Brocade Communications Systems A7533A - Brocade 4Gb SAN Switch Base Administrator's Manual
  1. Manuals
  2. Brands
  3. Brocade Communications Systems Manuals
  4. Switch
  5. A7533A - Brocade 4Gb SAN Switch Base
  6. Administrator's manual
Brocade Communications Systems A7533A - Brocade 4Gb SAN Switch Base Administrator's Manual

Brocade Communications Systems A7533A - Brocade 4Gb SAN Switch Base Administrator's Manual

Brocade iscsi gateway service administrator's guide (53-1000603-01, october 2007)
Hide thumbs Also See for A7533A - Brocade 4Gb SAN Switch Base:
Table of Contents

Advertisement

Quick Links

Download this manual See also: Troubleshooting Manual, Administrator's Manual
53-1000603-01
19 October 2007

iSCSI Gateway Service

Administrator's Guide
Supporting Fabric OS v6.0.0

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the A7533A - Brocade 4Gb SAN Switch Base and is the answer not in the manual?

Questions and answers

Related Manuals for Brocade Communications Systems A7533A - Brocade 4Gb SAN Switch Base

Summary of Contents for Brocade Communications Systems A7533A - Brocade 4Gb SAN Switch Base

  • Page 1: Iscsi Gateway Service

    53-1000603-01 19 October 2007 iSCSI Gateway Service Administrator’s Guide Supporting Fabric OS v6.0.0...
  • Page 2 Copyright © 2007 Brocade Communications Systems, Inc. All Rights Reserved. Brocade, the Brocade B weave logo, Fabric OS, File Lifecycle Manager, MyView, Secure Fabric OS, SilkWorm, and StorageX are registered trademarks and the Brocade B wing logo and Tapestry are trademarks of Brocade Communications Systems, Inc., in the United States and/or in other countries.

  • Page 3: Table Of Contents

    Contents About This Document Supported hardware and software ......vii How this document is organized ......vii Document conventions .
  • Page 4 Configuring the GbE interface ......15 Assigning an IP address ....... 15 Adding static IP routes (optional) .
  • Page 5 Creating an iSCSI FC zone ....... . . 39 Creating a zoning configuration ......43 Chapter 5 Administering the iSNS Client In this chapter .
  • Page 6 iSCSI Gateway Service Administrator’s Guide 53-1000603-01...

  • Page 7: About This Document

    About This Document This document is a procedural guide to help SAN administrators configure and manage the iSCSI gateway service on the FC4-16IP blade in a Brocade 48000 director. Supported hardware and software This document is specific to Fabric OS v6.0.0 or higher running on the Brocade 48000 director with an FC4-16IP blade installed.

  • Page 8: Document Conventions

    Document conventions This section describes text formatting conventions and important notices formats. Text formatting The narrative-text formatting conventions that are used in this document are as follows: bold text Identifies command names Identifies the names of user-manipulated GUI elements Identifies keywords and operands Identifies text to enter at the GUI or CLI italic text Provides emphasis...

  • Page 9: Key Terms

    Key terms For definitions of SAN-specific terms, visit the Storage Networking Industry Association online dictionary at: http://www.snia.org/education/dictionary. For definitions specific to Brocade and Fibre Channel, see the Brocade Glossary. The following terms are used in this manual to describe the iSCSI gateway service and its components.
  • Page 10 iSCSI portal group A set of iSCSI-enabled ports. The portal group allows the iSCSI initiator to access iSCSI virtual targets using any available port. An iSCSI session may have several connections to an iSCSI VT on any port in the group. Each FC4-16IP blade has eight GbE ports.

  • Page 11: Additional Information

    Additional information This section lists additional Brocade and industry-specific documentation that you might find helpful. Brocade resources The most recent version of documentation is provided on the Brocade Web site, through Brocade Connect. NOTE Go to http://www.brocade.com and click Brocade Connect to register at no cost for a user ID and password.

  • Page 12: Other Industry Resources

    Other industry resources For additional resource information, visit the Technical Committee T11 Web site. This Web site provides interface standards for high-performance and mass storage applications for Fibre Channel, storage management, as well as other applications: http://www.t11.org For information about the Fibre Channel industry, visit the Fibre Channel Industry Association Web site: http://www.fibrechannel.org For information about the iSCSI (internet small computer systems interface) standards, visit the...

