Qlogic SANbox 3810 Interface Manual

Qlogic SANbox 3810 Interface Manual

Fibre channel
Hide thumbs Also See for SANbox 3810:
Table of Contents

Advertisement

SANbox 3810
Fibre Channel Switch
Command Line Interface Guide
Firmware Version 7.4
59270-00 A

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the SANbox 3810 and is the answer not in the manual?

Questions and answers

Subscribe to Our Youtube Channel

Summary of Contents for Qlogic SANbox 3810

  • Page 1 SANbox 3810 Fibre Channel Switch Command Line Interface Guide Firmware Version 7.4 59270-00 A...
  • Page 2: Document Revision History

    QLogic Corporation reserves the right to change product specifications at any time without notice. Applications described in this document for any of these products are for illustrative purposes only. QLogic Corporation makes no representation nor warranty that such applications are suitable for the specified use without further testing or modification.
  • Page 3: Table Of Contents

    Table of Contents Command Line Interface Usage Logging In to the Switch ........Opening and Closing an Admin Session .
  • Page 4 SANbox 3810 Fibre Channel Switch Command Line Interface Guide Managing the Security Association Database ....3-14 Creating an Association ....... 3-15 Deleting an Association .
  • Page 5 SANbox 3810 Fibre Channel Switch Command Line Interface Guide Custom Firmware Installation ....... 4-22 Testing a Switch .
  • Page 6 SANbox 3810 Fibre Channel Switch Command Line Interface Guide Removing Inactive Zone Sets, Zones, and Aliases ....6-14 Managing Zone Sets ......... . 6-15 Create a Zone Set .
  • Page 7 SANbox 3810 Fibre Channel Switch Command Line Interface Guide Resetting the Security Database ....... . . 8-10 Managing Security Sets .
  • Page 8 SANbox 3810 Fibre Channel Switch Command Line Interface Guide Configuring the Call Home Service ....... 11-5 Managing the Call Home Database .
  • Page 9 SANbox 3810 Fibre Channel Switch Command Line Interface Guide Group..........13-24 Hardreset.
  • Page 10 SANbox 3810 Fibre Channel Switch Command Line Interface Guide Show Alarm ..........13-129 Show Broadcast .
  • Page 11 SANbox 3810 Fibre Channel Switch Command Line Interface Guide Test Port ..........13-182 Test Status .
  • Page 12 SANbox 3810 Fibre Channel Switch Command Line Interface Guide 13-12 Port Threshold Alarm Configuration Defaults......13-68 13-13 Zoning Configuration Defaults .
  • Page 13 Preface This guide describes the features and use of the command line interface for ® SANbox 3810 Fibre Channel switches running firmware version 7.4. The SANbox 3810 switch is a standalone, 8-port, 8-Gbps Fibre Channel switch with a single power supply. This preface describes the intended audience, related materials, and technical support.
  • Page 14: Intended Audience

    SANbox 3810 Fibre Channel Switch Installation Guide, publication number 59268-00 SANbox 3810 QuickTools Switch Management User Guide, publication number 59269-00 QLogic Fibre Channel Switch Event Message Guide, publication number 59060-07 SANbox Simple Network Management Protocol Reference Guide, publication number, 59047-10...
  • Page 15: Technical Support

    The QLogic knowledge database contains troubleshooting information for the QLogic adapters. Access the data base from the QLogic web site, www.qlogic.com. Click the Support tab, Use the search engine at the top of the page to look for specific troubleshooting information.
  • Page 16 Preface Technical Support Notes 59270-00 A...
  • Page 17: Command Line Interface Usage

    Command Line Interface Usage This section describes the following tasks: Logging In to the Switch Opening and Closing an Admin Session Entering Commands Getting Help Setting Page Breaks Creating a Support File Downloading and Uploading Files NOTE: Throughout this document, references in text to commands and keywords use initial capitalization for clarity.
  • Page 18: Logging In To The Switch

    Command Line Interface Usage Logging In to the Switch Logging In to the Switch To log in to a switch through Telnet, do the following: Open a command line window on the workstation and enter the Telnet command followed by the switch IP address. The IP address can be one of the following: 4-byte IP version 4 address 16-byte IP version 6 address...
  • Page 19: Opening And Closing An Admin Session

    Command Line Interface Usage Opening and Closing an Admin Session NOTE: A switch supports a combined maximum of 19 logins or sessions, which are reserved as follows. Additional logins will be refused. 4 logins or sessions for internal applications such as management server and SNMP 9 high priority Telnet sessions 6 logins or sessions for Enterprise Fabric Suite™...
  • Page 20: Entering Commands

    Command Line Interface Usage Entering Commands Entering Commands The command-line completion feature makes entering and repeating commands easier. Table 1-1 describes the command-line completion keystrokes. Table 1-1. Command-Line Completion Keystroke Effect Completes the command line. Enter at least one character and press the tab key to complete the command line.
  • Page 21: Setting Page Breaks

    Command Line Interface Usage Setting Page Breaks Setting Page Breaks Some display commands deliver so much information to the screen that it scrolls by too quickly to read it. You can limit the display to 20 lines by turning on page breaks.
  • Page 22: Creating A Support File

    Command Line Interface Usage Creating a Support File Creating a Support File If you contact technical support about a problem with your switch, they may request that you create and send a support file. This support file contains all of the switch configuration information, which can be helpful in diagnosing the problem.
  • Page 23 Command Line Interface Usage Creating a Support File To download the support file from the switch to the workstation, do the following: Open a terminal window and move to the directory where you want to download the support file. Enter the FTP command and the switch IP address or symbolic name. >ftp 10.0.0.1 When prompted for a user and password, enter the FTP account name and password (images, images).
  • Page 24: Downloading And Uploading Files

    Command Line Interface Usage Downloading and Uploading Files Downloading and Uploading Files Several files that reside on the switch can be downloaded to the workstation for examination or for safekeeping. These files include the following: Backup configuration file (configdata) Log files (logfile) Support files (dump_support.tgz) You can upload firmware image files or backup configuration files to the switch to reinstall firmware or restore a corrupted configuration.
  • Page 25 Command Line Interface Usage Downloading and Uploading Files For more information about reinstallation, backup and restore, and creating support and log files: Refer to “Installing Firmware” on page 4-19 for information about installing firmware. Refer to “Backing Up and Restoring a Switch Configuration” on page 4-14 for information about backing up and restoring a switch configuration.
  • Page 26 Command Line Interface Usage Downloading and Uploading Files Notes 1-10 59270-00 A...
  • Page 27: User Account Configuration

    User Account Configuration User accounts and their respective passwords are the first line of switch security. A user account consists of an account name, an authority level, and an expiration date. Switches come from the factory with certain user accounts defined for special purposes.
  • Page 28: Displaying User Account Information

    User Account Configuration Displaying User Account Information Displaying User Account Information You can display all user accounts defined on the switch (User Accounts command) or just those user accounts that are logged on (User List or Show Users commands). The following example displays all user accounts defined on the switch. Account information includes account name, authority, and expiration date.
  • Page 29: Creating User Accounts

    User Account Configuration Creating User Accounts Creating User Accounts A user account consists of an account name, an authority level, and an expiration date. The account name can be up to 15 characters: the first character must be alphanumeric; the remaining characters must be ASCII characters except semicolon (;), comma (,), #, and period (.).
  • Page 30: Modifying User Accounts And Passwords

    User Account Configuration Modifying User Accounts and Passwords Modifying User Accounts and Passwords Only the Admin user account can modify a user account, delete a user account, or change the password of another user account. However, all user accounts can change their own passwords.
  • Page 31: Network Configuration

    Network Configuration Network configuration consists of the IP parameters that identify the switch in the network and provide for IP security. This section describes the following network configuration tasks: Displaying the Network Configuration Configuring the Ethernet Port Verifying a Switch in the Network Managing IP Security Displaying the Network Configuration Show Fabric...
  • Page 32: Configuring The Ethernet Port

    Network Configuration Configuring the Ethernet Port Show Setup System command displays the entire switch network configuration, which includes the following: IP configurations (versions 4 and 6) DNS server configuration To display specific information, add the corresponding keyword. For example, to display IP version 6 configuration information, enter the Show Setup System Ipv6 command: SANbox #>...
  • Page 33 Network Configuration Configuring the Ethernet Port The network discovery method determines how the switch acquires its IP address. The IP address can come from the IP address that resides on the switch or from a server. The switch supports network discovery from the following server types: Bootstrap Protocol (BootP) Reverse Address Resolution Protocol (RARP) Dynamic Host Configuration Protocol (DHCP)
  • Page 34: Ip Version 6 Configuration

    Network Configuration Configuring the Ethernet Port IP Version 6 Configuration The switch supports IP version 6, which includes the following: Network discovery method IP address IP gateway address The network discovery method determines how the switch acquires its IP address. The IP address can come from the IP address (static) that resides on the switch, from a DHCP server, or it can be learned from a router through the Neighbor Discovery Protocol (NDP).
  • Page 35: Dns Server Configuration

    Network Configuration Configuring the Ethernet Port DNS Server Configuration A DNS server manages the host names for a fabric. This enables you to specify servers and switches by a meaningful name rather than IP address. To configure a DNS server, enter the Set Setup System Dns command in an Admin session as shown in the following example:...
  • Page 36: Verifying A Switch In The Network

    Network Configuration Verifying a Switch in the Network Verifying a Switch in the Network You can verify that a switch is communicating in the network using the Ping command. The following example successfully tests the network for a switch with IP address 10.20.11.57.
  • Page 37: Ip Security Concepts

    Network Configuration Managing IP Security To remove all IP security policies and associations, enter the Reset Ipsec command. SANbox (admin) #> reset ipsec The following subsections present IP security concepts and management tasks: IP Security Concepts Displaying IP Security Information Managing the Security Policy Database Managing the Security Association Database Resetting the IP Security Configuration...
  • Page 38: Displaying Ip Security Information

    Network Configuration Managing IP Security A security association defines the encryption algorithm and encryption key to apply when called by a security policy. A security policy may call several associations at different times, but each association is related to only one policy. The security association database is the set of all security associations.
  • Page 39: Ip Security Configuration History

    Network Configuration Managing IP Security The following example displays all active policies and associations: SANbox #> ipsec list Active IPsec Information Security Association Database ----------------------------- h2h-sh-sa h2h-hs-sa Security Policy Database ------------------------ h2h-hs-sp h2h-sh-sp Summary ------- Security Association Count: Security Policy Count: IP Security Configuration History To display the IP Security configuration history, enter the Ipsec...
  • Page 40: Ip Security Configuration Limits

    Network Configuration Managing IP Security IP Security Configuration Limits To display a summary of the objects in the IP Security configuration and their maximum limit, enter the Ipsec Limits command to as shown in the following example: SANbox #> ipsec limits Configured (saved) IPsec Information IPsec Attribute Maximum...
  • Page 41: Creating A Policy

    Network Configuration Managing IP Security Creating a Policy To create a policy, enter the Ipsec Policy Create command as shown in the following example: SANbox #> admin start SANbox (admin) #> ipsec edit SANbox (admin-ipsec) #> ipsec policy create h2h-sh-sp A list of attributes with formatting will follow.
  • Page 42: Deleting A Policy

    Network Configuration Managing IP Security Deleting a Policy To delete a user-defined policy, enter the Ipsec Policy Delete command as shown in the following example: SANbox #> admin start SANbox (admin) #> ipsec edit SANbox (admin-ipsec) #> ipsec policy delete policy_1 The security policy will be deleted.
  • Page 43: Modifying A User-Defined Policy

    Network Configuration Managing IP Security Modifying a User-Defined Policy To modify an existing user-defined policy, enter the Ipsec Policy Edit command in an Admin session and an Ipsec Edit session as shown in the following example. An asterisk (*) indicates a required entry. SANbox (admin-ipsec) #>...
  • Page 44: Renaming A User-Defined Policy

    Network Configuration Managing IP Security Renaming a User-Defined Policy To rename a policy (policy_1), enter the Ipsec Policy Rename command as shown in the following example: SANbox #> admin start SANbox (admin) #> ipsec edit SANbox (admin-ipsec) #> ipsec policy rename policy_1 policy_4 The security policy will be renamed.
  • Page 45: Creating An Association

    Network Configuration Managing IP Security Creating an Association To create an association, enter the Ipsec Association Create command as shown in the following example: SANbox #> admin start SANbox (admin) #> ipsec edit SANbox (admin-ipsec) #> ipsec association create h2h-sh-sa A list of attributes with formatting will follow.
  • Page 46: Deleting An Association

    Network Configuration Managing IP Security Deleting an Association To delete a user-defined association, enter the Ipsec Association Delete command as shown in the following example: SANbox #> admin start SANbox (admin) #> ipsec edit SANbox (admin-ipsec) #> ipsec association delete association_1 The security association will be deleted.
  • Page 47: Modifying A User-Defined Association

    Network Configuration Managing IP Security Modifying a User-Defined Association To modify an existing user-defined association, enter the Ipsec Association Edit command in an Admin session and an Ipsec Edit session as shown in the following example. An asterisk (*) indicates a required entry. SANbox (admin-ipsec) #>...
  • Page 48: Renaming A User-Defined Association

    Network Configuration Managing IP Security Renaming a User-Defined Association To rename a user-defined association (associaton_1), enter the Ipsec Association Rename command as shown in the following example: SANbox #> admin start SANbox (admin) #> ipsec edit SANbox (admin-ipsec) #> ipsec association rename association_1 association_4 The security association will be renamed.
  • Page 49 Network Configuration Managing IP Security Reset Ipsec command deletes all polices and associations from the switch, but does not require an Ipsec Edit session. SANbox #> admin start SANbox (admin) #> reset ipsec The IPsec configuration will be reset and the default values activated. Please confirm (y/n): [n] y Reset and activation in progress ..
  • Page 50 Network Configuration Managing IP Security Notes 3-20 59270-00 A...
  • Page 51: Switch Configuration

    Switch Configuration Switch configuration consists of the following tasks: Displaying Switch Information Managing Switch Services Managing Switch Configurations Paging a Switch Setting the Date and Time Resetting a Switch Installing Firmware Testing a Switch Managing Idle Session Timers Displaying Switch Information You can display the following types of the switch information: Name Server Information Switch Operational Information...
  • Page 52: Name Server Information

    Switch Configuration Displaying Switch Information Name Server Information Show Ns command displays the list of WWNs in fabric as shown in the following example: SANbox #> show ns all Seq Domain Port Port Type COS PortWWN NodeWWN --- ------ ------ ---- --- ------- ------- No entries found for domain ID 1.
  • Page 53: Switch Operational Information

    Switch Configuration Displaying Switch Information Switch Operational Information Show Switch command displays a variety of switch operational information. These include the switch WWN, domain ID, firmware version, administrative state, and operational state as shown in the following example: SANbox #> show switch Switch Information ------------------ SymbolicName...
  • Page 54: System Process Information

    Switch Configuration Displaying Switch Information System Process Information command displays system process information to help you determine what processes are running and CPU usage. The following example displays current system processes. SANbox #> ps PPID %CPU %MEM TIME ELAPSED COMMAND 0.3 00:00:04 2-03:02:31 cns 0.3 00:00:06...
  • Page 55: Elapsed Time Between Resets

    Switch Configuration Displaying Switch Information Elapsed Time Between Resets Uptime command displays the elapsed time since the switch was last reset and the reset method. A hot reset or non-disruptive firmware activation does not reset the elapsed time reported by this command. The following example displays the time since the last reset.
  • Page 56: Switch Configuration Parameters

