lsdbshow [domain] Description Use this command to display an FSPF link state database record for switches in the fabric or for a specified domain. There are two types of database entries: •...
  • Page 504 lsDbShow TABLE 21 lsDbShow display fields (Continued) Field Description advertiser Domain ID of the switch that originated this LSR. incarn Incarnation number of this LSR. length Total length, in bytes, of this LSR. Includes header and link state information for all links. chksum Checksum of total LSR, with exception of lsAge field.
  • Page 505 lsDbShow mOutIfsP[4] = 0x00000000 mOutIfsP[5] = 0x00000000 mOutIfsP[6] = 0x00000000 parent = 0xf0 mPathCost mHopsFromRoot Link State Record: Link State Record pointer = 0x109784b0 lsAge = 321 reserved type options = 0x0 lsId advertiser incarn = 0x80000185 length = 60 chksum = 0x168a linkCnt = 2,...

  • Page 506: Fosexec

    fosExec fosExec Executes a command in a specified logical switch context. Synopsis fosexec --fid FID -cmd “cmd [args]” fosexec --fid all [-force] -cmd “cmd [args]” Description Use this command to execute any Fabric OS command on a specified logical switch context or on all logical switches.
  • Page 507 fosExec Index Slot Port Address Media Speed State Proto =================================================== 640000 No_Module 640100 No_Module 640200 No_Module To enable port 5/0 on all logical switches: switch:admin> fosexec --fid all -cmd “portenable 5/0” --------------------------------------------------- "portenable" on FID 128: --------------------------------------------------- "portenable" on FID 10: A port or ports is/are not part of this switch.
  • Page 508 fosExec To display the switch name for all logical switches without confirmation: switch:user> fosexec --fid all force -cmd "switchname" ------------------------------------ "switchname" on FID 10: switch_10 ----------------------------------- "switchname" on FID 20: switch_20 switch:user> See Also setContext, userConfig Fabric OS Command Reference 53-1001337-01...

  • Page 509: Memshow

    memShow memShow Displays the amounts of free and used memory in a switch. Synopsis memshow [-b | -k | -m] Description Use this command to display free and used memory in the switch, as well as the shared memory and buffers used by the kernel. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 510: Mscapabilityshow

    msCapabilityShow msCapabilityShow Displays the Management Server (MS) capabilities. Synopsis mscapabilityshow Description Use this command to display the supported capabilities of the Management Server for each switch in the fabric. An asterisk displays next to the name of the local switch. Notes Reliable commit service (RCS) is a fabric-wide capability and is supported only if all the switches in the fabric support the service.

  • Page 511: Msconfigure

    msConfigure msConfigure Configures the Management Server (MS) access control list (ACL). Synopsis msconfigure Description Use this command to configure the MS Access Control List (ACL). The MS allows a Storage Area Network (SAN) management application to retrieve and administer the fabric and Interconnect Elements, such as switches.
  • Page 512 msConfigure Done Display the access list Add member based on its Port/Node WWN Delete member based on its Port/Node WWN select : (0..3) [1] 0 done ... See Also msCapabilityShow, msPlatShow, msPlClearDB, msPlMgmtActivate, msPlMgmtDeactivate, msTdDisable, msTdEnable, msTdReadConfig, secPolicyShow Fabric OS Command Reference 53-1001337-01...

  • Page 513: Msplatshow

    msPlatShow msPlatShow Displays the Management Server (MS) platform database. Synopsis msplatshow Description Use this command to display information from the MS platform database. This command displays the name of each platform object with the platform type (GATEWAY, HOST_BUS_ADAPTER, and so forth), associated management addresses, and associated node names.

  • Page 514: Msplatshowdbcb

    msPlatShowDBCB msPlatShowDBCB Displays the Management Server (MS) platform service database control block. Synopsis msplatshowdbcb Description Use this command to display the control block fields associated with the platform database. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 515: Msplcleardb

    msPlClearDB msPlClearDB Clears the Management Server (MS) platform database on all switches in the fabric. Synopsis msplcleardb Description Use this command to clear the MS platform database in the entire fabric. Because this operation cannot be undone, it should not be performed unless it is intended to resolve a database conflict between two joining fabrics or to establish an entirely new fabric with an empty database.

  • Page 516: Msplmgmtactivate

    msPlMgmtActivate msPlMgmtActivate Activates the Management Server (MS) platform service. Synopsis msplmgmtactivate Description Use this command to activate the MS platform service throughout the fabric. This command attempts to activate the MS platform service for each switch in the fabric. The change takes effect immediately and is committed to the configuration database of each affected switch.

  • Page 517: Msplmgmtdeactivate

    msPlMgmtDeactivate msPlMgmtDeactivate Deactivates the Management Server (MS) platform service. Synopsis msplmgmtdeactivate Description Use this command to deactivate the MS platform service throughout the fabric. This command deactivates the MS platform service for each switch in the fabric and commits the change to nonvolatile storage.

  • Page 518: Mstddisable

    msTdDisable msTdDisable Disables the Management Server (MS) topology discovery service. Synopsis mstddisable ["ALL"] Description Use this command to disable the management server topology discovery service on a local switch or an entire fabric. This change takes effect immediately and commits to the configuration database for all affected switches.

  • Page 519: Mstdenable

    msTdEnable msTdEnable Enables the Management Server (MS) topology discovery service. Synopsis mstdenable ["ALL"] Description Use this command to enable the MS topology discovery service on the local switch or throughout the fabric. The change takes effect immediately and commits to the configuration database for all affected switches.

  • Page 520: Mstdreadconfig

    msTdReadConfig msTdReadConfig Displays the status of The Management Server (MS) topology discovery service. Synopsis mstdreadconfig Description Use this command to check whether or not the management server topology discovery service is enabled. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 521: Myid

    myId myId Displays the current login session details. Synopsis myid Description Use this command to display the status of the system and the login session details. This includes IPv4 or IPv6 addresses associated with the login session. The login session gives details of the following: •...

  • Page 522: Nbrstateshow

    nbrStateShow nbrStateShow Displays the state of FSPF neighbors. Synopsis nbrstateshow [slotnumber/][portnumber] Description Use this command to display information about fabric shortest path first (FSPF) neighbors to the local switch or information about a neighbor to a specified port. FSPF defines a neighbor as a remote E_Port interface that is directly attached to the local switch.
  • Page 523 nbrStateShow Examples To display information about a neighbor directly connected to the local switch: switch:user> nbrstateshow 2/0 Local Domain ID: 1 Local Port Domain Remote Port State ------------------------------------------------------- NB_ST_FULL See Also interfaceShow Fabric OS Command Reference 53-1001337-01...

  • Page 524: Nbrstatsclear

    nbrStatsClear nbrStatsClear Resets FSPF interface counters. Synopsis nbrstatsclear [slotnumber/][portnumber] Description Use this command to reset the counters of fabric shortest path first (FSPF) frames transmitted and received on all interswitch links (ISLs) or on a specified ISL Use this command without operands to reset counters on all interfaces.
  • Page 525 nbrStatsClear To reset the counters on a port: switch:admin> nbrstatsclear 1/0 To verify the changes: switch:admin> interfaceshow 1/0 idbP = 0x10050a38 Interface 0 data structure: nghbP = 0x1004ce68 ifNo masterPort = 0 (self) defaultCost = 500 cost = 500 (output truncated) See Also interfaceShow, portShow, switchShow Fabric OS Command Reference...

  • Page 526: Nodefind

    nodeFind nodeFind Displays all device Name Server (NS) entries matching a given WWN, device PID, or alias. Synopsis nodefind WWN | PID | ALIAS Description Use this command to display the NS information for all devices in the fabric that have either a port world wide name (WWN) or a node WWN matching the given WWN;...
  • Page 527 nodeFind Device Shared in Other AD: No Aliases: a320 0314d4; 3;22:00:00:04:cf:9f:26:7e;20:00:00:04:cf:9f:26:7e; 0 FC4s: FCP [SEAGATE ST336605FC 0003] Fabric Port Name: 20:14:00:60:69:80:04:79 Permanent Port Name: 22:00:00:04:cf:9f:26:7e Device type: Physical Target Port Index: 20 Share Area: No Device Shared in Other AD: No Aliases: a320 To display all the device information matching the WWN "20:00:00:e0:8b:01:ce:d3": switch:user>...

  • Page 528: Nsaliasshow

    nsAliasShow nsAliasShow Displays local Name Server (NS) information, with aliases. Synopsis nsaliasshow [-r -t] Description Use this command to display local name server information with the added feature of displaying the defined configuration aliases to which the device belongs. The following message is displayed if there is no information in this switch: There is no entry in the Local Name Server The command nsAllShow displays information from all switches.
  • Page 529 nsAliasShow The second part indicates the role of the device. Currently, four roles are defined: • Unknown (initiator/target) - Device role is not detected. • Initiator- An iSCSI initiator. • Target- An iSCSI target. • Initiator+Target- Both an iSCSI initiator and an iSCSI target. Examples To display local NS information with aliases: switch:admin>...
  • Page 530 nsAliasShow Aliases: DeviceAlias 0214e2; 3;21:00:00:fa:ce:00:21:1e;20:00:00:fa:ce:00:21:1e; 0 FC4s: FCP [STOREX RS2999FCPH3 MT09] Fabric Port Name: 20:04:00:60:69:01:44:22 Permanent Port Name: 21:00:00:fa:ce:00:21:1e Aliases: 0214e4; 3;21:00:00:fa:ce:00:21:e1;20:00:00:fa:ce:00:21:e1; 0 FC4s: FCP [STOREX RS2999FCPH3 CD09] Fabric Port Name: 20:04:00:60:69:01:44:22 Permanent Port Name: 21:00:00:fa:ce:00:21:e1 Aliases: MyAlias1 MyAlias2 0214e8; 3;21:00:00:fa:ce:04:83:c9;20:00:00:fa:ce:04:83:c9;...
  • Page 531 nsAliasShow Fabric Port Name: 20:04:00:60:69:01:44:22 Permanent Port Name: 21:00:00:ad:bc:04:6f:70 Device type: Physical Target Aliases: The Local Name Server has 6 entries } See Also nsAllShow, nsShow, switchShow Fabric OS Command Reference 53-1001337-01...

  • Page 532: Nsallshow

    nsAllShow nsAllShow Displays global name server information. Synopsis nsallshow [type] Description Use this command to display the 24-bit Fibre Channel addresses of all devices in all switches in the fabric. If the type operand is supplied, only devices of specified FC-PH type are displayed. If type is omitted, all devices are displayed.

  • Page 533: Nscamshow

    nsCamShow nsCamShow Displays information about remote devices in the Name Server (NS) cache. Synopsis nscamshow [-t] Description Use this command to display the local NS cache information about the devices discovered in the fabric by the NS cache manager. If the NS cache manager does not discover new switches or new devices in the fabric, the command displays the message “No Entry is found!”...
  • Page 534 nsCamShow Examples To display all switch and device entries discovered by the NS in the fabric: switch:admin> nscamshow nscam show for remote switches: Switch entry for 2 state owner known v430 0xfffc01 Device list: count 1 Type Pid PortName NodeName 021200;...

  • Page 535: Nsshow

    nsShow nsShow Displays local Name Server (NS) information. Synopsis nsshow [-r -t] Description Use this command to display local NS information about devices connected to this switch. If no information is available for the switch, the command displays the message: “There is no entry in the Local Name Server.”...
  • Page 536 nsShow SCR=1 Fabric detected registration. Register to receive all RSCN requests issued by the fabric controller for events detected by the fabric. SCR=2 NX_Port detected registration. Register to receive all RSCN requests issued for events detected by the affected NX_Port. SCR=3 Register to receive all RSCN request issued.
  • Page 537 nsShow To display local name server information with the -r option. switch:admin> nsshow -r Type Pid PortName NodeName 010100; 3;21:00:00:e0:8b:13:08:10;20:00:00:e0:8b:13:08:10; 1 FC4s: FCP NodeSymb: [41] "QLA2340 FW:v3.03.06 DVR:v9.0.0.2 (w32 IP)" Fabric Port Name: 20:01:00:05:1e:34:00:70 Permanent Port Name: 21:00:00:e0:8b:13:08:10 Port Index: 1 Share Area: No Device Shared in Other AD: No Redirect: No...

  • Page 538: Nszonemember

    nsZoneMember nsZoneMember Displays the information on online devices zoned with a specified device. Synopsis nszonemember pid | wwn nszonemember -a | -u Description Use this command to display information on all online devices zoned with the specified device. The device can be specified by WWN or Port ID (PID). Use this command with the -u option to display all unzoned devices in the entire fabric.
  • Page 539 nsZoneMember Displays all unzoned devices in the entire fabric. The device data includes the device PID and zone alias. Examples To display information about all the online devices zoned with the given device: switch:admin> nszonemember 0x0416e2 3 local zoned members: Type Pid PortName NodeName...
  • Page 540 nsZoneMember Pid: 0xbd1bef Aliases: nstor4b_8 Port: 13 Pid: 0xb00d00 Aliases: ix360_131_196p5 Zoned Members: 2 devices Pid: 0xb00d00 Aliases: ix360_131_196p5 Pid: 0xe07d00 Aliases: hds9200_6p4 hds9200_6p4 Port: 14 Pid: 0xb00e00 Aliases: dl360_130251a dl360_130251a Zoned Members: 2 devices Pid: 0xb00e00 Aliases: dl360_130251a dl360_130251a Pid: 0xba1ae4 Aliases: trimm100a_2 To display all the unzoned devices in the fabric:...

  • Page 541: Passwd

    passwd passwd Changes the password for a specified user. Synopsis passwd [“user account”] Description Use this command to change a user account password. Operands When this command is invoked without an operand, the password is changed for the current user account.
  • Page 542 passwd • If a you are changing another user’s password with greater privileges than your current login level, you are prompted to enter that user level’s old password and, if your entry is valid, you are prompted for a new password. •...
  • Page 543 passwd The password you entered contains less than the minimum required number of lowercase characters. Insufficient number of upper case letters The password you entered contains less than the minimum required number of uppercase characters. Insufficient number of digits in password The password you entered contains less than the minimum required number of numeric characters.

  • Page 544: Passwdcfg

    passwdCfg passwdCfg Manages the password policies. Synopsis passwdcfg --set options value passwdcfg --disableadminlockout passwdcfg --enableadminlockout passwdcfg --setdefault passwdcfg --showall passwdcfg --help Description Use this command to manage password policies. Use --set to configure the following password policies: • Password strength policy •...
  • Page 545 passwdCfg policy is enforced across all user accounts except the root, factory, and SecurityAdmin role accounts. A separate configuration option, available to the SecurityAdmin and Admin role accounts, may be used to enable and disable applications of the account lockout policy to Admin role accounts.
  • Page 546 passwdCfg -minpasswordage value Specifies the minimum number of days that must elapse before a password can be changed. -minpasswordage can be set at 0 to 999. The default value is 0. Setting this parameter to a nonzero value discourages a user from rapidly changing a password in order to defeat the password history setting to reuse a recently used password.
  • Page 547 passwdCfg -sequence value Specifies the length of sequential character sequences that will be disallowed. A sequential character sequence is defined as a character sequence in which the ASCII value of each contiguous character differs by one. The ASCII value for the characters in the sequence must all be increasing or all decreasing.
  • Page 548 passwdCfg lowercase value out of range The -lowercase value specified must be greater than or equal to 0 and less than or equal to -minlength value. uppercase value out of range The -uppercase value specified must be greater than or equal to 0 and less than or equal to -minlength value.

  • Page 549: Pathinfo

    pathInfo pathInfo Displays routing information and statistics along a path covering multiple switches. Synopsis pathinfo pathinfo -f FID destination_switch [destination_port] [-r] [-t] pathinfo destination_switch [source_port[destination_port]] [-r] [-t] Description Use this command to display routing information from a source port on the local switch to a destination port on another switch.
  • Page 550 pathInfo In Port The port on which the switch receives frames. For hop 0, this is source_port. identified by the port index. Domain ID The domain ID of the switch. Name The name of the switch. Out Port The output port that the frames take to reach the next hop. For the last hop, this is destination_port identified by the port index.
  • Page 551 pathInfo Frames The total number of frames. Errors The total number of errors that may have caused a frame not to be received correctly. This includes cyclic redundancy check (CRC) errors, bad end-of-frame (EOF) errors, frame truncated errors, frame-too-short errors, and encoding errors inside a frame.
  • Page 552 pathInfo destination_port Specifies the port on the destination switch for the path being traced. This operand returns the state of this port. The embedded port (-1) is used by default, or if you specify a destination port that is not active. The destination is specified as the port index.
  • Page 553 pathInfo To display basic path information in traceroute format with reverse path option: switch:admin> pathinfo 4 -r -t Target port is Embedded Domain ID (Name) Time/hop ---------------------------------------------------- 11 (mps_daz_1) 32882 usec 4 (METEOR) 32882 usec 11 (mps_daz_1) 32882 usec 97 (pulsar055) 32882 usec To display path information when source port and destination port are provided along with the traceroute option:...
  • Page 554 pathInfo B/s (64s) Txcrdz (1s) Txcrdz (64s) F/s (1s) F/s (64s) 2743 Words 2752748 2822763 Frames 219849 50881 Errors In Port Domain ID (Name) Out Port Cost --------------------------------------------------------- 10 (web229) 1000 Port ----------------------------------------------- B/s (1s) B/s (64s) Txcrdz (1s) Txcrdz (64s) F/s (1s) F/s (64s) Words...

  • Page 555: Pdshow

    pdShow pdShow Displays data from a panic dump file. Synopsis pdshow [panic_dump_file] Description Use this command to display data from a panic dump file. The panic dump file contains information that might be useful to determine the cause of the system panic. When executed without any arguments, this command displays output from the latest panic dump file available on the switch.

  • Page 556: Perfaddeemonitor

    perfAddEEMonitor perfAddEEMonitor Adds an end-to-end monitor to a port. Synopsis perfaddeemonitor [slotnumber/]portnumber SourceID DestID Description Use this command to add an end-to-end performance monitor to a port. The performance monitor counts the number of words received, number of words transmitted, and number of CRC errors detected using either of the following two conditions: 1.
  • Page 557 perfAddEEMonitor SourceID Specifies the 3-byte SID (Source ID) of the originator device. It should be in "0xDDAAPP" format, where DD is domain ID, AA is area ID and PP is AL_PA ID. For example, 0x050200 has a domain ID of 5, an area ID of 2, and an AL_PA ID of 0.
  • Page 558 perfAddEEMonitor 2. Get name server information. Name server info shows four devices (two of which are virtual) connected to the Encryption Switch along with their PIDs: EncryptionSwitch:SecurityAdmin>nsshow Type Pid PortName NodeName TTL(sec) 0a0100; 3;2f:ff:00:06:2b:0e:b3:3c;2f:ff:00:06:2b:0e:b3:3c; na FC4s: FCP PortSymb: [18] "SANBlaze V3.0 Port" Fabric Port Name: 20:01:00:05:1e:53:b8:45 Permanent Port Name: 2f:ff:00:06:2b:0e:b3:3c Port Index: 1...
  • Page 559 perfAddEEMonitor 4. Add another EE monitor on port 1 between the Virtual Target SID and the Target DID: EncryptionSwitch:SecurityAdmin> perfaddeemonitor 1 0x0a2001 0x01a000 End-to-End monitor number 1 added. 5. Display the EE monitors on the Encryption Switch: EncryptionSwitch:SecurityAdmin> perfmonitorshow --class EE 1 There are 2 end-to-end monitor(s) defined on port OWNER_APP TX_COUNT...

  • Page 560: Perfresourceshow

    perfResourceShow perfResourceShow Displays performance monitor resources for a logical switch. Synopsis perfresourceshow --fportRes [[slot]/port] perfResourceShow --eeRes [[slot]/port] perfResourceShow --fabmodeRes perfResourceShow --installed [[slot]/port] perfResourceShow --help Description Use this command to determine the physical resources available to support the installation of performance monitors on a logical switch port. In a Virtual Fabric environment, performance monitors installed on a logical switch share the physical resources of the switches that make up the base fabric.
  • Page 561 perfResourceShow Examples To display the number of F_Port monitors that can be installed on the current logical switch: switch:admin> perfresourceshow --fportRes ====================================================== Installed Available Slot/PortRange ====================================================== 2/13 3/5,3/7,3/12 Port list information --------------------- Slot ----------------------------------------------------- Port | - | - | | - | | - | | - | - |...
  • Page 562 perfResourceShow | - | To display the number of F_Port monitors that can be installed on port 2/37: switch:admin> perfresourceshow --fportRes 2/37 Slot/Port Installed Available =========================================== 2/37 To display the number of EE monitors that can be installed on the current logical switch: switch:admin>...
  • Page 563 perfResourceShow | - | | - | | - | | - | | - | | - | | - | | - | | - | | - | | - | | - | To display the number of EE monitors that can be installed on port 10: switch:admin>...

  • Page 564: Perfaddipmonitor

    perfAddIPMonitor perfAddIPMonitor Adds a filter-based performance monitor for IP frame count. Synopsis perfaddipmonitor [slotnumber/]portnumber [alias] Description Use this command to create a filter-based monitor that will count the number of IP traffic frames. Only frames transmitted are counted. Execution of this command displays a numeric key that uniquely identifies the monitor. Use the perfMonitorShow command for a listing of valid keys and user-defined aliases.

  • Page 565: Perfaddreadmonitor

    perfAddReadMonitor perfAddReadMonitor Adds a filter-based performance monitor for the SCSI Read command. Synopsis perfaddreadmonitor [slotnumber/]portnumber [alias] Description Use this command to create a filter-based monitor that counts the number of SCSI FCP Read commands in Fibre Channel frames. Only frames transmitted are counted. Execution of this command displays a numeric key that uniquely identifies the monitor.

