Admin Domain Features; Requirements For Admin Domains; Admin Domain Access Levels - HP A7533A - Brocade 4Gb SAN Switch Base Administrator's Manual

Admin Domain features

Admin Domains allow you to:
• Define the scope of an Admin Domain to encompass ports and devices within a switch or a fabric.
• Share resources across multiple Admin Domains. For example, you can share array ports and tape
drives between multiple departments. In
and AD2.
• Have a separate zone database for each Admin Domain. See
databases" on page 170 for more information.
• Move devices from one Admin Domain to another without traffic disruption, cable reconnects, or
discontinuity in zone enforcement.
• Provide strong fault and event isolation between Admin Domains.
• Have visibility of all physical fabric resources. All switches, E_Ports, and FRUs (including blade
information) are visible.
• Implement Admin Domains in a fabric with some switches running AD-unaware firmware versions (that
is, firmware versions earlier than Fabric OS 5.2.0).
• Continue to run existing third-party management applications. Prior and existing versions of third party
management applications continue to work with admin and user IDs.
NOTE: The Admin Domain administrator can define up to 254 ADs (AD1 – AD254) in the AD database;
however, Fabric OS supports only 16 active Admin Domains running concurrently. More than sixteen active
Admin Domains might cause performance degradation and unpredictable system behavior.

Requirements for Admin Domains

This section lists the requirements for implementing Admin Domains in a fabric.
• One or more switches in the fabric must be running Fabric OS 5.2.0 or later.
• Switches running Fabric OS versions earlier than 6.1.x must have a valid Advanced Zoning license.
• The default zone mode setting must be set to No Access before you create Admin Domains (see
"Setting the default zone
• The fabric must be in the native operating mode. Admin Domains are not supported in interoperability
mode.
• Gigabit Ethernet (GbE) ports cannot be members of an Admin Domain.
• Traffic Isolation is supported within Admin Domains, with some restrictions, as described in
Domain considerations for Traffic
• To use Admin Domains and the FC-FC Routing Service in the same fabric, the switches connecting to
the FC router must be running Fabric OS 5.2.0 or later.
• If the fabric includes LSAN zones:
• The LSAN zone names must not end with "_ADn".
• The LSAN zone names must not be longer than 57 characters.
See "Using the FC-FC routing
LSAN zones.

Admin Domain access levels

Admin Domains offer a hierarchy of administrative access. To manage Admin Domains, you must be a
physical fabric administrator. A "physical fabric administrator" is a user with the Admin role and access to
all Admin Domains (AD0 through AD255). Only a physical fabric administrator can perform Admin
Domain configuration and management.
Other administrative access is determined by your defined RBAC role and AD membership. Your role
determines your access level and permission to perform an operation. Your AD membership determines the
fabric resources that you can operate on.
Figure 4, one of the storage devices is shared between AD1
mode" on page 160).
Isolation" on page 353.
service" on page 21 1 for information about the FC-FC Routing Service and
"Admin Domains, zones, and zone
Fabric OS 6.1.x administrator guide 153
"Admin