Brocade Communications Systems SN3000B Command Reference Manual
  1. Manuals
  2. Brands
  3. Brocade Communications Systems Manuals
  4. Software
  5. SN3000B
  6. Command reference manual
Brocade Communications Systems SN3000B Command Reference Manual

Brocade Communications Systems SN3000B Command Reference Manual

Brocade fabric os command reference - supporting fabric os v7.0.1 (53-1002447-01, march 2012)
Hide thumbs Also See for SN3000B:
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
Table of Contents

Advertisement

Quick Links

Download this manual See also: Administrator's Manual, Reference
53-1002447-01
®
15 December 2011
Fabric OS

Command Reference

Supporting Fabric OS v7.0.1

Advertisement

Table of Contents
loading

Related Manuals for Brocade Communications Systems SN3000B

Summary of Contents for Brocade Communications Systems SN3000B

  • Page 1: Command Reference

    53-1002447-01 ® 15 December 2011 Fabric OS Command Reference Supporting Fabric OS v7.0.1...
  • Page 2 Copyright © 1999- 2011 Brocade Communications Systems, Inc. All Rights Reserved. Brocade, the B-wing symbol, BigIron, DCX, Fabric OS, FastIron, NetIron, SAN Health, ServerIron, and TurboIron are registered trademarks, and AnyIO, Brocade Assurance, Brocade NET Health, Brocade One, CloudPlex, MLX, VCS, VDX, and When the Mission Is Critical, the Network Is Brocade are trademarks of Brocade Communications Systems, Inc., in the United States and/or in other countries.
  • Page 3 Document History Document title Publication number Summary of changes Publication date Fabric OS Reference v2.0 53-0001487-03 September 1999 Fabric OS Reference v2.2 53-0001558-02 May 2000 Fabric OS Reference v2.3 53-0000067-02 December 2000 Fabric OS Reference v3.0 53-0000127-03 July 2001 Fabric OS Reference v2.6 53-0000194-02 December 2001 Fabric OS Reference v3.0 / v4.0...
  • Page 4 Document title Publication number Summary of changes Publication date Fabric OS Command Reference 53-1000599-03 Corrections and updates to 31 July 2008 commands. Removed “Brocade Optional Features” from Preface. Added trademark note to Preface. Cosmetic edits throughout. Fabric OS Command Reference 53-1001115-01 Added 3 new commands to August 2008...
  • Page 5 Document title Publication number Summary of changes Publication date Fabric OS Command Reference 53-1002147-01 Added 20 new commands. April 2011 Modified 102 commands to support Fabric OS v7.0.0 features. Removed 40 commands. 16 commands have deprecated command options. Miscellaneous edits to ~250 additional commands.
  • Page 6 Fabric OS Command Reference 53-1002447-01...

  • Page 7: Table Of Contents

    Contents About This Document In this chapter ..........xix How this document is organized.
  • Page 8 Contents ......... . 48 aliRemove .
  • Page 9 Contents ......... . 122 cliHistory .
  • Page 10 Contents ......... 261 fanEnable .
  • Page 11 Contents ......... 346 ficonShow .
  • Page 12 Contents ......... . 438 iodReset .
  • Page 13 Contents ......... 536 nsAllShow .
  • Page 14 Contents ....... . . 658 portCfgGeMediaType ........660 portCfgGport .
  • Page 15 Contents ........754 portLoopbackTest ......... 758 portMirror .
  • Page 16 Contents ........909 secStatsShow .
  • Page 17 Contents ........1006 syslogdIpShow ........1007 sysMonitor .
  • Page 18 Contents Appendix A Command Availability ........1089 In this appendix .

  • Page 19: About This Document

    About This Document In this chapter • How this document is organized ........xix •...
  • Page 20 TABLE 1 Supported hardware for Fabric OS v7.0 (Continued) Hardware Platform Description ASIC Brocade 5410 8 Gbit 12-port embedded switch Goldeneye 2 Brocade 5424 8 Gbit 24-port embedded switch Goldeneye 2 Brocade 5450 8 Gbit 24-port embedded switch Goldeneye 2 Brocade 5460 8 Gbit 24-port embedded switch Goldeneye 2...

  • Page 21: What Is New In This Document

    What is new in this document The Fabric OS Command Reference v7.0.1Command supports the current Fabric OS release and the new hardware platforms. New commands The following commands and associated man pages have been added since the publication of the Fabric OS v7.0.0 release of this manual: •...

  • Page 22: Deprecated Commands

    roleConfig - Roles are created with default classes (“localuserenvironment” and “nocheck”) • and default permissions (OM). A configuration download restores these defaults. supportSave - If you use anonymous FTP to run supportSave on a chassis with multiple AP • blades, configure the FTP Windows server to allow unlimited anonymous users. •...

  • Page 23: Command Syntax Conventions

    For readability, command names in the command titles and in the narrative portions of this guide are presented in mixed letter case, for example, switchShow. In examples, command letter case is all lowercase. Command syntax conventions Command syntax in this document follows these conventions: command Commands are printed in bold.

  • Page 24: Key Terms

    Key terms For definitions specific to Brocade and Fibre Channel, see the technical glossaries on the Brocade website. See “Brocade resources” on page xxiv for instructions on accessing the information. For definitions of SAN-specific terms, visit the Storage Networking Industry Association online dictionary http://www.snia.org/education/dictionary Notice to the reader This document may contain references to the trademarks of the following corporations.

  • Page 25: Other Industry Resources

    Release notes are available on the Brocade website. Other industry resources For additional resource information, visit the Technical Committee T11 website. This website provides interface standards for high-performance and mass storage applications for Fibre Channel, storage management, and other applications: http:// www.t11.org For information about the Fibre Channel industry, visit the Fibre Channel Industry Association website:...

  • Page 26: Document Feedback

    Document feedback Quality is our first concern at Brocade, and we have made every effort to ensure the accuracy and completeness of this document. However, if you find an error or an omission, or you think that a topic needs further development, we want to hear from you. Forward your feedback to: documentation@brocade.com Provide the title and version number and as much detail as possible about your issue, including the topic heading and page number and your suggestions for improvement.

  • Page 27: Chapter 1 Using Fabric Os Commands

    Chapter Using Fabric OS Commands In this chapter • Understanding Role-Based Access Control ......1 •...

  • Page 28: Understanding Virtual Fabric Restrictions

    Understanding Virtual Fabric restrictions NOTE Virtual Fabrics and Admin Domains are mutually exclusive and are not supported at the same time on a switch. To use Admin Domains, you must first disable Virtual Fabrics; to use Virtual Fabrics, you must first delete all Admin Domains.

  • Page 29: Understanding Admin Domain Restrictions

    Understanding Admin Domain restrictions Understanding Admin Domain restrictions A subset of Fabric OS commands is subject to Admin Domain (AD) restrictions that may be in place. In order to execute an AD-restricted command on a switch or device, the switch or device must be part of a given Admin Domain, and the user must be logged in to that Admin Domain.
  • Page 30 Using the command line interface Fabric OS Command Reference 53-1002447-01...

  • Page 31: Chapter 2 Fabric Os Commands

    Chapter Fabric OS Commands aaaConfig Manages RADIUS and LDAP configuration information. SYNOPSIS aaaconfig aaaconfig --show aaaconfig --add | --change server -conf radius | ldap [-p port] [-d domain] [-t timeout] [-s secret] [-a chap | pap | peap-mschapv2] aaaconfig --remove server -conf radius | ldap aaaconfig --move server -conf radius | ldap to_position aaaconfig --authspec aaa1[;aaa2 [-backup] [-nologout] aaaconfig --help...
  • Page 32 aaaConfig The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. OPERANDS This command has the following operands: server Specifies an IP address or a server name in dot-decimal notation.
  • Page 33 aaaConfig Valid protocols are one of the following: Password Authentication Protocol chap Challenge-Handshake Authentication Protocol peap-mschapv2 Protected Extensible Authentication Protocol (requires Fabric OS v5.3.0 or later) --remove server Removes the specified server from the configuration. The server must match one of the IP addresses or the names shown in the current configuration.
  • Page 34 aaaConfig "radius;local" Enables the current RADIUS configuration as the primary AAA service and the switch-local database as the secondary AAA service. If "radius" and "local" are specified, and if the RADIUS servers are reachable and the user credentials are correct, the user authentication succeeds. If the user provides credentials from the switch database, the RADIUS authentication fails but login succeeds through the switch database.
  • Page 35 aaaConfig To replace the AAA service with backup option: switch:admin> aaaconfig --authspec "ldap;local" -backup To change the authentication mechanism with the no logout provision: switch:admin> aaaconfig --authspec radius -nologout switch:admin> aaaconfig --show RADIUS CONFIGURATIONS ===================== Position Server : 172.20.1.68 Port : 1812 Secret : testing123...
  • Page 36 Manages Admin Domain operations. SYNOPSIS ad --activate ad_id ad --add ad_id [-d "dev_list"] [-s "switch_list"] ad --apply ad --clear [-f] ad --create ad_id [-d "dev_list"] [-s "switch_list"] ad --deactivate ad_id ad --delete ad_id ad --exec ad_id "command_list" ad --remove ad_id [-d "dev_list"] [-s "switch_list"] ad --rename ad_id new_ad_id ad --save ad --select ad_id...
  • Page 37 Before creating Admin Domains, the default zone mode should be set to "No Access". To set the default zone mode to "No Access" execute the following command sequence: switch:admin> ad --select AD0 switch:admin> defzone --noaccess switch:admin> cfgsave Refer to defZone help for more information. All switches, switch ports and devices in the fabric that are not specified in any other Admin Domain are treated as implicit members of AD0.
  • Page 38 --create arguments Creates a new Admin Domain with optionally specified device or switch members. A newly created Admin Domain is in an activated state. It initially contains no zone database. The newly created Admin Domain remains in the transaction buffer until you issue ad --apply or ad --save.
  • Page 39 --show arguments Displays the membership information of the specified Admin Domain or all Admin Domains. When executed in an AD255 context and an Admin Domain name is not specified, all information about all existing Admin Domains is displayed. When executed in an AD0-AD254 context, the command, by default, displays the members of the current Admin Domain's effective configuration, and therefore you cannot specify an ad_id or mode.
  • Page 40 -d "dev_list" Specifies the list of devices in an Admin Domain, in quotation marks. Separate each entry in the device list with a semicolon (;). Valid formats include the following: D,PI Uses existing zone D,PI member types. Benefits include the following: •...
  • Page 41 Displays the Admin Domain configuration stored in persistent memory (defined configuration). Displays the currently enforced Admin Domain configuration currently enforced (effective configuration). EXAMPLES To enable AD5: switch:admin> ad --activate 5 You are about to activate a new admin domain. Do you want to activate '5' admin domain \ (yes, y, no, n): [no] y To enable AD_13: switch:admin>...
  • Page 42 To deactivate Admin Domain 5: switch:admin> ad --deactivate 5 You are about to deactivate an AD. This operation will fail if an effective zone \ configuration exists in the AD Do you want to deactivate '5' admin domain \ (yes, y, no, n): [no] y To delete AD13: switch:admin>...
  • Page 43 To display all ADs: switch:admin> ad --show Current AD: 255 : AD255 Transaction buffer configuration: --------------------------------- no configuration Defined configuration: ---------------------- AD: 1 : Active Device WWN members: 21:00:00:80:e5:12:8b:37; 21:00:00:80:e5:12:8b:55; Switch port members: 1,0; 1,1; 1,2; 1,3; 1,4; 1,5; 1,6; 1,7; 1,8; 1,9; 1,10; 1,11; 1,12;...
  • Page 44 To display the Admin Domain effective configuration information: switch:admin> ad --show -m 2 Current AD: 255 : AD255 Effective configuration: ------------------------ AD: 1 : Active Device WWN members: 21:00:00:80:e5:12:8b:37; 21:00:00:80:e5:12:8b:55; Switch port members: 1,0; 1,1; 1,2; 1,3; 1,4; 1,5; 1,6; 1,7; 1,8; 1,9; 1,10; 1,11; 1,12;...
  • Page 45 1,337; ---------------------------- * - Member does not exist + - Member is AD Unaware To abort the Admin Domain management transaction buffer: switch:admin> ad --transabort You are about to abort the outstanding AD transaction. Do you want to abort the AD transaction \ (yes, y, no, n): [no] y To display the current Admin Domain transaction: switch:admin>...
  • Page 46 Enables Access Gateway (AG) and manages AG-specific operations. SYNOPSIS ag --help ag --show ag --modeshow | --modeenable | --modedisable ag [--policyenable | --policydisable] policy ag --policyshow ag --mapshow [N_Port] ag [--mapset | --mapadd | --mapdel] N_Port [F_Port1; F_Port2;...] ag [--staticadd | --staticdel ] N_Port [F_Port1; F_Port2;...] ag --pgshow [pgid] ag --pgcreate pgid "N_Port1 [;N_Port2;...]"...
  • Page 47 ag --printalpamap F_Port ag --deletepwwnfromdb PWWN ag --clearalpamap F_Port ag --addwwnmapping N_Port "WWN [;WWN2;...]" | --all ag --delwwnmapping N_Port "WWN [;WWN2;...]" | --all ag --addwwnpgmapping Port_Group "WWN [;WWN2;...]" | --all ag --delwwnpgmapping Port_Group "WWN [;WWN2;...]" | --all ag --addwwnfailovermapping N_Port "WWN [;WWN2;...]" | --all ag --delwwnfailovermapping N_Port "WWN [;WWN2;...]"...
  • Page 48 AG configuration changes are saved persistently as configuration keys. Use the portCfgNPort command to set a port as N_Port. This command supports multiple configurations for mapping device logins to N_Ports for the purposes of load balancing and redistribution in the event of a fabric change. If multiple mappings are configured, the system considers the available mappings in a fixed order of priority to determine which of the available N_Ports should be assigned to the login request.
  • Page 49 • Advanced Device Security (ADS) policy. This policy restricts access to the fabric at the AG level to a set of authorized devices. Unauthorized access is rejected and the system logs a RASLOG message. You can configure the list of allowed devices for each F_Port by specifying their Port WWN. Refer to the ag --ads* commands for information on managing advanced device security.
  • Page 50 --mapshow [N_Port | device_WWN] Displays the F_Ports that are configured and currently mapped to a given "primary" N_Port. Optionally specify an N_Port to display the F_Ports that are mapped to the specified N_Port only, or specify a device WWN to display the N_Port to which the device WWN is mapped.
  • Page 51 --pgremove pgid Deletes the specified port group. The N_Ports in the port group that was deleted are moved to the default port group, which is pgid 0. --pgmapadd pgid "F_Port1[;F_Port2;...]" Maps the specified F_Ports to the PG identified by the pgid. Upon execution, the system identifies the least loaded N_Port in the port group and maps the F_Ports to that N_Port.
  • Page 52 --failoverenable [N_Port] | -pg pgid Enables the failover policy for a given N_Port or for all N_Ports in the given port group. When failover policy is enabled for a given N_Port, F_Ports behave as follows: • If only primary F_Port to N_Port mapping is in place, all currently mapped F_Ports fail over to another available N_Port in the event the original N_Port becomes disabled.
  • Page 53 --adsset "F_Port [;F_Port2;...]" "WWN [;WWN2;...]" Sets the list of devices that are allowed to login to a specified set of F_Ports. Devices are specified by their world wide names. Lists must be enclosed in double quotation marks. List members must be separated by semicolons. The maximum number of entries in the allowed device list is twice the per port maximum login count.
  • Page 54 --addwwnmapping N_Port "WWN [;WWN2;...]" | --all Maps one or more device WWNs to a preferred N_Port. All traffic form the specified devices is forced through the specified N_Port, regardless of which F_Port the device logs into. In the event the designated N_Port should become unavailable, an alternate port can serve as a preferred failover port.
  • Page 55 --wwnmapshow Displays all device WWN mappings. For each device WWN, the command displays the N_Port number to which it is mapped, the secondary (failover) N_Port, and the port group if applicable. The "Current" field shows the port the device is currently using. If the device is not logged in, the field displays "none." If the device is logged in to a port other than the one it is mapped to, the field displays that port.
  • Page 56 0x6d0c00 20:0c:00:05:1e:37:11:aa 1 0 10.32.74.109 10;11; 0x6d0d00 20:0d:00:05:1e:37:11:aa 0 1 10.32.74.109 12;13; ----------------------------------------------------------- F_Port information : Port PortID Attached PWWN N_Port Preferred login N_port exceeded? ---------------------------------------------------------- 4 0x6d0a01 21:00:00:e0:8b:83:e3:cd 5 0x6d0a02 21:01:00:e0:8b:a3:e3:cd 6 0x6d0a03 21:00:00:e0:8b:83:3e:ce 7 0x6d0b01 21:01:00:e0:8b:a3:3e:ce 8 0x6d0b02 21:00:00:e0:8b:83:5c:cd 9 0x6d0b03 21:01:00:e0:8b:a3:5c:cd 10 0x6d0c02 10:00:00:06:2b:0a:a3:93 11 0x6d0c01 10:00:00:06:2b:0a:a3:92...
  • Page 57 To disable auto port configuration policy when the switch is disabled: switch:admin> ag --policydisable auto Default factory settings will be restored. Default mappings will come into effect. Please save the current configuration using configupload. Do you want to continue? (yes, y, no, n): [no] y Access Gateway configuration has been restored \ to factory default To enable the ADS policy:...
  • Page 58 To add F_Port 5 to N_Port 2 (observe that N_Port 2 already has mapped F_Ports): switch:admin> ag --mapadd 2 "5" To display the new mappings: switch:admin> ag --mapshow N_Port Configured Static Current Failover Failback PG_ID PG_Name _F_Ports _F_Ports F_Ports ----------------------------------------------------------------- None SecondFabric 7;8;9...
  • Page 59 _F_Ports _F_Ports -------------------------------------------------------------- None None -------------------------------------------------------------- Static N-Port to F-Port Mapping N-Port F-Port -------------------------------------------------------------- -------------------------------------------------------------- AG failover policy commands To display failover policy settings for all N_Ports: switch:admin> ag --failovershow N_Port failover_bit --------------------------- To set and display failover and failback policies on a single port: switch:admin>...
  • Page 60 To set and display failback policy settings on a single port: switch:admin> ag --failbackenable 0 Failback policy cannot be enabled since failover policy is disabled for port 0 switch:admin> ag --failbackenable 2 Failback policy is enabled for port 2 switch:admin> ag --failbackenable 3 Failback on N_Port 3 is not supported switch:admin>...
  • Page 61 To remove the port group with pgid 2: switch:admin> ag --pgremove 2 Port Group 2 has been removed successfully switch:admin> ag --pgshow PG_ID PG_Name PG_Mode N_Ports F_Ports ----------------------------------------------- lb,mfnm 4;5;6 FirstFabric 10;11 ----------------------------------------------- To enable managed fabric name monitoring in port group 3: switch:admin>...
  • Page 62 To delete secondary port mapping for F_Ports 7, 8 and 9: switch:admin> ag --prefdel "7;8;9" 3 Preferred N_Port is deleted successfully \ for the F_Port[s] To set secondary port mapping for F_Ports 7, 8 and 9: switch:admin> ag --prefset "7;8;9" 3 Preferred N_Port is set successfully \ for the F_Port[s ADS Policy commands...
  • Page 63 To enable persistent ALPA in stringent mode: switch:admin> ag --persistentalpaenable 1 -s Persistent ALPA mode is enabled To disable persistent ALPA mode: switch:admin> ag --persistentalpaenable 0 Persistent ALPA mode is enabled To display the ALPA database entries for F_Port 5: switch:admin>...
  • Page 64 To create a WWN to port group mapping for all currently mapped devices (this command does not affect devices not already mapped or connecting later). switch:admin> ag --addwwnpgmapping 4 --all To add port 13 as a preferred failover N_Port for a device: switch:admin>...

  • Page 65: Agautomapbalance

    agAutoMapBalance agAutoMapBalance Controls automatic remapping of F_Ports in AG mode. SYNOPSIS agautomapbalance --enable [-fport | -nport] [-pg Port_Group_Number | -all] agautomapbalance --disable [-fport | -nport] [-pg Port_Group_Number | -all] agautomapbalance --force agautomapbalance --show agautomapbalance --help DESCRIPTION Use this command to control the automatic rebalancing of F_Ports for login distribution in the event that an F_Port goes offline or an N_Port comes online.
  • Page 66 agAutoMapBalance -nport Enables automatic login redistribution in the event that one or more N_Ports come online. When automatic login redistribution is enabled, the F_Ports mapped to the current N_Ports are rebalanced among the N_Ports. --disable Disables automatic login redistribution upon removal or addition of a specified port type.
  • Page 67 agAutoMapBalance To disable automatic login redistribution on F_Port offline events: switch:admin> agautomapbalance --disable -fport To enable automatic login redistribution on F_Ports and N_Ports on port group 1 in the Access Gateway: switch:admin> agautomapbalance --enable -fport pg 1 To disable automatic login redistribution on F_Ports and N_Ports on all port groups in the Access Gateway: switch:admin>...

  • Page 68: Agshow

    agShow agShow Displays the Access Gateway information registered with the fabric. SYNOPSIS agshow agshow --name ag_name agshow --local DESCRIPTION This command displays the details of the F_Ports and the configured N_Ports in the Access Gateway attached to the fabric. The command output displays the following information. Name The name of the Access Gateway.
  • Page 69 agShow OPERANDS This command has the following optional operands: --name ag_name Displays information regarding a specific Access Gateway that is registered with this fabric. --local Display information regarding all Access Gateways that are locally registered to this switch. EXAMPLES To display the Access Gateway information registered with the fabric: switch:admin>...
  • Page 70 agShow Local/Remote Name ---------------------------------- local L5D_B10_4016_1 local L5D_B14_4024_1 local L5D_B13_200_AG SEE ALSO portCfgNPIVPort Fabric OS Command Reference 53-1001764-01...

  • Page 71: Aliadd

    aliAdd aliAdd Adds a member to a zone alias. SYNOPSIS aliadd "aliName","member[; member...]" DESCRIPTION Use this command to add one or more members to an existing zone alias. The alias member list cannot contain another zone alias. This command changes the defined configuration. For the change to become effective, enable the zone configuration with the cfgEnable command.

  • Page 72: Alicreate

    aliCreate aliCreate Creates a zone alias. SYNOPSIS alicreate "aliName","member[; member...]" DESCRIPTION Use this command to create a new zone alias. The zone alias member list must have at least one member (empty lists are not allowed). The alias member list cannot contain another zone alias. Refer to the zoneCreate command for more information on name and member specifications.

  • Page 73: Alidelete

    aliDelete aliDelete Deletes a zone alias. SYNOPSIS alidelete "aliName" DESCRIPTION Use this command to delete a zone alias. This command changes the defined configuration. For the change to become effective, enable the zone configuration with the cfgEnable command. For the change to be preserved across switch reboots, save the zone configuration to nonvolatile memory with the cfgSave command.

  • Page 74: Aliremove

    aliRemove aliRemove Removes a member from a zone alias. SYNOPSIS aliremove "aliName","member[; member...]" DESCRIPTION Use this command to remove one or more members from an existing zone alias. If all members are removed, the zone alias is deleted. This command changes the defined configuration. For the change to become effective, enable the zone configuration with the cfgEnable command.

  • Page 75: Alishow

    aliShow aliShow Displays zone alias information. SYNOPSIS alishow ["pattern"][, mode] DESCRIPTION Use this command to display zone configuration information. Use the pattern operand to display only matching zone alias names in the defined configuration. If no parameters are specified, all zone configuration information (both defined and effective) is displayed.

  • Page 76: Apploginhistory

    appLoginHistory appLoginHistory Displays the history of HTTP login sessions. SYNOPSIS apploginhistory --show apploginhistory --help DESCRIPTION Use this command to display the history of HTTP login sessions from external management applications such as Brocade Network Advisor or Web Tools. The command displays both current sessions and a history of past sessions.
  • Page 77 appLoginHistory active currently: 2011/10/13-15:51:31.203814, 10.20.10.160, admin, DCFM-HttpConnector/null 2011/10/13-15:51:33.095638, 10.20.10.160, admin, DCFM-HttpConnector/null 2011/10/13-15:52:14.178299, 10.20.10.161, admin, DCFM-HttpConnector/null 2011/10/13-15:53:57.547672, 10.20.10.161, admin, DCFM-HttpConnector/null SEE ALSO None Fabric OS Command Reference 53-1001764-01...

  • Page 78: Aptpolicy

    aptPolicy aptPolicy Changes or displays the Advanced Performance Tuning (APT) policy. SYNOPSIS aptpolicy [policy] aptpolicy -ap [ap_policy] DESCRIPTION Use this command to display and change the advanced performance tuning (APT) policies on a switch. Several internal performance tuning parameters can be modified with this command. The default parameters (AP shared Link Policy) are optimized for most SAN applications;...
  • Page 79 aptPolicy • The FC address of the destination fabric device (DID) for this frame. • The FC Originator Exchange ID (OXID) for this frame. This policy optimizes the utilization of the available paths by allowing I/O traffic between different SID, DID, or OXID pairs to use different paths. All frames received on an ingress port with the same SID, DID, or OXID parameters take the same path unless there is a fabric event.

  • Page 80: Auditcfg

    auditCfg auditCfg Modifies and displays the audit log filter configuration. SYNOPSIS auditcfg --class audit_class auditcfg --enable | --disable auditcfg --severity severity_level auditcfg --show DESCRIPTION Use this command to configure the audit logging and to display the audit log configuration. This command allows you to set filters by configuring certain classes, to add or remove any of the classes in the filter list, to set severity levels for audit messages, and to enable or disable audit filters.
  • Page 81 auditCfg To display the configuration: switch:admin> auditcfg --show Audit filter is enabled. 1-ZONE 2-SECURITY 3-CONFIGURATION 4-FIRMWARE 5-FABRIC 6-FW 7-LS Severity level: INFO To disable audit logging: switch:admin> auditcfg --disable Audit filter is disabled. SEE ALSO auditDump Fabric OS Command Reference 53-1001764-01...

  • Page 82: Auditdump

    auditDump auditDump Displays or clears the audit log. SYNOPSIS auditdump -s | -show auditdump -c | -clear DESCRIPTION Use this command to display or clear the audit log on the switch. The audit log persistently saves the most recent 256 log entries on the switch. On modular platforms, the entries are not shared across CPs. To display or clear the logs, this command must be issued for each CP separately.

  • Page 83: Authutil

    authUtil authUtil Displays and sets the authentication configuration. SYNOPSIS authutil authutil --show authutil --set option value authutil --policy -sw option | -dev option authutil --authinit [slot/]port[, [slot/]port...] | allE DESCRIPTION Use this command to display and set local switch authentication parameters. Use --set to change authentication parameters such as protocol, Diffie-Hellman group (DH group), or hash type.
  • Page 84 authUtil enabled. Specifying "*" enables all DH groups 0, 1, 2, 3, and 4, in that order. This means that in authentication negotiation, the NULL DH group is given priority over all other groups. In the case of a port that is enabled for encryption and you specify "*", the DH group 4 is selected.
  • Page 85 authUtil --authinit [slot/]port [, [slot/]port...| allE Reinitiates authentication on selected ports after changing the DH-CHAP group, hash type, and shared secret between a pair of switches. This command does not work on Private, Loop, NPIV and FICON devices. The command can reinitiate authentication only if the device was previously authenticated.
  • Page 86 authUtil To set the Device policy to passive mode: switch:admin> authutil --policy -dev passive Warning: Activating the authentication policy requires DH-CHAP secrets on both switch and device. Otherwise, the F-port will be disabled during next F-port bring-up. ARE YOU SURE (yes, y, no, n): [no] y Device authentication is set to PASSIVE To set the device authentication policy to "on"...

  • Page 87: Bannerset

    bannerSet bannerSet Sets the banner on the local switch. SYNOPSIS bannerset [banner] DESCRIPTION Use this command to set the banner on the local switch. The banner is a string of alphanumeric characters. It is displayed after you log in to a switch. The banner can be created using the banner operand or interactively by entering the bannerSet command without an operand.

  • Page 88: Bannershow

    bannerShow bannerShow Displays the banner text. SYNOPSIS bannershow DESCRIPTION Use this command to display the text of the local switch banner. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 89: Bcastshow

    bcastShow bcastShow Displays broadcast routing information. SYNOPSIS bcastshow DESCRIPTION Use this command to display the broadcast routing information for all ports in the switch. The broadcast routing information indicates all ports that are members of the broadcast distribution tree: ports that are able to send and receive broadcast frames.

  • Page 90: Bladecfggemode

    bladeCfgGeMode bladeCfgGeMode Configures a GbE port or a 10GbE port on the Brocade FX8-24 blade. SYNOPSIS bladecfggemode --set mode -slot slot bladecfggemode --show -slot slot | -all bladecfggemode --help DESCRIPTION Use this command to configure the GbE port mode on the Brocade FX8-24 extension blade or to display the configuration.
  • Page 91 bladeCfgGeMode To display the GbE port mode for all configured slots: switch:admin> bladecfggemode --show -all bladeCfgGeMode: Blade in slot 1 is configured in 1GigE Mode 1GigE mode: only the ge0-9 ports are enabled (xge0 and xge1 \ are disabled) bladeCfgGeMode: Blade in slot 4 is configured in 10GigE Mode 10GigE mode: only xge0 and xge1 are enabled (ge0-9 ports \ are disabled)

  • Page 92: Bladedisable

    bladeDisable bladeDisable Disables all user ports on a blade. SYNOPSIS bladedisable slot DESCRIPTION Use this command to disable all user ports on a blade. All Fibre Channel ports on the blade are taken offline. If the switch was connected to a fabric through this blade, the remaining switches reconfigure, and the switch reconfigures based on the other blade ports.
  • Page 93 bladeDisable ------ In_Sync Disabled ------ In_Sync Disabled ------ In_Sync Disabled ------ In_Sync Disabled ------ In_Sync Disabled ------ In_Sync Disabled ------ In_Sync Disabled ------ In_Sync Disabled ------ In_Sync Disabled ------ In_Sync Disabled ------ In_Sync Disabled ------ In_Sync Disabled ------ In_Sync Disabled ------ In_Sync Disabled...

  • Page 94: Bladeenable

    bladeEnable bladeEnable Enables all user ports on a blade. SYNOPSIS bladeenable slot DESCRIPTION Use this command to enable all user ports on a blade. All ports within the blade that did not fail the power-on self-test (POST) are enabled (except for persistently disabled ports). They may come online if connected to a device, or remain offline if disconnected.
  • Page 95 bladeEnable UNKNOWN VACANT SW BLADE ENABLED CP BLADE ENABLED CP BLADE ENABLED SW BLADE ENABLED UNKNOWN VACANT UNKNOWN VACANT UNKNOWN VACANT SEE ALSO bladeDisable, chassisDisable, chassisEnable, portEnable, portDisable, switchDisable, switchShow Fabric OS Command Reference 53-1001764-01...

  • Page 96: Bladeswap

    bladeSwap bladeSwap Swaps the area numbers for matching port pairs of two blades. SYNOPSIS bladeSwap -src source_slot -dest destination_slot DESCRIPTION Use this command to swap the area numbers for matching port pairs of two blades. All ports must qualify for swapping for this command to succeed. It validates that the blades in the indicated slots are of the same type, have the same number of ports, and that the port pairs are in the same partition.

  • Page 97: Bootluncfg

    bootLunCfg bootLunCfg Transparently configures the boot LUN for an HBA. SYNOPSIS bootluncfg --add HBA_WWN PWWN LUN_ID bootluncfg --delete HBA_WWN [PWWN LUN_ID] bootluncfg --show bootluncfg --help DESCRIPTION Use this command to configure the boot LUN for an HBA. Existing fabric-based boot LUN discovery allows the host's boot LUN information to be stored in the fabric zone database by using a zone name that contains the PWWN of an HBA port.
  • Page 98 bootLunCfg EXAMPLES To configure a boot LUN: switch:admin> bootluncfg --add 11:22:ab:44:44:ff:44:ca \ 1b:6c:55:55:55:3a:55:ff 9abc345fa1112410 Operation Successful To display existing Port/LUN mappings: switch:admin> bootluncfgn--show 00:11:22:33:44:55:66:77 00:00:00:00:aa:bb:cc:dd;00:00:00:01:ee:ff:11:22; \ 00:00:00:02:9a:bc:34:5f;00:00:00:03:a1:11:24:10 aa:aa:aa:aa:aa:aa:aa:aa 00:00:00:00:11:11:11:11;00:00:00:01:11:11:11:11; \ 00:00:00:02:9a:bc:34:5f;00:00:00:03:a1:11:24:10 bb:aa:aa:aa:aa:aa:aa:aa 00:00:00:00:11:11:11:11;00:00:00:01:11:11:11:11; \ 00:00:00:02:9a:bc:34:5f;00:00:00:03:a1:11:24:10 To remove an HBA to Port/LUN mapping: switch:admin>...

  • Page 99: Bottleneckmon

    bottleneckMon bottleneckMon Monitors and reports latency and congestion bottlenecks on F_Ports and E_Ports. SYNOPSIS bottleneckmon --enable [-cthresh congestion_threshold] [-lthresh latency_threshold] [-time seconds] [-qtime seconds] [-alert | -noalert] [-lsubsectimethresh time_threshold] [-lsubsecsevthresh severity_threshold] bottleneckmon --disable bottleneckmon --config [-cthresh congestion_threshold] [-lthresh latency_threshold][-time seconds] [-qtime seconds] [-alert | -noalert] [-lsubsectimethresh time_threshold] [-lsubsecsevthresh severity_threshold]...
  • Page 100 bottleneckMon Enabling or disabling bottleneck detection is a switch-wide operation. If Virtual Fabrics are enabled, the configuration is applied per logical switch and affects all ports on the current logical switch. After the (logical) switch-wide bottleneck detection parameters have been set, you can you can fine-tune the configuration for specific ports.
  • Page 101 bottleneckMon 6 seconds in an interval of 10 seconds, and 1 second out of the other 4 seconds was affected by a bottleneck, the display for that interval would show 25% as the percentage of affected seconds (1 out of 4), and state "no data for 6 seconds."...
  • Page 102 bottleneckMon Credit recovery on back-end ports Use the --cfgcredittools commands to enable or disable credit recovery of external back-end ports and to display the configuration. When this feature is enabled, credit is recovered on external back-end ports (ports connected to the core blade or core blade back-end ports) when credit loss has been detected on these ports.
  • Page 103 bottleneckMon --enable Enables bottleneck detection on the switch. This operation is switch-wide and affects all F[L]_Ports and F_Ports. This operation enables bottleneck detection on all eligible ports of a switch, no matter when they become eligible. If you have Virtual Fabrics enabled and you move ports into a bottleneck enabled logical switch from another logical switch, bottleneck detection is enabled upon completion of the move.
  • Page 104 bottleneckMon -lsubsectimethresh time_threshold Sets the threshold for latency bottlenecks at the sub-second level. The time_threshold specifies the minimum fraction of a second that must be affected by latency in order for that second to be considered affected by a latency bottleneck.
  • Page 105 bottleneckMon specifier, the command displays the number of ports affected by bottleneck conditions. A "bottlenecked" port in this output is defined as any port that was affected by a bottleneck for one second or more in the corresponding interval. This command succeeds only on online ports. The following operands are optional: -interval seconds Specifies the time window in seconds over which the percentage of seconds...
  • Page 106 bottleneckMon --help Displays the command usage. EXAMPLES Bottleneck detection examples To enable bottleneck detection on the switch without alerts (statistics collected with default parameters are still available for viewing): switch:admin> bottleneckmon --enable To enable bottleneck detection on the switch with alerts using default values for thresholds and time (preferred use case): switch:admin>...
  • Page 107 bottleneckMon Feb 26 21:56:30 Feb 26 21:56:40 Feb 26 21:56:20 Feb 26 21:56:30 Feb 26 21:56:10 Feb 26 21:56:20 Feb 26 21:56:00 Feb 26 21:56:10 Feb 26 21:55:50 Feb 26 21:56:00 Feb 26 21:55:40 Feb 26 21:55:50 Feb 26 21:55:30 Feb 26 21:55:40 To display bottleneck statistics for a single port: switch:admin>...
  • Page 108 bottleneckMon Jan 13 18:54:10 Jan 13 18:54:15 20.00 Jan 13 18:54:15 Jan 13 18:54:20 80.00 Jan 13 18:54:20 Jan 13 18:54:25 0.00 Jan 13 18:54:25 Jan 13 18:54:30 0.00 Jan 13 18:54:30 Jan 13 18:54:35 40.00 To display bottleneck configuration details for the switch: switch:admin>...
  • Page 109 bottleneckMon To enable back-end port credit recovery with the link reset threshold option and to display the configuration: switch:admin> bottleneckmon --cfgcredittools -intport \ -recover onLrThresh switch:admin> bottleneckmon --showcredittools Internal port credit recovery is Enabled with LrOnThresh To disable back-end port credit recovery and to display the configuration: switch:admin>...

  • Page 110: Bpportloopbacktest

    bpPortLoopbackTest bpPortLoopbackTest Sends and receives data from the same BP port to perform a functional test of the port. SYNOPSIS bpportloopbacktest [--slot slot] [-nframes count] [-pklen count] [-lb_mode mode] [-spd_mode mode ] [-bpports itemlist ] DESCRIPTION Use this command to verify the functional operation of the switch. The test sends frames from a specified blade processor (BP) port transmitter and loops the frames back into the same BP port's receiver.
  • Page 111 bpPortLoopbackTest At each pass, a different data type is used to create the frame from a palette of seven. If a pass of seven is requested, seven different frames are used in the test. If eight passes, the first seven frames are unique, and the eighth frame is the same as the first.
  • Page 112 bpPortLoopbackTest Runs test at 8 Gbps (Default for Condor2). Runs test at 16 Gbps (Condor3 only). -bpports itemlist Specifies a list of blade ports to test. By default all valid blade ports in the specified blade are tested. On the Brocade Encryption platforms, ports 80-103 are the only valid ports, because these are the only blade ports with access to the Vader chip.

  • Page 113: Bpturboramtest

    bpTurboRamTest bpTurboRamTest MBIST test for AP Blade BP ASICs. SYNOPSIS bpturboramtest [--slot slot] [ -passcnt count ] [ -bpports itemlist ] DESCRIPTION Use this command to verify the on-chip static random access memory (SRAM) located in the Blade Processor (BP) ASICs of the Application Processor (AP) blade. The command makes use of the memory built-in self-test (MBIST) circuitry.
  • Page 114 bpTurboRamTest EXAMPLES To run the test in default mode: switch:admin> bpturboramtest Running bpturboramtest ....Board Init Running Vader bist test Vader bist test PASSED Running Ob1 bist test Ob1 bist test PASSED BIST test PASSED on all ASIC(s) Test Complete: bpturboramtest Pass 1 of 1 Duration 0 hr, 1 min &...

  • Page 115: Bufopmode

    bufOpMode bufOpMode Changes or displays the Buffer Optimized Mode. SYNOPSIS bufopmode --set slot [-f] bufopmode --reset slot bufopmode --show slot bufopmode --showall DESCRIPTION Use this command to display or change the buffer optimized mode on a switch. When buffer optimized mode is enabled on a slot, additional buffers are allocated on the internal ports. Use this feature, if you have slow draining devices connected to the slot and there are no long distance links or F_Port buffers configured on that slot.
  • Page 116 bufOpMode Slot 9: buffer optimized mode - Off Slot 10: buffer optimized mode - Off Slot 11: buffer optimized mode - Off Slot 12: buffer optimized mode - On -------------------------------------------------- * indicates buffer optimization not supported on this blade To display current buffer optimized mode for a single slot switch:admin>...
  • Page 117 bufOpMode Slot 11: buffer optimized mode - Off* Slot 12: buffer optimized mode - Off* ----------------------------------------------------------- * indicates buffer optimization not supported on this blade SEE ALSO slotShow, slotPowerOn, slotPowerOff Fabric OS Command Reference 53-1001764-01...

  • Page 118: Ceeportledtest

    ceePortLedTest ceePortLedTest DESCRIPTION See portLedTest. SEE ALSO None Fabric OS Command Reference 53-1001764-01...

  • Page 119: Ceeportloopbacktest

    ceePortLoopbackTest ceePortLoopbackTest DESCRIPTION See portLoopbackTest. SEE ALSO None Fabric OS Command Reference 53-1001764-01...

  • Page 120: Ceeturboramtest

    ceeTurboRamTest ceeTurboRamTest DESCRIPTION See turboRamTest. SEE ALSO None Fabric OS Command Reference 53-1001764-01...

  • Page 121: Cfgactvshow

    cfgActvShow cfgActvShow Displays effective zone configuration information. SYNOPSIS cfgactvshow DESCRIPTION Use this command to display the effective zone configuration information. The current configuration is a single zone configuration that is currently in effect. The devices that an initiator sees are based on this configuration. The effective configuration is built when a specified zone configuration is enabled.

  • Page 122: Cfgadd

    cfgAdd cfgAdd Adds a member to a zone configuration. SYNOPSIS cfgadd "cfgName", "member[; member...]" DESCRIPTION Use this command to add one or more members to an existing zone configuration. This command changes the Defined Configuration. For the change to take effect, enable the configuration with the cfgEnable command.

  • Page 123: Cfgclear

    cfgClear cfgClear Clears all zone configurations. SYNOPSIS cfgclear DESCRIPTION Use this command to clear all zone information in the transaction buffer. All defined zone objects in the transaction buffer are deleted. If an attempt is made to commit the empty transaction buffer while a zone configuration is enabled, you are warned to first disable the enabled zone configuration or to provide a valid configuration with the same name.

  • Page 124: Cfgcreate

    cfgCreate cfgCreate Creates a zone configuration. SYNOPSIS cfgcreate "cfgName", "member[;member...]" DESCRIPTION Use this command to create a new zone configuration. This command changes the Defined Configuration (see cfgShow). For the change to become effective, enable the configuration with the cfgEnable command. For the change to be preserved across switch reboots, save the configuration to nonvolatile memory with the cfgSave command.

  • Page 125: Cfgdelete

    cfgDelete cfgDelete Deletes a zone configuration. SYNOPSIS cfgdelete "cfgName" DESCRIPTION Use this command to delete a zone configuration. This command changes the Defined Configuration (see cfgShow). For the change to become effective, enable the configuration with the cfgEnable command. For the change to be preserved across switch reboots, save the configuration to nonvolatile memory with the cfgSave command.

  • Page 126: Cfgdisable

    cfgDisable cfgDisable Disables a zone configuration. SYNOPSIS cfgdisable DESCRIPTION Use this command to disable the current zone configuration. The fabric returns to non-zoning mode, a mode in which all devices can see each other. This command ends and commits the current zoning transaction buffer to both volatile and nonvolatile memory.

  • Page 127: Cfgenable

    cfgEnable cfgEnable Enables a zone configuration. SYNOPSIS cfgenable "cfgName" DESCRIPTION Use this command to enable a zone configuration. The command builds the specified zone configuration . It checks for undefined zone names, zone alias names, or other inconsistencies, by expanding zone aliases, removing duplicate entries, and then installing the effective configuration.

  • Page 128: Cfgremove

    cfgRemove cfgRemove Removes a member from a zone configuration. SYNOPSIS cfgremove "cfgName","member[; member...]" DESCRIPTION Use this command to remove one or more members from an existing zone configuration. If all members are removed, the zone configuration is deleted. This command changes the Defined Configuration (see cfgShow). For the change to become effective, enable the configuration with the cfgEnable command.

  • Page 129: Cfgsave

    cfgSave cfgSave Saves the zone configuration to nonvolatile memory. SYNOPSIS cfgsave DESCRIPTION Use this command to save the current zone configuration. This command writes the defined configuration and the name of the effective configuration to nonvolatile memory in all switches in the fabric.

  • Page 130: Cfgshow

    cfgShow cfgShow Displays zone configuration information. SYNOPSIS cfgshow ["pattern"] [, mode] DESCRIPTION Use this command to display zone configuration information. If no operand is specified, all zone configuration information (both defined and effective) is displayed. If the local switch has an outstanding transaction, this command displays the most recently edited zone configuration that has not yet been saved.
  • Page 131 cfgShow EXAMPLES To display all zone configurations that start with "Test": switch:admin> cfgshow "Test*" cfg: Test1 Blue_zone cfg: Test_cfg Red_zone; Blue_zone To display all zone configuration information: switch:admin> cfgshow Defined configuration: cfg: USA1 Blue_zone cfg: USA_cfg Red_zone; Blue_zone zone: Blue_zone 1,1;...

  • Page 132: Cfgsize

    cfgSize cfgSize Displays zone and Admin Domain database size details. SYNOPSIS cfgsize [integer] DESCRIPTION Use this command to display the size details of the zone database and the Admin Domain database. When executed in a non-AD255 context, the size details include maximum size, the committed size, and the transaction size of the Zone database in bytes.
  • Page 133 cfgSize EXAMPLES To display the zone database on a Brocade 6510 switch:admin> cfgsize Zone DB max size - 1045274 bytes Available Zone DB size - 1041503 bytes committed - 2759 transaction - 0 To display Admin Domain and zone database size information in an AD255 context: switch:admin>...

  • Page 134: Cfgtransabort

    cfgTransAbort cfgTransAbort Aborts the current zoning transaction. SYNOPSIS cfgtransabort [token] DESCRIPTION Use this command to abort the current zoning transaction without committing it. All changes made since the transaction was started are removed and the zone configuration database is restored to the state before the transaction was started.

  • Page 135: Cfgtransshow

    cfgTransShow cfgTransShow Displays information about the current zoning transaction. SYNOPSIS cfgtransshow DESCRIPTION Use this command to display the ID of the current zoning transaction. In addition, the command provides information on whether or not the transaction can be aborted. The transaction cannot be aborted if it is an internal zoning transaction.

