QLogic Corporation reserves the right to change product specifications at any time without notice. Applications described in this document for any of these products are for illustrative purposes only. QLogic Corporation makes no representation nor warranty that such applications are suitable for the specified use without further testing or modification.
Page 4
User’s Guide Enterprise Fabric Suite 5800V Series Fibre Channel Switches Working with Ports........1-26 Managing Fabrics Fabric Firmware and Software Versions .
Page 5
User’s Guide Enterprise Fabric Suite 5800V Series Fibre Channel Switches Managing Device Port Nicknames ......2-28 Creating a Nickname .
Page 6
User’s Guide Enterprise Fabric Suite 5800V Series Fibre Channel Switches Managing Fabric Zoning Zoning Concepts ..........Zones.
Page 7
User’s Guide Enterprise Fabric Suite 5800V Series Fibre Channel Switches Adding a Member to an Alias ....... 4-24 Removing an Alias from All Zones .
Page 8
User’s Guide Enterprise Fabric Suite 5800V Series Fibre Channel Switches IPsec Certificates......... 5-50 Importing a Certificate Authority .
Page 9
User’s Guide Enterprise Fabric Suite 5800V Series Fibre Channel Switches Port Symbolic Name ........6-13 Port Types .
Page 10
User’s Guide Enterprise Fabric Suite 5800V Series Fibre Channel Switches 1-10 Faceplate Display........... 1-13 1-11 Backplate Display.
Page 11
User’s Guide Enterprise Fabric Suite 5800V Series Fibre Channel Switches 5-12 Advanced Switch Properties Dialog Box ....... . . 5-24 5-13 System Services Dialog Box .
Page 12
User’s Guide Enterprise Fabric Suite 5800V Series Fibre Channel Switches 6-14 Default Graph Options Dialog Box ........6-31 List of Tables Workstation Requirements .
User’s Guide Enterprise Fabric Suite 5800V Series Fibre Channel Switches 59266-01 B xiii...
Page 14
User’s Guide Enterprise Fabric Suite 5800V Series Fibre Channel Switches 59266-01 B...
Page 15
QLogic 5800V Series Stackable Fibre Channel Switch (firmware version 8.0). NOTE: If you haven't purchased QLogic Enterprise Fabric Suite, try it for 30 days free of charge. Enterprise Fabric Suite is a suite of tools for fabric management, performance monitoring, fabric monitoring, distance configuration, switch configuration with configuration and zoning wizards, and much more.
Related Materials Refer to the following manual for information about switch hardware and installation. QLogic 5800V Series Fibre Channel Stackable Switch Installation Guide QLogic 5800V Series Stackable Fibre Channel Switch Command Line Interface Guide Documentation Conventions This guide uses the following documentation conventions: ...
Press the UP ARROW key. Text in italics indicates terms, emphasis, variables, or document titles. For example: For a complete listing of license agreements, refer to the QLogic Software End User License Agreement. What are shortcut keys? ...
Page 18
Preface JDOM License Products derived from this software may not be called "JDOM", nor may "JDOM" appear in their name, without prior written permission from the JDOM Project Management (pm@jdom.org). In addition, we request (but do not require) that you include in the end-user documentation provided with the redistribution and/or in the software itself an acknowledgement equivalent to the following: "This product includes software developed by the JDOM Project (http://www.jdom.org/)."...
Technical Certification courses include installation, maintenance and troubleshooting QLogic products. Upon demonstrating knowledge using live equipment, QLogic awards a certificate identifying the student as a certified professional. You can reach the training professionals at QLogic by e-mail at training@qlogic.com. Contact Information QLogic Technical Support for products under warranty is available during local standard working hours excluding QLogic Observed Holidays.
Technical Support Knowledge Database The QLogic knowledge database is an extensive collection of QLogic product information that you can search for specific solutions. We are constantly adding to the collection of information in our database to provide answers to your most urgent questions.
Using Enterprise Fabric Suite This chapter describes how to install and configure the Enterprise Fabric Suite (EFS) application, which includes the Performance View application. This chapter also describes the user interface. Workstation Requirements The requirements for fabric management workstations running Enterprise Fabric Suite are described in Table 1-1:...
NOTE: A CD-ROM containing a free 30-day trial version of the Enterprise Fabric Suite application is included with all QLogic 5000 Series switches. During installation you will be prompted to enter the serial number and license key provided to activate the 30-day trial version. Contact your switch distributor or authorized reseller to purchase Enterprise Fabric Suite.