  • Page 13: Document Feedback

    • Brocade 3800 and 3900— Nonport side of the chassis • Brocade 4100, 4900, 5000 7500, and 7600—On the switch ID pull-out tab located inside the chassis on the port side on the left • Brocade 12000, 24000, and 48000—Inside the chassis next to the power supply bays •...
  • Page 14 iSCSI Gateway Service Administrator’s Guide 53-1000603-01...

  • Page 15: Chapter 1 Introduction To The Iscsi Gateway Service

    Chapter Introduction to the iSCSI Gateway Service This chapter describes the FC4-16IP blade iSCSI gateway service. The iSCSI gateway service is supported only on the Brocade 48000 director running Fabric OS v5.2.0 or higher with one or more iSCSI-enabled FC4-16IP blades. In this chapter •...

  • Page 16: Overview Of Iscsi Gateway Service

    Overview of iSCSI gateway service Overview of iSCSI gateway service The FC4-16IP iSCSI gateway service is an intermediate device in the network, allowing iSCSI initiators in an IP SAN to access and utilize storage in a Fibre Channel (FC) SAN as shown in the figure below.

  • Page 17: How Iscsi Sessions Are Translated

    Overview of iSCSI gateway service How iSCSI sessions are translated The iSCSI gateway enables applications on an IP network to use an iSCSI initiator to connect to FC targets. The iSCSI gateway translates iSCSI protocol to Fibre Channel Protocol (FCP), bridging the IP network and FC SAN.

  • Page 18: Presenting Fc Targets As Iscsi Virtual Targets

    Overview of iSCSI gateway service Presenting FC targets as iSCSI virtual targets Fabric OS provides the following two methods to map physical FC targets (LUNs) to iSCSI virtual targets (VTs): • “Basic LUN mapping” • “Advanced LUN mapping” Basic LUN mapping Fabric OS provides a mechanism that maps LUNs to iSCSI VTs, a one-to-one mapping with unique iSCSI Qualified Names (IQNs) for each target.

  • Page 19: Identifying Iscsi Components

    Overview of iSCSI gateway service F C target 1 iS C S I virtual target 1 F C target 2 iS C S I virtual target 2 iS C S I virtual target 3 FIGURE 5 iSCSI VT advanced LUN mapping Identifying iSCSI components Figure 2 for a basic implementation with an IP network.

  • Page 20: Controlling Access To The Iscsi Vt

    Overview of iSCSI gateway service iS C S I initiator A iqn.2003-11.c om.mic ros oft: win2k-s n-192168101 iS C S I virtual targets (V T s ) V T 1 iqn.2002-12.c om.broc ade: 10: 00: 00: 05: 1e: aa: bb: c c IP Network V T 2 iqn.2002-12.c om.broc ade: 10: 00: 00: 05: 1e: c c : bb: aa...

  • Page 21: Switch-To-Iscsi Initiator Authentication

    Overview of iSCSI gateway service DDS et 1 iS C S I virtual targets (V T s ) iS C S I initiator A V T 1 IP network V T 2 V T 3 iS C S I initiator B iS C S I gateway s ervic e FIGURE 7 Discovery domain set configuration example...

  • Page 22: Checklist For Configuring Iscsi

    Checklist for configuring iSCSI Checklist for configuring iSCSI After you install the FC4-16IP blade in the Brocade 48000 director (see the Brocade FC4-16IP Hardware Reference Manual), you configure the iSCSI gateway service. The following table provides a high-level overview of the commands and links to the sections that detail the procedures.
  • Page 23 Checklist for configuring iSCSI TABLE 2 Configuring the iSCSI target gateway (Continued) Step Command Procedure 14 Create the iSCSI FC zone. zoneCreate “<zonename>”, “Creating an iSCSI FC zone” “<member>,<member>,..." page 39 15 Add iSCSI FC zone to zone cfgAdd “cfgname”, “zone1, zone2” configuration.
  • Page 24 Checklist for configuring iSCSI iSCSI Gateway Service Administrator’s Guide 53-1000603-01...