    Switch Configuration Displaying Switch Information Switch Configuration Parameters Enter the Show Config Switch command to display the switch configuration parameters. These parameters determine the operational characteristics of the switch. Refer to Table 13-22 for a description these parameters. SANbox #> show config switch Configuration Name: default ------------------- Switch Configuration Information...
  • Page 57: Security Configuration Parameters

    Switch Configuration Displaying Switch Information Security Configuration Parameters Enter the Show Config Security command to display security configuration and port binding parameters. These parameters determine how security is applied to the switch. Refer to Table 13-20 for a description of the switch security configuration parameters.
  • Page 58: Firmware Information

    Switch Configuration Displaying Switch Information Table 4-1. Heartbeat LED Activity HeartBeatCode–HeartBeatStatus Description 1–Normal One blink per second–Normal operation 2–AppDied Two blink cluster–Internal firmware failure 3–PostFailed Three blink cluster–Fatal POST error 4–CorruptFilesystem Four blink cluster–Configuration file system error 5–Overheating Five blink cluster– Over temperature Firmware Information Enter the Show Version...
  • Page 59: Managing Switch Services

    Switch Configuration Managing Switch Services Managing Switch Services You can configure your switch to suit the demands of your environment by enabling or disabling a variety of switch services. You manage the switch services using the Show Setup Services Set Setup Services commands.
  • Page 60 Switch Configuration Managing Switch Services Enter the Set Setup Services command within an Admin session to configure the switch services as shown in the following example: SANbox #> admin start SANbox (admin) #> set setup services A list of attributes with formatting and current values will follow. Enter a new value or simply press the ENTER key to accept the current value.
  • Page 61: Managing Switch Configurations

    Switch Configuration Managing Switch Configurations Managing Switch Configurations The switch configuration determines the basic operational characteristics of the switch. A switch can save up to 10 configurations including the default configuration, named Default Config. The current switch operating characteristics are determined by the active configuration. Only one configuration can be active at one time.
  • Page 62: Deleting A Switch Configuration

    Switch Configuration Managing Switch Configurations Deleting a Switch Configuration Enter the Config Delete command in an Admin session to delete a configuration from the switch as shown in the following example. You cannot delete the active configuration nor the default configuration (Default Config). SANbox (admin) config delete config_2 Modifying a Switch Configuration To modify a switch configuration, you must open an Admin session with the...
  • Page 63 Switch Configuration Managing Switch Configurations The following is an example of the Set Config Switch command. Refer to Table 13-22 for a description of the switch configuration parameters. SANbox #> admin start SANbox (admin) #> config edit SANbox (admin-config) #> set config switch A list of attributes with formatting and default values will follow.
  • Page 64: Backing Up And Restoring A Switch Configuration

    Switch Configuration Managing Switch Configurations Backing Up and Restoring a Switch Configuration Successful management of switches and fabrics depends on the effective use of switch configurations. Backing up and restoring a configuration is useful to protect your work or for use as a template in configuring other switches. Backing up and restoring the switch configuration involves the following: Creating the Backup File Downloading the Configuration File...
  • Page 65: Restoring The Configuration File

    Switch Configuration Managing Switch Configurations Restoring the Configuration File The restore operation begins with FTP to upload the configuration file from the workstation to the switch, then finishes with a Telnet session and the Config Restore command. To upload the configuration file, config_switch_169_10112003 in this case, open and FTP session with account name images and password images.
  • Page 66: Paging A Switch

    Switch Configuration Paging a Switch Paging a Switch To help you locate a particular switch in a rack of switches, you can turn on the beacon feature with the Set Beacon command. This causes all port Logged-In LEDs to flash in unison. The following is an example of how to turn the beacon on and off.
  • Page 67: Setting The Date And Time Explicitly

    Switch Configuration Setting the Date and Time Setting the Date and Time Explicitly To set the switch date and time explicitly, use the Set Timezone Date commands. To change the time zone (to America/North Dakota, for example), enter the Set Timezone command in an Admin session, as shown in the following example: SANbox #>...
  • Page 68: Setting The Date And Time Through Ntp

    Switch Configuration Setting the Date and Time Setting the Date and Time through NTP An NTP server can automatically set the switch date and time. To configure the switch to use an NTP server, enter the Set Setup System Ntp command in an Admin session to enable the NTP client on the switch and specify the NPT server IP address, as shown in the following example:...
  • Page 69: Resetting A Switch

    Performs power-on self test Installing Firmware New firmware becomes available periodically either on CD-ROM or from the QLogic web site. Installing firmware on a switch involves the following steps: Download the firmware image file to the switch. Unpack the firmware image file.
  • Page 70: Non-Disruptive Activation

    Switch Configuration Installing Firmware Non-disruptive Activation You can load and activate firmware upgrades on an operating switch without disrupting data traffic or having to re-initialize attached devices. If the non-disruptive activation fails, you will usually be prompted to try again later. Otherwise, the switch will perform a disruptive activation.
  • Page 71: One-Step Firmware Installation

    Switch Configuration Installing Firmware One-Step Firmware Installation Firmware Install Image Install commands download the firmware image file from an FTP or TFTP server to the switch, unpacks the image file, and performs a disruptive activation in one step. The one-step installation process prompts you to enter the following: The file transfer protocol (FTP or TFTP) IP address of the remote host...
  • Page 72: Custom Firmware Installation

    Switch Configuration Installing Firmware When prompted to install the new firmware, enter Yes to continue or No to cancel. Entering Yes will disrupt traffic. This is the last opportunity to cancel. About to install image. Do you want to continue? [y/n] y Connected to 10.20.20.200 (10.20.20.200).
  • Page 73: Testing A Switch

    Switch Configuration Testing a Switch If your workstation has neither an FTP nor a TFTP server, open an FTP session and download the firmware image file by entering FTP commands: >ftp ip_address or switchname user:images password: images ftp>bin ftp>put filename ftp>quit Display the list of firmware image files on the switch to confirm that the file was loaded.
  • Page 74: Online Tests For Switches

    Switch Configuration Testing a Switch Online Tests for Switches An online test is a non-disruptive test that exercises port-to-device connections for all ports that are online. The following is an example of an online test: SANbox #> admin start SANbox (admin) #> test switch online A list of attributes with formatting and current values will follow.
  • Page 75: Offline Tests For Switches

    Switch Configuration Testing a Switch Offline Tests for Switches An offline test is a disruptive test that exercises all port connections for a switch in the diagnostics state. You must place the switch in the diagnostics state using the Set Switch State command before starting the test.
  • Page 76: Connectivity Tests For Switches

    Switch Configuration Testing a Switch Connectivity Tests for Switches A connectivity test is a disruptive test that exercises all port and inter-port connections for a switch in the diagnostics state. You must place the switch in the diagnostics state using the Set Switch State command before starting the test.
  • Page 77: Displaying Switch Test Status

    Switch Configuration Testing a Switch Displaying Switch Test Status You can display the test status while the test is in progress by entering the Test Status Switch command as shown in the following example: SANbox (admin) #> test status switch Test Test Test...
  • Page 78: Managing Idle Session Timers

    Switch Configuration Managing Idle Session Timers Managing Idle Session Timers You can limit the duration of idle login sessions and idle Admin sessions (Admin Start command). You can specify limits up to 1,440 minutes; specifying 0 means unlimited. Idle login sessions that exceed the limit are logged off (InactivityTimeout).
  • Page 79: Port Configuration

    Port Configuration This section describes the following topics: Displaying Port Information Modifying Port Operating Characteristics Port Binding Resetting a Port Configuring Port Threshold Alarms Testing a Port Displaying Port Information You can display the following port information: Port Configuration Parameters Port Operational Information Port Threshold Alarm Configuration Parameters Port Performance...
  • Page 80: Port Configuration Parameters

    Port Configuration Displaying Port Information Port Configuration Parameters Enter the Show Config Port command to display the port configuration parameters. These parameters determine the operational characteristics of the port. Refer to Table 13-19 for a description of these parameters. SANbox #> show config port 0 Configuration Name: default ----------------------------- Port Number: 0...
  • Page 81: Port Operational Information

    Port Configuration Displaying Port Information Port Operational Information Enter the Show Port command to display port operational information. SANbox #> show port 1 Port Number: 1 ------------ AdminState Online PortWWN 20:01:00:c0:dd:0d:53:e7 AsicNumber POSTFaultCode 00000000 AsicPort POSTStatus Passed ConfigType RunningType Unknown DownstreamISL False MediaPartNumber...
  • Page 82: Port Threshold Alarm Configuration Parameters

    Port Configuration Displaying Port Information Port Threshold Alarm Configuration Parameters Enter the Show Config Threshold command to display the port threshold alarm parameters. These parameters determine the error thresholds at which the switch issues alarms. Refer to Table 13-23 for a description of these parameters. SANbox #>...
  • Page 83: Port Performance

    Port Configuration Displaying Port Information Port Performance Enter the Show Perf command to display port performance in terms of the volume of data transmitted, data received, or errors. You can display continuous live performance information for one or more ports, or an instantaneous summary. The following example displays an instantaneous summary in bytes and frames.
  • Page 84: Modifying Port Operating Characteristics

    Port Configuration Modifying Port Operating Characteristics Modifying Port Operating Characteristics You can make permanent or temporary changes to port operating characteristics. You make permanent port configuration changes using the Set Config Port command. These changes are saved in the active configuration and are preserved across switch or port resets.
  • Page 85 Port Configuration Modifying Port Operating Characteristics The following example permanently changes the port 1 administrative state: SANbox #> admin start SANbox (admin) #> config edit SANbox (admin-config) #> set config port 1 A list of attributes with formatting and current values will follow. Enter a new value or simply press the ENTER key to accept the current value.
  • Page 86: Port Binding

    Port Configuration Port Binding You can configure all ports based a specified source port using the Set Config Ports command. The following example configures ports 0–7 based on port 3. SANbox #> admin start SANbox (admin) config edit SANbox (admin) #> set config ports 3 SANbox (admin-config)#>...
  • Page 87: Resetting A Port

    Port Configuration Resetting a Port Enter the Set Config Security Portbinding command to enable port binding for the selected port and to specify the world wide names of the authorized ports/devices. The following example enables port binding on port 1 and specifies two device world wide names.
  • Page 88: Configuring Port Threshold Alarms

    Port Configuration Configuring Port Threshold Alarms Configuring Port Threshold Alarms The switch can monitor a set of port errors and generates alarms based on user-defined sample windows and thresholds. These port errors include the following: Cyclic Redundancy Check (CRC) errors Decode errors ISL connection count Device login errors...
  • Page 89 Port Configuration Configuring Port Threshold Alarms Enter the Set Config Threshold command to enable and configure port threshold monitoring on the switch: SANbox #> admin start SANbox (admin) #> config edit SANbox (admin-config) #> set config threshold A list of attributes with formatting and current values will follow. Enter a new value or simply press the ENTER key to accept the current value.
  • Page 90: Testing A Port

    Port Configuration Testing a Port Testing a Port You can test a port using the Test Port command using online or offline tests. The following sections describe the test types, displaying test results, and cancelling a test: Online Tests for Ports Offline Tests for Ports Display Port Test Results Cancel a Port Test...
  • Page 91: Offline Tests For Ports

    Port Configuration Testing a Port Offline Tests for Ports An offline test is a disruptive test that exercises the port connections. You must place the port in the diagnostics state using the Set Port command before starting the test. There are two types of offline test: internal loopback and external loopback.
  • Page 92: Display Port Test Results

    Port Configuration Testing a Port Display Port Test Results You can display the test status while the test is in progress by entering the Test Status Port command in an Admin session as shown in the following example: SANbox (admin) #> test status port 1 Port Test Test...
  • Page 93: Zoning Configuration

    Zoning Configuration This section describes the following tasks: Displaying Zoning Database Information Configuring the Zoning Database Modifying the Zoning Database Saving the Active and Merged Zone Sets Resetting the Zoning Database Managing Zone Sets Managing Zones Managing Aliases Consider device access needs within the fabric. Access is controlled by the use of zoning.
  • Page 94: Displaying Zoning Database Information

    Zoning Configuration Displaying Zoning Database Information Displaying Zoning Database Information A switch maintains three zoning databases: Non-volatile–This zoning database is permanent and contains all zone sets, zones, and aliases that you create and save on a switch. The zone sets in the non-volatile zoning database are known as configured zone sets.
  • Page 95 Zoning Configuration Displaying Zoning Database Information Enter the Zoning List command to display all zone sets, zones, and zone members in the active zone set and configured zone sets as shown in the following example. Merged and edited zone sets are displayed if they exist. SANbox #>...
  • Page 96: Active Zone Set Information

    Zoning Configuration Displaying Zoning Database Information Active Zone Set Information Zoning List Zoneset Active commands display information about the active zone set. Enter the Zoning Active command to display component zones and zone members as shown in the following example: SANbox #>...
  • Page 97: Edited Zone Set Information

    Zoning Configuration Displaying Zoning Database Information Edited Zone Set Information The edited zone set is a zone set that you were modifying when a change in active zone set or a fabric merge occurred. Enter the Zoning Edited command to display the unsaved edited zone set information as shown in the following example: SANbox (admin-zoning) #>...
  • Page 98: Zone Membership Information

    Zoning Configuration Displaying Zoning Database Information Enter the Zone List command to display the zones and the zone sets to which they belong as shown in the following example: SANbox #> zone list Zone ZoneSet ---- ------- wwn_b0241f zone_set_1 wwn_23bd31 zone_set_1 wwn_221416 zone_set_2...
  • Page 99: Orphan Zone Information

    Zoning Configuration Displaying Zoning Database Information Orphan Zone Information Enter the Zone Orphans command to display a list of zones that are not members of any zone set as shown in the following example: SANbox #> zone orphans Current list of orphan zones ---------------------------- zone3 zone4...
  • Page 100: Zoning Modification History

    Zoning Configuration Displaying Zoning Database Information Zoning Modification History Enter the Zoning History command to display a record of zoning modifications as shown in the following example: SANbox #> zoning history Active Database Information --------------------------- ZoneSetLastActivated/DeactivatedBy Remote ZoneSetLastActivated/DeactivatedOn day mon date hh:mm:ss yyyy Database Checksum 00000000 Inactive Database Information...
  • Page 101: Zoning Database Limits

    Zoning Configuration Displaying Zoning Database Information Zoning Database Limits Enter the Zoning Limits command to display a summary of the objects in the zoning database and their maximum limit as shown in the following example: SANbox #> zoning limits Configured (saved in NVRAM) Zoning Information Zoning Attribute Maximum Current...
  • Page 102: Configuring The Zoning Database

    Zoning Configuration Configuring the Zoning Database Configuring the Zoning Database You can configure how the zoning database is applied to the switch and exchanged with the fabric through the zoning configuration parameters. The following zoning configuration parameters are available through the Set Config Zoning command.
  • Page 103 Zoning Configuration Configuring the Zoning Database To modify the zoning configuration, you must open an Admin session with the Admin Start command. An Admin session prevents other accounts from making changes at the same time through Telnet, QuickTools, Enterprise Fabric Suite 2007, or another management application.
  • Page 104: Modifying The Zoning Database

    Zoning Configuration Modifying the Zoning Database Modifying the Zoning Database To modify the non-volatile zoning database, you must open an Admin session with Admin Start command. An Admin session prevents other accounts from making changes at the same time through Telnet, Enterprise Fabric Suite 2007, or another management application.
  • Page 105: Saving The Active And Merged Zone Sets