  • Page 136: Chassisbeacon

    chassisBeacon chassisBeacon Sets chassis beaconing mode. SYNOPSIS chassisbeacon [mode] DESCRIPTION Use this command to enable or disable beaconing on a chassis. Chassis beaconing can be used to locate a failing chassis in a group of chassis. Use the portBeacon command to locate a failing port, and use the switchBeacon command to locate a failing (logical) switch.

  • Page 137: Chassisdisable

    chassisDisable chassisDisable Disables all user ports in a chassis. SYNOPSIS chassisdisable [-force] DESCRIPTION Use this command to disable a Virtual Fabric-aware chassis. All Fibre Channel ports are taken offline. This command prompts for confirmation unless the -force option is used. If the chassis is partitioned into logical switches that are part of logical fabrics, the remaining switches in these fabrics reconfigure.

  • Page 138: Chassisdistribute

    chassisDistribute chassisDistribute Distributes IP filter policies. SYNOPSIS chassisdistribute -db policy_db -fid FID [-force] chassisdistribute -db policy_db -domain domain_list [-force] DESCRIPTION Use this command to manually distribute IP Filter policies. The behavior of this command depends on whether Virtual Fabrics are enabled or disabled. •...
  • Page 139 chassisDistribute NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. OPERANDS This command has the following operands: -db policy_list Specifies the list of policy sets, also called security databases, to be distributed.

  • Page 140: Chassisenable

    chassisEnable chassisEnable Enables all user ports in a chassis. SYNOPSIS chassisenable DESCRIPTION Use this command to enable a Virtual Fabric-aware chassis. All Fibre Channel ports that passed the power-on self test (POST) are enabled. They may come online if connected to a device, or remain offline if disconnected.

  • Page 141: Chassisname

    chassisName chassisName Displays or sets the chassis name. SYNOPSIS chassisname [name] DESCRIPTION Use this command to display or change the name associated with the chassis. Use this command without parameters to display the current chassis name. Use this command with the name operand to assign a new chassis name.

  • Page 142: Chassisshow

    chassisShow chassisShow Displays all field replaceable units (FRUs). SYNOPSIS chassisshow DESCRIPTION Use this command to display the Field Replaceable Unit (FR) header content for each object in the chassis and chassis backplane version. This command displays the following information: The chassis family, for example, DCX 8510. The backplane version number, in hexadecimal: Chassis Backplane Revision: xx The first line of each record contains the object ID.
  • Page 143 chassisShow NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. OPERANDS None EXAMPLES To display the FRUs for a DCX 8510-8: switch:user>...

  • Page 144: Classconfig

    classConfig classConfig Displays RBAC class permissions. SYNOPSIS classconfig --show class_name | -all | -classlist classconfig --showcli command classconfig --showroles class_name classconfig --help DESCRIPTION Use this command to display information about role-based access control (RBAC) permissions for one or all meta-object format (MOF) classes, to display permissions for a specified command, or to display the permissions for a specified MOF class.
  • Page 145 classConfig --showcli command Displays the RBAC permissions for the specified command and associated command options. The output displays the command name, the command options, the RBAC class permissions for each command option, and the MOF class. --showroles class_name Displays the role permissions the specified MOF class. --help Displays the command usage.
  • Page 146 classConfig 46. PortMirror 47. RADIUS 48. Reboot 49. Restricted 50. RoleConfig 51. RoutingAdvanced 52. RoutingBasic 53. Security 54. SessionManagement 55. SNMP 56. Statistics 57. StatisticsDevice 58. StatisticsPort 59. SwitchConfiguration 60. SwitchManagement 61. SwitchManagementIPConfiguration 62. SwitchPortConfiguration 63. SwitchPortManagement 64. Topology 65. USBManagement 66.
  • Page 147 classConfig To display the RBAC permissions for the UserManagement class: switch:admin> classconfig --showroles UserManagement Roles that have access to the RBAC class 'usermanagement' are: Role Name Permission --------- ---------- Admin Factory Root SecurityAdmin To display the RBAC permissions for a command: switch:admin>...

  • Page 148: Clihistory

    cliHistory cliHistory Displays switch command history. SYNOPSIS clihistory DESCRIPTION This command saves the following information whenever a command is executed on the switch: • Timestamp • Username • IP address of the Telnet session • Options • Arguments This command displays the local CLI command history. The information is saved in the SSHOW_SYS file as part of supportSave and in the CTRACE traceDump file, which is also included with the supportSave package.

  • Page 149: Cmsh

    cmsh cmsh Opens the CEE command shell. SYNOPSIS cmsh DESCRIPTION Use this command to open a shell for managing 10 GbE interfaces and Layer2/Layer3 protocol services. The CEE management shell provides a hierarchical CLI interface. Refer to the CEE Command Reference and the CEE Administrator's Guide for information on how to use the CEE commands and configuration procedures.
  • Page 150 cmsh To create an FCoE VLAN: switch:admin> cmsh switch:admin>en switch:admin>#conf t switch:admin>(config)#protocol lldp switch:admin>(conf-lldp)# advertise dcbx-fcoe-app-tlv switch:admin>(conf-lldp)# advertise dcbx-fcoe-logical-link-tlv switch:admin>(conf-lldp)#exit switch:admin>(config)#exit switch:admin>(config)# vlan classifier rule 1 proto \ fcoe encap ethv2 switch:admin>(config)# vlan classifier rule 2 proto fip \ encap ethv2 switch:admin>(config)# vlan classifier group 1 add rule 1 switch:admin>(config)# vlan classifier group 1 add rule 2 switch:admin>(config)#interface vlan 5...

  • Page 151: Configdefault

    configDefault configDefault Resets the nonpersistent configuration data to factory defaults. SYNOPSIS configdefault [-fid FID | -all | -switch] DESCRIPTION Use this command to reset the nonpersistent configuration settings to their factory default values. Configuration data is grouped into chassis information and switch information. Each configuration type is managed separately.
  • Page 152 configDefault The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. OPERANDS This command has the following operands: -fid FID Specifies the Fabric ID of the logical switch for which to reset the configuration.

  • Page 153: Configdownload

    configDownload configDownload Downloads configuration data to the system. SYNOPSIS configdownload configdownload [- all ] [-p ftp | -ftp] ["host","user","path" [,"passwd"]] configdownload [- all ] [-p scp | -scp ] ["host","user","path"] configdownload [- all ] [-p sftp | -sftp ] ["host","user","path"] configdownload [- all ] [-local | -USB | -U ["file"]] configdownload [-fid FID | -chassis | -all | -switch] [-p ftp | -ftp ] ["host","user","path"...
  • Page 154 configDownload The system configuration data is downloaded separately. It is grouped into chassis information and switch information. Each configuration type is managed separately and the behavior of configDownload depends on the environment in which the command is executed and which part of the system configuration you wish to download.
  • Page 155 configDownload • After the switch is enabled, if the switch is the primary FCS, then its security and zoning information is propagated to all other switches in the fabric. • After the switch is enabled, if the switch is a non-FCS or a backup FCS, then its security and zoning information will be overwritten by the primary FCS.
  • Page 156 configDownload -fid FID Downloads the switch configuration to a logical switch specified by its fabric ID. This operand is valid only in a Virtual Fabric environment and requires chassis permissions. -chassis Downloads the chassis configuration only. -switch Downloads the switch configuration only. This operand is valid only in non-VF mode.
  • Page 157 configDownload • The file is not a switch configuration file. • The FTP server is not running on the host. • The configuration file contains errors. • The configuration file's logical switch definitions do not match the definitions on the target switch. •...
  • Page 158 configDownload To attempt to download the Virtual Fabric configuration interactively to a switch with configured Admin Domains: switch:admin> configdownload -vf -p sftp \ 10.32.248.119,jdoe,/temp/switch-conf_66.txt,mypassword *** CAUTION *** This command is used to download the VF configuration to the switch. Afterwards, the switch will be automatically rebooted and the new VF settings will be used.

  • Page 159: Configlist

    configList configList Lists uploaded configuration files. SYNOPSIS configlist -local | -USB | -U DESCRIPTION This command displays a list of names, sizes, and creation dates of configuration files saved on the local chassis or on an attached USB device. These files are created when the configUpload command is executed with the -local or the -USB option.

  • Page 160: Configremove

    configRemove configRemove Deletes a saved configuration file. SYNOPSIS configremove -local | -USB | -U [file] DESCRIPTION This command deletes a configuration file that was previously saved to the local chassis or to an attached USB device by using the configUpload command. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 161: Configshow

    configShow configShow Displays system configuration settings. SYNOPSIS configshow configshow [-all | -fid FID | -chassis | -switch] | [-local | -USB | -U] [file] [-pattern "pattern"] DESCRIPTION Use this command to display system configuration settings. Some but not all of these parameters are set by the configure and configureChassis commands.
  • Page 162 configShow -local [file] Displays the content of a configuration file that was previously created by configUpload and stored on the chassis. The output can be optionally filtered by -pattern "pattern". If file is omitted, the command prompts for a file name. The output format when -local is specified matches that of configUpload and contains a superset of the information provided when -local is not specified.
  • Page 163 configShow passwdcfg.lockoutthreshold:0 passwdcfg.lockoutduration:30 passwdcfg.adminlockout:0 passwdcfg.repeat:1 passwdcfg.sequence:1 passwdcfg.status:0 fips.mode:0 fips.selftests:0 ipfilter.0.name:default_ipv4 ipfilter.0.numofrules:12 ipfilter.0.rule.1:0,0x23,0,0,6,22 ipfilter.0.rule.10:0,0x23,0,0,17,123 ipfilter.0.rule.11:0,0x63,0,0,6,600,1023 ipfilter.0.rule.12:0,0x63,0,0,17,600,1023 ipfilter.0.rule.2:0,0x23,0,0,6,23 ipfilter.0.rule.3:0,0x23,0,0,6,897 ipfilter.0.rule.4:0,0x23,0,0,6,898 ipfilter.0.rule.5:0,0x23,0,0,6,111 ipfilter.0.rule.6:0,0x23,0,0,6,80 ipfilter.0.rule.7:0,0x23,0,0,6,443 ipfilter.0.rule.8:0,0x23,0,0,17,161 ipfilter.0.rule.9:0,0x23,0,0,17,111 ipfilter.0.state:3 ipfilter.0.type:0 ipfilter.1.name:default_ipv6 ipfilter.1.numofrules:12 ipfilter.1.rule.1:0,0x23,0,0,6,22 ipfilter.1.rule.10:0,0x23,0,0,17,123 ipfilter.1.rule.11:0,0x63,0,0,6,600,1023 ipfilter.1.rule.12:0,0x63,0,0,17,600,1023 ipfilter.1.rule.2:0,0x23,0,0,6,23 ipfilter.1.rule.3:0,0x23,0,0,6,897 ipfilter.1.rule.4:0,0x23,0,0,6,898 ipfilter.1.rule.5:0,0x23,0,0,6,111 ipfilter.1.rule.6:0,0x23,0,0,6,80 ipfilter.1.rule.7:0,0x23,0,0,6,443 ipfilter.1.rule.8:0,0x23,0,0,17,161 ipfilter.1.rule.9:0,0x23,0,0,17,111 ipfilter.1.state:3 ipfilter.1.type:1 (output truncated) To filter the content to display only the password configuration:...
  • Page 164 configShow To display switch configuration data for FID 20: switch :admin> configshow -fid 20 [Configuration upload Information] Configuration Format = 2.0 date = Tue Oct 7 14:53:12 2008 FOS version = v6.2.0.0 Number of LS = 3 [Switch Configuration Begin : 0] SwitchName = Spirit_66 Fabric ID = 20 [Boot Parameters]...

  • Page 165: Configupload

    configUpload configUpload Uploads system configuration data to a file. SYNOPSIS configupload configupload [-all] [-p ftp | -ftp] ["host","user","path" [,"passwd"]] configupload [-all] [-p scp | -scp] ["host","user","path"] configupload [-all] [-p sftp | -sftp] ["host","user","path"] configupload [-all] [-force] [-local | USB |-U] ["file"] configupload [-fid FID | -chassis | -all | -switch] [-p ftp | -ftp]["host","user","path"...
  • Page 166 configUpload The system configuration data is uploaded separately. It is grouped into chassis information and switch information. Each configuration type is managed separately and the behavior of configUpload depends on the environment in which the command is executed and which part of the system configuration you wish to upload.
  • Page 167 configUpload -fid FID Uploads switch configuration data from a logical switch specified by its fabric ID. This parameter is valid only in a Virtual Fabric environment and requires chassis permissions. -chassis Uploads chassis configuration only. -all Uploads all system configuration data including chassis and switch configuration for all logical switches.
  • Page 168 configUpload EXAMPLES To upload the switch configuration interactively from a switch that is not enabled for Virtual Fabrics: switch:admin> configupload Protocol (scp, ftp, sftp, local) [ftp]: sftp Server Name or IP Address [host]: 192.168.38.245 User Name [user]: jdoe File Name [<home dir>/config.txt]: Section (all|chassis|switch [all]): Password: ****** configUpload complete: All config parameters are uploaded...

  • Page 169: Configure

    configure configure Changes switch configuration settings. SYNOPSIS configure DESCRIPTION Use this command to change switch configuration settings. Configuration data is grouped into chassis information and switch information. Each configuration type is managed separately. For information on file format and specific parameters contained in each section, refer to the configUpload help page.
  • Page 170 configure The following parameters can be modified with the configure command: Fabric Parameters Fabric settings control the overall behavior and operation of the fabric. Some of these settings, such as the domain, are assigned automatically and may differ from one switch to another in a given fabric. Other parameters, such as buffer-to-buffer credit or timeout values, can be modified to suit specific applications or operating environments but must be in agreement among all switches to allow formation of the fabric.
  • Page 171 configure WWN Based persistent PID When enabled, this feature supports both dynamic and static WWN-based PID assignment. In dynamic PID binding, the first area assigned to a device when it logs in is bound to the device WWN and remains persistent through subsequent logins.
  • Page 172 configure R_A_TOV The resource allocation time out value specified in milliseconds. This variable works with the variable E_D_TOV to determine switch actions when presented with an error condition. Allocated circuit resources with detected errors are not released until the time value has expired.
  • Page 173 configure Per-frame Route Priority In addition to the eight virtual channels used in frame routing priority, support is also available for per-frame-based prioritization when this value is set. When Per-frame Route Priority is set to 1, the virtual channel ID is used in conjunction with a frame header to form the final virtual channel ID.
  • Page 174 configure The values for virtual channel settings are as follows: Field Default Range ____________________________________ VC Priority 2 2 to 3 VC Priority 3 2 to 3 VC Priority 4 2 to 3 VC Priority 5 2 to 3 VC Priority 6 2 to 3 VC Priority 7 2 to 3...
  • Page 175 configure Zoning Operation Parameters The following zoning operation parameter can be modified. Disable NodeName Zone Checking Specify 1 to disable using node WWN when specifying nodes in the zone database. Specify 0 to enable using node WWN when specifying nodes in the zone data.
  • Page 176 configure Portlog Events Enable/Disable Settings These settings determine whether or not various types of port events are logged. Each event type displayed on the screen is enabled by default ("on"). When disabled, this event is not logged by the port log. Application Attributes A number of application attributes are configurable.
  • Page 177 configure R_A_TOV: (4000..120000) [10000] E_D_TOV: (1000.. 5000) [2000] WAN_TOV: (0..30000) [0] MAX_HOPS: (7..19) [7] Data field size: (256..2112) [2112] Sequence Level Switching: (0..1) [0] Disable Device Probing: (0..1) [0] Suppress Class F Traffic: (0..1) [0] Per-frame Route Priority: (0..1) [0] Long Distance Fabric: (0..1) [0] BB credit: (1..27) [16] Disable FID Check (yes, y, no, n): [no]...
  • Page 178 configure Arbitrated Loop parameters (yes, y, no, n): [no] System services (yes, y, no, n): [no] Portlog events enable (yes, y, no, n): [no] ssl attributes (yes, y, no, n): [no] rpcd attributes (yes, y, no, n): [no] cfgload attributes (yes, y, no, n): [no] webtools attributes (yes, y, no, n): [no] SEE ALSO configDefault, configShow, configureChassis, ipAddrSet, portCfgLongDistance, switchDisable,...

  • Page 179: Configurechassis

    configureChassis configureChassis Changes chassis-level system configuration settings. SYNOPSIS configurechassis DESCRIPTION Use this command to modify chassis-level system configuration settings. Configuration data is grouped into chassis information and switch information. Each configuration type is managed separately. Use the configure command to modify switch configuration parameters. Use the configureChassis command to modify the following chassis configuration parameters: •...
  • Page 180 configureChassis System attributes The following system-related parameters are configurable on a Virtual Fabric-aware switch. system.blade.bladeFaultOnHwErrMsk If this field is set to a value other than 0, then any nonfatal HW ASIC data parity error causes the problem blade to be powered off. The valid range is 0x0 to 0xffff. The default value is 0x0.
  • Page 181 configureChassis To add a suffix to the uploaded file name: switch:admin> configurechassis Configure... cfgload attributes (yes, y, no, n): [no] y Enforce secure config Upload/Download (yes, y, no, n): [no] Enforce signature validation for firmware (yes, y, no, n): [no] Add Suffix to the uploaded file name (yes, y, no, n): [no] y Custom attributes (yes, y, no, n): [no] system attributes (yes, y, no, n): [no]...

  • Page 182: Cryptocfg

    cryptoCfg cryptoCfg Performs encryption configuration and management functions. SYNOPSIS cryptocfg --help -nodecfg cryptocfg --help -groupcfg cryptocfg --help -hacluster cryptocfg --help -devicecfg cryptocfg --help -transcfg cryptocfg --help -decommission DESCRIPTION Use the cryptoCfg command to configure and manage the Brocade Encryption Switch and the FS8-18 encryption blade.
  • Page 183 cryptoCfg cryptocfg --initnode cryptocfg --initEE [slot] cryptocfg --regEE [slot] cryptocfg --enableEE [slot] cryptocfg --disableEE [slot] cryptocfg --export -scp -dhchallenge vault_IP_address | -currentMK | -KACcert | -KACcsr | -CPcert host_IP host_username host_file_path cryptocfg --export -usb -dhchallenge vault_IP_address | -currentMK | -KACcert | -KACcsr | -CPcert dest_filename cryptocfg --import -scp local_name host_IP host_username host_file_path cryptocfg --import -usb dest_filename source_filename...
  • Page 184 cryptoCfg • Group-wide policy configuration. • Zeroization of all critical security parameters on the local encryption switch or blade. • Certificate display and management. • Display of the local encryption engine status. • Rebalancing of disk and tape LUNS for optimized performance. •...
  • Page 185 cryptoCfg Some of the certificates generated with this command may need to be exported so that they can be registered with external entities, such as the key vault or the group leader, for mutual authentication. Refer to the Fabric OS Encryption Administrator's Guide for details.
  • Page 186 cryptoCfg --export Exports a certificate from the local encryption switch or blade to a specified external host or to a mounted USB device. This command is valid on all nodes. The files are exported from the predetermined directory that was generated during the node initialization phase.
  • Page 187 cryptoCfg Files to be imported include member node CP certificates and key vault certificates. Use the cryptocfg --show -file -all command to view all imported files. The following operands are supported with the --importcommand: -scp Imports a specified certificate from an external host using the secure copy (SCP) protocol.
  • Page 188 cryptoCfg --dereg -membernode Removes the registration for the specified member node. This command is valid only on the group leader. The node is identified by the switch WWN. member_node_WWN Specifies the member node by its switch WWN. This operand is required when removing a node registration.
  • Page 189 cryptoCfg For the SKM, run this command only for the primary key vault. The login credential must match a valid username/password pair configured on the key vault. The same username/password must be configured on all the nodes of any given encryption group to prevent \ivity issues between the SKM and the switch.
  • Page 190 cryptoCfg diag Runs diagnostic tests including retrieval, archival and synchronization of the tests in the key vault cluster. EXAMPLES To initialize a node and generate certificates (output shows what is generated and where it is stored): SecurityAdmin:switch> cryptocfg --initnode This will overwrite all identification and authentication data ARE YOU SURE (yes, y, no, n): [no] y Notify SPM of Node Cfg...
  • Page 191 cryptoCfg To register a member node with the group leader: SecurityAdmin:switch> cryptocfg --reg -membernode 10:00:00:05:1e:39:14:00 enc_switch1_cert.pem 10.32.244.60 Operation succeeded. To deregister a member node: SecurityAdmin:switch> cryptocfg --dereg -membernode 10:00:00:05:1e:53:b6:80 Operation succeeded. To generate a trusted link establishment package (TEP): SecurityAdmin:switch> cryptocfg --dhchallenge 10.33.54.231 Operation succeeded.
  • Page 192 cryptoCfg 10:00:00:05:1e:47:30:00/3 10.32.72.105 EE_STATE_ONLINE Reachable 10:00:00:05:1e:47:30:00/10 10.32.72.106 EE_STATE_ONLINE Reachable 10:00:00:05:1e:47:30:00/12 10.32.72.107 EE_STATE_ONLINE Reachable EE Slot: SP state: Online Primary Link KeyID: 85:1c:ca:dd:fc:8c:31:fc:87:21:26:d1:24:a0:92:be Secondary Link KeyID:98:4f:b4:98:c0:42:ab:6b:6d:65:ba:f2:fc:aa:b5:8a No HA cluster membership EE Attributes: Link IP Addr : 10.32.72.76 Link GW IP Addr : 10.32.64.1 Link Net Mask : 255.255.240.0...
  • Page 193 cryptoCfg To display the key vault diagnostics configuration: switch:admin> cryptocfg --kvdiag -show Key vault diagnostic periodic tests Enabled Interval: 5 minute(s) Test Type: (diag) key retrieval/archival readiness Operation succeeded To change the interval at which the key vault diagnostics is run: switch:admin>...
  • Page 194 cryptoCfg cryptocfg --show -mkexported_keyids key_id cryptocfg --show -groupcfg cryptocfg --show -groupmember -all | node_WWN cryptocfg --show -egstatus -cfg | -stat cryptocfg --sync -encgroup cryptocfg --sync -securitydb DESCRIPTION Use these cryptoCfg commands to create or delete an encryption group, to add or remove group member nodes, key vaults, and authentication cards, to enable or disable system cards, to enable quorum authentication and set the quorum size, to manage keys including key recovery from backup, to configure group-wide policies, and to sync the encryption group databases.
  • Page 195 cryptoCfg Key Vault/CA Certificate Validity: Yes or No Port for Key Vault Connection: numeric identifier Time of Day on Key Server: time stamp or N/A Server SDK Version: revision number or N/A • Diagnostic information for the encryption node (key vault client): Node KAC Certificate Validity: Yes (valid) or No (invalid) Time of Day on the Switch: time stamp Client SDK Version: SDK revision number...
  • Page 196 cryptoCfg Current master key ID (or primary link key ID): Shows key ID or zero if not configured. Alternate master key (or secondary link key) state: Not configured, Saved, Created, Propagated, Valid, or Invalid. Alternate master key ID (or secondary link key ID): Shows key ID or zeroif not configured. •...
  • Page 197 cryptoCfg --reg -keyvault Registers the specified key vault (primary or secondary) with the encryption engines of all nodes present in an encryption group. Upon successful registration, a connection to the key vault is automatically established. This command is valid only on the group leader. Registered certificates are distributed from the group leader to all member nodes in the encryption group.
  • Page 198 cryptoCfg value Specifies the key vault type. The default is set to no value. This operand is required. Valid values for -keyvault include the following parameters: Specifies the NetApp LKM appliance (trusted key vault). Specifies the RSA Key Manager (RKM) (opaque key repository). Specifies one of the following: the HP Secure Key Manager (SKM) or the HP Enterprise Secure Key Manager (ESKM).
  • Page 199 cryptoCfg --set -systemcard> enable | disable Enables or disables the system card usage policy. When the policy is enabled, a system card is required to be inserted in an encryption engine to enable encryption after a power-cycle event. When quorum authentication is enabled (Quorum Size is >...
  • Page 200 cryptoCfg --exportmasterkey Exports the current master key encrypted in a key generated from a specified pass phrase. By default this command backs up the key to the attached key vaults, or optionally to a predetermined file on the switch. This command is valid only on the group leader.
  • Page 201 cryptoCfg --show -groupmember Displays detailed information for all encryption group members or for a single member. This command is valid on all member nodes and on the group leader. The following required operands are mutually exclusive: -all Displays information on all nodes in the existing encryption group. node_WWN Displays information on a single specified node.
  • Page 202 cryptoCfg To register a NetApp LKM appliance as the primary key vault "LKM1": SecurityAdmin:switch> cryptocfg --reg -regkeyvault LKM1 lkmcert.pem 10.33.54.231 primary decru-lkm-1 Register key vault status: Operation Succeeded. To set the key vault type to LKM: SecurityAdmin:switch> cryptocfg --set -keyvault LKM Set key vault status: Operation Succeeded.
  • Page 203 cryptoCfg To recover the master key from the key vault to the current location: SecurityAdmin:switch> cryptocfg --recovermasterkey currentMK -keyID bd:ae:2d:0b:b9:1a:ad:18:0d:eb:fe:c9:67:ed:29:b0 Enter the passphrase: passphrase Recover master key status: Operation succeeded. To display the saved key IDs associated with a repeatedly exported master key SecurityAdmin:switch>...
  • Page 204 cryptoCfg Time of Day on the Switch: Fri Jan 29 23:01:55.205779 GMT 2010 Client SDK Version: OpenKey Reference Lib 2.0.9 Client Username: Client Usergroup: Connection Timeout: 20 seconds Response Timeout: 20 seconds Connection Idle Timeout: Key Vault configuration and connectivity checks successful, ready for key operations.
  • Page 205 cryptoCfg Certificate: GL_cpcert.pem Current Master Key State: Not configured Current Master KeyID: 00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00 Alternate Master Key State:Not configured Alternate Master KeyID:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00 EE Slot: 0 SP state: Operational; Need Valid KEK Current Master KeyID: 00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00 Alternate Master KeyID:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00 No HA cluster membership Node Name: 10:00:00:05:1e:39:14:00 State:...
  • Page 206 cryptoCfg cryptocfg --replace [-haclustermember HA_cluster_name] current_node_WWN [slot] new_node_WWN [slot] cryptocfg --show -hacluster -all | HA_cluster_name DESCRIPTION Use these cryptoCfg commands to configure and manage High Availability (HA) clusters. An HA cluster consists of two encryption engines configured to host the CryptoTargets and to provide the active/standby failover and failback capabilities in a pair-wise relationship in a single fabric.
  • Page 207 cryptoCfg node_WWN Specifies the WWN of the switch or chassis to which the encryption engine belongs. This operand is optional; if omitted, only the HA cluster name is defined. You may add EEs separately with the --add -haclustermember command. slot Specifies the encryption engine slot number on bladed systems.
  • Page 208 cryptoCfg current_node_WWN [slot Specifies the WWN of the encryption engine to be replaced. This operand is required. On bladed systems, include the encryption engine slot number. new_node_WWN [slot] Specifies the WWN of the encryption engine that is to replace the current encryption engine.
  • Page 209 cryptoCfg HA cluster name: HAC2 - 2 EE entries Status: Defined Slot Number Status 10:00:00:05:1e:53:4c:91 Online 10:00:00:05:1e:53:74:87 Online To replace an encryption engine in HA cluster "HAC2": SecurityAdmin:switch> cryptocfg --replace -haclustermember HAC2 10:00:00:05:1e:53:4c:91 10:00:00:05:1e:39:53:67 Replace HA cluster member status: Operation Succeeded. To remove HA cluster member 10:00:00:05:1e:53:74:87 from the HA cluster "HAC2": SecurityAdmin:switch>...
  • Page 210 cryptoCfg cryptocfg --move -container crypto_target_container_name new_node_WWN [new_slot] cryptocfg --add -initiator crypto_target_container_name initiator_PWWN initiator_NWWN [[initiator_PWWN initiator_NWWN]...] cryptocfg --remove -initiator crypto_target_container_name initiator_PWWN [initiator_PWWN...] cryptocfg --add -LUN crypto_target_container_name LUN_Num | LUN_Num_Range initiator_PWWN initiator_NWWN [initiator_PWWN initiator_NWWN]...] [-lunstate encrypted | cleartext] [-keyID keyID] [-encryption_format native | DF_compatible] [-encrypt | -cleartext] [-enable_encexistingdata | -disable_encexistingdata] [-enablerekey time_period | -disable_rekey]...
  • Page 211 cryptoCfg cryptocfg --resume_rekey crypto_target_container_name LUN_Num initiator_PWWN cryptocfg --discoverLUN crypto_target_container_name cryptocfg --show -container -all -cfg | -stat cryptocfg --show -container crypto_target_container_name -cfg | -stat cryptocfg --show -tapepool -all | -label pool_label | -num pool_num -cfg | -stat cryptocfg --show -LUN crypto_target_container_name LUN_Num initiator_PWWN -cfg | -stat cryptocfg --show -rekey -all cryptocfg --show -rekey crypto_target_container_name...
  • Page 212 cryptoCfg CTC configuration uses a transaction model. Configuration changes must be committed before they take effect. Use the cryptocfg --commit command to commit the transaction. Refer to section "5. Transaction management" for more information. This command set supports the following tasks: •...
  • Page 213 cryptoCfg Encrypt existing data: disabled or enabled Rekey: disabled or enabled Key life: the key life span (in days) Volume/Pool label: the label for the tape volume or tape pool Internal EE LUN state: Encrypted, Cleartext, or Disabled (Data state is cleartext but metadata exists on the LUN, or vice versa.) Encryption algorithm: AES256-ECB (DF_compatible), AES256-GCM (native) or None (cleartext)
  • Page 214 cryptoCfg • Key life (in days); number of days until expiration • Rekey status: numeric value • Key expiration time • Rekey session number: numeric value • Percentage complete • Rekey state: Read or write Phase • Rekey role: primary, alternate •...
  • Page 215 cryptoCfg Tape policy type: pool-based or LUN-based Key life: key lifespan in days Volume/pool label LUN state: Refer to the Fabric OS Encryption Administrator's Guide. Encryption algorithm: AES256 -XTS (disk), AES256-CCM (tape), or none Compression algorithm Key ID state: available or not available Key ID: numeric identifier if available New LUN: Yes or No Replication LUN type: Primary or Mirror...
  • Page 216 cryptoCfg Volume/pool label: user-defined label Rekey status: numeric value If rekey- or tape sessions are in progress, the command shows the following information: • Number of rekey sessions in progress: numeric value • For each rekey session the display includes the following parameters: Rekey session number: numeric value Percent completion: numeric value Rekey state: Read or Write phase...
  • Page 217 cryptoCfg • Number of rekey sessions in progress: numeric value • For each rekey session the display includes the following parameters: Rekey session number: numeric value Percent completion: numeric value Rekey state. Displays one of the following parameters:  Rekey Setup ...
  • Page 218 cryptoCfg NOTES Encryption groups and HA clusters must be configured before performing any CryptoTarget container and Crypto LUN configurations. When adding a LUN to a CryptoTarget container, special attention should be paid to the input format. A LUN number can be entered either as a 16-bit (2 bytes) number in hex notation (for example, 0x07) or as a 64-bit (8 bytes) number in WWN format (for example, 00:07:00:00:00:00:00:00).

  • Page 219: New_Node_Wwn [New_Slot]

    cryptoCfg This operand is optional. You may add initiators at the time when the CTC is created or any time thereafter with the --add -initiator command. The following operands are required when specifying an initiator: initiator_PWWN Specifies the initiator port WWN. initiator_NWWN Specifies the initiator node WWN.

  • Page 220: Lun_Num | Lun_Num_Range

    cryptoCfg --add -initiator Adds one or more initiators to an existing CTC. An initiator that is added to a CTC facilitates discovering the LUNs of the target as exposed to these initiators. You must still add the initiators when you add the LUN to the CTC to enable access for these initiators.

  • Page 221: -Lunstate Encrypted | Cleartext

    cryptoCfg LUN policies are configured per HA or DEK cluster. For multi-path LUNs exposed through multiple target ports and thus configured on multiple CTCs on different EEs in an HA cluster or DEK cluster, the same LUN policies must be configured. Refer to the Fabric OS Administrator's Guide for more information.

  • Page 222: [-Enable_Encexistingdata | -Disable_Encexistingdata] [-Enablerekey Time_Period | -Disable_Rekey]

    cryptoCfg -newLUN Indicates that the LUN created does not contain any user data and will be part of a replication configuration. This operand is optional. The presence of this operand is incompatible with the -keyID, -key_lifespan, and -enable_rekey options. An RSA RKM must be configured and replication must be enabled (cryptocfg --set replication enabled) before invoking this command.
  • Page 223 cryptoCfg • The -key_lifespan parameter cannot be modified for tape LUNs once it has been set. • Exercise caution when modifying policy parameters while tape sessions are in progress. For information on the impact of encryption policy changes while tape sessions are in progress, refer to the Fabric OS Encryption Administrator's Guide.

  • Page 224: -Key_Lifespan Time_In_Days | None

    cryptoCfg This command is valid only on the group leader. The following operands are supported: -label pool_label | -num pool_num Specifies the tape pool volume label or alternately the tape pool ID. This is a user-defined identifier, which must be unique within the encryption group and should match the tape pool label or ID that is configured on the tape backup application.
  • Page 225 cryptoCfg --manual_rekey Performs a manual rekeying of a specified LUN associated with a specified CTC. Manual rekeying is performed in both online and offline fashion depending on whether or not the host is online or host I/O is present. If any policy-based rekeying operation is currently in progress, this command aborts with a warning message.
  • Page 226 cryptoCfg --show -container Displays all CTCs in the encryption group. This command is valid on all nodes. The following operands are supported: -all -cfg Displays the configuration for all containers in the encryption group. -all -stat Displays the runtime status for all containers hosted on the local node only. crypto_target_container_name Displays information for the specified CryptoTarget container.
  • Page 227 cryptoCfg --show -rekey Displays information about rekey sessions in progress. This command is valid on all nodes. The following operands are mutually exclusive: -all Lists all rekey sessions in progress on the current node. crypto_target_container_name Lists all rekey sessions in progress for a specified CryptoTarget container. You may further specify either one of the following operands: LUN_Num Lists all rekey sessions in progress for a specific Crypto LUN of the specified...
  • Page 228 cryptoCfg LUN_Num Specifies the number of the LUN whose metadata needs to be reread. initiator_PWWN Specifies the initiator port WWN for the specified LUN. --reclaimWWN Reclaims the WWNs of the specified member node or encryption engine. This command removes the WWNs from the specified entity. Once removed you can reallocate the WWNs.
  • Page 229 cryptoCfg nscamshow for remote switches: Switch entry for 2 state rev owner known v611 0xfffc01 Device list: count 13 Type Pid COS PortName NodeName NL 0208d3;3;20:0c:00:06:2b:0f:72:6d;20:00:00:06:2b:0f:72:6d; FC4s: FCP PortSymb:[55]"LSI7404XP-LC BR A.1 03-01081-02D FW:01.03.06 Port 1" Fabric Port Name: 20:08:00:05:1e:34:e0:6b Permanent Port Name: 20:0c:00:06:2b:0f:72:6d Port Index: 8 Share Area: No Device Shared in Other AD: No...
  • Page 230 cryptoCfg Number of host(s): Configuration status:committed Host: 10:00:00:00:c9:2b:c9:3a \ 20:00:00:00:c9:2b:c9:3a 20:02:00:05:1e:41:4e:1d \ 20:03:00:05:1e:41:4e:1d Number of LUN(s): Operation Succeeded Discover the LUNs seen by the initiators in the CryptoTarget container. FabricAdmin:switch> cryptocfg --discoverLUN my_disk_tgt Container name: my_disk_tgt Number of LUN(s): Host: 10:00:00:00:c9:2b:c9:3a LUN number: LUN serial number:...
  • Page 231 cryptoCfg Rekey: disabled Internal EE LUN state: Encryption enabled Encryption algorithm: AES256-XTS Key ID state: Read write Key ID:3a:21:6a:bd:f2:37:d7:ea:6b:73:f6:19:72:89:c6:4f Key creation time: Sun Jun 1 20:21:32 2008 New LUN: Replication LUN type: Primary Operation Succeeded Display Crypto LUN configuration. FabricAdmin:switch> cryptocfg --show -LUN my_disk_tgt 0 10:00:00:00:c9:2b:c9:3a -cfg EE node: 10:00:00:05:1e:41:9a:7e...
  • Page 232 cryptoCfg To display the tape pool configuration: FabricAdmin:switch> cryptocfg --show -container -all -cfg Encryption group name: brocade Number of Container(s): 2 Container name: pc21_stk10k Type: tape EE node: 10:00:00:05:1e:53:8a:28 EE slot: Target: 50:01:04:f0:00:b2:ea:6c \ 50:01:04:f0:00:b2:ea:6b 20:00:00:05:1e:53:8a:24 \ 20:01:00:05:1e:53:8a:24 Number of host(s): Configuration status: committed Host:...
  • Page 233 cryptoCfg To display CryptoTarget container runtime status information For a disk LUN with rekeying enabled: FabricAdmin:switch> cryptocfg --show -tapepool \ -LUN my_disk_tgt 0x0 10:00:00:db:69:78:93:0e -stat Container name: my_disk_tgt Type: disk EE node: 10:00:00:05:1e:53:75:01 EE slot: Target: 21:00:00:04:cf:6e:58:2c \ 20:00:00:04:cf:6e:58:2c Target PID: 0107d5 20:28:00:05:1e:53:74:fd \ 20:29:00:05:1e:53:74:fd...
  • Page 234 cryptoCfg Encryption format: native Encrypt existing data: enabled Rekey: enabled Key ID: not available Key life: 300 (days) Rekey status: Operation Succeeded To display all tape sessions in progress on the local node: FabricAdmin:switch> cryptocfg --show -tape_sessions -all Number of tape session(s): Container name: apps92 EE node:...
  • Page 235 cryptoCfg To reclaim all WWNs associated with a member node when no containers are present on the node: switch:admin> cryptocfg --reclaimWWN -membernode 10:00:00:05:33:13:7a:e8 Warning: WWN reclaim operation may result in momentary IO disruption. Make sure that the Membernodes are not hosting any container. ARE YOU SURE (yes, y, no, n): [no] y Operation succeeded.
  • Page 236 cryptoCfg OPERANDS The cryptoCfg transaction management function has the following operands: --help transcfg Displays the synopsis for the transaction management function. --commit Commits the transaction. This command saves the defined configuration to nonvolatile storage. Changes are persistent across reboots and power cycles. This command overwrites existing configuration parameters and therefore prompts for confirmation.
  • Page 237 cryptoCfg • Device decommissioning is supported only with the LKM and RKM key vaults. • Decommissioning of tape devices or snap drive volumes is currently no supported. • Decommissioning does not automatically delete the keys. You must manually delete the keys from the key vault to complete the operation.
  • Page 238 cryptoCfg Display the key IDs to be deleted manually from the keyvault switch:admin> cryptocfg --show -decommissionedkeyids Please Delete these keyed from the vault: 76:a0:01:f2:34:6e:44:cc:35:e9:be:71:64:ca:5e:90 switch:admin> cryptocfg --show vendorspecifickeyid aa:8b:91:b0:35:6f:da:92:8a:72:b3:97:92:1b:ca:b4 uuid = b7e07a6a-db64-40c2-883a-0bc6c4e923e6 Manually delete the keys from the vault. This step requires accessing the Key Vault GUI and deleting the keys manually.

  • Page 239: Datatypeshow

    dataTypeShow dataTypeShow Displays sample data stream types used in some diagnostic commands. SYNOPSIS datatypeshow [-seed value] DESCRIPTION Use this command to display sample data stream types used in diagnostic commands. There are 25 different sample data types. The command displays an example of each data stream. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 240: Date

    date date Displays or sets the switch date and time. SYNOPSIS date ["newdate"] DESCRIPTION Use this command to display or set the date and time. All switches maintain current date and time in flash memory. Date and time are used for logging events. Normal switch operation does not depend on the date and time;...
  • Page 241 date EXAMPLES To display the current date and time and then modify it: switch:admin> date Thu Mar 24 17:15:00 UTC 2011 switch:admin> date "03224182011" Thu Mar 24 18:20:26 UTC 2011 SEE ALSO errShow, ficonCupSet, ficonCupShow, portLogShow, tsClockServer, tsTimeZone, upTime Fabric OS Command Reference 53-1001764-01...

  • Page 242: Dbgshow

    dbgShow dbgShow Displays current values of debug and verbosity levels of the specified module. SYNOPSIS dbgshow [module_name] DESCRIPTION Use this command to display the current values of debug and verbosity levels of the specified module. If no module name is specified, this command displays a listing of all modules along with debug and verbosity levels.

  • Page 243: Defzone

    defZone defZone Sets or displays the default zone access mode. SYNOPSIS defzone [--noaccess | --allaccess | --show] DESCRIPTION Use this command to display or set the Default Zone access mode. Setting the Default Zone mode initializes a zoning transaction (if one is not already in progress), and create reserved zoning objects. A default zone controls device access when zoning is not enabled.
  • Page 244 defZone A cfgSave, cfgEnable, or cfgDisable command must be performed subsequent to the use of this command to commit the changes and distribute them to the fabric. If a cfgSave is performed and the fabric is already in the No Access default zone state, a cfgDisable is sent to the fabric.

  • Page 245: Diagclearerror

    diagClearError diagClearError Clears the diagnostics failure status. SYNOPSIS diagclearerror [[--slot] slot] -all DESCRIPTION Use this command to clear the diagnostics failure status. When used without operands, this command clears all port failure flags. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 246: Diagdisablepost

    diagDisablePost diagDisablePost Disables the power-on self-test (POST). SYNOPSIS diagdisablepost DESCRIPTION Use this command to disable POST. A reboot is not required for this command to take effect. Use the diagPost command to display the current POST status, and use diagEnablePost to enable POST. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 247: Diagenablepost

    diagEnablePost diagEnablePost Enables the power-on self-test (POST). SYNOPSIS diagenablepost DESCRIPTION Use this command to enable POST. A reboot is not required for this command to take effect. POST includes two phases: POST Phase I mainly tests hardware and POST Phase II tests system functionality. Use the diagPost command to display the current POST status, and use diagDisablePost to disable POST.

  • Page 248: Diaghelp

    diagHelp diagHelp Displays diagnostic command information. SYNOPSIS diaghelp DESCRIPTION Use this command to display a short description of diagnostic commands. Use default operands when running diagnostics commands. Non-default settings require detailed knowledge of the underlying hardware and are intended for support personnel only. Contact support if you want to use these operands.

  • Page 249: Diagpost

    diagPost diagPost Displays the diagnostic power-on self-test (POST) configuration. SYNOPSIS diagpost DESCRIPTION Use this command to display the current POST configuration. Use diagEnablePost or diagDisablePost to modify the POST configuration. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 250: Diagretry

    diagRetry diagRetry Sets or displays diagnostic retry mode. SYNOPSIS diagretry [mode | -show] DESCRIPTION Use this command to enable retry mode if the mode value is nonzero and to disable the retry mode if the mode value is 0. The mode value is saved in nonvolatile memory until you change the mode. Changes made by this command do not require a reboot to take effect.

  • Page 251: Diagshow

    diagShow diagShow Displays diagnostics status. SYNOPSIS diagshow [--slot number] [-uports itemlist] [-bports itemlist] [-use_bports value] DESCRIPTION Use this command to display the diagnostics status for the specified list of blade or user ports. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 252: Distribute

    distribute distribute Distributes data to switches in a fabric. SYNOPSIS distribute -p policy_list -d switch_list DESCRIPTION Use this command to distribute data to a specified list of switches in the fabric. The distributed data must be from the list of currently supported policy sets: Switch Connection Control Policy Device Connection Control Policy Password Database and Password Configuration Policy...
  • Page 253 distribute To distribute the Switch Connection Control Policy, Fabric Configuration Server Policy, and Password database to all domains in the fabric that support the distribute feature: switch:admin> distribute -p "SCC;FCS;PWD" -d "*" Wildcard domains are: 1 3 5 To distribute the FCS policy, and the Password database to all domains in the fabric that support the distribute feature: switch:admin>...

  • Page 254: Dlsreset

    dlsReset dlsReset Disables Dynamic Load Sharing (DLS). SYNOPSIS dlsreset DESCRIPTION Use this command to disable Dynamic Load Sharing. If DLS is turned off, load sharing calculations are used only to place new routes. Once placed, existing routes are never moved from one output E_Port to another, unless the original output E_Port is no longer a recognized path to the remote domain.

  • Page 255: Dlsset

    dlsSet dlsSet Enables Dynamic Load Sharing (DLS) without frame loss. SYNOPSIS dlsset dlsset --enable -lossless dlsset --disable -lossless dlsset --help DESCRIPTION Use this command to enable or disable Dynamic Load Sharing (DLS) in the event of a fabric change, to configure DLS without frame loss, and to display the DLS configuration.
  • Page 256 dlsSet The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. OPERANDS --enable -lossless Enables the Lossless feature. Frame loss is reduced while the path is rerouted. If DLS is set on the switch, this command adds the Lossless feature to the existing DLS legacy mode.
  • Page 257 dlsSet DLS configuration commands on a switch with a port-based policy: switch:admin> dlsshow DLS is set by default with current routing policy DLS is set with Lossless enabled switch:admin> dlsreset DLS is not set switch:admin> dlsshow DLS is not set switch:admin>...

  • Page 258: Dlsshow

    dlsShow dlsShow Displays the setting of the Dynamic Load Sharing (DLS) option. SYNOPSIS dlsshow DESCRIPTION Use this command to display information about Dynamic Load Sharing configuration settings on the switch. Depending on the configuration, the command output displays one of the following messages: •...

  • Page 259: Dnsconfig

    dnsConfig dnsConfig Sets, displays, or removes domain name service (DNS) parameters. SYNOPSIS dnsconfig DESCRIPTION Use this command to display, set, or remove the domain name service parameters. The domain name service parameters are the domain name and the name server IP address for primary and secondary name servers.