  • Page 25: In This Chapter

    Chapter Configuring the FC4-16IP Blade This chapter describes the initial setup required to deploy an iSCSI gateway solution. Install and configure the FC4-16IP blade in a Brocade 48000 as described in the Brocade FC4-16IP Hardware Reference Manual before performing these procedures. NOTE Only the Brocade 48000 with an iSCSI-enabled FC4-16IP blade running Fabric OS v5.2.0 or higher supports the iSCSI gateway service.

  • Page 26: Fc4-16Ip Port Numbering

    FC4-16IP port numbering FC4-16IP port numbering The FC4-16IP blade has both GbE ports and FC ports. Ports are addressed using slot number and port number notation (for example, 2/7). FC ports are numbered from 0 through 7; GbE ports are numbered from ge0 through ge7.

  • Page 27: Enabling The Iscsi Gateway Service

    Enabling the iSCSI gateway service Enabling the iSCSI gateway service The iSCSI gateway service translates and directs SCSI traffic between an iSCSI initiator and an FC target. This section explains how to enable the iSCSI gateway service on the Brocade 48000. To enable the iSCSI gateway service 1.
  • Page 28 Enabling the GbE interface To enable the physical ports 1. Connect and log in to the switch. 2. Enter the portCfgShow command with the blade slot number and GbE port number parameters to display the Persistent Disable setting of the port. switch:admin>...

  • Page 29: Configuring The Gbe Interface

    Configuring the GbE interface Configuring the GbE interface Configure the FC4-16IP GbE interface (TCP/IP) network settings and static IP routes. Use the portCfg commands to perform the following tasks: • “Assigning an IP address” • “Adding static IP routes (optional)” •...

  • Page 30: Adding Static Ip Routes (Optional)

    Configuring the GbE interface Adding static IP routes (optional) Define static routes to reach the destination IP through a preferred gateway. The gateway must be on the same subnet as the GbE port. You can specify a maximum of 32 routes per GbE port. NOTE The GbE port number <port_number>...

  • Page 31: Adding Arp Entries (Optional)

    Configuring the GbE interface Adding ARP entries (optional) ARP entries for the IP interfaces are created automatically when you verify the network connectivity using the ping command. This command configures additional address resolution protocol (ARP) entries. NOTE The GbE port number <port_number> below is entered geX; where X is from 0 through 7. For example ge1 (see Figure 8 on page 12).
  • Page 32 Configuring the GbE interface iSCSI Gateway Service Administrator’s Guide 53-1000603-01...

  • Page 33: In This Chapter

    Chapter Configuring iSCSI Virtual Targets This chapter explains how to create iSCSI virtual targets (VTs), discovery domains (DDs), discovery domain sets (DDSets), and how to configure iSCSI VT-iSCSI initiator authentication. In this chapter • Changing and displaying the IQN Prefix ......19 •...

  • Page 34: Mapping Fc Targets To Iscsi Vts

    Mapping FC targets to iSCSI VTs To display the IQN prefix 1. Connect and log in to the switch. 2. Enter the iscsiswCfg - -showgw command. The following is an example. iscsiSaturn1:root> iscsiswcfg --showgw Target name is: iqn.2007-12.com.brocade The operation completed successfully Mapping FC targets to iSCSI VTs You create iSCSI VTs using the LUN values of FC targets.
  • Page 35 Mapping FC targets to iSCSI VTs The following is an example. switch:admin> iscsicfg --easycreate tgt This will create iSCSI targets for ALL FC targets. This could be a long-running operation. Continue [N]: y Index FC WWN iSCSI Name Status 2e:1f:00:06:2b:0d:10:ba iqn.2002-12.com.brocade:2e:1f:00:06:2b:0d:10:ba Operation Succeeded 2e:3f:00:06:2b:0d:10:ba...
  • Page 36 Mapping FC targets to iSCSI VTs 4. Enter the iscsicfg show tgt command to display the status of the created iSCSI VTs. The following is an example. switch:admin> iscsicfg --show tgt Number of records found: 16 Name: iqn.2002-12.com.brocade:2e:1f:00:06:2b:0d:10:ba State/Status: Online/Defined Name: iqn.2002-12.com.brocade:2e:3f:00:06:2b:0d:10:ba State/Status:...