    Zoning Configuration Saving the Active and Merged Zone Sets Saving the Active and Merged Zone Sets You can save the active zone set and merged zone set to the non-volatile zoning database. Enter the Zoning Active Capture to save the active zone set as shown in the following example: SANbox (admin) #>...
  • Page 106: Removing Inactive Zone Sets, Zones, And Aliases

    Zoning Configuration Removing Inactive Zone Sets, Zones, and Aliases Removing Inactive Zone Sets, Zones, and Aliases Enter the Zoning Delete Orphans command to delete all objects from the zoning database except those in the active zone set. SANbox #> admin start SANbox (admin) #>...
  • Page 107: Managing Zone Sets

    Zoning Configuration Managing Zone Sets Managing Zone Sets Managing zone sets consists of the following tasks: Create a Zone Set Delete a Zone Set Rename a Zone Set Copy a Zone Set Add Zones to a Zone Set Remove Zones from a Zone Set Activate a Zone Set Deactivate a Zone Set All of these tasks except...
  • Page 108: Rename A Zone Set

    Zoning Configuration Managing Zone Sets Rename a Zone Set Enter the Zoneset Rename command to rename a zone set as shown in the following example: SANbox #> admin start SANbox (admin) #> zoning edit SANbox (admin-zoning) #> zoneset rename zoneset_old zoneset_new SANbox (admin-zoning) #>zoning save Copy a Zone Set Enter the...
  • Page 109: Deactivate A Zone Set

    Zoning Configuration Managing Zones Deactivate a Zone Set Enter the Zoneset Deactivate command to deactivate the active zone set and disable zoning in the fabric: SANbox #> admin start SANbox (admin) #> zoneset deactivate Managing Zones Managing Zones consists of the following tasks: Create a Zone Delete a Zone Rename a Zone...
  • Page 110: Rename A Zone

    Zoning Configuration Managing Zones Rename a Zone Enter the Zone Rename command to rename zone_1 to zone_a as shown in the following example: SANbox #> admin start SANbox (admin) #> zoning edit SANbox (admin-zoning) #> zone rename zone_1 zone_a SANbox (admin-zoning) #> zoning save Copy a Zone Enter the Zone...
  • Page 111: Managing Aliases

    Zoning Configuration Managing Aliases Managing Aliases Managing aliases consists of the following tasks: Create an Alias Delete an Alias Rename an Alias Copy an Alias Add Members to an Alias Remove Members from an Alias All of these tasks require an Admin session and a Zoning Edit session. Create an Alias Enter the Alias...
  • Page 112: Copy An Alias

    Zoning Configuration Managing Aliases Copy an Alias Enter the Alias Copy command to copy alias_1 and its contents to alias_2 as shown in the following example: SANbox #> admin start SANbox (admin) #> zoning edit SANbox (admin-zoning) #> alias copy alias_1 alias_2 SANbox (admin-zoning) #>...
  • Page 113: Connection Security Configuration

    Connection Security Configuration This section describes the following tasks: Managing SSL and SSH Services Displaying SSL and SSH Services Creating an SSL Security Certificate The switch supports secure connections with Telnet and switch management applications. The Secure SHell protocol (SSH) secures Telnet connections to the switch.
  • Page 114: Managing Ssl And Ssh Services

    Connection Security Configuration Managing SSL and SSH Services Managing SSL and SSH Services Consider the following when enabling SSH and SSL services: To establish a secure Telnet connection, your workstation must use an SSH client. To enable secure SSL connections, you must first synchronize the date and time on the switch and workstation.
  • Page 115: Displaying Ssl And Ssh Services

    Connection Security Configuration Displaying SSL and SSH Services Displaying SSL and SSH Services Enter the Show Setup Services command to display the status of the SSH and SSL services as shown in the following example: SANbox #> show setup services System Services ----------------------------- TelnetEnabled...
  • Page 116 Connection Security Configuration Creating an SSL Security Certificate Notes 59270-00 A...
  • Page 117: Device Security Configuration

    Device Security Configuration This section describes the following tasks: Displaying Security Database Information Configuring the Security Database Modifying the Security Database Resetting the Security Database Managing Security Sets Managing Groups Device security provides for the authorization and authentication of devices that you attach to a switch.
  • Page 118: Displaying Security Database Information

    Device Security Configuration Displaying Security Database Information Displaying Security Database Information You can display the following information about the security database: Configured Security Set Information Active Security Set Information Security Set Membership Information Group Membership Information Security Database Modification History Security Database Limits Configured Security Set Information Securityset...
  • Page 119 Device Security Configuration Displaying Security Database Information Enter the Security List command to display all security sets, groups, and group members in the security database as shown in the following example: SANbox #> security list Active Security Information SecuritySet Group GroupMember ----------- -----...
  • Page 120: Active Security Set Information

    Device Security Configuration Displaying Security Database Information Active Security Set Information Security Active and Securityset Active commands display information about the active security set. Enter the Security Active command to display component groups and group members as shown in the following example: SANbox #>...
  • Page 121: Security Set Membership Information

    Device Security Configuration Displaying Security Database Information Security Set Membership Information Securityset Groups and Group Securitysets commands display security set membership information. Enter the Securityset Groups command to display the member groups for a specified security set as shown in the following example: SANbox #>...
  • Page 122: Security Database Modification History

    Device Security Configuration Displaying Security Database Information Security Database Modification History Enter the Security History command to display a record of security database modifications as shown in the following example: SANbox #> security history Active Database Information --------------------------- SecuritySetLastActivated/DeactivatedBy Remote SecuritySetLastActivated/DeactivatedOn day month date time year Database Checksum...
  • Page 123: Configuring The Security Database

    Device Security Configuration Configuring the Security Database Configuring the Security Database You can configure how the security database is applied to the switch and exchanged with the fabric through the security configuration parameters. The following security configuration parameters are available through the Set Config Security command: AutoSave–This parameter enables or disables the saving of changes to...
  • Page 124 Device Security Configuration Configuring the Security Database To modify the security configuration, you must open an Admin session with the Admin Start command. An Admin session prevents other accounts from making changes at the same time either through the CLI, QuickTools, or Enterprise Fabric Suite 2007.
  • Page 125: Modifying The Security Database

    Device Security Configuration Modifying the Security Database Modifying the Security Database To modify the security database, you must open an Admin session with the Admin Start command. An Admin session prevents other accounts from making changes at the same time either through the CLI, QuickTools, or Enterprise Fabric Suite 2007.
  • Page 126: Resetting The Security Database

    Device Security Configuration Resetting the Security Database Resetting the Security Database There are two ways to remove all groups and security sets from the security database: Enter the Security Clear command as shown in the following example: SANbox (admin-security) #> security clear All security information will be cleared.
  • Page 127: Rename A Security Set

    Device Security Configuration Managing Security Sets Rename a Security Set Enter the Securityset Rename command to rename a security set as shown in the following example: SANbox (admin-security) #> securityset rename securityset_old securityset_new Copy a Security Set Enter the Securityset Copy command to copy a security set and its contents to a new security set as shown in the following example: SANbox (admin-security) #>...
  • Page 128: Managing Groups

    Device Security Configuration Managing Groups Managing Groups Managing Groups consists of the following tasks: Create a Group Delete a Group Rename a Group Copy a Group Add Members to a Group Modify a Group Member Remove Members from a Group All of these tasks require an Admin session and a Security Edit session.
  • Page 129: Add Members To A Group

    Device Security Configuration Managing Groups Add Members to a Group Adding a member to a group involves specifying a group, the member worldwide name, and the member attributes. The member attributes define the authentication method, encryption method, secrets, and fabric binding, depending on the group type.
  • Page 130: Modify A Group Member

    Device Security Configuration Managing Groups Modify a Group Member Modifying a group member involves changing the member attributes. The member attributes define the authentication method, encryption methods, secrets, and fabric binding, depending on the group type. For Port member attributes, refer to Table 13-3.
  • Page 131: Radius Server Configuration

    RADIUS Server Configuration Authentication can be performed locally using the switch’s security database, or remotely using a Remote Dial-In User Service (RADIUS) server such as Microsoft RADIUS. With a RADIUS server, the security database for the entire fabric resides on the server. In this way, the security database can be managed centrally, rather than on each switch.
  • Page 132: Displaying Radius Server Information

    RADIUS Server Configuration Displaying RADIUS Server Information Displaying RADIUS Server Information Enter the Show Setup Radius command to display RADIUS server information as shown in the following example. Refer to Table 13-26 for a description of the RADIUS configuration parameters. SANbox #>...
  • Page 133: Configuring A Radius Server On The Switch

    RADIUS Server Configuration Configuring a RADIUS Server on the Switch Configuring a RADIUS Server on the Switch Enter the Set Setup Radius command to configure a RADIUS server on the switch. There are two groups of RADIUS configuration parameters. One group of parameters is common to all RADIUS server configurations.
  • Page 134 RADIUS Server Configuration Configuring a RADIUS Server on the Switch The following example configures RADIUS server 1: SANbox (admin) #> set setup radius server 1 A list of attributes with formatting and current values will follow. Enter a new value or simply press the ENTER key to accept the current value. If you wish to terminate this process before reaching the end of the attributes for the server being processed, press 'q' or 'Q' and the ENTER key to do so.
  • Page 135: Event Log Configuration

    Creating and Downloading a Log File Event messages originate from the switch or from the management application in response to events that occur in the fabric. Refer to the QLogic Fibre Channel Switch Event Message Guide for a complete listing of switch event messages.
  • Page 136: Starting And Stopping Event Logging

    Event Log Configuration Starting and Stopping Event Logging Starting and Stopping Event Logging Enter the Set Log Stop command in an Admin session to stop recording event messages in the switch Log as shown in the following example: SANbox (admin) #> set log stop Enter the Set Log Start command to start recording event message in the switch log as shown in the following example: SANbox (admin) #>...
  • Page 137: Filtering The Event Log Display

    Event Log Configuration Managing the Event Log Configuration Filtering the Event Log Display You can customize what events are displayed according to the component or severity level. Enter the Show Log Display command to filter the events in the display. You can choose from the following severity levels and component events: Informative events Warning events Critical events...
  • Page 138: Configure The Event Log

    Event Log Configuration Managing the Event Log Configuration Configure the Event Log You can customize what events are recorded in the switch event log according to component, severity level, and port. Enter the Set Log Component, Set Log Level, and Set Log Port commands in an Admin session to filter the events to be recorded.
  • Page 139: Restore The Event Log Configuration

    Event Log Configuration Clearing the Event Log Restore the Event Log Configuration Enter the Set Log Restore command in an Admin session to return the event log configuration to the factory default as shown in the following example: SANbox (admin) #> set log restore Clearing the Event Log Enter the Set Log...
  • Page 140: Logging To A Remote Host

    Event Log Configuration Logging to a Remote Host Logging to a Remote Host The switch comes from the factory with local logging enabled, which instructs the switch firmware to maintain an event log in switch memory. The switch can also be configured to log events to a remote host that supports the syslog protocol.
  • Page 141: Creating And Downloading A Log File

    Event Log Configuration Creating and Downloading a Log File Creating and Downloading a Log File Enter the Set Log Archive command to collect the event log messages in a file on the switch named logfile. This file can have a maximum of 1200 event messages. Use FTP to download the file from the switch to your workstation as follows: Log into the switch through Telnet and create an archive of the event log.
  • Page 142 Event Log Configuration Creating and Downloading a Log File Notes 10-8 59270-00 A...
  • Page 143: Call Home Configuration

    Call Home Configuration This section describes the following topics: Call Home Concepts Configuring the Call Home Service Managing the Call Home Database Testing a Call Home Profile Changing SMTP Servers Clearing the Call Home Message Queue Resetting the Call Home Database Call Home Concepts The Call Home service improves fabric availability by notifying administrators by email of events that affect switch operation.
  • Page 144: Call Home Requirements

    Call Home Configuration Call Home Concepts Call Home Requirements In addition to enabling the Call Home service, you must also do the following to ensure that email messages can be sent: Configure the Call Home service. The Call Home service configuration consists of primary and secondary SMTP server specifications and contact information.
  • Page 145: Call Home Messages

    Call Home profile and SNMP configurations. The short-text and Tsc1 formats contains basic switch and event information; Tsc1 is formatted for automated parsing. The following is an example of a short-text email: From: john.doe@qlogic.com [mailto:john.doe@qlogic.com] Sent: Wednesday, July 25, 2007 5:03 PM Subject: [CallHome: Test] Alarm generated on Switch_8 SwitchName: Switch_8_83.215...
  • Page 146: Technical Support Interface

    The Tech_Support_Center profile provides a way to collect and send switch status and trend data periodically by e-mail to specified technical support resources. With the purchase of a Prime Service contract, you may designate QLogic Technical Support to receive these notifications, in which case, QLogic will contact you proactively with recommended corrective actions whenever component failures or potential system problems are detected.
  • Page 147: Configuring The Call Home Service

    Call Home Configuration Configuring the Call Home Service Configuring the Call Home Service Enter the Set Setup Callhome command in an Admin session to configure the Call Home service as shown in the following example. Refer to Table 13-25 for a description of the Call Home service configuration entries.
  • Page 148: Managing The Call Home Database

    Call Home Configuration Managing the Call Home Database Enter the Show Setup Callhome command to display the Call Home service configuration as shown in the following example. SANbox #> show setup callhome Callhome Information -------------------- PrimarySMTPServerAddr 0.0.0.0 PrimarySMTPServerPort PrimarySMTPServerEnabled False SecondarySMTPServerAddr 0.0.0.0 SecondarySMTPServerPort...
  • Page 149: Displaying Call Home Database Information

    Call Home Configuration Managing the Call Home Database The Admin End command releases the Admin session for other administrators when you are done making changes to the switch. To remove all Call Home profiles and restore the Call Home service configuration to its factory state, enter the Reset Callhome command.
  • Page 150 Call Home Configuration Managing the Call Home Database Enter the Callhome List command to display a list of Call Home profiles as shown in the following example: SANbox #> callhome list Configured Profiles: -------------------- group4 group5 Enter the Callhome List Profile command to display a list of Call Home profiles and their details as shown in the following example: SANbox #>...
  • Page 151: Creating A Profile

    Call Home Configuration Managing the Call Home Database Creating a Profile Enter the Profile Create command to create a Call Home profile as shown in the following example: SANbox #> admin start SANbox (admin) #> callhome edit SANbox (admin-callhome) #> profile create profile_1 A list of attributes with formatting and default values will follow.
  • Page 152: Deleting A Profile

    Call Home Configuration Managing the Call Home Database Deleting a Profile Enter the Profile Delete command to delete a Call Home profile as shown in the following example: SANbox #> admin start SANbox (admin) #> callhome edit SANbox (admin-callhome) #> profile delete profile_1 The profile will be deleted.
  • Page 153: Modifying A Profile

    Call Home Configuration Managing the Call Home Database Modifying a Profile Enter the Profile Edit command to modify an existing Call Home profile as shown in the following example: SANbox #> admin start SANbox (admin) #> callhome edit SANbox (admin-callhome) #> profile edit profile_1 A list of attributes with formatting and current values will follow.
  • Page 154: Renaming A Profile

    Call Home Configuration Managing the Call Home Database Renaming a Profile Enter the Profile Rename command to rename profile_1 as shown in the following example: SANbox #> admin start SANbox (admin) #> callhome edit SANbox (admin-callhome) #> profile rename profile_1 profile_4 The profile will be renamed.
  • Page 155: Adding A Data Capture Configuration

    Call Home Configuration Managing the Call Home Database Adding a Data Capture Configuration Enter the Capture Add command to add a data capture configuration to the Tech_Support_Center profile as shown in the following example. If the Tech_Support_Center profile does not exist, you must create it using the Profile Create command.
  • Page 156: Modifying A Data Capture Configuration