  • Page 260: Enclosureshow

    enclosureShow enclosureShow Displays attributes of the switch enclosure. SYNOPSIS enclosureshow attribute DESCRIPTION Use this command to display attributes of the switch enclosure, including the vendor-specific enclosure identifier and the identifier of the enclosure interface to which the switch is attached. This command applies to products that are embedded in a blade server or storage chassis.
  • Page 261 enclosureShow connfuse Information about whether or not the switch has a fuse. EXAMPLES To display the identifier of the enclosure interface to which the switch is attached: switch:admin> enclosureShow slotid Bay 4 SEE ALSO chassisShow Fabric OS Command Reference 53-1001764-01...

  • Page 262: Errclear

    errClear errClear Clears all error log messages for all switch instances on this Control Processor (CP). SYNOPSIS errclear DESCRIPTION Use this command to clear all internal and external error log messages for all switch instances on the CP where the command is executed. For products with a single processor, all error log messages are cleared.

  • Page 263: Errdelimiterset

    errDelimiterSet errDelimiterSet Sets the error log start and end delimiters for messages sent to the console and syslog. SYNOPSIS errdelimiterset [-s "start_delimiter_string"] [-e "end_delimiter_string"] DESCRIPTION Use this command to set the error log start and end delimiters for log messages sent to the console and syslog.

  • Page 264: Errdump

    errDump errDump Displays the error log without pagination. SYNOPSIS errdump [-a | -r ] DESCRIPTION Use this command to dump external error log messages without any page breaks. When executed without operands, this command prints all error messages for the logical switch context in which the command is executed.
  • Page 265 errDump EXAMPLES To display the error log for the chassis: switch:admin> errdump -a Fabric OS: v7.0.0 2010/12/17-22:29:17, [SEC-1203], 9036, CHASSIS, INFO,\ Spir_67, Login information : Login successful via \ TELNET/SSH/RSH. IP Addr: 10.106.7.62 2010/12/17-22:29:17, [ZONE-1022], 9037, CHASSIS, INFO, \ Spir_67, The effective configuration has changed to meh. 2010/12/17-22:29:17, [FABR-1001], 9041, CHASSIS, WARNING, \ Spir_67, port 0, incompatible Long distance mode.

  • Page 266: Errfilterset

    errFilterSet errFilterSet Sets a filter for an error log destination. SYNOPSIS errfilterset [-d destination][-v severity] DESCRIPTION Use this command to set a filter for an error log destination. A filter is set based on the severity level of the messages. When used without operands, this command displays the filters that are currently in configured.

  • Page 267: Errmoduleshow

    errModuleShow errModuleShow Displays all the defined error log modules. SYNOPSIS errmoduleshow DESCRIPTION Use this command to display a list of all defined error log modules. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 268: Errshow

    errShow errShow Displays the error log messages with pagination. SYNOPSIS errshow [-a | -r] DESCRIPTION Use this command to display external error log messages one at a time. When executed without operands, this command prints the error messages for the logical switch context in which the command is executed.
  • Page 269 errShow EXAMPLES To display the error log for the chassis: switch:admin> errshow -a Fabric OS: v6.4.0 2010/08/25-10:10:41, [SEC-1203], 9036, CHASSIS, INFO, \ Spir_67, Login information : Login successful via \ TELNET/SSH/RSH. IP Addr: 10.106.7.62 [Type <CR> to continue, Q<CR> to stop: 2010/08/25-10:13:41, [ZONE-1022], 9037, CHASSIS, INFO,\ Spir_67, The effective configuration has changed to meh.

  • Page 270: Exit

    exit exit DESCRIPTION See logout. SEE ALSO None Fabric OS Command Reference 53-1001764-01...

  • Page 271: Fabretryshow

    fabRetryShow fabRetryShow Displays the retry count of the fabric commands. SYNOPSIS fabretryshow DESCRIPTION Use this command to display the retry count of the fabric commands. For each port, the command output displays counts for the following Switch Internal Link Service (SW_ILS) requests: Exchange Link Parameters Exchange Fabric Parameters HA_EFP...
  • Page 272 fabRetryShow NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. OPERANDS None EXAMPLES To display the retry count of Fabric OS Commands: switch:user>...

  • Page 273: Fabriclog

    fabricLog fabricLog Displays (all users) or manipulates (admin) the fabric log. SYNOPSIS fabriclog -s | --show [dport] fabriclog -c | --clear [dport] fabriclog -d | --disable fabriclog -e | --enable fabriclog -r size | --resize size fabriclog -h | --help DESCRIPTION Use this command to display, clear, disable, enable, or resize the fabric log.
  • Page 274 fabricLog The non-Principal switch is processing an RDI. The switch is in offline state. Port state. Port states include the following: The port is offline. The port is online. Exchange Link Parameters (ELP) Accept Frame (ACC) received. Link reset occurred on master or E_Port. Trunk Initiator: Exchange Mark Timestamp (EMT) sent.
  • Page 275 fabricLog NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. OPERANDS This command has the following operands: -s | --show [dport] Displays the fabric log.

  • Page 276: Fabricname

    fabricName fabricName Configures the fabric name parameter. SYNOPSIS fabricname --set fabric_name fabricname --clear fabricname --show fabricname --help DESCRIPTION Use this command to configure a name for the fabric. With Virtual Fabrics it is not uncommon to have multiple fabrics in a single chassis. These logical fabrics are identified by their Fabric ID.
  • Page 277 fabricName switch:user> fabricname --show Fabric Name: "my new fabric" To clear the fabric name: switch:user> fabricname --clear Fabric Name cleared! switch:user> fabricname --show Fabric Name is not configured SEE ALSO switchShow, fabricShow Fabric OS Command Reference 53-1001764-01...

  • Page 278: Fabricprincipal

    fabricPrincipal fabricPrincipal Sets the principal switch selection mode. SYNOPSIS fabricprincipal --help | -h fabricprincipal [--show | -q] fabricprincipal --enable [ -priority | -p priority] [-force | -f ] fabricprincipal --disable fabricprincipal [-f] mode DESCRIPTION Use this command to set principal switch selection mode for a switch and to set priorities for principal switch selection.
  • Page 279 fabricPrincipal 0x01 Highest priority. This is a user-defined value 0x02 Switch was principal prior to sending or receiving a build fabric (BF) request. This value is generated by the switch to initiate a fabric reconfiguration. This value should not be assigned. 0x3 - 0xFE Priority value range.
  • Page 280 fabricPrincipal To display the principal switch selection priority: switch:admin> fabricprincipal --show Principal Selection Mode: Enable Principal Switch Selection Priority: 0x10 SEE ALSO fabricShow Fabric OS Command Reference 53-1001764-01...

  • Page 281: Fabricshow

    fabricShow fabricShow Displays fabric membership information. SYNOPSIS fabricshow [-membership | -chassis] fabricshow -help DESCRIPTION Use this command to display information about switches in the fabric. If the switch is initializing or is disabled, the message "no fabric" is displayed. Running this command on an FCR or edge switch does not provide any router information; running this command on an edge switch with the -membership option does provide router information.
  • Page 282 fabricShow NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. OPERANDS This command has the following operands: -membership Displays fabric membership information with additional details of the FC Router, if present in the fabric.
  • Page 283 fabricShow To show additional details about the chassis: switch:admin> fabricshow -chassis Switch ID Name ENET IP Addr Chassis WWN Chassis Name --------------------------------------------------------------------- 4:fffc04 sw5100_126_128 10.38.17.126 10:00:00:05:1e:0e:eb:58 Brcd5100 5:fffc05 sw1500_127_128 10.38.17.127 10:00:00:05:1e:0e:eb:98 Brcd5100 The Fabric has 2 switches SEE ALSO fabricName, switchShow Fabric OS Command Reference 53-1001764-01...

  • Page 284: Fabstatsshow

    fabStatsShow fabStatsShow Displays fabric statistics. SYNOPSIS fabstatsshow DESCRIPTION Use this command to display statistics for the fabric. The following information is displayed: • Number of times a switch domain ID has been forcibly changed • Number of E_Port offline transitions •...
  • Page 285 fabStatsShow NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. OPERANDS None EXAMPLES To display the fabric statistics: switch:admin>...

  • Page 286: Fandisable

    fanDisable fanDisable Disables a fan unit. SYNOPSIS fandisable unit DESCRIPTION Use this command to disable a nonfaulty fan unit by setting the RPM speed to 0. NOTES This command is not available on nonbladed systems except for the Brocade 5300. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 287: Fanenable

    fanEnable fanEnable Enables a fan unit. SYNOPSIS fanenable unit DESCRIPTION Use this command to set a previously disabled fan unit back to the default RPM speed. NOTES This command is not available on nonbladed systems except for the Brocade 5300. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 288: Fanshow

    fanShow fanShow Displays fan status and speed. SYNOPSIS fanshow DESCRIPTION Use this command to display the current status and speed of each fan in the system. Fan status is displayed as follows: Fan is functioning correctly. absent Fan is not present. below minimum Fan is present but rotating too slowly or stopped.

  • Page 289: Fapwwn

    faPwwn faPwwn Manages fabric-assigned port world wide names. SYNOPSIS fapwwn --enable -port [slot/]port[-port] fapwwn --enable -ag AG_WWN] -port port fapwwn --disable -port [slot/]port[-port] fapwwn --disable -ag AG_WWN -port port fapwwn --assign [-ag AG_WWN] -port [slot/]port [-v VPWWN] fapwwn --delete -port [slot/]port[-port] fapwwn --delete -ag AG_WWN [-port port] fapwwn --delete -v VWWN fapwwn --move -srcport source_port -dstport dest_port...
  • Page 290 faPwwn A single port can be assigned up to two WWNs, one assigned automatically and one assigned by the user. Only one FA-PWWN can be active at any given time. The user-assigned FA-PWWN takes precedence over the automatically assigned FA-PWWN. This means, the switch will bind the user-assigned FA-PWWN to the port if both a user-assigned and an automatically assigned FA-PWWN are available.
  • Page 291 faPwwn The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. OPERANDS this command has the following operands: --enable Enables the FA-PWWN feature on the specified switch ports or AG ports.
  • Page 292 faPwwn Specifies all ports on the logical switch. This operand is valid only with the --show option. --move Moves an active FA-PWWN from a source to the specified destination port. Use this command to move a server across switch ports. If the source port has both a user-assigned and an automatically assigned FA-PWWN, the user-assigned FA-PWWN will be moved to the destination port as a user-assigned FA-PWWN and replace any automatically assigned FA-PWWN that may be active on that...
  • Page 293 faPwwn To assign an user-assigned FA-PWWN to an AG port: fapwwn --assign -ag 12:34:56:78:90:12:23:45 -port 0 \ -v 11:22:33:44:55:66:77:88 To delete the active FA-PWWN of a switch port: fapwwn --delete -port 10 To delete the active FA-PWWN of an AG port: fapwwn --delete -ag 12:34:56:78:90:12:34:56 -port 10 To display the active FA-PWWN for a single FC port (the real device PWWN is hidden): fapwwn --show -port 10...
  • Page 294 faPwwn 11:22:33:44:55:66:77:88 11403 AG/User 52:00:10:00:00:0f:50:32 2:00:10:00:00:0f:50:33 11404 AG/Auto 52:00:10:00:00:0f:50:38 AG/Auto (output split) To display the active FA-PWWNs of all ports associated with a single AG (in the following example, one VPWWN is not unassigned): fapwwn --show -ag 10:00:00:05:1e:d7:3d:dc ----------------------------------------------------------- AG Port Port Device Port WWN -----------------------------------------------------------...

  • Page 295: Fastboot

    fastBoot fastBoot Reboots the Control Processor (CP), bypassing the Power-On Self-Test (POST). SYNOPSIS fastboot DESCRIPTION Use this command to perform a "cold reboot" (power off/restart) of the CP bypassing POST when the system comes back up. Bypassing POST can reduce boot time significantly. If POST was previously disabled using the diagDisablePost command, then fastBoot is the same as reBoot.
  • Page 296 fastBoot To reboot a DCX without executing POST on startup (in the example, HA is enabled): switch:admin> fastboot Warning: This command is being run on a control processor (CP) based system and will cause the active CP to reboot. Are you sure you want to reboot the active CP [y/n]? y Broadcast message from root (pts/0) Sun Feb 28 19:49:45 2010...

  • Page 297: Fcipchiptest

    fcipChipTest fcipChipTest Tests functionality of components in the FCIP complex. SYNOPSIS fcipchiptest [--slot slot] [-testtype type] [-unit number] DESCRIPTION Use this command to verify the internal registers and memory of the network processor, FCIP FPGA, compression processor, and GigPHY. NOTES This command is supported only on the Brocade FR4-18i.
  • Page 298 fcipChipTest CHIP_TEST_IMAGE_VER_ERR CHIP_TEST_TIMEOUT_ERR CHIP_TEST_HEARBEAT_ERR CHIP_TEST_INVALID_RESULT EXAMPLES To run all tests on slot 7 and GbE port 1: switch:admin> fcipchiptest --slot 7 -unit 1 -testtype 0 Running fcipchiptest ....Test Complete: fcipchiptest Pass 1 of 1 Duration 0 hr, 1 min & 15 sec (0:1:15:351). passed.

  • Page 299: Fciphelp

    fcipHelp fcipHelp Displays FCIP command information. SYNOPSIS fciphelp DESCRIPTION Use this command to display a listing of Fibre Channel over IP (FCIP) commands with short descriptions for each command. FCIP commands require an FCIP license. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 300: Fcipledtest

    fcipLedTest fcipLedTest Exercises the GbE port LEDS on the Brocade 7800 and FX8-24. SYNOPSIS fcipledtest [slot | all] DESCRIPTION Use this command to exercise the GbE port LEDs on the Brocade 7800 and FX8-24. This test cycles through the port LEDs by lighting GREEN and then flashing GREEN on all ports for 3 seconds. As the test continues the ports turn AMBER and then flashing AMBER for 3 seconds.

  • Page 301: Fcippathtest

    fcipPathTest fcipPathTest Tests the data path of the FCIP complex. SYNOPSIS fcippathtest [--slot slot] [-lb_mode mode] [-nframes count] fcippathtest [--slot slot] [-unit number] [-path mode] [-nframes count] [-length data_length] [-compress mode] DESCRIPTION Use this command to verify the data paths in the FCIP complex. All data path modes run tests by comparing Fibre Channel frames or data packets transmitted from and received by the network processor due to the designated loopback.
  • Page 302 fcipPathTest External (SERDES) loopback Backend bypass and port loopback -path mode Specifies the loopback mode for the test on the Brocade FR4-18i only. By default, fcipPathTest uses the PHY and central ASIC loopback modes. You can specify one of the following alternate loopback modes: SFP loopback PHY loopback FCIP FPGA GMAC loopback...
  • Page 303 fcipPathTest EXAMPLES To run the test on slot 2 with PHY loopback sending 10 frames: switch:admin> fcippathtest --slot 2 -path 2 -nframes 10 Running fcippathtest ....Test Complete: fcippathtest Pass 10 of 10 Duration 0 hr, 1 min & 50 sec (0:1:50:942). passed.

  • Page 304: Fcoe

    fcoe fcoe Manages and displays FCoE configuration. SYNOPSIS fcoe --cfgshow [[slot/]port] fcoe --portcfg [[slot/]port] ve_port | vf_port fcoe --disable [slot/]port fcoe --enable [slot/]port fcoe --loginshow [[slot/]port] fcoe --fcmapset -vlan vid fcmapid fcoe --fcmapunset -vlan vid fcoe --fipcfg -advintvl intvl fcoe --fipcfgshow fcoe --resetlogin [-teport [slot/]port | -device wwn] fcoe --help DESCRIPTION...
  • Page 305 fcoe --enable Enables the specified FCoE port. --loginshow Displays information about the devices logged in to the specified FCoE port. --fcmapset Configures the FCMAP values for Fabric Provided MAC Addresses (FPMA) for the specified VLANs. -vlan vid Specifies the VLAN for which to set the FCMAP. fcmapid Specifies the FCMAP to be set.
  • Page 306 fcoe (Trunk port, master is Port 850200 Online E-Port (Trunk port, master is Port 850300 Online E-Port (Trunk port, master is Port 850400 Online E-Port (Trunk port, master is Port 850500 Online E-Port (Trunk port, master is Port 850600 Online E-Port (Trunk port, master is Port 850700...
  • Page 307 fcoe 18 ENABLED 20:12:00:05:1e:76:60:80 0 FCoE VF-Port 00:05:1e:76:60:8a 128 19 ENABLED 20:13:00:05:1e:76:60:80 0 FCoE VF-Port 00:05:1e:76:60:8b 128 20 ENABLED 20:14:00:05:1e:76:60:80 0 FCoE VF-Port 00:05:1e:76:60:8c 128 21 ENABLED 20:15:00:05:1e:76:60:80 0 FCoE VF-Port 00:05:1e:76:60:8d 128 (output truncated) To display FIP and FCMAP configurations on the Brocade 8000: switch:admin>...

  • Page 308: Fcoelogincfg

    fcoeLoginCfg fcoeLoginCfg Manages or displays the FCoE login configuration. SYNOPSIS fcoelogincfg --show [-switch swwn | -logingroup lgname] [-saved] | [-mergestatus] fcoelogincfg --save fcoelogincfg --transshow fcoelogincfg --transabort fcoelogincfg --purge -conflicting [-nonexisting] fcoelogincfg --purge -nonexisting [-conflicting] fcoelogincfg --enable fcoelogincfg --disable fcoelogincfg --help DESCRIPTION Use this command to save, abort, or display the current FCoE login configuration, including ongoing transactions and the effective (saved) configuration.
  • Page 309 fcoeLoginCfg --transshow Displays the current configuration transaction in progress fabric-wide. --transabort Aborts the FCoE login configuration transaction currently in progress. --purge Purges the specified entries from the effective configuration. Specify one or both of the following operands: -conflicting Purges all conflicting login groups and conflicting VN_Port mappings from the effective configuration.
  • Page 310 fcoeLoginCfg To perform a clean-up of the effective configuration: switch:admin> fcoelogincfg --purge -conflicting -nonexisting switch:admin> To disable the FCoE login configuration management on the switch: switch:admin> fcoelogincfg --disable switch:admin> fcoelogincfg --show Login management is disabled. Effective Configuration *********************** Login management is disabled. SEE ALSO fcoeLoginGroup Fabric OS Command Reference...

  • Page 311: Fcoelogingroup

    fcoeLoginGroup fcoeLoginGroup Creates and manages FCoE login group configuration. SYNOPSIS fcoelogingroup --create lgname -self | -switch swwn [-allowall | member[;member] ...] fcoelogingroup --delete lgname fcoelogingroup --add lgname member[;member] ... fcoelogingroup --remove lgname wwn fcoelogingroup --rename lgname newlgname fcoelogingroup --help DESCRIPTION Use this command to create or modify the FCoE login management configuration fabric-wide.
  • Page 312 fcoeLoginGroup lgname Specifies the name of the login group. --add Adds VN_Port devices to the login group. lgname Specifies the name of the login group to which VN_Port devices are to be added. member Identifies the WWN of the VN_Port. The WWN must be specified in hex as xx.xx.xx.xx.xx.xx.xx.xx.

  • Page 313: Fcping

    fcPing fcPing Sends a Fibre Channel Extended Link Service (ELS) Echo request to a pair of ports or to a single destination, or executes a SuperPing. SYNOPSIS fcping [--number frames] [--length size] [--interval wait] [--pattern pattern] [--bypasszone] [--quiet] [source] destination fcping --allpaths [-printisl] [-maxtries M]...
  • Page 314 fcPing NOTES The ELS Echo may not be supported on all devices. In such cases, the response could be either an ELS reject or a request timeout. By default, fcPing sends five ELS Echo requests to each port. When a device does not respond to the ELS Echo request, further debugging may be needed to determine, whether the device does not support ELS Echo, or whether the request is rejected for some other reason.
  • Page 315 fcPing --quiet Suppresses the diagnostic output. Only zoning information, if applicable, and the summary line are displayed. The following operands are valid only when fcPing is executed to perform a SuperPing: --allpaths [args] destination Executes a SuperPing that covers all available paths to the specified destination. The number of actual paths covered depends on two other parameters that you can optionally specify.
  • Page 316 fcPing Pinging 21:00:00:20:37:25:ad:05 [0x211e8] with 12 bytes of data: Request rejected Request rejected Request rejected Request rejected Request rejected 5 frames sent, 0 frames received, 5 frames rejected, 0 frames timeout Round-trip min/avg/max = 0/0/0 usec To display one device that accepts the request and another device that does not respond to the request: switch:admin>...
  • Page 317 fcPing Permanent Port Name: 20:07:00:05:1e:35:10:7f Port Index: 5 Share Area: No Device Shared in Other AD: No Redirect: No Partial: NO N 370501; 3;10:00:00:00:c9:3f:7c:b8;20:00:00:00:c9:3f:7c:b8; na FC4s: FCP NodeSymb: [44] "Emulex LP1050 FV1.81A1 DV5-5.20A9 DELL1750-3" Fabric Port Name: 20:05:00:05:1e:34:01:f5 Permanent Port Name: 20:07:00:05:1e:35:10:7f Port Index: 5 Share Area: No Device Shared in Other AD: No...
  • Page 318 fcPing Successfully completed superping for all paths SWITCH3--> SWITCH4 STATUS --------------------------------------------------------- (2/7,2/EMB)[2] (30/EMB,30/8)[128] (40/9, 40/EMB)[128] SUCCESS Successfully completed superping for all paths To execute a SuperPing and print statistical coverage of each ISL and internal port along the potential paths (in the example, a few errors are recorded on the ISLs 3/205->2/25, 3/204->2/27, 2/42->101/3, and 2/1->101/8, but the internal port analysis shows that errors are recorded on the internal port 0/284 in domain 2, which is the potential faulty link): switch:admin>...
  • Page 319 fcPing To execute a superPing with a coverage count of 1000 and a maxtries value of 5000 (in the example, the ISL (3/204->204/27), could not be covered 1000 times): switch:admin> fcping --allpaths -covcount 1000 -maxtries 5000 -printisl 165 Pinging(size:12 bytes) destination domain 165 through all paths PATH SWITCH1-->...

  • Page 320: Fcplogclear

    fcpLogClear fcpLogClear Clears the FCPD debug information log. SYNOPSIS fcplogclear DESCRIPTION Use this command to clear the debug information logged by the Fibre Channel Protocol daemon (FCPD). NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 321: Fcplogdisable

    fcpLogDisable fcpLogDisable Disables the FCPD debug information log. SYNOPSIS fcplogdisable DESCRIPTION Use this command to disable the logging of debug information by the Fibre Channel Protocol daemon (FCPD). NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 322: Fcplogenable

    fcpLogEnable fcpLogEnable Enables the FCPD debug information log. SYNOPSIS fcplogenable DESCRIPTION Use this command to enable Fibre Channel Protocol daemon (FCPD) logging. Debug information logging is enabled by default. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 323: Fcplogshow

    fcpLogShow fcpLogShow Displays the FCPD debug information log. SYNOPSIS fcplogshow DESCRIPTION Use this command to display the debug information logged at various stages during the Fibre Channel Protocol daemon (FCPD) device probing. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 324: Fcpprobeshow

    fcpProbeShow fcpProbeShow Displays the Fibre Channel Protocol (FCP) probe information. SYNOPSIS fcpprobeshow [slot/]port DESCRIPTION Use this command to display the Fibre Channel Protocol daemon (FCPD) device probing information for the devices attached to the specified F_Port or FL_Port. This information includes the number of successful logins and SCSI INQUIRY commands sent over this port and a list of the attached devices.

  • Page 325: Fcprlsshow

    fcpRlsShow fcpRlsShow Displays the Fibre Channel Protocol (FCP) Read Link Status (RLS) information. SYNOPSIS fcprlsshow [slot/]port DESCRIPTION Use this command to display the FCP RLS information for an F_Port or FL_Port. This information describes the number of loss-of-signal, loss-of-sync, CRC errors, and other failure events detected on the specified port.

  • Page 326: Fcrbcastconfig

    fcrBcastConfig fcrBcastConfig Displays or sets the broadcast frame forwarding option. SYNOPSIS fcrbcastconfig --show fcrbcastconfig --enable -f fabric_id fcrbcastconfig --disable -f fabric_id fcrbcastconfig --help DESCRIPTION Use this command to enable or disable the broadcast frame option or to display the current configuration. If no operands are specified, this command displays the usage.
  • Page 327 fcrBcastConfig To display the new configuration: switch:admin> fcrbcastconfig --show Broadcast configuration is enabled for FID: 2 128 SEE ALSO bcastShow, portRouteShow Fabric OS Command Reference 53-1001764-01...

  • Page 328: Fcrchiptest

    fcrChipTest fcrChipTest Tests the functionality of FC Router FPGA. SYNOPSIS fcrchiptest [--slot slot] [-unit number] [-testtype type] DESCRIPTION Use this command to test the FC Router Field-programmable gate array (FPGA). This test verifies that all SRAM and register data bits in each ASIC can be independently written and read successfully. The method used is to write a walking 1 pattern to each location.
  • Page 329 fcrChipTest All FC Router FPGAs DIAGNOSTICS When a failure is detected, the test might report one or more of the following: DMA_ALLOC_FAIL DMA_READ_ABORT DMA_READ_TIMEOUT CHIP_INIT_TIMEOUT BIST_TIMEOUT BIST_FAIL EXAMPLES To run all tests on slot 7 and FC Router FPGA 1: switch:admin>...

  • Page 330: Fcrconfigure

    fcrConfigure fcrConfigure Sets FC Router configuration parameters. SYNOPSIS fcrconfigure DESCRIPTION Use this command to configure FC Router parameters. This is an interactive command. Before you can execute this command, you must disable FC routing by using the fosConfig command and disable the switch with the switchDisable command. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 331: Fcredgeshow

    fcrEdgeShow fcrEdgeShow Displays the FIDs of all configured EX_Ports. SYNOPSIS fcredgeshow fcredgeshow [-fid FabricID] fcredgeshow --help DESCRIPTION Use this command without operand to display information about all Fabric IDs (FIDs) that have been created on the chassis and are assigned to EX_Ports. When a FID is specified, fcredgeshow displays information for all EX_Ports configured with the specified FID.
  • Page 332 fcrEdgeShow To display the EX_Ports configured with a specified FID: switch:admin> fcredgeshow -fid 25 FID EX-port E-port Neighbor Switch (PWWN, SWWN ) ----------------------------------------------------------------- 20:f4:00:05:1e:38:a4:cb 10:00:00:05:1e:38:a4:cb To display a FID for which no EX_Ports are configured: switch:admin> fcredgeshow -fid 29 No EX-ports with FID 29 SEE ALSO fcrPhyDevShow, fcrProxyDevShow, fcrRouteShow, lsanZoneShow, switchShow, fcrFabricShow...

  • Page 333: Fcrfabricshow

    fcrFabricShow fcrFabricShow Displays the FC Routers on a backbone fabric. SYNOPSIS fcrfabricshow DESCRIPTION Use this command to display information about FC Routers that exist in an FC Router backbone fabric. The existing syntax is maintained for IPv6 support. When IPv6 addresses are not configured, the output of fcrFabricShow displays the IPv4 format.
  • Page 334 fcrFabricShow EX_Port FID Neighbor Switch Info (enet IP, WWN, name) ------------------------------------------------------- 10.33.35.80 10:00:00:05:1e:38:01:e7 "B10_3" 10.33.35.80 10:00:00:05:1e:38:01:e7 "B10_3" FC Router WWN: 10:00:00:05:1e:39:51:67, Dom ID: 5, Info: 10.33.36.96, "Scimitar" EX_Port FID Neighbor Switch Info (enet IP, WWN, name) -------------------------------------------------------- 10.33.35.80 10:00:00:05:1e:38:01:e7 "B10_3"* SEE ALSO fcrPhyDevShow, fcrProxyDevShow, fcrRouteShow, lsanZoneShow, switchShow...

  • Page 335: Fcrlsan

    fcrLsan fcrLsan Configures and displays LSAN policies. SYNOPSIS fcrlsan fcrlsan --add -enforce tag | -speed tag fcrlsan --remove -enforce tag | -speed tag fcrlsan --show -enforce | -speed | all fcrlsan --help DESCRIPTION Use this command to add or remove LSAN tags, or to display existing tags in the configuration. LSAN tagging optimizes an FC Router's behavior based on a specified subset of LSANS.
  • Page 336 fcrLsan --show Displays the specified tag from the LSAN tag configuration. --help Displays the command usage. -enforce tag Accepts only the LSANs from the edge fabric that matches the specified tag string into the local FCR database. A valid tag is a string of a maximum of eight characters.

  • Page 337: Fcrlsancount

    fcrLsanCount fcrLsanCount Displays or sets the maximum LSAN count. SYNOPSIS fcrlsancount [max_lsan_count] DESCRIPTION Use this command to set or display the maximum number of LSAN zones that can be configured on the edge fabric. By default, the maximum LSAN count is set to 3000, which is also the minimum. This command allows you to create up to 5000 LSANs on your edge fabric, if needed to support additional devices.

  • Page 338: Fcrlsanmatrix

    fcrLsanMatrix fcrLsanMatrix Creates, modifies, and displays the LSAN fabric matrix or the FCR matrix. SYNOPSIS fcrlsanmatrix fcrlsanmatrix --add -lsan FID FID | -fcr wwn wwn fcrlsanmatrix --remove -lsan FID FID | -fcr wwn wwn fcrlsanmatrix --apply -lsan | -fcr | -all fcrlsanmatrix --cancel -lsan | -fcr | -all fcrlsanmatrix --display -lsan | -fcr | -all fcrlsanmatrix --fabricview -lsan | -fcr...
  • Page 339 fcrLsanMatrix NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. OPERANDS If no operands are specified, this command displays the persistent LSAN Zone matrix information. The following operands are optional: --add -lsan FID FID | -fcr wwn wwn Adds the pair of edge fabrics or FCR members that can access each other to the...
  • Page 340 fcrLsanMatrix To zero out the database, execute the following commands: fcrlsanmatrix --add -lsan 0 0 fcrlsanmatrix --add -fcr 00:00:00:00:00:00:00:00 00:00:00:00:00:00:00:00 fcrlsanmatrix --apply -all • In a dual backbone configuration, execute fcrlsanmatrix --fabricview on the FCR switches to confirm that the shared edge fabric FIDs have the same access in both backbones. •...
  • Page 341 fcrLsanMatrix To view the persistent changes: switch:admin> fcrlsanmatrix -lsan LSAN MATRIX is activated Fabric ID 1 Fabric ID 2 -------------------------------------- To view the LSAN Zone static and default/dynamic binding in the backbone where online fabrics are: 1, 2, 4, 5, 7, 8, 10: switch:admin>...
  • Page 342 fcrLsanMatrix To view all the static and the default/dynamic fabric binding in the backbone: switch:admin> fcrlsanmatrix --fabricview -lsan LSAN MATRIX is activated Fabric ID 1 Fabric ID 2 -------------------------------------- Default LSAN Matrix: 57 91 To add FCR Bindings to the FCR matrix: switch:admin>...

  • Page 343: Fcrpathtest

    fcrPathTest fcrPathTest Tests the data path connection between the FC Router FPGA and the central ASIC. SYNOPSIS fcrpathtest [--slot slot] [-unit number] [-path mode] [-nframes count] DESCRIPTION Use this command to verify the data path connecting the FC Router field-programmable gate array (FPGA) and the central ASIC by sending frames from the FC Router FPGA port N transmitter, and looping the frames back into the same port's receiver.
  • Page 344 fcrPathTest OPERANDS This command has the following operands: --slot slot Specifies the slot number on which the diagnostic operates. The default is 0 and operates on fixed-port-count products. -unit number Specifies the FC Router FPGA to test. By default, all FC Router FPGAs in the specified slot are tested.
  • Page 345 fcrPathTest DIAG-TIMEOUT The port failed to receive back a frame that was sent out. This can be caused by a faulty SFP or indicate deeper problems in the main board or ASIC. Check for a faulty SFP. Replace the SFP if necessary. DIAG-XMIT The specified port failed to transmit frames.

  • Page 346: Fcrphydevshow

    fcrPhyDevShow fcrPhyDevShow Displays the FC Router physical device information. SYNOPSIS fcrphydevshow [-a][-f FID][-w wwn][-c][-d] DESCRIPTION Use this command to display the physical (real) devices that are configured to be exported to other fabrics. A device is considered to be configured to be exported to another fabric if it is a member of an LSAN zone.
  • Page 347 fcrPhyDevShow local failure the number of times the device login failed because of missing LSAN zones within the device fabric. remote failure the number of times the device login failed due to missing LSAN zones within the remote fabric. EXAMPLES To display the physical devices relevant to an FC Router: fcr:admin>...

  • Page 348: Fcrproxyconfig

    fcrProxyConfig fcrProxyConfig Displays or configures proxy devices presented by an FC Router. SYNOPSIS fcrproxyconfig [-s importedFID devWWN slot] [-r importedFID devWWN] DESCRIPTION Use this command to display or set the persistent configuration of proxy devices presented by the local FC Router. When used without operand, this command displays the persistent proxy device configuration;...
  • Page 349 fcrProxyConfig If no proxy device WWN is stored in any slot for all edge fabrics, the following message is displayed: "All slots empty." NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 350: Fcrproxydevshow

    fcrProxyDevShow fcrProxyDevShow Displays FC Router proxy device information. SYNOPSIS fcrproxydevshow [-a][-f fabricid][-w wwn] DESCRIPTION Use this command to display the proxy devices presented by FC Router EX_Ports and information about the proxy devices. A proxy device is a virtual device presented in to a fabric by an FC Router. A proxy device represents a real device on another fabric.
  • Page 351 fcrProxyDevShow -a -f fabricid Display the proxy devices in the specified fabric for all FC Routers in the same backbone fabric whether or not they are relevant to this FC Router. -f fabricid Display the proxy devices in the specified fabric that are relevant to this FC Router.

  • Page 352: Fcrresourceshow

    fcrResourceShow fcrResourceShow Displays FC Router physical resource usage. SYNOPSIS fcrresourceshow DESCRIPTION Use this command to display the FC Router-available resources. The maximum number allowed versus the currently used is displayed for various resources. The command output includes: LSAN Zones The maximum versus the currently used LSAN zones. LSAN Devices The maximum versus the currently used LSAN device database entries.
  • Page 353 fcrResourceShow OPERANDS None EXAMPLES To display the resource usage for the local FC Router: switch:admin> fcrresourceshow Daemon Limits: Max Allowed Currently Used ---------------------------- LSAN Zones: 3000 LSAN Devices: 10000 1208 Proxy Device Slots: 10000 WWN Pool Size Allocated ---------------------------- Phantom Node WWN: 8192 3790 Phantom Port WWN:...

  • Page 354: Fcrrouterportcost

    fcrRouterPortCost fcrRouterPortCost Displays or sets an FC Router port cost. SYNOPSIS fcrrouterportcost [[slot/]port] [cost] DESCRIPTION Use this command to set or display the cost of the FC Router ports. You can set the cost of the link to one of two fixed values: 1000 or 10000. The option 0 sets the cost of the link to the default value based on link type (EX/VEX).
  • Page 355 fcrRouterPortCost To display the cost on an EX_Port: switch:admin> fcrrouterportcost 7/10 0 switch:admin> fcrrouterportcost 7/10 Port Cost ------------------------ 7/10 1000 To set the cost of an EX_Port and display the result: switch:admin> fcrrouterportcost 7/10 10000 switch:admin> fcrrouterportcost 7/10 Port Cost ------------------------ 7/10 10000...

  • Page 356: Fcrrouteshow

    fcrRouteShow fcrRouteShow Displays FC Router route information. SYNOPSIS fcrrouteshow DESCRIPTION Use this command to display routes through the FC Router backbone fabric to accessible destination fabrics. An FC Router backbone fabric is the fabric that contains the E_Ports of this platform and routes inter-fabric traffic between imported fabrics, creating a meta-SAN.

  • Page 357: Fcrxlateconfig

    fcrXlateConfig fcrXlateConfig Configures a translate (xlate) domain's domain ID and state of persistence for both the EX_Port-attached fabric and the backbone fabric. SYNOPSIS fcrxlateconfig fcrxlateconfig importedFID exportedFID preferredDomainID fcrxlateconfig --remove | -r importedFID exportedFID fcrxlateconfig --enable persistxd fcrxlateconfig --disable persistxd fcrxlateconfig --show stalexd importedFID fcrxlateconfig --delete stalexd importedFID staleXlateDomainID fcrxlateconfig --help...
  • Page 358 fcrXlateConfig NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. Information displayed is not related to the entire backbone. The FC Router displays only connections to an edge fabric for which there are translate domain IDs.
  • Page 359 fcrXlateConfig --show stalexd [importedFID] Displays stale translate domains associated with the specified Fabric ID (1-128). A translate domain becomes stale when the remote edge fabric for which this translate domain was created in the specified edge fabric becomes unreachable. When issued without specifying an imported FID, this command lists all stale translate domains in all edge fabrics connected to the FCR.

  • Page 360: Fddcfg

    fddCfg fddCfg Manages the fabric data distribution configuration parameters. SYNOPSIS fddcfg --showall fddcfg --localaccept policy_list fddcfg --localreject policy_list fddcfg --fabwideset policy_list DESCRIPTION Use this command to manage the fabric data distribution configuration parameters. These parameters control the fabric-wide consistency policy. Switches can be locally configured to allow or reject a security policy.
  • Page 361 fddCfg --localreject policy_list Configures the switch to reject distributions of the specified policies in policy_list. However, a database cannot be rejected if it is specified in the fabric-wide consistency policy. The policies in policy_list must be separated by semicolons and enclosed in quotation marks; for example, "SCC;DCC". --fabwideset policy_list Sets the fabric-wide consistency policy.

  • Page 362: Fdmicacheshow

    fdmiCacheShow fdmiCacheShow Displays abbreviated remote FDMI device information, according to remote domain ID. SYNOPSIS fdmicacheshow DESCRIPTION Use this command to display FDMI cache information for remote domains only. The state of each remote domain, identified by its domain ID, is shown to be unknown, known, unsupported, or error.

  • Page 363: Fdmishow

    fdmiShow fdmiShow Displays detailed FDMI device information. SYNOPSIS fdmishow DESCRIPTION Use this command to display FDMI information for all HBAs and ports. Detailed FDMI information is displayed for local HBAs and ports. This information includes the HBA with its corresponding ports, along with their respective attributes. Only abbreviated FDMI information is shown for HBA and ports on remote switches.

  • Page 364: Ficoncfg

    ficonCfg ficonCfg Configures the specified FICON database. SYNOPSIS ficoncfg --set database port ficoncfg --reset database ficoncfg --help DESCRIPTION Use this command to configure a FICON database on a specified port. Refer to ficonShow for a description of the database content. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 365: Ficonclear

    ficonClear ficonClear Clears the records from the specified FICON database. SYNOPSIS ficonclear database DESCRIPTION Use this command to remove records from the local FICON database. The command effect depends on the specified database. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 366: Ficoncupset

    ficonCupSet ficonCupSet Sets FICON-CUP parameters for a switch. SYNOPSIS ficoncupset fmsmode enable | disable ficoncupset modereg bitname 0 | 1 ficoncupset MIHPTO seconds ficoncupset CRP PID CHID DESCRIPTION Use this command to set FICON-CUP (Control Unit Port) parameters for a switch. All parameters can be set while the switch is online.
  • Page 367 ficonCupSet Alternate control prohibited Host control prohibited MIHPTO Sets the missing interrupt handler primary timeout (MIHPTO) value for the CUP. The following operand is required: seconds Specifies the timeout value in seconds. Provide a decimal value in the range between 15 and 600 seconds. The default timeout value is 180 seconds. If a value greater than 63 seconds is specified, the timeout value is rounded down to the closest value divisible by 10.
  • Page 368 ficonCupSet 082300 Oper 082400 Reset 082400 Reset 612400 Reset Prim 612400 Reset SEE ALSO ficonCupShow Fabric OS Command Reference 53-1001764-01...

  • Page 369: Ficoncupshow

    ficonCupShow ficonCupShow Displays FICON-CUP parameters for a switch. SYNOPSIS ficoncupshow fmsmode ficoncupshow modereg [bitname] ficoncupshow MIHPTO ficoncupshow LP DESCRIPTION Use this command to display FICON-CUP (Control Unit Port) parameters for a switch. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 370 ficonCupShow EXAMPLES To display the FMS mode for the switch: switch:user> ficoncupshow fmsmode fmsmode for the switch: Enabled To display the mode register for the switch: switch:user> ficoncupshow modereg POSC DCAM ------------------------------ To display the ASM bit in the mode register for the switch: switch:user>...

  • Page 371: Ficonhelp

    ficonHelp ficonHelp Displays a list of FICON support commands. SYNOPSIS ficonhelp DESCRIPTION Use this command to display a list of FICON support commands with descriptions. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 372: Ficonshow

    ficonShow ficonShow Displays the contents of the specified FICON database. SYNOPSIS ficonshow database [fabric] DESCRIPTION Use this command to display the contents of a FICON database. The ficonShow database operand is the name of the database to display. If the fabric operand is absent, the command displays the members of the named database that are local to the switch on which the command was issued.
  • Page 373 ficonShow Incident Count Displays the incident count. This number increases by 1 for each incident within the individual switch. Link Incident Description Same as Link Incident Type. Link Incident Type Indicates the link incident type as one of the following: •...
  • Page 374 ficonShow 0x40 Other FC-4s including FCP and updates. 0x60 FC-SB-2 and updates and other FC-4s including FCP and updates. 0x80 FC-4 support not specified. 0xa0 Reserved. 0xc0 Reserved. 0xe0 Vendor-specific. Byte BB Possible values include the following: 0x00 Unspecified class. 0x01 Direct access storage device, if it is a storage port;...
  • Page 375 ficonShow 0xID CHIPID if channel port has registered with the switch. 0xPN If switch has registered with the channel, PN represents the FL port number. Part Number Displays the switch chassis part number. Displays the 24-bit Fibre Channel port address in 0xDDAAPP format. DD is Domain ID.
  • Page 376 ficonShow Time Stamp Displays the timestamp, expressed in date format. Type Same as Port Type. Type Number Displays the type number of the self-describing node. It also describes the machine type. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 377 ficonShow tag: 102b {Fmt Type PID Registered Port WWN Registered Node WWN \ 0x18 N 502e00 50:05:07:64:01:40:0f:ca 50:05:07:64:00:c1:69:ca \ flag Parm 0x10 0x200105 Type number: 002064 Model number: Manufacturer: Plant of Manufacture: 02 Sequence Number: 0000000169CA tag: 052e To display the local LIRR database: switch:admin>...
  • Page 378 ficonShow To display the local RLIR database: switch:user> ficonshow RLIR {Fmt Type PID Port Incident Count TS Format Time Stamp 0x18 N 502e00 46 1 Time server Mon Jan 13 04:29:33 2003 Port Status: Link not operational Link Failure Type: Loss of signal or synchronization Registered Port WWN Registered Node WWN Flag...
  • Page 379 ficonShow 0x502b00 50:05:07:64:01:00:15:8d The Local ILIR database has 2 entries. SEE ALSO ficonClear Fabric OS Command Reference 53-1001764-01...

  • Page 380: Fipscfg

    fipsCfg fipsCfg Configures FIPS (Federal Information Processing Standards) mode. SYNOPSIS fipscfg --enable fips | selftests | bootprom] [-nowarn] fipscfg --disable selftests | bootprom] [-nowarn] fipscfg --zeroize [-nowarn] fipscfg --show | --showall fipscfg --force fips fipscfg --verify fips DESCRIPTION Use this command to configure FIPS mode on the switch. In this mode, only FIPS-compliant algorithms are allowed.
  • Page 381 fipsCfg --zeroize [-nowarn] Erases all passwords, shared secrets, private keys, etc. in the system. --show | --showall Displays the current FIPS configuration. --force fips This option enables FIPS mode even if prerequisites are not met, except under the following two conditions: •...
  • Page 382 fipsCfg To attempt enabling FIPS when prerequisites are not met: switch:admin> fipscfg --enable fips SelfTests mode is not enabled. Root account is enabled. Authentication uses MD5 hash algorithm. Authentication uses DH group 0. Telnet port number <23> for the policy <default_ipv4> \ is in permit state.
  • Page 383 fipsCfg 1. Delete all existing CSRs. 2. Delete all existing certificates. 3. Reset the certificate filename to none. 4. Disable secure protocols. Continue (yes, y, no, n): [no] Operation cancelled. Zeroizing Radius configuration: RADIUS configuration does not exist. LDAP configuration does not exist. Zeroizing IPSec static SA configuration.

  • Page 384: Firmwarecommit

    firmwareCommit firmwareCommit Commits switch firmware. SYNOPSIS firmwarecommit DESCRIPTION Use this command to commit a firmware download to a CP. This command copies an updated firmware image to the secondary partition and commits both partitions of the CP to an updated version of the firmware.

  • Page 385: Firmwaredownload

    firmwareDownload firmwareDownload Downloads firmware from a remote host, a local directory, or a USB device. SYNOPSIS To invoke the command in interactive mode: firmwaredownload To download FOS firmware over a network: firmwaredownload [ -s [ -b | -n ] ] [ -p ftp | scp | sftp ] host user pfile...
  • Page 386 firmwareDownload All systems supported by this firmware have two partitions of nonvolatile storage (primary and secondary) to store two firmware images. This command always downloads the new image to the secondary partition and then swaps partitions so the secondary partition becomes the primary. By default, firmwareDownload reboots the system and activates the new image.
  • Page 387 firmwareDownload Disables autocommit mode. When autocommit mode is disabled, the firmwareCommit command must be executed manually to propagate the downloaded image to both partitions of the storage device. host Specify a valid FTP or SSH server name or IP address. IPV4 and IPv6 addresses are supported.
  • Page 388 firmwareDownload Removes all of the installed SA images in the system during SAS firmware download. By default, downloading a SAS image does not remove the installed SA images. If this option is specified, the installed SA images are removed. This option is only valid with the -a sas option.
  • Page 389 firmwareDownload of this command. This command will cause a warm/non-disruptive boot on the active CP, but will require that existing telnet, secure telnet or SSH sessions sessions be restarted. To download firmware interactively: switch:admin> firmwaredownload Server Name or IP Address: 192.168.32.10 User Name: admin File Name: ~admin/dist/FOS7.0.0/ Network Protocol(1-auto-select, 2-FTP, 3-SCP, 4-SFTP) [1]:...