  • Page 566: Perfaddrwmonitor

    perfAddRWMonitor perfAddRWMonitor Adds a filter-based performance monitor for the SCSI read and write commands. Synopsis perfaddrwmonitor [slotnumber/]portnumber [alias] Description Use this command to create a filter-based monitor that counts the number of SCSI FCP Read and Write commands in Fibre Channel frames. Only frames transmitted are counted. Execution of this command displays a numeric key that uniquely identifies the monitor.

  • Page 567: Perfaddscsimonitor

    perfAddSCSIMonitor perfAddSCSIMonitor Adds a filter-based performance monitor for SCSI frame count. Synopsis perfaddscsimonitor [slotnumber/]portnumber [alias] Description Use this command to create a filter-based monitor that counts the number of SCSI traffic frames. Only frames transmitted are counted. Execution of this command displays a numeric key that uniquely identifies the monitor. Use the perfMonitorShow command for a listing of valid keys and user-defined aliases.

  • Page 568: Perfaddusermonitor

    perfAddUserMonitor perfAddUserMonitor Adds a user-defined filter-based performance monitor. Synopsis perfaddusermonitor [slotnumber/]portnumber "grouplist" [alias] Description Use this command to define a custom filter for frame offsets and values. For every offset, each group of comparison values is evaluated using the Boolean OR operator to determine a match.
  • Page 569 perfAddUserMonitor SOFi2 SOFn2 SOFi3 SOFn3 alias Specifies a name for the monitor. Strings exceeding 10 characters are truncated. To accommodate spaces, the string must be surrounded by quotation marks. Spaces count toward the character limit but are removed. This operand is optional. By default, the alias is an empty string. Examples To add a filter-based monitor for all Extended Link Service requests (R_CTL=0x22 and TYPE=0x01) to a port:...

  • Page 570: Perfaddwritemonitor

    perfAddWriteMonitor perfAddWriteMonitor Adds a filter-based performance monitor for the SCSI write command. Synopsis perfaddwritemonitor [slotnumber/]portnumber [alias] Description Use this command to create a filter-based monitor that counts the number of SCSI FCP write commands in Fibre Channel frames. Only frames transmitted are counted. Execution of this command displays a numeric key that uniquely identifies the monitor.

  • Page 571: Perfcfgclear

    perfCfgClear perfCfgClear Clears the previously saved performance monitoring configuration settings from nonvolatile memory. Synopsis perfcfgclear Description Use this command to clear the previously saved end-to-end and filter configuration settings of performance monitoring from nonvolatile memory. Notes This command requires an Advanced Performance Monitoring license. This command is not supported on virtual FC ports (VE/VEX_Port), EX_Port, M (Mirror) ports and GbE ports.

  • Page 572: Perfcfgrestore

    perfCfgRestore perfCfgRestore Restores performance monitoring configuration settings from nonvolatile memory. Synopsis perfcfgrestore Description Use this command to restore the performance monitoring configuration information from nonvolatile memory. This does not restore the information cleared by the perfCfgClear command; rather, it restores the configuration from nonvolatile memory. The perfCfgRestore command overwrites any configuration changes that were not saved.

  • Page 573: Perfcfgsave

    perfCfgSave perfCfgSave Saves performance monitoring configuration settings to nonvolatile memory. Synopsis perfcfgsave Description Use this command to save the current Performance Monitor configuration for end-to-end (EE) and filter configuration settings of performance monitoring into nonvolatile memory. Configurations are saved persistently across power cycles. The number of monitors that can be saved to flash memory is limited as follows: •...

  • Page 574: Perfclearalpacrc

    perfClearAlpaCrc perfClearAlpaCrc Clears the CRC error count associated with a port and arbitrated loop physical address (AL_PA). Synopsis perfclearalpacrc [slotnumber/]portnumber [ALPA] Description Use this command to clear a specific cyclic redundancy check (CRC) error counter associated with a specific port and AL_PA, or all such counters on a port. Notes This command requires an Advanced Performance Monitoring license.

  • Page 575: Perfdeleemonitor

    perfDelEEMonitor perfDelEEMonitor Deletes one or all end-to-end performance monitors from a port. Synopsis perfdeleemonitor [slotnumber/]portnumber [monitorId] Description Use this command to delete an end-to-end performance monitor from a port, or all such monitors associated with a port. Notes This command requires an Advanced Performance Monitoring license. This command is not supported on virtual FC ports (VE/VEX_Port), EX_Port, M (Mirror) ports and GbE ports.

  • Page 576: Perfdelfiltermonitor

    perfDelFilterMonitor perfDelFilterMonitor Deletes one or all filter-based performance monitors from a port. Synopsis perfdelfiltermonitor [slotnumber/]portnumber [monitorid] Description Use this command to delete a filter-based performance monitor from a port, or all such monitors associated with a port. Notes This command requires an Advanced Performance Monitoring license. This command is not supported on virtual FC ports (VE/VEX_Port), EX_Port, M (Mirror) ports and GbE ports.

  • Page 577: Perfhelp

    perfHelp perfHelp Displays performance monitoring help information. Synopsis perfhelp Description Use this command to display the help commands available for performance monitoring. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS commands" and Appendix A, "Command Availability"...

  • Page 578: Perfmonitorclear

    perfMonitorClear perfMonitorClear Clears counters of end-to-end, filter-based, and ISL performance monitors on a port. Synopsis perfmonitorclear --class monitor_class [slotnumber/]portnumber [monitorId] Description Use this command to clear counters for performance monitors on a port, specified by class. Monitor classes include end-to-end monitors (EE), filter-based monitors (FLT), and interswitch link monitors (ISL).
  • Page 579 perfMonitorClear switch:admin> perfmonitorclear --class FLT 1/2 This will clear ALL filter-based monitors' counters on port 2, continue? (yes, y, no, y): [no] y To clear statistics counters for an ISL monitor: switch:admin> perfmonitorclear --class ISL 1 This will clear ISL monitor on port 1, continue? (yes, y, no, n): [no] y See Also perfAddEEMonitor, perfAddIPMonitor, perfAddReadMonitor, perfAddRWMonitor, perfAddSCSIMonitor, perfAddUserMonitor, perfAddWriteMonitor, perfMonitorShow...

  • Page 580: Perfmonitorshow

    perfMonitorShow perfMonitorShow Displays end-to-end, filter-based, and interswitch Link performance monitors on a port. Synopsis perfmonitorshow class monitor_class [slotnumber/]portnumber [interval] Description Use this command to display performance monitors on a port. Monitor classes include end-to-end monitors (EE), filter-based monitors (FLT), and interswitch link monitors (ISL). ISL monitors are automatically activated on E_Ports (not including trunk slaves).
  • Page 581 perfMonitorShow Notes This command requires an Advanced Performance Monitoring license. This command is not supported on virtual FC ports (VE/VEX_Port), EX_Port, M (Mirror) ports and GbE ports. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 582 perfMonitorShow To display end-to-end monitors on a port at an interval of every 5 seconds: switch:admin> perfmonitorshow --class EE 8 5 Showing EE monitors 8, 5: Tx/Rx are # of bytes ----- ----- ----- ----- ----- ----- ----- ----- Tx Rx Tx Rx Tx Rx Tx Rx...
  • Page 583 perfMonitorShow To display ISL monitor information on a port: switch:admin> perfmonitorshow --class ISL 1/1 Total transmit count for this ISL: 1462326 Number of destination domains monitored: 3 Number of ports in this ISL: 2 Domain 110379 Domain 98: 13965 Domain 1337982 See Also perfMonitorClear, perfAddEEMonitor, perfAddIPMonitor, perfAddRWMonitor,...

  • Page 584: Perfsetporteemask

    perfSetPortEEMask perfSetPortEEMask Sets the overall mask for end-to-end (EE) performance monitors. Synopsis perfsetporteemask [slotnumber/]portnumber "TxSIDMsk " "TxDIDMsk " "RxSIDMsk" "RxDIDMsk" Description Use this command to set the mask for an end-to-end (EE) performance monitor. This command allows selecting the Fibre Channel frames for which to collect performance statistics. When setting the EE mask on a port, all existing EE monitors on that port are deleted.
  • Page 585 perfSetPortEEMask TxSIDMsk Specify the transmitting source ID mask in dd:aa:pp format, with quotation marks, where dd is the domain ID mask, aa is the Area ID mask, and pp is AL_PA ID mask. For example, "00:ff:00" uses only the Area ID to trigger the EE monitor.

  • Page 586: Perfshowalpacrc

    perfShowAlpaCrc perfShowAlpaCrc Displays the CRC error count by port or by arbitrated loop physical address (AL_PA). Synopsis perfshowalpacrc [slotnumber/]portnumber [ALPA] Description Use this command to display the cyclic redundancy check (CRC) error count of one or all devices attached to a port. If the AL_PA operand is specified, only the CRC count for that AL_PA device is displayed.

  • Page 587: Perfshowporteemask

    perfShowPortEEMask perfShowPortEEMask Displays the current address mask for end-to-end performance monitors on a port. Synopsis perfshowporteemask [slotnumber/]portnumber Description Use this command to display the current mask shared across all end-to-end (EE) performance monitors of a port. There are only two commands that can modify the value of the EE mask: perfSetPortEEMask and perfCfgRestore.
  • Page 588 perfShowPortEEMask RxSID ALPA: RxDID Domain: RxDID Area: RxDID ALPA: See Also perfAddEEMonitor, perfDelEEMonitor, perfSetPortEEMask Fabric OS Command Reference 53-1001337-01...

  • Page 589: Perfttmon

    perfTTmon perfTTmon Installs the Top Talker monitor in the specified mode. Synopsis perfttmon Port Mode (F_Port): perfttmon --add egress | ingress [slotnumber/]portnumber perfttmon --show [slotnumber/]portnumber [number of flows] [wwn| pid] perfttmon --delete [slotnumber/]portnumber Fabric Mode: perfttmon --add fabricmode perfttmon --show dom domain id [number of flows] [wwn| pid] perfttmon --delete fabricmode Description Use this command to install the Top Talker monitor.
  • Page 590 perfTTmon Operands This command has the following operands: slotnumber For bladed systems only, specifies the slot number of the port on which to install Top Talkers, followed by a slash (/). portnumber Specifies the number of the port on which the Top Talker is to be installed, relative to its slot for bladed systems.
  • Page 591 perfTTmon To add the Fabric Mode Top Talker: Switch:admin> perfttmon --add fabricmode To delete the Fabric Mode Top Talker: Switch:admin> perfttmon --del fabricmode To display the Fabric Mode Top Talker output: Switch:admin> perfttmon --show dom 1 pid perfttmon --show dom 1 pid ================================================================= Src_PID Dst_PID...

  • Page 592: Pkicreate

    pkiCreate pkiCreate Creates public key infrastructure (PKI) objects. Synopsis pkicreate Description Use this command to create PKI objects such as a pass-phrase switch private key and CSR and to install a root certificate. This command does not create the switch certificate. Switch certificate should be obtained offline from the Certificate Authority.

  • Page 593: Pkiremove

    pkiRemove pkiRemove Removes existing public key infrastructure (PKI) objects. Synopsis pkiremove Description Use this command to remove PKI objects including the switch private key, private key pass-phrase, CSR, root certificate, and switch certificate. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 594: Pkishow

    pkiShow pkiShow Displays existing public key infrastructure (PKI) objects. Synopsis pkishow Description Use this command to display PKI objects, such as switch private key, private key pass-phrase, CSR, root certificate, and switch certificate. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 595: Policy

    policy policy Displays or modifies the encryption and authentication algorithms for security policies. Synopsis policy option type number [-enc method] [-auth algorithm] [-pfs value] [-dh group] [-seclife seconds] Description Use this command to display or modify the encryption and authentication algorithms for security policies.
  • Page 596 policy -dh group Specifies the Diffie-Hellman group used in PFS negotiation. This operand is valid only with IKE policies. The default is 1. Values include: Fastest as it uses 768 bit values, but least secure. 14 Slowest as it uses 2048 bit values, but most secure. -seclife seconds Security association lifetime in seconds.
  • Page 597 policy To display all IPSec policy settings: switch:admin> policy --show ipsec all IPSec Policy 2 ----------------------------------------- Authentication Algorithm: SHA-1 Encryption: AES-128 SA Life (seconds): 28800 IPSec Policy 29 ----------------------------------------- Authentication Algorithm: SHA-1 Encryption: AES-128 SA Life (seconds): 28800 Operation Succeeded To change (delete and re-create) a policy: switch:admin>...

  • Page 598: Portaddress

    portAddress portAddress Assigns the lower 16 bits of the Fibre Channel Port ID. Synopsis portaddress --bind [slot_number/]port_number [16-bit_address] [--auto] portaddress --unbind [slot_number/]port_number portaddress --show [[slot_number/]port_number] portaddress --findPID 24-bit_Port_ID portaddress --help Description Use this command to bind the 16-bit address to the lower two bytes of a port 24-bit Fibre Channel address, or to unbind the currently bound address for the specified port.
  • Page 599 portAddress Displays the currently bound address attributes for the specified port. This --show command shows the lowest two bytes of the Fibre Channel address as well as the current setting for auto mode. If a port is not specified, the display shows the Partition Address Mode value (0, 1, or 2) and all ports on the current partition.
  • Page 600 portAddress 0x1e00 8 bit 0x1f00 8 bit 0x1000 8 bit 0x1100 8 bit 0x1200 8 bit 0x1300 8 bit 0x1400 8 bit 0x1500 8 bit 0x1600 8 bit 0x1700 8 bit To display the port address binding for port 28: switch:admin>portaddress --show 5/18 Index Slot Port Area...

  • Page 601: Portalpashow

    portAlpaShow portAlpaShow Displays the Arbitrated Loop Physical Addresses (AL_PAs) of devices attached to a port. Synopsis portalpashow [slotnumber/]portnumber Description Use this command to display the AL_PAs of devices connected to a port, and whether these devices are public or private. If the specified port is not an active FL_Port or if no AL_PAs are present, this command prints an error.

  • Page 602: Portbeacon

    portBeacon portBeacon Sets port beaconing mode. Synopsis chassisbeacon [mode] [slot]port chassisbeacon --help Description Use this command to enable or disable beaconing on a specified port. When beaconing mode is turned on, the port LEDs flash green at various rates across the chassis. The beaconing continues until you turn it off.

  • Page 603: Portbuffershow

    portBufferShow portBufferShow Displays the buffer usage information for a port group or for all port groups in the switch. Synopsis portbuffershow [[slotnumber/]portnumber] Description Use this command to display the current long distance buffer information for the ports in a port group.
  • Page 604 portBufferShow Operands When invoked without operands, this command displays the long distance buffer information for all the port groups of the switch. The following operands are optional: slotnumber For bladed systems only, specifies the slot number of the port group to display, followed by a slash (/).

  • Page 605: Portcamshow

    portCamShow portCamShow Displays port-based filter CAM utilization. Synopsis portcamshow [slotnumber/]portnumber Description Use this command to display the current filter Content-Addressable Memory (CAM) utilization of a specified port. The command displays the following information: SID used Total number of CAM entries used by this port. Note that each CAM entry, either source ID (SID) or destination ID (DID) CAM, can be shared among a certain number of ports, depending on the ASIC.
  • Page 606 portCamShow Examples To display the filter CAM utilization for a single port on a switch: switch:user> portcamshow 3/2 -------------------------------------------------- Area SID used DID used SID entries DID entries 350400 2b2200 2b1200 220400 -------------------------------------------------- SID Free, DID Free: (61, 511) To display port CAM entries on shared ports: In the following example, port 7/31 and 7/39 are shared ports and 7/31 is the primary port.

  • Page 607: Portcfg

    portCfg portCfg Manages configuration parameters for VE_ports and GbE ports. Synopsis portcfg action [slot/] ge_port arguments portcfg action [slot/]ve_port options arguments portcfg action [slot/][ge_port options arguments Description Use this command to manage configuration parameters for ports and Gigabit Ethernet (GbE) ports on the Brocade 7800/FX8-24 platforms and the FC Router (Brocade 7500/7500E/FR4-18i).
  • Page 608 portCfg Note On the Brocade 7800 and FX8-24 platforms IPv6 addresses are not supported in the Fabric OS v6.3.0 release. IPv6 addresses are supported on the Brocade 7500/7500E and FR4-18i. Operands This command has the following operands: slot For bladed systems only, specifies the slot number of the port to be configured, followed by a slash (/).
  • Page 609 portCfg portcfg iproute [slot/][ge]port option arguments Valid options and arguments for iproute are: create dest_ipaddr [gateway_router] metric Creates an IP route. Specify the following dest_ipaddr Specifies the destination IP address in either IPv6 or IPv4 format: dest_IPv6_addr/prefix_len Specifies the destination IPv6 address of the virtual port, if IPv6 is used. The address must be an IPv6 global, unicast address, followed by a prefix.
  • Page 610 portCfg To create an IP interface using IPv6 with a prefix: switch:admin> portcfg ipif 8/ge0 create 2000::800:3333:1234/64 1500 Operation Succeeded To delete an IP interface: switch:admin> portcfg ipif 4/ge0 delete 192.168.100.50 Operation Succeeded To create a static IP route with a metric of 2 using an IPv4 address: switch:admin>...
  • Page 611 portCfg fciptunnel Creates a Fibre Channel over IP (FCIP) tunnel. The circuit-specific attributes are optional. An FCIP tunnel may consist of zero or more FCIP circuits. A working FCIP tunnel must contain at least one FCIP circuit. The syntax for portcfg fciptunnel is as follows: portcfg fciptunnel [slot/]ve_port options [tunnel_arguments] [circuit_arguments]...
  • Page 612 portCfg -t |--tape-pipelining 0|1 Enables (1) or disables (0) Tape Pipelining on the specified FCIP tunnel. If Tape Pipelining is enabled, FastWrite should also be enabled. -c |--compression compression_level Configures compression on the specified FCIP tunnel. By default, compression is disabled (0). Specify one of the following values: Compression disabled Standard compression Moderate compression (Brocade 7800 only)
  • Page 613 portCfg --ficon-read-blk 0|1 Enables (1) or disables (0) FICON read Tape Read Block ID emulation. This feature permits FICON write channel programs containing embedded read block ID commands (CCWs) with a byte count of exactly four bytes to be processed as emulated commands during write emulation processes.
  • Page 614 portCfg --write-chain value Defines the maximum amount of data that can be contained in a single CCW chain. If this value is exceeded, emulation is suspended. The default value is 3 Mb (3000000 bytes) The range is 1 Mb-5 Mb. --oxid-base value Defines the base value of an entry pool of 256 OXIDs supplied to emulation-generated exchanges.
  • Page 615 portCfg fcipcircuit Creates an FCIP circuit on an existing tunnel. Use this command to configure additional circuits. The circuit-specific parameters are optional. The syntax for portcfg fcipcircuit is as follows: portcfg fcipcircuit [slot/]ve_port option circuit_ID options [arguments] [optional_arguments] The following options and arguments are supported with fcipcircuit: create circuit_ID remote_ip_addr local_ip_addr comm_rate Creates an FCIP circuit.
  • Page 616 portCfg -x |--metric metric Specifies the metric for the configured circuit. The valid range is 0 - 1. The default value is 0. A lower metric assigns a higher priority to the circuit. As data is flowing through the FCIP tunnel, it automatically traverses the lowest metric cost circuits.
  • Page 617 portCfg Path MTU Disc: 0 VLAN ID: 0 L2CoS: F: 0 H: 0 M: 0 L: DSCP: 0 H: 0 M: 0 L: Flags: 0x00000000 To set the compression rate to ‘moderate’ on the tunnel: switch:admin> portcfg fciptunnel 1/12 modify -c 2 Operation succeeded To enable and configure FICON emulation on the tunnel: switch:admin>portcfg fciptunnel 1/12 modify -F 1 --ficon xrc 1...
  • Page 618 portCfg ge_port Specifies the number of the port to be configured, relative to its slot for bladed systems. The GbE ports on the Brocade 7500/7500E, and FR4-18i are numbered ge0 - ge1. Use the switchShow command for a list of valid ports.
  • Page 619 portCfg Optional arguments for fciptunnel create and modify include: -n remote_wwn Specifies the remote-side FC entity WWN. -d description Specifies a descriptor for the FCIP tunnel, for example, "Tunnel 0 to San Jose Office". -c 0|1 Disables (0) or enables (1) compression on the specified tunnel. By default, compression is disabled.
  • Page 620 portCfg -p Control L2 CoS Specifies the pL2_Class_of_Service/Priority for the FCIP control connection as defined in the IEEE 802.1p specification. The range is 0-7. The default is 0. -P L2 CoS Specifies the PL2 Class of Service/Priority for the FCIP data connection as defined in the IEEE 802.1p specification.
  • Page 621 portCfg When specifying vc_num, either the -Q or the -P option or both must be specified. -Q dscp Specifies the Differentiated Services Code Point (DSCP) value to be modified. Use the portShow fciptunnel geport all -qosmap command to display current values. Supported range is 0-63. -P l2cos Specifies the L2 Class Of Service (COS) Tagging value.
  • Page 622 portCfg fastwrite Configures the FC port for FC Fastwrite. Enables or disables FC Fastwrite between two Brocade 7500 routersor two Brocade chassis with FR4-18i blades connected by Fibre Channel ISLs. FastWrite mitigateslatency effects on SCSI writes, and improves throughputover a high-latency link. The blade first should be enabled for FC Fastwrite using fastWriteCfg.
  • Page 623 portCfg ficon Use this command to enable or disable FICON emulation in an FCIP tunnel and modify associated parameters onan FCIP tunnel on a 'virtual' E_Port. A feature key is required to enable any of the FICON emulation processing. The tunnel must be down or disabled to issue and process the FICON commands.
  • Page 624 portCfg by hosts (channels) attached at the opposite side. Too small of a value results in poor performance. The value should be chosen based upon the typical tape channel program that requires optimum performance. The default value is 32. The range is 1-100. -b |--rdMaxPipe value Defines the maximum number of tape read channel commands (CCWs) that can enter the read pipeline for a single device whether all the CCWs...
  • Page 625 portCfg Examples To add an ARP entry: switch:admin> portcfg arp ge0 add 192.168.255.25 00:01:02:03:04:60 Operation Succeeded To create an FCIP tunnel using an IPV4 address: switch:admin> portcfg fciptunnel ge0 create 2 192.168.255.2 192.168.255.20 100000 Operation Succeeded To create an FCIP tunnel using IPV6: switch:admin>...
  • Page 626 portCfg To create a mirror port: switch:admin> portcfg mirrorport 2/4 --enable Please confirm enable of Mirror Port (Y,y,N,n): [n] y To configure a range of ports as RSCN-suppressed: switch:admin> portcfg rscnsupr 2/4-7 --enable To add an entry to the VLAN tag table: switch:admin>...
  • Page 627 portCfg routeadd destination netmask [gateway] Adds a route to the management station for an existing CP or GbE port (CP or GbE designation is made automatically). You must specify the destination IP address and the subnet mask when adding a management route. You must create the IP addresses for the CP and the GbE port interfaces before you can add a route to the routing table.