  • Page 37: Creating Iscsi Vts Manually

    Mapping FC targets to iSCSI VTs To generate an iSCSI VT for a specific FC target 1. Connect and log in to the switch. 2. Enter the iscsiCfg easycreate tgt command with the -w <port WWN> option to create an iSCSI VT that contains only the storage attached to the specified WWN: The default value of , is used for the fixed prefix, and the port WWN is used as the iqn.2002-12.com.brocade...
  • Page 38 Mapping FC targets to iSCSI VTs To create an iSCSI VT 1. Connect and log in to the switch. 2. Enter the iscsiCfg create tgt command with the -t <IQN> option. The <IQN> value is an iSCSI Qualified Name entered in the form user_defined .
  • Page 39 Mapping FC targets to iSCSI VTs Target Pid: 120d9 Number of LUNs returned by query: 1 LUN ID: 0x00 Target Index: 3 Target Node WWN: 2f:ff:00:06:2b:0d:12:99 Target Port WWN: 2f:ff:00:06:2b:0d:12:99 Target Pid: 12300 Number of LUNs returned by query: 16 LUN ID: 0x00 LUN ID: 0x01 LUN ID: 0x02...
  • Page 40 Mapping FC targets to iSCSI VTs The following is an example. switch:admin> iscsicfg --show lun -t iqn.2006-10.com.example:disk001 Number of targets found: 1 Target: iqn.2006-10.com.example:disk001 Number of LUN Maps: 1 FC WWN Virtual LUN(s) Physical LUN(s) 21:00:00:04:cf:e7:73:7e Mapping LUNs on a specific port to an iSCSI VT The iscsiCfg add lun command can be used to map LUNs attached to a specific port to an iSCSI To map LUNs on a specific port to an iSCSI VT...

  • Page 41: Displaying The Iscsi Vt

    Displaying the iSCSI VT Deleting LUNs from an existing iSCSI VT The iscsiCfg delete lun command can be used to delete LUNs from an existing iSCSI VT. The command can be used to delete individual LUNs, a list or range of LUNs, or all LUNs associated with an iSCSI VT.

  • Page 42: Displaying Iscsi Vt State And Status

    Configuring discovery domains Target: iqn.2006-10.com.example:disk001 Number of LUN Maps: 2 FC WWN Virtual LUN(s) Physical LUN(s) 21:00:00:04:cf:e7:73:7e 2f:ff:00:06:2b:0d:12:99 Target: iqn.2002-10.com.brocade:21:00:00:04:cf:e7:74:cf Number of LUN Maps: 1 FC WWN Virtual LUN(s) Physical LUN(s) 21:00:00:04:cf:e7:74:cf 0x0000000000000000 Displaying iSCSI VT state and status This section explains how to list all the iSCSI VTs on the fabric. The following information is shown for each iSCSI VT.

  • Page 43: Showing Iscsi Initiator Iqns

    Configuring discovery domains A discovery domain (DD) controls iSCSI initiator access to iSCSI VTs. A DD is a group of iSCSI initiators and iSCSI VTs identified by IQNs. The iSCSI initiators can access only the iSCSI VTs that are in the DD to which they are assigned. When there are no discovery domains, all iSCSI initiators can access all iSCSI VTs.

  • Page 44: Configuring Discovery Domain Sets

    Configuring discovery domain sets Configuring discovery domain sets You can create four discovery domain sets, but only one set can be enforced at a time. Discovery domain sets allow you to enable and disable fabric-wide iSCSI VT access with a single command. To create and activate a DDSet, complete the following procedures: •...

  • Page 45: Configuring Iscsi Initiator-To-Vt Authentication

    Configuring iSCSI initiator-to-VT authentication Configuring iSCSI initiator-to-VT authentication Fabric OS v5.2.0 or higher supports both one-way and mutual CHAP authentication for iSCSI initiator-to-iSCSI VT target sessions. The authentication method (CHAP or none) is set on a per-iSCSI VT basis. To set up CHAP authentication, complete the following procedures: •...

  • Page 46: Binding User Names To An Iscsi Vt

    Configuring iSCSI initiator-to-VT authentication Binding user names to an iSCSI VT For additional security, you can bind specific user names to an already created iSCSI VT. When you do this, the specific user name and CHAP secret combination is required for authentication during the iSCSI login phase.