    Call Home Configuration Managing the Call Home Database Modifying a Data Capture Configuration Enter the Capture Edit command to modify a data capture configuration in the Tech_Support_Center profile as shown in the following example: SANbox #> admin start SANbox (admin) #> callhome edit SANbox (admin-callhome) #>...
  • Page 157: Deleting A Data Capture Configuration

    Call Home Configuration Testing a Call Home Profile Deleting a Data Capture Configuration Enter the Capture Remove command to delete a data capture configuration from the Tech_Support_Center profile as shown in the following example: SANbox #> admin start SANbox (admin) #> callhome edit SANbox (admin-callhome) #>...
  • Page 158: Changing Smtp Servers

    Call Home Configuration Changing SMTP Servers Changing SMTP Servers The Call Home service configuration enables you to specify a primary and a secondary SMTP server to which the switch connects. The active server is the server that receives messages from the switch. By default, the primary SMTP server is the active server.
  • Page 159 Call Home Configuration Resetting the Call Home Database Enter the Reset Callhome command to clear all Call Home profiles and resets the Tech_Support_Center profile and Call Home service configuration to the factory defaults as shown in the following example: SANbox #> admin start SANbox (admin) #>...
  • Page 160 Call Home Configuration Resetting the Call Home Database Notes 11-18 59270-00 A...
  • Page 161: Simple Network Management Protocol Configuration

    Simple Network Management Protocol Configuration This section describes the following tasks: Managing the SNMP Service Displaying SNMP Information Modifying the SNMP Configuration Resetting the SNMP Configuration Managing the SNMP Version 3 Configuration The Simple Network Management Protocol (SNMP) provides for the management of the switch through third-party applications that use SNMP.
  • Page 162: Managing The Snmp Service

    Simple Network Management Protocol Configuration Managing the SNMP Service Managing the SNMP Service You control the SNMP service SNMPEnabled parameters through the Set Setup SNMP Set Setup Services commands. Refer to “Modifying the SNMP Configuration” on page 12-4 for more information. Enter the Set Setup Services command to enable SNMP as shown in the...
  • Page 163: Displaying Snmp Information

    Simple Network Management Protocol Configuration Displaying SNMP Information Displaying SNMP Information Enter the Show Setup Snmp command to displays common and trap-specific SNMP configuration information as shown in the following example. Refer to Table 13-30 for a description of the SNMP parameters. SANbox #>...
  • Page 164: Modifying The Snmp Configuration

    Simple Network Management Protocol Configuration Modifying the SNMP Configuration Modifying the SNMP Configuration Enter the Set Setup SNMP command in an Admin session to configure SNMP on the switch. There are two groups of configuration parameters. One group is common to all traps. The second group is trap specific. You can configure both groups of parameters for all SNMP traps, or you can configure the common and trap-specific parameters separately.
  • Page 165: Resetting The Snmp Configuration

    Simple Network Management Protocol Configuration Resetting the SNMP Configuration The following example configures SNMP trap 1: SANbox (admin) #> set setup snmp trap 1 A list of attributes with formatting and current values will follow. Enter a new value or simply press the ENTER key to accept the current value. If you wish to terminate this process before reaching the end of the list press 'q' or 'Q' and the ENTER key to do so.
  • Page 166: Managing The Snmp Version 3 Configuration

    Simple Network Management Protocol Configuration Managing the SNMP Version 3 Configuration Managing the SNMP Version 3 Configuration SNMP version 3 is an interoperable standards-based protocol for network management. SNMP version 3 provides secure access to devices by a combination of packet authentication and encryption over the network. SNMP version 3 provides the following security features: Message integrity—ensures that packets have not been altered Authentication—ensures that the packet is coming from a valid source...
  • Page 167: Create An Snmp Version 3 User Account

    Simple Network Management Protocol Configuration Managing the SNMP Version 3 Configuration Create an SNMP Version 3 User Account To create an SNMP version 3 user account, enter the Snmpv3user Add command as shown in the following example: SANbox #> admin start SANbox (admin) #>...
  • Page 168: Modify An Snmp Version 3 User Account

    Simple Network Management Protocol Configuration Managing the SNMP Version 3 Configuration Modify an SNMP Version 3 User Account To modify an SNMP version 3 user account, enter the Snmpv3user Edit command as shown in the following example: SANbox #> admin start SANbox (admin) #>...
  • Page 169: Command Reference

    Command Reference This section describes the commands of the CLI and the format in which they are presented. The command format presents the following: Access Authority Syntax and Keywords Notes and Examples Command Listing Access Authority The Authority paragraph in each command description indicates what types of sessions are required to enter that command.
  • Page 170: Syntax And Keywords

    Command Reference Syntax and Keywords Commands that modify the Internet Protocol Security configuration require an Ipsec Edit session, which is opened by the Ipsec Edit command. These commands include the Ipsec, Ipsec Association Ipsec Policy commands. Syntax and Keywords The Syntax paragraph defines the command syntax using the following convention: command keyword...
  • Page 171: Admin

    Command Reference Admin Admin Opens and closes an Admin session. The Admin session provides access to commands that change the fabric and switch configurations. Only one Admin session can be open on the switch at any time. An inactive Admin session will time out after a period of time which can be changed using the Set Setup System command.
  • Page 172: Alias

    Command Reference Alias Alias Creates a named set of ports/devices. Aliases make it easier to assign a set of ports/devices to many zones. An alias can not have a zone or another alias as a member. Authority Admin session and Zoning Edit session for all keywords except List and Members Syntax alias add [alias] [member_list]...
  • Page 173 Command Reference Alias delete [alias] Deletes the specified alias given by [alias] from the zoning database. If the alias is a member of the active zone set, the alias will not be removed from the active zone set until the active zone set is deactivated. list Displays a list of all aliases.
  • Page 174: Callhome

    Command Reference Callhome Callhome Manages the Call Home database. The Callhome Edit command opens a session in which to create and manage Call Home profiles. Refer to the Profile command for more information about Call Home profiles. Authority Admin session except for the History and List keywords. The Clear keyword also requires a Callhome Edit session.
  • Page 175 Command Reference Callhome history Displays a history of Call Home modifications. This keyword does not require an Admin session. History information includes the following: Time of the most recent Call Home database modification and the user who performed it. Checksum for the Call Home database Profile processing information list profile [profile] Lists the configuration for the profile given by [profile].
  • Page 176 Command Reference Callhome Examples The following is an example of the Callhome History command: SANbox #> callhome history CallHome Database History ------------------------- ConfigurationLastEditedBy admin@OB-session2 ConfigurationLastEditedOn day mmm dd hh:mm:ss yyyy DatabaseChecksum 000014a3 ProfileName group4 ProfileLevel Warn ProcessedCount ProcessedLast day mmm dd hh:mm:ss yyyy ProfileName group5 ProfileLevel...
  • Page 177 Command Reference Callhome The following is an example of the Callhome List Profile command: SANbox #> callhome list profile ProfileName: group4 ------------ Level Warn Format FullText MaxSize any size up to max of 100000 EmailSubject CallHome Warn RecipientEmail admin1@company.com RecipientEmail admin2@company.com RecipientEmail admin3@company.com...
  • Page 178: Capture

    Command Reference Capture Capture Manages the data capture configuration for the Tech_Support_Center Call Home profile. The data capture configuration determines the time and frequency by which status and trend data is collected from the switch and sent to recipients specified in the Tech_Support_Center profile. Authority Admin session and a Callhome Edit session.
  • Page 179 Command Reference Capture Examples The following is an example of the Capture Add command: SANbox #> admin start SANbox (admin) #> callhome edit SANbox (admin-callhome) #> capture add A list of attributes with formatting and default values will follow. Enter a value or simply press the ENTER key to accept the default value. If you wish to terminate this process before reaching the end of the list press 'q' or 'Q' and the ENTER key to do so.
  • Page 180 Command Reference Capture The following is an example of the Capture Remove command: SANbox #> admin start SANbox (admin) #> callhome edit SANbox (admin-callhome) #> capture remove Capture Entries for Profile: Tech_Support_Center Index TimeOfDay DayOfWeek Interval ----- --------- --------- -------- 02:00 1 (weeks) Please select a capture entry from the list above ('q' to quit): 1...
  • Page 181: Config

    Command Reference Config Config Manages the Fibre Channel configurations on a switch. For information about setting the port and switch configurations, refer to the “Set Config Switch” command on page 13-89. Authority Admin session for all keywords except Backup and List Syntax config activate [config_name]...
  • Page 182 Command Reference Config delete [config_name] Deletes the configuration given by [config_name] from the switch. You cannot delete the default configuration (Default Config) nor the active configuration. edit [config_name] Opens an edit session for the configuration given by [config_name]. If you omit [config_name], the currently active configuration is used.
  • Page 183 Command Reference Config NOTE: If the restore process changes the IP address, use the Set Setup System command to return the IP configuration to the values you want. If the IP address is unknown, you must place the switch in maintenance mode and reset the network configuration to restore the default IP address 10.0.0.1.
  • Page 184 Command Reference Config The following is an example of how to create a backup file (configdata) and download the file to the workstation. SANbox #> config backup SANbox #> exit #>ftp symbolic_name or ip_address user: images password: images ftp> bin ftp>...
  • Page 185: Create

    Command Reference Create Create Creates support files for troubleshooting switch problems, and certificates for secure communications for Enterprise Fabric Suite 2007 and SMI-S. Authority Admin session for the Certificate keyword Syntax create certificate support Keywords certificate Creates a security certificate on the switch. The security certificate is required to establish an SSL connection with a management application such as Enterprise Fabric Suite 2007.
  • Page 186 Command Reference Create Examples The following is an example of the Create Support command when an FTP server is available on the workstation: SANbox #> create support Log Msg:[Creating the support file - this will take several seconds] FTP the dump support file to another machine? (y/n): y Enter IPv4, IPv6 Address or hostname of remote computer: 10.20.33.130 Login name: johndoe Enter remote directory name: bin/support...
  • Page 187 Command Reference Create The following is an example of the Create Support command to download the support file to your workstation. When prompted to send the support file to another machine, you decline, close the Telnet session, and open an FTP session on the switch and log in with the account name images and password images.
  • Page 188: Date

    Command Reference Date Date Displays or sets the system date and time. To set the date and time the information string must be provided in this format: MMDDhhmmCCYY. The new date and time takes effect immediately. Authority Admin session except to display the date. Syntax date [MMDDhhmmCCYY]...
  • Page 189: Exit

    Command Reference Exit Exit Closes the Telnet session. Authority None Syntax exit Notes You can also press Control-D to close the Telnet session. 59270-00 A 13-21...
  • Page 190: Firmware Install

    Command Reference Firmware Install Firmware Install Downloads firmware from a remote host to the switch, installs the firmware, then resets the switch to activate the firmware. This is disruptive. The command prompts you for the following: The file transfer protocol (FTP or TFTP) IP address or DNS host name of the remote host An account name and password on the remote host (FTP only) Pathname for the firmware image file...
  • Page 191 Command Reference Firmware Install The following is an example of the Firmware Install command using TFTP: SANbox #> admin start SANbox (admin) #> firmware install The switch will be reset. This process will cause a disruption to I/O traffic. Continuing with this action will terminate all management sessions, including any Telnet sessions.
  • Page 192: Group

    Command Reference Group Group Creates groups, manages membership within the group, and manages the membership of groups in security sets. Authority Admin session and a Security Edit session. Refer to the “Security” command on page 13-73 for information about starting a Security Edit session. The List, Members, Securitysets, and Type keywords are available without an Admin session.
  • Page 193 Command Reference Group Keywords add [group] Initiates an editing session in which to specify a group member and its attributes for the existing group given by [group]. ISL, Port, and MS member attributes are described in Table 13-2, Table 13-3, and Table 13-4 respectively.
  • Page 194 Command Reference Group Table 13-3. Port Group Member Attributes Attribute Description Member Worldwide port name (WWPN) for the N_Port device that would attach to the switch. A member cannot belong to more than one group. All loop device WWPNs must be included in the group, other- wise the switch port will be downed, and none of the devices will be able to log in.
  • Page 195 Command Reference Group Table 13-4. MS Group Member Attributes Attribute Description Member Port worldwide name for the N_Port device that would attach to the switch. CTAuthentication Common Transport (CT) authentication. Enables (True) or dis- ables (False) authentication for MS group members. The default is False.
  • Page 196 Command Reference Group edit [group] [member] Initiates an editing session in which to change the attributes of a worldwide name given by [member] in a group given by [group]. Member attributes that can be changed are described in Table 13-5. Table 13-5.
  • Page 197 Command Reference Group Table 13-5. Group Member Attributes (Continued) Attribute Description Binding Domain ID of the switch to which to bind the ISL group mem- ber worldwide name. This option is available only if (ISL Groups) FabricBindingEnabled is set to True using the Set Config Security command.
  • Page 198 Command Reference Group Examples The following is an example of the Group Add command: SANbox #> admin start SANbox (admin) #> security edit SANbox (admin-security) #> group add Group_1 A list of attributes with formatting and default values will follow Enter a new value or simply press the ENTER key to accept the current value with exception of the Group Member WWN field which is mandatory.
  • Page 199 Command Reference Group The following is an example of the Group List command: SANbox #> group list Group SecuritySet ----- ----------- group1 (ISL) alpha group2 (Port) alpha The following is an example of the Group Members command: SANbox #> group members group_1 Current list of members for Group: group_1 ---------------------------------- 10:00:00:c0:dd:00:71:ed...
  • Page 200: Hardreset

    Command Reference Hardreset Hardreset Resets the switch and performs a power-on self test (POST). This reset disrupts I/O traffic, activates the pending firmware, and clears the alarm log. To save the alarm log before resetting, refer to the “Set Log” on page 13-95.
  • Page 201: Help

    Command Reference Help Help Displays a brief description of the specified command, its keywords, and usage. Authority None Syntax help [command] [keyword] Keywords [command] Displays a summary of the command given by [command] and its keywords. If you omit [command], the system displays all available commands. [keyword] Displays a summary of the keyword given by [keyword] belonging to the command given by [command].
  • Page 202: History

    Command Reference History History Displays a numbered list of the previously entered commands from which you can re-execute selected commands. Authority None Syntax history Notes Use the History command to provide context for the ! command: Enter ![command_string] to re-execute the most recent command that matches [command_string].
  • Page 203: Hotreset

    Command Reference Hotreset Hotreset Resets the switch for the purpose of activating the pending firmware without disrupting traffic. This command terminates all management sessions, saves all configuration information, and clears the event log. After the pending firmware is activated, the configuration is recovered. This process may take a few minutes. To save the event log to a file before resetting, enter the Set Log Archive command.
  • Page 204: Image

    Command Reference Image Image Manages and installs switch firmware. Authority Admin session Syntax image cleanup fetch [account_name] [ip_address] [file_source] [file_destination] install list tftp [ip_address] [file_source] [file_destination] unpack [file] Keywords cleanup Removes all firmware image files from the switch. All firmware image files are removed automatically each time the switch is reset.
  • Page 205 Command Reference Image unpack [file] Installs the firmware file given by [file]. After unpacking the file, a message appears confirming successful unpacking. The switch must be reset for the new firmware to take effect. Notes To provide consistent performance throughout the fabric, ensure that all switches are running the same version of firmware.
  • Page 206 Command Reference Image The following is an example of the Image Fetch and Image Unpack commands: SANbox (admin) #> image fetch johndoe 10.0.0.254 7.4.00.11_epc >ftp 10.0.0.254 user:johndoe password: ******** ftp>bin ftp>put 7.4.00.11_epc ftp>quit SANbox (admin) $>image list SANbox (admin) $>image unpack 7.4.00.11_epc Image unpack command result: Passed 13-38 59270-00 A...
  • Page 207: Ipsec