1–Using Enterprise Fabric Suite Starting Enterprise Fabric Suite For a Solaris platform: Open a terminal window. If the disk isn’t already mounted, enter the following command: volcheck Enter following command to move to the directory on the CD-ROM that contains the executable: cd /cdrom/cdrom0/data/files/Management_Software/solaris Execute the install program and follow the installation instructions: Solaris_8.00.xx.xx.bin...
1–Using Enterprise Fabric Suite Starting Enterprise Fabric Suite If you have not purchased license keys, enter the serial number on the Enterprise Fabric Suite CD-ROM and click Save. If you have purchased a license key(s), enter the serial number on the Enterprise Fabric Suite CD-ROM, enter the license keys, and click Save.
1–Using Enterprise Fabric Suite Starting Enterprise Fabric Suite If this is the first time you are managing this switch, on the Initial Start dialog box, click Open Configuration Wizard. When you power-up the switch, the Configuration Wizard will recognize the switch and lead you through the configuration process.
1–Using Enterprise Fabric Suite Exiting Enterprise Fabric Suite Figure 1-4. Enterprise Fabric Suite Window Exiting Enterprise Fabric Suite To exit a Enterprise Fabric Suite application session, on the File menu, click Exit. If you have not yet saved the default fabric view file, the Save Default Fabric View File dialog box (Figure 1-5) prompts you to save the current fabric view as the...
1–Using Enterprise Fabric Suite Uninstalling Enterprise Fabric Suite The encryption key encrypts the sensitive data in the default fabric view file so that no one can open the file without the encryption key. For information about changing this encryption key, see “Changing the Encryption Key for the Default Fabric View File”...
For Solaris: /usr/opt/QLogic_Corporation/Enterprise_Fabric_Suite For Mac OS X: Users/qlogic/Applications/QLogic_Corporation/Enterprise _Fabric_Suite To uninstall the Enterprise Fabric Suite application, do the following: For Windows, browse for the uninstall program file or the shortcut/link that points to the uninstall program file. The uninstall program shortcut is in the...
1–Using Enterprise Fabric Suite Setting Enterprise Fabric Suite Preferences Enter a password. When you attempt to open this fabric view file, you will be prompted for this password. If you leave the File Password box blank, no password will be required when attempting to open this fabric view file. Click OK to save the view.
1–Using Enterprise Fabric Suite Setting Enterprise Fabric Suite Preferences Choose the default port view when opening the faceplate display. You can set the faceplate to reflect the current port type (default), port speed, port operational state, or port transceiver media. Regardless of the default port view you choose, you can change the port view on the faceplate display by opening the View menu and selecting a different port view option.
1–Using Enterprise Fabric Suite Using Online Help View file auto save and load prevents (checked/default) or allows prompts — to save the default fabric view file between Enterprise Fabric Suite sessions. Display initial startup dialog enables (checked/default) or disables the use —...
1–Using Enterprise Fabric Suite Enterprise Fabric Suite User Interface Enterprise Fabric Suite User Interface The Enterprise Fabric Suite application uses faceplate and backplate displays to manage the switches in a fabric. The interface (Figure 1-9) consists of a menu bar, fabric tree, graphic window, data windows (some with buttons), and data window tabs.
1–Using Enterprise Fabric Suite Enterprise Fabric Suite User Interface Figure 1-10. Faceplate Display Figure 1-11 shows the backplate display for a dual power supply Fibre Channel Switch. Figure 1-11. Backplate Display 59266-01 B 1-13...
1–Using Enterprise Fabric Suite Enterprise Fabric Suite User Interface NOTE: Mouse-over information appears when you rest the cursor over key elements in the Enterprise Fabric Suite interface, such as ports, LEDs, and fabric tree entries. Fabric Tree The Enterprise Fabric Suite application enables you to manage the switches in multiple fabrics.
1–Using Enterprise Fabric Suite Enterprise Fabric Suite User Interface Next to each fabric tree entry is a small icon that uses color to indicate operational status: A green icon indicates normal operation. A yellow icon indicates that a switch is operational, but may require attention to maintain maximum performance.
1–Using Enterprise Fabric Suite Enterprise Fabric Suite User Interface Switch—displays current network and switch configuration data for the selected switch. For more information, see “Switch data window” on page 5-7. Link—displays a list of the inter-switch links in the fabric. For information on switch links, see “Link Data Window”...