  • Page 390: Firmwaredownloadstatus

    firmwareDownloadStatus firmwareDownloadStatus Displays the status of a firmware download. SYNOPSIS firmwaredownloadstatus DESCRIPTION Use this command to display an event log that records the progress and status of events during a firmware download. The event log is created by the firmware download process and is kept until you issue another firmwareDownload command.
  • Page 391 firmwareDownloadStatus [5]: Fri Mar 25 16:58:44 2011 Slot 7 (CP1, standby): Firmware commit operation has started to restore the secondary partition. [6]: Fri Mar 25 16:58:45 2011 Slot 7 (CP1, standby): The firmware commit operation has started. This may take up to 10 minutes. [7]: Fri Mar 25 17:05:34 2011 Slot 7 (CP1, standby): The commit operation has completed successfully.

  • Page 392: Firmwarekeyshow

    firmwareKeyShow firmwareKeyShow Displays the public key used for signed firmware validation. SYNOPSIS firmwarekeyshow DESCRIPTION This command displays the contents of the public key used for validating the integrity of firmware images when signed firmware validation is enabled. NOTES A firmware key should be installed on every switch as a part of the Fabric OS installation. The presence of a firmware key does not imply that the firmware signature is checked during firmwareDownload.

  • Page 393: Firmwarerestore

    firmwareRestore firmwareRestore Restores the former active firmware image. SYNOPSIS firmwarerestore DESCRIPTION Use this command to restore the former active Fabric OS firmware image. This command can only be run if autocommit was disabled during the firmwareDownload process. After a firmwareDownload and a reboot (with autocommit disabled), the downloaded firmware becomes active.

  • Page 394: Firmwareshow

    firmwareShow firmwareShow Displays the firmware version and download history. SYNOPSIS firmwareshow firmwareshow --history firmwareshow --help DESCRIPTION Use this command to display the firmware versions and the firmware download history. The command shows the firmware versions on both the primary and secondary partitions of the storage device. When this command is issued while a firmware download is in process, an appropriate warning message is displayed.
  • Page 395 firmwareShow To display the firmware download history: switch:admin> firmwareshow --history Firmware version history Sno Date & Time Switch Name Slot PID FOS Version 1 Fri Feb 18 12:58:06 2011 CDCX16 1556 Fabos Version v7.0.0d 2 Wed Feb 16 07:27:38 2011 CDCX16 1560 Fabos Version v7.0.0c...

  • Page 396: Fmmonitor

    fmMonitor fmMonitor Manages frame monitor configuration. SYNOPSIS fmmonitor --create frame_type -pat bit_pattern [-port port_list] [-highth value] [-action actions] [-timebase time_base] [-nosave] fmmonitor --delete frame_type fmmonitor --show [frame_type] [-port port_list | -all] [-timeinterval interval] fmmonitor --change frame_type [-pat bit_pattern] [-highth value] [-action actions][-timebase time_base] fmmonitor --addmonitor frame_type -port port_list [-nosave] fmmonitor --delmonitor frame_type [-port port_list] [-nosave] fmmonitor --clear frame_type -port port_list...
  • Page 397 fmMonitor This command requires an Advanced Performance Monitoring license. A Fabric Watch license is optional. Without a Fabric Watch license, you cannot use the alert mechanism, but you can still configure frame monitors and observe the counters. This command is not supported on virtual FC ports (VE/VEX_Port), EX_Port, mirror ports, GbE ports, and FCoE ports.
  • Page 398 fmMonitor -pat bit_pattern Specifies a unique combination of values in the first 64 bytes of a frame. The syntax for the bit patterns is as follows: "offset,bitmask, value;[offset, bitmask,value;] ...;" for example, "12,0xFF,0x08;4,0xFF,0x06;40,0xFF,0x08, 0x28;". This example monitors for SCSI read command traffic transmitted from a port by filtering on offset 12 with a value of 0x08 (SCSI-FCP), on offset 4 with value 0x06 (unsolicited command), and on offset 40 with values of 0x08 or 0x28 (read command).
  • Page 399 fmMonitor -port port_list Specifies one or more ports on which to install the monitor for the specified frame type. This operand is optional; if omitted, the monitor is installed on all eligible ports. A port list can consist of the following: •...
  • Page 400 fmMonitor --delete frame_type Deletes an existing frame type. This command removes the entire configuration, including configured threshold and associated actions. It also removes any frame monitors of the specified type from all ports. This operand is not valid with predefined frame types. --clear frame_type -port port_list Clears the ports on which the specified frame type is monitored from the persistent configuration.
  • Page 401 fmMonitor To save the port configuration persistently: switch:admin> fmmonitor --save SCSI To delete the custom frame monitor "MyFrameMonitor" from all ports: switch:admin> fmmonitor --delmonitor MyFrameMonitor To delete the entire frame type configuration: switch:admin> fmmonitor --delete MyFrameMonitor To clear the counters for the SCSI2_READ monitor from ports 7-10: switch:admin>...
  • Page 402 fmMonitor -|scsi3reserve|N/A |None |None |N/A -|ip |N/A |None |None |N/A -|abts |N/A |None |None |N/A -|baacc |N/A |None |None |N/A 000002|beta |0000000000000145|10 |Email |None |saved To display the number of frames of type ISCSI_RW per second during a five-second interval: switch:admin>...

  • Page 403: Fosconfig

    fosConfig fosConfig Displays or modifies Fabric OS features. SYNOPSIS fosconfig --enable feature fosconfig --disable feature fosconfig --show DESCRIPTION Use this command to enable or disable a feature, or to display the current operating status of features on a switch. This command can be run while the switch is online. The following features are supported (refer to the Notes for limitations): •...
  • Page 404 fosConfig ethsw Enables the Ethernet switch service on the switch. The Ethernet switch service is disabled by default. Enabling the Ethernet switch service does not disrupt the FC traffic. --disable feature Disables a feature on the switch. Valid values for feature include the following: Disables the FC Routing service on the switch.
  • Page 405 fosConfig To enable Virtual Fabrics: switch:admin> fosconfig --enable vf WARNING: This is a disruptive operation that \ requires a reboot to take effect. All EX ports will be disabled upon reboot. Would you like to continue [Y/N]y To disable Virtual Fabrics: switch:admin>...

  • Page 406: Fosexec

    fosExec fosExec Executes a command in a specified logical switch context. SYNOPSIS fosexec --fid FID -cmd "cmd [args]" fosexec --fid all [-force] -cmd "cmd [args]" DESCRIPTION Use this command to execute any Fabric OS command on a specified logical switch context or on all logical switches.
  • Page 407 fosExec Default Switch: No, Address Mode 0] Index Slot Port Address Media Speed State Proto =================================================== 640000 No_Module 640100 No_Module 640200 No_Module To enable port 5/0 on all logical switches: switch:admin> fosexec --fid all -cmd "portenable 5/0" --------------------------------------------------- "portenable" on FID 128: --------------------------------------------------- "portenable"...
  • Page 408 fosExec To display the switch name for all logical switches without confirmation: switch:user> fosexec --fid all -force -cmd "switchname" ------------------------------------ "switchname" on FID 10: switch_10 ----------------------------------- "switchname" on FID 20: switch_20 SEE ALSO setContext, userConfig Fabric OS Command Reference 53-1001764-01...

  • Page 409: Framelog

    frameLog frameLog Displays information about discarded frames. SYNOPSIS framelog --disable framelog --enable framelog --clear framelog --show [-txport [slot/]port] [-rxport [slot/]port] [-sid source_PID][-did destination_PID] [-sfid fabric_ID] [-dfid fabric_ID>] [-mode summary | dump] [-n num_items] DESCRIPTION Use this command to disable or re-enable the frame log, and to display detailed information about the discarded frames logged by the frame log.
  • Page 410 frameLog Type Reason for the frame discard. Frames can be discarded for a variety of reasons. The only discard reason currently handled by the frame log is timeout. Count The number of discarded frames logged in the frame log that have the log timestamp, TX port, RX port, SID, DID, SFID and DFID values listed on this line of output.
  • Page 411 frameLog -sid source_PID Displays only the frames with the specified 24-bit source address in the FC header. The port ID (PID) must be written in hexadecimal and must be prefixed by -did destination_PID Displays only the frames with the specified 24-bit destination address in the FC header.
  • Page 412 frameLog Jan 31 18:34:46 7/32 7/33 timeout 00 03 a0 00 00 03 a1 00 00 28 00 00 00 00 00 00 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Jan 31 18:34:46 7/32 7/33 timeout 00 03 a0 00 00 03 a1 00 00 28 00 00 00 00 00 00...

  • Page 413: Fspfshow

    fspfShow fspfShow Displays Fabric Shortest Path First (FSPF) protocol information. SYNOPSIS fspfshow DESCRIPTION Use this command to display FSPF protocol information and internal data structures of the FSPF module. The command displays the following fields: version Version of the FSPF protocol. domainID Domain number of the local switch.
  • Page 414 fspfShow lsrDelayTo Link State Record delay time out value in milliseconds. lsrDelayCount Counter of delayed Link State Records. ddb_sem FSPF semaphore ID. event_sch FSPF scheduled events bit map. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 415 fspfShow f_ports[9] = 0x00000000 f_ports[10] = 0x00000000 f_ports[11] = 0x00000000 f_ports[12] = 0x00000000 seg_ports[0] = 0x00000002 seg_ports[1] = 0x00000000 seg_ports[2] = 0x00000000 seg_ports[3] = 0x00000000 seg_ports[4] = 0x00000000 seg_ports[5] = 0x00000000 seg_ports[6] = 0x00000000 seg_ports[7] = 0x00000000 seg_ports[8] = 0x00000000 seg_ports[9] = 0x00000000 seg_ports[10]...

  • Page 416: Fwalarmsfilterset

    fwAlarmsFilterSet fwAlarmsFilterSet Enables or disables alarms for Fabric Watch. SYNOPSIS fwalarmsfilterset [mode] DESCRIPTION Use this command to configure alarm filtering for Fabric Watch. By turning off the alarms, all nonenvironment class alarms are suppressed. By turning on the alarms, all class alarms are generated. NOTES This command requires a Fabric Watch license.

  • Page 417: Fwalarmsfiltershow

    fwAlarmsFilterShow fwAlarmsFilterShow Displays alarm filtering for Fabric Watch. SYNOPSIS fwalarmsfiltershow DESCRIPTION Use this command to display whether alarm filtering is enabled or disabled. NOTES This command requires a Fabric Watch license. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 418: Fwclassinit

    fwClassInit fwClassInit Initializes all classes under Fabric Watch. SYNOPSIS fwclassinit DESCRIPTION Use this command to initialize all classes under Fabric Watch. The command should only be used after installing a Fabric Watch license to start licensed Fabric Watch classes. Refer to the Fabric Watch Administrator's Guide for a list of supported Fabric Watch classes.

  • Page 419: Fwconfigreload

    fwConfigReload fwConfigReload Reloads the Fabric Watch configuration. SYNOPSIS fwconfigreload DESCRIPTION Use this command to reload the Fabric Watch configuration. This command should only be used after downloading a new Fabric Watch configuration file from a host. NOTES This command requires a Fabric Watch license. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 420: Fwfrucfg

    fwFruCfg fwFruCfg Displays or modifies FRU state alert configuration. SYNOPSIS fwfrucfg [--show] DESCRIPTION Use this command to configure states and actions for field-replaceable units (FRUs) and small form-factor pluggables (SFPs). Based on these configuration settings, Fabric Watch generates actions when a FRU or SFP state changes. For SFPs, Fabric Watch monitors state changes in following events: SFP inserted, SPP removed, SFP faulty.
  • Page 421 fwFruCfg WWN Alarm State: (0..31) [1] WWN Alarm Action: (0..17) [1] SFP Alarm State: (0..19) [0] SFP Alarm Action: (0..17) [0] Fru configuration left unchanged SEE ALSO fwHelp, fwMailCfg, sfpShow Fabric OS Command Reference 53-1001764-01...

  • Page 422: Fwhelp

    fwHelp fwHelp Displays Fabric Watch command information. SYNOPSIS fwhelp DESCRIPTION Use this command to display the commands that configure Fabric Watch. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 423: Fwmailcfg

    fwMailCfg fwMailCfg Displays and configures Fabric Watch email alerts. SYNOPSIS fwmailcfg DESCRIPTION Use this command to display or modify the configuration and status of the Fabric Watch email alert on the switch. Switch elements monitored by Fabric Watch are divided into classes, and e-mail alerts are based on the classes.
  • Page 424 fwMailCfg : Filter Performance Monitor class : Security class : Resource Monitor class : FRU Class : Quit Select an item => : (0..13) [11] 1 Mail Recipient information -------------------------------------------- Email Alert = disabled Mail Recipients = NONE -------------------------------------------- : Show Mail Configuration Information : Disable Email Alert : Enable Email Alert : Send Test Mail...
  • Page 425 fwMailCfg : F/FL Port (Optical) class : Resource class : quit Select a class => : (1..6) [6] 6 Mail Recipient Information ____________________________________ Email Alert = disabled Mail Recipient = NONE : Show Mail Configuration Information : Disable Email Alert : Enable Email Alert : Send Test Mail : Set Recipient Mail Address for Email Alert...

  • Page 426: Fwportdetailshow

    fwPortDetailShow fwPortDetailShow Displays the port information for specified user ports. SYNOPSIS fwportdetailshow [--p port] | [--s portState] DESCRIPTION Use this command to print the overall status of a specified port. The output of this command is different for IPv4 and IPv6 addresses. The overall status is calculated based on the following contributors: Port Errors The number of link loss occurrences exceeding the limit for the time period.
  • Page 427 fwPortDetailShow When used without operands, this command displays information for all ports. NOTES This command requires a Fabric Watch license. Port errors are not supported for virtual ports and SFP errors are not applicable for virtual ports. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 428 fwPortDetailShow To retrieve a port detail report for all ports in healthy state: switch:user> fwportdetailshow --s h Port Detail Report Report time: 05/21/2007 11:22:58 PM Switch Name: switch IP address: 192.168.163.237 Port Exception report [by Healthy] --------Port-Errors------------ Port# Type State Dur(H:M) LFA LSY LSI PER INW \ ------------------------------------------------\ HEALTHY...

  • Page 429: Fwsamshow

    fwSamShow fwSamShow Generates switch availability monitor (SAM) report. SYNOPSIS fwsamshow DESCRIPTION Use this command to display a switch availability monitor (SAM) report. This report displays uptime and downtime for each port and enables you to check if a particular port is failing more often than the others. The information displayed includes total uptime, total downtime, number of faulty occurrences, and total percent of downtime for each port.

  • Page 430: Fwset

    fwSet fwSet Sets port persistence time. SYNOPSIS fwset --port --persistence seconds DESCRIPTION Use this command to set port persistence time, a parameters controlled by Fabric Watch. Port persistence time specifies the time in seconds during which a port must persistently be in a marginal state before being labeled as such.

  • Page 431: Fwsettocustom

    fwSetToCustom fwSetToCustom Sets Fabric Watch thresholds and alarm levels to custom values. SYNOPSIS fwsettocustom DESCRIPTION Use this command to set threshold and alarm levels to custom values for all Fabric Watch classes and areas. Fabric Watch uses two types of settings: factory default settings and user-defined custom settings. •...
  • Page 432 fwSetToCustom Trigger : Above Action: None Trigger : Below Action: Raslog,SNMP Default: TimeBase: None Value Trigger : Above Action: None Trigger : Below Action: Raslog,SNMP Buffer: Custom: Value : 20 Default: Value : 10 Class: RESOURCE Area : FLASH ThLevel : Cust (Applied) ActLevel: Def High Custom:...

  • Page 433: Fwsettodefault

    fwSetToDefault fwSetToDefault Returns Fabric Watch thresholds and alarm levels to default values. SYNOPSIS fwsettodefault DESCRIPTION Use this command to return Fabric Watch thresholds and alarm levels to defaults for all classes and areas in Fabric Watch. Fabric Watch uses two types of settings: factory default settings and user-defined custom settings. •...
  • Page 434 fwSetToDefault Value Trigger : Above Action: None Trigger : Below Action: Raslog,SNMP Buffer: Custom: Value : 20 Default: Value : 10 Class: RESOURCE Area : FLASH ThLevel : Def ActLevel: Def High Custom: TimeBase: None Value : 110 Trigger : Above Action: Raslog,SNMP Trigger : Below Action: Raslog Default: TimeBase: None...
  • Page 435 Displays shell history. SYNOPSIS history DESCRIPTION Use this command to view the shell history. The shell history mechanism is similar to the UNIX shell history facility. The h command displays the 20 most recent commands typed into the shell; the oldest commands are replaced as new ones are entered.

  • Page 436: Hadisable

    haDisable haDisable Disables the High Availability feature. SYNOPSIS hadisable DESCRIPTION Use this command to disable the High Availability (HA) feature on a switch. If the HA feature is already disabled, this command does nothing. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 437: Hadump

    haDump haDump Displays High Availability status information. SYNOPSIS hadump DESCRIPTION Use this command to display information about the status of the High Availability (HA) feature on a switch or a chassis. This command displays the following information: • Time Stamp •...
  • Page 438 haDump NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. OPERANDS None EXAMPLES To view information about the High Availability feature status on a Brocade DCX 8510-8: switch:admin>...

  • Page 439: Haenable

    haEnable haEnable Enables the High Availability feature. SYNOPSIS haenable DESCRIPTION Use this command to enable the High Availability (HA) feature on a switch. If the HA feature is already enabled, this command has no effect. If the HA feature is disabled, this command enables it. The standby CP reboots as part of the process. The command displays a warning message and prompts for confirmation before rebooting the CP.

  • Page 440: Hafailover

    haFailover haFailover Forces the failover mechanism so that the standby control processor (CP) becomes the active CP. SYNOPSIS hafailover DESCRIPTION Use this command to force the failover mechanism to occur so that the standby CP becomes the active CP. In case the active and standby CPs are not synchronized or the system is not in redundant mode, the command aborts.

  • Page 441: Hashow

    haShow haShow Displays control processor (CP) status. SYNOPSIS hashow DESCRIPTION Use this command to display the control processor status. The display includes the following information: • Local CP state (slot number and CP ID), warm or cold, recovering or recovered. •...
  • Page 442 haShow OPERANDS None EXAMPLES To display CP status on a Brocade DCX 8510-8 with a healthy standby CP: switch:admin> hashow Local CP (Slot 7, CP1) : Active, Warm Recovered Remote CP (Slot 6, CP0) : Standby, Healthy HA Enabled, Heartbeat Up, HA State Synchronized SEE ALSO haDisable, haEnable, haFailover...

  • Page 443: Hasyncstart

    haSyncStart haSyncStart Enables High Availability state synchronization. SYNOPSIS hasyncstart DESCRIPTION Use this command to enable the High Availability (HA) state synchronization. After issuing haSyncStop, the switch does not go back to sync start unless you perform one of the following actions: reboot the active CP, reboot the standby CP, insert a new standby CP (blade), or issue the haSyncStart command The time it takes for the HA sync to complete depends on the system configuration.

  • Page 444: Hasyncstop

    haSyncStop haSyncStop Disables High Availability state synchronization. SYNOPSIS hasyncstop DESCRIPTION Use this command to temporarily disable High Availability (HA) synchronization. After issuing haSyncStop, the switch does not go back to sync start unless you perform one of the following actions: reboot the active CP, reboot the standby CP, insert a new standby CP (blade), or issue the haSyncStart command The time it takes for the HA sync to complete depends on the system configuration.

  • Page 445: Help

    help help Displays command help information. SYNOPSIS help [command] help [-p | -page] help --help DESCRIPTION Use this command without operands to display an alphabetical listing of commands for which help is available. When used without an operand, the command listing displays without page break. Pipe the output through the Unix grep command to filter the output.
  • Page 446 help Tuning policy auditcfg Modifies and displays audit log filter configuration. auditdump Display audit log (output truncated) To search for the string "zone" while paging is enabled (enter /zone after issuing the command): switch:admin> help -p aaaconfig Configure RADIUS for AAA services Specifies all administration domain (AD)-level operations Configure the Access Gateway feature...

  • Page 447: Historylastshow

    historyLastShow historyLastShow Displays the latest entry in the field replaceable unit (FRU) history log. SYNOPSIS historylastshow DESCRIPTION Use this command to display the latest entry of the history log, which records insertion and removal events for field-replaceable units (FRUs), such as blades, power supplies, fans, and world wide name (WWN) cards.

  • Page 448: Historymode

    historyMode historyMode Displays the mode of the field replaceable unit (FRU) history log. SYNOPSIS historymode DESCRIPTION Use this command to display the mode of the history buffer, which records the insertion and removal of FRUs on a switch or chassis. This command supports two modes of handling new log entries once the history buffer has reached its maximum size: Rotating mode...

  • Page 449: Historyshow

    historyShow historyShow Displays the entire field replaceable unit (FRU) history log. SYNOPSIS historyshow DESCRIPTION Use this command to display the entire history log, which records insertion and removal events for field-replaceable units (FRUs), such as blades, power supplies, fans, and world wide name (WWN) cards.
  • Page 450 historyShow Unit 3 Inserted at Tue Aug 14 10:23:45 2001 Factory Part Number: 20-123456-12 Factory Serial Number: 1013456800 Unit 1 Inserted at Tue Aug 14 11:03:45 2001 Factory Part Number: 40-0000031-03 Factory Serial Number: 1013456800 SW BLADE Slot 3 Removed at Tue Aug 14 12:10:09 2001 Factory Part Number: 60-0001532-03 Factory Serial Number:...
  • Page 451 Displays a process summary. SYNOPSIS i [processID] DESCRIPTION Use this command to display information about a specified process or about all processes running on the local switch. One line is displayed per process. Fields displayed with this command include the Process flags: ALIGNWARN 001 print alignment warning messages...
  • Page 452 Processor utilization for scheduling Priority number of the process; higher numbers mean lower priority Nice value used in priority computation ADDR Memory address of the process The total size of the process in virtual memory, in pages WCHAN The address of an event for which a process is sleeping (if blank, process is running) The controlling terminal of the process (? displayed for no controlling terminal) TIME...

  • Page 453: Iclcfg

    iclCfg iclCfg Enables or disables Inter-chassis links (ICL). SYNOPSIS iclcfg --enable slot/icl_group iclcfg --disable slot/icl_group iclcfg --persistentenable slot/icl_group iclcfg --persistentdisable slot/icl_group iclcfg --help DESCRIPTION Use this command to enable or disable an inter-chassis link (ICL) or to enable or disable an ICL persistently.
  • Page 454 iclCfg To disable the ICL for ports 16-31 persistently: iclcfg --persistentdisable 8/1 switch:user> To enable the ICL for ports 16-31 persistently: iclcfg --persistentdnable 8/1 switch:user> SEE ALSO None Fabric OS Command Reference 53-1001764-01...

  • Page 455: Ifmodeset

    ifModeSet ifModeSet Sets the link operating mode for a network interface. SYNOPSIS ifmodeset ["interface"] DESCRIPTION Use this command to set the link operating mode for a network interface. An operating mode is confirmed with a y or yes at the prompt. If the operating mode selected differs from the current mode, the change is saved and the command exits.
  • Page 456 ifModeSet Advertise 100 Mbps / Full Duplex (yes, y, no, n): [yes] y Advertise 100 Mbps / Half Duplex (yes, y, no, n): [yes] y Advertise 10 Mbps / Full Duplex (yes, y, no, n): [yes] y Advertise 10 Mbps / Half Duplex (yes, y, no, n): [yes] y Committing configuration...done.

  • Page 457: Ifmodeshow

    ifModeShow ifModeShow Displays the link operating mode and MAC address for a network interface. SYNOPSIS ifmodeshow interface DESCRIPTION Use this command to display the link operating mode and MAC address for a network interface. On the CP of a Brocade DCX or DCX-S4, this command supports eth0 and eth3 as interface parameters.
  • Page 458 ifModeShow To display the active interface: ras010:root> ifmodeshow bond0 Currently Active Slave: eth0 SEE ALSO ifModeSet Fabric OS Command Reference 53-1001764-01...

  • Page 459: Interfaceshow

    interfaceShow interfaceShow Displays FSPF interface information. SYNOPSIS interfaceshow [slot/][port] DESCRIPTION Use this command to display the two data structures associated with FSPF interfaces (E_Ports) on the switch: • The permanently allocated interface descriptor block (IDB). • The neighbor data structure. This data structure is allocated when a switch port becomes an E_Port. The neighbor data structure contains all the information relating to the switch that is connected to an adjacent switch.
  • Page 460 interfaceShow downReason Type of last State Change Notification that caused this interface to go down. iState Current state of this interface. The state can be UP or DOWN. An interface in DOWN state does not have an allocated neighbor data structure and cannot be used to route traffic to other switches.
  • Page 461 interfaceShow helloTo Hello timeout value, in milliseconds. When this timeout expires, a Hello frame is sent to the neighbor switch through this port. rXmitTo Retransmission timeout value, in milliseconds. It is used to transmit topology information to the neighbor switch. If no acknowledgement is received within this value, the frame is retransmitted.
  • Page 462 interfaceShow When invoked without operands, this command displays the interface information for all ports on the switch (including non-E_Ports). EXAMPLES To display FSPF interface information: switch:user> interfaceshow 1/4 idbP = 0x1008b3d0 Interface 4 data structure: nghbP = 0x1008c668 ifNo masterPort = 4 (self) defaultCost = 500...
  • Page 463 interfaceShow nHloOut attLsuOut nLsuOut attLsaOut nLsaOut SEE ALSO nbrStateShow, portShow, switchShow Fabric OS Command Reference 53-1001764-01...

  • Page 464: Iodreset

    iodReset iodReset Disables in-order delivery (IOD) on a switch. SYNOPSIS iodreset DESCRIPTION Use this command to disable in-order delivery enforcement on the local switch. IOD is disabled by default, and can only be disabled after it has been enabled with the iodSet command. This command disables the legacy IOD enforcement only.

  • Page 465: Iodset

    iodSet iodSet Enables in-order delivery (IOD). SYNOPSIS iodset iodset --help DESCRIPTION Use this command to enforce in-order delivery of frames during a fabric topology change. In a stable fabric, frames are always delivered in order, even when the traffic between switches is shared among multiple paths.

  • Page 466: Iodshow

    iodShow iodShow Displays the in-order delivery (IOD) setting. SYNOPSIS iodshow DESCRIPTION Use this command to display the IOD setting on the switch. By default, IOD is disabled. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 467: Ipaddrset

    ipAddrSet ipAddrSet Sets the Ethernet and FC IP addresses. SYNOPSIS ipaddrset [-ipv6 ] [--add x:x:x:x:x:x:x/n | --delete] ipaddrset [-cp cp_number | -chassis] [-ipv6 ] [--add x:x:x:x:x:x:x/n | --delete] ipaddrset [-slot slot] [-eth0 | -eth1] [--add x.x.x.x/n | --delete] ipaddrset [-slot slot] -gate [--add x.x.x.x | --delete] ipaddrset -ls FID --add IPv4_address/prefix ipaddrset -ls FID --delete ipaddrset -ipv6 [-auto | -noauto]...
  • Page 468 ipAddrSet • Use the -auto and -noauto options to enable or disable stateless IPv6 autoconfiguration. • Use the -ls option with appropriate arguments to set or delete the IPv4 Fibre Channel address and prefix for the IPFC interface of a logical switch. In a Virtual Fabric environment, each logical fabric is represented by a separate IPFC network interface.
  • Page 469 ipAddrSet -ipv6 [-auto | -noauto] Enables or disables stateless IPv6 autoconfiguration on a switch or chassis. When autoconfiguration is enabled, the host automatically performs configuration of IPv6 addresses and periodic nondisruptive reconfiguration. By default, autoconfiguration is disabled. -ls FID Specifies the logical fabric ID for which to configure an IPFC network interface. The FID is a decimal number.
  • Page 470 ipAddrSet To configure an IPv4 FC address for the IPFC interface associated with a logical switch with fabric ID 123: switch:admin> ipaddrset -ls 123 --add 11.1.2.4/24 IP address is being changed...Done. To verify the IPv4 FC address for the logical switch: switch:admin>...
  • Page 471 ipAddrSet To enable DHCP on a standalone, non-AP platform: switch:admin> ipaddrset Ethernet IP Address [192.168.74.102]: Ethernet Subnetmask [255.255.255.0]: Gateway IP Address [192.168.74.1]: DHCP [Off]: on SEE ALSO ipAddrShow Fabric OS Command Reference 53-1001764-01...

  • Page 472: Ipaddrshow

    ipAddrShow ipAddrShow Displays IP address information for a switch or control processor (CP). SYNOPSIS ipaddrshow ipaddrshow [-cp cp_number] | -chassis ipaddrshow -slot slot [-eth0 | -eth1 | -gate DESCRIPTION Use this command to display the IP addresses configured in the system. The -cp option displays the IP address for a specified CP on modular platforms, or use the command without arguments to display the IP address on a standalone switch, or the IP addresses for both CPs on a chassis.
  • Page 473 ipAddrShow Refer to the RFC 2462 specification for more information. On modular platforms with intelligent blades, the addresses configured for each slot can be shown with the -slot option. On standalone platforms, all command options are ignored. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 474 ipAddrShow chassis 0 stateless fd00:60:69bc:63:205:1eff:fe39:e45a/64 preferred chassis 0 stateless fec0:60:69bc:63:205:1eff:fe39:e45a/64 preferred cp 0 stateless fd00:60:69bc:63:205:1eff:fe40:6230/64 preferred cp 0 stateless fec0:60:69bc:63:205:1eff:fe40:6230/64 preferred cp 1 stateless fd00:60:69bc:63:205:1eff:fe39:ff2a/64 preferred cp 1 stateless fec0:60:69bc:63:205:1eff:fe39:ff2a/64 preferred IPv6 Gateways: cp 0 fe80:60:69bc:63::3 cp 0 fe80:60:69bc:63::1 cp 0 fe80:60:69bc:63::2 cp 1 fe80:60:69bc:63::1 cp 1 fe80:60:69bc:63::2 cp 1 fe80:60:69bc:63::3...

  • Page 475: Ipfilter

    ipFilter ipFilter Manages the IP filter policies. SYNOPSIS ipfilter --create policyname -type ipv4 | ipv6 ipfilter --clone policyname -from src_policyname ipfilter --show [-a] [policyname] ipfilter --save [policyname] ipfilter --activate policyname ipfilter --delete policyname ipfilter --addrule policyname -rule rule_number[ -sip source_IP] -dp destination_port -proto protocol -act permit | deny [-type INPUT | FWD] [-dip destination_IP] ipfilter --delrule policyname -rule rule number...
  • Page 476 ipFilter OPERANDS This command has the following operands: policyname Specifies an IP filter policy name. The policy name is a unique string composed of a maximum of 20 alphanumeric or underscore characters. The default_ipv4 and default_ipv6 names are reserved for default IP filter policies. The policy name is case-insensitive and is always stored as lower case.
  • Page 477 ipFilter The following arguments are supported with the --addrule option: -sip source_IP Specifies the source IP address. For filters of type IPv4, the address must be a 32-bit address in dot notation, or a CIDR-style IPv4 prefix. For filters of type IPv6, the address must be a 12- bit IPv6 address in any format specified by RFC3513, or a CIDR-style IPv6 prefix.
  • Page 478 ipFilter To add a new rule to the policy and specify the source IP address, destination port, and protocol, and to permit the rule: switch:admin> ipfilter --addrule ex1 -sip fec0:60:69bc:60:260:69ff:fe80:d4a -dp 23 -proto tcp -act permit To display all existing IP filter policies: switch:admin>...
  • Page 479 ipFilter 600 - 1023 permit 600 - 1023 permit Name: default_ipv6, Type: ipv6, State: defined Rule Source IP Protocol Dest Port Action permit permit permit permit permit permit permit permit permit permit 600 - 1023 permit 600 - 1023 permit Name: ex1, Type: ipv6, State: active Rule Source IP...
  • Page 480 ipFilter switch:admin> ipfilter --show Name: default_ipv4, Type: ipv4, State: active Name: default_ipv4, Type: ipv4, State: active Rule Source IP Protocol Dest Port Action permit permit permit permit permit permit permit permit permit permit 600 - 1023 permit 600 - 1023 permit Name: ex2, Type: ipv4, State: defined Rule Source IP...
  • Page 481 ipFilter 600-1023 Name: ex2, Type: ipv4, State: defined (modified) Rule Source_IP Proto Dest_Port Action Flow Destination_IP 10.32.69.99 10.32.69.99 SEE ALSO policy, distribute Fabric OS Command Reference 53-1001764-01...

  • Page 482: Ipsecconfig

    ipSecConfig ipSecConfig Configures Internet Protocol security (IPSec) policies for Ethernet management interfaces. SYNOPSIS ipsecconfig --enable [default] --disable ipsecconfig --add | --modify type [subtype] [arguments] ipsecconfig --delete [type] arguments ipsecconfig --flush manual-sa ipsecconfig --show type [subtype] arguments ipsecconfig --help [command_type subtype] DESCRIPTION Use this command to configure the Internet Protocol Security (IPSec) feature for traffic flows on switch Ethernet management interfaces, or to display the current configuration.
  • Page 483 ipSecConfig • Flush existing SAs from the kernel SA database (SADB). • Display policy parameters. Representation of IP addresses When configuring IPSec policies, IP addresses and ports must be specified in the following format: IP address IPv4 addresses are expressed in dotted decimal notation consisting of numeric characters (0-9) and periods (.), for example, 203.178.141.194.
  • Page 484 ipSecConfig type Specifies the policy to be created. Supported policies include the following: policy ips Creates or modifies an IPSec policy. This policy determines the security services afforded to a packet and the treatment of a packet in the network. An IPSec policy allows classifying IP packets into different traffic flows and specifies the actions or transformations performed on IP packets on each of the traffic flows.
  • Page 485 ipSecConfig -mode tunnel | transport Specifies the IPSec transform mode. In tunnel mode, the IP datagram is fully encapsulated by a new IP datagram using the IPSec protocol. In transport mode, only the payload of the IP datagram is handled by the IPSec protocol inserting the IPSec header between the IP header and the upper-layer protocol header.
  • Page 486 ipSecConfig -tag name Specifies a name for the SA. This is a user-generated name. The name must be between 1 and 32 characters in length, and may include alphanumeric characters, dashes (-), and underscores (_). This operand is required. -protocol ah | esp Specifies the IPSec protocol.
  • Page 487 ipSecConfig -id identifier Specifies the local identifier. The switch is identified by its IPv4 or IPv6 address. -remoteid identifier Specifies the peer identifier. The remote peer is identified by its IPv4 or IPv6 address. -enc algorithm Specifies the encryption algorithm. Valid encryption algorithms include the following: 3des_cbc DES algorithm...
  • Page 488 ipSecConfig The following operands are optional (use secCertUtil to import the key files to the local and remote systems) -psk file Specifies the preshared key filename. -pubkey file Specifies the public key filename (in X.509 PEM format). -privkey file Specifies the private key filename (in X.509 PEM format). -peerpubkey file Specifies the peer public key filename (in X.509 PEM format).
  • Page 489 ipSecConfig -ipsec ah | esp Specifies the IPSec protocol. Encapsulating Security Payload (ESP) provides confidentiality, data integrity and data source authentication of IP packets, and protection against replay attacks. Authentication Header (AH) provides data integrity, data source authentication, and protection against replay attacks but, unlike ESP, does not provide confidentiality.
  • Page 490 ipSecConfig --delete Deletes a specified policy or all policies of a certain typefrom the configuration database. You can delete IPSec policies, IKE policies, and SADB entries. When deleting IPSec policies, you have the option to delete specific components only, such as the transform or the selector, and recreate these components without having to recreate the entire policy.
  • Page 491 ipSecConfig type Specifies the policy to be displayed. Valid values for type include the following: policy ips Displays the IPSec policy configuration. A policy subtype must be specified when displaying the IPSec policy configuration. Valid subtypes include the following: selector Displays IPSec selector parameters including IPSec policy name, IP address of the local entity, IP address of the remote entity, direction of traffic flow (inbound or outbound), upper layer protocol used, and IPSec transform index.
  • Page 492 ipSecConfig Create an IPSec SA policy named AH01, which uses AH protection with MD5. switch:admin> ipsecconfig --add policy ips sa -t AH01 -p ah -auth hmac_md5 Create an IPSec proposal IPSEC-AH to use AH01 as SA. switch:admin> ipsecconfig --add policy ips sa-proposal -t IPSEC-AH -sa AH01 Configure the SA proposal's lifetime in time units.
  • Page 493 ipSecConfig Create an IPSec proposal IPSEC-ESP to use ESP01 as the SA. switch:admin> ipsecconfig --add policy ips sa-proposal -t IPSEC-ESP -sa ESP01 Configure the SA proposal lifetime in seconds. switch:admin> ipsecconfig --add policy ips sa-proposal -t IPSEC-ESP -lttime 280000 -sa ESP01 Import the public key for the BROCADE300 (Brocade300.pem), the private key for BROCADE300 (Brocade300-key.pem), and the public key of the external host (remote-peer.pem) in X.509 PEM format from the remote certificate server (10.6.103.139).
  • Page 494 ipSecConfig Example 3 The following example illustrates how to secure traffic between two systems using AH with SHA1 and ESP protection with 3DES and configure IKE with preshared keys. The two systems are a switch, a Brocade 300 (IP address 10.33.74.13), and an external UNIX host (IPv4 address 10.33.69.132). On the system console, log in to the switch as Admin and enable IPSec.
  • Page 495 ipSecConfig Example 4 The following example illustrates how to secure traffic between two systems using protection with MD5 and Manually keyed SAs. The two systems are a switch, the BROCADE300 (IPv4 address 10.33.74.13), and an external UNIX host (IPv4 address 10.33.69.132). On the system console, log in to the switch as Admin and enable IPSec.
  • Page 496 ipSecConfig created: Oct 15 23:34:55 2008 current: Oct 15 23:35:06 2008 diff: 11(s) hard: 2621440(s) soft: 2137448(s) last: Oct 15 23:34:55 2008 hard: 0(s) soft: 0(s) current: 540(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 5 hard: 0 soft: 0 sadb_seq=0 pid=10954 refcnt=0 To display a specified IPSec SA: switch:admin>...
  • Page 497 ipSecConfig switch:admin> ipsecconfig --help modify policy ike Usage: ipsecConfig --modify policy ike ARGUMENTS ARGUMENTS -tag <name> ike policy name -remote <addr> peers ipaddress -id <identifier> local identifier -remoteid <identifier> peers identifier -enc <ALGORITHM> encryption algorithm -hash <ALGORITHM> hash algorithm -prf <ALGORITHM> prf algorithm -dh <number>...

  • Page 498: Islshow

    islShow islShow Displays interswitch link (ISL) information. SYNOPSIS islshow DESCRIPTION Use this command to display the current connections and status of the interswitch link (ISL) for each port on a switch. The command output includes the following information: • Node world wide name (WWN) •...
  • Page 499 islShow 6:162->160 10:00:00:60:69:e2:09:fa 5 B2400 \ sp:-------- bw: 0.001G 7:384-> 16 10:00:00:05:1e:37:02:73 39 DCX \ sp:-------- bw: 10.000G 8:385-> 16 10:00:00:05:1e:37:02:73 43 B53000 \ sp:-------- bw: 11.000G To display interswitch links with encryption or compression enabled: switch:user> islshow 1: 33-> 29 10:00:00:60:69:80:4f:84 3 B3200 2.000G bw: 4.000G TRUNK ENCRYPT...

  • Page 500: Itemlist

    itemList itemList Lists parameter syntax information. SYNOPSIS item_list = element | element white item_list element = item | item - item item = num | slot [white]/ [white] num slot = num num = hex | int int = int digit | digit hex = 0x hex digit | hex hex digit digit = 0|1|2|3|4|5|6|7|8|9 hex digit = digit |A|B|C|D|E|F|a|b|c|d|e|f...
  • Page 501 itemList within the current switch (selected during Telnet login) are tested. When specified in an item list, user ports might be specified by either the area portion of the ports Fibre Channel address or with slot/port notation. For nonblade systems, the port number on the silkscreen is the area number, so the two notations are identical.

  • Page 502: Killtelnet

    killTelnet killTelnet Terminates an open Telnet session. SYNOPSIS killtelnet DESCRIPTION Use this command to terminate an open Telnet session. The command lists all current Telnet and serial port login sessions and information such as session number, login name, idle time, IP address of the connection, and timestamp of when the login session was opened.

  • Page 503: Ldapcfg

    ldapCfg ldapCfg Maps LDAP AD server roles to default switch roles. SYNOPSIS ldapcfg --maprole ldaprole switchrole ldapcfg --unmaprole ldaprole ldapcfg --show ldapcfg --help DESCRIPTION Use this command to map a Lightweight Directory Access Protocol (LDAP) Active Directory (AD) server role to one of the default roles available on a switch. This command also provides an option to remove an existing mapping.
  • Page 504 ldapCfg --unmaprole Removes the mapping between an LDAP role and a switch role. Use the --show option for a listing of existing mappings. The following operand is required: ldaprole Specifies the LDAP AD sever role to be removed from the mapping. --show Displays a table of existing mappings between LDAP roles and their corresponding switch role.

  • Page 505: Lfcfg

    lfCfg lfCfg Configures and displays logical fabrics. SYNOPSIS lfcfg [--show | --showall] -cfg lfcfg [--show | --showall] -lisl [-v] lfcfg [--show -xisl [slot/]port | --showall -xisl lfcfg --lislenable lfcfg --help DESCRIPTION Use this command to display logical fabric configuration information, to determine the status of logical interswitch links (LISLs), to enable LISLs between logical switches, and to display information about the XISLs and LISLs associated with each XISL.
  • Page 506 lfCfg Port Number of the logical LISL port. remote-domain Domain ID of the base switch in the remote chassis. Name Switch name. State Port state: Online or Offline. Associated physical ports Physical ports associated with the LISL ports. When lfCfg is issued within a logical switch context, only the configuration regarding that switch and the fabrics reachable from that switch is displayed.
  • Page 507 lfCfg --lislenable Re-enables all LISLs in the fabric that were disabled because of some conflict or error condition in the fabric. This command provides the option of manually reestablishing the LISLs after the error condition has been resolved. --help Displays the command usage. EXAMPLES To display logical fabric information for FID 2 in all chassis reachable from the base fabric.
  • Page 508 lfCfg Displays status information about the LISLs in the logical switch set by the context: switch:admin> lfcfg --show -lisl -v ID Port# remote-domain Name State Associated Physical Ports PT Online 1/29, 2/41, 3/33, 4/24 To display information about all LISLs in the chassis: switch:admin>...

  • Page 509: Licenseadd

    licenseAdd licenseAdd Adds a license key to a switch. SYNOPSIS licenseadd license DESCRIPTION Use this command to add a license key to a switch. Some features of the switch and the fabric to which it is connected are optional, licensed products. Without a valid license installed for such products, their services are not available.

  • Page 510: Licensehelp

    licenseHelp licenseHelp Displays commands used to administer license keys. SYNOPSIS licensehelp DESCRIPTION Use this command to display a list of the commands used to administer license keys. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 511: Licenseidshow

    licenseIdShow licenseIdShow Displays the system license ID. SYNOPSIS licenseidshow DESCRIPTION Use this command to display the license ID of the system. Some features of the switch and the fabric are optional, licensed products. Without a license installed for such products, the services provided by these features are not available. This command displays the system license ID used for generating and validating licenses on the system.

  • Page 512: Licenseport

    licensePort licensePort Manages Dynamic Ports On Demand (DPOD) licenses. SYNOPSIS licenseport --release port licenseport --reserve port licenseport --show licenseport --method dynamic | static DESCRIPTION Use this command to manage and display Dynamic Ports on Demand (DPOD) license assignments. Dynamic Ports On Demand (DPOD) is an optional feature available on all embedded platforms. DPOD takes the expansion capability of static Ports On Demand (POD) and adds the flexibility of activating any available port as long as a valid license is available.
  • Page 513 licensePort EXAMPLES To activate Dynamic Ports On Demand: switch:admin> licenseport --method dynamic The POD method has been changed to dynamic. Please reboot the switch now for this change to take effect. To release a port from a Dynamic POD license assignment and to display the assignments: switch:admin>...
  • Page 514 licensePort To disable Dynamic Ports On Demand: switch:admin> licenseport --method static The POD method has been changed to static. Please reboot the switch now for this change to take effect. SEE ALSO licenseAdd, licenseHelp, licenseRemove, licenseShow, licenseShow Fabric OS Command Reference 53-1001764-01...

  • Page 515: Licenseremove

    licenseRemove licenseRemove Removes or deactivates a license key. SYNOPSIS licenseremove license DESCRIPTION Use this command to remove an existing license key from a switch or to deactivate the license key. The existing license key must be entered exactly as shown by the licenseShow command. License keys are case-sensitive.
  • Page 516 licenseRemove Enhanced Group Management license XFJXYHmPtCWC93CLgBD9BZD9AmTFgDStFDJGMaLKC9FgWAfgSE: 8 Gig FC license Expiry Date 03/06/2009 License is expired Hf7MBEEGCFNmTAWXXF99RtHXQN4RRtM3mLGtrWZLAMaTaAY9EB: Storage Application Services license Expiry Date 03/07/2009 SEE ALSO licenseAdd, licenseHelp, licenseIdShow, licenseShow Fabric OS Command Reference 53-1001764-01...