  • Page 47: Displaying Chap Configurations

    Committing the iSCSI-related configuration Displaying CHAP configurations You can display a list of the user names that have been set up on the fabric for iSCSI initiator authentication. To display iSCSI VT authentication 1. Connect and log in to the switch. 2.

  • Page 48: Saving Current Transactions

    Committing the iSCSI-related configuration Saving current transactions Use the iscsiCfg command to commit the iSCSI changes. The commit all option triggers propagation of the database to all iSCSI-capable platforms in the fabric and commits the changes. Make all necessary changes to the database—VT creation, LUN additions, DD creation, DDSet creation, and so on—before issuing the iscsicfg commit all command.

  • Page 49: Enabling/Disabling Connection Redirection For Load Balancing

    Enabling/disabling connection redirection for load balancing 4. On the switch with the database you want to use fabric-wide, enter the iscsiCfg commit all command with the -f option as follows: switch:admin> iscsicfg --commit all -f This will commit ALL database changes made to all iSCSI switches in fabric. This could be a long-running operation.

  • Page 50: Lun Masking Considerations

    LUN masking considerations To display connection redirection status 1. Connect to the switch and log in. 2. Enter the iscsiswCfg - -showconn command with the -s all option to display the current status of connection redirection. The following is an example. switch:admin>iscsiswcfg --showconn -s all Number of records found: 2 Slot...

  • Page 51: Chapter 4 Creating The Iscsi Fc Zone

    Chapter Creating the iSCSI FC Zone This chapter describes how to create an iSCSI FC zone for discovery domains (DDs). NOTE If you do not have a zoning license or if zoning is not implemented, you do not need to create a zone for iSCSI target gateway service.
  • Page 52 Overview of iSCSI FC zoning iS C S I virtual targets (V T s ) iS C S I G bE portal group iS C S I initiator A T arget 1 L UNs V T 1 iS C S I virtual initiator P ortal IP network iS C S I virtual initiator...

  • Page 53: Creating An Iscsi Fc Zone

    Creating an iSCSI FC zone Creating an iSCSI FC zone To create an iSCSI FC zone, you must include the following iSCSI elements in the zone: • The FC targets, used to create the virtual targets (VT) • The iSCSI virtual initiators (VIs): If there is more than one FC4-16IP blade in the chassis, you must add all virtual initiators to the same zone.
  • Page 54 Creating an iSCSI FC zone 4. Enter the nsShow command to display the WWN information for the iSCSI virtual initiators: switch:admin> nsshow Type Pid PortName NodeName TTL(sec) 0120d6; 3;21:00:00:04:cf:e7:74:cf;20:00:00:04:cf:e7:74:cf; na FC4s: FCP [SEAGATE ST336607FC 0004] Fabric Port Name: 20:20:00:60:69:e0:01:56 Permanent Port Name: 21:00:00:04:cf:e7:74:cf Port Index: 32 Share Area: No Device Shared in Other AD: No...
  • Page 55 Creating an iSCSI FC zone You should add all virtual initiators for each blade to the zone. (The nsShow command example continues on the following page.) (The nsShow example continued) 012b00; 3;50:06:06:9e:00:15:63:18;50:06:06:9e:00:15:63:19; na FC4s: FCP PortSymb: [23] "iSCSI Virtual Initiator" NodeSymb: [51] "IPAddr: 30.0.127.33 Slot/Port: 3/ge3 Logical pn: 43"...
  • Page 56 Creating an iSCSI FC zone 5. Save the WWN information, which you will use for the zoneCreate command. At this point you are ready to create the iSCSI gateway service zone with FC targets and initiators as members of the zone. To simplify the process of creating the zone, begin by creating a zone alias. A “zone alias”...

  • Page 57: Creating A Zoning Configuration

    Creating a zoning configuration 3. Enter the cfgSave command to save the change to the defined configuration. The following example illustrates the creation of a zone by specifying the aliases for FC targets and iSCSI virtual initiators as members of the named zone. switch:admin>...
  • Page 58 Creating a zoning configuration To enable a zoning configuration 1. Connect and log in to the switch as admin. 2. Enter the cfgEnable command. 3. Enter the cfgSave command to save the change to the defined configuration. switch:admin> cfgenable iscsi_cfg001 You are about to enable a new zoning configuration.