1–Using Enterprise Fabric Suite Enterprise Fabric Suite User Interface Status section Figure 1-13. Alerts panel Menus The menus and the included tasks vary depending on the type of display. For example, the Port menu and many of the Switch menu selections are only available on the faceplate display.
Page 38
1–Using Enterprise Fabric Suite Enterprise Fabric Suite User Interface Table 1-2. Topology Menu Options (Continued) Menu Options Fabric Add Fabric Remove Fabric Nicknames Fabric Tracker Save Snapshot Analyze Snapshots Security Consistency Checklist Rediscover Fabric Start Performance View FC TraceRoute TR Mapping Manager Show Event Browser Switch Delete*...
1–Using Enterprise Fabric Suite Enterprise Fabric Suite User Interface Table 1-2. Topology Menu Options (Continued) Menu Options Help Help Topics License Info About Faceplate Display Menu The Faceplate menu options, listed in Table 1-3, are available when a stack or switch is selected on the fabric tree, except as noted.
Page 40
1–Using Enterprise Fabric Suite Enterprise Fabric Suite User Interface Table 1-3. Faceplate Menu Options (Continued) Menu Options Switch Archive Restore (entry switch only) These options are avail- able only when a switch is User Accounts selected on the fabric tree. Set Date/Time Switch Properties Advanced Switch Properties (entry switch only)
Page 41
1–Using Enterprise Fabric Suite Enterprise Fabric Suite User Interface Table 1-3. Faceplate Menu Options (Continued) Menu Options Stack Refresh Stack These options are avail- Select All Ports able when a stack is Syslog selected on the fabric tree. SNMP Properties Set Date/Time User Accounts Security Consistency Checklist...
1–Using Enterprise Fabric Suite Enterprise Fabric Suite User Interface Table 1-3. Faceplate Menu Options (Continued) Menu Options Security Edit Security These options are avail- Edit Security Config able only on a secure entry Activate Security Set switch. Deactivate Security Set View Refresh View Port Types...
1–Using Enterprise Fabric Suite Enterprise Fabric Suite User Interface Shortcut Menus Shortcut menus provide quick access to the menu options within the current context of the application. They are displayed when you right-click on certain areas of the topology or faceplate displays, such as inside the graphic window of the topology display, or on a port on the faceplate display.
1–Using Enterprise Fabric Suite Enterprise Fabric Suite User Interface Tool Bar The tool bar consists of a row of graphical buttons that provide access to Enterprise Fabric Suite functions. The tool bar buttons are an alternative method to using the menus. The Tool bar options are described in Table 1-4.
Page 45
1–Using Enterprise Fabric Suite Enterprise Fabric Suite User Interface Switch icon shape and color provide information about the switch and its operational state. Lines represent links between switches. The topology display uses green to indicate normal operation, yellow to indicate operational with errors, red to indicate a potential failure or non-operational state, and blue to indicate unknown, unreachable, or unmanageable.
1–Using Enterprise Fabric Suite Enterprise Fabric Suite User Interface Working with Ports Ports are selectable and serve as access points for other displays and menus. You select ports to display information about them on the data window or to modify them. Context-sensitive popup menus appear when you right-click the faceplate image or on a port icon.
Managing Fabrics This chapter describes the options for managing fabrics. Fabric Firmware and Software Versions The Fabric Tracker option enables you to generate a snapshot or baseline of current system version information, which can be viewed, analyzed and compared to other snapshot files, and exported to a file. Information includes date and time, switch active firmware version, device hardware, drivers, and firmware version from FDMI.
2–Managing Fabrics Fabric Firmware and Software Versions Figure 2-1. Fabric Version Snapshot Analysis Dialog Box The color key below the scrollable area defines the meanings of the colors used. The Summary tab page shows a brief description of the changes that have occurred between the older snapshot and the newer one.
2–Managing Fabrics Managing the Fabric Database Managing the Fabric Database A fabric database contains the set of fabrics that you add during a Enterprise Fabric Suite session. Initially, if you do not open an existing fabric or fabric view file, the Enterprise Fabric Suite application opens with an empty fabric database. Adding a Fabric To add a fabric to the database: On the Open menu, click Add Fabric to view the Add a New Fabric dialog...
2–Managing Fabrics Managing the Fabric Database For security reasons, you are prompted to change your user account password initially set up by the administrator. You are prompted each time you attempt to view the fabric until you change the password. Click OK, and change the user account password.