  • Page 517: Licenseshow

    licenseShow licenseShow Displays current license keys. SYNOPSIS licenseshow DESCRIPTION Use this command to display current license keys, along with a list of licensed products enabled by these keys. Depending on the type of license, this command displays the following information: Permanent licenses •...
  • Page 518 licenseShow Fabric Watch license RyeSzRScycazfT0G: Trunking license RyeSzRScycS0fT09: 4 Domain Fabric license To display the license keys on a switch with temporary (expired) licenses installed: switch:admin> licenseShow 7QmYFYJrmDgE9tTS4AYXB9trYSGtMtrQZSTK4ZSC7FC9ZAYAgE: Integrated Routing license Expiry Date 01/16/2008 License is expired 33YBfZfKZ3tQKrRJJRtgmS3JDtCL99P4fYrJYQP7GffS4ASmNE: Enterprise Bundle license Expiry Date 01/16/2008 License is expired To display the license keys on a switch with universal time-based licenses:...
  • Page 519 licenseShow To display an ICL license on a Brocade DCX before and after a firmware upgrade to Fabric OS v7.0.0. switch:admin> licenseshow X3ffNTZM9CNmM4SKFLYTGS4WmCRCgAZZBJDTB: Inter Chassis Link (16 link) license switch:admin> licenseshow X3ffNTZM9CNmM4SKFLYTGS4WmCRCgAZZBJDTB: Inter Chassis Link (16 link) license SEE ALSO licenseAdd, licenseHelp, licenseIdShow, licenseRemove Fabric OS Command Reference...

  • Page 520: Licenseslotcfg

    licenseSlotCfg licenseSlotCfg Configures and displays slot-based licensed features. SYNOPSIS licenseslotcfg --add feature slot licenseslotcfg --remove feature slot licenseslotcfg --show licenseslotcfg --help DESCRIPTION Use this command to configure and manage licenses for the Brocade FX8-24 extension blade on the slot where the blade is installed. Slot-based licenses allow you to select the slots the license will enable up to the purchased capacity and thereby increase existing capacity without disrupting the slots for which licensed features are already enabled.
  • Page 521 licenseSlotCfg --show Displays slot assignments for all slot-based licenses in the chassis. --help Displays the command usage. EXAMPLES To add a license key for the slot-based Advance Extension feature for eight slots: switch:admin> licenseadd DXXtN3LmRSMWCSW3XmfSBPfrWKLZ3HMTN73rP9GANJMA adding license-key \ [DXXtN3LmRSMWCSW3XmfSBPfrWKLZ3HMTN73rP9GANJMA] To display the installed license (new license in bold): switch:admin>...
  • Page 522 licenseSlotCfg A7N9rATZLYgFa7JBfmGEJKETgCMHFGQMY4gfLmGAa4GA: Advanced FICON Acceleration (FTR_AFA) license Capacity 6 Consumed 2 Configured Blade Slots 3,4 DXXtN3LmRSMWCSW3XmfSBPfrWKLZ3HMTN73rP9GANJMA: Advanced Extension (FTR_AE) license Capacity 8 Consumed 4 Configured Blade Slots 3,4,11,12 switch:admin> licenseslotcfg --show FTR_10G license - blade slots configured = 1,3,5,12 FTR_AE license - blade slots configured = 3,4,11,12 FTR_AFA license - blade slots configured = 3,4 To deactivate the Advanced Extension license on slots 3 and 12, and to display the: results: switch:admin>...
  • Page 523 licenseSlotCfg Expiry Date 03/06/2009 License is expired Hf7MBEEGCFNmTAWXXF99RtHXQN4RRtM3mLGtrWZLAMaTaAY9EB: Storage Application Services license Expiry Date 03/07/2009 To remove the Advanced Extension license completely (marked inactive): switch:admin> licenseremove \ DXXtN3LmRSMWCSW3XmfSBPfrWKLZ3HMTN73rP9GANJMA removing license-key [DXXtN3LmRSMWCSW3XmfSBPfrWKLZ3HMTN73rP9GANJMA] switch:admin> licenseshow SSezcSec9RXTf0dj: Performance Monitor license KgrfCBHgRtfBrGKH4D7f9S3FBX7K3MtTtBHKrYHA4CMB: 10 Gigabit Ethernet (FTR_10G) license Capacity 8 Consumed 4 Configured Blade Slots 1,3,5,12...

  • Page 524: Linkcost

    linkCost linkCost Sets or displays the Fabric Shortest Path First (FSPF) cost of a link. SYNOPSIS linkcost [[slot/]port [cost]] DESCRIPTION Use this command to set or display the cost of an interswitch link (ISL). The cost of a link is a dimensionless positive number.
  • Page 525 linkCost (E_PORT) 1/10 1/11 1/12 1/13 1/14 1/15 Type <CR> to continue, Q<CR> to stop: To set the ISL cost on a port: switch:admin> linkcost 1/9 1000 To display the new cost value on the same port: switch:admin> linkcost 1/9 Interface1/9 (E_PORT) Cost...

  • Page 526: Login

    login login Logs in as new user. SYNOPSIS login DESCRIPTION Use this command to log in to the switch with another user name and password, without first logging out from the original session. If you originally connected through a Telnet or rlogin session, that session is left open.

  • Page 527: Logout

    logout logout Logs out from a shell session. SYNOPSIS logout DESCRIPTION Use this command to log out from a shell session. Remote login connections are closed and the local serial connections return to the login prompt. The exit command is accepted as a synonym for logout, as is Ctrl-D at the beginning of a line. OPERANDS None EXAMPLES...

  • Page 528: Lsanzoneshow

    lsanZoneShow lsanZoneShow Displays logical SAN zone information. SYNOPSIS lsanzoneshow [-s] [-f fabricid] [-w wwn] [-z zonename] DESCRIPTION Use this command to display the inter-fabric zones or LSAN zones. These zones are normal WWN zones created in FC Router EX_Port-connected fabrics and backbone fabrics. The LSAN zones are identified by the text string "lsan_"...
  • Page 529 lsanZoneShow -w wwn Displays LSAN zones containing the specified port WWN. The WWN format is xx:xx:xx:xx:xx:xx:xx:xx. -z zonename Displays LSAN zones with the specified zone name. The database for zones is displayed per switch, which can differ from the database stored on the other FCR switches.

  • Page 530: Lscfg

    lsCfg lsCfg Configures and manages a logical switch SYNOPSIS lscfg --create FID [-b | -base] [-f | -force] lscfg --delete FID lscfg --config FID -slot slot1[-slot2] [-port [ port1[-port2]] [-f |-force] lscfg --restore_to_default FID lscfg --restore_slot_to_default slot lscfg --change FID [[-newfid FID] | [-base]] [-force] lscfg --show [-ge] [-provision] lscfg --help DESCRIPTION...
  • Page 531 lsCfg -b | -base Creates a base logical switch on the chassis. A base logical switch communicates among different logical switches. Legacy switches can be connected to the base logical switch through EX_Ports, and interswitch links (ISLs) between base logical switches enable communication among different logical switches.
  • Page 532 lsCfg -b | -base Turns an existing logical switch into a base switch. When this command is issued on a switch that is already a base switch, this command removes the base switch properties. This command disables the current logical switch. After making the change, you must re-enable the switch.
  • Page 533 lsCfg To delete a logical switch: switch:admin> lscfg --delete 2 All active login sessions for FID 2 have been terminated. Switch successfully deleted. To assign ports to a logical switch: switch:admin> lscfg --config 2 -port 10-12 This operation requires that the affected ports be disabled. Would you like to continue [y/n]?: y Making this configuration change.
  • Page 534 lsCfg To display the partition configuration for all slots with the -ge option: switch:admin> lscfg --show -provision -ge Created switches: 128(ds) 2(bs) Slot ------------------------------------------------------- Port | 128 | | 128 | 128 | | 128 | | 128 | 128 | | 128 | | 128 | 128 | | 128 |...
  • Page 535 lsCfg To make logical switch FID 1 the base switch without confirmation: switch:admin> lscfg --change 1 -base -force Disabling the current base switch... Disabling switch fid 1 Disabling the proposed new base switch... Disabling switch fid 1 Please enable your switches when ready. To make logical switch FID 1 the base switch with confirmation: switch:admin>...

  • Page 536: Lsdbshow

    lsDbShow lsDbShow Displays the Fabric Shortest Path First (FSPF) link state database. SYNOPSIS lsdbshow [domain] DESCRIPTION Use this command to display an FSPF link state database record for switches in the fabric or for a specified domain. There are two types of database entries: •...
  • Page 537 lsDbShow lsAge Age, in seconds, of this LSR. An LSR is removed from the database when its age exceeds 3,600 seconds. reserved Reserved for future use. type Type of the LSR. Always 1. options Always 0. lsId ID of this LSR. It is identical to the domain ID. advertiser Domain ID of the switch that originated this LSR.
  • Page 538 lsDbShow EXAMPLES To display the link state record for a switch: switch:admin> lsdbshow 1 Domain = 1 (self), Link State Database Entry pointer = 0x1096da60 lsrP = 0x109784b0 earlyAccLSRs ignoredLSRs lastIgnored = Never installTime = Aug 26 18:20:41.451 lseFlags = 0xa uOutIfsP[0] = 0x00000000 uOutIfsP[1]...

  • Page 539: Memshow

    memShow memShow Displays the amounts of free and used memory in a switch. SYNOPSIS memshow [-b | -k | -m] DESCRIPTION Use this command to display free and used memory in the switch, as well as the shared memory and buffers used by the kernel.

  • Page 540: Motd

    motd motd Sets the banner on the chassis. SYNOPSIS motd --set string motd --show DESCRIPTION Use this command to set the banner on the chassis. The banner is a string of alphanumeric characters. It is displayed before you log in to a switch. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 541: Mscapabilityshow

    msCapabilityShow msCapabilityShow Displays the Management Server (MS) capabilities. SYNOPSIS mscapabilityshow DESCRIPTION Use this command to display the supported capabilities of the Management Server for each switch in the fabric. An asterisk displays next to the name of the local switch. NOTES Reliable commit service (RCS) is a fabric-wide capability and is supported only if all the switches in the fabric support the service.

  • Page 542: Msconfigure

    msConfigure msConfigure Configures the Management Server (MS) access control list (ACL). SYNOPSIS msconfigure DESCRIPTION Use this command to configure the MS Access Control List (ACL). The MS allows a Storage Area Network (SAN) management application to retrieve and administer the fabric and Interconnect Elements, such as switches.
  • Page 543 msConfigure 20:02:00:60:69:00:60:15 Done Display the access list Add member based on its Port/Node WWN Delete member based on its Port/Node WWN select : (0..3) [1] 0 done ... SEE ALSO msCapabilityShow, msPlatShow, msPlClearDB, msPlMgmtActivate, msPlMgmtDeactivate, msTdDisable, msTdEnable, msTdReadConfig, secPolicyShow Fabric OS Command Reference 53-1001764-01...

  • Page 544: Msplatshow

    msPlatShow msPlatShow Displays the Management Server (MS) platform database. SYNOPSIS msplatshow DESCRIPTION Use this command to display information from the MS platform database. This command displays the name of each platform object with the platform type (GATEWAY, HOST_BUS_ADAPTER, and so forth), associated management addresses, and associated node names.

  • Page 545: Msplatshowdbcb

    msPlatShowDBCB msPlatShowDBCB Displays the Management Server (MS) platform service database control block. SYNOPSIS msplatshowdbcb DESCRIPTION Use this command to display the control block fields associated with the platform database. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 546: Msplcleardb

    msPlClearDB msPlClearDB Clears the Management Server (MS) platform database on all switches in the fabric. SYNOPSIS msplcleardb DESCRIPTION Use this command to clear the MS platform database in the entire fabric. Because this operation cannot be undone, it should not be performed unless it is intended to resolve a database conflict between two joining fabrics or to establish an entirely new fabric with an empty database.

  • Page 547: Msplmgmtactivate

    msPlMgmtActivate msPlMgmtActivate Activates the Management Server (MS) platform service. SYNOPSIS msplmgmtactivate DESCRIPTION Use this command to activate the MS platform service throughout the fabric. This command attempts to activate the MS platform service for each switch in the fabric. The change takes effect immediately and is committed to the configuration database of each affected switch.

  • Page 548: Msplmgmtdeactivate

    msPlMgmtDeactivate msPlMgmtDeactivate Deactivates the Management Server (MS) platform service. SYNOPSIS msplmgmtdeactivate DESCRIPTION Use this command to deactivate the MS platform service throughout the fabric. This command deactivates the MS platform service for each switch in the fabric and commits the change to nonvolatile storage.

  • Page 549: Mstddisable

    msTdDisable msTdDisable Disables the Management Server (MS) topology discovery service. SYNOPSIS mstddisable ["ALL"] DESCRIPTION Use this command to disable the management server topology discovery service on a local switch or an entire fabric. This change takes effect immediately and commits to the configuration database for all affected switches.

  • Page 550: Mstdenable

    msTdEnable msTdEnable Enables the Management Server (MS) topology discovery service. SYNOPSIS mstdenable ["ALL"] DESCRIPTION Use this command to enable the MS topology discovery service on the local switch or throughout the fabric. The change takes effect immediately and commits to the configuration database for all affected switches.

  • Page 551: Mstdreadconfig

    msTdReadConfig msTdReadConfig Displays the status of The Management Server (MS) topology discovery service. SYNOPSIS mstdreadconfig DESCRIPTION Use this command to check whether or not the management server topology discovery service is enabled. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 552: Myid

    myId myId Displays the current login session details. SYNOPSIS myid DESCRIPTION Use this command to display the status of the system and the login session details. This includes IPv4 or IPv6 addresses associated with the login session. The login session gives details of the following: •...

  • Page 553: Nbrstateshow

    nbrStateShow nbrStateShow Displays the state of FSPF neighbors. SYNOPSIS nbrstateshow [slot/][port] DESCRIPTION Use this command to display information about fabric shortest path first (FSPF) neighbors to the local switch or information about a neighbor to a specified port. FSPF defines a neighbor as a remote E_Port interface that is directly attached to the local switch.
  • Page 554 nbrStateShow port Specify the port number to display, relative to its slot for bladed systems. Use switchShow to list valid ports. This operand is optional; if omitted, all neighbor states are displayed. EXAMPLES To display information about a neighbor directly connected to the local switch: switch:user>...

  • Page 555: Nbrstatsclear

    nbrStatsClear nbrStatsClear Resets FSPF interface counters. SYNOPSIS nbrstatsclear [slot/][port] DESCRIPTION Use this command to reset the counters of fabric shortest path first (FSPF) frames transmitted and received on all interswitch links (ISLs) or on a specified ISL Use this command without operands to reset counters on all interfaces.
  • Page 556 nbrStatsClear To verify the changes: switch:admin> interfaceshow 1/0 idbP = 0x10050a38 Interface 0 data structure: nghbP = 0x1004ce68 ifNo masterPort = 0 (self) defaultCost = 500 cost = 500 (output truncated) SEE ALSO interfaceShow, portShow, switchShow Fabric OS Command Reference 53-1001764-01...

  • Page 557: Nodefind

    nodeFind nodeFind Displays all device Name Server (NS) entries matching a given WWN, device PID, or alias. SYNOPSIS nodefind WWN | PID | ALIAS DESCRIPTION Use this command to display the NS information for all devices in the fabric that have either a port world wide name (WWN) or a node WWN matching the given WWN;...
  • Page 558 nodeFind To display all the device information matching the alias "a320": switch:user> nodefind a320 Local: Type Pid PortName NodeName NL 0314d9;3;22:00:00:04:cf:5d:dc:2d;20:00:00:04:cf:5d:dc:2d; 0 FC4s: FCP [SEAGATE ST318452FC 0001] Fabric Port Name: 20:14:00:60:69:80:04:79 Permanent Port Name: 22:00:00:04:cf:5d:dc:2d Device type: Physical Target Port Index: 20 Share Area: No Device Shared in Other AD: No Aliases: a320...

  • Page 559: Nsaliasshow

    nsAliasShow nsAliasShow Displays local Name Server (NS) information, with aliases. SYNOPSIS nsaliasshow [-r ][-t] DESCRIPTION Use this command to display local name server information with the added feature of displaying the defined configuration aliases to which the device belongs. If there are no defined configuration aliases for that device, no alias is displayed.
  • Page 560 nsAliasShow EXAMPLES To display local NS information with aliases: switch:user> nsaliasshow Type Pid PortName NodeName TTL(sec) N 010600;3;20:06:00:05:1e:38:81:71;10:00:00:05:1e:38:81:71; na Fabric Port Name: 20:06:00:05:1e:7a:7a:00 Permanent Port Name: 20:06:00:05:1e:38:81:71 Port Index: 6 Share Area: No Device Shared in Other AD: No Redirect: No Partial: No Aliases: MyAlias1 MyAlias2 N 010601;3;23:0d:00:05:1e:38:81:71;50:00:51:e3:88:17:10:0d;...
  • Page 561 nsAliasShow Redirect: No Partial: No Aliases: N 010602;3;10:00:00:00:00:00:00:01;10:00:00:00:00:00:00:01; 3 FC4s: FCP PortSymb: [41] "Brocade Ioblaster Initiator#00,pid#10602." Fabric Port Name: 20:06:00:05:1e:7a:7a:00 Permanent Port Name: 20:06:00:05:1e:38:81:71 Port Index: 6 Share Area: No Device Shared in Other AD: No Redirect: No Partial: No Aliases: DeviceAlias The Local Name Server has 3 entries } To display local NS information with aliases with the -r and -t options:...

  • Page 562: Nsallshow

    nsAllShow nsAllShow Displays global name server information. SYNOPSIS nsallshow [type] DESCRIPTION Use this command to display the 24-bit Fibre Channel addresses of all devices in all switches in the fabric. When used with the type operand, the command displays only devices of the specified FC-4 type. FC-4 type codes are referenced in the Fibre Channel Framing and Signaling (FC-FS) standards documentation (see "TYPE codes - FC-4").

  • Page 563: Nscamshow

    nsCamShow nsCamShow Displays information about remote devices in the Name Server (NS) cache. SYNOPSIS nscamshow [-t] DESCRIPTION Use this command to display the local NS cache information about the devices discovered in the fabric by the NS cache manager. If the NS cache manager does not discover new switches or new devices in the fabric, the command displays the message "No Entry is found!"...
  • Page 564 nsCamShow Virtual The device is contrived by the switch. The device is connected to the NX_Port, using FDISC to log in to the switch. iSCSI Device is connected to the iSCSI port. iSCSI The second attribute indicates the role of the device. Valid role attributes include the following: Unknown (initiator/target) Device role is not detected...
  • Page 565 nsCamShow Partial: No 5c1700; 3;23:00:00:05:1e:53:e3:8a;50:00:51:e5:3e:38:a0:00; FC4s: FCP PortSymb: [34] "Brocade DPC Entity-Slot#00,DPC#00." Fabric Port Name: 20:17:00:05:1e:53:e3:8a Permanent Port Name: 23:00:00:05:1e:53:e3:8a Port Index: 23 Share Area: No Device Shared in Other AD: No Redirect: No Partial: No (output truncated) To display the output with the -t option: switch:user>...

  • Page 566: Nsshow

    nsShow nsShow Displays local Name Server (NS) information. SYNOPSIS nsshow [-r][-t] DESCRIPTION Use this command to display local NS information about devices connected to a switch. If no information is available for the switch, the command displays the following message: "There is no entry in the Local Name Server."...
  • Page 567 nsShow Partial Displays "Yes" if t the device entry is incomplete; otherwise displays "No." Devices that are incomplete are displayed by the nsShow and nsCamShow commands, and have routing established, but are not considered during device discovery (for example, during FC-GS Name Server Queries). The following information is displayed only if the device has registered the information (for example, the switch automatically registers SCSI inquiry data for FCP target devices): •...
  • Page 568 nsShow The device is connected to the NX_Port, using FDISC to log in to the switch. iSCSI The device is connected to the iSCSI port. The second attribute indicates the role of the device. Valid role attributes include the following: Unknown (initiator/target) Device role is not detected Initiator...
  • Page 569 nsShow Partial: No N 010e00;3;21:00:00:e0:8b:12:8a:be;20:00:00:e0:8b:12:8a:be;\ 0x01000001 FC4s: FCP NodeSymb: [41] "QLA2340 FW:v3.03.06 DVR:v9.0.0.2 (w32 IP)" Fabric Port Name: 20:0e:00:05:1e:34:00:70 Permanent Port Name: 21:00:00:e0:8b:12:8a:be Port Index: 14 Share Area: No Device Shared in Other AD: No Redirect: No Partial: No The Local Name Server has 2 entries } To display local name server information with -r and -t options.

  • Page 570: Nszonemember

    nsZoneMember nsZoneMember Displays the information on online devices zoned with a specified device. SYNOPSIS nszonemember pid | wwn nszonemember -a | -u DESCRIPTION Use this command to display information on all online devices zoned with the specified device. The device can be specified by WWN or Port ID (PID). Use this command with the -u option to display all unzoned devices in the entire fabric.
  • Page 571 nsZoneMember NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. OPERANDS This command has the following operands: PID | WWN Specifies the port ID or WWN of the device for which to display zoned devices.
  • Page 572 nsZoneMember To display all the unzoned devices in the fabric: switch:admin> nszonemember -u Pid: 0xb01ea9; Aliases: trimm32b_1 Pid: 0xb01eaa; Aliases: trimm32b_2 Pid: 0xb01eab; Aliases: trimm32b_3 Pid: 0xb01eac; Aliases: trimm32b_4 Pid: 0xb01fad; Aliases: trimm32a_5 Pid: 0xb01fae; Aliases: trimm32a_6 Pid: 0xb01fb1; Aliases: trimm32a_7 Pid: 0xb01fb2;...

  • Page 573: Passwd

    passwd passwd Changes the password for a specified user. SYNOPSIS passwd [user_account] [-old old_password] [-new new_password] DESCRIPTION Use this command to change a user account password. Passwords can be changed locally on any switch. For the password database to be distributed to other switches in the fabric, the switches must be configured to accept the password database with the fddCfg command.
  • Page 574 passwd NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. OPERANDS The following operand is optional: user_account Specifies the user account for which the password is to be changed.
  • Page 575 passwd Password matches one of the previous passwords The password you entered matches one of the previous passwords. You must wait longer to change your password You cannot change the password before the minimum aging period expires. Password contains invalid characters The password you entered contains invalid characters.

  • Page 576: Passwdcfg

    passwdCfg passwdCfg Manages the password policies. SYNOPSIS passwdcfg --set options value passwdcfg --disableadminlockout passwdcfg --enableadminlockout passwdcfg --setdefault passwdcfg --showall passwdcfg --help DESCRIPTION Use this command to manage password policies. Use --set to configure the following password policies: • Password strength policy •...
  • Page 577 passwdCfg A failed login attempt counter is maintained for each user on each switch instance. The counters for all user accounts are reset to zero when the account lockout policy is enabled. The counter for an individual account is reset to zero when the account is unlocked after the lock-out duration period expires. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 578 passwdCfg -maxpasswordage value Specifies the maximum number of days that can elapse before a password must be changed. This is the password expiration period. -maxpasswordage can be set at 0 to 999. Setting this parameter to 0 disables password expiration. The default value is 0.
  • Page 579 passwdCfg --setdefault Resets all password policies to their default values. --help Displays the command usage. DIAGNOSTICS The passwdCfg command may fail for any of the following reasons: Permission failure You not permitted to execute the command. Invalid command line option An unrecognized command line option was specified.
  • Page 580 passwdCfg EXAMPLES To display the current password configuration parameters: switch:admin> passwdcfg --showall passwdcfg.minlength: 8 passwdcfg.lowercase: 0 passwdcfg.uppercase: 0 passwdcfg.digits: 0 passwdcfg.punctuation: 0 passwdcfg.history: 1 passwdcfg.minpasswordage: 0 passwdcfg.maxpasswordage: 0 passwdcfg.warning: 0 passwdcfg.lockoutthreshold: 0 passwdcfg.lockoutduration: 30 passwdcfg.status: 0 To set password configuration parameters, specifying that a password must contain at least two uppercase characters, and that passwords expire in 90 days from the date they are defined: switch:admin>...

  • Page 581: Pathinfo

    pathInfo pathInfo Displays routing information and statistics along a path covering multiple switches. SYNOPSIS pathinfo pathinfo -f FID destination_switch [destination_port] [-r] [-t] pathinfo destination_switch [source_port[destination_port]] [-r] [-t] DESCRIPTION Use this command to display routing information from a source port on the local switch to a destination port on another switch.
  • Page 582 pathInfo In Port The port on which the switch receives frames. For hop 0, this is source_port. identified by the port index. Domain ID The domain ID of the switch. Name The name of the switch. Out Port The output port that the frames take to reach the next hop. For the last hop, this is destination_port identified by the port index.
  • Page 583 pathInfo Words The total number of 4-byte Fibre Channel words. Frames The total number of frames. Errors The total number of errors that may have caused a frame not to be received correctly. This includes cyclic redundancy check (CRC) errors, bad end-of-frame (EOF) errors, frame truncated errors, frame-too-short errors, and encoding errors inside a frame.
  • Page 584 pathInfo destination_port Specifies the port on the destination switch for the path being traced. This operand returns the state of this port. The embedded port (-1) is used by default, or if you specify a destination port that is not active. The destination is specified as the port index.
  • Page 585 pathInfo To display basic path information in traceroute format: switch:admin> pathinfo 91 -t traceroute to domain 91(web225) , 25 hops Domain ID (Name) time taken for the hop ----------------------------------------------- 10 (web229) 0.0331 us To display basic path information in traceroute format with reverse path option: switch:admin>...
  • Page 586 pathInfo Target port is Embedded In Port Domain ID (Name) Out Port Cost --------------------------------------------------------- 9 (web226) 1000 Port --------------------------------------- B/s (1s) B/s (64s) Txcrdz (1s) Txcrdz (64s) F/s (1s) F/s (64s) 2743 Words 2752748 2822763 Frames 219849 50881 Errors In Port Domain ID (Name) Out Port Cost...

  • Page 587: Pdshow

    pdShow pdShow Displays data from a panic dump file. SYNOPSIS pdshow [panic_dump_file] DESCRIPTION Use this command to display data from a panic dump file. The panic dump file contains information that might be useful to determine the cause of the system panic. When executed without any arguments, this command displays output from the latest panic dump file available on the switch.

  • Page 588: Perfaddeemonitor

    perfAddEEMonitor perfAddEEMonitor Adds an end-to-end monitor to a port. SYNOPSIS perfaddeemonitor [slot/]port SourceID DestID DESCRIPTION Use this command to add an end-to-end performance monitor to a port. The performance monitor counts the number of words received, number of words transmitted, and number of CRC errors detected using either of the following conditions: •...
  • Page 589 perfAddEEMonitor DestID Specifies the 3-byte DID (destination ID) of the destination device. It should be in "0xDDAAPP" format, where DD is domain ID, AA is area ID and PP is AL_PA ID. For example, 0x050200 has a domain ID of 5, an area ID of 2, and an AL_PA ID of 0.
  • Page 590 perfAddEEMonitor Get name server information. Name server info shows four devices (two of which are virtual) connected to the Encryption Switch along with their PIDs: EncryptionSwitch:Securityadmin> nsshow Type Pid COS PortName NodeName TTL(sec) N 0a0100;3;2f:ff:00:06:2b:0e:b3:3c;2f:ff:00:06:2b:0e:b3:3c;na FC4s: FCP PortSymb: [18] "SANBlaze V3.0 Port" Fabric Port Name: 20:01:00:05:1e:53:b8:45 Permanent Port Name: 2f:ff:00:06:2b:0e:b3:3c Port Index: 1...
  • Page 591 perfAddEEMonitor Add another EE monitor on port 1 between the Virtual Target SID and the Target DID: EncryptionSwitch:SecurityAdmin> perfaddeemonitor 1 \ 0x0a2001 0x01a000 End-to-End monitor number 1 added. Display the EE monitors on the Encryption Switch: EncryptionSwitch:SecurityAdmin> perfmonitorshow --class EE 1 There are 2 end-to-end monitor(s) defined on port OWNER_APP TX_COUNT...

  • Page 592: Perfcfgclear

    perfCfgClear perfCfgClear Clears the previously saved performance monitoring configuration settings from nonvolatile memory. SYNOPSIS perfcfgclear DESCRIPTION Use this command to clear the previously saved end-to-end performance monitoring configuration settings from nonvolatile memory. NOTES This command requires an Advanced Performance Monitoring license. This command is not supported on virtual FC ports (VE/VEX_Port), EX_Port, M (Mirror) ports and GbE ports.

  • Page 593: Perfcfgrestore

    perfCfgRestore perfCfgRestore Restores performance monitoring configuration settings from nonvolatile memory. SYNOPSIS perfcfgrestore DESCRIPTION Use this command to restore the performance monitoring configuration information from nonvolatile memory. This does not restore the information cleared by the perfCfgClear command; rather, it restores the configuration from nonvolatile memory.

  • Page 594: Perfcfgsave

    perfCfgSave perfCfgSave Saves performance monitoring configuration settings to nonvolatile memory. SYNOPSIS perfcfgsave DESCRIPTION Use this command to save the current Performance Monitor configuration for end-to-end (EE) performance monitors to nonvolatile memory. Configuration changes are saved persistently across power cycles. The number of monitors that can be saved to flash memory is limited as follows: •...

  • Page 595: Perfclearalpacrc

    perfClearAlpaCrc perfClearAlpaCrc Clears the CRC error count associated with a port and arbitrated loop physical address (AL_PA). SYNOPSIS perfclearalpacrc [slot/]port [ALPA] DESCRIPTION Use this command to clear a specific cyclic redundancy check (CRC) error counter associated with a specific port and AL_PA, or all such counters on a port. NOTES This command requires an Advanced Performance Monitoring license.

  • Page 596: Perfdeleemonitor

    perfDelEEMonitor perfDelEEMonitor Deletes one or all end-to-end performance monitors from a port. SYNOPSIS perfdeleemonitor [slot/]port [monitorId] DESCRIPTION Use this command to delete an end-to-end performance monitor from a port, or all such monitors associated with a port. NOTES This command requires an Advanced Performance Monitoring license. This command is not supported on virtual FC ports (VE/VEX_Port), EX_Port, M (Mirror) ports and GbE ports.

  • Page 597: Perfhelp

    perfHelp perfHelp Displays performance monitoring help information. SYNOPSIS perfhelp DESCRIPTION Use this command to display the help commands available for performance monitoring. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 598: Perfmonitorclear

    perfMonitorClear perfMonitorClear Clears counters of end-to-end and ISL performance monitors on a port. SYNOPSIS perfmonitorclear --class monitor_class [slot/]port [monitorId] DESCRIPTION Use this command to clear counters for performance monitors on a port, specified by class. Monitor classes include end-to-end monitors (EE) and interswitch link monitors ISL). Issuing the portStatsClear command on a port clears all end-to-end and filter-based monitors (but not ISL monitors) for all the ports in the same quad.
  • Page 599 perfMonitorClear To clear statistics counters for an ISL monitor: switch:admin> perfmonitorclear --class ISL 1 This will clear ISL monitor on port 1, continue? \ (yes, y, no, n): [no] y SEE ALSO perfAddEEMonitor, perfMonitorShow Fabric OS Command Reference 53-1001764-01...

  • Page 600: Perfmonitorshow

    perfMonitorShow perfMonitorShow Displays end-to-end and interswitch link performance monitors on a port. SYNOPSIS perfmonitorshow --class monitor_class [slot/]port [interval] DESCRIPTION Use this command to display End-to-End (EE) performance monitors on a port. If interval is specified, the command displays a snapshot of the traffic at the specified interval. If no interval is specified, this command displays the following information: The monitor number.
  • Page 601 perfMonitorShow interval The interval value must be greater than or equal to 5, and it must be a multiple of 5. In the case of end-to-end monitor, Tx and Rx counts are displayed in the unit of byte when this operand is specified. This operand is optional; if the operand is not specified, this command displays cumulative counts.

  • Page 602: Perfresourceshow

    perfResourceShow perfResourceShow Displays performance monitor resources for a logical switch. SYNOPSIS perfresourceshow --portttRes [[slot/]port] perfResourceShow --eeRes [[slot/]port] perfResourceShow --fabmodeRes perfResourceShow --installed [[slot/]port] perfResourceShow --help DESCRIPTION Use this command to determine the physical resources available to support the installation of performance monitors on a logical switch port. In a Virtual Fabric environment, performance monitors installed on a logical switch share the physical resources of the switches that make up the base fabric.
  • Page 603 perfResourceShow --help Displays the command usage. EXAMPLES To display the number of Top Talkers that can be installed on the current logical switch: switch:admin> perfresourceshow --portttRes ====================================================== Installed Available Slot/PortRange ====================================================== 2/13 3/5,3/7,3/12 Port list information --------------------- Slot ----------------------------------------------------- Port | - | - | | - | | - |...
  • Page 604 perfResourceShow | - | - | | - | | - | | - | - | | - | | - | | - | - | | - | | - | | - | 0 | | - | | - | | - | - | | - |...

  • Page 605: Perfsetporteemask

    perfSetPortEEMask perfSetPortEEMask Sets the overall mask for end-to-end (EE) performance monitors. SYNOPSIS perfsetporteemask [slot/]port "TxSIDMsk " "TxDIDMsk " "RxSIDMsk" "RxDIDMsk" DESCRIPTION Use this command to set the mask for an end-to-end (EE) performance monitor. This command allows selecting the Fibre Channel frames for which to collect performance statistics. When setting the EE mask on a port, all existing EE monitors on that port are deleted.
  • Page 606 perfSetPortEEMask Specifies that the field does triggers EE monitors. TxDIDMsk Specify the transmitting Destination ID mask, in quotation marks, in dd:aa:pp format. RxSIDMsk Specify the receiving Source ID mask, in quotation marks, in dd:aa:pp format. RxDIDMsk Specify the destination ID mask, in quotation marks, in dd:aa:pp format. EXAMPLES To set the overall mask for end-to-end monitors on a port: switch:admin>...

  • Page 607: Perfshowalpacrc

    perfShowAlpaCrc perfShowAlpaCrc Displays the CRC error count by port or by arbitrated loop physical address (AL_PA). SYNOPSIS perfshowalpacrc [slot/]port [ALPA] DESCRIPTION Use this command to display the cyclic redundancy check (CRC) error count of one or all devices attached to a port. If the AL_PA operand is specified, only the CRC count for that AL_PA device is displayed.

  • Page 608: Perfshowporteemask

    perfShowPortEEMask perfShowPortEEMask Displays the current address mask for end-to-end performance monitors on a port. SYNOPSIS perfshowporteemask [slot/]port DESCRIPTION Use this command to display the current mask shared across all end-to-end (EE) performance monitors of a port. There are only two commands that can modify the value of the EE mask: perfSetPortEEMask and perfCfgRestore.
  • Page 609 perfShowPortEEMask RxSID Area: RxSID ALPA: RxDID Domain: RxDID Area: RxDID ALPA: SEE ALSO perfAddEEMonitor, perfDelEEMonitor, perfSetPortEEMask Fabric OS Command Reference 53-1001764-01...

  • Page 610: Perfttmon

    perfTTmon perfTTmon Installs the Top Talker monitor in the specified mode. SYNOPSIS perfttmon Port Mode: perfttmon --add egress | ingress [slot/]port perfttmon --show [slot/]port [number_of_flows] [wwn| pid] perfttmon --delete [[slot/]port | -all | -sconfig] Fabric Mode: perfttmon --add fabricmode perfttmon --show dom domain id [number_of_flows] [wwn| pid] perfttmon --delete fabricmode perfttmon --help...
  • Page 611 perfTTmon Top Talkers are not supported on FCoE ports or ports configured as mirror ports. Top Talkers are not supported on VE_Ports, EX_Ports, VEX_Ports. You cannot install a Top Talker and an End-to-End Monitor on the same port. Brocade recommends against installing a Top Talkers and an End-to-End Monitor on the ports belonging to the same ASIC chip.
  • Page 612 perfTTmon Fabric Mode Top Talker commands: --add fabricmode Installs the Top Talker monitor on all switches in the fabric. When a new switch joins the fabric, this command must be run again on the switch. The TT configuration information is not propagated automatically to the new switch. In a mixed chassis configuration containing both 8G and 16G port blades, fabric mode is blocked when FCR is enabled.
  • Page 613 perfTTmon To identify and delete a stale Top Talker for an F_Port (the F_Port belonged to a blade that has been removed): Switch:admin> configshow -a | grep perf perf.ToptalkerEnabledonC2:1 perf.ttmonc.254:254|0|0|1: Switch:admin> perfttmon --delete -sconfig SEE ALSO perfAddEEMonitor, perfResourceShow Fabric OS Command Reference 53-1001764-01...

  • Page 614: Policy

    policy policy Displays or modifies the encryption and authentication algorithms for security policies. SYNOPSIS policy option type number [-enc method] [-auth algorithm] [-pfs value] [-dh group] [-seclife seconds] DESCRIPTION Use this command to display or modify the encryption and authentication algorithms for security policies. You can configure a maximum of 32 Internet key exchange (IKE) and 32 Internet protocol security (IPSec) policies.
  • Page 615 policy AES-128 Advanced encryption standard, 128-bit key. AES-256 Advanced encryption standard, 256-bit key. -auth algorithm Specifies the authentication algorithm. The default is SHA-1. Algorithms include the following: SHA-1 Secure hash algorithm. Message digest 5. AES-XCBC Advanced encryption standard. Valid only with IPSec. -pfs value Specifies the perfect forward secrecy.
  • Page 616 policy To display all IKE policy settings: switch:admin> policy --show ike all IKE Policy 1 ----------------------------------------- Authentication Algorithm: SHA-1 Encryption: AES-128 Perfect Forward Secrecy: on Diffie-Hellman Group: 1 SA Life (seconds): 28800 IKE Policy 29 ----------------------------------------- Authentication Algorithm: SHA-1 Encryption: AES-128 Perfect Forward Secrecy: on Diffie-Hellman Group: 1 SA Life (seconds): 28800...

  • Page 617: Portaddress

    portAddress portAddress Assigns the lower 16 bits of the Fibre Channel Port ID. SYNOPSIS portaddress --bind [slot/]port [16-bit_address] [--auto] portaddress --unbind [slot/]port portaddress --show [[slot/]port] portaddress --findPID 24-bit_Port_ID portaddress --help DESCRIPTION Use this command to bind the 16-bit address to the lower two bytes of a port 24-bit Fibre Channel address, or to unbind the currently bound address for the specified port.
  • Page 618 portAddress 16-bit_address Specifies the 16-bit address to be bound to the FC address. Note that only the upper 10 bits of the PID can be used for a unique route. Therefore, not all addresses in the 16-bit range are available. --auto Enables autobinding on the specified port.
  • Page 619 portAddress 0x0000 8 bit 0x0100 8 bit 0x0200 8 bit 0x0300 8 bit 0x0400 8 bit 0x0500 8 bit 0x0600 8 bit 0x0700 8 bit 0x1800 8 bit 0x1900 8 bit 0x1a00 8 bit 0x1b00 8 bit 0x1c00 8 bit 0x1d00 8 bit 0x1e00...

  • Page 620: Portalpashow

    portAlpaShow portAlpaShow Displays the Arbitrated Loop Physical Addresses (AL_PAs) of devices attached to a port. SYNOPSIS portalpashow [slot/]port DESCRIPTION Use this command to display the AL_PAs of devices connected to a port, and whether these devices are public or private. If the specified port is not an active FL_Port or if no AL_PAs are present, this command prints an error.

  • Page 621: Portbeacon

    portBeacon portBeacon Sets port beaconing mode. SYNOPSIS portbeacon --enable [slot/]port portbeacon --disable [slot/]port portbeacon --show [slot/]port portbeacon --help DESCRIPTION Use this command to enable or disable beaconing mode on a specified port. When beaconing mode is enabled on a port, the port LED flashes amber and green for 2.5 seconds each in an alternating pattern.
  • Page 622 portBeacon To display beaconing mode on a port: switch:admin> chassisbeacon --show 2/1 PortBeacon status of : slot 2, port 1 is ON SEE ALSO chassisBeacon, switchBeacon Fabric OS Command Reference 53-1001764-01...

  • Page 623: Portbuffershow

    portBufferShow portBufferShow Displays the buffer usage information for a port group or for all port groups in the switch. SYNOPSIS portbuffershow [[slot/]port] DESCRIPTION Use this command to display the current long distance buffer information for the ports in a port group. The port group can be specified by giving any port number in that group.
  • Page 624 portBufferShow Remaining Buffers The remaining (unallocated and reserved) buffers in a port group. A hyphen in one of the display fields indicates that no relevant information is available; there may be no connection to a port, or the port is disabled, or the port is not an E_Port. When invoked without operands, this command displays the long distance buffer information for all the port groups of the switch.

  • Page 625: Portcamshow

    portCamShow portCamShow Displays port-based filter CAM utilization. SYNOPSIS portcamshow [slot/]port DESCRIPTION Use this command to display the current filter Content-Addressable Memory (CAM) utilization of a specified port. The command displays the following information: SID used Total number of CAM entries used by this port. Note that each CAM entry, either source ID (SID) or destination ID (DID) CAM, can be shared among a certain number of ports, depending on the ASIC.
  • Page 626 portCamShow EXAMPLES To display the filter CAM utilization for a single port on a switch: switch:user> portcamshow 3/2 -------------------------------------------------- Area SID used DID used SID entries DID entries 350400 2b2200 2b1200 220400 -------------------------------------------------- SID Free, DID Free: (61, 511) To display port CAM entries on shared ports (in the example, port 7/31 and 7/39 are shared ports and 7/31 is the primary port): switch:user>...