  • Page 59: In This Chapter

    Chapter Administering the iSNS Client This chapter explains how to enable the iSNS client on an iSCSI gateway and configure it with an iSNS server. The internet storage name service (iSNS) server facilitates the automatic discovery and manages access control of iSCSI VTs on a TCP/IP network. NOTE Fabric OS supports only Microsoft iSNS Server v3.0 and higher.

  • Page 60: Overview Of Isns Configuration

    Overview of iSNS configuration Overview of iSNS configuration iSNS clients initiate transactions with iSNS servers using the iSNS protocol, register available iSCSI VTs, download information about other registered clients (such as iSCSI initiators), and receive notification of events that occur in the DDs. iS NS s erver IP Network...

  • Page 61: Enabling The Isns Client Service

    Enabling the iSNS client service Enabling the iSNS client service This section explains how to enable the iSNS client service and configure the iSNS server IP address. Fabric OS supports one iSNS server connection. NOTE If DD and DDSets are configured on the fabric, clear the DD and DDSet configurations before enabling iSNS client services.

  • Page 62: Disabling The Isns Client Service

    Disabling the iSNS client service The following is an example. switch:admin> isnsccfg –set –m –s 10.33.56.105 iSNS client configuration updated: peering with iSNS server 10.33.56.105 on the management port. 5. Verify that the iSNS server has been configured correctly by entering the isnscCfg - -show command as follows: switch:admin>...
  • Page 63 Appendix Scalability Guidelines Table 3 lists scalability guidelines to consider when constructing iSCSI solutions on the FC4-16IP. TABLE 3 iSCSI target gateway scalability guidelines Object Maximum # iSCSI sessions per port # iSCSI ports per FC4-16IP blade # iSCSI blades in a switch # iSCSI sessions per FC4-16IP blade # iSCSI sessions per switch 1024...
  • Page 64 Scalability Guidelines iSCSI Gateway Service Administrator’s Guide 53-1000603-01...

  • Page 65: Troubleshooting

    Appendix Troubleshooting If you are having problems with iSCSI connectivity, use the following table to troubleshoot before calling your support provider. TABLE 4 Troubleshooting iSCSI connectivity Problem Cause Solution iSCSI host reports connection Network connectivity is having Verify IP address using: portShow ipif <slot>/ge<port> failed.
  • Page 66 Troubleshooting TABLE 4 Troubleshooting iSCSI connectivity (Continued) Problem Cause Solution Changes made to the iSCSI The DDSet has not been Check the currently enabled DD Set using: database do not appear on enabled or the database has iscsiCfg - -show ddset iSCSI hosts.
  • Page 67 Index Numerics cfgEnable cfgSave cfgShow 48000 CHAP mutual command aliCreate cfgAdd access control cfgClear configuring, DD cfgCreate cfgDisable address resolution cfgEnable protocol cfgSave alias cfgShow creating zone defZone zone fcLunQuery aliCreate fosConfig all access iscsiCfg zone setting isnscCfg nsShow adding entries portCfg authentication portCfgPersistentEnable...
  • Page 68 fosconfig enable database iSCSI defZone device RAID configuring devices enabling zoning GbE, see gigabit Ethernet director gigabit Ethernet SilkWorm 48000 discovery domain configuration sets using to limit access discovery domains host configuring connection failure displaying iSCSI log out remote LUN maps VT, state VT, status WWNs...
  • Page 69 iSCSI components adding configuration checklist displaying creating FC zones maps, displaying database virtual enabling gateway service LUNs FC zone listing gateway Gateway Service gateway service gateway service, troubleshooting initiator MAC_address initiators mapping network basic LUN translation method virtual target authentication virtual target, creating virtual target, limiting access virtual targets...
  • Page 70 portCfgShow portCmd ping virtual target ports limiting access to enabling state GbE, enabling status logical group virtual targets portShow creating ipif iproute displaying protocol address resolution RAID WWNs device displaying information route logical group static zone alias notification alias, creating setting configuration, creating all access...

This manual is also suitable for:

Ae370a - brocade 4gb san switch 4/12

Table of Contents