2–Managing Fabrics Adding a New Switch to a Fabric Rediscovering a Fabric After making changes to or deleting switches from a fabric view, it may be helpful to view the actual fabric configuration again. The Rediscover Fabric option clears the current fabric information being displayed, and rediscovers all switch information.
2–Managing Fabrics Replacing a Failed Switch Configure any special switch settings. To view the Zoning Config dialog box, on the Zoning menu, click Edit Zoning Config. Plug in the ISLs, but do not connect the devices. Configure the port types for the new switch using the Port Properties dialog box.
2–Managing Fabrics Displaying Fabric Information Reconnect the inter-switch links, target devices, and initiator devices to the replacement switch using the same ports as were used on the failed switch. Displaying Fabric Information The topology display is your primary tool for monitoring a fabric. The graphic window of the topology display provides status information for switches, inter-switch links, and the Ethernet connection to the management workstation.
2–Managing Fabrics Displaying Fabric Information Figure 2-3. Link Data Window Displaying Fabric Status The fabric updates the topology and faceplate displays by forwarding changes in status to the management workstation as they occur. You can allow the fabric to update the display status, or you can refresh the display at any time. To refresh the topology display, do one of the following: ...
Transparent Router The Transparent Router feature provides inter-fabric routing to enable controlled and limited access between devices on a QLogic fabric and devices on a fabric of Brocade or Cisco switches. Generally, to configure Transparent Router on a QLogic switch: Change the port type of a selected port to TR_Port.
Page 56
2–Managing Fabrics Transparent Router The local QLogic fabric may consist of one or multiple switches connected by their ISLs. A specific device attached to a local switch can be mapped with one or more devices in one remote fabric over only one TR_Port on that switch. If a device attached to a QLogic switch is mapped with multiple devices in the same remote fabric, the same TR_Port must be used.
2–Managing Fabrics Transparent Router NOTE: Be sure to configure the TR_Port before connecting the remote fabric to the switch. If the remote fabric is connected to a port on the switch that is not a TR_Port, the two fabrics may establish an E_Port connection and the local and remote fabrics may merge.
2–Managing Fabrics Transparent Router NOTE: The Merge Auto Save option in the Config Zoning dialog box must be selected before you can view the TR Mapping Manager dialog box. See “Merge Auto Save” on page 4-10 for more information. To create a new TR mapping, click Add, or on the Edit menu, click Add to view the Add TR Mapping dialog box.
2–Managing Fabrics Transparent Router After you click OK in the TR Mapping Manager dialog box, the IFZs are created and saved to the switch. If there is an active zone set with TR mappings, the old IFZs are deleted and replaced with the new IFZs, and then the active zone set is re-activated.
2–Managing Fabrics Transparent Router Figure 2-5. Add TR Mapping Dialog Box Mapping a New Inter-Fabric Zone NOTE: The local fabric port to be used in the inter-fabric zone must be configured as a TR_Port before the devices are mapped. See “Port Types”...
Page 61
2–Managing Fabrics Transparent Router After selecting an option from the 3 Select a TR Port column, the OK button becomes active. Click OK to save the changes and close the Add TR Mapping dialog box. Verify that the new TR mapping members appear in the TR Mapping list of the TR Mapping Manager dialog box, and then click OK.
2–Managing Fabrics Transparent Router Remote Fabric Zoning Dialog Box The Remote Fabric Zoning dialog box (Figure 2-6) enables you to generate and save a text file containing the zoning commands required to be executed on the remote fabric so that the inter-fabric connection using a TR port is established. The user can choose the kind of remote fabric/switches to connect with the TR port so that Enterprise Fabric Suite knows which zoning commands to generate for the user.
Page 63
2–Managing Fabrics Transparent Router In the Remote Fabric Zoning dialog box (Figure 2-6), if you made and saved changes in the TR Mapping Manager dialog box, you can choose the type of zoning commands to view in the Suggested Remote Fabric Zoning Commands window of the Remote Fabric Zoning dialog box.
Page 64
2–Managing Fabrics Transparent Router NOTE: If the commands are run and the Configuration Name is not the name of the active zone set in the remote fabric, the commands attempt to replace the active zone set with a new zone set with the new name, containing only the Inter Fabric Zones.