  • Page 628: Portcfgalpa

    portCfgAlpa portCfgAlpa Configures the AL_PA offset on a specified port or range of ports. Synopsis portcfgalpa [slot/]port, mode Description Use this command to set the Arbitrated Loop Physical Address (AL_PA) offset on a port or a range of ports to either 0x0 (default) or 0x13. Changes made by this command are persistent across switch reboots and power cycles.

  • Page 629: Portcfgautodisable

    portCfgAutoDisable portCfgAutoDisable Name Enables or disables the port auto disable flag. Synopsis portcfgautodisable --enable [slot/]port[-port] portcfgautodisable --disable [slot/]port[-port] Description Use this command to enable or disable the auto disable feature for a specified port or a range of ports. If the ports are already in the requested configuration, no action is taken. If a range of ports is specified, some of which are already in the requested configuration, a notification is generated, and no action is taken for those ports only.
  • Page 630 portCfgAutoDisable To enable the auto disable feature on a port range. switch:admin> portcfgautodisable --enable 0-8 To enable the auto disable feature on a range of ports, some of which were previously enabled. The following example enables port 4. switch:admin> portcfgautodisable --enable 2-4 Same configuration for port 2 Same configuration for port 3 To disable the auto disable feature on a port range.

  • Page 631: Portcfgcreditrecovery

    portCfgCreditRecovery portCfgCreditRecovery Enables or disables credit recovery on a port. Synopsis portcfgcreditrecovery --disable | --enable [slot/]port Description Use this command to enable or disable credit recovery on a port. The credit recovery feature enables credits or frames to be recovered. Only ports configured as long distance ports can utilize the credit recovery feature.

  • Page 632: Portcfgdefault

    portCfgDefault portCfgDefault Restores the port configuration to factory default values. Synopsis portcfgdefault [slot/][ge]port Description Use this command to reset any special port configuration values to their factory defaults. This command persistently disables ports capable of routing, which is the factory default value. You can view the current port configuration using the portCfgShow command.

  • Page 633: Portcfgeport

    portCfgEport portCfgEport Enables or disables E_Port capability on a port. Synopsis portcfgeport [slot/]port,mode Description Use this command to enable or disable E_Port capability on a port. E_Port capability is enabled by default. When an interswitch link (ISL) is connected to a port and the port's E_Port capability is disabled, the ISL is segmented, and all traffic between the switches stops.

  • Page 634: Portcfgexport

    portCfgEXPort portCfgEXPort Sets a port to be an EX_Port, and sets and displays EX_Port configuration parameters. Synopsis portcfgexport [slotnumber/]portnumber portcfgexport [-a admin] portcfgexport [-f fabricid] portcfgexport [-r ratov] portcfgexport [-e edtov] portcfgexport [-d domainid] portcfgexport [-p pidformat] portcfgexport [-t fabric_parameter] portcfgexport [-m port mode] portcfgexport [-i mode] Description...
  • Page 635 portCfgEXPort If the Fabric Parameter value is “Auto Negotiate”, the port ID format, R_A_TOV, and E_D_TOV values display the negotiated values indicated by “(N)” next to them. The negotiated values are what the edge switch specifies in the ELP request. If the state is “Not OK”, the R_A_TOV and E_D_TOV display “Not Applicable”.
  • Page 636 portCfgEXPort an error message is posted, and the command fails. Valid values are as follows: Brocade Native mode. McDATA Open Fabric mode. McDATA Fabric mode. MCDATA fabric legacy mode. Note that this mapping between mode values and modes is NOT the same as the mapping used when setting interoperability modes with the interopMode, command.

  • Page 637: Portcfgfillword

    portCfgFillword portCfgFillword Configures the fill word for a single 8G FC port. Synopsis portcfgfillword [slotnumber/]portnumber, mode portcfgfillword --help Description Use this command to configure the fill word of an 8G FC port. This command is not applicable to non-8G FC ports. This command disables and re-enables the port and the port comes online with the new fill word setting.

  • Page 638: Portcfgfportbuffers

    portCfgFportBuffers portCfgFportBuffers Configures F_Port buffer allocation. Synopsis portcfgfportbuffers --enable [slot/]port buffers portcfgfportbuffers --disable [slot/]port Description Use this command to change the default buffer allocation for an F_Port and to allocate a specified number of buffers to the port. When port buffer allocation is enabled, the number of buffers specified override the default F_Port buffer allocation.

  • Page 639: Portcfggport

    portCfgGport portCfgGport Designates a port as a G_Port; removes G_Port designation. Synopsis portcfggport [slot/]port,mode Description Use this command to designate a port as a G_Port. After successful execution of this command, the switch attempts to initialize the specified port as an F_Port only, and does not attempt loop initialization (FL_Port) on the port.

  • Page 640: Portcfgislmode

    portCfgISLMode portCfgISLMode Enables or disables ISL R_RDY mode on a port. Synopsis portcfgislmode [slot/]port,mode Description Use this command to enable or disable interswitch link read-ready (ISL R_RDY) mode on a port. Use the portCfgShow command to determine whether ISL R_RDY mode is enabled on a port. In ISL R_RDY mode, the port sends a primitive signal that the port is ready to receive frames.
  • Page 641 portCfgISLMode To disable ISL R_RDY mode on a port: switch:admin> portcfgislmode 1/3, 0 See Also configure, portCfgLongDistance, portCfgShow Fabric OS Command Reference 53-1001337-01...

  • Page 642: Portcfglongdistance

    portCfgLongDistance portCfgLongDistance Configures a port to support long distance links. Synopsis portcfglongdistance [slot/]port [distance_level] [vc_translation_link_init] [desired_distance] Description Use this command to allocate sufficient numbers of full size frame buffers on a particular port or to support a specified long distance link. The port can only be used as an E_Port. Changes made by this command are persistent across switch reboots and power cycles.
  • Page 643 portCfgLongDistance port Specify the number of the port to be configured relative to its slot for bladed systems. Use switchShow to display a list of valid ports. This operand is required. distance_level Specify the long distance level as one of the following (the numerical value representing each distance_level is shown in parentheses): L0 (0) Specify L0 to configure the port as a regular port.
  • Page 644 portCfgLongDistance Examples To configure a switch port 63 to support a 100 km link and be initialized using the long distance link initialization protocol: switch:admin> portcfglongdistance 4/15 LS 1 100 switch:admin> portshow 4/15 portCFlags: 0x1 portFlags: 0x20001 PRESENT LED portType: portState: 2 Offline portPhys:...

  • Page 645: Portcfglport

    portCfgLport portCfgLport Configures a port as an L_Port. Synopsis portcfglport [[slot/]port] locked_mode [private_mode] [duplex_mode]] Description Use this command to designate a port as an L_Port, and to configure its behavior. When a port is designated as an L_Port, the switch attempts to initialize that port as a fabric L_Port (FL_Port). The switch will never attempt a point-to-point (F_Port) initialization on the port.
  • Page 646 portCfgLport Examples To configure ports 8, 14, and 15 as locked L_Ports: switch:admin> portcfglport 4/8 4/14-15, 1 switch:admin> portcfgshow [output from other slots suppressed] Ports of Slot 4 9 10 11 12 13 14 15 -----------------+--+--+--+--+----+--+--+--+----+--+--+--+----+--+--+-- Speed AN AN AN AN AN AN AN AN AN AN AN AN AN AN AN AN...

  • Page 647: Portcfggemediatype

    portcfgGeMediaType portcfgGeMediaType Configures the media type for a GbE port. Synopsis portcfggemediatype GbE_port media_type portcfggemediatype --help Description Use this command to configure the media type for the ge0 and ge1 ports on the Brocade 7800 platform. Two media types are supported, copper and optical (sfp). When a media type is not specified, this command displays the current media type for the specified GbE port.

  • Page 648: Portcfgnpivport

    portCfgNPIVPort portCfgNPIVPort Enables or disables N_Port ID virtualization (NPIV) functionality on a port. Synopsis [slot/]port mode Description Use this command to enable or disable NPIV functionality on a port. N_Port ID Virtualization (NPIV) enables a single Fibre Channel protocol port to appear as multiple, distinct ports, providing separate port identification within the fabric for each operating system image behind the port as if each operating system image had its own unique physical port.
  • Page 649 portCfgNPIVPort Examples To display the current NPIV port configuration: switch:admin> portcfgshow Ports of Slot 0 9 10 11 12 13 14 15 -----------------+--+--+--+--+----+--+--+--+----+--+--+--+----+--+--+-- Speed AN AN AN AN AN AN AN AN AN AN AN AN AN AN AN AN Fill Word AL_PA Offset 13 ..

  • Page 650: Portcfgnport

    portCfgNPort portCfgNPort Enables or disables N_Port functionality for an Access Gateway port. Synopsis portcfgnport [port_number | port_range] [mode] Description Use this command to enable or disable N_Port functionality for an Access Gateway port. The enabled N_Port automatically comes online if it is connected to an enterprise fabric switch that supports NPIV.

  • Page 651: Portcfgpersistentdisable

    portCfgPersistentDisable portCfgPersistentDisable Persistently disables a port or a range of ports. Synopsis portcfgpersistentdisable portcfgpersistentdisable [slot/]port | [slot/]port_range portcfgpersistentdisable index | index_range Description Use this command to persistently disable a port or a range of ports. Persistently disabled ports remain disabled across power cycles, switch reboots, and switch enables. By default, a port is enabled persistently, unless the port is capable of routing.
  • Page 652 portCfgPersistentDisable index_number| index_range Specifies the index number or a range of index numbers (index1-index2) for the ports to be persistently disabled. Port index ranges are supported only if PortSwap is disabled. Examples To disable a single port persistently: switch:admin> portcfgpersistentdisable 2/4 To disable a range of ports persistently: switch:admin>...

  • Page 653: Portcfgpersistentenable

    portCfgPersistentEnable portCfgPersistentEnable Persistently enables a port or a range of ports. Synopsis portcfgpersistentenable portcfgpersistentenable [slot/]port | [slot/]port_range portcfgpersistentenable index | index_range Description Use this command to persistently enable a port or a range of ports. If the port is connected to another switch when this command is issued, the fabric may reconfigure.
  • Page 654 portCfgPersistentEnable Examples To enable a single port persistently: switch:admin> portcfgpersistentenable 2/4 To enable a range of ports persistently: switch:admin> portcfgpersistentenable 2/4-8 To enable multiple port ranges persistently: switch:admin> portcfgpersistentenable 2/24-26 3/10-12 4/3-4 To enable a port persistently by specifying its index number: switch:admin>...

  • Page 655: Portcfgqos

    PortCfgQos PortCfgQos Enables or disables QoS, sets the default configuration, and sets and resets the ingress rate limit. Synopsis portcfgqos --default | --disable | --enable [slot/]port portcfgqos --setratelimit [slot /]port ratelimit portcfgqos --resetratelimit [slot/]port portcfgqos --help Description Use this command to enable or disable Adaptive Networking/Quality of Service (AN/QoS) on a port, to set or reset the ingress rate limit for the specified port, and to set the default behavior.
  • Page 656 PortCfgQos configuration. For example if the rate limit is set at 4 Gbps and the port comes online only at 2 Gbps, no enforcement is needed. Specify an ingress rate in Mbps. Supported values for ratelimit are: 200, 400, 600, 800, 1000, 1500, 2000, 2500, 3000, 3500, 4000, 5000, 6000, 7000, and 8000.

  • Page 657: Portcfgshow

    portCfgShow portCfgShow Displays port configuration settings. Synopsis portcfgshow portcfgshow [slot/]port portcfgshow option [slot/][ge_port] [arguments] [optional_arguments] Description Use this command to display the current configuration of a port. The behavior of this command is platform-specific; output varies depending on port type and platform, and not all options are supported on all platforms.
  • Page 658 portCfgShow Trunk Port Displays ON when port is set for trunking. Displays (..) or OFF when trunking is disabled on the port. This value is set by the portCfgTrunkPort command. Long Distance Displays (..) or OFF when long distance mode is off; otherwise, displays long distance levels as follows: LE The link is up to 10 km.
  • Page 659 portCfgShow EX_port. Displays ON when the port is configured as an EX_Port. Otherwise displays (..) or OFF. This value is set by the portCfgExPort command. Mirror Port Displays ON when Mirror Port is enabled on the port. Displays (..) or OFF when Mirror Port is disabled.
  • Page 660 portCfgShow Displays supported on the Brocade 7800 /FX8-24 and on the Brocade 7500/7500E/FR4-18i platforms ipif Displays the IP interface for both ports of the tunnel. IPv6 addresses are supported on the Brocade 7500/7500E and FR4-18i platforms, but not on the Brocade 7800/FX8-24 platforms iproute Displays the IP route on the specified GbE port.
  • Page 661 portCfgShow Trunk Port ON ON ON ON ON ON ON ON ON ON ON ON ON ON ON ON Long Distance ........ VC Link Init ..
  • Page 662 portCfgShow To display the configuration settings for a single port on a switch with Access Gateway enabled: switch:admin> portcfgshow 8 Area Number: Speed Level: AUTO(HW) Fill Word: 0(Idle-Idle) Trunk Port Locked N_Port Persistent Disable NPIV capability QOS Port Port Auto Disable: Rate Limit F_Port Buffers To display the configuration settings for all ports on a switch with Access Gateway enabled:...
  • Page 663 portCfgShow To display the QoS configuration for an EX_Port (QoS over FCR deployment): switch:admin> switchshow | grep EX-Port Online EX-Port 10:00:00:05:1e:41:4a:45 "Tom_100" (fabric id = 25 )(Trunk master) switch:admin> portcfgshow 16 Area Number: Speed Level: AUTO(HW) Fill Word: 0(Idle-Idle) AL_PA Offset 13: Trunk Port Long Distance VC Link Init...
  • Page 664 portCfgShow Iproute Configuration: IP Address Mask Gateway Metric ------------------------------------------------------ IPv6ddress Gateway Metric ------------------------------------------------------- Fciptunnel configuration: IPV4 FCIP TUNNEL(S) ------------------------------------------- Tunnel ID 0 Remote IP Addr 192.168.100.40 Local IP Addr 192.168.100.50 Remote WWN Not Configured Local WWN 10:00:00:05:1e:40:68:78 Compression off Fastwrite off Tape Pipelining off Committed Rate 100000 Kbps (0.100000 Gbps) SACK on...
  • Page 665 portCfgShow To display VLAN tagging configured on a Brocade FR4-18i FC Router blade (refer to the portCfg help page for an explanation of the displayed parameters): switch: admin> portcfgshow vlantag 8/ge0 Port: 8/ge0 IpIfAddress VlanId L2 CoS Dest IP Address Flags ----------------------------------------------------- 192.168.10.1...

  • Page 666: Portcfgspeed

    portCfgSpeed portCfgSpeed Configures the speed for a single port. Synopsis portcfgspeed [slotnumber/]portnumber, speed Description Use this command to set the speed on a specified port. This command disables and then re-enables the port, and the port comes online with the new speed setting. The configuration is saved in nonvolatile memory and is persistent across switch reboots or power cycles.

  • Page 667: Portcfgtrunkport

    portCfgTrunkPort portCfgTrunkPort Enables or disables trunking on a port. Synopsis portcfgtrunkport [slot/]port[,] mode Description Use this command to enable or disable trunking on a port. Use switchCfgTrunk to enable or disable trunking on all ports of a switch. When the command is executed to update the trunking configuration, the port to which the configuration applies is disabled and subsequently re-enabled with the new trunking configuration.

  • Page 668: Portcfgvexport

    portCfgVEXPort portCfgVEXPort Configures a port as a VEX_Port connected to an FC-IP and sets and displays VEX_Port configuration parameters. Synopsis portcfgvexport [slotnumber/]portnumber portcfgvexport [-a admin] portcfgvexport [-f fabricid] portcfgvexport [-r ratov] portcfgvexport [-e edtov] portcfgvexport [-d domainid] portcfgvexport [-p pidformat] portcfgvexport [-t fabric_parameter] portcfgvexport [-m portmode] Description...
  • Page 669 portCfgVEXPort The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS commands" and Appendix A, "Command Availability" for details. Operands This command has the following operands: -a admin Enables or disables the specified port as a VEX_Port.
  • Page 670 portCfgVEXPort Front WWN: 50:06:06:9e:20:9f:ce:10 Principal Switch: principal WWN: 10:00:00:60:69:c0:05:8a Fabric Parameters: Auto Negotiate R_A_TOV: 9000(N) E_D_TOV: 2000(N) Edge fabric's primary wwn: N/A Edge fabric's version stamp: N/A To set the fabric ID of port 2/21 to 5 and the port ID format to core: switch:admin>...

  • Page 671: Portcmd

    portCmd portCmd Diagnoses intelligent ports. Synopsis portcmd action [slot/]geport arguments optional_arguments Description Use this command to invoke the end-to-end IP path performance (ipperf) characterization feature, to ping or trace a route to a destination IP host from an intelligent GbE port, or to determine the path characteristics between a local data source and a remote data sink.
  • Page 672 portCmd The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS commands" and Appendix A, "Command Availability" for details. Operands This command has the following operands: slot For bladed systems only, specify the slot number of the port to be configured, followed by a slash (/).
  • Page 673 portCmd -c L2 Class-of-Service Specifies Class of Service/Priority, as defined by IEEE 802.1p. Valid values are 0 to 7. The default is 0. This operand is optional with the -v option Pings a destination IP address from one of the source IP interfaces on the --ping GbE port.
  • Page 674 portCmd -q service_type Specifies the type of service in the traceroute request. The default is 0 and service_type must be an integer from 0 to 255. This operand is optional. -w wait_time Sets the time, in milliseconds, to wait for a response to a probe. The default is 5000 milliseconds.
  • Page 675 portCmd bytes rx Number of bytes received. PDUs tx Number of protocol data units transmitted. PDUs rx Number of protocol data units received. bad CRC headers rx Number of bad CRC headers received. bad CRC payloads rx Number of bad CRC payloads received. out of seq PDUs rx Number of out-of-sequence PDUs received.
  • Page 676 portCmd Examples To verify if packets can be sent to the destination IP address with maximum wait_time specified: switch:admin> portcmd --ping 12/ge0 -s 2007:7:30:32:227:138:10:120 -d \ 2007:7:30:32:227:77:0:60 -w 29000 Pinging 2007:7:30:32:227:77:0:60 from ip interface 2007:7:30:32:227:138:10:120 on 12/ge0 with 64 bytes of data Reply from 2007:7:30:32:227:77:0:60: bytes=64 rtt=0ms ttl=255 Reply from 2007:7:30:32:227:77:0:60: bytes=64 rtt=1ms ttl=255 Reply from 2007:7:30:32:227:77:0:60: bytes=64 rtt=0ms ttl=255...
  • Page 677 portCmd TPerf is generating traffic on 16 priority: low ********************************************************************** Tunnel ID: 16 High Priority Medium Priority Low Priority bytes tx 5491960 5280520 5071880 bytes rx 408280 407240 460960 PDUs tx 10209 10183 11527 PDUs rx 10208 10182 11526 bad CRC headers rx bad CRC payloads rx out of seq PDUs rx flow control count...

  • Page 678: Portdebug

    portDebug portDebug Sets debug level and verbose level of port modules. Synopsis portdebug dbg_lvl, vbs_lvl Description Use this command to set the debug level and verbose level of port modules. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 679: Portdisable

    portDisable portDisable Disables a port or a range of ports. Synopsis portdisable [slot/]port_number | [slot/]port_range portdisable -i index | index_range Description Use this command to disable a port or a range of ports. If the port is connected to another switch when disabled, the fabric may reconfigure.
  • Page 680 portDisable To disable a port by specifying its index number: switch:admin> portdisable 176 To disable a range of ports by specifying the corresponding port index range: switch:admin> portdisable 170-176 To disable multiple ports by specifying multiple port index ranges: switch:admin> portdisable 30-36 170-176 see Also portCfgPersistentDisable, portCfgPersistentEnable, portEnable, portShow, switchShow Fabric OS Command Reference...

  • Page 681: Portenable

    portEnable portEnable Enables a port or a range of ports. Synopsis portenable [slot/]port_number | [slot/]port_range portenable -i index | index_range Description Use this command to enable a port or a range of ports. If a port is connected to another switch when this command is issued, the fabric may reconfigure.
  • Page 682 portEnable To enable a port by specifying its index number: switch:admin> portenable 176 portenable: portSwap feature enabled. To enable a range of ports by specifying the corresponding port index range: switch:admin> portenable 170-176 portenable: portSwap feature enabled. To enable multiple ports by specifying multiple port index ranges: switch:admin>...