    Command Reference Ipsec Ipsec Manages the IP Security database. The IP Security database consists of the Security Association database and the Security Policy database. The Ipsec Edit command opens a session in which to create and manage associations and policies. Authority Admin session except for the History keyword.
  • Page 208 Command Reference Ipsec history Displays a history of IP security modifications. This keyword does not require an Admin session. History information includes the following: Time of the most recent IP security database modification and the user who performed it Checksums for the active and inactive IP security databases limits Displays the maximum and current numbers of configured associations and policies.
  • Page 209: Ipsec Association

    Command Reference Ipsec Association Ipsec Association Creates and manages associations in the Security Association database. Authority Admin session and an Ipsec Edit session Syntax ipsec association copy [association_source] [association_destination] create [association] delete [association] edit [association] list [association] rename [association_old] [association_new] Keywords copy [association_source] [association_destination] Creates a new association named [association_destination] and copies the...
  • Page 210 Command Reference Ipsec Association Table 13-6. Association Configuration Parameters Parameter Description Protocol IP security protocol to be used to process data. The protocol can be one of the following: Encapsulated Security Payload–RFC 2406 (esp) Encapsulated Security Payload–RFC 1827 (esp-old) Authentication Header– RFC 2402 (ah) Authentication Header–RFC 1826 (ah-old) Security parameters index number Authentication...
  • Page 211 Command Reference Ipsec Association list [option] Displays the configuration for the policies given by [option]. If you omit [option], the command displays the configuration of all active associations. [option] can be one of the following: [association] Displays the configuration for the association given by [association]. active Displays the configuration for all active associations.
  • Page 212 Command Reference Ipsec Association Examples The following is an example of the Ipsec Association Create command: SANbox #> admin start SANbox (admin) #> ipsec edit SANbox (admin-ipsec) #> ipsec association create h2h-sh-sa A list of attributes with formatting will follow. Enter a value or simply press the ENTER key to skip specifying a value.
  • Page 213: Ipsec List

    Command Reference Ipsec List Ipsec List Displays information about IP security associations and policies. Authority None Syntax ipsec list active association [option] configured edited policy [option] Keywords active Displays a summary of active associations and policies. This is the default. association [option] Displays the configuration for the associations given by [option].
  • Page 214 Command Reference Ipsec List policy [option] Displays the configuration for the policies given by [option]. If you omit [option], the command displays the configuration of all active policies. [option] can be one of the following: [policy] Displays the configuration for the policy given by [policy]. active Displays the configuration for all active policies.
  • Page 215 Command Reference Ipsec List The following is an example of the Ipsec List Association command: SANbox #> ipsec list association Active IPsec Information h2h-sh-sa Description: Host-to-host: switch->host Source: fe80::2c0:ddff:fe03:d4c1 Destination: fe80::250:daff:feb7:9d02 Protocol: esp SPI: 333 (0x14d) Authentication: hmac-sha1 ******** Encryption: 3des-cbc ******** h2h-hs-sa Description: Host-to-host: host->switch...
  • Page 216: Ipsec Policy

    Command Reference Ipsec Policy Ipsec Policy Manages policies in the Security Policy database. Authority Admin session and an Ipsec Edit session Syntax ipsec policy copy [policy_source] [policy_destination] create [policy] delete [policy] edit [policy] list [option] rename [policy_old] [policy_new] Keywords copy [policy_source] [policy_destination] Creates a new policy named [policy_destination] and copies the configuration into it from the policy given by [policy_source].
  • Page 217 Command Reference Ipsec Policy Table 13-7. Policy Configuration Parameters Parameter Description Protocol Protocol or application to which to apply IP security. Enter a key- word for one of the following protocols or an integer (0-255): Internet Control Message Protocol for IP version 4 (ICMP) Internet Control Message Protocol for IP version 6 (ICMP6) Internet Protocol, version 4 (IPv4) Transmission Control Protocol (TCP)
  • Page 218 Command Reference Ipsec Policy Table 13-7. Policy Configuration Parameters Parameter Description espRuleLevel Rule level to apply for ESP protection: Default–use the system wide default for the protocol Use–use a security association if one is available Require–a security association is required whenever a packet is sent that is matched with the policy delete [policy] Deletes the policy given by [policy] from the Security Policy database.
  • Page 219 Command Reference Ipsec Policy Examples The following is an example of the Ipsec Policy Create command: SANbox #> admin start SANbox (admin) #> ipsec edit SANbox (admin-ipsec) #> ipsec policy create h2h-sh-sp A list of attributes with formatting will follow. Enter a value or simply press the ENTER key to skip specifying a value.
  • Page 220: Lip

    Command Reference Reinitializes the specified loop port. Authority Admin session Syntax lip [port_number] Keywords [port_number] The number of the port to be reinitialized. Ports are numbered beginning with 0. Examples The following is an example of the Lip command: SANbox (admin) #> lip 2 13-52 59270-00 A...
  • Page 221: Logout

    Command Reference Logout Logout Closes the Telnet session. Authority None Syntax logout Notes You can also press Control-D to close the Telnet session. 59270-00 A 13-53...
  • Page 222: Passwd

    Command Reference Passwd Passwd Changes a user account’s password. Authority Admin account name and an Admin session to change another account’s password; you can change you own password without an Admin session. Syntax passwd [account_name] Keywords [account_name] The user account name. To change the password for an account name other than your own, you must open an Admin session with the account name Admin.
  • Page 223: Ping

    Command Reference Ping Ping Initiates an attempt to communicate with another switch over an Ethernet network and reports the result. Authority None Syntax ping [host_name] -ipv4 [host_address] -ipv6 [host_address] Keywords [host_name] DNS host name of the switch you want to query. [host_name] is a character string of 2–125 characters made up of one or more subdomains delimited by periods (.).
  • Page 224: Profile

    Command Reference Profile Profile Creates and modifies profiles with which to customize Call Home e-mail notification. A profile defines the event severity level at which to generate e-mails, e-mail subject and text, and e-mail recipients. Authority Admin session and a Callhome Edit session. Refer to the “Callhome”...
  • Page 225 Command Reference Profile Table 13-8. Profile Configuration Parameters (Continued) Parameter Description Format Level of detail to be included in the e-mail message: ShortText–includes switch and event information. FullText–includes switch information, event information, Call Home contact information, and SNMP contact information. Tsc1–includes switch and event information in a format intended for automated e-mail readers.
  • Page 226 Command Reference Profile Examples The following is an example of the Profile Create command: SANbox #> admin start SANbox (admin) #> callhome edit SANbox (admin-callhome) #> profile create profile_1 A list of attributes with formatting and default values will follow. Enter a new value or simply press the ENTER key to accept the current value.
  • Page 227 Command Reference Profile The following is an example of the Profile Edit command: SANbox #> admin start SANbox (admin) #> callhome edit SANbox (admin-callhome) #> profile edit profile_1 A list of attributes with formatting and current values will follow. Enter a new value or simply press the ENTER key to accept the current value. If you wish to terminate this process before reaching the end of the list press 'q' or 'Q' and the ENTER key to do so.
  • Page 228 Command Reference Displays current system process information. Authority None Syntax Examples The following is an example of the Ps command: SANbox #> ps PPID %CPU %MEM TIME ELAPSED COMMAND 0.3 00:00:04 2-03:02:31 cns 0.3 00:00:06 2-03:02:31 ens 0.3 00:00:09 2-03:02:31 dlog 0.6 00:00:33 2-03:02:31 ds 2.8 00:09:59...
  • Page 229: Quit

    Command Reference Quit Quit Closes the Telnet session. Authority None Syntax quit Notes You can also press Control-D to close the Telnet session. 59270-00 A 13-61...
  • Page 230: Reset

    Command Reference Reset Reset Resets the switch configuration parameters. If you omit the keyword, the default is Reset Switch. Authority Admin session Syntax reset callhome config [config_name] factory ipsec port [port_list] radius security services snmp switch (default) system zoning Keywords callhome Resets the Call Home database configuration to its default values.
  • Page 231 Command Reference Reset factory Resets switch configuration, port configuration, port threshold alarm configuration, zoning configuration, SNMP configuration, system configuration, security configuration, RADIUS configuration, switch services configuration, zoning configuration, and Call Home configuration to the factory default values as described in Table 13-10 through Table...
  • Page 232 Command Reference Reset switch Resets the switch without a power-on self test. This is the default. This reset disrupts traffic and does the following: Activates the pending firmware. Closes all management sessions. Clears the event log. To save the event log before resetting, refer to the “Set Log”...
  • Page 233: Call Home Service Configuration Defaults

    Command Reference Reset Notes The following tables specify the various factory default settings: Table 13-9 shows the Call Home service configuration defaults. Enter the Show Setup Callhome command to display the Call Home service configuration values. Table 13-10 shows the switch configuration default values. Enter the Show Config Switch command to display switch configuration values.
  • Page 234: Switch Configuration Defaults

    Command Reference Reset Table 13-9. Call Home Service Configuration Defaults (Continued) Parameters Default StreetAddress <undefined> FromEmailAddress nobody@localhost.localdomain ReplyToEmailAddress nobody@localhost.localdomain ThrottleDupsEnabled True Table 13-10. Switch Configuration Defaults Parameter Default Admin State Online Broadcast Enabled True InbandEnabled True FDMIEnabled True FDMIEntries 1000 DefaultDomain ID 1 (0x Hex) Domain ID Lock...
  • Page 235: Port Configuration Defaults

    Command Reference Reset Table 13-11. Port Configuration Defaults Parameter SFP Port Defaults Admin State Online Link Speed Auto Port Type Symbolic Name Portn, where n is the port number ALFairness False DeviceScanEnabled True ForceOfflineRSCN False ARB_FF False InteropCredit FANEnable True AutoPerfTuning True LCFEnable...
  • Page 236: Port Threshold Alarm Configuration Defaults

    Command Reference Reset Table 13-12. Port Threshold Alarm Configuration Defaults Parameter Default ThresholdMonitoringEnabled False CRCErrorsMonitoringEnabled True RisingTrigger FallingTrigger SampleWindow DecodeErrorsMonitoringEnabled True RisingTrigger FallingTrigger SampleWindow ISLMonitoringEnabled True RisingTrigger FallingTrigger SampleWindow LoginMonitoringEnabled True RisingTrigger FallingTrigger SampleWindow LogoutMonitoringEnabled True RisingTrigger FallingTrigger SampleWindow LOSMonitoringEnabled True RisingTrigger FallingTrigger...
  • Page 237: Zoning Configuration Defaults

    Command Reference Reset Table 13-13. Zoning Configuration Defaults Parameter Default MergeAutoSave True DefaultZone Allow DiscardInactive False Table 13-14. SNMP Configuration Defaults Parameter Default SNMPEnabled True Contact <syscontact undefined> Location <sysLocation undefined> Description SANbox 3810 FC Switch ObjectID 1.3.6.1.4.1.3873.1.20 AuthFailureTrap False ProxyEnabled True SNMPv3Enabled...
  • Page 238: Radius Configuration Defaults

    Command Reference Reset Table 13-15. RADIUS Configuration Defaults Parameter Default DeviceAuthOrder Local UserAuthOrder Local TotalServers DeviceAuthServer False UserAuthServer False AccountingServer False ServerIPAddress 10.0.0.1 ServerUDPPort 1812 Timeout 2 seconds Retries SignPackets False Table 13-16. Switch Services Configuration Defaults Parameter Default TelnetEnabled True SSHEnabled False...
  • Page 239: System Configuration Defaults

    Command Reference Reset Table 13-17. System Configuration Defaults Parameter Default EthIPv4NetworkEnable True EthIPv4NetworkDiscovery Static EthIPv4NetworkAddress 10.0.0.1 EthIPv4NetworkMask 255.0.0.0 EthIPv4GatewayAddress 10.0.0.254 EthIPv6NetworkEnable True EthIPv6Discovery EthIPv6NetworkAddress ::/64 EthIPv6GatewayAddress DNSClientEnabled False DNSLocalHostname <undefined> DNSServerDiscovery Static DNSServernAddress <undefined> DNSSearchListDiscovery Static DNSSearchListn <undefined> NTPClientEnabled False NTPServerDiscovery Static NTPServerAddress...
  • Page 240 Command Reference Reset Table 13-18. Security Configuration Defaults Parameter Default FabricBindingEnabled False PortBindingEnabled False 13-72 59270-00 A...
  • Page 241: Security

    Command Reference Security Security Opens a Security Edit session in which to manage the security database on a switch. Refer to the “Group” command on page 13-24 and the “Securityset” command on page 13-77. Authority Admin session. The keywords Active, History, Limits, and List are available without an Admin session.
  • Page 242 Command Reference Security edit Initiates a Security Edit session in which to make changes to the security database. A Security Edit session enables you to use the Group and Securityset commands to create, add, and delete security sets, groups, and group members. To close a Security Edit session and save changes, enter the Security Save command.
  • Page 243 Command Reference Security Examples The following is an example of the Security Active command: SANbox #> security active Active Security Information SecuritySet Group GroupMember ----------- ----- ----------- alpha group1 (Port) 10:00:00:00:00:10:21:16 Authentication Chap Primary Hash Primary Secret ******** Secondary Hash SHA-1 Secondary Secret ********...
  • Page 244 Command Reference Security The following is an example of the Security List command: SANbox #> security list Active Security Information SecuritySet Group GroupMember ----------- ----- ----------- No active securityset defined. Configured Security Information SecuritySet Group GroupMember ----------- ----- ----------- alpha group1 (Port) 10:00:00:00:00:10:21:16 Authentication...
  • Page 245: Securityset

    Command Reference Securityset Securityset Manages security sets in the security database. Authority Admin session and a Security Edit session. Refer to the “Security” command on page 13-73 for information about starting a Security Edit session. The Active, Groups, and List keywords are available without an Admin session. You must close the Security Edit session before using the Activate and Deactivate keywords.
  • Page 246 Command Reference Securityset create [security_set] Creates the security set with the name given by [security_set]. A security set name must begin with a letter and be no longer than 64 characters. Valid characters are 0-9, A-Z, a-z, _, $, ^, and -. The security database supports a maximum of four security sets.
  • Page 247 Command Reference Securityset Examples The following is an example of the Securityset Active command SANbox #> securityset active Active SecuritySet Information ------------------------------ ActiveSecuritySet alpha LastActivatedBy admin@OB-session17 LastActivatedOn day month date time year The following is an example of the Securityset Groups command SANbox #>...
  • Page 248: Set Alarm

    Command Reference Set Alarm Set Alarm Controls the display of alarms in the session output stream or clears the alarm log. Authority Admin session for the Clear keyword. Otherwise, none. Syntax set alarm [option] Keywords [option] [option] can be one of the following: clear Clears the alarm log history.
  • Page 249: Set Beacon

    Command Reference Set Beacon Set Beacon Enables or disables the flashing of the Logged-In LEDs for the purpose of locating a switch. Authority None Syntax set beacon [state] Keywords [state] [state] can be one of the following: Enables the flashing beacon. Disables the flashing beacon.
  • Page 250: Set Config Port