2–Managing Fabrics Transparent Routes Data Window Transparent Routes Data Window The Transparent Routes data window displays the currently configured inter-fabric zones/routes using a TR_Port. Figure 2-7. Transparent Routes Data Window Table 2-2 describes the entries in the Transparent Routes data window. Table 2-2.
2–Managing Fabrics Transparent Routes Data Window Table 2-2. Transparent Routes Data Window Entries Entry Description Device B The WWN of the other device linked by the TR mapping. Assigned nicknames are also displayed. Details Click (i) in the Details column to view the Transparent Route dialog box, which displays detailed information on the trans- parent route.
2–Managing Fabrics Transparent Routes Data Window Event Browser The Event Browser displays a list of events generated by the switches in the fabric and the Enterprise Fabric Suite application. Events that are generated by the Enterprise Fabric Suite application are not saved on the switch, but can be saved to a file (.xml, .csv, .txt) during an Enterprise Fabric Suite session.
2–Managing Fabrics Transparent Routes Data Window The icons in the Severity column identify the operational state of the port, as described in Table 2-3. Table 2-3. Port Operational States State Description Alarm—a serviceable event. This means that attention by the user or field service is required.
2–Managing Fabrics Transparent Routes Data Window You can filter the Event Browser in the following ways: Severity—select one or more of the corresponding options to display: alarm, critical, warning, or informative events. Date/Time—select one or both of the From: and To: options, and enter the bounding timestamps (MM/DD/YY HH:MM:SS AA, where "AA"...
2–Managing Fabrics Verifying Fibre Channel Connections Filter and sort the Event Browser to obtain the preferred display. On the File menu, click Save As. Select a folder and enter a file name in which to save the event log, and then click Save.
2–Managing Fabrics Verifying Fibre Channel Connections In the Repeat area, use the arrow keys to select or type in a value (1–100) for the number of FC ping attempts to perform. In the Timeout area, select the number of seconds (0–10) to continue attempting the FC ping operation before timing out.
2–Managing Fabrics Device information and nicknames Device information and nicknames Devices are hosts and storage targets connected to the switch. A nickname is a user-definable, meaningful name that can be used in place of the World Wide Name (WWN). Assigning nicknames makes it easier to recognize device ports when zoning your fabric and when viewing the Devices data window.
2–Managing Fabrics Device information and nicknames Proxied devices are also unavailable in the Active Zoneset data window. For more information, see “Viewing Active and Configured Zone Set Information” on page 4-4. The Devices data window fields are described in Table 2-4.
2–Managing Fabrics Device information and nicknames Figure 2-14. Detailed Devices Display Window Managing Device Port Nicknames In addition to creating, editing, and deleting nicknames, you can also export the nicknames to a file, which can be imported into the Nicknames.xml file on other workstations.
2–Managing Fabrics Device information and nicknames Click on a device entry in the table, and then on the Edit menu, click Create Nickname to view the Add Nickname dialog box. In the Add Nickname dialog box, enter a nickname and WWN, and then click OK. Editing a Nickname To edit a nickname: On the Fabric menu, click Nicknames to view the Nicknames dialog box.
2–Managing Fabrics Fabric Services Click an XML nickname file in the Open dialog box. Click Open. When prompted to overwrite existing nicknames, click Yes. Fabric Services Fabric services security includes SNMP and in-band management. SNMP is the protocol governing network management and monitoring of network devices. SNMP security consists of a read community string and a write community string, that are basically the passwords that control read and write access to the switch.
2–Managing Fabrics Fabric Services Click OK to save the change to the database. Enabling In-band Management To enable in-band management: Select a switch in the fabric tree or the topology display graphic window. On the Switch menu, click Switch Properties to view the Switch Properties dialog box.
Managing Fabric Security This chapter describes connection security and user account security concepts. It also describes the tasks to configure port security, device security, and RADIUS servers. Connection Security Connection security provides an encrypted data path for switch management methods. The switch supports the Secure Shell (SSH) protocol for the command line interface and the Secure Socket Layer (SSL) protocol for management applications such as Enterprise Fabric Suite and Common Information Model (CIM).
3–Managing Fabric Security User Account Security User Account Security User account security is the process by which your user account and password are authenticated with the list of valid user accounts and passwords. The switch validates your account and password when you attempt to add a fabric using Enterprise Fabric Suite or log in to a switch through Telnet.