  • Page 683: Porterrshow

    portErrShow portErrShow Displays port error summary. Synopsis porterrshow Description Use this command to display an error summary for all ports. The display contains one output line per port. Numeric values exceeding 999 are displayed in units of thousands (k), or millions (m) if indicated.
  • Page 684 portErrShow 527k 39k 6.6k 2.2k (output truncated) See Also portShow, portStatsShow Fabric OS Command Reference 53-1001337-01...

  • Page 685: Portfencing

    portFencing portFencing Configures the Fabric Watch port fencing feature. Synopsis portfencing --show portfencing --enable port_type -area_type area portfencing --disable port_type -area_type area portfencing --help Description Use this command to enable error reporting for the Fabric Watch port fencing feature on all ports of a specified type and to configure the ports to report errors for a certain Fabric Watch area.
  • Page 686 portFencing Cyclic redundancy check error Invalid word transmission Protocol error Link reset C3TX_TO Class 3 frame discard due to timeout. Displays the command usage. --help Examples To enable reporting of CRC errors on all E_Ports: switch:admin> portFencing --enable e-port -area_type CRC To display the current port fencing configuration: switch:admin>...

  • Page 687: Portflagsshow

    portFlagsShow portFlagsShow Displays the port status bitmaps for all ports in a switch. Synopsis portflagsshow Description Use this command to display the following status for a port: SNMP Displays whether the port is online or offline. Physical Displays the port physical status. Valid values are In_Sync and No_Light. Flags Displays whether there is an SFP inserted in the port, whether the port is active, and the port type.

  • Page 688: Portledtest

    portLedTest portLedTest Cycles user port LEDs. Synopsis portledtest [-npass count][-ports itemlist] Description Use this command to exercise the user port LEDs in the current switch on and off by setting the ATTN LEDs to green for the ON condition and unlighted for the OFF condition. The SPEED LEDs are initially set to black before the command execution.

  • Page 689: Portlogclear

    portLogClear portLogClear Clears the port log. Synopsis portlogclear Description Use this command to clear the port log. It is recommended that you clear the port log before triggering an activity so that the log displays only the log events related to that activity. If the port log is disabled, portLogClear enables it.

  • Page 690: Portlogconfigshow

    portLogConfigShow portLogConfigShow Displays the current port log configuration. Synopsis portlogconfigshow Description Use this command to display the current port log configuration. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS commands" and Appendix A, "Command Availability"...

  • Page 691: Portlogdisable

    portLogDisable portLogDisable Disables the port log facility. Synopsis portlogdisable Description Use this command to disable the port log facility. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS commands" and Appendix A, "Command Availability"...

  • Page 692: Portlogdump

    portLogDump portLogDump Displays the port log without page breaks. Synopsis portlogdump [count[, saved[, portid]]] Description Use this command to display the port log, listing all entries in the log without page breaks. This command displays the same information as portLogShow, but portLogShow prompts you to press Enter between each page.

  • Page 693: Portlogdumpport

    portLogDumpPort portLogDumpPort Displays the port log of a specified port without page breaks. Synopsis portlogdumpport portid Description Use this command to display the port log for a specified port. The command displays all entries in the log without any page breaks. This command is identical to portLogShowPort, except that portLogShowPort prompts you to press Enter to display the next page.

  • Page 694: Portlogenable

    portLogEnable portLogEnable Enables the port log facility. Synopsis portLogEnable Description Use this command to enable the port log facility. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS commands" and Appendix A, "Command Availability"...

  • Page 695: Portlogeventshow

    portLogEventShow portLogEventShow Displays information about port log events. Synopsis portlogeventshow Description Use this command to display information about the ID associated with the various port log events. The Disabled field indicates whether the port log for that event ID is disabled (1) or enabled (0). Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 696: Portloginshow

    portLoginShow portLoginShow Displays port login status of devices attached to the specified port. Synopsis portloginshow [slotnumber/]portnumber Description Use this command to display port login status received from devices attached to the specified port. For each login, this command displays the following fields: Type Type of login can display one of the following: FDISC, Discover F_Port Service Parameters or Virtual N_Port login.

  • Page 697: Portlogpdisc

    portLogPdisc portLogPdisc Sets or clears the debug_pdisc_flag. Synopsis portlogpdisc 0 | 1 Description Use this command to set or clear the debug_pdisc_flag. This command is part of the environmental monitor. A setting of 1 enables logging of Port Discovery parameters. The PDISC log is disabled by default.

  • Page 698: Portlogreset

    portLogReset portLogReset Enables the port log facility. Synopsis portlogreset Description Use this command to enable the port log facility. Notes Refer to portLogClear for events that may disable the port log facility. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 699: Portlogresize

    portLogResize portLogResize Resizes the port log to include a specified number of entries. Synopsis portlogresize num_entries Description Use this command to resize the port log to include a specified number of entries. If the specified number of entries is less than the already configured port log size, there is no change. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 700: Portlogshow

    portLogShow portLogShow Displays the port log with page breaks. Synopsis portlogshow [count[, saved]] Description Use this command to display the port log with page breaks. This command displays the same information as portLogDump, but one page at a time. The port log is a circular log file in the switch firmware which can save up to 65,536 entries depending on the hardware platform.
  • Page 701 portLogShow fcin Indicates an incoming Fibre Channel information unit. fcout Indicates an outgoing Fibre Channel information unit. read Indicates an information unit header log from a read operation. write Indicates an information unit header log from a write operation. Indicates an information unit header log of an FC error frame. frame Indicates a Fibre Channel frame payload.
  • Page 702 portLogShow Tx & Rx Header words 0,1,4 (R_CTL,D_ID,S_ID,OX_ID,RX_ID) and the first payload word. reject FC-PH reject reason. busy FC-PH busy reason. ctin Argument 0 is divided into two 16-bit fields: [A] a bit map indicating whether subsequent arguments are valid (0001 means argument 1 is valid, 0003 means arguments 1 and 2 are valid).
  • Page 703 portLogShow Offline Testing Faulty E_Port F_Port Segmented pstate Active State Link Reset: LR Transmit State Link Reset: LR Receive State Link Reset: LRR Receive State Link Failure: NOS Transmit State Link Failure: NOS Receive State Offline: OLS Transmit State Offline: OLS Receive State Offline: Wait for OLS State LIP reason 8001...
  • Page 704 portLogShow Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. Operands This command has the following operands: count Specifies the maximum number of lines to display.

  • Page 705: Portlogshowport

    portLogShowPort portLogShowPort Displays the port log of a specified port with page breaks. Synopsis portlogshowport [portid] Description Use this command to display the port log of a specified port with page breaks. This command displays the same information as portLogDumpPort, except that portLogDumpPort does not prompt you to press Enter to display the next page.

  • Page 706: Portlogtypedisable

    portLogTypeDisable portLogTypeDisable Disables the port log of a specified type. Synopsis portlogtypedisable id Description Use this command to disable the port log for a specified port log type. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 707: Portlogtypeenable

    portLogTypeEnable portLogTypeEnable Enables the port log of a specified port log type. Synopsis portlogtypeenable id Description Use this command to enable the port log for a specified port log type. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 708: Portloopbacktest

    portLoopbackTest portLoopbackTest Performs a functional test of port N->N path. Synopsis portloopbacktest [--slot number][-nframes count][-lb_mode mode] [-spd_mode mode] [-ports itemlist] ceeportloopbacktest [--slot number][-nframes count][-lb_mode mode][-spd_mode mode] [-ports itemlist] Description Use this command to verify the functional operation of the switch. The portLoopbackTest and ceePortLoopbackTest commands are platform-specific versions of the same test.
  • Page 709 portLoopbackTest The Brocade DCX series cannot negotiate speeds of 1 Gbps. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS commands" and Appendix A, "Command Availability"...
  • Page 710 portLoopbackTest ERRSTAT Errors were found in the ASIC statistics. INIT Port failed to initialize. PORTDIED A previously initialized port went to an uninitialized state. STATS Errors were found in the ASIC statistics. TIMEOUT Did not receive a frame in the given timeout period. XMIT Frame transmission failure.

  • Page 711: Portmirror

    portMirror portMirror Adds, deletes, or displays mirror connections. Synopsis portmirror --show portmirror --add [slotnumber/]portnumber sourceID DestID portmirror --delete [sourceID DestID] Description Use this command to add, delete, or show a mirror connection between two ports, a source and a destination port. The SourceID must be local to the switch.
  • Page 712 portMirror State The state of the mirror connection. The state can either be "Defined" or "Enabled." In both cases, the port mirroring connection is persistently stored. A connection that is "Defined" has not been hardware-configured because at least one port is not online. A connection that is "Enabled" has been configured in the hardware.
  • Page 713 portMirror To add a port mirror connection between two local switch ports: switch:admin> portmirror --add 2/1 0x011400 0x012400 To add a port mirror connection between a local switch port and a remote switch port: switch:admin> portmirror --add 2/1 0x011400 0x240400 To delete a port mirror connection between two local switch ports: switch:admin>...

  • Page 714: Portname

    portName portName Assigns a name to the specified port, or displays a port name. Synopsis portname [slotnumber/]portnumber [name] Description Use this command to assign or display a port name. This name is included in the portShow output; it should not be confused with the world wide port name. Like all other configurable port attributes, port name persists across reboots and power cycles.

  • Page 715: Portperfshow

    portPerfShow portPerfShow Displays port throughput performance. Synopsis portperfshow [-tx -rx | -tx | -rx] [interval] Description Use this command to display throughput information for all ports on a switch or chassis. Output includes the number of bytes received and transmitted per interval. Throughput values are displayed as either bytes, kilobytes (k), megabytes (m), or gigabytes (g).
  • Page 716 portPerfShow To display bandwidth without the interval option: switch:user> portperfshow -tx -rx ==================================================== 4.00 4.00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ==================================================== 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ========================================================== 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ===========================================================...

  • Page 717: Portrouteshow

    portRouteShow portRouteShow Displays routing tables for the specified port. Synopsis portrouteshow [slotnumber/]portnumber Description Use this command to display the port address ID for a specified port and the contents of the following port routing tables: External unicast routing table Displays how the specified port forwards unicast frames to remote domains in the following format: domain_number: ports_bitmap domain_number...
  • Page 718 portRouteShow Examples To display the routing tables for a port: switch:user> portrouteshow 4/15 port address ID: 0x02bf00 external unicast routing table: 1: 0x4 (vc=3) 2: 0x10000 (vc=0) internal unicast routing table: 60: 0x8000 (vc=2) 63: 0x1000 (vc=5) broadcast routing table: 0x10000 See Also bcastShow, fabricShow, switchShow, topologyShow, uRouteShow...

  • Page 719: Portshow

    portShow portShow Displays status and configuration parameters for ports and GbE ports. Synopsis portshow [slot/][ge]port portshow option [slot/]ge_port [optional_args] portshow option [ all |ve_port] arguments [optional_arguments] portshow option [ all |ge_port] arguments [optional_arguments] Description Use this command to display general port status and specific configuration parameters for a specified port, GbE port, or VE_Port.
  • Page 720 portShow The following general information is displayed when the command is issued for a non-GbE port without additional arguments: portName Name assigned to the port by the portName command. portHealth Current health of the port (requires a Fabric Watch license). Authentication Authentication type and associated parameters (ifapplicable) used on the port at port online.
  • Page 721 portShow port generation number The port’s generation number for the last offline state change. portId The port’s 24-bit port ID. portIfId The user port’s interface ID. portWwn The port’s world wide name. portWwn of devices(s) connected The World Wide Port Names of connected devices. Distance The port's long-distance level.
  • Page 722 portShow Edge fabric’s version stamp If the EX_PORT is connected to an edge switch with FCS policy enforcement, the version of the security database is displayed. Otherwise displays N/A. The portShow command displays FCoE ports with "Protocol: FCoE" and "portSpeed: 10Gbps". Only a subset of information is displayed.
  • Page 723 portShow portPhys: In_Sync portScn: E_Port Trunk master port Flow control mode 4 port generation number: portId: d70600 portIfId: 43020012 portWwn: 20:06:00:05:1e:55:63:05 portWwn of device(s) connected: Distance: normal portSpeed: N8Gbps LE domain: 0 FC Fastwrite: OFF Interrupts: Link_failure: 0 Frjt: Unknown: Loss_of_sync: 9 Fbsy: Lli:...
  • Page 724 portShow To display port status for a 1 GbE port on a Brocade 7800 Extension switch: switch:admin> portshow ge2 Eth Mac Address: 00.05.1e.54.b1.17 Port State: 1 Online Port Phys: In_Sync Port Flags: 0x4003 PRESENT ACTIVE LED Port Speed: 1G To view xlate domains, you must issue the command on a Brocade 7500/7500E or a chassis with an FR4-18i blade.
  • Page 725 portShow Parity_err: Ols_in: 2_parity_err: Ols_out: CMI_bus_err: Port part of other ADs: No To display an FCoE port: switch:admin> portshow 11/1 portName: portHealth: HEALTHY Authentication: None portDisableReason: None portCFlags: 0x1 portFlags: 0x2cb03 PRESENT ACTIVE F_PORT G_PORT U_PORT LOGICAL_ONLINE LOGIN NOELP LED NSREG ACCEPT FLOGI portType: 17.0 portState: 1...
  • Page 726 portShow ge_port Specifies the number of the GbE port to be displayed relative to the slot number. The 1 GbE ports are numbered ge0 - ge9 on the Brocade FX8-24 blade and ge0 - ge5 on the Brocade 7800 switch. The 10 GbE ports on the Brocade FX8-24 blade are numbered xge0 and xge1 (only).
  • Page 727 portShow 105.80.0.151 255.255.255.255 * 105.80.0.152 255.255.255.255 * 105.80.0.153 255.255.255.255 * 105.83.0.150 255.255.255.255 * U H L 105.83.0.151 255.255.255.255 * U H L 105.83.0.152 255.255.255.255 * U H L 105.83.0.153 255.255.255.255 * U H L Flags: U=Usable G=Gateway H=Host C=Created(Interface) S=Static L=LinkLayer(Arp) To display the IP Interfaces and static routes configured on a chassis with an FR4-18i FC Router blade:...
  • Page 728 portShow To display the ARP tables on the Brocade 7800 extension switch: switch:admin> portshow arp ge1 Port: ge1 IP Address Mac Address Flags --------------------------------------------------------------------- 192.168.1.100 00:05:1e:54:b1:16 Resolved 192.168.1.101 00:05:1e:54:b1:16 Resolved switch:admin> portshow arp ge5 No Arp Entries found switch:admin> portshow arp ge4 Port: ge4 IP Address Mac Address...
  • Page 729 portShow ve_port Displays information for a single specified FCIP tunnel. On the Brocade 7800/FX8-24 specify the VE_Port number associated with the tunnel configured on one of the GbE ports. VE_Ports are numbered 16-23 on the Brocade 7800 and 12 - 31 on theBrocade FX8-24 blade. Displays information for all configured FCIP tunnels.
  • Page 730 portShow -itn Displays data at the Initiator Target nexus (SID/DID) level. -itl Displays data at the Initiator Target LUN (SID/DID/LUN) level. -twb Displays data at the Exchange (SID/DID/LUN/Exchange) level. command Specifies the type of information to be displayed. This operand is optional; if omitted, the default (-stats) is used.
  • Page 731 portShow -xrcperf Displays the emulated XRC Performance. When issued with -clear, this command starts the emulated XRC performance monitor. -structs Displays FICON control block sizes. -emul Displays the current FICON emulation statistics. -act Displays the current Active Exchange information. options The following additional option is supported.
  • Page 732 portShow To display an FCIP tunnel with FICON disabled: switch:admin> portshow fciptunnel 16 ------------------------------------------- Tunnel ID: 16 Tunnel Description: Admin Status: Enabled Oper Status: Up Compression: On (Moderate) Fastwrite: Off Tape Acceleration: Off TPerf Option: Off IPSec: Disabled Remote WWN: Not Configured Local WWN: 10:00:00:05:1e:55:59:e9 Peer WWN: 10:00:00:05:1e:55:68:05 Circuit Count: 4...
  • Page 733 portShow Circuit ID: 17.1 Circuit Num: 1 Admin Status: Enabled Oper Status: Up Remote IP: 100.83.0.101 Local IP: 100.80.0.101 Metric: 0 Min Comm Rt: 150000 Max Comm Rt: 150000 SACK: On Min Retrans Time: 100 Max Retransmits: 8 Keepalive Timeout: 5000 Path MTU Disc: 0 VLAN ID: 0 L2CoS: F:...
  • Page 734 portShow To display additional performance parameters on tunnel 16 (add -c to display the info for all circuits): switch:admin> portshow fciptunnel 17 --perf ------------------------------------------- Tunnel ID: 17 Tunnel Description: Admin Status: Enabled Oper Status: Up Compression: On (Moderate) Fastwrite: Off Tape Acceleration: Off TPerf Option: Off IPSec: Disabled...
  • Page 735 portShow Admin Status: Enabled Oper Status: Up Remote IP: 101.83.0.110 Local IP: 101.80.0.110 Metric: 0 Min Comm Rt: 150000 Max Comm Rt: 150000 SACK: On Min Retrans Time: 100 Max Retransmits: 8 Keepalive Timeout: 5000 Path MTU Disc: 0 VLAN ID: 0 L2CoS: F: 0 H: 0 M:...
  • Page 736 portShow To display the FCIP tunnel hierarchy: switch:admin> portshow fciptunnel 17 --hier FCIP Tunnel 17 | Circuit Count: 4 | TCP Count: 16 | Circuits: |--> Circuit 17.3 TCP Count: 4 TCP Connections: |---> TCP Conn 17.3:68740649 |---> TCP Conn 17.3:68740880 |--->...
  • Page 737 portShow 2 ge4 ----s 7h35m5s 0.00 0.00 150/150 3 ge4 ----s 7h35m5s 0.00 0.00 150/150 0 ge5 ----s 7h35m2s 0.00 0.00 150/150 1 ge5 ----s 7h35m1s 0.00 0.00 150/150 2 ge5 ----s 7h34m59s 0.00 0.00 150/150 3 ge5 ----s 7h34m58s 0.00 0.00 150/150...
  • Page 738 portShow 2 Bps 30s Avg, 2 Bps Lifetime Avg 754 Output Packets 0 pkt/s 30s Avg, 0 pkt/s Lifetime Avg 118180 Input Bytes 0 Bps 30s Avg, 4 Bps Lifetime Avg 757 Input Packets 0 pkt/s 30s Avg, 0 pkt/s Lifetime Avg To display QoS prioritization for a circuit: switch:admin>...
  • Page 739 portShow 0 Output Bytes 0 Bps 30s Avg, 0 Bps Lifetime Avg 0 Output Packets 0 pkt/s 30s Avg, 0 pkt/s Lifetime Avg 0 Input Bytes 0 Bps 30s Avg, 0 Bps Lifetime Avg 0 Input Packets 0 pkt/s 30s Avg, 0 pkt/s Lifetime Avg To display FCP emulation statistics using the command with two levels and a single command: switch:admin>...
  • Page 740 portShow Total number of emulated Write Bytes= 9005990808925 Number of emulated Write Chains 113180437 Total number of emulated Write CCWs = 272902411 Average Emulated Writes Blocksize 33000 Average Writes in Emulated Chains Write emulation slowdowns Slowdowns at Start of Chain Slowdowns at End of chain Single Chain Emulation Counter Write Paced Count...
  • Page 741 portShow 041055B680 0x106301640106**** 0x0004 0x0000 0x0000 switch:admin> portshow xtun 16 -ficon -fchb 041055B680 FCHB (FICON CHannel Block - one per LPAR) Count = 1 --------------------------------------------------------------- (0x) Side Path: CU Count Emul ChTIN CuTIN =========== ==== ================== ======== ========== ====== 041055B680 0x106301640106**** 0x0004 0x0000...
  • Page 742 portShow In Fabric OS v6.2.0 and later, each GbE port is associated with a TCP history, which tracks the state of statistics at the moment of a TCP connection failure. An entry is logged for the TCP connection when it encounters any of the following failures: •...
  • Page 743 portShow Counter of out-of-order segments OOO H Out-of-order segments high water mark Dup ACK Counter of duplicate ACKs Rtx Dup ACK Counter of retransmit packets due to duplicate ACK Fast Rtx Fast retransmits F Rtx H Fast retransmits high water mark Slow Rtx Slow retransmits InFlt H...
  • Page 744 portShow slot For bladed systems only, specify the slot number of the port to be configured, followed by a slash (/). [ge]port Specifies the GbE port number to be displayed relative to its slot for bladed systems. GbE ports on the Brocade 7500/7500E and FX-18i are numbered ge0 and ge1.
  • Page 745 portShow -active Displays active FDCBs. -epcb Displays Emulation Control Block (port specific). -fhpb Displays FICON Host Path Block. -fdpb adrs Displays FICON Device Path Block. -fchb Displays FICON Channel Control Block. -fcub Displays FICON Control Unit Control Block. -fdcb adrs Displays FICON Device Control Block.
  • Page 746 portShow VC QoS Mapping off DSCP Marking (Control): 0, DSCP Marking (Data): 0 VLAN Tagging Not Configured TCP Byte Streaming on Status : Inactive Connected Count: 0 Port: ge1 ------------------------------------------- Tunnel ID 0 Tunnel Description "This is a test Description of this tunnel" Remote IP Addr 192.168.10.10 Local IP Addr 192.168.10.2 Remote WWN Not Configured...
  • Page 747 portShow Sender stats: smoothed roundtrip 0 ms (HWM 1 ms), variance 0 (HWM 562) peer advertised window 20443136 Bytes negotiated window scale (shift count) 9 congestion window 169464 Bytes slow start threshold 112500 Bytes operational mode: congestion avoidance 0 packets queued: TCP sequence# NXT(3715211236) 0 packets in-flight (HWM 3) Send.Unacknowledged(TCP sequence# 3715211236) recovery: retransmit timeout 500 ms, duplicate ACKs 0...
  • Page 748 portShow 34118172 output Bytes 1655 Bps 30s avg, 4305 Bps lifetime avg 951 packets lost (retransmits) 12.25% loss rate 30s avg 38563 input packets 2 pkt/s 30s avg, 4 pkt/s lifetime avg 8208640 input Bytes 699 Bps 30s avg, 1035 Bps lifetime avg Data transfer TCP connection: Local 10.10.9.100:4100, Remote 10.62.0.100:3226 Performance stats:...
  • Page 749 portShow IPSec Policy 1 ----------------------------------------- Authentication Algorithm: SHA-1 Encryption: AES-128 SA Life (seconds): 28800 Pre-Shared Key testingFIPSandIPSec To display the TCIP connection history after the connection was severed: Switch:admin> portshow fciptunnel ge1 0 -hist Port: ge1 ------------------------------------------- Tunnel ID 0 Tunnel Description "This is a test Description of this tunnel"...
  • Page 750 portShow Local IP Addr 192.168.114.1 Remote WWN Not Configured Local WWN 10:00:00:05:1e:38:84:65 Compression off Fastwrite off Tape Pipelining off Committed Rate 900000 Kbps (0.900000 Gbps) SACK on Min Retransmit Time 100 Keepalive Timeout 10 Max Retransmissions 8 VC QoS Mapping off DSCP Marking (Control): 0, DSCP Marking (Data): 0 VLAN Tagging Not Configured TCP Byte Streaming on...
  • Page 751 portShow Uptime 5 minutes, 26 seconds TCP data and control statistics snapshots have been reset for tunnel 0 To display the FC data path credit data: switch:admin> portshow fciptunnel 9/ge0 0 -credits Slot: 9 Port: ge0 ------------------------------------------- Tunnel ID 0 Tunnel Description "This is a test Description of this tunnel"...
  • Page 752 portShow IKE Policy 1 IPSec Policy 1 Pre-Shared Key testingFIPSandIPSec To display QoS Mappings: switch:admin> portshow fciptunnel 9/ge0 0 -qosmap Slot: 9 Port: ge0 ------------------------------------------- Tunnel ID 0 Tunnel Description "This is a test Description of this tunnel" Remote IP Addr 10.62.0.100 Local IP Addr 10.10.9.100 Remote WWN Not Configured Local WWN 10:00:00:05:1e:39:d4:5a...
  • Page 753 portShow VLAN Tagging Not Configured TCP Byte Streaming on Status : Active Connected Count: 9 Uptime 23 hours, 19 minutes, 45 seconds ============================================ Streaming TCP vars: ============================================ head index = 24 tail index = 24 Current Count Pending Frames High = 16 Segment Count High Data Mover Restarts...
  • Page 754 portShow To display the routes that use internal management interfaces. switch:admin> portshow iproute ge1 Port: ge1 IP Address Mask Gateway Metric ----------------------------------------------------- 192.168.112.0 255.255.255.0 192.168.112.61 0 Interface 192.168.255.0 255.255.255.0 192.168.255.2 Interface Management 10.1.1.61 255.255.255.255 192.168.255.1 Management 192.168.102.0 255.255.255.0 192.168.112.1 192.168.106.0 255.255.255.0 192.168.112.1 192.168.255.0...