    Command Reference Set Config Port Set Config Port Sets the port configuration parameters for one or more ports. The changes you make with this command are not retained when you reset or power cycle the switch unless you save them using the Config Save command. Authority Admin session and a Config Edit session Syntax...
  • Page 251 Command Reference Set Config Port Table 13-19. Port Configuration Parameters (Continued) Parameter Description SymbolicPortName Descriptive name for the port. The name can be up to 32 characters excluding #, semicolon (;), and comma (,). The default is Port n, where n is the port number. ALFairness Arbitration loop fairness.
  • Page 252 Auto – Suppresses the reception of RSCN messages when the port is connected to an initiator device with a QLogic adapter. For older QLogic adapters, such as the QLA2200, the DeviceScanEnabled parameter must also be enabled. The default is Auto.
  • Page 253 Command Reference Set Config Port Examples The following is an example of the Set Config Port command: SANbox #> admin start SANbox (admin) #> config edit SANbox (admin-config) #> set config port 1 A list of attributes with formatting and current values will follow. Enter a new value or simply press the ENTER key to accept the current value.
  • Page 254: Set Config Security

    Command Reference Set Config Security Set Config Security Configures the security database for the automatic saving of changes to the active security set and fabric binding. The changes you make with this command are not retained when you reset or power cycle the switch unless you save them using the Config Save command.
  • Page 255 Command Reference Set Config Security Examples The following is an example of the Set Config Security command: SANbox #> admin start SANbox (admin) #> config edit SANbox (admin-config) #> set config security A list of attributes with formatting and current values will follow. Enter a new value or simply press the ENTER key to accept the current value.
  • Page 256: Set Config Security Portbinding

    Command Reference Set Config Security Portbinding Set Config Security Portbinding Configures port binding. Authority Admin session and a Config Edit session Syntax set config security portbinding [port_number] Keywords [port_number] Initiates an editing session in which to change the port binding configuration for the port given by [port_number].
  • Page 257: Set Config Switch

    Command Reference Set Config Switch Set Config Switch Sets the switch configuration parameters. The changes you make with this command are not retained when you reset or power cycle the switch unless you save them using the Config Save command. Authority Admin session and a Config Edit session Syntax...
  • Page 258 Command Reference Set Config Switch Table 13-22. Switch Configuration Parameters (Continued) Parameter Description R_A_TOV Resource Allocation Timeout Value. The number of millisec- onds the switch waits to allow two ports to allocate enough resources to establish a link. The default is 10000. E_D_TOV Error Detect Timeout Value.
  • Page 259: Set Config Threshold

    Command Reference Set Config Threshold Set Config Threshold Sets the port alarm threshold parameters by which the switch monitors port performance and generates alarms. The changes you make with this command are not retained when you reset or power cycle the switch unless you save them using the Config Save command.
  • Page 260 Command Reference Set Config Threshold Notes The switch will down a port if an alarm condition is not cleared within three consecutive sampling windows (by default, 30 seconds). Reset the port to bring it back online. An alarm is cleared when the threshold monitoring detects that the error rate has fallen below the falling trigger.
  • Page 261: Set Config Zoning

    Command Reference Set Config Zoning Set Config Zoning Configures the zoning database. The changes you make with this command are not retained when you reset or power cycle the switch unless you save them using Config Save command. Authority Admin session and a Config Edit session Syntax set config zoning Initiates an editing session in which to change the zoning database configuration.
  • Page 262 Command Reference Set Config Zoning Examples The following is an example of the Set Config Zoning command. SANbox #> admin start SANbox (admin) #> config edit The config named default is being edited. SANbox (admin-config) #> set config zoning A list of attributes with formatting and current values will follow. Enter a new value or simply press the ENTER key to accept the current value.
  • Page 263: Set Log

    Command Reference Set Log Set Log Specifies the events to record in the event log and display on the screen. You determine what events to record in the switch event log using the Component, Level, and Port keywords. You determine what events are automatically displayed on the screen using the Display keyword.
  • Page 264 Nameserver Monitors name server status. None Monitor none of the component events. Port Monitors all port events. Monitors all QLogic Fabric Service (QFS) events. QFS governs Call Home e-mail notification. SNMP Monitors all SNMP events. Switch Monitors switch management events.
  • Page 265 Command Reference Set Log None Specifies no severity levels for display on the screen. level [filter] Specifies the severity level given by [filter] to use in monitoring and logging events for the specified components or ports. [filter] can be one of the following values: Critical Monitors critical events.
  • Page 266 Command Reference Set Log restore Restores and saves the port, component, and level settings to the default values. save Saves the log settings for the component, severity level, port, and display level. These settings remain in effect after a switch reset. The log settings can be viewed using the Show Log Settings command.
  • Page 267: Set Pagebreak

    Command Reference Set Pagebreak Set Pagebreak Specifies how much information is displayed on the screen at a time. This command is useful for disabling pagebreaks to allow command scripts to run without interruption. Authority None Syntax pagebreak [state] Keywords [state] [state] can be one of the following: Limits the display of information to 20 lines at a time.
  • Page 268 Command Reference Set Pagebreak Examples The following is an example of the Set Pagebreak command: SANbox #> set pagebreak on SANbox #> zone list Zone ZoneSet ---- ------- Zone1 alpha beta Zone2 delta echo Zone3 sierra tango Zone4 gamma delta Press any key to continue, 'q' to quit ...
  • Page 269: Set Port

    Command Reference Set Port Set Port Sets port state and speed for the specified port temporarily until the next switch reset or new configuration activation. This command also clears port counters. Authority Admin session Syntax set port clear set port [port_number] clear speed [transmission_speed] state [state]...
  • Page 270 Command Reference Set Port Offline Prevents the port from receiving signal and accepting a device login. Diagnostics Prepares the port for testing and prevents the port from accepting a device login. Down Disables the port by removing power from the port lasers. Notes Enterprise Fabric Suite 2007 and QuickTools will override any temporary administrative state changes that have been made using the Set Port State...
  • Page 271: Set Setup Callhome

    Command Reference Set Setup Callhome Set Setup Callhome Configures the Call Home database for managing e-mail notifications of fabric problems. Authority Admin session Syntax set setup callhome Prompts you in a line-by-line fashion to configure the Call Home database. Table 13-26 describes the Call Home configuration fields.
  • Page 272 Command Reference Set Setup Callhome Table 13-25. Call Home Service Configuration Settings Entry Description FromEmailAddress E-mail address that is defined as the sending address in the From: field of the e-mail message. The format is account@domain. This field is required. Undeliverable messages are returned to this address unless overridden by the ReplayToEmailAddress parameter.
  • Page 273 Command Reference Set Setup Callhome Examples The following is an example of the Set Setup Callhome command: SANbox (admin) #> set setup callhome A list of attributes with formatting and current values will follow. Enter a new value or simply press the ENTER key to accept the current value. If you wish to terminate this process before reaching the end of the list press 'q' or 'Q' and the ENTER key to do so.
  • Page 274: Set Setup Radius

    Command Reference Set Setup Radius Set Setup Radius Configures RADIUS servers on the switch. Authority Admin session Syntax set setup radius common server [server_number] Keywords common Prompts you in a line-by-line fashion to configure parameters that are common to all RADIUS servers. To configure common and specific RADIUS server parameters, omit the keyword.
  • Page 275: Specific Radius Server Configuration Parameters

    Command Reference Set Setup Radius Table 13-27. Specific RADIUS Server Configuration Parameters Parameter Description ServerIPAddress IP address (version 4 or 6) or DNS host name of the RADIUS server. The default is 10.0.0.1. ServerUDPPort User Datagram Protocol (UDP) port number on the RADIUS server.
  • Page 276 Command Reference Set Setup Radius 'QQ' and the ENTER key to so do. PLEASE NOTE: ----------- * SSL must be enabled in order to configure RADIUS User Authentication SSL can be enabled using the 'set setup services' command. Current Values: DeviceAuthOrder Local UserAuthOrder...
  • Page 277 Command Reference Set Setup Radius The following is an example of the Set Setup Radius Server command: SANbox (admin) #> set setup radius server 1 A list of attributes with formatting and current values will follow. Enter a new value or simply press the ENTER key to accept the current value. If you wish to terminate this process before reaching the end of the attributes for the server being processed, press 'q' or 'Q' and the ENTER key to do so.
  • Page 278: Set Setup Services

    Command Reference Set Setup Services Set Setup Services Configures services on the switch. Authority Admin session Syntax set setup services This command prompts you in a line-by-line fashion to enable or disable switch services. Table 13-28 describes the switch service parameters. For each parameter, enter a new value or press the Enter key to accept the current value shown in brackets.
  • Page 279 Command Reference Set Setup Services Table 13-28. Switch Services Settings (Continued) Entry Description SSLEnabled Enables (True) or disables (False) secure SSL connections for management applications including Enterprise Fabric Suite 2007, QuickTools, Application Programming Interface, and SMI-S. The default is False. This service must be enabled to authenticate users through a RADIUS server.
  • Page 280 Command Reference Set Setup Services Table 13-28. Switch Services Settings (Continued) Entry Description MgmtServerEnabled Enables (True) or disables (False) the management of the switch through third-party applications that use GS-3 Man- agement Server (MS). This parameter is the master control for the Set Config Port command parameter, MSEnable.
  • Page 281: Set Setup Snmp

    Command Reference Set Setup SNMP Set Setup SNMP Configures SNMP on the switch. Authority Admin session Syntax set setup snmp common trap [trap_number] Keywords common Prompts you in a line-by-line fashion to change SNMP configuration parameters that are common for all traps. For each parameter, enter a new value or press the Enter key to accept the current value.
  • Page 282: Snmp Trap Configuration Parameters

    Command Reference Set Setup SNMP Table 13-29. SNMP Common Configuration Parameters (Continued) Parameter Description TrapCommunity Trap community password that authorizes an SNMP agent to receive traps. This is a write-only field. The value on the switch and the SNMP management server must be the same. The trap community password can be up to 32 characters excluding #, semicolon (;), and comma (,).
  • Page 283 Command Reference Set Setup SNMP Examples The following is an example of the Set Setup Snmp Common command: SANbox (admin) #> set setup snmp common A list of attributes with formatting and current values will follow. Enter a new value or simply press the ENTER key to accept the current value. If you wish to terminate this process before reaching the end of the list press 'q' or 'Q' and the ENTER key to do so.
  • Page 284 Command Reference Set Setup SNMP The following is an example of the Set Setup Snmp Trap command: SANbox (admin) #> set setup snmp trap 1 A list of attributes with formatting and current values will follow. Enter a new value or simply press the ENTER key to accept the current value. If you wish to terminate this process before reaching the end of the list press 'q' or 'Q' and the ENTER key to do so.
  • Page 285: Set Setup System

    Command Reference Set Setup System Set Setup System Configures the network, logging, NTP server, and timer configurations on the switch. Authority Admin session Syntax set setup system ipv4 ipv6 logging timers Keywords Prompts you in a line-by-line fashion to change DNS host name configuration parameters described in Table 13-31.
  • Page 286: Ip Version 4 Ethernet Configuration Parameters

    Command Reference Set Setup System ipv4 Prompts you in a line-by-line fashion to change the switch IPv4 Ethernet configuration parameters described in Table 13-32. To configure all system parameters, omit the keyword. For each parameter, enter a new value or press the Enter key to accept the current value.
  • Page 287: Event Logging Configuration Parameters

    Command Reference Set Setup System Table 13-33. IP Version 6 Ethernet Configuration Parameters (Continued) Entry Description EthIPv6NetworkMask Ethernet IP subnet mask address. EthIPv6GatewayAddress Ethernet IP address gateway. logging Prompts you in a line-by-line fashion to change the event logging configuration parameters described in Table 13-34.
  • Page 288: Timer Configuration Parameters

    Command Reference Set Setup System Table 13-35. NTP Server Configuration Parameters (Continued) Parameter Description NTPClientEnabled Enables (True) or disables (False) the Network Time Pro- tocol (NTP) client on the switch. This client enables the switch to synchronize its time with an NTP server. This feature supports NTP version 4 and is compatible with version 3.
  • Page 289 Command Reference Set Setup System Examples The following is an example of the Set Setup System Dns command: SANbox (admin) #> set setup system dns A list of attributes with formatting and current values will follow. Enter a new value or simply press the ENTER key to accept the current value. If you wish to terminate this process before reaching the end of the list press 'q' or 'Q' and the ENTER key to do so.
  • Page 290 Command Reference Set Setup System The following is an example of the Set Setup System Ipv4 command: SANbox (admin) #> set setup system ipv4 A list of attributes with formatting and current values will follow. Enter a new value or simply press the ENTER key to accept the current value. If you wish to terminate this process before reaching the end of the list press 'q' or 'Q' and the ENTER key to do so.
  • Page 291 Command Reference Set Setup System The following is an example of the Set Setup System Logging command: SANbox (admin) #> set setup system logging A list of attributes with formatting and current values will follow. Enter a new value or simply press the ENTER key to accept the current value. If you wish to terminate this process before reaching the end of the list press 'q' or 'Q' and the ENTER key to do so.
  • Page 292 Command Reference Set Setup System The following is an example of the Set Setup System Timers command: SANbox (admin) #> set setup system timers A list of attributes with formatting and current values will follow. Enter a new value or simply press the ENTER key to accept the current value. If you wish to terminate this process before reaching the end of the list press 'q' or 'Q' and the ENTER key to do so.
  • Page 293: Set Switch State

    Command Reference Set Switch State Set Switch State Changes the administrative state for all ports on the switch. The previous Set Config Switch settings are restored after a switch reset or a reactivation of a switch configuration. Authority Admin session Syntax set switch state [state] Keywords...
  • Page 294: Set Timezone

    Command Reference Set Timezone Set Timezone Specifies the time zone for the switch and the workstation. The default is Universal Time (UTC) also known as Greenwich Mean Time (GMT). This keyword prompts you to choose a region, then a subregion to specify the time zone. Changing the time zone converts the currently displayed time to the time in the new time zone.
  • Page 295: Show About

    Command Reference Show About Show About Displays an introductory set of information about operational attributes of the switch. This command is equivalent to the Show Version command. Authority None Syntax show about Notes Table 13-37 describes the entries in the Show About command display. Table 13-37.
  • Page 296 Command Reference Show About Examples The following is an example of the Show About command: SANbox #> show about ***************************************************** Command Line Interface SHell (CLISH) ***************************************************** SystemDescription SANbox 3810 FC Switch HostName <undefined> EthIPv4NetworkAddress 10.20.11.192 EthIPv6NetworkAddress MACAddress 00:c0:dd:00:71:ee WorldWideName 10:00:00:c0:dd:00:71:ed ChassisSerialNumber FAM033100024 SymbolicName...
  • Page 297: Show Alarm

    Command Reference Show Alarm Show Alarm Displays the alarm log and session output stream display setting. Authority None Syntax show alarm settings Keywords settings Displays the status of the parameter that controls the display of alarms in the session output stream. This parameter is set using the Set Alarm command.
  • Page 298: Show Broadcast

    Command Reference Show Broadcast Show Broadcast Displays the broadcast tree information and all ports that are currently transmitting and receiving broadcast frames. Authority None Syntax show broadcast 13-130 59270-00 A...
  • Page 299: Show Chassis

    Command Reference Show Chassis Show Chassis Displays chassis component status and temperature. Authority None Syntax show chassis Examples The following is an example of the Show Chassis command. SANbox #> show chassis Chassis Information ------------------- BoardTemp (1) - Degrees Celsius PowerSupplyStatus (1) Good HeartBeatCode...
  • Page 300: Show Config Port

    Command Reference Show Config Port Show Config Port Displays configuration parameters for one or more ports. Authority None Syntax show config port [port_number] Keywords [port_number] The number of the port. Ports are numbered beginning with 0. If you omit [port_number], all ports are specified. Examples The following is an example of the Show Config Port command for port 0: SANbox #>...
  • Page 301: Show Config Security