3–Managing Fabric Security Device Security Figure 3-1. Port Binding Dialog Box Device Security Device security provides for the authorization and authentication of devices that you attach to a switch. You can configure a switch with a group of devices against which the switch authorizes new attachments by devices, other switches, or devices issuing management server commands.
3–Managing Fabric Security Device Security Each switch maintains its own security database consisting of the active security set (if one has been activated), configured security sets, and groups. A switch may have more than one configured security set, but only one security set may be active.
3–Managing Fabric Security Device Security Use the Edit menu options or popup menu options to access Edit Security dialog box options. These options enable you to manage the security database, manage security sets, and manage security groups and members. Select a security item in the graphic window, and select an option in the Edit menu, or right-click on a security item in the graphic window, and select an option on the shortcut menus.
3–Managing Fabric Security Device Security The Active Security data window (Figure 3-4) displays a graphical representation of the active security set, its groups, and members in the security database. To view the Active Security data window, click the Active Security tab below the data window in the faceplate display.
3–Managing Fabric Security Device Security Figure 3-5. Security Config Dialog Box Auto Save enables or disables the saving of changes to the active security set in the switch non-volatile security database. Enable Auto Save to save changes to the active security set in non-volatile memory on the switch.
3–Managing Fabric Security Device Security Select the entry switch in the fabric tree. Click Security on the tool bar, or on the Security menu, click Edit Security to view the Edit Security dialog box (Figure 3-2). On the File menu, click Open to view the Open dialog box. Browse for and select a previously saved security database file, and click Open.
3–Managing Fabric Security Device Security On the Edit menu, click Create Security Set. Figure 3-6. Create a Security Set Dialog Box Enter a name for the security set, and click OK. A security set name can be up to 64 characters and must begin with a letter. Valid characters are 0–9, A–Z, a–z, _, –, ^, and $.
3–Managing Fabric Security Device Security Click Apply to display the Save Security dialog box. Click Save Security to apply changes to switch. In the Security Set Activation dialog box, click Yes to save and activate the security set, or click No to save the security set without activation. Click Close to close the Save Security dialog box.
3–Managing Fabric Security Device Security Select the entry switch from the fabric tree. Click Security on the tool bar, or on the Security menu, click Edit Security to view the Edit Security dialog box (Figure 3-2). Select a group in a security set, and on the Edit menu, click Remove Security Group from All Security sets.
3–Managing Fabric Security Device Security Figure 3-7. Create a Security Group Dialog Box Enter a name for the group, and click OK. A group name can be up to 64 characters and must begin with a letter. Valid characters are 0–9, A–Z, a–z, _, –, ^, and $.
3–Managing Fabric Security Device Security In the graphic window, select a security group, and click Security Member on the tool bar. Right-click on a security group, and select Create Members on the shortcut menu. In the graphic window, select a security group, and on the Edit menu, click Create Members.
3–Managing Fabric Security Device Security Click OK to close the Create a Security Group Member dialog box. Click Apply to display the Save Security dialog box. Click Save Security to apply changes to switch. In the Security Set Activation dialog box, click Yes to save and activate the security set, or click No to save the security set without activation.
3–Managing Fabric Security Device Security Using RADIUS Servers Remote Authentication Dial In User Service (RADIUS) provides a method to centralize the management of authentication passwords in larger networks. It has a client/server model, where the server is the password repository and third party authentication point and the clients are all of the managed devices.
3–Managing Fabric Security Device Security Figure 3-9. Radius Server Information Dialog Box—Add server To add a RADIUS server: Select a switch in the fabric tree. On the Switch menu, click Radius Servers to view the Radius Server Information dialog box (Figure 3-9).
3–Managing Fabric Security Device Security Select the Sign Packets option to enable the switch to include a digital signature (Message-Authenticator) in all RADIUS access request packets sent to the RADIUS server. A valid Message-Authenticator attribute is required in all RADIUS server responses. In the Secret box, enter the server secret.
3–Managing Fabric Security Device Security Figure 3-10. Radius Server Information Dialog Box—Remove Server To remove a RADIUS server: Select a switch in the fabric tree. On the Switch menu, click Radius Servers to view the Radius Server Information dialog box (Figure 3-10).
3–Managing Fabric Security Device Security Figure 3-11. Radius Server Information Dialog Box—Edit Server To edit information of a RADIUS server: Select a switch in the fabric tree. On the Switch menu, click Radius Servers to view the Radius Server Information dialog box (Figure 3-11).