  • Page 627: Portcfg

    portCfg portCfg Manages port configuration parameters for FC ports, VE_ports, and GbE/10GbE ports. SYNOPSIS portcfg action [slot/] port arguments portcfg action [slot/] ge_port arguments portcfg action [slot/]ve_port options arguments portcfg action [slot/][ge_port options arguments DESCRIPTION Use this command to manage port configuration parameters on FC ports as well as on Gigabit Ethernet (GbE) ports on the Brocade 7800/FX8-24 and on the Brocade FR4-18i.
  • Page 628 portCfg In Fabric OS v7.0.0, the restrictions on addressing have been lifted. An IPv4 subnet can span multiple GbE interfaces, and you can now have multiple IPv6 addresses with the same prefix configured on different GbE interfaces on the same extension switch or blade. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 629 portCfg Valid modes for mirrorport include the following: --disable Disables the configuration. When disabled, a port cannot be a mirror port. --enable Enables the configuration. When the mirror port feature is enabled to a port, a mirror connection can use this port to mirror traffic. EXAMPLES To enable a mirror port configuration: switch:admin>...
  • Page 630 portCfg Valid options and arguments for ipif include the following: create src_ipaddr [netmask] mtu_size Creates IP interfaces. Specify the following: src_ipaddr Specifies source IP address in either IPv6 or IPv4 format: src_IPv6_addr/prefix_len Specifies the source IPv6 address of the virtual port if IPv6 is used. The address must be an IPv6 global, unicast address, followed by a prefix.
  • Page 631 portCfg dest_IPv4_addr netmask Specifies the destination IPv4 address of the virtual port, if IPv4 is used. If an IPv4 address is used, the subnet mask must be specified as well. Use a.b.c.d. format. gateway_router Specifies the IP address of an IP router that can route packets to the destination virtual port IP address.
  • Page 632 portCfg delete ipif_addr vlan_id [dst_ipaddr] Deletes an entry from the VLAN tag table. Valid arguments for add and delete include the following: ipif_addr Specifies the locally defined interface address in IPv6 or IPv4 format. vlan_id Specifies the VLAN ID used for this tag. The range is 1 to 4094. l2cos Specifies Layer 2 Class of Service/Priority, as defined in the IEEE 802.1p specification.
  • Page 633 portCfg To create an interface for a failover crossport on a Brocade FX8-24: Configure the interface for the local XGE port (xge0). switch:admin> portcfg ipif 8/xge0 create 192.168.10.20 \ 255.255.255.0 1500 Operation Succeeded Configure the interface for the nonlocal XGE port (xge1). switch:admin>...
  • Page 634 portCfg 2000::11 U H L 2000::1:250 U H L 2001:: 2000::1:250 fe80:: ff01:: ff02:: Flags: U=Usable G=Gateway H=Host C=Created(Interface) S=Static L=LinkLayer(Arp) To create an IP route for a failover crossport on a Brocade FX8-24: Configure the iproute for the local XGE port (xge0). switch:admin>...
  • Page 635 portCfg To display the VLAN tag configuration (for an explanation of the flags, refer to portShow): switch:admin> portshow vlantag ge2 Port: ge2 Interface Address VlanId L2CoS Flags Destination Address ------------------------------------------------------------- 192.168.2.10 Perm Net 0.0.0.0 192.168.0.20 Perm 192.168.0.10 192.168.0.21 Perm 192.168.0.11 2000::20 Perm 2000::10...
  • Page 636 portCfg Configure VLAN tagging on the default FCIP circuit. Configure Differentiated Services Code Point (DSCP) markings. Set the committed rate or minimum and maximum rates for the default circuit. Configure a tunnel for FICON emulation. • portcfg fcipcircuit - Create, modify, and delete additional FCIP circuits. Set or modify the committed rate or minimum and maximum rates for the circuit.
  • Page 637 portCfg modify [tunnel_arguments][circuit_arguments] Modifies the properties of an existing FCIP tunnel. To modify a tunnel, you must specify at least one of the tunnel or circuit parameters for the command to be effective. Any circuit attribute you change with the fciptunnel modify command affects only the FCIP circuit 0.
  • Page 638 portCfg -N | --no-read-pipelining Disables tape read-pipelining. This operand is valid only with fciptunnel create and -t must be specified enabling the feature. The combination of -t and -N effectively enables tape write-pipelining. When using this operand with fciptunnel modify, specify one or more of the following: -t | --tape-pipelining mode Modifies the Open System Tape Pipelining configuration.
  • Page 639 portCfg -i | --ipsec [0|1] Disables (0) or enables (1) Internet Protocol Security (IPSec) on the specified tunnel. Circuits that fall underneath a tunnel inherit the IPSec tunnel attributes. IPSec uses a predefined policy with IKEv2 for key negotiation, ESP transport mode for IPSec, and AES with 256-bit keys for Encryption (AES-GCM-ESP).
  • Page 640 portCfg --ficon-tape-read [0|1] Enables (1) or disables (0) FICON Tape Read Pipelining. This feature improves performance for certain applications when reading from FICON tape over extended distances. --ficon-tin-tir [0|1] Enables (1) or disables (0) FICON TIN/TIR emulation. This feature enhances recovery when a TIN/TIR exchange occurs as part of a channel recovery operation during tape emulation.
  • Page 641 portCfg --max-write-devs value Defines the maximum number of concurrent emulated tape write operations. As concurrency increases, the value of emulation decreases. Excessive concurrency has the potential to oversubscribe packet data memory. The setting has significance only for host (channel) initiated operations at this side and will not affect tape write operations initiated by hosts (channels) attached The default value is 16.
  • Page 642 portCfg -k | --keepalive-timeout timeout Specifies the keep alive timeout in milliseconds. The valid range is 500 ms to 720000 ms. If the tunnel does not already have FICON Emulation enabled, circuits created on the tunnel default to 10000 ms (10 seconds) for the FCIP Trunking keep alive timeout.
  • Page 643 portCfg --dscp-f-class dscp Specifies the DSCP value for F-Class Traffic. The range is 0 to 63. The default value is 0. --dscp-high dscp Specifies the DSCP value for High Priority. The range is 0 to 63. The default value is 0. --dscp-medium dscp Specifies the DSCP value for Medium Priority.
  • Page 644 portCfg modify [circuit_ID] [circuit_arguments Modifies the properties of an existing FCIP circuit. To modify a circuit, you must specify at least one of the optional circuit parameters for the command to be effective. Any circuit attribute you change with the fcipcircuit modify command affects only the specified FCIP circuit.
  • Page 645 portCfg Valid options and arguments for mgmtroute include the following: create Creates a management route for a specified destination IP Address. The following operands are required: dest_IPv4_addr Specifies the destination IP address for the management route in IPv4 format. netmask Specifies the subnet mask for the IPv4 address in a.b.c.d format.
  • Page 646 portCfg SACK: On Min Retrans Time: 100 Max Retransmits: 8 Keepalive Timeout: 1000 Path MTU Disc: 0 VLAN ID: (Not Configured) L2CoS: (VLAN Not Configured) DSCP: 0 H: 0 M: 0 L: Flags: 0x00000000 To set the compression rate to 'moderate' on the tunnel: switch:admin>...
  • Page 647 portCfg operation will bring the existing circuit down (if circuit is up) before applying new configuration. Continue with Modification (Y,y,N,n): [ n] y Operation Succeeded Modify existing circuit to change DSCP marking values switch:admin> portcfg fcipcircuit 16 modify 0 --dscp-f 32 --dscp-h 16 --dscp-m 8 --dscp-l 4 Operation Succeeded Display the tunnel configuration and circuit values.
  • Page 648 portCfg SACK: On Min Retrans Time: 100 Max Retransmits: 8 Keepalive Timeout: 10000 Path MTU Disc: 0 VLAN ID: 200 L2CoS: F: 0 H: 0 M: 0 L: DSCP: 0 H: 0 M: 0 L: Flags: 0x00000000 To modify an existing circuit so it becomes the listener: switch:admin>...
  • Page 649 portCfg To create inband management interfaces for two Brocade 7800 switches on different subnets connected by two routers: Configure the inband management interfaces on the first switch. switch:admin> portcfg mgmtif ge0 create 192.168.1.10 255.255.255.0 Configure the inband management route for the management station. switch:admin>...
  • Page 650 portCfg FUNCTION Commands supported only on the Brocade FR4-18i blade. SYNOPSIS portcfg action [slot/]ge_port [if_action] arguments DESCRIPTION Use this command to manage configuration parameters for ports and Gigabit Ethernet (GbE) ports on the Brocade FR4-18i FC blade. The following commands are exclusive to this blade. •...
  • Page 651 portCfg The following options and arguments are supported with fciptunnel: create tunnel_id dest_ipaddr src_ipaddr comm_rate Creates an FCIP tunnel. You must specify a tunnel ID, destination and source IP address, and committed rate when creating an FCIP tunnel. Other configuration parameters are optional, and can be added later.
  • Page 652 portCfg -M [0|1] Disables (0) or enables (1) default VC QoS mapping on the specified tunnel. By default VC QoS mapping is disabled. There are two ways of prioritizing network traffic over FCIP tunnels: Differentiated Services Code Point (DSCP) and Layer 2 Class of Service (L2CoS). If the -M option is set, the VC on the FCIP outbound frame is mapped to both a DSCP and L2CoS value.
  • Page 653 portCfg -key preshared_key Specifies the preshared key to be used during IKE authentication. Specify a double-quoted string of alphanumeric characters between 12 and 32 bytes in length. This argument must be used together with -ike and -ipsec. NOTE: Only a single IPSec-enabled tunnel can be configured on a port. No other tunnels (IPSec or otherwise) can be configured on the same port.
  • Page 654 portCfg config Creates or modifies a FICON configuration. delete Deletes an existing FICON configuration. The following optional feature arguments are supported with the config and delete options. These configurations are persistent. -x 1|0 Enables (1) or disables (0) XRC emulation. FICON XRC Emulation allows XRC (IBM eXtendedRemote Copy, also known as IBM z/OS Global Mirroring) to operate effectively at extended distances.
  • Page 655 portCfg attached at the opposite side. Too small of a value results in poor performance. The value should be chosen based upon the typical tape channel program that requires optimum performance. The default value is 32. The range is 1 to 100. -c | --wrtMaxDevs value Defines the maximum number of concurrent emulated tape write operations.
  • Page 656 portCfg To modify the committed rate and turn on compression on an existing FCIP tunnel: switch:admin> portcfg fciptunnel 3/ge0 modify 6 -b 1000000-c 1 Operation Succeeded To create an FCIP tunnel with VC QoS mapping (default) turned on: switch:admin> portcfg fciptunnel ge1 create 1 192.168.200.109 192.168.200.108 0 -M To modify the default VC QoS map settings for VC 1: switch:admin>...

  • Page 657: Portcfgalpa

    portCfgAlpa portCfgAlpa Configures the AL_PA offset on a specified port or range of ports. SYNOPSIS portcfgalpa [slot/]port, mode DESCRIPTION Use this command to set the Arbitrated Loop Physical Address (AL_PA) offset on a port or a range of ports to either 0x0 (default) or 0x13. Changes made by this command are persistent across switch reboots and power cycles.

  • Page 658: Portcfgautodisable

    portCfgAutoDisable portCfgAutoDisable Manages the port autodisable configuration. SYNOPSIS portcfgautodisable --enable [slot/]port[-port] portcfgautodisable --disable [slot/]port[-port] portcfgautodisable --add option [slot/]port[-port] portcfgautodisable --remove option [slot/]port[-port] portcfgautodisable --addall [slot/]port[-port] portcfgautodisable --removeall [slot/]port[-port] portcfgautodisable --addexcept option [slot/]port[-port] portcfgautodisable --show [slot/]port[-port] portcfgautodisable --help> DESCRIPTION Use this command to enable or disable the autodisable feature for a specified port or a range of ports and to manage the configuration.
  • Page 659 portCfgAutoDisable --add Specifies one or more trigger conditions that will disable the specified ports. Trigger conditions must be separated by a space, for example, LOSN OLS LIP. Trigger conditions are case insensitive. --remove Removes one or more trigger conditions from the port autodisable configuration. --addall Adds all supported trigger conditions to the port autodisable configuration.
  • Page 660 portCfgAutoDisable To add all trigger conditions except the LOSN condition: switch:admin> portcfgautodisable --addexcept LOSN 18 switch:admin> portcfgautodisable --show 18 Port Auto Disable: ON Configured Option(s): LOSG To attempt to enable and configure the port autodisable feature on a port for which the feature is already activated (the configuration is not updated): switch:admin>...

  • Page 661: Portcfgcompress

    portCfgCompress portCfgCompress Configures a port for compression. SYNOPSIS portcfgcompress --enable [slot]/port portcfgcompress --disable [slot]/port portcfgcompress --help DESCRIPTION Use this command to configure a port for compression. This command enables or disables the compression configuration on the specified port, and saves the configuration persistently. Configuring a port for compression is disruptive.
  • Page 662 portCfgCompress switch:admin> lscfg --config 15 -port 2 This operation requires that the affected ports be disabled. Would you like to continue [y/n]?: y Checking for cap port 2 After Checking for cap port 2 val 1 port 2 lscfg: The port cannot be moved to the requested switch because port or ports have Encryption/Compression enabled.

  • Page 663: Portcfgcreditrecovery

    portCfgCreditRecovery portCfgCreditRecovery Enables or disables credit recovery on a port. SYNOPSIS portcfgcreditrecovery --enable [slot/]port portcfgcreditrecovery --disable [slot/]port DESCRIPTION Use this command to enable or disable credit recovery on a port. The credit recovery feature enables credits or frames to be recovered. Only ports configured as long distance ports can utilize the credit recovery feature.

  • Page 664: Portcfgdefault

    portCfgDefault portCfgDefault Resets the port configuration to factory default value. SYNOPSIS portcfgdefault [slot/][ge]port DESCRIPTION Use this command to reset all configuration values on a specified port to their factory defaults. This command persistently disables ports capable of routing, which is the factory default value. Use the portCfgShow command to display the port configuration.
  • Page 665 portCfgDefault QOS Port Port Auto Disable: Rate Limit F_Port Buffers NPIV PP Limit: SEE ALSO portCfgEport, portCfgGport, portCfgLongDistance, portCfgLport, portCfgPersistentDisable, portCfgPersistentEnable, portCfgShow, portCfgSpeed, portCfgTrunkPort Fabric OS Command Reference 53-1001764-01...

  • Page 666: Portcfgdport

    portCfgDPort portCfgDPort Configures a port as a D_Port. SYNOPSIS portcfgdport --enable [slot/]port_list portcfgdport --disable [slot/]port_list portcfgdport --help DESCRIPTION Use this command to configure a diagnostic port (D_Port). The D_Port is not part of the fabric. It does not carry any interswitch traffic or data traffic. The D_Port is used solely for the purpose of running link-level diagnostics between two switches and to isolate link level fault on the port, in the small form factor pluggable (SFP), or in the cable.
  • Page 667 portCfgDPort • A set of ports separated by commas, for example "3,5,7,8"or 5/3,5,7,8 on bladed systems. • A wildcard '*' indicates all ports. The wild card should be enclosed in single quotation marks. --enable Configures the specified ports as D_Ports. --disable Clears the D_Port configuration on the specified ports.

  • Page 668: Portcfgencrypt

    portCfgEncrypt portCfgEncrypt Configures a port for encryption. SYNOPSIS portcfgencrypt --enable [slot]/port portcfgencrypt --disable [slot]/port portcfgencrypt --help DESCRIPTION Use this command to configure a port for encryption. This command enables or disables the encryption configuration on the specified port and saves the configuration persistently. Before you can configure a port for encryption, you must configure the port for authentication.
  • Page 669 portCfgEncrypt To attempt to move a configured port to another logical switch: switch:admin> lscfg --config 15 -port 2 This operation requires that the affected ports be disabled. Would you like to continue [y/n]?: y Checking for cap port 2 After Checking for cap port 2 val 1 port 2 lscfg: The port cannot be moved to the requested switch because...

  • Page 670: Portcfgeport

    portCfgEport portCfgEport Enables or disables E_Port capability on a port or locks down a port as an E_Port. SYNOPSIS portcfgeport [slot/]port mode portcfgeport -i [index1[-index2] [...] [-f] mode] portcfgeport -slot [slot1[-slot2] [...] portcfgeport -h DESCRIPTION Use this command to enable or disable E_Port capability on a port or to lock down a port as an E_Port. E_Port capability is enabled by default.
  • Page 671 portCfgEport mode Specifies the E_Port configuration as one of the following: Disables E_Port capability for the specified ports. Enables the ports as E_Ports. This is the default port state. Locks down the ports as E_Ports. This command effectively disables the port's F_Port capability.

  • Page 672: Portcfgexport

    portCfgEXPort portCfgEXPort Sets a port to be an EX_Port, and sets and displays EX_Port configuration parameters. SYNOPSIS portcfgexport [slot/]port portcfgexport [-a admin] portcfgexport [-f fabricid] portcfgexport [-r ratov] portcfgexport [-e edtov] portcfgexport [-d domainid] portcfgexport [-p pidformat] portcfgexport [-t fabric_parameter] portcfgexport [-m port mode] portcfgexport [-i mode] DESCRIPTION...
  • Page 673 portCfgEXPort If the Fabric Parameter value is "Auto Negotiate", the port ID format, R_A_TOV, and E_D_TOV values display the negotiated values indicated by "(N)" next to them. The negotiated values are what the edge switch specifies in the ELP request. If the state is "Not OK", the R_A_TOV and E_D_TOV display "Not Applicable".
  • Page 674 portCfgEXPort -m port mode Specifies the port mode. The -m option enforces the same port mode for all the ports connected to the same edge fabric. If this option is selected, the port mode is compared against the online ports. If the modes are different, an error message is posted, and the command fails.
  • Page 675 portCfgEXPort To enable Brocade Network OS (NOS) fabric mode on port 1/5: switch:admin> portcfgexport 1/5 -a 1 -m 5 Port info Admin: enabled State: NOT OK Pid format: Not Applicable Operate mode: Brocade NOS Edge Fabric ID: Preferred Domain ID: Front WWN: 50:00:51:e4:44:40:0e:80 Fabric Parameters:...

  • Page 676: Portcfgfaultdelay

    portCfgFaultDelay portCfgFaultDelay Configures the fault delay for a single FC port. SYNOPSIS portcfgfaultdelay [slot/]port delay portcfgfaultdelay --help DESCRIPTION Use this command to configure the fault delay of an FC port. In the event that the link is noisy after a host power cycle, the switch may go into a soft fault state, which means a delay of R_A_TOV.
  • Page 677 portCfgFaultDelay Locked L_Port Locked G_Port Disabled E_Port Locked E_Port ISL R_RDY Mode RSCN Suppressed Persistent Disable LOS TOV enable NPIV capability QOS E_Port Port Auto Disable: Rate Limit EX Port Mirror Port Credit Recovery F_Port Buffers Fault Delay: 1(1.2sec) NPIV PP Limit: CSCTL mode: D-Port mode: Compression:...
  • Page 678 portCfgFaultDelay ........ Fault Delay where AE:QoSAutoEnable, AN:AutoNegotiate, ..:OFF, -:NotApplicable, ??:INVALID (output truncated) SEE ALSO portCfgShow Fabric OS Command Reference 53-1001764-01...

  • Page 679: Portcfgfec

    portCfgFec portCfgFec Enables or disables the Forward Error Correction flag in the chassis configuration file. SYNOPSIS portcfgfec --enable [slot/]port[-port] portcfgfec --disable [slot/]port[-port] portcfgfec --show portcfgfec --help DESCRIPTION Use this command to enable or disable the Forward Error Correction (FEC) flag on a specified port or on a range of ports, or to display the configuration.
  • Page 680 portCfgFec Forward Error Correction configured Displays ON if FEC is enabled on the port. Displays OFF if the feature is disabled (default). --help Displays the command usage. EXAMPLES To enable the FEC feature on a single port and to display the configuration: switch:admin>...

  • Page 681: Portcfgfillword

    portCfgFillword portCfgFillword Configures the fill word for a single 8G FC port. SYNOPSIS portcfgfillword [slot/]port, mode [passive] portcfgfillword --help DESCRIPTION Use this command to configure the fill word of an 8G FC port. By default, this command disables and re-enables the port and the port comes online with the new fill word setting. When used with the passive option, the new settings are not applied until the next time the port goes offline and comes back online.
  • Page 682 portCfgFillword To set the fill word of a port to ARBFF-ARBFF using the -arbff-arbff option: switch:admin> portcfgfillword 2/3, -arbff-arbff To set the fill word of a port to IDLE-ARBFF using the -idle-arbff option: switch:admin> portcfgfillword 27, -idle-arbff switch:admin> portcfgshow 27 Area Number: Speed Level: AUTO(HW)

  • Page 683: Portcfgfportbuffers

    portCfgFportBuffers portCfgFportBuffers Configures F_Port buffer allocation. SYNOPSIS portcfgfportbuffers --enable [slot/]port buffers portcfgfportbuffers --disable [slot/]port DESCRIPTION Use this command to change the default buffer allocation for an F_Port and to allocate a specified number of buffers to the port. When port buffer allocation is enabled, the number of buffers specified override the default F_Port buffer allocation.

  • Page 684: Portcfggemediatype

    portCfgGeMediaType portCfgGeMediaType Sets the selected mode for the ge0 and ge1 ports on the Brocade 7800. SYNOPSIS portcfggemediatype ge_port [optical | copper] portcfggemediatype --help DESCRIPTION Use this command to set the mode for ge0 and ge1 ports on the Brocade 7800. Each of the ge0 and ge1 ports on the Brocade 7800 can be configured as a copper port (RJ45) or an optical port (SFP).
  • Page 685 portCfgGeMediaType --help Displays the command usage. EXAMPLES To select an optical mode for ge0: switch:admin> portcfggemediatype ge0 optical To display the current configuration: switch:admin> portcfggemediatype ge0 Port ge1 is configured in optical mode To restore the default configuration (copper only ports are selected): switch:admin>...

  • Page 686: Portcfggport

    portCfgGport portCfgGport Designates a port as a G_Port; removes G_Port designation. SYNOPSIS portcfggport [slot/]port,mode DESCRIPTION Use this command to designate a port as a G_Port. After successful execution of this command, the switch attempts to initialize the specified port as an F_Port only, and does not attempt loop initialization (FL_Port) on the port.

  • Page 687: Portcfgislmode

    portCfgISLMode portCfgISLMode Enables or disables ISL R_RDY mode on a port. SYNOPSIS portcfgislmode [slot/]port,mode DESCRIPTION Use this command to enable or disable interswitch link read-ready (ISL R_RDY) mode on a port. Use the portCfgShow command to determine whether ISL R_RDY mode is enabled on a port. In ISL R_RDY mode, the port sends a primitive signal that the port is ready to receive frames.
  • Page 688 portCfgISLMode To disable ISL R_RDY mode on a port: switch:admin> portcfgislmode 1/3, 0 SEE ALSO configure, portCfgLongDistance, portCfgShow Fabric OS Command Reference 53-1001764-01...

  • Page 689: Portcfglongdistance

    portCfgLongDistance portCfgLongDistance Configures a port to support long distance links. SYNOPSIS portcfglongdistance [slot/]port [distance_level] [vc_translation_link_init] [desired_distance] DESCRIPTION Use this command to allocate frame buffer credits to a port or to configure a specified long distance link. The port can only be used as an E_Port. Changes made by this command are persistent across switch reboots and power cycles.
  • Page 690 portCfgLongDistance distance_level Specify the long distance level as one of the following (the numerical value representing each distance_level is shown in parentheses): L0 (0) Specify L0 to configure the port as a regular port. A total of 20 full-size frame buffers are reserved for data traffic, regardless of the port's operating speed;...
  • Page 691 portCfgLongDistance portState: 2 Offline portPhys: No_Light portScn: portId: 013f00 portWwn: 20:3f:00:60:69:00:02:48 Distance: super long <= 100km portSpeed: 2Gbps Interrupts: Link_failure: 0 Frjt: Unknown: Loss_of_sync: 0 Fbsy: Lli: Loss_of_sig: Proc_rqrd: Protocol_err: 0 Timed_out: Invalid_word: 0 Rx_flushed: Invalid_crc: Tx_unavail: Delim_err: Free_buffer: Address_err: Overrun: Lr_in: Suspended:...

  • Page 692: Portcfglosstov

    portCfgLossTov portCfgLossTov Enables or disables de-bouncing of signal loss for front end ports. SYNOPSIS portcfglosstov [slot/]port mode DESCRIPTION Use this command to enable or disable the de-bouncing of loss of signal for 100 ms for front end ports. Use portCfgShow to display the current setting. If executed without operands, the command prints the usage.

  • Page 693: Portcfglport

    portCfgLport portCfgLport Configures a port as an L_Port. SYNOPSIS portcfglport [[slot/]port] locked_mode [private_mode] [duplex_mode]] DESCRIPTION Use this command to designate a port as an L_Port, and to configure its behavior. When a port is designated as an L_Port, the switch attempts to initialize that port as a fabric L_Port (FL_Port). The switch will never attempt a point-to-point (F_Port) initialization on the port.
  • Page 694 portCfgLport To display the L_Port conditions: switch:admin> portcfglport [...] Ports of Slot 4 8 9 10 11 12 13 14 15 ---------------+--+--+--+--+---+--+--+--+--+--+--+--+---+--+--+-- [...] Locked L_Port ....ON ..ON ON Private L_Port ..

  • Page 695: Portcfgnpivport

    portCfgNPIVPort portCfgNPIVPort Enables or disables N_Port ID virtualization (NPIV) functionality on a port and sets the per-port login limit. SYNOPSIS portcfgnpivport --enable [slot/]port portcfgnpivport --disable [slot/]port portcfgnpivport --setloginlimit [slot/]port login_limit portcfgnpivport --help portcfgnpivport [slot/]port mode DESCRIPTION Use this command to enable or disable NPIV functionality on a port and to configure the maximum number of logins for this port.
  • Page 696 portCfgNPIVPort NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. When using portCfgNPIVPort --disable or --enable on trunked ports, you must disable all trunk member ports before changing the NPIV capability on a trunk member and then re-enable the trunked ports to ensure that the configuration changes take effect.
  • Page 697 portCfgNPIVPort Persistent Disable..ON ON ......LOS TOV enable ........ NPIV capability ON ON ON ON ON ON ON ON ON ON ON ON ON ON ON ON...
  • Page 698 portCfgNPIVPort Persistent Disable LOS TOV enable NPIV capability QOS E_Port Port Auto Disable: Rate Limit EX Port Mirror Port Credit Recovery F_Port Buffers Fault Delay: 0(R_A_TOV) NPIV PP Limit: CSCTL mode: Frame Shooter Port D-Port mode: SEE ALSO configure, portCfgDefault, portCfgShow Fabric OS Command Reference 53-1001764-01...

  • Page 699: Portcfgnport

    portCfgNPort portCfgNPort Enables or disables N_Port functionality for an Access Gateway port. SYNOPSIS portcfgnport [slot/]port1[-port2] [mode] DESCRIPTION Use this command to enable or disable N_Port functionality for an Access Gateway port or for a range of ports. The enabled N_Ports automatically come online if they are connected to an enterprise fabric switch that supports NPIV.

  • Page 700: Portcfgoctetspeedcombo

    portCfgOctetSpeedCombo portCfgOctetSpeedCombo Sets port speed combination for a port octet. SYNOPSIS portcfgoctetspeedcombo [slot]port combo portcfgoctetspeedcombo [slot]port -default DESCRIPTION Use this command to configure the speed for a port octet. A Condor 3 ASIC has six octets, each of which contains eight ports. You can configure up to three different speed combinations. When you configure a given port, the combination applies to all ports in the octet.
  • Page 701 portCfgOctetSpeedCombo combo Specifies the speed combination for the ports in the octet. The following speed combinations are supported: Supports autonegotiated or fixed port speeds of 16 Gbps,8 Gbps,4 Gbps, and 2 Gbps. Supports autonegotiated or fixed port speeds of 10 Gbps,8 Gbps,4 Gbps, and 2 Gbps.

  • Page 702: Portcfgpersistentdisable

    portCfgPersistentDisable portCfgPersistentDisable Persistently disables a port or a range of ports. SYNOPSIS portcfgpersistentdisable portcfgpersistentdisable [slot/]port1[-port2] [...] portcfgpersistentdisable -i [index1[-index2] [...] [-f]] portcfgpersistentdisable -slot [slot1[-slot2] [...] portcfgpersistentdisable -h DESCRIPTION Use this command to persistently disable a port or a range of ports. Persistently disabled ports remain disabled across power cycles, switch reboots, and switch enables.
  • Page 703 portCfgPersistentDisable -i index1[-index2] Persistently disables a port or a range of ports identified by port index numbers. You may specify multiple index ranges separated by a space, for example, -i 33-38 40-60. Ignores nonexisting ports. This operand is valid only with the -i option. -slot [slot1[-slot2] Persistently disables all ports on a slot or on a range of slots, for example, -s 3-5.
  • Page 704 portCfgPersistentDisable Disabled - YES YES YES YES Slot 0 ---------+---+---+---+---+---+---+---+-- Disabled YES YES YES YES YES YES YES YES SEE ALSO ficonCupSet, ficonCupShow, portCfgDefault, portDisable, portEnable, portCfgPersistentEnable, portShow, portSwapDisable, portSwapShow, switchShow Fabric OS Command Reference 53-1001764-01...

  • Page 705: Portcfgpersistentenable

    portCfgPersistentEnable portCfgPersistentEnable Persistently enables a port or a range of ports. SYNOPSIS portcfgpersistentenable portcfgpersistentenable [slot/]port1[-port2] [...] portcfgpersistentenable -i [index1[-index2] [...] [-f]] portcfgpersistentenable -s[lot] [slot1[-slot2] portcfgpersistentenable -h DESCRIPTION Use this command to persistently enable a port or a range of ports. If the port is connected to another switch when this command is issued, the fabric may reconfigure.
  • Page 706 portCfgPersistentEnable -i index1[-index2] Persistently enables a port or a range of ports identified by port index numbers. You may specify multiple index ranges separated by a space, for example, 33-38 40-60. Ignores nonexisting ports. This operand is valid only with the -i option. -slot [slot1[-slot2] Persistently enables all ports on a slot or on a range of slots, for example, -s 3-5.

  • Page 707: Portcfgqos

    portCfgQoS portCfgQoS Enables or disables QoS, sets the default configuration, and sets and resets the ingress rate limit. SYNOPSIS portcfgqos --disable | --enable [slot/]port portcfgqos --setratelimit [slot/]port ratelimit portcfgqos --resetratelimit [slot/]port portcfgqos --enable | --disable [slot/]port[-port] csctl_mode portcfgqos --default [slot/]port portcfgqos --help DESCRIPTION Use this command to configure traffic prioritization on a port.
  • Page 708 portCfgQoS OPERANDS This command has the following operands: slot For bladed systems only, specifies the slot number of the port to configure, followed by a slash (/). port[-port] Specifies the port or port range to be configured, relative to the slot for bladed systems.
  • Page 709 portCfgQoS To enable CS_CTL VC mode on a port when QoS is enabled.: switch:admin> portcfgqos --enable 1/10-16 csctl_mode Enabling CSCTL mode flows causes QoS zone flows to \ lose priority on such ports Do you want to proceed?(y/n): y switch:admin> portcfgshow -slot 1 Index: 9 10 11 12 13 14 15 16...

  • Page 710: Portcfgshow

    portCfgShow portCfgShow Displays port configuration settings. SYNOPSIS portcfgshow portcfgshow [slot/]port portcfgshow -i [ndex1[-index2] [...] [-f]] portcfgshow -slot slot1[-slot2] [...] portcfgshow option [slot/][ge_port] [arguments] [optional_arguments] DESCRIPTION Use this command to display the current configuration of a port. The behavior of this command is platform-specific;...
  • Page 711 portCfgShow Fill Word (Current) Displays the currently effective fill word setting. Possible values are 0(Idle-Idle), 1(arbff-arbff), 2(Idle-arbff), or 3(A-A then SW I-A).This parameter is set by the portcfgFillword command. AL_PA Offset 13 Displays (..) or OFF when the arbitrated loop physical address (AL_PA) on the port is configured to use a 0x0 AL_PA address (default).
  • Page 712 portCfgShow RSCN Suppressed Displays ON when RSCN suppression is enabled on the port. Displays (..) or OFF when RSCN suppression is disabled. This value is set by the portCfg rscnsupr command. Persistent Disable Displays ON when the port is persistently disabled; otherwise displays (..) or OFF. This value is set by the portCfgPersistentDisable command.
  • Page 713 portCfgShow NPIV PP Limit Displays the maximum number of allowed logins for the port. Displays the default of 126 or the configured maximum. This parameter is set with the portCfgNPIVPort --setloginlimit command. CSCTL mode Displays ON if CSCTL mode is enabled on the port. Displays (..) or OFF if the feature is disabled.
  • Page 714 portCfgShow -i index1[-index2] Specifies a port or a range of ports identified by port index numbers. You can specify multiple index ranges separated by a space, for example, -i 33-38 40-60. Ignores nonexisting ports. This operand is valid only with the -i option. -slot slot1[-slot2] Specifies a slot or a range of slots.
  • Page 715 portCfgShow -ipsec On the Brocade FR4-18i, this option displays IKE and IPSec policy information on IPSec-enabled tunnels. On the Brocade 7800/FX8-24, this option displays whether IPSec is enabled or disabled. If enabled, the key is displayed. If IPSec is enabled and configured in legacy mode, the mode is displayed as "legacy". The mode information is displayed whether or not you issue the -ipsec option.
  • Page 716 portCfgShow To display the port configuration settings on a Brocade 5100 for a range of ports specified by their index numbers: switch:admin> portcfgshow -i 3-5 Speed Fill Word(On Active) 0 Fill Word(Current) AL_PA Offset 13 Trunk Port Long Distance VC Link Init Locked L_Port Locked G_Port Disabled E_Port...
  • Page 717 portCfgShow Credit Recovery ON ON ON ON ON ON ON ON ON ON ON ON ON ON ON ON Fport Buffers ........ Port Auto Disable ..
  • Page 718 portCfgShow F_Port Buffers NPIV PP Limit: Fault Delay: 0(R_A_TOV) NPIV PP Limit: D-Port mode: Compression: Encryption: active To display port configuration settings on a DCX with a Brocade FCOE10-24 blade in Slot 12: switch:admin> portcfgshow -slot 12 Index: 112 113 114 115 116 117 118 119 [truncated] ------------------+---+---+---+-----+---+---+---+-----+---+---+- Octet Speed Combo...
  • Page 719 portCfgShow VC Link Init Locked L_Port Locked G_Port Disabled E_Port ISL R_RDY Mode RSCN Suppressed Persistent Disable LOS TOV enable NPIV capability QOS E_Port Port Auto Disable: Rate Limit EX Port Mirror Port Credit Recovery F_Port Buffers NPIV PP Limit: CSCTL mode: Fault Delay 1(1.2sec)
  • Page 720 portCfgShow Fastwrite off Tape Pipelining off Committed Rate 100000 Kbps (0.100000 Gbps) SACK on Min Retransmit Time 100 Keepalive Timeout 10 Max Retransmissions 8 VC QoS Mapping off DSCP (Control): 0, DSCP (Data): 0 VLAN Tagging Not Configured VC QoS Map: (default) VC DSCP L2CoS VC DSCP L2CoS VC DSCP L2CoS...
  • Page 721 portCfgShow Interface IPv6 Address Len MTU -------------------------------------------------------- 20::2:10 1500 Inband management configuration: configuration: IP Address Mac Address ------------------------------ Iproute Configuration: IP Address Mask Gateway Metric ------------------------------------------------------ 192.168.42.0 255.255.255.0 192.168.2.250 IPv6ddress Gateway Metric ------------------------------------------------------- 20:42:: 20::2:250 Inband Management route configuration: Fciptunnel configuration: Vlantag configuration: -------------------------...
  • Page 722 portCfgShow TPerf Option: Off IPSec: Enabled (legacy) IPSec Key: '12345678901234567890123456789012' QoS Percentages: High 50%, Med 30%, Low 20% Remote WWN: Not Configured Local WWN: 10:00:00:05:1e:52:fe:00 Flags: 0x00000000 FICON: Off switch:admin> portcfgshow fciptunnel 1/12 ------------------------------------------- Tunnel ID: 1/12 Tunnel Description: Compression: Off Fastwrite: Off Tape Acceleration: Off TPerf Option: Off...

  • Page 723: Portcfgspeed

    portCfgSpeed portCfgSpeed Configures the speed for a port or a range of ports. SYNOPSIS portcfgspeed [slot/]port speed portcfgspeed -i [index1[-index2] [-f] speed] portcfgspeed -slot [slot1[-slot2] [...] speed portcfgspeed -h DESCRIPTION Use this command to set the speed on a specified port or port range. This command disables and then re-enables the ports, and the ports come online with the new speed setting.
  • Page 724 portCfgSpeed -slot [slot1[-slot2] Configures all ports on a slot or on a range of slots, for example, -s 3-5. You may specify multiple slot ranges separated by a space, for example, -s 3-5 8-10. speed Sets speed for the specified ports. This operand is required. Valid values are one of the following.

  • Page 725: Portcfgtrunkport

    portCfgTrunkPort portCfgTrunkPort Enables or disables trunking on a port. SYNOPSIS portcfgtrunkport [slot/]port[,] mode DESCRIPTION Use this command to enable or disable trunking on a port. Use switchCfgTrunk to enable or disable trunking on all ports of a switch. When the command is executed to update the trunking configuration, the port to which the configuration applies is disabled and subsequently re-enabled with the new trunking configuration.

  • Page 726: Portcfgvexport

    portCfgVEXPort portCfgVEXPort Configures a port as a VEX_Port connected to an FC-IP and sets and displays VEX_Port configuration parameters. SYNOPSIS portcfgvexport [slot/]port portcfgvexport [-a admin] portcfgvexport [-f fabricid] portcfgvexport [-r ratov] portcfgvexport [-e edtov] portcfgvexport [-d domainid] portcfgvexport [-p pidformat] portcfgvexport [-t fabric_parameter] portcfgvexport [-m portmode] DESCRIPTION...
  • Page 727 portCfgVEXPort OPERANDS This command has the following operands: -a admin Enables or disables the specified port as a VEX_Port. Valid values are 1 (enable as VEX_Port), 2 (disable as VEX_Port and enable as non-VEX_Port). portCfgDefault may also be used to disable VEX_Ports. -f fabricid Specifies the fabric ID.
  • Page 728 portCfgVEXPort Fabric Parameters: Auto Negotiate R_A_TOV: 9000(N) E_D_TOV: 2000(N) Edge fabric's primary wwn: N/A Edge fabric's version stamp: N/A To set the fabric ID of port 2/21 to 5 and the port ID format to core: switch:admin> portcfgvexport 2/21 -f 5 -p 1 To configure port 2/20 as a VEX_Port and set the fabric ID to 4: switch:admin>...

  • Page 729: Portcmd

    portCmd portCmd Diagnoses intelligent ports. SYNOPSIS portcmd --ipperf [slot/]ge port -s src_ip -d dst_ip -S | -R [-i interval] [-p port] [-q diffserv] [-r committed_rate][-t running_time][-z size] [-v vlan_id [-c L2 Class-of-Service]] portcmd --ping [slot/][slot/]ge port -s src_ip -d dst_ip [-x | -crossport] [-n num_requests][-q service_type] [-t ttl][-w wait_time] [-z size][-v vlan_id [-c L2 Class-of-Service]] portcmd --traceroute [slot/][slot/]ge port...
  • Page 730 portCmd bad CRC payloads rx Number of bad CRC payloads received. out of seq PDUs rx Number of out-of-sequence PDUs received. flow control count Flow control count. last rtt Last Round trip in milliseconds (RT traffic only). When issued with the ipperf option, this command determines characteristics of the path to the remote host.
  • Page 731 portCmd OPERANDS This command has the following operands: slot For bladed systems only, specifies the slot number of the port to be configured, followed by a slash (/). ge port Specifies the port number of the GbE port on the blade. --ipperf Determines the path characteristics to the remote host.
  • Page 732 portCmd -v vlan_id Specifies the VLAN ID. Values must be in the range between 1 and 4094. There is no default value. Note that a VLAN tag entry must exist on the local and remote sides prior to issuing the -v option. A VLAN Tag table entry is dynamically maintained by the ipperf application.
  • Page 733 portCmd --traceroute Traces the IP router hops used to reach the host dst_ip from one of the source IP interfaces on the GbE port. Valid arguments include the following: -s src_ip Specifies the local IP address to use for sourcing the probe packets. IPv6 addresses are supported.
  • Page 734 portCmd -sink | -source Designates the switch to function either as a data sink or a data source. This operand is required. When -sink is specified, TPerf begins to respond to traffic sent by the switch acting as the data source. The process continues to run until it is either terminated by user intervention (Ctrl +C) or, if a value for duration is specified with the -t option, until the process completes the set time frame.
  • Page 735 portCmd -size pdu_size Specifies the PDU size to use (not including headers). The valid range is between 2048 and 10112 bytes. The default is equivalent to the maximum segment size (MSS). This is the maximum size if the -random option is specified. -interval interval Specifies the interval at which the statistics display is refreshed, in seconds.
  • Page 736 portCmd To set the path characteristic to source mode on the remote host using VLAN tagging with the -c option. switch:admin> portcmd --ipperf 8/ge0 -s 192.168.10.1 -d 192.168.20.1 -S -v 10 -c 3 To create a TPerf data sink on VE_Port 16: switch:admin>...
  • Page 737 portCmd To configure a TPerf source to generate one-way low priority traffic with a random PDU size from 2048 to 4000 bytes and a payload pattern of ones. switch:admin> portcmd --tperf 16 -source -low \ -size 4000 -random -unidirectional -pattern 2 TPerf has been configured successfully for 16 TPerf is generating traffic on 16 priority: low...

  • Page 738: Portdebug

    portDebug portDebug Sets debug level and verbose level of port modules. SYNOPSIS portdebug dbg_lvl, vbs_lvl DESCRIPTION Use this command to set the debug level and verbose level of port modules. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 739: Portdecom

    portDecom portDecom Decommissions and disables an E_Port without frame loss. SYNOPSIS portdecom portdecom [slot/]port portdecom --help DESCRIPTION Use this command to disable an E_Port without frame loss. The E_Port can either be a single redundant E_Port or an E_Port which is part of a trunk group. The port must be an operational E_Port with at least one other redundant E_Port available to reach all domains that the E_Port can reach.

  • Page 740: Portdisable

    portDisable portDisable Disables a port or a range of ports. SYNOPSIS portdisable [slot/]port1[-port2] [...] portdisable -i [index1[-index2] [...] [-f]] portdisable -slot [slot1[-slot2] [...] portdisable -h DESCRIPTION Use this command to disable a port or a range of ports. If the port is connected to another switch when disabled, the fabric may reconfigure.
  • Page 741 portDisable EXAMPLES To disable a single port. switch:admin> portdisable 2/4 To disable a range of ports: switch:admin> portdisable 2/4-8 To disable multiple port ranges: switch:admin> portdisable 2/24-26 3/10-12 4/3-4 To disable a port by specifying its index number: switch:admin> portdisable -i 176 To disable a range of ports by specifying the corresponding port index range: switch:admin>...

  • Page 742: Portdporttest

    portDPortTest portDPortTest Initiates or terminates a D_Port test. SYNOPSIS portdporttest --start [slot/]port_list portdporttest --stop [slot/]port_list portdporttest --show [slot/]port_list | all portdporttest --help DESCRIPTION Use this command to manually terminate or re-initiate testing on a diagnostic port (D_Port). The port must be configured as a D_Port and physically connected to a second D_Port on a remote switch. Refer to the portCfgDPort command for more information.
  • Page 743 portDPortTest Roundtrip link latency Displays roundtrip link latency in nanoseconds or unknown when the test is in progress. Roundtrip link latency is the time required for the light to travel from a given port to the port at the remote side of the link and back again. Estimated cable distance The estimated physical distance of the interswitch link in meters.
  • Page 744 portDPortTest EXAMPLES To initiate the D_Port test on a single port: switch:admin> portdporttest --start To terminate the D_Port test on a single port: switch:admin> portdporttest --stop To display the runtime status for a single D_Port while the test is in progress: switch:admin>...

  • Page 745: Portenable

    portEnable portEnable Enables a port or a range of ports. SYNOPSIS portenable [slot/]port1[-port2] [...] portenable -i [index1[-index2] [...]] [-f] portenable -slot [slot1[-slot2] portenable -h DESCRIPTION Use this command to enable a port or a range of ports. If a port is connected to another switch when this command is issued, the fabric may reconfigure.
  • Page 746 portEnable EXAMPLES To enable a single port: switch:admin> portenable 2/4 To enable a range of ports: switch:admin> portenable 2/4-8 To enable multiple port ranges: switch:admin> portenable 2/24-26 3/10-12 4/3-4 To enable a port by specifying its index number: switch:admin> portenable -i 176 portenable: portSwap feature enabled.

  • Page 747: Portenccompshow

    portEncCompShow portEncCompShow Displays encryption and compression port configuration details. SYNOPSIS portenccompshow DESCRIPTION Use this command to display a list of ports that can be configured for encryption or compression. The command displays one section per ASIC and the ports configurable for that ASIC. The output includes the following information: User Port The port index number of the port to be configured.
  • Page 748 portEncCompShow ----------------------------------- SEE ALSO portCfgEncrypt, portCfgCompress Fabric OS Command Reference 53-1001764-01...

  • Page 749: Porterrshow

    portErrShow portErrShow Displays a port error summary. SYNOPSIS porterrshow DESCRIPTION Use this command to display an error summary for all ports. Counts are reported on frames transmitted by the port (Tx) or on frames received by the port (Rx). The display contains one output line per port. Numeric values exceeding 999 are displayed in units of thousands (k), or millions (m) if indicated.
  • Page 750 portErrShow c3-timeout rx The number of receive class 3 frames received at this port and discarded at the transmission port due to timeout (platform- and port-specific). NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 751: Portfencing

    portFencing portFencing Configures the Fabric Watch port fencing feature. SYNOPSIS portfencing --show portfencing --enable port_type_list | all -area area_list | -area all portfencing --disable port_type_list | all -area area_list | -area all portfencing --help DESCRIPTION Use this command to enable or disable the Fabric Watch port fencing feature for specified port types and Fabric Watch areas.
  • Page 752 portFencing The following operands are required with the --enable and --disable options. port_type_list | all Specifies one or more port types for which to enable or disable port fencing. When specifying multiple port types, the list members must be separated by a comma. Alternately, use the all option to specify all of the following port types: e-port Enables or disables port fencing for all E_Ports.
  • Page 753 portFencing To display the current port fencing configuration: switch:admin> portFencing --show Port Type|Area |PF Status ---------|----------------|------------ E-port |CRC |disabled |ITW |enabled |enabled |enabled |enabled FOP-port |CRC |enabled |ITW |enabled |enabled |C3TX_TO |enabled |enabled |enabled Port |CRC |enabled |ITW |disabled |disabled |C3TX_TO |disabled |disabled...

  • Page 754: Portflagsshow

    portFlagsShow portFlagsShow Displays the port status bitmaps for all ports in a switch. SYNOPSIS portflagsshow DESCRIPTION Use this command to display the following status for a port: SNMP Displays whether the port is online or offline. Physical Displays the port physical status. Valid values are In_Sync, No_Light (Condor 2 ports only), and No_SigDet (quad small form-factor pluggables (QSFPs) installed without cables).
  • Page 755 portFlagsShow 19 Offline No_Module PRESENT U_PORT LED 20 Offline No_Module PRESENT U_PORT LED 21 Offline No_Module PRESENT U_PORT LED 22 Offline No_Module PRESENT U_PORT LED (output truncated) To display the port status for QSFPs installed without cables (partial output) : 16 Offline No_SigDet PRESENT U_PORT LED...

  • Page 756: Portledtest

    portLedTest portLedTest Cycles user port LEDs. SYNOPSIS portledtest [--slot slot_number] [-ports itemlist] [-npass count] [-action value] ceeportledtest [--slot slot_number] [-ports itemlist] [-npass count] [-action value] DESCRIPTION Use this command to exercise the user port LEDs in the current switch. When used without a slot or port specifier, all ports are tested.
  • Page 757 portLedTest Turn Port status LED off. Turn Port status LED amber. Turn Port status LED green. Turn Port speed LED green. Turn Port speed LED amber. EXAMPLES To test port LEDs: switch:admin> portledtest --slot 1 -ports 1/1-1/5 Running portledtest ....WARNING: This test should NOT be aborted in the middle.

  • Page 758: Portlogclear

    portLogClear portLogClear Clears the port log. SYNOPSIS portlogclear DESCRIPTION Use this command to clear the port log. It is recommended that you clear the port log before triggering an activity so that the log displays only the log events related to that activity. If the port log is disabled, portLogClear enables it.

  • Page 759: Portlogconfigshow

    portLogConfigShow portLogConfigShow Displays the current port log configuration. SYNOPSIS portlogconfigshow DESCRIPTION Use this command to display the current port log configuration. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 760: Portlogdisable

    portLogDisable portLogDisable Disables the port log facility. SYNOPSIS portlogdisable DESCRIPTION Use this command to disable the port log facility. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details.

  • Page 761: Portlogdump

    portLogDump portLogDump Displays the port log without page breaks. SYNOPSIS portlogdump [count[, saved]] DESCRIPTION Use this command to display the port log, listing all entries in the log without page breaks. This command displays the same information as portLogShow, but portLogShow prompts you to press Enter between each page.

  • Page 762: Portlogdumpport

    portLogDumpPort portLogDumpPort Displays the port log of a specified port without page breaks. SYNOPSIS portlogdumpport port_index DESCRIPTION Use this command to display the port log for a single port specified by its port index number. The command displays all entries in the log without any page breaks. This command is identical to portLogShowPort, except that portLogShowPort prompts you to press Enter to display the next page.