  • Page 755: Portstats64Show

    portStats64Show portStats64Show Displays the 64-bit hardware statistics for a port. Synopsis portstats64show [slotnumber/]portnumber Description Use this command to display the following hardware statistics for a port. Two integers are reported for most values. In such cases, the top word is the most significant. stat64_wtx Number of 4-byte words transmitted.
  • Page 756 portStats64Show stat64_rateRxPeakByte Rx peak Byte rate (Bps). stat64_PRJTFrames Number of P_RJT frames transmitted. stat64_PBSYFrames Number of P_BSY transmitted. stat64_inputBuffersFull Occasions on which input buffers are full. stat64_rxClass1Frames Class 1 frames received. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 757 portStats64Show er64_toolong top_int : Frames longer than maximum bottom_int : Frames longer than maximum er_bad_eof top_int : Frames with bad end-of-frame bottom_int : Frames with bad end-of-frame er64_enc_out top_int : Encoding error outside of frames 9131157 bottom_int : Encoding error outside of frames er64_disc_c3 top_int : Class 3 frames discarded bottom_int : Class 3 frames discarded...

  • Page 758: Portstatsclear

    portStatsClear portStatsClear Clears the hardware statistics of a port. Synopsis portstatsclear [slot/]port Description Use this command to clear the hardware statistics for a specified port. This command also clears the hardware statistics for the associated three ports in the target port's quad, including ALPA-based CRC monitor, End-to-End monitor, and Filter-based performance monitor statistics.

  • Page 759: Portstatsshow

    portStatsShow portStatsShow Displays port hardware statistics. Synopsis portstatsshow [slotnumber/]portnumber portstatsshow [ge | ip | fcip ] [slotnumber/]geportnumber [ipaddress | tunnelnumber] Description Use this command to display port hardware statistics counters. Some counters are platform- or port-specific and display only on those platforms and ports. All statistics have a maximum 32-bit value of 4,294,967,295.
  • Page 760 portStatsShow er_toolong The number of frames longer than the maximum frame length. er_bad_eof The number of frames with bad end-of-frame. er_enc_out The number of encoding error outside frames. er_bad_os The number of invalid ordered sets (platform- and port-specific). er_rx_c3_timeout The number of class 3 frames discarded due to timeout (platform- and port-specific).
  • Page 761 portStatsShow ge_stat_tx_pause_frms The number of pause frames transmitted on the GbE port. ge_stat_rx_frms The number of frames received on the GbE port. ge_stat_rx_octets The number of octets received on the GbE port. ge_stat_rx_ucast_frms The number of unicast frames received on the GbE port. ge_stat_rx_mcast_frms The number of multicast frames received on the GbE port.
  • Page 762 portStatsShow ipaddress Optionally specifies an IP address to display statistics only for the specified IP address. fcip Displays the GbE statistics on all FCIP tunnels. This operand is not supported on the Brocade 7800 and FX8-24 platforms. tunnelnumber Optionally specifies a tunnel ID to display statistics only for the specified FCIP tunnel.
  • Page 763 portStatsShow ge_stat_tx_mcast_frms GE transmitted multicast frames ge_stat_tx_bcast_frms GE transmitted broadcast frames ge_stat_tx_vlan_frms GE transmitted vlan frames ge_stat_tx_pause_frms GE transmitted pause frames ge_stat_rx_frms GE received frames ge_stat_rx_octets GE received octets ge_stat_rx_ucast_frms GE received unicast frames ge_stat_rx_mcast_frms GE received multicast frames ge_stat_rx_bcast_frms GE received broadcast frames ge_stat_rx_vlan_frms GE received vlan frames...
  • Page 764 portStatsShow To display GbE port statistics for a VE_Port with an active FCIP tunnel on a Brocade 7800 Extension switch: switch:admin> portstatsshow ge ge1 ge_stat_tx_frms GE transmitted frames ge_stat_tx_octets GE transmitted octets ge_stat_tx_ucast_frms GE transmitted unicast frames ge_stat_tx_mcast_frms GE transmitted multicast frames ge_stat_tx_bcast_frms GE transmitted broadcast frames ge_stat_tx_vlan_frms...

  • Page 765: Portswap

    portSwap portSwap Swaps area numbers of two ports. Synopsis portswap [slotnumber1/]portnumber1 [slotnumber2/]portnumber2 Description Use this command to swap area numbers for a pair of ports. Both ports must be disabled prior to executing this command and the port-swapping feature must be enabled using portSwapEnable. The result of this operation is persistent across reboots and power cycles.

  • Page 766: Portswapdisable

    portSwapDisable portSwapDisable Disables the portswap feature. Synopsis portswapdisable Description Use this command to disable the portswap feature. The portSwap command cannot be used after this feature is disabled. The disabled state of the portswap feature is persistent across reboots and power cycles. Enabling or disabling the portswap feature does not affect previously performed portswap operations.

  • Page 767: Portswapenable

    portSwapEnable portSwapEnable Enables the portswap feature. Synopsis portswapenable Description Use this command to enable the portswap feature. The portSwap command cannot be used unless the feature is first enabled with this command. The enabled state of the portswap feature is persistent across reboots and power cycles. Enabling or disabling the portswap feature does not affect previously performed portswap operations.

  • Page 768: Portswapshow

    portSwapShow portSwapShow Displays the state of the portswap feature. Synopsis portswapshow Description Use this command to display the enabled state of the portswap feature, as well as port and area information for ports whose area number differs from the default area number. The default area number of a port is the same as its switch port number.

  • Page 769: Porttest

    portTest portTest Performs a functional test of a switch in a live fabric. Synopsis porttest [-ports itemlist][-iteration count][-userdelay time][-timeout time][-pattern pattern] [-patsize size][-seed seed][-listtype porttype] Description Use this command to isolate problems in a single replaceable element and to trace problems to near-end terminal equipment, far-end terminal equipment, or the transmission line.
  • Page 770 portTest • From the default switch to a switch that supports Virtual Fabrics but has the VF feature disabled. To ensure coverage of all ports, it is recommended that you run portTest before enabling Virtual Fabrics on the switch. It is recommended that you run portTest before you configure the logical switches or disable the Virtual Fabric feature on the switches connected to the ports you are testing.

  • Page 771: Porttestshow

    portTestShow portTestShow Displays information from portTest. Synopsis porttestshow [-ports itemlist] Description Use this command to display a snapshot of information from portTest. The following information displays: • Pass or fail information on a given port. • Port type tested. • Current state of portTest (NO TEST, TESTING, or TEST DONE).

  • Page 772: Portthconfig

    portThConfig portThConfig Configures Fabric Watch event thresholds per port type. Synopsis porthconfig --set port_type -area area [optional_argumnents][-nosave] portthconfig --set ve-port -area ve_port_area [optional_argumnents][-nosave] portthconfig --show [port_type] [-area area] [optional_argumnents] portthconfig --show [ve-port] [-area ve_port_area ] [optional_argumnents] portthconfig --apply port_type -area area [-thresh_level default | custom] [-alarm_level default| custom] portthconfig --apply ve-port -area ve_port area [-thresh_level default | custom] [-alarm_level default| custom]...
  • Page 773 portThConfig For more information on port threshold configuration procedures, including default values for specific area high/low thresholds, refer to the Fabric Watch Administrator’s Guide. Operands This command has the following operands: Configures the Fabric Watch thresholds for monitoring a specified area for all --set ports of a specified port type.
  • Page 774 portThConfig UTIL Port utilization PKTLOSS Packet loss State change optional_arguments The following operands are optional and valid only with the --show option. They work as filters to display partial views -current_status Displays current values for a specified port type and area, as registered by Fabric Watch, or for all port types and areas.
  • Page 775 portThConfig none No action. -buffer value Specifies the buffer value for in range behavior. A buffer defines a zone within which event criteria are met, rather than a single threshold value. This operand is required with the -trigger above | below options and valid only with these options.
  • Page 776 portThConfig To apply the new custom settings so they become effective: switch:admin> portthconfig --apply port -area crc -action cust -thresh_level custom To display the port threshold configuration for all port types and areas: switch:admin> portthconfig --show PortType: E-port Area : CRC ThLevel : Def ActLevel: Def High...
  • Page 777 portThConfig TimeBase: Minute Value Trigger : Above Action: None Trigger : Below Action: None Buffer: Custom: Value : 100 Default: Value : 100 Area : LR ThLevel : Def ActLevel: Def High Custom: TimeBase: Minute Value : 500 Trigger : Above Action: None Trigger : Below Action: None Default: TimeBase: Minute...
  • Page 778 portThConfig Trigger : Below Action: None Default: TimeBase: Minute Value Trigger : Above Action: None Trigger : Below Action: None Buffer: Custom: Value : 100 Default: Value : 100 To display current values for all port types and areas: Switch:admin> portthConfig show -current PortType|Area |PortNo|C#...
  • Page 779 portThConfig To display current values for CRC errors for all port types and areas: Switch:admin> portthConfig --show -area CRC -current PortType|Area |PortNo|C# |Value |State --------|-------|------|----|---------|------- E-port |CRC |000005|n/a |0 |Info E-port |CRC |000007|n/a |0 |Info E-port |CRC |000032|n/a |0 |Info E-port |CRC |000038|n/a |0...

  • Page 780: Porttrunkarea

    portTrunkArea portTrunkArea Assigns or removes a trunk area (TA) from a port or port trunk group; displays masterless F_Port trunking configuration. Synopsis porttrunkarea --enable [slot/]port[-Range] -index port_index porttrunkarea --disable [slot/]port[-Range] porttrunkarea --disable all porttrunkarea --show disabled | enabled | trunk | all porttrunkarea --show slot/port[-Range] Description Use this command to assign a static trunk area (TA) on a port or port trunk group, to remove a TA...
  • Page 781 portTrunkArea deskew The time difference for traffic to travel over each F_Port trunk as compared to the F_Port trunk with the shortest travel time in the group. The value is expressed in nanoseconds divided by 10. The firmware automatically sets the minimum deskew value of the shortest F_Port trunk travel time to 15.
  • Page 782 portTrunkArea port Specifies the port number, relative to its slot on bladed systems. -Range Optionally specifies a port range. For example, 9/8-15 on an enterprise-class platform indicates slot 9, ports 8 - 15. Range of ports should fall in the octet trunk range starting from port 0 on a switch or blade.
  • Page 783 portTrunkArea Examples To enable masterless F_Port trunking on a standalone switch: 1. Disable ports 10-11 by executing portdisable port for each port to be included in the TA. 2. Enable Trunk Area for ports 10-11 with area number 37: switch:admin> porttrunkarea --enable 10-11 -index 11 2009/05/15-12:43:10, [SWCH-1012], 60, FID 128, INFO, sw0, Trunk Area (11) has been enabled for one or more ports Trunk area 11 enabled for ports 10 and 11.
  • Page 784 portTrunkArea 3. Show the TA port configuration (ports still disabled): switch:admin> porttrunkarea --show enabled Slot Port Type State Master ------------------------------------------- 125 125 125 126 ------------------------------------------- 4. Enable ports 13 and 14: switch:admin> portenable 10/13 switch:admin> portenable 10/14 5. Show the TA port configuration after enabling the ports: switch:admin>...

  • Page 785: Portzoneshow

    portZoneShow portZoneShow Displays the enforced zone type of the F_Ports and FL_Ports of a switch. Synopsis portzoneshow Description Use this command to display the enforced zone type of the F_Ports and FL_Ports of a switch. Output shows virtual port number (decimal), physical port number (decimal), online status, and if online, port type.

  • Page 786: Powerofflistset

    powerOffListSet powerOffListSet Sets the order in which slots are powered off. Synopsis powerofflistset Description Use this command to Modify the order in which slots are powered off. This command displays the current order, and then prompts you interactively to confirm or modify the power-off position for each slot.
  • Page 787 powerOffListSet 2nd slot to be powered off: (2..10) [9] 2 3rd slot to be powered off: (3..10) [8] 3 4th slot to be powered off: (4..10) [7] 4 5th slot to be powered off: (7..10) [7] 10 6th slot to be powered off: (7..9) [8] 9 7th slot to be powered off: (7..8) [8] 8 8th slot to be powered off: (7..7) [7] 7 Old POL...

  • Page 788: Powerofflistshow

    powerOffListShow powerOffListShow Displays the order in which slots are powered off. Synopsis powerofflistshow Description Use this command to display the order in which the physical slots are powered off. Whenever a power supply goes out of service or a field-replaceable unit (FRU) is inserted, the system's available power is compared to the system's required power to determine if there is enough power to operate.

  • Page 789: Psshow

    psShow psShow Displays power supply status. Synopsis psshow Description Use this command to display the current status of the switch power supplies. The status of each supply is displayed as: Power supply functioning correctly. absent Power supply not present. unknown Unknown power supply unit installed.

  • Page 790: Reboot

    reboot reboot Reboots the control processor (CP) in a switch or a director. Synopsis reboot [-f] Description When this command is issued on a switch connected to a fabric, all traffic to and from that switch stops. All Fibre Channel ports on that switch including E_Ports become inactive until the switch comes online.

  • Page 791: Routehelp

    routeHelp routeHelp Displays a list of FSPF-related commands. Synopsis routehelp Description Use this command to display a list of fabric-shortest-path-first (FSPF)-related commands. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS commands" and Appendix A, "Command Availability"...

  • Page 792: Secactivesize

    secActiveSize secActiveSize Displays the size of the active security database. Synopsis secactivesize Description Use this command to display the size of the active security database. The command also displays the maximum database size. For switches running Fabric OS v6.2.0 and later, the maximum security database size is 1 megabyte per logical switch.

  • Page 793: Secauthsecret

    secAuthSecret secAuthSecret Manages the DH-CHAP shared secret key information. Synopsis secauthsecret --show secauthsecret --set secauthsecret --remove value | --all Description Use this command to manage the DH-CHAP shared secret key database used for authentication. This command displays, sets, and removes shared secret key information from the database or deletes the entire database.
  • Page 794 secAuthSecret 1. WWN for which secret is being set up. 2. Peer secret: The secret of the peer that authenticates to peer. 3. Local secret: The local secret that authenticates peer. Press Enter to start setting up shared secrets > Enter WWN, Domain, or switch name (Leave blank when done): 10:00:00:60:69:80:05:14 Enter peer secret:...

  • Page 795: Seccertutil

    secCertUtil secCertUtil Manages certificates on a switch. Synopsis seccertutil seccertutil genkey [-nowarn] [-keysize 1024 | 2048] seccertutil delkey [-nowarn] seccertutil gencsr [-country country code] [-state state] [-locality locality] [ -org organization] [-orgunit organization unit] [-cn common name] seccertutil delcsr [-nowarn] seccertutil showcsr seccertutil delete [-ldapcacert] file name [-nowarn] seccertutil export [-ldapcacert] [-certname certificate name]] [-protocol ftp | scp] [-ipaddr IP...
  • Page 796 secCertUtil Operands This command has the following operands: genkey Generates a public/private key pair. This is the first step in setting up a third-party certificate. When prompted for a key size, enter either 1024 or 2048 bits. The greater the value, the more secure is the connection; however, performance degrades with size.
  • Page 797 secCertUtil -nowarn Deletes the specified file without confirmation. This operand is optional. export Exports a CSR to a host. This command is typically used to submit a CSR to the Certification Authority (CA) that issues the certificate. The following operands are optional; if omitted, the command prompts interactively for your input.
  • Page 798 secCertUtil -certname certificate name Specifies the certificate name. -login login name Specifies the login name for the server. -password password Specifies the password for the user account. When using SCP, for security reasons, do not enter a password on the command line. Use the interactive version instead.
  • Page 799 secCertUtil WARNING!!! About to delete CSR: 192.168.163.238.csr ARE YOU SURE (yes, y, no, n): [no] y To delete a CSR in non-interactive mode: switch:admin> seccertutil delcsr -nowarn To import an LDAP certificate from a remote host to the local switch in interactive mode: switch:admin>...
  • Page 800 secCertUtil switch:admin> seccertutil export -ldapcacert -protocol ftp -ipaddr 192.168.38.206 \ -remotedir /users/home/remote_certs -login abcd -passwd passwd -certname ldap.cer Success: exported LDAP certificate To delete an LDAP CA certificate in interactive mode: switch:admin> seccertutil delete -ldapcacert filename.pem WARNING!!! About to delete certificate: filename.cer ARE YOU SURE (yes, y, no, n): [no] Deleted LDAP certificate successfully To delete an LDAP CA certificate in non-interactive mode:...

  • Page 801: Secdefinesize

    secDefineSize secDefineSize Displays the size of the defined security database. Synopsis secdefinesize Description Use this command to display the size of the defined security database. The command also displays the maximum database size. For switches running Fabric OS v6.2.0 and later, the maximum security database size is 1 Megabyte per logical switch.

  • Page 802: Secglobalshow

    secGlobalShow secGlobalShow Displays the current internal security state information. Synopsis secglobalshow Description Use this command to display security server-specific information as a snapshot of its current state. The output may include information about the following: • General security parameters • The latest zone transaction •...
  • Page 803 secGlobalShow Security Defined DataSize 35 bytes Define Sum 215b Zone Size (include enabled configuration) 312 bytes Zone sum e04b215b sec_db: free primaryDLPhase 0 ----wwnDL State----- usec --------- LOG CACHE --------- 14:08:50 813905136 secipadm_ipchange receives notification 14:08:50 850588912 secProcessIPChange starts processing 14:08:50 850588912 secProcessIPChange acks completion [Output truncated] See Also...

  • Page 804: Sechelp

    secHelp secHelp Displays information about security commands. Synopsis sechelp Description Use this command to display a list of security commands with a brief description of the commands. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 805: Secpolicyabort

    secPolicyAbort secPolicyAbort Aborts all changes to the defined database that have not been saved. Synopsis secpolicyabort Description Use this command to abort all changes to the defined security database that have not been saved to flash memory and to abort changes to policy creation and modification operations from all the switches if a fabric-wide consistency policy is not set for the particular policy.

  • Page 806: Secpolicyactivate

    secPolicyActivate secPolicyActivate Saves and activates the Defined Security Policy Set. Synopsis secpolicyactivate Description Use this command to activate the current defined security policy to all switches in the fabric. This activates the policy set on the local switch or all switches in the fabric depending on the fabric-wide consistency policy.

  • Page 807: Secpolicyadd

    secPolicyAdd secPolicyAdd Adds members to an existing security policy. Synopsis secpolicyadd “name”, “member[;member...]” Description Use this command to add one or more members to an existing access policy. Each policy corresponds to a management method. The list of members of a policy acts as an access control list for that management method.
  • Page 808 secPolicyAdd “member” Specify a list of one or more member switches to be included in the security policy. The list must be enclosed in quotation marks; members must be separated by semicolons. Depending on the policy type, members are specified as follows. FCS_POLICY or SCC_POLICY Members This policy type requires member IDs to be specified as WWN strings, Domains, or switch names.