    Command Reference Show Config Security Show Config Security Displays the security database configuration parameters. Authority None Syntax show config security Examples The following is an example of the Show Config Security command: SANbox #> show config security Configuration Name: default ------------------- Switch Security Configuration Information -----------------------------------------...
  • Page 302 Command Reference Show Config Security Portbinding Show Config Security Portbinding Displays the port binding configuration for one or more ports. Authority None Syntax show config security portbinding [port_number] Keywords [port_number] The number of the port. If you omit [port_number], the port binding configuration for all ports is displayed.
  • Page 303: Show Config Switch

    Command Reference Show Config Switch Show Config Switch Displays the switch configuration parameters. Authority None Syntax show config switch Examples The following is an example of the Show Config Switch command: SANbox #> show config switch Configuration Name: default ------------------- Switch Configuration Information -------------------------------- AdminState...
  • Page 304: Show Config Threshold

    Command Reference Show Config Threshold Show Config Threshold Displays alarm threshold parameters for the switch. Authority None Syntax show config threshold Examples The following is an example of the Show Config Threshold command: SANbox #> show config threshold Configuration Name: default ------------ Threshold Configuration Information -----------------------------------...
  • Page 305: Show Config Zoning

    Command Reference Show Config Zoning Show Config Zoning Displays zoning configuration parameters for the switch. Authority None Syntax show config zoning Examples The following is an example of the Show Config Zoning command: SANbox #> show config zoning Configuration Name: default ------------------- Zoning Configuration Information --------------------------------...
  • Page 306: Show Domains

    Command Reference Show Domains Show Domains Displays list of each domain and its worldwide name in the fabric. Authority None Syntax show domains Notes Because the SANbox 3810 cannot connect to another switch, this command displays only the principal switch. 13-138 59270-00 A...
  • Page 307: Show Donor

    Command Reference Show Donor Show Donor Displays list of current donors and extended credit configuration for all ports. Authority None Syntax show donor Examples The following is an example of the Show Donor command: 59270-00 A 13-139...
  • Page 308: Show Fabric

    Command Reference Show Fabric Show Fabric Displays list of each domain, symbolic name, worldwide name, node IP address, and port IP address in the fabric. Authority None Syntax show fabric brief Keywords brief Displays a table of switches in the fabric including domain ID, WWN, and symbolic name.
  • Page 309: Show Fdmi

    The following is an example of the Show FDMI WWN command: SANbox #> show fdmi 21:00:00:e0:8b:09:3b:17 FDMI Information ---------------- Manufacturer QLogic Corporation SerialNumber [04202 Model QLA2342 ModelDescription QLogic QLA2342 PCI Fibre Channel Adapter PortID 610000 NodeWWN 20:00:00:e0:8b:07:aa:bc HardwareVersion FC5010409-10 DriverVersion 8.2.3.10 Beta 2 (W2K VI) OptionRomVersion 1.21 FirmwareVersion 03.02.13.
  • Page 310: Show Interface

    Command Reference Show Interface Show Interface Displays the status of the active network interfaces. Authority None Syntax show interface Examples The following is an example of the Show Interface command: SANbox #> show interface eth0 Link encap:Ethernet HWaddr 00:C0:DD:00:00:27 inet addr:10.20.116.131 Bcast:10.20.116.255 Mask:255.255.255.0 inet6 addr: fd70:c154:c2df:116:2c0:ddff:fe00:27/64 Scope:Global...
  • Page 311: Show Log

    Chassis hardware components such as fans and power supplies Command line interface events Eport E_Port events Mgmtserver Management server events Nameserver Name server events Other Miscellaneous events Port Port events QLogic Fabric Service events. QFS governs Call Home e-mail notification. SNMP SNMP events 59270-00 A 13-143...
  • Page 312 Command Reference Show Log Table 13-38. Log Monitoring Components (Continued) Component Description Switch Switch management events Zoning Zoning conflict events The SANbox 3810 switch does not support E_Ports. display [filter] Displays log events on the screen according to the component or severity level filter given by [filter].
  • Page 313 Command Reference Show Log level Displays the severity settings for event logging and the setting for the display level. options Displays the options that are available for configuring event logging and automatic display to the screen. Refer to the “Set Log” command on page 13-95 information about how to configure event logging and display level.
  • Page 314: Show Lsdb

    Command Reference Show LSDB Show LSDB Displays Link State database information, Authority None Syntax show lsdb Examples The following is an example of the Show LSDB command: SANbox #> show lsdb Link State Database Information ------------------------------- LsID 34: Age=1176, Incarnation=0x800000e5 NeighborDomain=36, LocalPort=6, RemotePort=7, Cost=500 NeighborDomain=35, LocalPort=16, RemotePort=16, Cost=100 NeighborDomain=35, LocalPort=18, RemotePort=19, Cost=100...
  • Page 315: Show Mem

    Command Reference Show Mem Show Mem Displays information about memory activity. Authority None Syntax show mem [count] Keywords [count] The number of seconds for which to display memory information. If you omit [count], the value 1 is used. Displayed memory values are in 1K block units. NOTE: This keyword will display memory activity updates until [count] is reached–it cannot be interrupted.
  • Page 316: Show Ns

    Command Reference Show Ns Show Ns Displays the WWNs for devices in the fabric. Authority None Syntax show ns [option] Keywords [option] The domain IDs or port IDs for which to display name server information. If you omit [option], name server information for the local domain ID is displayed. [option] can have the following values: Displays WWNs for all switches and ports.
  • Page 317 Command Reference Show Ns The following is an example of the Show Ns [port_ID] command: SANbox #> show ns 1301e1 Port ID: 1301e1 -------- PortType PortWWN 21:00:00:20:37:73:13:69 SymbolicPortName NodeWWN 20:00:00:20:37:73:13:69 SymbolicNodeName NodeIPAddress diskarray7.anycompany.com ClassOfService PortIPAddress FabricPortName 20:01:00:c0:dd:00:bc:56 FC4Type FC4Desc (NULL) 59270-00 A 13-149...
  • Page 318: Show Pagebreak

    Command Reference Show Pagebreak Show Pagebreak Displays the current pagebreak setting. Authority None Syntax show pagebreak Notes The pagebreak setting limits the display of information to 20 lines (On) or allows the continuous display of information without a break (Off). Examples The following is an example of the Show Pagebreak command: SANbox #>...
  • Page 319: Show Perf

    Command Reference Show Perf Show Perf Displays port performance in frames/second and bytes/second. If you omit the keyword, the command displays data transmitted (out), data received (in), and total data transmitted and received in frames/second and bytes/second. Transmission rates are expressed in thousands (K) and millions (M). Authority None Syntax...
  • Page 320 Command Reference Show Perf outbyte [port_list] Displays continuous performance data in bytes/second transmitted for the ports given by [port_list]. [port_list] can be a set of port numbers and ranges delimited by spaces. For example, [0 2 10-15] specifies ports 0, 2, 10, 11, 12, 13, 14, and 15.
  • Page 321 Command Reference Show Perf Examples The following is an example of the Show Perf command: SANbox #> show perf Port Bytes/s Bytes/s Bytes/s Frames/s Frames/s Frames/s Number (in) (out) (total) (in) (out) (total) ------ ------- ------- ------- -------- -------- -------- 136M 136M 136M...
  • Page 322: Show Port

    Command Reference Show Port Show Port Displays operational information for one or more ports. Authority None Syntax show port [port_list] Keywords [port_list] The number of the port for which to display information. [port_list] can be a set of port numbers and ranges delimited by spaces. For example, [0 2 10-15] specifies ports 0, 2, 10, 11, 12, 13, 14, and 15.
  • Page 323 Command Reference Show Port Table 13-39. Show Port Parameters (Continued) Entry Description DecodeError Number of decode errors detected DownstreamISL Downstream ISL state. True indicates a connection to another switch that is not the principal switch. POSTFaultCode Fault code from the most recent Power-on self test POSTStatus Status from the most recent Power-on self test EpConnects...
  • Page 324 Command Reference Show Port Table 13-39. Show Port Parameters (Continued) Entry Description LIP_F8_AL_PS This LIP denotes a loop failure detected by the L_Port identi- fied by AL_PS. LIP_F7_F7 A loop initialization primitive frame used to acquire a valid AL_PA. LIP_F8_F7 A loop initialization primitive frame used to indicate that a loop failure has been detected at the receiver.
  • Page 325 Command Reference Show Port Table 13-39. Show Port Parameters (Continued) Entry Description PortWWN Worldwide port name PrimSeqErrors Number of primitive sequence errors detected RunningType Operational port type: F, FL, E, or Unknown RxLinkResets Number of link reset primitives received from an attached device.
  • Page 326 Command Reference Show Port Examples The following is an example of the Show Port command: SANbox #> show port 1 Port Number: 1 ------------ AdminState Online PortWWN 20:01:00:c0:dd:0d:53:e7 AsicNumber POSTFaultCode 00000000 AsicPort POSTStatus Passed ConfigType RunningType Unknown DownstreamISL False MediaPartNumber PLRXPL-VE-SG4-62 EpConnState None...
  • Page 327: Show Postlog

    Command Reference Show Postlog Show Postlog Displays the Power On Self Test (POST) log, which contains results from the most recently failed POST. Authority None Syntax show postlog show port log Examples The following is an example of the Show Postlog command: SANbox #>...
  • Page 328: Show Setup Callhome

    Command Reference Show Setup Callhome Show Setup Callhome Displays the Call Home database configuration. Authority None Syntax show setup callhome Examples The following is an example of the Show Setup Callhome command: SANbox #> show setup callhome Callhome Information -------------------- PrimarySMTPServerAddr 0.0.0.0 PrimarySMTPServerPort...
  • Page 329: Show Setup Mfg

    Command Reference Show Setup Mfg Show Setup Mfg Displays manufacturing information about the switch. Authority None Syntax show setup mfg Examples The following is an example of the Show Setup Mfg command: SANbox #> show setup mfg Manufacturing Information ------------------------- BuildDate Unknown ChassisPartNumber...
  • Page 330: Show Setup Radius

    Command Reference Show Setup Radius Show Setup Radius Displays RADIUS server information. Authority None Syntax show setup radius common server [server_number] Keywords common Displays the configuration parameters that are common for all RADIUS servers. To display common and server-specific information, omit the keyword. Refer to Table 13-26 for a description of the common configuration parameters.
  • Page 331: Show Setup Services

    Command Reference Show Setup Services Show Setup Services Displays switch service status information. Authority None Syntax show setup services Examples The following is an example of the Show Setup Services command: SANbox #> show setup services System Services ----------------------------- TelnetEnabled True SSHEnabled False...
  • Page 332: Show Setup Snmp

    Command Reference Show Setup Snmp Show Setup Snmp Displays the current SNMP settings. Authority None Syntax show setup snmp common trap Keywords common Displays SNMP configuration parameters that are common to all traps. To display common and trap-specific parameters, omit the keyword. Refer to Table 13-29 descriptions of the common configuration parameters.
  • Page 333: Show Setup System

    Command Reference Show Setup System Show Setup System Displays network, logging, NTP server, and timer parameters on the switch. Authority None Syntax show setup system ipv4 ipv6 logging timers Keywords Displays DNS host name configuration parameters. To display all system configuration parameters, omit the keyword.
  • Page 334 Command Reference Show Setup System Examples The following is an example of the Show Setup System Dns command: SANbox #> show setup system dns System Information ------------------ DNSClientEnabled False DNSLocalHostname <undefined> DNSServerDiscovery Static DNSServer1Address <undefined> DNSServer2Address <undefined> DNSServer3Address <undefined> DNSSearchListDiscovery Static DNSSearchList1 <undefined>...
  • Page 335 Command Reference Show Setup System The following is an example of the Show Setup System Ntp command: SANbox #> show setup system ntp System Information ------------------ NTPClientEnabled False NTPServerDiscovery Static NTPServerAddress 51.68.85.102 The following example of the Show Setup System Timers command: SANbox #>...
  • Page 336: Show Steering

    Command Reference Show Steering Show Steering Displays the routes that data takes in the fabric. Authority None Syntax show steering [domain_id] Keywords [domain_id] The domain ID for which to display route information. If you omit [domain_id], the system displays routes for all switches in the fabric. Examples The following is an example of the Show Steering command: SANbox #>...
  • Page 337: Show Switch

    Command Reference Show Switch Show Switch Displays switch operational information. Authority None Syntax show switch Notes Table 13-40 describes the switch operational parameters. Table 13-40. Switch Operational Parameters Parameter Description SymbolicName Descriptive name for the switch SwitchWWN Switch worldwide name BootVersion PROM boot version CreditPool...
  • Page 338 Command Reference Show Switch Table 13-40. Switch Operational Parameters (Continued) Parameter Description PrincipalSwitchRole Principal switch status. True indicates that this switch is the principal switch. POSTFaultCode Fault code from the most recent Power-on self test POSTStatus Status from the most recent Power-on self test TestFaultCode Fault code from the most recent switch test TestStatus...
  • Page 339: Show System

    Command Reference Show System Show System Displays the operational status of the Ethernet and DNS host name configuration parameters. Authority None Syntax show system Examples The following is an example of the Show System command: SANbox #> show system Assigned System Network Information ----------------------------------- Hostname <undefined>...
  • Page 340: Show Testlog

    Command Reference Show Testlog Show Testlog Displays the contents of the diagnostic field test log file. Authority None Syntax show testlog show test log Examples The following is an example of the Show Testlog command: SANbox #> show testlog Queue: Sequence Count: Success Count: Failed Count:...
  • Page 341: Show Timezone

    Command Reference Show Timezone Show Timezone Displays the current time zone setting. Authority None Syntax show timezone Examples The following is an example of the Show Timezone command: SANbox #> show timezone America/Chicago 59270-00 A 13-173...
  • Page 342: Show Topology

    Command Reference Show Topology Show Topology Displays information about devices connected to the switch. Authority None Syntax show topology [port_number] Keywords [port_number] Displays the devices connected to the port given by [port_number]. Examples The following is an example of the Show Topology command: SANbox #>...
  • Page 343: Show Users

    Command Reference Show Users Show Users Displays a list of logged-in users. This is equivalent to the User List command. Authority None Syntax show users brief Keywords brief Displays just the account name and client. Examples The following is an example of the Show Users command: SANbox #>...
  • Page 344: Show Version

    Command Reference Show Version Show Version Displays an introductory set of information about operational attributes of the switch. This command is equivalent to the Show About command. Authority None Syntax show version Notes Table 13-41 describes the Show Version command display entries. Table 13-41.
  • Page 345 Command Reference Show Version Examples The following is an example of the Show Version command. SANbox #> show version ***************************************************** Command Line Interface SHell (CLISH) ***************************************************** SystemDescription SANbox 3810 FC Switch HostName <undefined> EthIPv4NetworkAddress 10.20.11.192 EthIPv6NetworkAddress MACAddress 00:c0:dd:00:71:ee WorldWideName 10:00:00:c0:dd:00:71:ed ChassisSerialNumber 033100024 SymbolicName...
  • Page 346: Shutdown

    Command Reference Shutdown Shutdown Terminates all data transfers on the switch at convenient points and closes the Telnet session. Always power cycle the switch after entering this command. Authority Admin session Syntax shutdown Notes When the shutdown is complete, the Heartbeat LED is extinguished. 13-178 59270-00 A...
  • Page 347: Snmpv3User