  • Page 763: Portlogenable

    portLogEnable portLogEnable Enables the port log facility. SYNOPSIS portogenable DESCRIPTION Use this command to enable the port log facility. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details.

  • Page 764: Portlogeventshow

    portLogEventShow portLogEventShow Displays information about port log events. SYNOPSIS portlogeventshow DESCRIPTION Use this command to display information about the ID associated with the various port log events. The Disabled field indicates whether the port log for that event ID is disabled (1) or enabled (0). NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 765: Portloginshow

    portLoginShow portLoginShow Displays port login status of devices attached to the specified port. SYNOPSIS portloginshow [slot/]port DESCRIPTION Use this command to display port login status received from devices attached to the specified port. For each login, this command displays the following fields: Type Type of login can display one of the following: FDISC, Discover F_Port Service Parameters or Virtual N_Port login.
  • Page 766 portLoginShow EXAMPLES To display the logins received by Port 23 (revealing one FLOGI (type fe) and two PLOGIs): switch:admin> portloginshow 23 Type World Wide Name credit df_sz cos ===================================================== 201700 21:00:00:e0:8b:05:a3:c9 2048 8 scr=1 201700 21:00:00:e0:8b:05:a3:c9 8 d_id=FFFC20 201700 21:00:00:e0:8b:05:a3:c9 8 d_id=FFFFFC SEE ALSO fcpProbeShow,...

  • Page 767: Portlogpdisc

    portLogPdisc portLogPdisc Sets or clears the debug_pdisc_flag. SYNOPSIS portlogpdisc 0 | 1 DESCRIPTION Use this command to set or clear the debug_pdisc_flag. This command is part of the environmental monitor. A setting of 1 enables logging of Port Discovery parameters. The PDISC log is disabled by default.

  • Page 768: Portlogreset

    portLogReset portLogReset Enables the port log facility. SYNOPSIS portlogreset DESCRIPTION Use this command to enable the port log facility. NOTES Refer to portLogClear for events that may disable the port log facility. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 769: Portlogresize

    portLogResize portLogResize Resizes the port log to include a specified number of entries. SYNOPSIS portlogresize num_entries DESCRIPTION Use this command to resize the port log to include a specified number of entries. If the specified number of entries is less than the already configured port log size, there is no change. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 770: Portlogshow

    portLogShow portLogShow Displays the port log with page breaks. SYNOPSIS portlogshow [count[, saved]] DESCRIPTION Use this command to display the port log with page breaks. This command displays the same information as portLogDump, but one page at a time. The port log is a circular log file in the switch firmware which can save up to 65,536 entries depending on the hardware platform.
  • Page 771 portLogShow ctout A CT based response is transmitted. errlog A message is added to the error log. loopscn A loop state change notification is posted. create A task is created. debug Indicates a debug message. nbrfsm Indicates a neighbor state transition. Indicates a speed negotiation state.
  • Page 772 portLogShow Tx & Rx Frame payload size. New state (see state codes below). pstate New physical state (see pstate codes below). ctin The CT-subtype: Simple Name Server. Alias Server. ctout The same as ctin. errlog Error level (refer to errShow). loopscn The current loop state during loop initialization.
  • Page 773 portLogShow ctin Argument 0 is divided into two 16-bit fields: [A] A bit map indicating whether subsequent arguments are valid (0001 means argument 1 is valid, 0003 means arguments 1 and 2 are valid). [B] The CT-based service command code. Argument 1 is the first word of the CT payload, if applicable (as specified in [A]).
  • Page 774 portLogShow Faulty E_Port F_Port Segmented pstate Valid pstate values include the following: Active State Link Reset: LR Transmit State Link Reset: LR Receive State Link Reset: LRR Receive State Link Failure: NOS Transmit State Link Failure: NOS Receive State Offline: OLS Transmit State Offline: OLS Receive State Offline: Wait for OLS State LIP reason...
  • Page 775 portLogShow 8009 LIP as requested by the LINIT ELS received. 800a LIP as requested by the LPC ELS received. Speed Negotiation States Valid states include the following: INIT Start negotiation. Negotiate master. Wait for signal. Negotiation follows. Negotiation complete. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 776 portLogShow 17:05:31.775 PORT Tx 02fffffd,00fffffd,0e08ffff,14000000 17:05:31.775 PORT debug 00c0ffee,00fd015c,14000000,00000001 17:05:31.777 PORT Rx c0fffffd,00fffffd,0e080907 17:05:31.778 PORT Tx 02fffffd,00fffffd,0e09ffff,14000000 17:05:31.779 PORT debug 00c0ffee,00fd015e,14000000,00000001 17:05:31.782 PORT Rx c0fffffd,00fffffd,0e090908 SEE ALSO portLogClear, portLogDump, upTime Fabric OS Command Reference 53-1001764-01...

  • Page 777: Portlogshowport

    portLogShowPort portLogShowPort Displays the port log of a specified port with page breaks. SYNOPSIS portlogshowport port_index DESCRIPTION Use this command to display the port log of a specified port with page breaks. This command displays the same information as portLogDumpPort, except that portLogDumpPort does not prompt you to press Enter to display the next page.

  • Page 778: Portlogtypedisable

    portLogTypeDisable portLogTypeDisable Disables the port log of a specified type. SYNOPSIS portlogtypedisable id DESCRIPTION Use this command to disable the port log for a specified port log type. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 779: Portlogtypeenable

    portLogTypeEnable portLogTypeEnable Enables the port log of a specified port log type. SYNOPSIS portlogtypeenable id DESCRIPTION Use this command to enable the port log for a specified port log type. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 780: Portloopbacktest

    portLoopbackTest portLoopbackTest Performs a functional test of port N->N path. SYNOPSIS portloopbacktest [--slot slot] [-nframes count] [-lb_mode mode] [-spd_mode mode] [-ports itemlist] ceeportloopbacktest [--slot slot] [-nframes count] [-lb_mode mode] [-spd_mode mode] [-ports itemlist] DESCRIPTION Use this command to verify the functional operation of the switch. The portLoopbackTest and ceePortLoopbackTest commands are platform-specific versions of the same test.
  • Page 781 portLoopbackTest CSPAT: 0x7e, 0x7e, 0x7e, 0x7e, ... BYTE_LFSR: 0x69, 0x01, 0x02, 0x05, ... CHALF_SQ: 0x4a, 0x4a, 0x4a, 0x4a, ... QUAD_NOT: 0x00, 0xff, 0x00, 0xff, ... CQTR_SQ: 0x78, 0x78, 0x78, 0x78, ... CRPAT: 0xbc, 0xbc, 0x23, 0x47, ... RANDOM: 0x25, 0x7f, 0x6e, 0x9a, ..NOTES Do not abort this test prematurely, using CTRL-C or q to quit.
  • Page 782 portLoopbackTest Runs test at 1 Gbps, 2 Gbps, 4 Gbps, and 8 Gbps on 8 G ports. Runs test at 16 Gbps on 16 G ports. Runs test at 1 Gbps (deprecated). Runs test at 2 Gbps. Runs test at 4 Gbps. Runs test at 8 Gbps (Default for 8 G platforms).
  • Page 783 portLoopbackTest To run a functional test on a Brocade 8000: switch:admin> ceeportloopbacktest Running portloopbacktest ....PASSED. SEE ALSO itemList Fabric OS Command Reference 53-1001764-01...

  • Page 784: Portmirror

    portMirror portMirror Adds, deletes, or displays port mirror connections. SYNOPSIS portmirror portmirror --show portmirror --add [slot/]port SID DID portmirror --delete SID DID DESCRIPTION Use this command to add, delete, or display a mirror connection between two ports, a source and a destination port.
  • Page 785 portMirror State The state of the mirror connection. The state can either be "Defined" or "Enabled." In both cases, the port mirroring connection is persistently stored. A connection that is "Defined" has not been hardware-configured because at least one port is not online.
  • Page 786 portMirror --delete Deletes a mirror connection between a source and a destination. You must specify a SID and a DID when deleting a mirror connection. EXAMPLES To configure a port as a mirror port: switch:admin> portcfg mirrorport 18--enable Please confirm enable of Mirror Port: 17 (Y,y,N,n): [n] y To verify that port mirroring is enabled on port 18: switch:admin>...
  • Page 787 portMirror To display the mirror connections: switch:admin> portmirror --show Number of mirror connection(s) configured: 3 Mirror_Port State ---------------------------------------- 0x640c00 0x640800 Enabled 0x640700 0x640b00 Enabled 0x640700 0x640c00 Enabled To delete a port mirror connection between two local switch ports: switch:admin> portmirror --delete 0x640700 0x640c00 To add a port mirror connection between a local switch port and a remote switch port: switch:admin>...

  • Page 788: Portname

    portName portName Assigns or displays port names. SYNOPSIS portname portname [slot/]port [-n name] portname -i [index1[-index2][...][-f] [-n name]] portname -slot slot1[-slot2] [...][-n name] portname -h DESCRIPTION Use this command to assign a port name to a specified port or to a range of ports. The port name is included in the portShow output;...
  • Page 789 portName -n name Specifies the name to be assigned to the ports. The port name is a character string up to 128 characters, including spaces and characters, and excluding commas (,), semicolons (;), backlashes (\), and the at sign (@). To erase a port name, specify this operand as an empty string in double-quotation marks.

  • Page 790: Portperfshow

    portPerfShow portPerfShow Displays port throughput performance. SYNOPSIS portperfshow portperfshow [[slot/]port1[-[slot/]port2]] [-tx -rx | -tx | -rx] [-t interval]] portperfshow --help DESCRIPTION Use this command to display throughput information for all ports on a switch or chassis or to display the information for a specified port or port range.
  • Page 791 portPerfShow EXAMPLES To display performance information for all ports at a one second (default) interval: switch:user> portperfshow ==================================================================== 630.4m 630.4m ===================================================================== 0 210.1m 840.5m 210.1m Total ============================================== 2.5g ==================================================================== 630.4m 0 0 630.4m ===================================================================== 0 210.1m 840.6m 210.1m Total =============================================== 2.5g (output stopped) To display port performance for all ports with an interval of 5 seconds:...
  • Page 792 portPerfShow To display performance on a single port with at a 5 second interval: switch:user> portperfshow 0 -t 5 Total ================= 630.4m 630.4m Total ================= 630.3m 630.3m (output truncated) To display transmitter throughput for a single port at a 5 second interval: switch:user>...

  • Page 793: Portrouteshow

    portRouteShow portRouteShow Displays routing tables for the specified port. SYNOPSIS portrouteshow [slot/]port DESCRIPTION Use this command to display the port address ID for a specified port and the contents of the following port routing tables: External unicast routing table Displays how the specified port forwards unicast frames to remote domains in the following format: domain_number: ports_bitmap domain_number The remote domain ID to which frames are ultimately routed.
  • Page 794 portRouteShow EXAMPLES To display the routing tables for a port: switch:user> portrouteshow 4/15 port address ID: 0x02bf00 external unicast routing table: 1: 0x4 (vc=3) 2: 0x10000 (vc=0) internal unicast routing table: 60: 0x8000 (vc=2) 63: 0x1000 (vc=5) broadcast routing table: 0x10000 SEE ALSO bcastShow, fabricShow, switchShow, topologyShow,...

  • Page 795: Portshow

    portShow portShow Displays status and configuration parameters for ports and GbE ports. SYNOPSIS portshow [slot/][ge]port portshow -i [ index1 [-index2] [...]] [-f] portshow option [slot/]ge_port [optional_args] portshow option [all | ve_port] arguments [optional_arguments] portshow option [all |ge_port] arguments [optional_arguments] DESCRIPTION Use this command to display general port status and specific configuration parameters for a specified port, GbE port, or VE_Port.
  • Page 796 portShow NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. Some of the features supported by this command may require a license. In an AD context, if one of the L_Ports or NPIV ports is a part of the current AD, the complete device information attached to the port is shown in the output.
  • Page 797 portShow portType The port's type and revision numbers. POD Port Port on Demand License status. portState The port's SNMP state: Online Up and running. Offline Not online, see portPhys for more detail. Testing Running diagnostics. Faulty Failed diagnostics. Persistently Disabled Persistently disabled.
  • Page 798 portShow portId The port's 24-bit port ID. portIfId The user port's interface ID. portWwn The port's world wide name. portWwn of devices(s) connected The World Wide Port Names of connected devices. Distance The port's long-distance level. In the case of LD mode, the user configured distance and actual distance also are displayed.
  • Page 799 portShow DH Group Displays DH group [0-4] if DH-CHAP authentication is used. Otherwise displays N/A. Hash Algorithm Displays hash type (MD5 or SHA-1) if DH-CHAP authentication is used. Otherwise, displays N/A. Edge fabric's primary WWN If the EX_Port is connected to an edge switch with FCS policy enforcement, the WWN of the primary FCS is displayed when the edge fabric is secure and the primary FCS is online.
  • Page 800 portShow OPERANDS This command has the following port operands: slot For bladed systems only, specifies the slot number of the port to be displayed, followed by a slash (/). port Specifies the number of the port to be displayed, relative to its slot for bladed systems.
  • Page 801 portShow To display the current state of a port with encryption enabled: switch:admin> portshow 10/44 portIndex: 348 portName: slot10port44 portHealth: No Fabric Watch License Authentication: None portDisableReason: None portCFlags: 0x1 portFlags: 0x10000103 PRESENT ACTIVE E_PORT T_PORT\ T_MASTER G_PORT U_PORT ENCRYPT LOGIN LocalSwcFlags: 0x0 portType: 24.0...
  • Page 802 portShow To view xlate domains, you must issue the command on chassis with a Brocade FR4-18i blade. Note that the Front Domain ID is what is shown: switch:admin> portshow 8/4 portName: slot8port4 portHealth: No Fabric Watch License Authentication: None EX_Port Mode: Enabled Fabric ID: Front Phantom:...
  • Page 803 portShow To display an FCoE port: switch:admin> portshow 8 portIndex: portName: portHealth: HEALTHY Authentication: None portDisableReason: None portCFlags: 0x1 portFlags: 0x2cb03 PRESENT ACTIVE F_PORT G_PORT U_PORT\ LOGICAL_ONLINE LOGIN NOELP LED NSREG ACCEPT FLOGI portType: 17.0 POD Port: Port is licensed portState: 1 Online Protocol: FCoE...
  • Page 804 portShow ipif Displays the IP interface ID, IP address, netmask, and MTU for IPv4 addresses. Displays the prefix instead of the netmask for IPv6 addresses. Flags are explained in the command output (refer to the example below). iproute Displays the IP address, netmask, gateway, metrics, and flags. Displays the prefix instead of the netmask for IPv6 addresses.
  • Page 805 portShow Port: ge0 IP Address Mask Gateway Metric Flags ------------------------------------------------------------- 192.42.0.0 255.255.255.0 192.168.0.250 192.168.0.0 255.255.255.0 192.168.0.10 255.255.255.255 * U H L 192.168.0.11 255.255.255.255 * U H L 192.168.0.21 255.255.255.255 * 192.168.0.250 255.255.255.255 * U H L IPv6 Address Gateway Metric Flags ------------------------------------------------------------- 2000::...
  • Page 806 portShow 192.168.12.103 255.255.255.255 * U C (crossport) 192.168.12.201 255.255.255.255 * U H L (crossport) 192.168.21.0 255.255.255.0 U C (crossport) 192.168.21.103 255.255.255.255 * U C (crossport) 192.168.21.201 255.255.255.255 * U H L (crossport) To display the ARP tables on the Brocade 7800: switch:admin>...
  • Page 807 portShow • portShow fcipcircuit - Displays status and configuration for FCIP circuits: TCP statistics for the circuit Circuit-level VLAN tagging configuration Circuit-level Differentiated Services (DSCP) markings • portshow mgmtif - Displays the inband management interfaces. • portshow mgmtroute- Displays the routes for the inband management interfaces. •...
  • Page 808 portShow -d | --detail Displays a full view configuration details for all configured tunnels when used with the all port specifier. This view provides an alternative to specifying a specific VE_Port or to using the --perf option for a comprehensive view. -I | --ip-address Displays the IP addresses configured the specified circuits.
  • Page 809 portShow Displays data at the Initiator Target (SID/DID) FCP level. -itn Displays data at the Initiator Target nexus (SID/DID) level. -itl Displays data at the Initiator Target LUN (SID/DID/LUN) level. -twb Displays data at the Exchange (SID/DID/LUN/Exchange) level. command Specifies the type of information to be displayed. This operand is optional; if omitted, the default (-stats) is used.
  • Page 810 portShow -stats Displays global FICON Emulation statistics for the tunnel including FICON XRC Emulation, FICON Tape Write, FICON Tape Read, FICON Teradata Write, and FICON Teradata Read statistics. -fdpb adrs Displays FICON ports or a specific FICON Device Path Block. -fchb adrs Displays FICON logical partitions (LPARs) or a specific FICON Channel Control Block.
  • Page 811 portShow -act Displays the current Active Exchange information. options The following additional option is supported. -clear Resets the specified statistics. This operand is optional; it requires a preceding command. -mem adrs length Specifies the SE memory length in words to display. The valid range for length is 0 to 1024.
  • Page 812 portShow Tape Read Devs: 32 Tape Write Timer: 300 Tape Max Chain: 3200000 FICON OXID Base: 0x8000 FICON Debug Flags: 0xf7c90000 To display an FCIP tunnel with FICON disabled: switch:admin> portshow fciptunnel 16 ------------------------------------------- Tunnel ID: 16 Tunnel Description: Admin Status: Enabled Oper Status: Up Compression: On (Aggressive) Fastwrite: Off...
  • Page 813 portShow Keepalive Timeout: 10000 Path MTU Disc: 0 VLAN ID: (Not Configured) L2CoS: (VLAN Not Configured) DSCP: 0 H: 0 M: 0 L: Flags: 0x00000000 ------------------------------------------- Circuit ID: 1/12.1 Circuit Num: 1 Admin Status: Enabled Oper Status: Up Connection Type: Default Remote IP: 192.168.12.201 Local IP: 192.168.12.101 Metric: 1...
  • Page 814 portShow 68856512 Input Bytes 305 Bps 30s Avg, 208 Bps Lifetime Avg 92029 Input Packets 0 pkt/s 30s Avg, 0 pkt/s Lifetime Avg TCP Stats: 1444818696 Output Bytes 16044954 Output Packets 841543704 Input Bytes 16054360 Input Packets Retransmits: 0 Round Trip Time: 0 ms Out Of Order: 0 Slow Starts: 0 To display TCP connections for the circuits on the tunnel:...
  • Page 815 portShow Remote Port: 49641 Max Seg Size: 1420 Adaptive Rate Limiting Statistics: None (F-Class) Sender Statistics: Bytes Sent: 105833704 Packets Sent: 1135102 Round Trip Time 0 ms, HWM 0 ms, Variance 0, HWM 0 Send Window: 20832768 bytes, scale: 9 Slow Starts: 0 Slow Start Threshold: 16777216 Congestion Window: 16778636...
  • Page 816 portShow To display the FCIP tunnel hierarchy on the Brocade FX8-24: switch:admin> portshow fciptunnel 1/12--hier FCIP Tunnel 1/12 | High Level Tunnel Stats: Operational Status: Up Connected Count: 1 Max Comm Rate: 2500000 Compression Ratio: 1 : 1 Compressed Bytes: 0 Uncompressed Bytes: 0 Bytes In: 68942140 Bytes In Avg: 85...
  • Page 817 portShow |---> TCP Conn 1/12.1:15241506 |---> TCP Conn 1/12.1:15241307 |---> TCP Conn 1/12.1:15241308 |---> TCP Conn 1/12.1:15241309 |---> TCP Conn 1/12.1:15241111 |---> TCP Conn 1/12.1:15241111 |---> TCP Conn 1/12.1:15241112 |--> Circuit 1/12.0 High Level Circuit Stats: Operational Status: Up Connected Count: 1 Max Comm Rate: 2500000 Bytes In: 68941428 Bytes In Avg: 82...
  • Page 818 portShow Local WWN: 10:00:00:05:1e:52:fe:00 Peer WWN: 10:00:00:05:1e:39:a4:76 Circuit Count: 2 Flags: 0x00000000 FICON: Off To display a tunnel on a Brocade FX8-24 with automatic compression enabled in summary view (The "A" flag indicates Auto-Mode: switch:admin> portshow fciptunnel 1/21 -s --------------------------------------------------------------------- Tunnel Circuit OpStatus Flags Uptime TxMBps RxMBps ConnCnt CommRt Met --------------------------------------------------------------------- 1/21...
  • Page 819 portShow To display a summary view of an FCIP tunnel and its circuits on the Brocade FX8-24 with the --perf option : switch:admin> portshow fciptunnel 7/12 --summary --perf ---------------------------------------------------------------------- Tunnel Circuit TxMBps RxMBps ComRatio RTT(ms) ReTx OutOfSeq SlowStart ---------------------------------------------------------------------- 1/22 0.00 0.00 1.00:1...
  • Page 820 portShow 1/22 1 1/xge1 192.168.22.101 192.168.22.201 1/31 1/31 0 1/xge0 192.168.31.100 192.168.31.200 1/31 1 1/xge1 192.168.31.101 192.168.31.201 ------------------------------------------------------------------- To display all FCIP circuits on the Brocade FX8-24: switch:admin> portshow fcipcircuit all ---------------------------------------------------------------------- Tunnel Circuit OpStatus Flags Uptime TxMBps RxMBps ConnCnt CommRt Met ---------------------------------------------------------------------- 1/12 0 1/xge1...
  • Page 821 portShow Min Retrans Time: 100 Max Retransmits: 8 Keepalive Timeout: 10000 Path MTU Disc: 0 VLAN ID: (Not Configured) L2CoS: (VLAN Not Configured) DSCP: 0 H: 0 M: 0 L: Flags: 0x00000000 ------------------------------------------- Circuit ID: 1/21.0 Circuit Num: 0 Admin Status: Enabled (Output truncated) To display a single circuit (circuit 0 on tunnel 16) with VLAN tagging configuration: switch:admin>...
  • Page 822 portShow Connected Count: 1 Tunnel Duration: 3 days, 19 hours, 54 minutes, 5 seconds Compression Statistics: 0 Uncompressed Bytes 0 Compressed Bytes 1.00 : 1 Compression Ratio Performance Statistics: Overall Throughput 31073824 Output Bytes 16 Bps 30s Avg, 93 Bps Lifetime Avg 70932 Output Packets 0 pkt/s 30s Avg, 0 pkt/s Lifetime Avg 69170308 Input Bytes...
  • Page 823 portShow 7223112 Input Bytes 27 Bps 30s Avg, 21 Bps Lifetime Avg 45277 Input Packets 0 pkt/s 30s Avg, 0 pkt/s Lifetime Avg TCP Stats: 318824216 Output Bytes 3419555 Output Packets 184935644 Input Bytes 3419605 Input Packets Retransmits: 0 Round Trip Time: 0 ms Out Of Order: 0 Slow Starts: 0 Performance Statistics - Priority: High...
  • Page 824 portShow Connected Count: 1 Duration: 3 days, 19 hours, 57 minutes, 42 seconds 0 Output Bytes 0 Bps 30s Avg, 0 Bps Lifetime Avg 0 Output Packets 0 pkt/s 30s Avg, 0 pkt/s Lifetime Avg 0 Input Bytes 0 Bps 30s Avg, 0 Bps Lifetime Avg 0 Input Packets 0 pkt/s 30s Avg, 0 pkt/s Lifetime Avg TCP Stats:...
  • Page 825 portShow To display the IP routes for all management interfaces on a Brocade 7800: switch:admin> portshow mgmtroute all Inband Management Routes: Port: ge0 IP Address Mask Gateway Metric Flags ------------------------------------------------------------- 20.20.0.0 255.255.255.0 Port: ge1 IP Address Mask Gateway Metric Flags ------------------------------------------------------------- 192.168.1.0 255.255.255.0...
  • Page 826 portShow TotalEmulatedOps 393653297 MaxRetryQueueDepth = 1201 MaxEgressQueueDepth = 3249 TotalCUBusyResponses 0 TotalCUEndResponses TotalEmulatedCUBusys 0 TotalEmulCUEnd TotalSelectiveResets 0 TotalChLinkBusy TotalCancels 0 TotalAborts TotalEmulErrors 0 TotalCuLinkBusy TotalPurgePaths 0 Xport LRC CheckErrors= Generated Link Busys 70 Failed Generate Frame= WIRE Buffer Percentages LocalFree= 95 LocalLow= 93 \ PeerFree= 95 PeerLow=93 XBAR Buffer Percentages LocalFree= 98 LocalLow= 97 \ PeerFree= 98 PeerLow=97...
  • Page 827 portShow Average Emulated Bytes per chain 34670 Average Emulated Read Blocksize 33379 Average CCWs in Emulated Chains Read Block Paced Count Read Channel Program Paced Count Read Not Ready Situations Count Current Read FDCBs Count Max Concurrent Read FDCB Count Current Read Limited FDCB Count To display the FICON Device Path Blocks: switch:admin>...
  • Page 828 portShow fcrPresent=N fchbValid=Y FCHB Control variables: tinOrigOxid=0xFFFF tirOrigOxid=0xFFFF tinAckRxid=0xFFFF tinAckOxid=0xFFFF allocChOxid=0xFFFF allocChOIdx=0x0000 tinTirOxid=0xFFFF To display FICON FCUB information (FICON Images accessed through the tunnel) switch:admin> portshow xtun 23 -ficon -fcub FCUB (FICON Control Unit Block) Count = 29 FC Egress parms: (0x) Side Path: devRange DevCnt Model...
  • Page 829 portShow To display a FICON Teradata, Tape, or XRC emulation statistics for a specified Device Control Block: switch:admin> portshow xtun 16 -ficon -fdcb 0x041008B980 FDCB (FICON Device Control Block):Port=10 Side=Host Active=No DeviceType=TERA ------------------------------------------------------------- FDCB (0x) hDom hPrt dDom dPrt lch state ============ ==== ==== ==== ==== ==== ==== ==== ===== 0x041008B980...
  • Page 830 portShow immRetryStatus 0 devBusyStatus cuBusyStatus 0 ceDeUxStatus deUxStatus 0 pendDeStatus deUcStatus 0 unusualStatus chLinkBusyCount 1 cuLinkBusyCount unusualStsArray = 0x00000000 = 0x0000000000 = 0x0285CF9E senseDeviceType = 0xFF30884000000000 ingressFrameCount= 0x000000000011ADCE egressFrameCount = 0x00000000000432AB TERADATA CONTROL ============ writeSuspendFlag = OFF finalStatusPndg = OFF waitCuRsp cuBusyRsp = OFF suspendCompleted= OFF rexmitPending synStatusSent...
  • Page 831 portShow longIOtimes = 0x0000005D startOfChainDelayCnt= 0x0000 endOfChainDelayCnt = 0x5B readPacedCount = 0x0000 writePacedCount = 0x0000 Ave Chain SIO time = 0.000 seconds ReadPipe Cntls: =============== readBlkEmulation=OFF entireCP=OFF waitForAccept=OFF endOfCP=OFF commandRetry=OFF goToIdleState=OFF sentUExceptn=OFF earlyEnd=OFF dackPending=OFF sofCNReceived=OFF noActiveIO=OFF sendSOFRep=OFF blkIneligible=OFF rdBlkValid1=OFF rdBlkValid2=OFF earlyIdleStatus=ON reducePipe=OFF doBSNoOp=OFF...
  • Page 832 portShow 2468974| 37978| 2031144| 35180| 1980115| 36013| 2323892| 36152| 2223665| 37441| 2123746| 34138| [...] (Output split and truncated) switch:admin> portshow xtun 23 -ficon -emulxrc XRC EMULATION STATS +------------+----------------+-+-----+----+----+----+----+ FDCB Ptr Path |H|State|Cmds| Cmd|Data|Data| (0x) (0x) | Qd | Max| Qd |Max | +------------+----------------+-+-----+----+----+----+----+ |0x04100EAC80|1763086403060023|H| 0x00|0000|0003|0000|0001| |0x04100EC400|1763086403060027|H| 0x00|0000|0003|0000|0002|...
  • Page 833 portShow Idle Not Accpt Status = 11886003 MaxRetryQueueDepth MaxEgressQueueDepth 2316 TotalCUBusyResponses TotalCUEndResponses TotalEmulatedCUBusys TotalEmulCUEnd TotalSelectiveResets TotalChLinkBusy TotalCancels TotalAborts TotalEmulErrors TotalCuLinkBusy TotalPurgePaths Xport LRC CheckErrors= Generated Link Busys Failed Generate Frame= WIRE Buffer Percentages LocalFree= 95 LocalLow= 94 PeerFree= 95 PeerLow=93 XBAR Buffer Percentages LocalFree= 98 LocalLow= 97 PeerFree= 98 PeerLow=97 FICON Configuration Status: -------------------------------------------------------------------...
  • Page 834 portShow Current Read Limited FDCB Count Tera Write Emulation Statistical Counts (decimal) ----------------------------------------------------------- Current Bytes in write pipe Maximum Bytes in write pipe 1405952 Largest write chain processed 43936 Total number of emulated Write Bytes= 19204226768 Number of emulated Write Chains 989882 Total number of emulated Write CCWs = 989882...
  • Page 835 portShow Bit 24 [0x01000000] = 1 : TRIGGER_ON_NOFDCB_ABORT Bit 23 [0x00800000] = 1 : TRIGGER_ON_LINKDOWN Bit 22 [0x00400000] = 1 : TRIGGER_ON_SENSE_CMD Bit 21 [0x00200000] = 0 : TRIGGER_ON_BUSYATTN Bit 20 [0x00100000] = 0 : TRIGGER_ON_XRCUNS Bit 19 [0x00080000] = 1 : DISPLAY_FDCB_ON_ERROR Bit 18 [0x00040000] = 0 : TRIGGER_ON_LOW_WIREPOOL Bit 17 [0x00020000] = 0 : TRIGGER_ON_READ_UNITCHECK Bit 16 [0x00010000] = 1 : TRIGGER_ON_STATE_SAVE...
  • Page 836 portShow To display FICON tape performance data: switch:admin> portshow xtun 23 -ficon -tapeperf Tape Performance Monitor Data: =============================== Sample Time Period in ms: 2461 Tape Write Performance Data: ---------------------------- Emulated Chains per sec: 480 Emulated CCWs per sec: 3069 Ave Write Block Size: 32760 Emulated Write BPS: 100540440 ---------------------------- No Emulated Read operations...
  • Page 837 portShow You can display the TCP history with the fciptunnel -hist command. This command displays a maximum of 16 entries. Once the maximum history length is reached, the oldest entry is removed from the end, and the newest entry is added to the front of the TCP history as future connection failures occur. The following data items are captured when a TCP connection encounters a failure: Reason The reason for the TCP connection failure...
  • Page 838 portShow Along with history, the system keeps track of the following TCIP statistics, which you can display with the fciptunnel -snapshow option. The statistic is collected from system startup onwards until it is reset with the fciptunnel -snapstart option. Subsequent calls to -snapshow display statistics collected since the system was last reset.
  • Page 839 portShow all | tunnel_id For FCIP-related command options only, specify all to display all FCIP tunnels or a Tunnel ID between 0 and 7 to display a single FCIP tunnel. fciptunnel Displays FCIP tunnel IDs, remote and local IP addresses, remote and local WWNs, compression status, FCIP FastWrite status, Tape Pipelining status, bandwidth rate, SACK status, Minimum Retransmit time, Keepalive Timeout, Maximum Retransmissions, DSCP Marking, tunnel status, tunnel uptime.
  • Page 840 portShow -images Displays discovered Images (FCUB). -emul Displays emulated FDCBs. -active Displays active FDCBs. -epcb Displays Emulation Control Block (port specific). -fhpb Displays FICON Host Path Block. -fdpb adrs Displays FICON Device Path Block. -fchb Displays FICON Channel Control Block. -fcub Displays FICON Control Unit Control Block.
  • Page 841 portShow Status : Inactive Connected Count: 0 Port: ge1 ------------------------------------------- Tunnel ID 0 Tunnel Description "Test Description" Remote IP Addr 192.168.10.10 Local IP Addr 192.168.10.2 Remote WWN Not Configured Local WWN 10:00:00:05:1e:39:37:5f Compression off Fastwrite off Tape Pipelining off Committed Rate 900000 Kbps (0.900000 Gbps) SACK on Min Retransmit Time 100 Keepalive Timeout 10...
  • Page 842 portShow peer advertised window 20443136 Bytes negotiated window scale (shift count) 9 congestion window 169464 Bytes slow start threshold 112500 Bytes operational mode: congestion avoidance 0 packets queued: TCP sequence# NXT(3715211236) 0 packets in-flight (HWM 3) Send.Unacknowledged(TCP sequence# 3715211236) recovery: retransmit timeout 500 ms, duplicate ACKs 0 retransmits 0 (max retransmits 8) loss recovery: fast retransmits 0 (HWM 0),\...
  • Page 843 portShow 1655 Bps 30s avg, 4305 Bps lifetime avg 951 packets lost (retransmits) 12.25% loss rate 30s avg 38563 input packets 2 pkt/s 30s avg, 4 pkt/s lifetime avg 8208640 input Bytes 699 Bps 30s avg, 1035 Bps lifetime avg Data transfer TCP connection: Local 10.10.9.100:4100, Remote 10.62.0.100:3226 Performance stats:...
  • Page 844 portShow IPSec Policy 1 ----------------------------------------- Authentication Algorithm: SHA-1 Encryption: AES-128 SA Life (seconds): 28800 Pre-Shared Key testingFIPSandIPSec To display the TCIP connection history after the connection was severed: Switch:admin> portshow fciptunnel ge1 0 -hist Port: ge1 ------------------------------------------- Tunnel ID 0 Tunnel Description "Test Description"...
  • Page 845 portShow Tunnel Description "Test Description" Remote IP Addr 192.168.114.2 Local IP Addr 192.168.114.1 Remote WWN Not Configured Local WWN 10:00:00:05:1e:38:84:65 Compression off Fastwrite off Tape Pipelining off Committed Rate 900000 Kbps (0.900000 Gbps) SACK on Min Retransmit Time 100 Keepalive Timeout 10 Max Retransmissions 8 VC QoS Mapping off Marking (Control): 0, DSCP Marking (Data): 0...
  • Page 846 portShow Status : Active Connected Count: 1 Uptime 5 minutes, 26 seconds TCP data and control statistics snapshots have been reset for tunnel 0 To display the FC data path credit data: switch:admin> portshow fciptunnel 9/ge0 0 -credits Slot: 9 Port: ge0 ------------------------------------------- Tunnel ID 0 Tunnel Description "Test Description"...
  • Page 847 portShow Data transfer TCP connection: Local 10.10.9.100:4100, Remote 10.62.0.100:3226 IKE Policy 1 IPSec Policy 1 Pre-Shared Key testingFIPSandIPSec To display QoS Mappings: switch:admin> portshow fciptunnel 9/ge0 0 -qosmap Slot: 9 Port: ge0 ------------------------------------------- Tunnel ID 0 Tunnel Description "Test Description" Remote IP Addr 10.62.0.100 Local IP Addr 10.10.9.100 Remote WWN Not Configured...
  • Page 848 portShow To display the same information as the previous example but with post display clearing of relevant statistics: switch:admin> portshow ficon ge0 all -fdcb 10008000 -clear SEE ALSO authUtil, portCfg, portLoginShow, portCfgLongDistance, switchShow Fabric OS Command Reference 53-1001764-01...

  • Page 849: Portstats64Show

    portStats64Show portStats64Show Displays the 64-bit hardware statistics for a port. SYNOPSIS portstats64show [slot/]port [-long] DESCRIPTION Use this command to display 64-bit hardware statistics for a specified port. When used without the -long option, two integers are reported for most values, the lower and upper 32-bits are reported as two separate numbers.
  • Page 850 portStats64Show er64_disc_c3 Number of class 3 frames discarded. stat64_rateTxFrame Tx frame rate (frames/second). stat64_rateRxFrame Rx frame rate (frames/second). stat64_rateTxPeakFrame Tx peak frame rate (frames/second). stat64_rateRxPeakFrame Rx peak frame rate (frames/seconds). stat64_rateTxWord Tx Word rate (words/seconds). stat64_rateRxWord Rx Word rate (words/seconds). stat64_rateTxPeakWord Tx peak Word rate (words/sec).
  • Page 851 portStats64Show swConnUnitOpen, open Number of times the FL_Port entered OPEN state. swConnUnitInvalidARB, er_inv_arb Number of invalid arbitrated loops (ARBs). The following counters are platform-specific and applicable only to Condor2 and Goldeneye2 ASICs only. Refer to the Fabric OS Troubleshooting and Diagnostics Guide, Appendix A, for a table that correlates ASIC type with switch models.
  • Page 852 portStats64Show bottom_int : Class 3 frames received stat64_lc_rx top_int : Link control frames received bottom_int : Link control frames received stat64_mc_rx top_int : Multicast frames received bottom_int : Multicast frames received stat64_mc_to top_int : Multicast timeouts bottom_int : Multicast timeouts stat64_mc_tx top_int : Multicast frames transmitted bottom_int : Multicast frames transmitted...
  • Page 853 portStats64Show er64_type2_miss frames with FTB type 2 miss er64_type6_miss frames with FTB type 6 miss er64_zone_miss frames with hard zoning miss er64_lun_zone_miss 0 frames with LUN zoning miss lli64 Low level interrupts SEE ALSO portStatsClear, portStatsShow Fabric OS Command Reference 53-1001764-01...

  • Page 854: Portstatsclear

    portStatsClear portStatsClear Clears port hardware statistics. SYNOPSIS portstatsclear [slot/]port portstatsclear -i [index1[-index2] [...] [-f]] portstatsclear -slot [slot1[-slot2][...] portstatsclear -h DESCRIPTION Use this command to clear the hardware statistics for the specified ports. Including ALPA-based CRC monitor, End-to-End monitor, and Filter-based performance monitor statistics. You can identify a single port to be cleared by its port number or by its port index number.
  • Page 855 portStatsClear To clear hardware statistics for a range of ports specified by their index numbers: switch:admin> portstatsclear -i 32-40 To clear hardware statistics for multiple port ranges specified by their index numbers: switch:admin> portstatsclear -i 32-40 50-56 To clear hardware statistics for all ports on slots 3-5: switch:admin>...

  • Page 856: Portstatsshow

    portStatsShow portStatsShow Displays port hardware statistics. SYNOPSIS portstatsshow [slot/]port portstatsshow -i [index1[-index2][...] [-f]] portstatsshow -slot [slot1[-slot2][...] portstatsshow ge [slot/]ge port portstatsshow ip [slot/]ge port [ip_address] portstatsshow fcip [slot/]ge port [tunnel_number] portstatsshow -h DESCRIPTION Use this command to display port hardware statistics counters. Some counters are platform- or port-specific and display only on those platforms and ports.
  • Page 857 portStatsShow tim_rdy_pri The number of times that sending R_RDY or VC_RDY primitive signals was a higher priority than sending frames, due to diminishing credit reserves in the transmitter at the other end of the fiber. This parameter is sampled at intervals of 1.8 microseconds, and the counter is incremented by 1 if the condition is true.
  • Page 858 portStatsShow er_type1_miss The number of FCR frames with transmit errors. er_type2_miss The number of frames with routing errors. er_type6_miss The number of FCR frames with receive errors. er_zone_miss , er_lun_zone_miss The number of frames discarded due to hard zoning miss or LUN zoning miss. If Rx port hard zoning is enabled, frames will be discarded at the Rx port.
  • Page 859 portStatsShow ge_stat_rx_octets The number of octets received on the GbE port. ge_stat_rx_ucast_frms The number of unicast frames received on the GbE port. ge_stat_rx_mcast_frms The number of multicast frames received on the GbE port. ge_stat_rx_bcast_frms The number of broadcast frames received on the GbE port. ge_stat_rx_vlan_frms The number of VLAN frames received on the GbE port.
  • Page 860 portStatsShow Ignores nonexisting ports. This operand is valid only with the -i option. -slot [slot1[-slot2] Displays statistics for all ports on a slot or on a range of slots, for example, -s 3-5. You may specify multiple slot ranges separated by a space, for example, -s 3-5 8-10.
  • Page 861 portStatsShow er_type1_miss frames with FTB type 1 miss er_type2_miss frames with FTB type 2 miss er_type6_miss frames with FTB type 6 miss er_zone_miss frames with hard zoning miss er_lun_zone_miss frames with LUN zoning miss er_crc_good_eof Crc error with good eof er_inv_arb Invalid ARB open...
  • Page 862 portStatsShow To display port statistics for all IP addresses, slot 8, and GbE1 on the Brocade FR4-18i: switch:admin> portstatsshow ip 8/ge1 ip_err_crc IP CRC Errors ip_err_hdr_cksum IP Checksum Errors ip_err_tcp_data_chksum IP TCP Data Checksum Errors To display port statistics for IP address 192.168.255.10, slot 8, and GbE1 on the Brocade FR4-18i: switch:admin>...

  • Page 863: Portswap

    portSwap portSwap Swaps the port Address of two ports. SYNOPSIS portswap [slot1/]port1 [slot2/]port2 DESCRIPTION Use this command to swap the 24-bit port address (PID) for a pair of ports. Both ports must be disabled prior to executing this command and the port-swapping feature must be enabled using portSwapEnable.

  • Page 864: Portswapdisable

    portSwapDisable portSwapDisable Disables the PortSwap feature. SYNOPSIS portswapdisable DESCRIPTION Use this command to disable the PortSwap feature. The portSwap command cannot be used after this feature is disabled. The disabled state of the PortSwap feature is persistent across reboots and power cycles. Enabling or disabling the PortSwap feature does not affect previously performed PortSwap operations.

  • Page 865: Portswapenable

    portSwapEnable portSwapEnable Enables the PortSwap feature. SYNOPSIS portswapenable DESCRIPTION Use this command to enable the PortSwap feature. The portSwap command cannot be used unless the feature is first enabled with this command. The enabled state of the PortSwap feature is persistent across reboots and power cycles. Enabling or disabling the PortSwap feature does not affect previously performed PortSwap operations.

  • Page 866: Portswapshow

    portSwapShow portSwapShow Displays the state of the PortSwap feature. SYNOPSIS portswapshow DESCRIPTION Use this command to display the state of the PortSwap feature and information about swapped ports. If portSwap is enabled and ports have been swapped, the command displays the enabled status as well as the swapped ports and the new port address (the 24-bit PID) for these ports.

  • Page 867: Porttest

    portTest portTest Performs a functional test of a switch in a live fabric. SYNOPSIS porttest [-ports itemlist] [-iteration count] [-userdelay time] [-timeout time] [-pattern pattern] [-patsize size] [-seed seed] [-listtype porttype] DESCRIPTION Use this command to isolate problems in a single replaceable element and to trace problems to near-end terminal equipment, far-end terminal equipment, or the transmission line.
  • Page 868 portTest Use the stopPortTest command to stop the test. Refer to the stopPortTest help page for more information. Use the portTestShow command to view the current status of portTest. Refer to the portTestShow help page for more information. If there is a port type change during portTest execution, the test continues on a given port as long as it can be supported and it is asked to do so.
  • Page 869 portTest All N->N loopback ports. EXAMPLES To run a functional test on an active switch: switch:admin> porttest -ports 1/1-1/3 SEE ALSO portLoopbackTest, portTestShow, spinFab, stopPortTest Fabric OS Command Reference 53-1001764-01...

  • Page 870: Porttestshow

    portTestShow portTestShow Displays information from portTest. SYNOPSIS porttestshow [-ports itemlist] DESCRIPTION Use this command to display a snapshot of information from portTest. The command output displays statistical data about past test runs and values for parameters that were set when the test was run. Refer to the portTest help page for more information on the displayed parameters.
  • Page 871 portTestShow NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. OPERANDS This command has the following operand: -ports itemlist Displays test results for the specified ports.

  • Page 872: Portthconfig

    portThConfig portThConfig Configures Fabric Watch event thresholds per port type. SYNOPSIS portthconfig --set port_type -area area [-timebase time_base] [-highthreshold -value value -trigger above | below -action actions] [-lowthreshold -value value -trigger above | below -action actions] [-buffer value][-nosave] portthconfig --apply port_type -area area [-thresh_level def | cust] [-action_level def| cust] portthconfig --cancel port_type -area area [-thresh_level def | cust] [-action_level def| cust]...
  • Page 873 portThConfig NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. This command requires a Fabric Watch license. For more information on port threshold configuration procedures, including default values for specific area high/low thresholds, refer to the Fabric Watch Administrator's Guide.
  • Page 874 portThConfig Link reset Trunk Utilization Only the following areas are valid for VE_Ports. UTIL Port utilization PKTLOSS Packet loss State change --set Configures the Fabric Watch thresholds for monitoring a specified area for all ports of a specified port type. When configuring a threshold, you must specify a port type and area.
  • Page 875 portThConfig portlog Locks the port log. Following an event, the port log locks to retain information about an event, preventing the information from being overwritten as the log becomes full. none Event triggers no action. -buffer value Specifies the buffer value for in range behavior. A buffer defines a zone within which event criteria are met, rather than a single threshold value.
  • Page 876 portThConfig -area area[,area]... | all Specifies the area. You can either specify one or more areas separated by a comma, or you can specify all to indicate all areas. -port port_list | all Specifies one or more ports or all ports. The port_list operand supports one of the following values: •...
  • Page 877 portThConfig To cancel the custom settings that have previously been saved nonpersistently: switch:admin> portthconfig --cancel ve-port -area util -action_level cust -thresh_level cust To display the port threshold configuration for all port types and areas: switch:admin> portthconfig --show PortType: E-port Area : CRC ThLevel : Def ActLevel: Def...
  • Page 878 portThConfig Trigger : Below Action: None Default: TimeBase: Minute Value Trigger : Above Action: None Trigger : Below Action: None Buffer: Custom: Value : 100 Default: Value : 100 Port persistence time = 18s Area : LR ThLevel : Def ActLevel: Def High Custom:...
  • Page 879 portThConfig Custom: TimeBase: Minute Value Trigger : Above Action: None Trigger : Below Action: None Default: TimeBase: Minute Value Trigger : Above Action: None Trigger : Below Action: None Buffer: Custom: Value : 100 Default: Value : 100 Port persistence time = 18s To pause and continue E_Port monitoring: switch:admin>...
  • Page 880 portThConfig To display current values for CRC errors for all E_Ports: switch:admin> portthconfig --show e-port -area CRC -current PortType |Area |PortNo|C# |Value |State |Monitoring ---------|-------|------|----|---------|-------|---------- E-port |CRC |000000|n/a |0 |Info |Continue E-port |CRC |000001|n/a |0 |Info |Continue E-port |CRC |000002|n/a |0 |Info |Continue E-port...