  • Page 809: Secpolicycreate

    secPolicyCreate secPolicyCreate Creates a new security policy. Synopsis secpolicycreate "name" [, "member[;member...]"] Description Use this command to create a new policy and to edit Switch Connection Control (SCC), Device Connection Control (DCC), and Fabric Configuration Server (FCS) policies on the local switch. All policies can be created only once, except for the DCC_POLICY_nnn.
  • Page 810 secPolicyCreate The DCC_POLICY_nnn name has the common prefix DCC_POLICY_ followed by a string of user-defined characters. These characters do not have to be capitalized like regular policy names. Valid values for DCC_POLICY_nnn are user-defined alphanumeric or underscore characters. The maximum length is 30 characters, including the prefix DCC_POLICY_.
  • Page 811 secPolicyCreate While creating the FCS policy, the local switch WWN is automatically included in the list. Switches included in the FCS list are FCS switches and the remaining switches in the fabric are non-FCS switches. Out of the FCS list, the switch that is in the first position becomes the Primary FCS switch and the remaining switches become backup FCS switches.

  • Page 812: Secpolicydelete

    secPolicyDelete secPolicyDelete Deletes an existing security policy. Synopsis secpolicydelete name Description Use this command to delete an existing security policy from the defined security database. Run secPolicyActivate to delete the policies from the active security policy list. Deleting a security policy does not cause any traffic disruption.
  • Page 813 secPolicyDelete To delete all stale DCC policies in the fabric: primaryfcs:admin> secpolicydelete ALL_STALE_DCC_POLICY About to clear all STALE DCC policies (yes, y, no, n): [no] y ARE YOU SURE See Also secPolicyAbort, secPolicyActivate, secPolicyAdd, secPolicyCreate, secPolicyDump, secPolicyRemove, secPolicySave, secPolicyShow Fabric OS Command Reference 53-1001337-01...

  • Page 814: Secpolicydump

    secPolicyDump secPolicyDump Displays the members of one or all existing security policies. Synopsis secpolicydump [“listtype”][, “name”] Description Use this command to display, without page breaks, the members of an existing policy in the active and defined (saved) databases. When issued without operands, this command displays the members of all security policies.
  • Page 815 secPolicyDump To display all security policies in the active database: switch:admin> secpolicydump "active" ____________________________________________________ ACTIVE POLICY SET FCS_POLICY Primary WWN DId swName -------------------------------------------------- 10:00:00:05:1e:39:5f:67 3 NeptuneSec 10:00:00:05:1e:90:09:4a - Unknown SCC_POLICY DId swName -------------------------------------------------- 10:00:00:05:1e:39:5f:67 3 NeptuneSec 10:00:00:05:1e:90:09:4a - Unknown DCC_POLICY_h1 Type DId swName --------------------------------------------------...
  • Page 816 secPolicyDump To display the FCS policies in the defined database: switch:admin> secpolicydump "Defined","FCS_POLICY" ____________________________________________________ DEFINED POLICY SET FCS_POLICY Primary WWN DId swName -------------------------------------------------- 10:00:00:05:1e:39:5f:67 3 NeptuneSec 10:00:00:05:1e:90:09:4a - Unknown To display the SCC policies in the defined database: switch:admin> secpolicydump "Defined","SCC_POLICY" ____________________________________________________ DEFINED POLICY SET SCC_POLICY...

  • Page 817: Secpolicyfcsmove

    secPolicyFCSMove secPolicyFCSMove Moves a member in the FCS policy. Synopsis secpolicyfcsmove [from, to] Description Use this command to move an FCS member from one position to another position in the FCS list. Only one FCS can be moved at a time. The first FCS switch in the list that is also present in the fabric is the Primary FCS.
  • Page 818 secPolicyFCSMove switch:admin> secpolicyfcsmove 3,1 ____________________________________________________ DEFINED POLICY SET FCS_POLICY Primary WWN DId swName -------------------------------------------------- 10:00:00:05:1e:35:cd:ef 200 switch3 10:00:00:05:1e:39:5f:67 2 switch1 10:00:00:05:1e:04:ef:0e 4 switch2 switch:admin> secpolicyactivate About to overwrite the current Active Policy Set. ARE YOU SURE (yes, y, no, n): [no] y secpolicyactivate command was completed successfully.

  • Page 819: Secpolicyremove

    secPolicyRemove secPolicyRemove Removes members from an existing security policy. Synopsis secpolicyremove “name” , “member[;member...]” Description Use this command to remove one or more members from an existing security policy. It is not possible to remove all members from the FCS_POLICY; the local switch WWN cannot be deleted from the FCS policy.
  • Page 820 secPolicyRemove parameter can be specified by port number separated by commas, and enclosed in either brackets or parentheses: for example, (2, 4, 6). Ports enclosed in brackets include the devices currently attached to those ports. The following examples illustrate several ways to specify the port values: (1-6) Selects ports 1 through 6.

  • Page 821: Secpolicysave

    secPolicySave secPolicySave Saves a defined security policy to persistent memory. Synopsis secpolicysave Description Use this command to save a defined security policy to persistent memory. Secpolicysave saves the modified SCC, DCC, and FCS policies to the Defined Security Policy Set on the local switch. Notes This command is always a local switch operation.

  • Page 822: Secpolicyshow

    secPolicyShow secPolicyShow Displays an existing security policy including the FCS policy. Synopsis secpolicyshow [“policy_set”[“, name”]] Description Use this command to display the members of an existing policy in the Active or Defined security policy set. The command can be issued from all FCS switches. This command displays the policy database one page at a time.
  • Page 823 secPolicyShow To display all security policies from defined databases: switch:admin> secpolicyshow "defined" ____________________________________________________ DEFINED POLICY SET FCS_POLICY Primary WWN DId swName _____________________________________________________ 10:00:00:60:69:30:15:5c 1 primaryfcs 10:00:00:60:69:30:1e:62 4 switch _________________________________________________________ See Also fddCfg, secPolicyAbort, secPolicyActivate, secPolicyAdd, secPolicyCreate, secPolicyDelete, secPolicyDump, secPolicyRemove, secPolicySave Fabric OS Command Reference 53-1001337-01...

  • Page 824: Secstatsreset

    secStatsReset secStatsReset Resets one or all security statistics to 0. Synopsis secstatsreset [name][,” domain[;domain]”] Description Use this command to reset one or all security statistics to 0. This command can be issued on any switch to reset the security statistics on the local switch or chassis. If an FCS policy is enabled and secStatsReset is issued on the primary FCS switch, this command can reset security statistics for any or all switches in the fabric.
  • Page 825 secStatsReset To access DCC policies, enter DCC_POLICY. Violations are not tracked for individual DCC policies. The statistics for all DCC_POLICY violations are grouped together. domain(s) Specify a list of domain IDs on which to reset the security statistics. Specify an asterisk (*) to represent all switches in the fabric or specify a list of domains, separated by semicolons and enclosed in quotation marks.

  • Page 826: Secstatsshow

    secStatsShow secStatsShow Displays one or all security statistics. Synopsis secstatsshow [name[, “domain[;domain]”]] Description Use this command to display one or all security statistics. This command can be issued on any switch to display local security statistics. If an FCS policy is enabled and secStatsShow is issued on the primary FCS switch, this command can retrieve and display the security statistics for any or all switches in the fabric.
  • Page 827 secStatsShow ILLEGAL_CMD To access DCC policies, enter DCC_POLICY. Violations are not tracked for individual DCC policies. The statistics for all DCC_POLICY violations are grouped together. domain Specify one or more domains for which to display the security statistics. Specify an asterisk (*) in quotation marks to represent all switches in the fabric or specify a list of domains separated by semicolons.

  • Page 828: Sensorshow

    sensorShow sensorShow Displays sensor readings. Synopsis sensorshow Description Use this command to display the current temperature, fan, and power supply status and readings from sensors located on the switch. The actual location of the sensors varies, depending on the switch type. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 829: Setcontext

    setContext setContext Sets the logical switch context to a specified FID. Synopsis setcontext FID Description Use this command to set the logical switch context to a specified fabric ID (FID). The FID uniquely defines a partition as a logical switch. Use lscfg --show -cfg to display currently configured partitions and their FIDs.

  • Page 830: Setdbg

    setDbg setDbg Sets the debug level of the specified module. Synopsis setdbg [module_name][level] Description Use this command to set the debug level of a specified module. Debug levels filter the display of debug messages to the serial console. By default, no debug messages are displayed. High debug level values can generate a large volume of messages, degrading the system response time.

  • Page 831: Setmodem

    setModem setModem Enables or disables modem dial-in to a control processor (CP). Synopsis setmodem [-e] | [-d] Description Use this command to enable or disable modem dial-in to a CP on those systems that support modem dial-in. When modem dial-in is enabled, you can log in to a CP through a modem, and a modem attached to the CP accepts the call.

  • Page 832: Setverbose

    setVerbose setVerbose Specifies module verbose level. Synopsis setverbose [module_name][level] Description Use this command to set the verbose level of the specified module. These levels filter the display of the debug message to the serial console. By default, no debug messages are displayed. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 833: Sfpshow

    sfpShow sfpShow Displays Small Form-factor Pluggable SFP information. Synopsis sfpshow sfpshow [slotnumber/]geportnumber [ -f] sfpshow -all Description Use this command to display information about Serial Identification SFPs (also known as module definition "4" SFPs). These SFPs provide extended information that describes the SFP’s capabilities, interfaces, manufacturer, and other information.
  • Page 834 sfpShow Port 2: -- Port 3: -- Port 4: -- Port 5: -- Port 6: -- Port 7: -- Port 8: -- Port 9: -- Port 10: id (sw) Vendor: BROCADE Serial No: UAA307360005530 Speed: 200,400,800_MB/s Port 11: id (sw) Vendor: BROCADE Serial No: UAJ10733CVGZZ6T Speed: 200,400,800_MB/s...
  • Page 835 sfpShow To display detailed information for GbE port 0 on a Brocade 7500: switch:admin> sfpshow ge0 Identifier: Connector: Transceiver: 050c402000000000 100,200_MB/s M5,M6 sw Inter_dist Encoding: 8B10B Baud Rate: (units 100 megabaud) Length 9u: (units km) Length 9u: (units 100 meters) Length 50u: (units 10 meters) Length 62.5u:15...
  • Page 836 sfpShow To display all SFP information: switch:user> sfpshow -all ============= Port ============= Identifier: Connector: Transceiver: 050c402000000000 100,200_MB/s M5,M6 sw Inter_dist Encoding: 8B10B Baud Rate: (units 100 megabaud) Length 9u: (units km) Length 9u: (units 100 meters) Length 50u: (units 10 meters) Length 62.5u:15 (units 10 meters) Length Cu:...

  • Page 837: Shellflowcontroldisable

    shellFlowControlDisable shellFlowControlDisable Disables XON/XOFF flow control on the console serial port. Synopsis shellflowcontroldisable Description Use this command to disable XON/XOFF flow control on the console serial port. Flow control is disabled by default. Because this command changes the flow control on the console serial port, it must be executed from a session that is logged in from the console serial port.

  • Page 838: Shellflowcontrolenable

    shellFlowControlEnable shellFlowControlEnable Enables XON/XOFF flow control on the console serial port. Synopsis shellflowcontrolenable Description Use this command to enable XON/XOFF flow control to the shell task. Flow control is disabled by default. Because this command changes the flow control on the console serial port, it must be executed from a session that is logged in from the console serial port.

  • Page 839: Slotpoweroff

    slotPowerOff slotPowerOff Removes power from a slot. Synopsis slotpoweroff slotnumber Description Use this command to turn off the power to a blade unit. The slot must have a valid blade unit present and the blade unit must be of a type that can be powered off. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 840: Slotpoweron

    slotPowerOn slotPowerOn Restores power to a slot. Synopsis slotpoweron slotnumber Description Use this command to turn on the power to a blade unit. The slot must have a valid blade unit present and the blade unit must be currently powered off. The slotShow command reports such slots as being in the state of INSERTED, NOT POWERED ON.

  • Page 841: Slotshow

    slotShow slotShow Displays the status of all slots in the system. Synopsis slotshow [-m] [-p] Description Use this command to display the current status of each slot in the system. Depending on the option used, the command retrieves information on blade type, blade ID, status, Brocade model name, and power usage for each slot in the switch or chassis.
  • Page 842 slotShow VACANT The slot is empty. INSERTED, NOT POWERED ON The blade is present in the slot but is turned off. POWERING UP The blade is present and powering on. LOADING The blade is present, powered on, and loading the initial configuration. DIAG RUNNING POST1 The blade is present, powered on, and running the POST (power-on self-test).
  • Page 843 slotShow CP BLADE ENABLED CP BLADE ENABLED CORE BLADE ENABLED UNKNOWN VACANT AP BLADE LOADING SW BLADE DIAG RUNNING POST1 SW BLADE INSERTED, NOT POWERED ON 1 To display power consumption information: switch:user> slotshow -p Slot Blade Type DC Power Status Consumption -------------------------------------------------...
  • Page 844 slotShow To display Brocade model names for each blade in a Brocade DCX-4S: switch:user> slotshow -m Slot Blade Type Model Name Status -------------------------------------------------- SW BLADE FC4-48 ENABLED SW BLADE FC4-48 ENABLED SW BLADE FC4-32 ENABLED UNKNOWN VACANT CP BLADE CP256 ENABLED CP BLADE CP256...

  • Page 845: Snmpconfig

    SnmpConfig SnmpConfig Manages the SNMP agent configuration. Synopsis snmpConfig --show | --set | --default [snmpv1 | snmpv3 | accessControl | mibCapability | systemGroup | seclevel] Description Use this command to manage the configuration of the SNMP agent in the switch. The configuration includes SNMPv1 and SNMPv3 configuration, access control list (ACL), MIB capability, system group, and security level settings.
  • Page 846 SnmpConfig In Fabric OS 6.3.0 and later, the --set snmpv3 command supports an interactive option to enable or disable informs by setting the parameter “SNMP Informs Enabled” to true or false. If informs are enabled, all trap destinations receive inform requests. If informs are disabled, all trap destinations receive trap requests.
  • Page 847 SnmpConfig Error Warning Informational Debug SNMPv3 Configuration Parameters Two user roles, snmpadmin and snmpuser are supported. The snmpadmin role provides read-write access and the snmpuser role provides read-only access. Entries are added to the USM table corresponding to each role. A total of three entries for snmpadmin and snmpuser respectively are supported.
  • Page 848 SnmpConfig Access Control Configuration Parameters The ACL check is as follows: there are six ACLs to restrict SNMP get, set, and trap operations to hosts under an host-subnet-area. The host-subnet-area is defined by comparing nonzero IP octets. For example, an ACL of 192.168.64.0 enables access by any hosts that start with the specified octets.
  • Page 849 SnmpConfig System Group Configuration Parameters sysDescr The system description. The default value is Fibre Channel switch. sysLocation The location of the system (switch). The default value is End User Premise. The string must be at least 4 characters in length; the maximum length is 255 characters.
  • Page 850 SnmpConfig Trap Recipient's IP address: [0.0.0.0] 1080::8:800:200C:1234 Community (rw): [OrigEquipMfr] string size must be between 2 and 16 - please re-enter Community (rw): [OrigEquipMfr] Trap Recipient's IP address: [1080::8:800:200C:1230] 10.32.147.113 Community (rw): [private] Trap Recipient's IP address: [0.0.0.0] Community (ro): [public] Trap Recipient's IP address: [0.0.0.0] Community (ro): [common] Trap Recipient's IP address: [0.0.0.0]...
  • Page 851 SnmpConfig fruStatusChanged: YES cpStatusChanged: YES fruHistoryTrap: YES FCIP-TRAP: YES linkUpTrap: YES linkDownTrap: YES To restore the systemGroup configuration to default values: switch:admin> snmpconfig --default systemGroup ***** This command will reset the agent's system group configuration back to factory default ***** sysDescr = Fibre Channel Switch sysLocation = End User Premise sysContact = Field Support...
  • Page 852 SnmpConfig Engine ID: 00:00:00:00:00:00:00:00:00 User 6 (ro): snmpuser3 Auth Protocol: noAuth Priv Protocol: noPriv Engine ID: 00:00:00:00:00:00:00:00:00 SNMPv3 Trap configuration: Trap Entry 1: No trap recipient configured yet Trap Entry 2: 10.35.52.34 Trap Port: 162 Trap User: snmpadmin2 Trap recipient Severity level: 5 Trap Entry 3: No trap recipient configured yet Trap Entry 4:...
  • Page 853 SnmpConfig Trap recipient Severity level : (0..5) [5] Trap recipient Port : (0..65535) [162] Trap Recipient's IP address : [0.0.0.0] Trap Recipient's IP address : [0.0.0.0] Trap Recipient's IP address : [0.0.0.0] Trap Recipient's IP address : [0.0.0.0] See Also none References Refer to the following publications for further information on SNMP:...

  • Page 854: Snmptraps

    snmpTraps snmpTraps Sends or displays SNMP traps. Synopsis snmptraps --send [-trap_name trap_name] [-ip_address ip_address] snmptraps --show snmptraps --help Description Use this command to generate specific Simple Network Management Protocol (SNMP) traps, to test the trap recipient, and to validate Management Information Base (MIB) objects and associated traps that are supported in Fabric OS.
  • Page 855 snmpTraps |link-lirr-listerner-added |link-lirr-listerner-removed 003|FA-MIB |conn-unit-status-change |conn-unit-sensor-status-change |conn-unit-port-status-change |conn-unit-port-status-change-end 004|RFC1157 |cold-restart-trap |warm-restart-trap |if-link-up-trap |if-link-down-trap |snmp-authetication-trap 005|HA-MIB |fru-status-change-trap |fru-history-trap |cp-status-change-trap To send a link-rnid-device-registration message to recipient 172.16.0.12 switch:admin> snmptraps --send -trap_name link-rnid-device-registration -ip_address 172.16.0.12. See Also snmpConfig Fabric OS Command Reference 53-1001337-01...

  • Page 856: Spinfab

    spinFab spinFab Runs functional test of interswitch link (ISL) cabling and trunk group operation. Synopsis spinfab [-nmegs count][-ports itemlist][-setfail mode] Description Use this command to verify the intended functional operation of the interswitch links (ISLs) between switches at the maximum speed by setting up the routing hardware so that test frames received by each E_Port are retransmitted on the same E_Port.
  • Page 857 spinFab Operands This command has the following operands: -nmegs count Specifies the number of frames to send in millions. The test progresses until the specified number of frames has been transmitted on each port. The default value is 10 million frames. This command only approximately counts the frames and the actual number of frames sent will be slightly larger, particularly at link speeds of 4 Gbps or higher.
  • Page 858 spinFab MBUF_STATE_ERR NO_SEGMENT PORT_ABSENT PORT_DIED PORT_ENABLE PORT_M2M PORT_STOPPED PORT_WRONG RXQ_RAM_PERR STATS STATS_C3FRX STATS_FRX STATS_FTX TIMEOUT XMIT See Also itemList, portLoopbackTest Fabric OS Command Reference 53-1001337-01...

  • Page 859: Sshutil

    sshUtil sshUtil Manages public key authentication. Synopsis sshutil allowuser user name sshutil showuser sshutil importpubkey sshutil showpubkeys sshutil delpubkeys sshutil genkey sshutil exportpubkey sshutil delprivkey sshutil help Description Use this command to enable and manage SSH public key authentication on a switch. SSH public key authentication provides a mechanism for authenticating an authorized user without a password.
  • Page 860 sshUtil Operands This command supports the following operands: allowuser user name Configures the specified user to perform public key authentication and all related management operations. This operation can only be performed by the default admin. The default admin is, by default, a configured user. Only one user can be configured at any given time.
  • Page 861 sshUtil genkey prompts for user input on the following parameters: passphrase Accepts a string of arbitrary length. This operand is optional, but creating a pass-phrase is strongly recommended. Good pass phrases are 10-30 characters long, are not simple sentences or otherwise easily guessable and contain a mix of upper and lowercase letters, numbers, and non-alphanumeric characters.
  • Page 862 sshUtil Password: public key is imported successfully. 3. Connect to switch using remote ssh client with the -i private_key option: username@remotehost> ssh username@switch IP address -i id_dsa To display the imported public keys on a switch: switch:username> sshutil showpubkeys user's public keys ssh-dss AAAAB3NzaC1kc3MAAACBANXuRsJoIA0PFJtGuZVLfqvfSrDYPplWuFouOmTcmuNvpTnd+yoZ u3C/lAu930HLTmhfxeke/NWRIdj2MJS8yTf30a0u4bf9MSNB8Pt453P/+7VHHxNBYsh+Z++Dv1hfcTeb 0s53bdf7jyYSUdj1k+w//sNTaz0DCs0+rimo4l2NAAAAFQDCuHKRctSHD8PRYu5Ee1yWCQKT/wAAAIAo...

  • Page 863: Statsclear

    statsClear statsClear Clears port and diagnostic statistics. Synopsis statsclear [--slot slotnumber][-uports itemlist][-bports itemlist][-use_bports value] Description Use this command to clear the port and diagnostics statistics for the specified list of blade or user ports. You can issue this command on the FR4-18i blade in a Brocade chassis; however, the command is not supported by the Brocade platform and does not effect any other feature operations.

  • Page 864: Stopporttest

    stopPortTest stopPortTest Terminates the running portTest. Synopsis stopporttest [-ports itemlist] Description Use this command to stop the currently running portTest. Refer to the portTest command for more information. If portTest is running in non-singlemode, use stopPortTest to stop the test. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 865: Supportffdc

    supportFfdc supportFfdc Modifies or displays the first-fault data capture (FFDC) daemon. Synopsis supportffdc [--disable | --enable | --show] Description Use this command to disable or enable the FFDC events, or to display the current configuration. If disabled, the daemon does not capture any data even when a message with FFDC attributes is logged.

