Configuring Fcip Tunnels; Enabling Persistently Disabled Ports; Defining The Ip Interface Of Each Virtual Port; Configuring The Gbe Ports - HP A7533A - Brocade 4Gb SAN Switch Base Administrator's Manual

For example, to delete the IPSec policy number 10:
switch:admin06> policy --delete ipsec 10
The policy has been successfully deleted.

Configuring FCIP Tunnels

You can create only one FCIP tunnel on a given pair of IP address interfaces (local and remote). You can
create multiple FCIP tunnels on a single IP interface if either the local or remote IP interface is unique and
does not have any other FCIP tunnel on it. When the GbE port has a valid SFP and is physically connected
to any other GbE port, the status output from the switchShow command is online.
Due to an IPSec RASlog limitation, you may not be able to determine an incorrect configuration that causes
an IPSec tunnel not to become active. This misconfiguration can occur on either end of the tunnel. As a
result, you must correctly match the encryption method, authentication algorithm, and other configurations
for on each end of the tunnel.
NOTE:
The same procedures apply to local switches and need to be performed there as well.
See the Fabric OS Command Reference Manual for detailed information on using the commands in this
section.
Following are the steps for configuring an FCIP tunnel:
1. "Enabling persistently disabled
2. "Defining the IP interface of each virtual
3. "Configuring the GbE
4. "Adding IP routes on a GbE
5. "Verifying IP
6. "Verifying the FCIP tunnel
Before you begin configuring FCIP tunnels, verify that you have an FCIP license installed. See
licensed software

Enabling persistently disabled ports

Ports on the 400 MP Router and the B-Series MP Router blade are disabled by default. Before you can
configure FCIP tunnels, you must persistently enable the ports.
VEX_Port Users: If the fabric is already connected, you must leave the ge0 and ge1 ports
CAUTION:
disabled until after you have configured the VEX_Port; this will prevent unintentional merging of the two
fabrics.
To enable a persistently disabled port
1. Enter the portCfgShow command to view ports that are persistently disabled.
2. After identifying the ports, enter the portCfgPersistentEnable command to enable the ports.
3. Disable the port during FCIP configuration by entering the portDisable [slot/]port command.
410 Configuring and monitoring FCIP tunneling
The procedures in this section demonstrate configuring FCIP tunnels for remote switches.
ports" on page 402
ports" on page 404
port" on page 404
connectivity" on page 406
configuration" on page 413
features" on page 36.
port" on page 403
"Maintaining