  • Page 881: Porttrunkarea

    portTrunkArea portTrunkArea Assigns or removes a trunk area (TA) from a port or port trunk group; displays masterless F_Port trunking configuration. SYNOPSIS porttrunkarea --enable [slot/]port1[-port2] -index port_index porttrunkarea --disable [slot/]port1[-port2] porttrunkarea --disable all porttrunkarea --show disabled | enabled | trunk | all porttrunkarea --show slot/port1[-port2] DESCRIPTION Use this command to assign a static trunk area (TA) on a port or port trunk group, to remove a TA from a...
  • Page 882 portTrunkArea The --show trunk option displays the following information: Trunk Index Displays the trunk index. ptA->ptB ptA indicates the local user port; ptB indicates the remote user port. Port speed in Gbps. Bandwidth The bandwidth (Rx, Tx, and the combined total for Tx+Rx) of the trunk group. Values are displayed as either bits per second (Bps), kilobits per second (Kbps), megabits per second (Mbps), or gigabits per second (Gbps), rounded down to the next integer.
  • Page 883 portTrunkArea • Ports included in a TA share the same port index. The original port index may be removed in the process. This means that D, I zones referring to these indices are no longer part of the switch. For details and workarounds, refer to the Fabric OS Administrator's Guide.
  • Page 884 portTrunkArea trunk Displays configuration details for the port trunk group, including user port, neighboring user port, and master port properties. enabled Displays configuration details for all ports included in a user assigned TA (all ports on which masterless F_Port trunking is enabled). disabled Displays configuration details for all ports not included in a user assigned TA (all ports on which masterless F_Port trunking is not enabled).
  • Page 885 portTrunkArea To display trunk details for a user assigned TA 25 that includes ports 24-25: switch:admin> porttrunkarea --show trunk Trunk Index 25->0 8.000G \ bw: 16.000G deskew 15 MASTER Tx: Bandwidth 16.00Gbps, Throughput 1.63Gbps (11.84%) Rx: Bandwidth 16.00Gbps, Throughput 1.62Gbps (11.76%) Tx+Rx: Bandwidth 32.00Gbps, Throughput 3.24Gbps (11.80%) 24->1 8.000G bw:...

  • Page 886: Portzoneshow

    portZoneShow portZoneShow Displays the enforced zone type of the F_Ports and FL_Ports of a switch. SYNOPSIS portzoneshow DESCRIPTION Use this command to display the enforced zone type of the F_Ports and FL_Ports of a switch. Output shows virtual port number (decimal), physical port number (decimal), online status, and if online, port type.

  • Page 887: Powerofflistset

    powerOffListSet powerOffListSet Sets the order in which slots are powered off. SYNOPSIS powerofflistset DESCRIPTION Use this command to Modify the order in which slots are powered off. This command displays the current order, and then prompts you interactively to confirm or modify the power-off position for each slot. Whenever a power supply goes out of service or a field-replaceable unit (FRU) RU is inserted, the system's available power is compared to the system's required power to determine if there is enough power to operate.
  • Page 888 powerOffListSet 6th slot to be powered off: (7..9) [8] 9 7th slot to be powered off: (7..8) [8] 8 8th slot to be powered off: (7..7) [7] 7 Old POL New POL Power Off Order ------------------------------------- Proceed to change the POL order? (yes, y, no, n): [no] y SEE ALSO chassisShow, powerOffListShow, psShow, slotPowerOff, slotPowerOn, slotShow...

  • Page 889: Powerofflistshow

    powerOffListShow powerOffListShow Displays the order in which slots are powered off. SYNOPSIS powerofflistshow DESCRIPTION Use this command to display the order in which the physical slots are powered off. Whenever a power supply goes out of service or a field-replaceable unit (FRU) is inserted, the system's available power is compared to the system's required power to determine if there is enough power to operate.

  • Page 890: Psshow

    psShow psShow Displays power supply status. SYNOPSIS psshow DESCRIPTION Use this command to display the current status of the switch power supplies. The status of each supply is displayed as: Power supply functioning correctly. absent Power supply not present. unknown Unknown power supply unit installed.

  • Page 891: Reboot

    reBoot reBoot Reboots the control processor (CP). SYNOPSIS reboot [-f] DESCRIPTION Use this command to perform a "cold reboot" (power off/restart) of the control processor. This operation may be disruptive, and the command prompts for confirmation before executing. When you reboot a switch connected to a fabric, all traffic to and from that switch stops.
  • Page 892 reBoot To reboot a CP on a DCX when HA is enabled: switch:admin> reboot Warning: This command is being run on a control processor (CP) based system and will cause the active CP to reboot. Are you sure you want to reboot the active CP [y/n]? y Broadcast message from root (pts/0) Sun Feb 28 19:49:45 2010...

  • Page 893: Roleconfig

    roleConfig roleConfig Manages user-defined roles. SYNOPSIS roleconfig --add role_name [-desc description] [-class rbac_class_list] [-perm permission] roleconfig --change role_name [-class rbac_class_list -perm permission [-desc description roleconfig --delete role_name [-force] roleconfig --copy new_role -role source_role roleconfig --show role_name | -all [default] roleconfig --help DESCRIPTION Use this command to create or modify user-defined roles, to define permissions for these roles based on role-based access control (RBAC) permissions and meta-object format (MOF) classes, and to display...
  • Page 894 roleConfig role_name Specifies the name for the role to be created or modified. The name must be unique; it is case-insensitive and can contain only alpha characters. The role name must be at least 4 characters long and cannot exceed 16 characters. The maximum number of user-defined roles allowed on a chassis is 256.
  • Page 895 roleConfig --help Displays the command usage. EXAMPLES To create a role with Zoning and SecurityAdmnin permissions and OM access: switch:admin> roleconfig --add myzonesec \ -d "Zone and Security Admin" -c Security,zoning -p OM To change the access permissions of the previously created role and to display the results: switch:admin>...

  • Page 896: Routehelp

    routeHelp routeHelp Displays a list of FSPF-related commands. SYNOPSIS routehelp DESCRIPTION Use this command to display a list of fabric-shortest-path-first (FSPF)-related commands. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 897: Rtlogtrace

    rtLogTrace rtLogTrace Manages real-time trace logging. SYNOPSIS rtlogtrace --enable rtlogtrace --disable rtlogtrace --show rtlogtrace --help DESCRIPTION Use this command to enable or disable real-time trace logging and to indicate whether the feature is enabled or disabled. The RTLog facility captures the most recent hardware events and low-level software interrupts on Brocade DCX platforms in real time.

  • Page 898: Secactivesize

    secActiveSize secActiveSize Displays the size of the active security database. SYNOPSIS secactivesize DESCRIPTION Use this command to display the size of the active security database. The command also displays the maximum database size. For switches running Fabric OS v6.2.0 and later, the maximum security database size is 1 megabyte per logical switch.

  • Page 899: Secauthsecret

    secAuthSecret secAuthSecret Manages the DH-CHAP shared secret key information. SYNOPSIS secauthsecret --show secauthsecret --set secauthsecret --remove value | --all DESCRIPTION Use this command to manage the DH-CHAP shared secret key database used for authentication. This command displays, sets, and removes shared secret key information from the database or deletes the entire database.
  • Page 900 secAuthSecret authentication. If switch is configured to do DH-CHAP, it is performed whenever a port or a switch is enabled. Warning: Please use a secure channel for setting secrets. Using an insecure channel is not safe and may compromise secrets. Following inputs should be specified for each entry.

  • Page 901: Seccertutil

    secCertUtil secCertUtil Manages certificates on a switch. SYNOPSIS seccertutil seccertutil genkey [-nowarn] [-keysize 1024 | 2048] seccertutil delkey [-nowarn][-all] seccertutil gencsr [-country country code] [-state state] [-locality locality] [-org organization] [-orgunit organization unit] [-cn common name] seccertutil delcsr [-nowarn] seccertutil showcsr seccertutil generate [-fcapall][-keysize 1024 | 2048] seccertutil delete [-ldapcacert file name ] | [-fcapcacert] | [-fcapswcert] | [-fcapall] [-nowarn]...
  • Page 902 secCertUtil • Configure a SSL certificate file name. • Enable secure protocols. This command takes an action and associated arguments. If only an action is specified, this command prompts interactively for input values of the associated arguments. The command runs noninteractively when the arguments associated with a given action are specified on the command line.
  • Page 903 secCertUtil -org organization Specifies the organization. Provide the full name, for example, Brocade. If the organization consists of multiple words, it must be enclosed in double quotes. -orgunit organization unit Specifies the organizational unit, for example, your department name. If the organizational unit consists of multiple words, it must be enclosed in double quotes.
  • Page 904 secCertUtil -fcapswcsr Exports the FCAP switch CSR certificate from the switch to the remote host. The FCAP switch CSR is exported as switchIPfcapSw.csr. -fcapcacert Exports the FCAP CA certificate from the switch to the remote host. The FCAP CA certificate is exported as switchIPfcapRootCA.pem. -protocol ftp | scp Specifies the protocol as either FTP or SCP.
  • Page 905 secCertUtil -login login name Specifies the login name for the server. -password password Specifies the password for the user account. When using SCP, for security reasons, do not enter a password on the command line. Use the interactive version instead. show Lists all existing PKI-based certificates on the switch.
  • Page 906 secCertUtil To generate a CSR in noninteractive mode: switch:admin> seccertutil gencsr -country US -state California -locality "San Jose" -org Brocade -orgunit software -cn 192.168.38.206 generating CSR, file name is: 192.168.38.206.csr Done To delete the CSR in interactive mode: switch:admin> seccertutil delcsr WARNING!!! About to delete CSR: 192.168.163.238.csr ARE YOU SURE (yes, y, no, n): [no] y...
  • Page 907 secCertUtil To import an FCAP CA certificate in interactive mode: switch:admin> seccertutil import -fcapcacert Select protocol [ftp or scp]: scp Enter IP address: 10.32.2.25 Enter remote directory: /users/myname/OPENSSL Enter certificate name (must have ".crt" or ".cer" ".pem" or ".psk" suffix):CACert.pem Enter Login Name: myname myname@10.32.2.25's password: Success: imported certificate [CACert.pem].
  • Page 908 secCertUtil To export an FCAP switch certificate in interactive mode: switch:admin> seccertutil export -fcapswcert Select protocol [ftp or scp]: scp Enter IP address: 10.32.2.25 Enter remote directory: /users/myname/OPENSSL Enter Login Name: myname myname@10.32.2.25's password: Success: exported FCAP switch certificate To export an FCAP switch CSR in interactive mode: switch:admin>...
  • Page 909 secCertUtil To display the FCAP PKI objects: switch:admin> seccertutil show -fcapall List of fcap files: Passphrase : Exist Private Key : Exist : Exist Certificate : Empty Root Certificate: Exist To list all LDAP certificates on a switch: switch:admin> seccertutil show -ldapcacert List of ldap ca certificate files: Sample.cer To display the content of the CSR one page at a time:...

  • Page 910: Secdefinesize

    secDefineSize secDefineSize Displays the size of the defined security database. SYNOPSIS secdefinesize DESCRIPTION Use this command to display the size of the defined security database. The command also displays the maximum database size. For switches running Fabric OS v6.2.0 and later, the maximum security database size is 1 Megabyte per logical switch.

  • Page 911: Secglobalshow

    secGlobalShow secGlobalShow Displays the current internal security state information. SYNOPSIS secglobalshow DESCRIPTION Use this command to display security server-specific information as a snapshot of its current state. The output may include information about the following: • General security parameters • The latest zone transaction •...
  • Page 912 secGlobalShow Zone Size (include enabled configuration) 312 bytes Zone sum e04b215b sec_db: free primaryDLPhase 0 ----wwnDL State----- usec --------- LOG CACHE --------- 14:08:50 813905136 secipadm_ipchange receives notification 14:08:50 850588912 secProcessIPChange starts processing 14:08:50 850588912 secProcessIPChange acks completion (Output truncated) SEE ALSO secActiveSize, secDefineSize Fabric OS Command Reference...

  • Page 913: Sechelp

    secHelp secHelp Displays information about security commands. SYNOPSIS sechelp DESCRIPTION Use this command to display a list of security commands with a brief description of the commands. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 914: Secpolicyabort

    secPolicyAbort secPolicyAbort Aborts all unsaved changes to the defined database. SYNOPSIS secpolicyabort DESCRIPTION Use this command to abort all changes to the defined security database that have not been saved to flash memory and to abort changes to policy creation and modification operations from all the switches if a fabric-wide consistency policy is not set for the particular policy.

  • Page 915: Secpolicyactivate

    secPolicyActivate secPolicyActivate Saves and activates the Defined Security Policy Set. SYNOPSIS secpolicyactivate DESCRIPTION Use this command to activate the current defined security policy to all switches in the fabric. This activates the policy set on the local switch or all switches in the fabric depending on the fabric-wide consistency policy.

  • Page 916: Secpolicyadd

    secPolicyAdd secPolicyAdd Adds members to an existing security policy. SYNOPSIS secpolicyadd "name","member[;member...]" DESCRIPTION Use this command to add one or more members to an existing access policy. Each policy corresponds to a management method. The list of members of a policy acts as an access control list for that management method.
  • Page 917 secPolicyAdd "member" Specify a list of one or more member switches to be included in the security policy. The list must be enclosed in quotation marks; members must be separated by semicolons. Depending on the policy type, members are specified as follows. FCS_POLICY or SCC_POLICY Members This policy type requires member IDs to be specified as WWN strings, Domains, or switch names.

  • Page 918: Secpolicycreate

    secPolicyCreate secPolicyCreate Creates a new security policy. SYNOPSIS secpolicycreate "name" [, "member[;member...]"] DESCRIPTION Use this command to create a new policy and to edit Switch Connection Control (SCC), Device Connection Control (DCC), and Fabric Configuration Server (FCS) policies on the local switch. All policies can be created only once, except for the DCC_POLICY_nnn.
  • Page 919 secPolicyCreate secpolicycreate DCC_POLICY "*" may be used to indicate DCC lockdown. This command creates a unique policy for each port in the fabric locking it down to the device connected or creating an empty policy to disallow any device to be connected to it.
  • Page 920 secPolicyCreate To create a device policy to allow two devices to attach to domain 3 ports 1 and 3 (the WWN of first device is 11:22:33:44:55:66:77:aa and the WWN of second device is 11:22:33:44:55:66:77:bb): primaryfcs:admin> secpolicycreate "DCC_POLICY_aB_7", \ "11:22:33:44:55:66:77:aa;11:22:33:44:55:66:77:bb;3[1,3]" DCC_POLICY_abc has been created. To create a SCC policy in a fabric with three switches: Check if a policy exists.

  • Page 921: Secpolicydelete

    secPolicyDelete secPolicyDelete Deletes an existing security policy. SYNOPSIS secpolicydelete name DESCRIPTION Use this command to delete an existing security policy from the defined security database. Run secPolicyActivate to delete the policies from the active security policy list. Deleting a security policy does not cause any traffic disruption.
  • Page 922 secPolicyDelete To delete all stale DCC policies in the fabric: primaryfcs:admin> secpolicydelete ALL_STALE_DCC_POLICY About to clear all STALE DCC policies ARE YOU SURE (yes, y, no, n): [no] y SEE ALSO secPolicyAbort, secPolicyActivate, secPolicyAdd, secPolicyCreate, secPolicyDump, secPolicyRemove, secPolicySave, secPolicyShow Fabric OS Command Reference 53-1001764-01...

  • Page 923: Secpolicydump

    secPolicyDump secPolicyDump Displays the members of one or all existing security policies. SYNOPSIS secpolicydump ["listtype"][,"name"] DESCRIPTION Use this command to display, without page breaks, the members of an existing policy in the active and defined (saved) databases. When issued without operands, this command displays the members of all security policies.
  • Page 924 secPolicyDump To display all security policies in the active database: switch:admin> secpolicydump "active" ____________________________________________________ ACTIVE POLICY SET FCS_POLICY Primary WWN DId swName -------------------------------------------------- 10:00:00:05:1e:39:5f:67 3 NeptuneSec 10:00:00:05:1e:90:09:4a - Unknown SCC_POLICY DId swName -------------------------------------------------- 10:00:00:05:1e:39:5f:67 3 NeptuneSec 10:00:00:05:1e:90:09:4a - Unknown DCC_POLICY_h1 Type DId swName --------------------------------------------------...
  • Page 925 secPolicyDump To display the SCC policies in the defined database: switch:admin> secpolicydump "Defined","SCC_POLICY" _________________________________________________ DEFINED POLICY SET SCC_POLICY DId swName ------------------------------------------------ 10:00:00:05:1e:39:5f:67 3 NeptuneSec 10:00:00:05:1e:90:09:4a - Unknown To display the SCC policies in the active database: switch:admin> secpolicydump "Active","SCC_POLICY" __________________________________________________ ACTIVE POLICY SET SCC_POLICY DId swName...

  • Page 926: Secpolicyfcsmove

    secPolicyFCSMove secPolicyFCSMove Moves a member in the FCS policy. SYNOPSIS secpolicyfcsmove [from, to] DESCRIPTION Use this command to move an FCS member from one position to another position in the FCS list. Only one FCS can be moved at a time. The first FCS switch in the list that is also present in the fabric is the Primary FCS.
  • Page 927 secPolicyFCSMove 10:00:00:05:1e:35:cd:ef 200 switch3 switch:admin> secpolicyfcsmove 3,1 ____________________________________________________ DEFINED POLICY SET FCS_POLICY Primary WWN DId swName ------------------------------------------------- 10:00:00:05:1e:35:cd:ef 200 switch3 10:00:00:05:1e:39:5f:67 2 switch1 10:00:00:05:1e:04:ef:0e 4 switch2 switch:admin> secpolicyactivate About to overwrite the current Active Policy Set. ARE YOU SURE (yes, y, no, n): [no] y secpolicyactivate command was completed successfully.

  • Page 928: Secpolicyremove

    secPolicyRemove secPolicyRemove Removes members from an existing security policy. SYNOPSIS secpolicyremove "name" ,"member[;member...]" DESCRIPTION Use this command to remove one or more members from an existing security policy. It is not possible to remove all members from the FCS_POLICY; the local switch WWN cannot be deleted from the FCS policy.
  • Page 929 secPolicyRemove Selects all ports on the switch. [3, 9] Selects ports 3 and 9 and all devices attached to those ports. [1-3, 5] Selects ports 1 through 3 and 5 and all devices attached to those ports. Selects all ports on the switch and devices currently attached to those ports. EXAMPLES To remove a member that has a WWN of 12:24:45:10:0a:67:00:40 from SCC policy: switch:admin>...

  • Page 930: Secpolicysave

    secPolicySave secPolicySave Saves a defined security policy to persistent memory. SYNOPSIS secpolicysave DESCRIPTION Use this command to save a defined security policy to persistent memory. SecPolicySave saves the modified SCC, DCC, and FCS policies to the Defined Security Policy Set on the local switch. NOTES This command is always a local switch operation.

  • Page 931: Secpolicyshow

    secPolicyShow secPolicyShow Displays an existing security policy including the FCS policy. SYNOPSIS secpolicyshow ["policy_set"[", name"]] DESCRIPTION Use this command to display the members of an existing policy in the Active or Defined security policy set. The command can be issued from all FCS switches. This command displays the policy database one page at a time.
  • Page 932 secPolicyShow To display all security policies from defined databases: switch:admin> secpolicyshow "defined" __________________________________________________ DEFINED POLICY FCS_POLICY Primary WWN DId swName __________________________________________________ 10:00:00:60:69:30:15:5c 1 primaryfcs 10:00:00:60:69:30:1e:62 4 switch ___________________________________________________ SEE ALSO fddCfg, secPolicyAbort, secPolicyActivate, secPolicyAdd, secPolicyCreate, secPolicyDelete, secPolicyDump, secPolicyRemove, secPolicySave Fabric OS Command Reference 53-1001764-01...

  • Page 933: Secstatsreset

    secStatsReset secStatsReset Resets one or all security statistics to 0. SYNOPSIS secstatsreset [name][,"domain[;domain]"] DESCRIPTION Use this command to reset one or all security statistics to 0. This command can be issued on any switch to reset the security statistics on the local switch or chassis. If an FCS policy is enabled and secStatsReset is issued on the primary FCS switch, this command can reset security statistics for any or all switches in the fabric.
  • Page 934 secStatsReset To reset DCC_POLICY statistics on domains 1 and 69: primaryfcs:admin> secstatsreset DCC_POLICY, "1;69" Reset DCC_POLICY statistic. SEE ALSO secStatsShow Fabric OS Command Reference 53-1001764-01...

  • Page 935: Secstatsshow

    secStatsShow secStatsShow Displays one or all security statistics. SYNOPSIS secstatsshow [name[,"domain[;domain]"]] DESCRIPTION Use this command to display one or all security statistics. This command can be issued on any switch to display local security statistics. If an FCS policy is enabled and secStatsShow is issued on the primary FCS switch, this command can retrieve and display the security statistics for any or all switches in the fabric.
  • Page 936 secStatsShow EXAMPLES To display the LOGIN policy statistics for the local domain. switch:admin> secstatsshow LOGIN Fabric Statistics: Domain 1: Name Value ========================================= LOGIN To display statistic information for TELNET_POLICY for all switches in the fabric from the primary FCS switch. primaryfsc:admin>...

  • Page 937: Sensorshow

    sensorShow sensorShow Displays sensor readings. SYNOPSIS sensorshow DESCRIPTION Use this command to display the current temperature, fan, and power supply status and readings from sensors located on the switch. The actual location of the sensors varies, depending on the switch type. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 938: Serdestunemode

    serDesTuneMode serDesTuneMode Configures and displays SerDes values on the Brocade FC8-16. SYNOPSIS serdestunemode --set serdestunemode --reset serdestunemode --show serdestunemode --help DESCRIPTION Use this command to set the SerDes tuning mode for the Brocade FC8-16 port blade and to display the configuration.
  • Page 939 serDesTuneMode To disable SerDes tuning mode and reset the SerDes values to defaults: switch:admin> serdestunemode --reset serdestunemode is turned ff New serdes values reset on slot = 2 New serdes values reset on slot = 7 switch:admin> serdestunemode --show serdestunemode is disabled SEE ALSO None Fabric OS Command Reference...

  • Page 940: Setcontext

    setContext setContext Sets the logical switch context to a specified FID. SYNOPSIS setcontext FID DESCRIPTION Use this command to set the logical switch context to a specified fabric ID (FID). The FID uniquely defines a partition as a logical switch. Use lscfg --show -cfg to display currently configured partitions and their FIDs.

  • Page 941: Setdbg

    setDbg setDbg Sets the debug level of the specified module. SYNOPSIS setdbg [module_name][level] DESCRIPTION Use this command to set the debug level of a specified module. Debug levels filter the display of debug messages to the serial console. By default, no debug messages are displayed. High debug level values can generate a large volume of messages, degrading the system response time.

  • Page 942: Setverbose

    setVerbose setVerbose Specifies module verbose level. SYNOPSIS setverbose [module_name][level] DESCRIPTION Use this command to set the verbose level of the specified module. These levels filter the display of the debug message to the serial console. By default, no debug messages are displayed. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 943: Sfpshow

    sfpShow sfpShow Displays Small Form-factor Pluggable (SFP) information. SYNOPSIS sfpshow sfpshow [slot/]geport [ -f] sfpshow -all sfpshow -health DESCRIPTION Use this command to display information about Serial Identification SFPs (also known as module definition "4" SFPs). These SFPs provide extended information that describes the SFP capabilities, interfaces, manufacturer, and other information.
  • Page 944 sfpShow -all Displays detailed data for all available SFPs on the switch. This operand is not compatible with slot/port operands. -health Displays SFP health status information from Fabric Watch for 10G and 16G SFPs and for 16G QSFPs (Quad Small Form-factor Pluggables). When Fabric Watch monitoring of SFPs is enabled with the thMonitor command, Fabric Watch monitors diagnostic SFP parameters such as current, voltage, receiver power, transmit power, and temperature.
  • Page 945 sfpShow Slot 2/Port 11: id Slot 2/Port 12: id Slot 2/Port 13: id Slot 2/Port 14: id Slot 2/Port 15: id Slot 3/Port 0: id (sw) Vendor: BROCADE \ Serial No: HAA110491000HJ2 Speed: 4,8,16_Gbps Health: Green Slot 3/Port 1: id (sw) Vendor: BROCADE \ Serial No: HAA110491000HN2 Speed: 4,8,16_Gbps Health: Green Slot...
  • Page 946 sfpShow To display detailed information about all SFPs: switch:user> sfpshow -all (output trunctaed) ============= Slot 2/Port 14: ============= Port 30 does not use an SFP! ============= Slot 2/Port 15: ============= Port 31 does not use an SFP! ============= Slot 3/Port ============= Identifier: Connector:...
  • Page 947 sfpShow To display mini-SFPs on a DCX-4S with a FC8-64 blade: switch:user> setcontext 52 switch:user> sfpshow Slot 8/Port 60: id (sw) Vendor: BROCADE Serial No: UYA109291003972 Speed: 2,4,8_Gbps Slot 8/Port 61: id (sw) Vendor: BROCADE Serial No: UYA109301011012 Speed: 2,4,8_Gbps Slot 8/Port 62: id (sw) Vendor: BROCADE Serial No: UYA109291004082...
  • Page 948 sfpShow Length 50u: (units 10 meters) Length 62.5u:0 (units 10 meters) Length Cu: (units 1 meter) Vendor Name: BROCADE Vendor OUI: 00:05:1e Vendor PN: 57-1000042-01 Vendor Rev: Wavelength: (units nm) Options: 0010 Tx_Disable BR Max: BR Min: Serial No: CZA109302000053 Date Code: 090504 DD Type:...

  • Page 949: Shellflowcontroldisable

    shellFlowControlDisable shellFlowControlDisable Disables XON/XOFF flow control on the console serial port. SYNOPSIS shellflowcontroldisable DESCRIPTION Use this command to disable XON/XOFF flow control on the console serial port. Flow control is disabled by default. Because this command changes the flow control on the console serial port, it must be executed from a session that is logged in from the console serial port.

  • Page 950: Shellflowcontrolenable

    shellFlowControlEnable shellFlowControlEnable Enables XON/XOFF flow control on the console serial port. SYNOPSIS shellflowcontrolenable DESCRIPTION Use this command to enable XON/XOFF flow control to the shell task. Flow control is disabled by default. Because this command changes the flow control on the console serial port, it must be executed from a session that is logged in from the console serial port.

  • Page 951: Slotpoweroff

    slotPowerOff slotPowerOff Removes power from a slot. SYNOPSIS slotpoweroff slot DESCRIPTION Use this command to turn off the power to a blade unit. The slot must have a valid blade unit present and the blade unit must be of a type that can be powered off. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 952: Slotpoweron

    slotPowerOn slotPowerOn Restores power to a slot. SYNOPSIS slotpoweron slot DESCRIPTION Use this command to turn on the power to a blade unit. The slot must have a valid blade unit present and the blade unit must be currently powered off. The slotShow command reports such slots as being in the state of INSERTED, NOT POWERED ON.

  • Page 953: Slotshow

    slotShow slotShow Displays the status of all slots in the system. SYNOPSIS slotshow [-m] [-p] DESCRIPTION Use this command to display the current status of each slot in the system. Depending on the option used, the command retrieves information on blade type, blade ID, status, Brocade model name, and power usage for each slot in the switch or chassis.
  • Page 954 slotShow FC10-6 switch blade FS8-18 application processor blade CR4S-8 core blade CP8 control processor blade FC8-48 switch blade Core8 core blade FC8-32 switch blade FCoE10-24 application processor blade FX8-24 application processor blade FC8-64 switch blade FC16-48 switch blade FC16-32 switch blade CR16-8 core blade CR16-4 core blade FC8-32E switch blade...
  • Page 955 slotShow INITIALIZING The blade is present, powered on, and initializing hardware components. ENABLED The blade is on and fully enabled. DISABLED The blade is powered on but disabled. FAULTY The blade is faulty because an error was detected. UNKNOWN The blade is inserted but its state cannot be determined. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 956 slotShow To display the Brocade model name for each blade on a Brocade DCX 8510-8: switch:user> slotshow -m Slot Blade Type Status ------------------------------------------------- SW BLADE FC16-32 ENABLED SW BLADE FC16-48 ENABLED SW BLADE FC16-32 ENABLED SW BLADE FC16-48 ENABLED CORE BLADE CR16-8 ENABLED CP BLADE...
  • Page 957 slotShow To display power consumption information on a Brocade DCX 8510-4: switch:user> slotshow -p Slot Blade Type DC Power Status Consumption ------------------------------------------------- UNKNOWN VACANT SW BLADE ENABLED CORE BLADE ENABLED CP BLADE ENABLED CP BLADE ENABLED CORE BLADE ENABLED UNKNOWN VACANT AP BLADE ENABLED...

  • Page 958: Snmpconfig

    snmpConfig snmpConfig Manages the SNMP agent configuration. SYNOPSIS snmpConfig --show | --set | --default | --enable | --disable [snmpv1 | snmpv3 | | mibCapability | systemGroup | seclevel] snmpConfig --set mibCapability [-mib_name mib_name [-bitmask bit_mask]] snmpConfig --enable | --disable mibCapability -mib_name mib_name [-trap_name trap_name] snmpConfig --enable | --disable snmpv1 snmpConfig --help...
  • Page 959 snmpConfig --set Sets the SNMP agent configuration data of the specified category. This operand displays the current settings and then prompts you to change the values for each parameter. --default Sets the SNMP agent configuration data for a specified item to the default values. Generally, these default values may be available in the configuration database.
  • Page 960 snmpConfig SNMPv1 Configuration Parameters The agent supports six communities and their associated trap recipients and trap recipient severity levels. The first three communities are for read-write (rw) access and the last three are for read-only (ro) access. The default value for the trap recipient of each community is 0.0.0.0. The length of the community string should be in the range of 2 to 16 characters.
  • Page 961 snmpConfig • User 5: snmpuser2 • User 6: snmpuser3 The --default option sets the user name and password to default. If an FCS policy is enabled, the configuration must be updated on the primary switch and the nonprimary switches; unlike community strings, user names and passwords are not distributed for other switches in the fabric.
  • Page 962 snmpConfig ____________________________________________________ FA-MIB Enabled connUnitStatusChange(1) Enabled connUnitAddedTrap (2) Enabled connUnitDeletedTrap (3) Enabled connUnitEventTrap (4) 0x10 Enabled connUnitSensorStatusChange(5) 0x20 Enabled connUnitPortStatusChange (6) 0x40 Enabled ____________________________________________________ FICON-MIB Enabled linkRNIDDeviceRegistration (1) Enabled linkRNIDDevicedeRegistration(2) 0x4 Enabled linkLIRRListenerAdded (3) Enabled linkLIRRListenerRemoved (4) 0x10 Enabled linkRLIRFailureIncident (5) 0x20 Enabled ____________________________________________________...
  • Page 963 snmpConfig Warning Informational -mib_name mib_name Specifies the name of the MIB to be configured. This operand is required if you want to configure MIB traps noninteractively. Valid MIB names include the following. • FE-MIB • SW-MIB • FA-MIB • FICON-MIB •...
  • Page 964 snmpConfig SNMP GET security level Specifies security level for all SNMP GET requests. SNMP SET security level Specifies security level for SNMP SET requests only. Values include the following: No security. Authentication only. Authentication and Privacy. EXAMPLES To display the SNMPv1 configuration: switch:admin>...
  • Page 965 snmpConfig To set the access control configuration: switch:admin> snmpconfig --set accessControl SNMP access list configuration: Access host subnet area in dot notation: [0.0.0.0] 192.168.0.0 Read/Write? (true, t, false, f): [true] Access host subnet area in dot notation: [0.0.0.0] 10.32.148.0 Read/Write? (true, t, false, f): [true] f Access host subnet area in dot notation: [0.0.0.0] Read/Write? (true, t, false, f): [true] Access host subnet area in dot notation: [0.0.0.0] 10.33.0.0...
  • Page 966 snmpConfig swPmgrEventTrap: NO swFabricReconfigTrap: NO swFabricSegmentTrap: NO swExtTrap: NO [...] To enable the SW-MIB MIB only without changing the current trap configuration: switch:admin> snmpconfig --enable mibCapability -mib_name SW-MIB Operation succeeded switch:admin> snmpconfig --show mibCapability [...] SW-TRAP: YES swFault: NO swSensorScn: NO swFCPortScn: NO swEventTrap: YES DesiredSeverity:4...
  • Page 967 snmpConfig To display the configuration for all MIBs and associated traps: switch:admin> snmpconfig --show mibCapability FE-MIB: YES SW-MIB: YES FA-MIB: YES FICON-MIB: YES HA-MIB: YES FCIP-MIB: YES ISCSI-MIB: YES IF-MIB: YES BD-MIB: YES SW-TRAP: NO swFault: NO swSensorScn: NO swFCPortScn: NO swEventTrap: NO DesiredSeverity:None swFabricWatchTrap: NO...
  • Page 968 snmpConfig To restore the systemGroup configuration to default values: switch:admin> snmpconfig --default systemGroup ***** This command will reset the agent's system group configuration back to factory default ***** sysDescr = Fibre Channel Switch sysLocation = End User Premise sysContact = Field Support authTraps = 0 (OFF) ***** Are you sure? (yes, y, no, n): [no] y...
  • Page 969 snmpConfig Trap Entry 2: 10.35.52.34 Trap Port: 162 Trap User: snmpadmin2 Trap recipient Severity level: 5 Trap Entry 3: No trap recipient configured yet Trap Entry 4: No trap recipient configured yet Trap Entry 5: No trap recipient configured yet Trap Entry 6: No trap recipient configured yet To enable inform requests to be sent instead of trap requests:...
  • Page 970 snmpConfig To block access to SNMPv1/2c switch:admin> snmpconfig --disable snmpv1 switch:admin> snmpconfig --show SNMPv1 community and trap recipient configuration: Community 1: ram (rw) Trap recipient: 172.26.4.84 Trap port: 162 Trap recipient Severity level: 5 Community 2: OrigEquipMfr (rw) No trap recipient configured yet Community 3: private (rw) No trap recipient configured yet Community 4: public (ro)

  • Page 971: Snmptraps

    snmpTraps snmpTraps Sends or displays SNMP traps. SYNOPSIS snmptraps --send [-trap_name trap_name] [-ip_address ip_address] snmptraps --show [port] snmptraps --block -port [slot]port | ALL snmptraps --unblock -port [slot]port | ALL snmptraps --help DESCRIPTION Use this command to manage specific Simple Network Management Protocol (SNMP) traps. Use the --send option to send a specific SNMP trap to a recipient indicated by its IP address.
  • Page 972 snmpTraps --help Displays the command usage. EXAMPLES To send all traps to the configured recipients: switch:admin> snmpTraps --send Number of traps sent : 27 To send a bottleneck detection trap to recipient 172.16.0.12 switch:admin> snmptraps --send -trap_name \ bd-trap-ip_address 172.16.0.12. Number of traps sent : 1 To display the traps and MIBs supported in Fabric OS: switch:admin>...
  • Page 973 snmpTraps To configure the switch so that only two ports receive the port traps, you block all traps and then unblock the ports you want to receive the traps: switch:admin> snmpTraps --block ALL switch:admin> snmpTraps --unblock 17 switch:admin> snmpTraps --unblock 18 To display the blocked port status: switch:admin>...

  • Page 974: Spinfab

    spinFab spinFab Runs functional test of interswitch link (ISL) cabling and trunk group operation. SYNOPSIS spinfab [-nmegs count] [-framesize bytes] [-ports itemlist] [-setfail mode] [-fports flag] DESCRIPTION Use this command to verify the intended functional operation of interswitch links (ISLs) at the maximum speed by setting up the routing hardware so that test frames received by each E_Port are retransmitted on the same E_Port.
  • Page 975 spinFab • Long Distance ports. • F_Ports connected to an HBA. The following ports do not support the spinFab test: • Interchassis links (ICL) ports • F_Ports connected to an Access Gateway • EX_Ports • E_Ports connected to EX_Ports • If Access Gateway mode is enabled, spinFab tests only the F_Ports connected to Brocade-branded HBAs and skips all other ports (F_Ports connected to non-Brocade branded HBAs and N_Ports).
  • Page 976 spinFab Includes F_Ports in the port list for testing. DIAGNOSTICS When it detects failures, the test may report one or more of the following error messages. If errors persist, contact Technical Support. DATA ERR_STAT ERR_STATS ERR_STATS_2LONG ERR_STATS_BADEOF ERR_STATS_BADOS ERR_STATS_C3DISC ERR_STATS_CRC ERR_STATS_ENCIN ERR_STATS_ENCOUT ERR_STATS_TRUNC...

  • Page 977: Sshutil

    sshUtil sshUtil Manages public key authentication. SYNOPSIS sshutil allowuser user name sshutil showuser sshutil importpubkey sshutil showpubkeys sshutil delpubkeys sshutil genkey sshutil exportpubkey sshutil delprivkey sshutil help DESCRIPTION Use this command to enable and manage SSH public key authentication on a switch. SSH public key authentication provides a mechanism for authenticating an authorized user without a password.
  • Page 978 sshUtil OPERANDS This command supports the following operands: allowuser user name Configures the specified user to perform public key authentication and all related management operations for outgoing public key authentication. This operation can only be performed by the default admin. The default admin is, by default, a configured user.
  • Page 979 sshUtil genkey Generates an RSA private/public key pair on the local switch. This option can be performed only by a configured user. This option enables authentication for outgoing connections from the switch to a remote host. You must export the public key to a remote host to complete the setup.
  • Page 980 sshUtil /users/home/username/.ssh/id_dsa. Your public key has been saved in /users/home/username/.ssh/id_dsa.pub. The key fingerprint is: 3 0:9f:ae:b6:7f:7e:55:e4:b2:7a:51:f0:95:44:5c:d1 Import the public key from the remote host to the local switch: switch:username> sshutil importpubkey Enter user name for whom key is imported: username Enter IP address:Remote host IP Address Enter remote directory: ~username/.ssh Enter public key name(must have .pub suffix):id_dsa.pub...
  • Page 981 sshUtil Export the public key to a remote host: switch:username> sshutil exportpubkey Enter IP address: remote host IP Address Enter remote directory: ~username/.ssh Enter login name:username Password:****** public key out_going.pub is exported successfully. Append the public key to the authorized_keys file on the remote host: username@remotehost>...

  • Page 982: Statsclear

    statsClear statsClear Clears port and diagnostic statistics. SYNOPSIS statsclear [--slot slot] [-uports itemlist] [-bports itemlist] [-use_bports value] DESCRIPTION Use this command to clear the port and diagnostics statistics for the specified list of blade or user ports. You can issue this command on the FR4-18i blade in a Brocade chassis; however, the command is not supported by the Brocade platform and does not affect any other feature operations.

  • Page 983: Stopporttest

    stopPortTest stopPortTest Terminates the running portTest. SYNOPSIS stopporttest [-ports itemlist] DESCRIPTION Use this command to terminate the portTest command. Refer to the portTest help page for more information. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 984: Supportffdc

    supportFfdc supportFfdc Modifies or displays the first-fault data capture (FFDC) daemon. SYNOPSIS supportffdc [--disable | --enable | --show] DESCRIPTION Use this command to disable or enable the FFDC events, or to display the current configuration. If disabled, the daemon does not capture any data even when a message with FFDC attributes is logged. FFDC is enabled by default.

  • Page 985: Supportftp

    supportFtp supportFtp Sets, clears, or displays support FTP parameters and enables or disables auto file transfer. SYNOPSIS supportftp [-S] supportftp -s [-h host][-u username][-p password] [-d remotedirectory] [-l protocol] supportftp -t hours supportftp -R supportftp -e supportftp -d DESCRIPTION Use this command to set, clear, or display supportFtp parameters. The parameters set by this command are used by the supportSave and traceDump commands.
  • Page 986 supportFtp Clears all supportFtp parameters. Enables auto file transfer. Trace dump files are automatically transferred to a designated FTP server. The server parameters must be set before you can enable auto file transfer. Disables auto file transfer. EXAMPLES To set the FTP parameters: switch:admin>...

  • Page 987: Supportsave

    supportSave supportSave Saves RASLOG, TRACE, supportShow, core file, FFDC data, and other support information SYNOPSIS supportsave supportsave [-n] [-c] [-k] [-u user_name -p password -h host_ip -d remote_dir -l protocol] supportsave [-R] supportsave [-U -d remote_dir] supportsave [-t timeout_multiplier] DESCRIPTION Use this command to collect RASLOG, TRACE, supportShow, core file, FFDC data and other support information to a remote FTP location.
  • Page 988 supportSave The -c option is mutually exclusive with -u, -p, -h, and -d. Specifies that the supportFtp auto file transfer configuration transfer only core and FFDC files in noninteractive mode. -u user_name Specifies the user name for the FTP, SCP, or SFTP server. This operand is optional;...
  • Page 989 supportSave automatically generate and transfer latest one. \ There will be two trace dump files transferred after this command. OK to proceed? (yes, y, no, n): [no] y Host IP or Host Name: 192.168.126.115 User Name: admin Password:******* Network Protocol(1-auto-select, 2-FTP, 3-SCP, 4-SFTP) [1]: 4 Remote Directory: /temp/support Saving support information for chassis:HL51,module:RAS...
  • Page 990 supportSave To run supportSave without confirmation on a Brocade DCX with AP blades included using supportFTP parameters (only Active CP output is shown): switch:admin> supportsave -n -c Saving support information for chassis:ras2,module:RAS... Saving support information for chassis:ras2,module:TRACE_OLD... Saving support information for chassis:ras2,module:TRACE_NEW... Saving support information for chassis:ras2,module:FABRIC...

  • Page 991: Supportshow

    supportShow supportShow Displays switch information for debugging purposes. SYNOPSIS supportshow supportshow [slot /]port1[-port2] [lines] DESCRIPTION Use this command to display support information from groups of preselected Fabric OS and Linux commands and other support and debugging information. You can specify a port or a range of ports for which to display this information.
  • Page 992 supportShow fcip FCIP group commands, disabled by default. Access Gateway group commands, disabled by default. dce_hsl DCE group commands, enabled by default. crypto Encryption group commands, disabled by default. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 993 supportShow filter disabled perfmon disabled ficon disabled iswitch enabled asic_db enabled fcip disabled (not applicable to this platform) enabled dce_hsl enabled **** Begin start_port_log_cmd group **** Sun Dec 6 05:10:14 PST 2009 portlogdump: CURRENT CONTEXT -- 0 , 128 portlogdump time task event...

  • Page 994: Supportshowcfgdisable

    supportShowCfgDisable supportShowCfgDisable Disables a group of commands under the supportShow command. SYNOPSIS supportshowcfgdisable os | exception | port | fabric | services | security | network | portlog | system | extend | filter | perfmon | ficon | iswitch | asic_db | ag | dce_hsl | crypto | fcip DESCRIPTION Use this command to disable a group of commands under the supportShow command.
  • Page 995 supportShowCfgDisable asic_db Disables the ASIC DB group commands. Disables the Access Gateway group commands. dce_hsl Disables the DCE group commands. crypto Disables the encryption group commands fcip Disables the FCIP group commands. Supported only on the Brocade 7800/FX8-24 and FR4-18i. EXAMPLES To disable the OS group of commands under the supportShow command: switch:admin>...

  • Page 996: Supportshowcfgenable

    supportShowCfgEnable supportShowCfgEnable Enables a group of commands to be displayed under the supportShow command. SYNOPSIS supportshowcfgenable os | exception | port | fabric | services | security | network | portlog | system | extend | filter | perfmon | ficon | iswitch | asic_db | ag | dce_hsl |crypto | fcip DESCRIPTION Use this command to enable a group of commands to be displayed under the supportShow command.
  • Page 997 supportShowCfgEnable asic_db Enables the ASIC DB group commands. Enables the Access Gateway group commands. dce_hsl Disables the DCE group commands crypto Enables the encryption group commands. fcip Enables the FCIP group commands. Supported only on the Brocade 7800/FX8-24 and FR4-18i platforms. EXAMPLES To enable a group of commands under the supportShow command: switch:admin>...

  • Page 998: Supportshowcfgshow

    supportShowCfgShow supportShowCfgShow Displays the groups of commands enabled for display by the supportShow command. SYNOPSIS supportshowcfgshow DESCRIPTION Use this command to display the groups of commands enabled for display by the supportShow command. Use the supportShowCfgEnable and the supportShowCfgDisable commands to modify which groups are displayed.
  • Page 999 supportShowCfgShow iswitch enabled asic_db enabled fcip enabled enabled dce_hsl enabled SEE ALSO supportShow, supportShowCfgDisable, supportShowCfgEnable Fabric OS Command Reference 53-1001764-01...

  • Page 1000: Switchbeacon

    switchBeacon switchBeacon Sets switch beaconing mode on or off. SYNOPSIS switchbeacon [mode] DESCRIPTION Use this command to enable or disable switch beaconing mode. Switch beaconing can be used to locate a failing unit. When beaconing mode is turned on, the port LEDs flash amber, left to right and right to left, from port 0 to the highest port number and back to port 0.

This manual is also suitable for:

Fabric os v7.0.1

Table of Contents