  • Page 866: Supportftp

    supportFtp supportFtp Sets, clears, or displays support FTP parameters and enables or disables auto file transfer. Synopsis supportftp [-S] supportftp -s [-h host][-u username][-p password][-d remotedirectory] supportftp -t hours supportftp -R supportftp -e supportftp -d Description Use this command to set, clear, or display support FTP parameters. The parameters set by this command are used by the supportSave and traceDump commands.
  • Page 867 supportFtp Examples To set the FTP parameters: switch:admin> supportftp -s -h 1080::8:800:200C:417A -u njoe -p password -d support supportftp: ftp parameters changed. To display the FTP parameters: switch:admin> supportftp Host IP Addr: 1080::8:800:200C:417A User name: njoe Remote Dir: support FTP Auto check: Off To set FTP parameters interactively: switch:admin>...

  • Page 868: Supportsave

    supportSave supportSave Saves RASLOG, TRACE, supportShow, core file, FFDC data, and other support information Synopsis supportsave supportsave [-n] [-c] [-k] [-u user_name -p password -h host_ip -d remote_dir -l protocol] supportsave [-R] supportsave [-U -d remote_dir] Description Use this command to collect RASLOG, TRACE, supportShow, core file, FFDC data and other support information to a remote FTP location.
  • Page 869 supportSave -u user_name Specifies the user name for the FTP or SCP server. This operand is optional; if omitted, anonymous FTP is used. -p password Specifies the password for the FTP or SCP server. This operand is optional with FTP; if omitted, anonymous FTP is used. -h host_ip Specifies the IPv4 or IPv6 address for the remote server.
  • Page 870 supportSave Saving support information for chassis:HL_5100_66, module:SSHOW_OS... Saving support information for chassis:HL_5100_66, module:SSHOW_EX... Saving support information for chassis:HL_5100_66, module:SSHOW_FABRIC... Saving support information for chassis:HL_5100_66, module:SSHOW_SERVICE... Saving support information for chassis:HL_5100_66, module:SSHOW_SEC... Saving support information for chassis:HL_5100_66, module:SSHOW_NET..(output truncated) To collect support information on a Brocade 5100 and save it to an attached USB device: switch:admin>...

  • Page 871: Supportshow

    supportShow supportShow Displays switch information for debugging purposes. Synopsis supportshow [[slotnumber/]portnumber1-portnumber2] [lines] Description Use this command to display support information from groups of preselected Fabric OS and Linux commands and other support and debugging information. You can specify the range of ports for which to display this information.
  • Page 872 supportShow Operands This command has the following operands: slotnumber On bladed systems only, specifies a slot number, followed by a slash (/). portnumber1-portnumber2 Specifies the range of ports for which to display supportShow information. If a port range is not specified, the command displays information for all ports. lines Specifies the number of lines for the portLogDump output.
  • Page 873 supportShow 07:32:21.887 FCPH read 02fffffd,00fffffd,f4000000,00000000,1a 731af5 07:32:21.887 FCPH 22380000,1a731af5,000007c4,0000001c,00 000000 07:32:30.131 FCPH write 00fffffd,00fffffd,00000000,00000000,00 000000 07:32:30.131 FCPH 00300000,00000000,00000834,00020182,00 000000 07:32:30.131 PORT 02fffffd,00fffffd,1af6ffff,14000000 07:32:30.131 PORT c0fffffd,00fffffd,1af61a74,00000001 07:32:41.887 PORT 02fffffd,00fffffd,1a75ffff,14000000 07:32:41.887 PORT c0fffffd,00fffffd,1a751af7,00000001 07:32:41.887 FCPH read 02fffffd,00fffffd,f5000000,00000000,1a 751af7 (output truncated) See Also supportFtp, supportSave, supportShowCfgDisable, supportShowCfgEnable, supportShowCfgShow, traceDump Fabric OS Command Reference...

  • Page 874: Supportshowcfgdisable

    supportShowCfgDisable supportShowCfgDisable Disables a group of commands under the supportShow command. Synopsis supportshowcfgdisable os | exception | port | fabric | services | security | network | portlog | systemextend | filter | perfmon | ficon | iswitch | asic_db |iscsi | ficon | ag | dce_hsl | crypto | fcip Description Use this command to disable a group of commands under the supportShow command.

  • Page 875: Supportshowcfgenable

    supportShowCfgEnable supportShowCfgEnable Enables a group of commands to be displayed under the supportShow command. Synopsis supportshowcfgenable os | exception | port | fabric | services | security | network | portlog | system | extend | filter | perfmon | ficon | iswitch | asic_db |ag | dce_hsl |crypto | fcip Description Use this command to enable a group of commands to be displayed under the supportShow command.

  • Page 876: Supportshowcfgshow

    supportShowCfgShow supportShowCfgShow Displays the groups of commands enabled for display by the supportShow command. Synopsis supportshowcfgshow Description Use this command to display the groups of commands enabled for display by the supportShow command. Use the supportShowCfgEnable and the supportShowCfgDisable commands to modify which groups are displayed.

  • Page 877: Switchbeacon

    switchBeacon switchBeacon Sets switch beaconing mode on or off. Synopsis switchbeacon [mode] Description Use this command to enable or disable switch beaconing mode. Switch beaconing can be used to locate a failing unit. When beaconing mode is turned on, the port LEDs flash amber, left to right and right to left, from port 0 to the highest port number and back to port 0.

  • Page 878: Switchcfgpersistentdisable

    switchCfgPersistentDisable switchCfgPersistentDisable Disables a switch persistently. Synopsis switchcfgpersistentdisable Description Use this command to persistently disable the switch. All Fibre Channel ports are taken offline. If the switch was part of a fabric, the remaining switches reconfigure. The switch remains disabled even after a reboot.

  • Page 879: Switchcfgpersistentenable

    switchCfgPersistentEnable switchCfgPersistentEnable Enables a switch persistently. Synopsis switchcfgpersistentenable Description Use this command to persistently enable a persistently disabled switch. All Fibre Channel ports that passed the power-on self-test (POST) are enabled and come online if connected to a device, or remain offline if disconnected.

  • Page 880: Switchcfgspeed

    switchCfgSpeed switchCfgSpeed Configures the speed for all ports on a switch. Synopsis switchcfgspeed speed Description Use this command to configure the port speed on a switch. This command sets the speed for all user ports. If any port on the switch is not capable of the specified speed setting, an error message is displayed for that port.

  • Page 881: Switchcfgtrunk

    switchCfgTrunk switchCfgTrunk Enables or disables trunking on all the ports of a switch. Synopsis switchcfgtrunk mode Description Use this command to enable or disable trunking on all the ports of a switch. Use portCfgTrunkPort to enable or disable trunking on a single port. When the command is executed to update the trunking configuration, the ports to which the configuration applies are disabled and subsequently re-enabled with the new trunking configuration.

  • Page 882: Switchdisable

    switchDisable switchDisable Disables all user ports on a switch. Synopsis switchdisable Description Use this command to disable all user ports on a switch. All Fibre Channel ports are taken offline. If the switch was part of a fabric, the remaining switches reconfigure. As each port is disabled, the front panel LED changes to a slow flashing yellow.

  • Page 883: Switchenable

    switchEnable switchEnable Enables all user ports on a switch. Synopsis switchenable Description Use this command to enable all user ports on a switch. All Fibre Channel ports that passed the power-on self test (POST) are enabled. They can come online if connected to a device, or remain offline if disconnected.

  • Page 884: Switchname

    switchName switchName Displays or sets the switch name. Synopsis switchname [name] Description Use this command to display or set the switch name. All switches have a symbolic name that is primarily used for switch management. This name is shown in the Fabric OS CLI prompt, under each switch icon in WebTools, and in the output of various Fabric OS commands, such as fabricShow.

  • Page 885: Switchshow

    switchShow switchShow Displays switch and port status. Synopsis switchshow switchshow [-slot slot_number] -portname switchshow [-portcount |-iscsi] Description Use this command to display switch, blade, and port status information. Output may vary depending on the switch model. When used without operands, switchShow displays the following information: switchName Switch name.
  • Page 886 switchShow Index Port Index is a number between 0 and the maximum number of supported ports on the platform. The port index identifies the port number relative to the switch. Slot Slot number; 1-12 Port Port number; 0-15, 0-31, or 0-47. Address The 24-bit Address Identifier.
  • Page 887 switchShow Laser_Flt The module is signaling a laser fault. Port_Flt The port is marked faulty. Diag_Flt The port failed diagnostics. Lock_Ref The port is locking to the reference signal. Testing The port is running diagnostics. Offline A port connection is not established (for virtual ports only). Online The port is up and running.
  • Page 888 switchShow FICON Persistent DID This port has been disabled, because the switch could not obtain its configuration domain ID during the fabric reconfiguration when ficonMode was enabled. See the ficonMode help page for more information. Fabric ID conflict Two different fabrics have been assigned the same fabric ID (EX_Ports only). Fabric ID oversubscribed One fabric has been assigned two different fabric IDs (EX_Ports only).
  • Page 889 switchShow In an AD context, if one of the L_Ports or NPIV Ports is a part of the current AD, the complete device information attached to the port is displayed. Operands This command has the following operands: -slot slotnumber Displays blade information. You can specify this operand with -portname, but not with any other operand.
  • Page 890 switchShow 020b00 No_Module 020c00 No_Module 020d00 No_Module 020e00 No_Module 020f00 No_Module 021000 No_Light 021100 No_Light 021200 No_Module 021300 No_Module 021400 No_Module 021500 No_Module 021600 No_Module 021700 No_Module 021800 No_Module 021900 No_Module 021a00 No_Module 021b00 No_Module 021c00 No_Module 021d00 No_Module 021e00 No_Module 021f00 No_Module...
  • Page 891 switchShow To display switch configuration information on the Brocade 8000: switch:admin> switchshow switchName: elara133 switchType: 76.6 switchState: Online switchMode: Native switchRole: Subordinate switchDomain: switchId: fffc85 switchWwn: 10:00:00:05:1e:76:60:80 zoning: ON (cfg_fcoe) switchBeacon: Index Port Address Media Speed State Proto ============================================== 850000 Online E-Port 10:00:00:05:1e:92:de:00...
  • Page 892 switchShow switchRole: Principal DomainIDOffset: 0x20 switchDomain: switchId: fffc25 switchWwn: 10:00:00:05:1e:35:71:8b zoning: switchBeacon: FC Router: FC Router BB Fabric ID: 1 [output truncated] See Also portCfgLongDistance, switchDisable, switchEnable, switchName Fabric OS Command Reference 53-1001337-01...

  • Page 893: Switchstatuspolicyset

    switchStatusPolicySet switchStatusPolicySet Sets the policy parameters that determine overall switch status. Synopsis switchstatuspolicyset Description Use this command to set policy parameters for calculating the overall status of the switch enclosure. The policy parameter values determine how many failed or faulty units of each contributor are allowed before triggering a status change in the switch from HEALTHY to MARGINAL or DOWN.
  • Page 894 switchStatusPolicySet PowerSupplies Temperatures Fans Blade CoreBlade Flash MarginalPorts FaultyPorts MissingSFPs Note that the value, 0, for a parameter, means that it is NOT used in the calculation. ** In addition, if the range of settable values in the prompt is (0..0), ** the policy parameter is NOT applicable to the switch.

  • Page 895: Switchstatuspolicyshow

    switchStatusPolicyShow switchStatusPolicyShow Displays the policy parameters that determine overall switch status. Synopsis switchstatuspolicyshow Description Use this command to view the current policy parameters set for the switch. These policy parameters determine the number of failed or non-operational units allowed for each contributor before triggering a status change in the switch.
  • Page 896 switchStatusPolicyShow Flash MarginalPorts FaultyPorts MissingSFPs See Also switchStatusPolicySet, switchStatusShow Fabric OS Command Reference 53-1001337-01...

  • Page 897: Switchstatusshow

    switchStatusShow switchStatusShow Displays overall switch status. Synopsis switchstatusshow Description Use this command to display the overall status for a switch that is configured with IPv4 and IPv6 addresses. In addition, users with a Fabric Watch license are able to view the list of unhealthy ports.
  • Page 898 switchStatusShow Missing SFPs monitor HEALTHY All ports are healthy To retrieve a switch health report for a switch that is configured with an IPv4 address: switch:user> switchstatusshow Switch Health Report Report time: 09/11/2006 05:39:28 PM Switch Name: switch IP address: 10.32.89.26 SwitchState: MARGINAL...

  • Page 899: Switchuptime

    switchUptime switchUptime Displays the amount of time the switch has been operating. Synopsis switchuptime Description Use this command to display the current time and the amount of time that the switch has been operational. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 900: Switchviolation

    switchViolation switchViolation Dumps the DCC violations for a switch. Synopsis switchViolation --dump -dcc Description Use this command to display all Device Connection Control (DCC) violations that have occurred on a switch. Internally the command searches "errdumpall" for the DCC violations. For each DCC violation, the command displays the device WWN and the port where the violation occurred.

  • Page 901: Syslogdfacility

    syslogdFacility syslogdFacility Changes the syslog facility. Synopsis syslogdFacility [-l level] Description Use this command to change the syslog facility to LOG_LOCAL0, LOG_LOCAL1, LOG_LOCAL2, LOG_LOCAL3, LOG_LOCAL4, LOG_LOCAL5, LOG_LOCAL6, or LOG_LOCAL7. Syslog daemon (syslogd) is a process available on most UNIX systems that reads and forwards system messages to the appropriate log files or users, depending on the system configuration.

  • Page 902: Syslogdipadd

    syslogdIpAdd syslogdIpAdd Configures a switch to forward system messages to specified servers. Synopsis syslogdipadd ip_address Description Use this command to configure a switch to forward all error log entries to the syslog daemon (syslogd) of one or more specified servers. The syslog daemon is a process available on most UNIX systems that reads and forwards system messages to the appropriate log files or users, depending on the system configuration.

  • Page 903: Syslogdipremove

    syslogdIpRemove syslogdIpRemove Removes a server that is running the syslog daemon. Synopsis syslogdipremove ip_address Description Use this command to remove a server that is running the syslogd process and to which system messages are sent from the syslog server configuration on the switch. IPv6 and IPv4 syslogd addresses are supported.

  • Page 904: Syslogdipshow

    syslogdIpShow syslogdIpShow Displays all syslog daemon IP addresses. Synopsis syslogdipshow Description Displays the list of servers that are running the syslogd daemon and to which system messages are sent. Servers are specified in the configuration database by IP address. IPv4 and IPv6 addresses are supported.

  • Page 905: Sysmonitor

    sysMonitor sysMonitor Manages system memory or CPU usage. Synopsis sysmonitor --config mem | cpu [-poll polling_interval] [-retry number_of_retries] [-limit high_usage_limit] [-action [raslog ] [snmp]] sysmonitor --show mem | cpu sysmonitor --help Description Use this command to configure system memory or CPU usage parameters on the switch or to display memory or CPU usage.
  • Page 906 sysMonitor To display the current memory usage threshold: switch:admin>sysMonitor --show mem Memory Usage: Used Memory : 20000k Total Memory : 100000k Free Memory : 80000k Used Memory Limit : 20% Polling Interval : 10 seconds No of Retries Actions : snmp,raslog To configure the threshold for monitoring system CPU usage: switch:admin>sysMonitor --config cpu -poll 20 -retry 4 -limit 70 -action snmp To display the current memory usage threshold:...

  • Page 907: Sysshutdown

    sysShutDown sysShutDown Provides a graceful shutdown to protect the switch file systems. Synopsis sysshutdown Description On standalone platforms, use this command to shut down the switch operating system. On enterprise-class platforms, when sysShutDown is called on the active control processor (CP), the command shuts down the active CP, standby CP, and any AP blades.
  • Page 908 sysShutDown To attempt a system shutdown from the standby CP (not supported): switch:admin> sysshutdown Shut down the whole system is not support from the standby CP For shut down the whole system please run the sysshutdown from the active CP See Also haDisable Fabric OS Command Reference...

  • Page 909: Tempshow

    tempShow tempShow Displays temperature readings. Synopsis tempshow Description Use this command to display the current temperature readings of all temperature sensors in a switch. For each sensor, this command displays the slot number (if applicable), the sensor state, and the temperature. The temperature readings are given in both Centigrade and Fahrenheit. Notes The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 910: Timeout

    timeOut timeOut Sets or displays the idle timeout value for a login session. Synopsis timeout [timeval] Description Use this command without an operand to display the current timeout value (in minutes) after which idle logins are automatically terminated. Use this command with the timeval operand to set the login timeout value to the specified interval. A value of 0 disables timeout of login sessions.

  • Page 911: Topologyshow

    topologyShow topologyShow Displays the unicast fabric topology. Synopsis topologyshow [domain] Description Use this command to display the fabric topology as it appears to the local switch. The display varies depending on the hardware configuration. The following rules apply: 1. On all switches, the command displays the number of domains in the fabric and the local Domain IDs.
  • Page 912 topologyShow Total Bandwidth The maximum bandwidth of the out port. A bandwidth that is less than 0.512 Gbps is adjusted to the nearest power of 2 value. A bandwidth in the range of 0.512 Gbps Included) to 1 Gbps (not included) is adjusted to the 0.512 Gbps value.
  • Page 913 topologyShow Domain: Metric: 10500 Name: fcr_xd_3_5 Path Count: Hops: Out Port: In Ports: 0 1 2 3 4 5 6 7 8 9 15 Total Bandwidth: 8.000 Gbps Bandwidth Demand: 1275 % Flags: Domain: Metric: Name: peng3900101 Path Count: Hops: Out Port: In Ports: 0 1 2 3 4 5 6 7 8 9 11...
  • Page 914 topologyShow Path Count: Hops: Out Port: In Ports: 23 24 33 38 39 Total Bandwidth: 8.000 Gbps Bandwidth Demand: 350 % Flags: See Also fcrXlateConfig, portRouteShow, uRouteShow Fabric OS Command Reference 53-1001337-01...

  • Page 915: Tracedump

    traceDump traceDump Initiates, or removes a trace dump or displays the trace dump status. Synopsis tracedump [-S ] tracedump -n [-s slot] tracedump -r [-s slot] | -R tracedump -c [-s slot] Description Use this command to initiate a background trace dump, to remove the content of a trace dump, or to display the dump status on the switch.
  • Page 916 traceDump To clear the status of a trace dump: switch:admin> tracedump -R trace dump removed To clear the content of the trace dump buffer: switch:admin> tracedump -c Cleared Trace Buffer contents See Also supportFtp, supportSave, supportShow Fabric OS Command Reference 53-1001337-01...

  • Page 917: Trackchangeshelp

    trackChangesHelp trackChangesHelp Displays information on the track-changes commands. Synopsis trackchangeshelp Description Use this command to display information about the track-changes commands. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS commands" and Appendix A, "Command Availability"...

  • Page 918: Trackchangesset

    trackChangesSet trackChangesSet Enables or disables the track-changes feature. Synopsis trackchangesset [mode][, snmptrapmode] Description This command enables or disables the track-changes feature. An SNMP-TRAP mode can also be enabled. Changes that can be tracked with this command include the following: • Successful login •...

  • Page 919: Trackchangesshow

    trackChangesShow trackChangesShow Displays status of the track-changes feature. Synopsis trackchangesshow Description Use this command to display status of the track-changes feature. It shows whether the feature is enabled or disabled and if SNMP traps are generated. The output from the track-changes feature is dumped to the error log for the switch. Use the errDump command or errShow command to view the error log.

  • Page 920: Trunkdebug

    trunkDebug trunkDebug Debugs a trunk link failure. Synopsis trunkdebug port1 port2 Description Use this command to debug a trunk link failure. This command reports one of the following messages, based on the trunking properties of the two specified ports: • Switch does not support trunking •...

  • Page 921: Trunkshow

    trunkShow trunkShow Displays trunking information. Synopsis trunkshow [-perf] Description Use this command to display trunking information of both E_Ports and EX_Ports. The command displays the following fields: Trunking Group Number Displays each trunking group on a switch. All ports that are part of this trunking group are displayed.
  • Page 922 trunkShow Operands This command has the following operand: -perf Displays the total bandwidth, throughput, and percentage of link utilization information for the trunk group. Examples To display trunking information for a switch: switch:admin> trunkshow 1: 6 -> 10:00:00:60:69:51:43:04 deskew 15 MASTER 2:15 ->...
  • Page 923 trunkShow 71 7 7 014700 id Online E-Port 10:00:00:05:1e:37:12:13 "SW4900_43" (downstream)(Trunk master) To display trunking information along with the bandwidth and throughput for all trunk groups in a switch: switch:admin> trunkshow -perf 6-> 4 10:00:00:60:69:51:43:04 99 deskew 15 MASTER Tx: Bandwidth 8.0GB, Throughput 6.0 GB (75%) Rx: Bandwidth 8.0GB, Throughput 4.0 GB (50%)

  • Page 924: Tsclockserver

    tsClockServer tsClockServer Displays or sets the Network Time Protocol (NTP) Server addresses. Synopsis tsclockserver [ipaddr [; ipaddr ...]] Description Use this command to synchronize the local time of the Principal or Primary FCS switch to one or more external NTP servers. This command accepts a list of NTP server addresses.
  • Page 925 tsClockServer Examples To display the default clock server: tsclockserver switch:admin> LOCL To set the NTP server to a specified IP address: switch:admin> tsclockserver 123.123.123.123 Updating Clock Server configuration...done. switch:admin> tsclockserver 123.123.123.123 To configure multiple NTP servers: switch:admin> tsclockserver "12.134.125.24; 12.234.87.01" Updating Clock Server configuration...done.