    Command Reference Snmpv3user Snmpv3user Manages SNMP version 3 user accounts on the switch. Authority Admin session except for the List keyword Syntax snmpv3user delete [account] edit list Keywords Creates an SNMP version 3 user account, prompting you for the parameters that are described in Table 13-42.
  • Page 348 Command Reference Snmpv3user list Displays SNMP version 3 user accounts, group, authentication type, and privacy type. This keyword does not require an Admin session. Examples The following is an example of the Snmpv3user Add command: SANbox #> admin start SANbox (admin) #> snmpv3user add A list of SNMPV3 user attributes with formatting and default values as applicable will follow.
  • Page 349: Test Cancel

    Command Reference Test Cancel Test Cancel Authority Admin session Syntax test cancel port [port_number] Keywords port [port_number] Cancel the test for the port given by [port_number]. [port_number] can be 0–7. Examples The following example cancels the test running on port 15: SANbox (admin) #>...
  • Page 350: Test Port

    Command Reference Test Port Test Port Tests individual ports using an offline or online test. Authority Admin session Syntax test port [port_number] offline [loopback_type] online Keywords [port_number] The port to be tested. [port_number] can be 0–7. offline [loopback_type] Performs an offline test of the type given by [loopback_type] on the port given by [port_number].
  • Page 351: Port Test Parameters

    Command Reference Test Port Notes Table 13-43 describes the port test parameters. Table 13-43. Port Test Parameters Parameter Description LoopCount Number of frames sent FrameSize Number of bytes in each test frame DataPattern Pattern in the payload StopOnError Stops the test when an error occurs (True). Otherwise, the test continues to comple- tion.
  • Page 352 Command Reference Test Port Examples The following example performs an online test on port 1: SANbox #> admin start SANbox (admin) #> test port 1 online A list of attributes with formatting and current values will follow. Enter a new value or simply press the ENTER key to accept the default value.
  • Page 353: Test Status

    Command Reference Test Status Test Status Displays the status of a test in progress, or if there is no test in progress, the status of the last test that was executed. Authority None Syntax test status port [port_number] switch Keywords port [port_number] Display test status for the port given by [port_number].
  • Page 354: Test Switch

    Command Reference Test Switch Test Switch Tests all ports on the switch using a connectivity test, an offline test, or an online test. Authority Admin session Syntax test switch connectivity [loopback_type] offline [loopback_type] online Keywords connectivity [loopback_type] Performs a connectivity test of the type given by [loopback_type] on all switch ports.
  • Page 355: Switch Test Parameters

    Command Reference Test Switch Notes Table 13-44 describes the switch test parameters. Table 13-44. Switch Test Parameters Parameter Description LoopCount Number of frames sent: 1–4294967295. The default is 100. FrameSize Number of bytes in each test frame: 40–2148. The default is 256. DataPattern 32-bit hexadecimal test value, or default, which defines random data...
  • Page 356: Uptime

    Command Reference Uptime Uptime Displays the elapsed up time since the switch was last reset and the reset method. A hot reset or non-disruptive firmware activation does not reset the elapsed up time reported by this command. Authority None Syntax uptime Examples The following is an example of the Uptime command:...
  • Page 357: User

    Command Reference User User Administers and displays user accounts. Authority Admin account name and an Admin session. The Accounts and List keywords are available to all account names without an Admin session. Syntax user accounts delete [account_name] edit list brief Keywords accounts Displays all user accounts that exist on the switch.
  • Page 358 Command Reference User list brief Displays the list of users currently logged in, the login date, and the login time. The User List command is equivalent to the Show Users command. This keyword is available to all account names without an Admin session. To display just the account name and client, enter the User List Brief command.
  • Page 359 Command Reference User The following is an example of the User Edit command: SANbox (admin) #> user edit Press 'q' and the ENTER key to abort this command. account name (1-15 chars) : user1 set account expiration in days (0-2000, 0=never): [0] should this account have admin authority? (y/n): [n] OK to modify user account 'user1' with no admin authority and to expire in 0 days?
  • Page 360: Whoami

    Command Reference Whoami Whoami Displays the account name, session number, and switch domain ID for the Telnet session. Authority None Syntax whoami Examples The following is an example of the Whoami command: SANbox #> whoami User name : admin@session2 Switch name : SANbox Switch domain ID: 21 (0x15) 13-192...
  • Page 361: Zone

    Command Reference Zone Zone Manages zones and zone membership on a switch. Authority Admin session and a Zoning Edit session. Refer to the “Zoning Edit” command on page 13-204 for information about starting a Zoning Edit session. The List, Members, and Zonesets keywords are available without an Admin session. Syntax zone add [zone] [member_list]...
  • Page 362 Command Reference Zone delete [zone] Deletes the specified zone given by [zone] from the zoning database. If the zone is a component of the active zone set, the zone will not be removed from the active zone set until the active zone set is deactivated. You must enter the Zoning Save command afterwards to save your changes.
  • Page 363 Command Reference Zone Examples The following is an example of the Zone List command: SANbox #> zone list Zone ZoneSet ---- ------- wwn_b0241f zone_set_1 wwn_23bd31 zone_set_1 wwn_221416 zone_set_2 wwn_2215c3 zone_set_2 wwn_0160ed zone_set_3 The following is an example of the Zone Members command: SANbox #>...
  • Page 364: Zoneset

    Command Reference Zoneset Zoneset Manages zone sets and component zones across the fabric. Authority Admin session and a Zoning Edit session. Refer to the “Zoning Edit” command on page 13-204 for information about starting a Zoning Edit session. The Active, List, and Zones keywords are available without an Admin session.
  • Page 365 Command Reference Zoneset create [zone_set] Creates the zone set with the name given by [zone_set]. A zone set name must begin with a letter and be no longer than 64 characters. Valid characters are 0-9, A-Z, a-z, _, $, ^, and -. The zoning database supports a maximum of 256 zone sets.
  • Page 366 Command Reference Zoneset Examples The following is an example of the Zoneset Active command: SANbox #> zoneset active Active ZoneSet Information -------------------------- ActiveZoneSet Bets LastActivatedBy admin@OB-session6 LastActivatedOn day month date time year The following is an example of the Zoneset List command: SANbox #>...
  • Page 367: Zoning Active

    Command Reference Zoning Active Zoning Active Displays information for the active zone set or saves the active zone set to the non-volatile zoning database. Authority Admin session for the Capture keyword. Syntax zoning active capture Keywords capture Saves the active zone set to the non-volatile zoning data base. Examples The following is an example of the Zoning Active command: SANbox #>...
  • Page 368: Zoning Cancel

    Command Reference Zoning Cancel Zoning Cancel Closes the current Zoning Edit session. Any unsaved changes are lost. Authority Admin session and a Zoning Edit session. Syntax zoning cancel Examples The following is an example of the Zoning Cancel command: SANbox #> admin start SANbox (admin) #>...
  • Page 369: Zoning Clear

    Command Reference Zoning Clear Zoning Clear Clears all inactive zone sets from the volatile edit copy of the zoning database. This keyword requires a zoning edit session. This keyword does not affect the non-volatile zoning database. However, if you enter the Zoning Clear command followed by the Zoning Save command, the non-volatile zoning database will be cleared from the switch.
  • Page 370: Zoning Configured

    Command Reference Zoning Configured Zoning Configured Displays the contents of the non-volatile zoning database. Authority None Syntax zoning configured Examples The following is an example of the Zoning Configured command: SANbox #> zoning configured Configured (saved in NVRAM) Zoning Information ZoneSet Zone ZoneMember...
  • Page 371: Zoning Delete Orphans

    Command Reference Zoning Delete Orphans Zoning Delete Orphans Deletes all objects that are not part of the active zone set, including zone sets, zones, and aliases. Authority Admin session Syntax zoning delete orphans Examples The following is an example of the Zoning Delete Orphans command: SANbox #>...
  • Page 372: Zoning Edit

    Command Reference Zoning Edit Zoning Edit Opens a Zoning Edit session for the non-volatile zoning database or the merged zone set in which to create and manage zone sets and zones. Refer to the “Zone” command on page 13-193 and the “Zoneset”...
  • Page 373: Zoning Edited

    Command Reference Zoning Edited Zoning Edited Displays the contents of the edited zoning database. Authority Admin session and a Zoning Edit session Syntax zoning edited Examples The following is an example of the Zoning Edited command: SANbox (admin-zoning) #> zoning edited Edited (unsaved) Zoning Information ZoneSet Zone...
  • Page 374: Zoning History

    Command Reference Zoning History Zoning History Displays a history of zoning modifications. This keyword does not require an Admin session. History information includes the following: Time of the most recent zone set activation or deactivation and the user who performed it Time of the most recent modifications to the zoning database and the user who made them.
  • Page 375: Zoning Limits

    Command Reference Zoning Limits Zoning Limits Displays the limits and numbers of zone sets, zones, aliases, members per zone, members per alias, and total members in the zoning database. Authority None Syntax zoning limits brief Keywords brief Displays zoning limits for each category, the current number of objects, and the applicable zoning database (non-volatile or active).
  • Page 376: Zoning List

    Command Reference Zoning List Zoning List Lists all zoning definitions, including the applicable zoning database. Authority None Syntax zoning list Examples The following is an example of the Zoning List command: SANbox #> zoning list Active (enforced) ZoneSet Information ZoneSet Zone ZoneMember --------------------------------...
  • Page 377: Zoning Merged

    Command Reference Zoning Merged Zoning Merged Displays the contents of the merged zone set, or saves the merged zone set to the non-volatile zoning database. Authority Admin session for the Capture keyword. Syntax zoning merged capture Keywords capture Saves the merged zone set to the non-volatile zoning database. You must enter Zoning Save command afterwards to save your changes.
  • Page 378: Zoning Restore

    Command Reference Zoning Restore Zoning Restore Restores the volatile zoning database with the contents of the non-volatile zoning database. If the MergeAutoSave parameter is False (see Table 13-13), you can use this command to revert changes to the merged zone set that were propagated from another switch in the fabric through zone set activation or merging fabrics.
  • Page 379: Zoning Save

    Command Reference Zoning Save Zoning Save Saves changes made during the current Zoning Edit session. The system informs you that the zone set must be activated to implement any changes. Authority Admin session and a Zoning Edit session. Syntax zoning save Examples The following is an example of the Zoning Save command: SANbox #>...
  • Page 380 Command Reference Zoning Save Notes 13-212 59270-00 A...
  • Page 381: Index

    Index alias add members 6-20, 13-4 account name copy 6-20, 13-4 admin 1-2 create 6-19, 13-4 display 13-189, 13-192 delete 6-19, 13-5 factory 2-1 delete members 13-5 maintenance mode 2-1 display list 13-5 activation display members 13-5 firmware 4-19, 4-20 information 6-7 security 8-9, 8-11 management 6-19...
  • Page 382 SANbox 3810 Fibre Channel Switch Command Line Interface Guide chassis status 13-130, 13-131 command backup file 4-14 entry 1-4 beacon 4-16, 13-81 examples 13-2 binding listing 13-2 fabric 13-25, 13-29 notes 13-2 port 5-8, 13-88 reference 13-1 Boot Protocol 13-118, 13-119 rules and conventions 13-2 broadcast 13-130 syntax 13-2...
  • Page 383 SANbox 3810 Fibre Channel Switch Command Line Interface Guide Create command 13-17 Ethernet connection 11-2 Certificate example 7-3 event Support example 1-6 message format 10-2 credit 13-139 output stream control 10-3 critical event 10-1 remote logging 10-6 Cyclic Redundancy Check errors 5-10 severity level 10-1 event log clear 10-5...
  • Page 384 SANbox 3810 Fibre Channel Switch Command Line Interface Guide File Transfer Protocol group download files 1-8, 4-14 add members 8-13, 13-25 download firmware 4-21 add to security set 8-11 restore configuration file 4-15 copy 8-12, 13-27 service 13-111 create 8-12, 13-27 user account 2-1 delete 8-12 firmware 4-20...
  • Page 385 SANbox 3810 Fibre Channel Switch Command Line Interface Guide I/O Stream Guard 13-84 keywords 13-2 idle session limits 4-28 Image command 13-36 Install example 4-19 inactivity limits 4-28 limits 13-207 informative event 10-1 Link Control Frame 13-83 internal test 5-12, 13-182, 13-186 link state database 13-146 Internet Protocol Lip command 13-52...
  • Page 386 SANbox 3810 Fibre Channel Switch Command Line Interface Guide message Passwd command 2-4, 13-54 format 11-3 password queue 11-8, 11-16 change 13-54 MS - See Management Server default 1-2 Multi-Frame Sequence bundling 13-84 File Transfer Protocol 1-8 switch 13-54 user account 2-4 performance tuning 13-83 Ping command 13-55 name server information 4-2, 13-148...
  • Page 387 SANbox 3810 Fibre Channel Switch Command Line Interface Guide profile Reset command 13-62 copy 11-12, 13-56 Callhome example 11-7, 11-16, 11-17 create 11-9, 13-56 Config example 6-10 delete 11-10, 13-57 Factory example 6-10 edit 13-57 IP Security example 3-7 modify 11-11 Ipsec example 3-19 rename 11-12, 13-57 Port example 5-9...
  • Page 388 SANbox 3810 Fibre Channel Switch Command Line Interface Guide Security command 13-73 security set Activate example 8-9 activate 8-11, 13-77 Active example 8-4 active 8-4 Clear example 8-10 add group 8-11 Edit example 8-9 add member group 13-77 History example 8-6 configured 8-2 Limits example 8-6 copy 8-11, 13-77...
  • Page 389 SANbox 3810 Fibre Channel Switch Command Line Interface Guide Set Config Switch command 13-89 Show Config Port command 13-132 example 4-13 example 5-2 Set Config Threshold command 13-91 Show Config Security command 13-133 example 5-11 example 4-7 Set Config Zoning command 13-93 port binding 5-8 example 6-10 Show Config Security Port command 13-134...
  • Page 390 SANbox 3810 Fibre Channel Switch Command Line Interface Guide Show Switch command 13-169 switch Show System command 13-171 administrative state 13-125 Show Test Log command 13-172 configuration 4-1, 4-11, 13-89 Show Timezone command 13-173 configuration defaults 13-65 Show Topology command 13-174 configuration display 13-135 Show Users command 13-175 configuration parameters 4-6, 4-13...
  • Page 391 SANbox 3810 Fibre Channel Switch Command Line Interface Guide Test Port command 13-182 example 5-12 Virtual Interface preference routing 13-84 Test Status command 13-185 Test Switch command 13-186 TFTP - See Trivial File Transfer Protocol time 4-18 between resets 4-5 warning 10-1 set and display 4-16, 13-20 web applet...
  • Page 392 SANbox 3810 Fibre Channel Switch Command Line Interface Guide zone set zoning activate 6-16, 13-196 configuration 6-1, 13-93 active 6-1, 6-4, 6-13, 13-199 configuration display 13-137 add member zone 13-196 configuration parameters 4-6 add zones 6-16 database 13-64 configured 6-2 edit session 13-1 copy 6-16, 13-196 hardware enforced 6-1...
  • Page 393 SANbox 3810 Fibre Channel Switch Command Line Interface Guide Zoning Merged command 13-209 Capture example 6-13 Zoning Restore command 13-210 Zoning Save command 13-211 59270-00 A Index-13...
  • Page 394 SANbox 3810 Fibre Channel Switch Command Line Interface Guide Notes Index-14 59270-00 A...
  • Page 396 Information supplied by QLogic Corporation is believed to be accurate and reliable. QLogic Corporation assumes no responsibility for any errors in this brochure. QLogic Corporation reserves the right, without notice, to make changes in product design or specifications.

Table of Contents