Supported Switches; Types Of Ficon Configurations - HP A7533A - Brocade 4Gb SAN Switch Base Administrator's Manual

authenticated using digital certificates and unique private keys provided to the Switch Link
Authentication Protocol (SLAP).
• Switch binding is a security method for restricting devices that connect to a particular switch. If the
device is another switch, this is handled by the SCC policy. If the device is a host or storage device, the
Device Connection Control (DCC) policy binds those devices to a particular switch. Policies range from
completely restrictive to reasonably flexible, based upon customer needs.
Port binding
•
ports. The DCC policy also binds device ports to switch ports. Policies range from completely restrictive
to reasonably flexible, based upon customer needs.
For switches running Fabric OS 5.2.x and higher, the SCC ACL with strict fabric-wide consistency can also
be used for switch binding, in addition to the Secure Fabric OS mechanism.

Supported switches

FICON protocol is supported on the following models and Fabric OS releases:
• SAN Switch 2/32, Fabric OS v4.1.2 or later.
• SAN Switch 4/32, SAN Switch 4/32B, Fabric OS v5.0.1b or later.
• SAN Director 2/128, Fabric OS v4.2.0 or later. The default one-domain configuration is supported;
dual domain configurations and mixed FC4- 1 6 port blade configurations are not supported.
• 4/256 SAN Director, Fabric OS v5.0.1b or later. A single-domain configuration is supported with a
mix of 16-port and 32-port blades. Dual-domain configurations are not supported. Mixed port blade
configurations of SAN Director 2/128 and 4/256 SAN Director port blades (FC2- 1 6, FC4- 1 6, or
FC4-32) in the same director are not supported in a FICON environment.
The following port blades can exist in a FICON environment; however, FICON device connection to
ports on these blades is not supported:
• FC4- 1 6IP
• FC4-48
• FR4- 1 8i
In an Admin Domain-enabled fabric, you should put all of the ports on these blades in an Admin
Domain other than the one used for FICON ports. The ports on these blades should not belong to the
zone in which FICON devices are present.
The FC4-48 port blade is not supported for connecting to System z environments via FICON channels
or via FCP zLinux on System z. To connect to the System z environment with the 4/256 SAN Director,
use the FC4- 1 6 or FC4-32 port blades.
Both the 4/256 SAN Director and SAN Switch 4/32 require the port-based routing policy either in a
single switch configuration, or a cascaded switch configuration on switches in the fabric that have FICON
devices attached (option 1 of the aptPolicy command). Other switches in the fabric can use the default
exchange-based routing policy (option 3 of the aptPolicy command) only when Open Systems devices
are attached to those switches.

Types of FICON configurations

There are two types of FICON configurations:
single-switch
• A
use single-byte addressing. If the channel is set up for two-byte addressing, then the cascaded
configuration setup applies. This type of configuration is described in
page 270.
cascaded configuration
• A
authorization feature (called
policy allows a predefined list of switches (domains) to exist in the fabric and prevents other switches
from joining the fabric. This type of configuration is described in
on page 270.
266 Administering FICON fabrics
is a security method for restricting host or storage devices that connect to particular switch
switched point-to-point
configuration (called
(known as a
fabric binding
) requires that the channel be configured to
high integrity fabric
) requires a list of authorized switches. This
) is available through Secure Fabric OS. The fabric binding
"Configuring a single
"Configuring a high-integrity
switch" on
fabric"