  • Page 926: Tstimezone

    tsTimeZone tsTimeZone Displays or sets the system time zone. Synopsis tstimezone --interactive tstimezone timezonename tstimezone --old hourOffset [, minuteOffset] Description Use this command to display or set the system time zone. All switches maintain the current time zone setup in nonvolatile memory. Changing the time zone on a switch updates the local time zone setup and is reflected in local time calculations.
  • Page 927 tsTimeZone hourOffset Specifies the number of hours relative to GMT. This operand must be specified as an integer. Valid values are -12 through 12. This operand is required with the --old option. minuteOffset Specifies the number of minutes relative to hour offset. This operand must be specified as an integer and is valid only with the --old option.
  • Page 928 tsTimeZone 15) Cuba 32) Netherlands Antilles 49) Virgin Islands (US) 16) Dominica 33) Nicaragua 17) Dominican Republic 34) Panama Enter number or control-D to quit ?45 Please select one of the following time zone regions. 1) Eastern Time 2) Eastern Time - Michigan - most locations 3) Eastern Time - Kentucky - Louisville area 4) Eastern Time - Kentucky - Wayne County 5) Eastern Time - Indiana - most locations...

  • Page 929: Turboramtest

    turboRamTest turboRamTest Performs a turbo SRAM test of ASIC chips. Synopsis turboramtest [--slot slotnumber][-passcnt count] ceeturboramtest [--slot slotnumber][-passcnt count] Description Use this command to verify the chip SRAM located in the ASIC using the turbo-RAM BIST circuitry. The BIST controller is able to perform the SRAM write and read operation at a much faster rate than the PCI operation.

  • Page 930: Uptime

    upTime upTime Displays length of time the system has been operational. Synopsis uptime Description This command displays the current time, how long the system has been running, how many users are currently logged on, and the system load averages for the past 1, 5, and 15 minutes. If the uptime is less than 60 seconds, the time is displayed in seconds.

  • Page 931: Urouteconfig

    uRouteConfig uRouteConfig Configures a static route. Synopsis urouteconfig in_area domain out_area Description Use this command to configure static routes. A static route is assigned to a specific path (defined by port number out_area) and does not change when a topology change occurs unless the path used by the route becomes unavailable.

  • Page 932: Urouteremove

    uRouteRemove uRouteRemove Removes a static route. Synopsis urouteremove in_area domain Description Use this command to remove a previously configured static route. After this command is issued, the route to domain for in_area might change to use a different output port, but only if dynamic load sharing (DLS) is set. If DLS is not set, the route remains as is, with its route attribute changed from static to dynamic.

  • Page 933: Urouteshow

    uRouteShow uRouteShow Displays unicast routing information. Synopsis urouteshow [slotnumber/][portnumber] [domain] Description Use this command to display the unicast routing information for a port, as it is known by the FSPF path selection and routing task. The routing information describes how a frame that is received from a port on the local switch is to be routed to reach a destination switch.
  • Page 934 uRouteShow portnumber Specify the number of the input port whose routes are to be displayed, relative to its slot for bladed systems. Use switchShow to display a list of valid ports. This operand is optional; if omitted, the command displays routing information for all input ports in the switch.

  • Page 935: Usbstorage

    usbStorage usbStorage Manages data files on an attached USB storage device. Synopsis usbstorage [-e | --enable] usbstorage [-d | --disable] usbstorage [-l | --list] usbstorage [-r | --remove area target] usbstorage [-h | --help] Description Use this command to control a USB device attached to the Active CP. When the USB device is enabled, other applications, such as supportSave, firmwareDownload, firmwareKeyupdate, or configDownload/cfgUpload can conveniently store and retrieve data from the attached storage device.
  • Page 936 usbStorage firmware\ 380MB 2007 Aug 15 15:13 FW_v6.0.0\ 380MB 2007 Aug 15 15:13 Available space on usbstorage 74% To remove a firmware target from the firmware application area: switch:admin> usbstorage -r firmware FW_v6.0.0 To disable an attached USB device: switch:admin> usbstorage -d USB storage disabled See also supportSave, firmwareDownload, configUpload, configDownload, firmwareKeyupdate...

  • Page 937: Userconfig

    userConfig userConfig Manages user accounts. Synopsis userconfig userconfig --show [username | -a] userconfig --show ad -a AD_ID userconfig --showlf -l LF_ID | -c userconfig --add username -r role [-h AD_ID] [-a AD_ID_list] [-d description] [-x] userconfig --add username -r role -l LF_ID_list [-h LF_ID ] [-c chassis_role] [-d description] [-x] userconfig --change username [-r role] [[-h AD_ID ] [-a AD_ID_list]] [-d description] [-x] [-e yes | no] [-u] userconfig --change username [-r role] [-h LF_ID] [-l LF_ID_list] [-c chassis_role] [-d description]...
  • Page 938 userConfig This command supports the following roles. These roles define access permissions for Fabric OS commands. In a Logical Fabric environment, you can additionally define access to chassis-level commands. An account can have one role in the Logical Fabric, and another role regarding chassis commands.
  • Page 939 userConfig -l LF_ID For each LF in LF_ID_list, displays a list of users that include that LF in their LFF permissions. Specify a range (1-5), or a list of LF_IDs separated by a comma (1,2,3), or a combination of both (1-5,7). Only users with SecurityAdmin or Admin role may execute this command.
  • Page 940 userConfig -a AD_ID_list Specifies the Administrative Domains the user is authorized to access. The ADs in AD_ID_list and the existing AD permissions for username must be a subset of the AD permissions of the account that executes this command. This operand is optional. If no AD list is specified with the --add option, AD0 is assigned by default.
  • Page 941 userConfig -h AD_ID Specifies the account’s home AD. This operand is optional. • If home AD is specified with the --addad option, it must be one of the ADs in AD_ID_list. If a home AD is not specified and username did not previously have a home AD, the home AD is set to the lowest numbered AD in the user's AD permissions.
  • Page 942 userConfig --delete username Deletes the specified account from the switch. This command prompts for confirmation. Once an account is deleted, the CLI sessions associated with the account are terminated. The following restrictions apply when you delete an account: • You cannot delete a default account. •...
  • Page 943 userConfig To delete AD 128 from bob’s AD member list. New home AD is set to 0: switch:admin> userConfig --deletead bob -a 128 -h 0 B. The following examples illustrate how to create and manage user accounts in an LF-enabled environment.
  • Page 944 userConfig To remove chassis permissions from the test account for the LFs 1-3. switch:admin> userconfig --deletelf test -l 1-3 -c Broadcast message from root (ttyS0) Sat Jun 14 01:10:02 2008... Security Policy, Password or Account Attribute Change: test will be logged out LFs/chassis role for account test has been successfully deleted.

  • Page 945: Userrename

    userRename userRename Renames the user login name. Synopsis userrename old_username new_username Description Use this command to change an existing account login name to a new login name. The following rules apply: 1. new_username must begin with a letter and contain only alphanumeric characters or underscores.

  • Page 946: Version

    version version Displays firmware version information. Synopsis version Description Use this command to display firmware version information and build dates. The command output includes the following: Kernel The version of switch kernel operating system. Fabric OS The version of switch Fabric OS. Made on The build date of firmware running in switch.

  • Page 947: Wwn

    Displays the world wide name (WWN) and serial number of the switch. Synopsis wwn [-sn ] Description Use this command to display the WWN associated with a switch and to display the switch serial number. The switch WWN is a 64-bit number that has eight colon-separated fields each consisting of one or two hexadecimal digits between 0 and ff.

  • Page 948: Wwnaddress

    wwnAddress wwnAddress Binds an FC Port ID to a device WWN. Synopsis wwnaddress --bind [WWN] [PID] wwnaddress --unbind [WWN] wwnaddress --show wwnaddress --findPID [WWN] wwnaddress --help Description Use this command to manage address assignments for a given device world wide name. The allocation of a PID to a specified device WWN supports the persistence of the PID based on the WWN of the device to which the PID is bound.
  • Page 949 wwnAddress Examples To bind a 16-bit address to a device WWN: switch:admin> wwnaddress --bind 10:00:00:06:2b:0f:76:5f 0x9000 To unbind a given address from a WWN: switch:admin> wwnaddress --unbind 10:00:00:06:2b:0f:76:5f To display all WWN address bindings on the current partition: switch:admin> wwnaddress --show Area Age Flag ===========================================...

  • Page 950: Zone

    zone zone Performs specific zone operations, manages Traffic Isolation (TI) Zones, and Frame Redirect (RD) Zones. Synopsis zone --help To perform specific zone operations: zone --copy [source_AD.] source_zone_object [dest_zone_object][-f] zone --expunge “zone_object” zone --validate [[-f |] [-m mode] [“zone_object”]]] To create and manage traffic Isolation zones: zone --create -t objecttype [-o optlist] name -p portlist zone --add [-o optlist] name -p portlist zone --remove name -p portlist...
  • Page 951 zone TI zones over FCR is supported only on switches running Fabric OS v6.1.0 or later. Participating devices must be LSAN-zoned to enforce TI. Using TI zones in logical fabrics has several restrictions. For more information, refer to the Fabric OS Administrator’s Guide. 3.
  • Page 952 zone dest_zone_object Identifies the destination zone object within the current Admin Domain. If dest_zone_object is not specified, source_zone_object is copied over with the same name. If the destination zone object is not already present in the Admin Domain, one is created (with type as source_zone_object). Overwrites existing zone object without confirmation.
  • Page 953 zone The following operands are supported: -t objecttype Specifies the zone object type. This operand is supported only with the --create option. To create a TI zone, the value is ti. -o optlist Specifies list of options to control activation, deactivation, and failover mode. If this option is not specified the zone is created, by default, with failover enabled, and the zone will be activated.
  • Page 954 zone 3. Creating and managing RD Zones: Creates a RD Zone for the specified members. The following operands are --rdcreate required: host_wwn Specifies the port world wide name of the host. target_wwn Specifies the port world wide name of the target. vi_wwn Specifies the port world wide name of the virtual initiator (VI).
  • Page 955 zone To copy the cur_cfg1 zone configuration from the root zone database (AD0) to the current Admin Domain: switch:admin> zone --copy AD0.cur_cfg1 To copy the backup_zn zone from the root zone database (AD0) to the current Admin Domain: switch:admin> zone --copy AD0.backup_zn To copy the backup_zn zone from the root zone database (AD0) to the current Admin Domain, with Admin Domain member list filtering: switch:admin>...
  • Page 956 zone To validate all zones in the zone database in the effective configuration: switch:admin> zone --validate -m 2 Effective configuration: cfg: ticonfig zone: regzone 1,4* 1,5* ------------------------------------ ~ - Invalid configuration * - Member does not exist # - Invalid usage of broadcast zone To prune all the zone members that are not enforceable: switch:admin>...
  • Page 957 zone To display all TI zones in the defined configuration: switch:admin> zone --show Defined TI zone configuration: TI Zone Name: ti_bluezone Port List: 2,2; 3,2 Configured Status: Activated / Failover-Disabled Enabled Status: Deactivated TI Zone Name: ti_redzone Port List: 2,1; 3,1 Configured Status: Activated / Failover-Enabled Enabled Status: Activated / Failover-Enabled To display the status of bluezone in the defined configuration:...
  • Page 958 zone To display the newly created zone objects: switch:admin> cfgshow Defined configuration: cfg: myHTcfg myHostTarget cfg: r_e_d_i_r_c__fg red_______base; red_0917_00_3f_3f_3f_23_24_25_26_3f_3f_3f_30_32_00_00_00 zone: myHostTarget 00:3f:3f:3f:23:24:25:26; 3f:3f:3f:30:32:00:00:00 zone: red_0917_00_3f_3f_3f_23_24_25_26_3f_3f_3f_30_32_00_00_00 00:3f:3f:3f:23:24:25:26; 3f:3f:3f:30:32:00:00:00; 3f:3f:3f:30:30:00:00:00; 3f:3f:3f:30:31:00:00:00 zone: red_______base 00:00:00:00:00:00:00:01; 00:00:00:00:00:00:00:02; 00:00:00:00:00:00:00:03; 00:00:00:00:00:00:00:04 Effective configuration: cfg: myHTcfg zone: myHostTarget 00:3f:3f:3f:23:24:25:26 3f:3f:3f:30:32:00:00:00...

  • Page 959: Zoneadd

    zoneAdd zoneAdd Adds a member to the zone. Synopsis zoneadd "zoneName", "member[; member]" Description Use this command to add one or more members to an existing zone. This command changes the defined configuration. For the change to be preserved across switch reboots, save the configuration to nonvolatile memory with the cfgSave command.

  • Page 960: Zonecreate

    zoneCreate zoneCreate Creates a zone. Synopsis zonecreate "zonename", "member[; member...]" Description Use this command to create a new zone, or to create a “broadcast” zone. A broadcast zone is a special zone that specifies the nodes that can receive broadcast traffic. This zone must be named "broadcast".
  • Page 961 zoneCreate When creating a zone, you can combine different ways of specifying zone members. For example, a zone defined with the following members: "2,12; 2,14; 10:00:00:60:69:00:00:8a" contains all devices connected to switch 2, ports 12 and 14, and to the device with the world wide name "10:00:00:60:69:00:00:8a"...

  • Page 962: Zonedelete

    zoneDelete zoneDelete Deletes a zone. Synopsis zonedelete "zonename" Description Use this command to delete a zone. This command changes the defined configuration. For the change to be preserved across switch reboots, save the configuration to nonvolatile memory using the cfgSave command. For the change to become effective, enable the configuration with the cfgEnable command.

  • Page 963: Zonehelp

    zoneHelp zoneHelp Displays a description of zoning commands. Synopsis zonehelp Description Use this command to display short descriptions of zoning commands. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS commands" and Appendix A, "Command Availability"...

  • Page 964: Zoneobjectcopy

    zoneObjectCopy zoneObjectCopy Copies a zone object. Synopsis zoneObjectCopy "objectName", "newName" Description Use this command to make a copy of an existing zone object and give it a new name. The resulting object is of the same type as the original object. You can use this command for all zone object types, including cfg, zone, and alias.

  • Page 965: Zoneobjectexpung

    zoneObjectExpung zoneObjectExpung Expunges a zone object. Synopsis zoneObjectExpunge "objectName" Description Use this command to expunge a zone object. In addition to deleting the object, this command also removes the object from the member lists of all other objects. After successful execution of this command, the specified object no longer exists the database.

  • Page 966: Zoneobjectrename

    zoneObjectRename zoneObjectRename Renames a zone object. Synopsis zoneObjectRename "objectName", "newName" Description Use this command to rename a zone object. You can use this command for all zone object types, including cfg, zone, and alias. This command changes the defined configuration. For the change to be preserved across switch reboots, save the configuration to nonvolatile memory with the cfgSave command.

  • Page 967: Zoneremove

    zoneRemove zoneRemove Removes a member from a zone. Synopsis zoneremove "zonename", "zoneMemberList" Description Use this command to remove one or more members from an existing zone. If all members are removed, the zone is deleted. This command changes the defined configuration. For the change to be preserved across switch reboots, save the configuration to nonvolatile memory with the cfgSave command.

  • Page 968: Zoneshow

    zoneShow zoneShow Displays zone information. Synopsis zoneshow ["pattern"][, mode] Description Use this command to display zone configuration information. If no parameters are specified, all zone configuration information (both defined and enabled) is displayed. Refer to cfgShow for a description of this display. If a parameter is specified, it is used as a pattern to match zone configuration names, and those that match in the defined configuration are displayed.

  • Page 969: Chapter 3 Primary Fcs Commands

    Chapter Primary FCS commands Primary FCS commands Table 24 summarizes the commands that are available only on the primary Fabric Configuration Server (FCS) when FCS policy is enabled. TABLE 24 Primary FCS commands Command Description aliAdd Must be run from the primary FCS switch. aliCreate Must be run from the primary FCS switch.
  • Page 970 Primary FCS commands Command Description msTdDisable msTdDisable “ALL” must be run from the primary FCS switch. msTdEnable msTdEnable “ALL” must be run from the primary FCS switch. secPolicyAbort Must be run from the primary FCS switch. secPolicyActivate Must be run from the primary FCS switch. secPolicyAdd Must be run from the primary FCS switch.

  • Page 971: Appendix A Appendix A: Command Availability

    Appendix Appendix A: Command availability In this appendix • Command validation checks........941 •...

  • Page 972: Encryption Commands And Permissions

    Encryption commands and permissions 4. Virtual Fabric availability: If Virtual Fabrics are enabled, commands are checked for context and switch type as follows: • Virtual Fabric context (VF) = Command applies to the current logical switch only, or to a specified logical switch.
  • Page 973 Encryption commands and permissions TABLE 1 Encryption command RBAC availability and admin domain type Command Name User Admin Oper Zone Fabric Admin Context Switch Admin Admin Admin Admin Admin Domain Type addgroupmember Disallowed addmembernode Disallowed addhaclustermember Disallowed addinitiator Disallowed addLUN Disallowed clearstats Disallowed...

  • Page 974: General Fabric Os Commands And Permissions

    General Fabric OS commands and permissions TABLE 1 Encryption command RBAC availability and admin domain type (Continued) Command Name User Admin Oper Zone Fabric Admin Context Switch Admin Admin Admin Admin Admin Domain Type initnode Disallowed leave_encryption_group Disallowed manual_rekey Disallowed modify Disallowed move...
  • Page 975 General Fabric OS commands and permissions TABLE 2 Fabric OS command RBAC availability and admin domain type Command Name User Admin Oper Zone Fabric Admin Domain Context Switch Admin Admin Admin Admin Admin Type agAutoMapBalance N/A/ Allowed/ SwitchMember agShow Allowed aliAdd Allowed aliCreate...
  • Page 976 General Fabric OS commands and permissions TABLE 2 Fabric OS command RBAC availability and admin domain type Command Name User Admin Oper Zone Fabric Admin Domain Context Switch Admin Admin Admin Admin Admin Type cfgMcdtMode Allowed VF/CH cfgRemove Allowed cfgSave Allowed cfgSaveActiveToDefined Allowed...
  • Page 977 General Fabric OS commands and permissions TABLE 2 Fabric OS command RBAC availability and admin domain type Command Name User Admin Oper Zone Fabric Admin Domain Context Switch Admin Admin Admin Admin Admin Type diagEnablePost SwitchMember diagHelp Allowed Disallowed diagPost SwitchMember diagRetry SwitchMember...
  • Page 978 General Fabric OS commands and permissions TABLE 2 Fabric OS command RBAC availability and admin domain type Command Name User Admin Oper Zone Fabric Admin Domain Context Switch Admin Admin Admin Admin Admin Type fcoeLoginCfg Allowed fcoeLoginGroup Allowed fcPing Allowed fcpLogClear SwitchMember fcpLogDisable...
  • Page 979 General Fabric OS commands and permissions TABLE 2 Fabric OS command RBAC availability and admin domain type Command Name User Admin Oper Zone Fabric Admin Domain Context Switch Admin Admin Admin Admin Admin Type firmwareCommit SwitchMember firmwareDownload SwitchMember firmwareDownloadStatus SwitchMember firmwareKeyShow SwitchMember firmwareKeyUpdate...
  • Page 980 General Fabric OS commands and permissions TABLE 2 Fabric OS command RBAC availability and admin domain type Command Name User Admin Oper Zone Fabric Admin Domain Context Switch Admin Admin Admin Admin Admin Type historyLastShow Allowed historyMode Allowed/ SwitchMember historyShow Allowed httpcfgShow Allowed...
  • Page 981 General Fabric OS commands and permissions TABLE 2 Fabric OS command RBAC availability and admin domain type Command Name User Admin Oper Zone Fabric Admin Domain Context Switch Admin Admin Admin Admin Admin Type licensePort SwitchMember licenseRemove SwitchMember licenseShow Allowed licenseSlotCfg Allowed linkCost...
  • Page 982 General Fabric OS commands and permissions TABLE 2 Fabric OS command RBAC availability and admin domain type Command Name User Admin Oper Zone Fabric Admin Domain Context Switch Admin Admin Admin Admin Admin Type pathInfo PortMember pdShow SwitchMember perfAddEEMonitor SwitchMember perfAddIPMonitor SwitchMember perfAddReadMonitor...
  • Page 983 General Fabric OS commands and permissions TABLE 2 Fabric OS command RBAC availability and admin domain type Command Name User Admin Oper Zone Fabric Admin Domain Context Switch Admin Admin Admin Admin Admin Type portcfgAutoDisable PortMember portcfgCreditRecovery PortMember portCfgDefault PortMember portCfgEport PortMember portcfgexport...
  • Page 984 General Fabric OS commands and permissions TABLE 2 Fabric OS command RBAC availability and admin domain type Command Name User Admin Oper Zone Fabric Admin Domain Context Switch Admin Admin Admin Admin Admin Type portLogDumpPort PortMember portLogEnable SwitchMember portLogEventShow Allowed portLoginShow PortMember portLogPdisc...
  • Page 985 General Fabric OS commands and permissions TABLE 2 Fabric OS command RBAC availability and admin domain type Command Name User Admin Oper Zone Fabric Admin Domain Context Switch Admin Admin Admin Admin Admin Type secAuthSecret AD0/Disallowed secCertUtil AD0/Disallowed secDefineSize AD0/Disallowed secGlobalShow AD0/Disallowed secHelp...
  • Page 986 General Fabric OS commands and permissions TABLE 2 Fabric OS command RBAC availability and admin domain type Command Name User Admin Oper Zone Fabric Admin Domain Context Switch Admin Admin Admin Admin Admin Type stopPortTest SwitchMember supportFfdc SwitchMember supportFtp SwitchMember supportSave Disallowed supportShow...
  • Page 987 General Fabric OS commands and permissions TABLE 2 Fabric OS command RBAC availability and admin domain type Command Name User Admin Oper Zone Fabric Admin Domain Context Switch Admin Admin Admin Admin Admin Type trackChangesHelp Allowed Disallowed trackChangesSet SwitchMember trackChangesShow Allowed trunkDebug SwitchMember...
  • Page 988 General Fabric OS commands and permissions Fabric OS Command Reference 53-1001337-01...

This manual is also suitable for:

Am866a - storageworks 8/8 base san switch8/248/408/88/80

Table of Contents