3–Managing Fabric Security Device Security Figure 3-12. Radius Server Information Dialog Box—Modify Authentication Order To modify the authentication order information of a RADIUS server: Select a switch in the fabric tree. On the Switch menu, click Radius Servers to view the Radius Server Information dialog box (Figure 3-12).
Managing Fabric Zoning Zoning a fabric enables you to divide the ports and devices of the fabric into zones for more efficient and secure communication among functionally grouped nodes. This chapter describes zoning concepts and how to configure and manage fabric zoning.
4–Managing Fabric Zoning Zoning Concepts WWN entries define zone membership by the World Wide Name of the attached device. With this membership method, you can move WWN member devices to different switch ports in different zones without having to edit the member entry as you would with a domain ID/port number member.
4–Managing Fabric Zoning Using the Zoning Wizard Zoning Database Each switch has its own zoning database. The zoning database is made up of all aliases, zones, and zone sets that have been created on the switch or received from other switches. The switch maintains two copies of the inactive zoning database: one copy is maintained in temporary memory for editing purposes;...
4–Managing Fabric Zoning Managing the Zoning Database MaxZoneSets—maximum number of zone sets that can be configured on the switch. MaxZones—maximum number of zones that can be configured on the switch, including orphan zones. MaxAliases—maximum number of aliases that can be configured on the switch.
4–Managing Fabric Zoning Managing the Zoning Database A zone set expands to show its member zones. A zone expands to show its member ports/devices. Ports/devices that are zoned by WWN or FC address, but no longer part of the fabric, are grayed-out.
4–Managing Fabric Zoning Managing the Zoning Database The Configured Zonesets data window uses display conventions for expanding and contracting entries that are similar to those used by the fabric tree. An entry handle located to the left of an entry in the tree indicates that the entry can be expanded.
4–Managing Fabric Zoning Managing the Zoning Database Figure 4-3. Edit Zoning Dialog Box To apply zoning to a fabric, choose a zone set and activate it. When you activate a zone set, the switch distributes that zone set and its zones, excluding aliases, to every switch in the fabric.
4–Managing Fabric Zoning Managing the Zoning Database The Edit Zoning dialog box has a zone set tree on the left and a Port/Device (or members) tree on the right. Both trees use display conventions similar to those used by the fabric tree for expanding and contracting zone sets, zones, and ports. An expanded port shows the port Fibre Channel address;...
4–Managing Fabric Zoning Managing the Zoning Database Table 4-2. Port/Device Icons Icon Description Switch port icon—when not logged in Switch port icon—when logged in NL_Port (loop) device icon—when logged in to fabric NL_Port (loop) device icon—when not logged in to fabric N_Port device icon—when logged in to fabric N_Port device icon—when not logged in to fabric Configuring the Zoning Database...
4–Managing Fabric Zoning Managing the Zoning Database Merge Auto Save The Merge Auto Save parameter determines whether changes to the active zone set that a switch receives from other switches in the fabric are saved to the zoning database on that switch. Changes are saved when an updated zone set is activated.
4–Managing Fabric Zoning Managing the Zoning Database If you selected a stack and the zoning database is not identical on all switches in the stack, choose a switch from the Select Source Switch list. Changes that you make to this switch are distributed to the other switches in the stack.
4–Managing Fabric Zoning Merging Fabrics and Zoning Removing All Zone and Zone Set Definitions To remove all zone and zone set definitions: Select a switch or stack in the fabric tree. On the Zoning menu, click Edit Zoning to view the Edit Zoning window. If you selected a stack and the zoning database is not identical on all switches in the stack, choose a switch from the Select Source Switch list.
4–Managing Fabric Zoning Merging Fabrics and Zoning Zone Merge Failure Recovery When a zone merge failure occurs, the conflict that caused the failure must be resolved. You can correct a failure due to a zone conflict by deactivating one of the active zone sets or by editing the conflicting zones so that their membership is the same.
4–Managing Fabric Zoning Managing Zone Sets Managing Zone Sets Zoning a fabric involves creating a zone set, creating zones as zone set members, then adding devices as zone members. The zoning database supports multiple zone sets to serve the different security and access needs of your storage area network, but only one zone set can be active at one time.
4–Managing Fabric Zoning Managing Zone Sets Click Close to close the Edit Zoning dialog box. Activating and Deactivating a Zone Set You must activate a zone set to apply its zoning definitions to the fabric. When you activate a zone set, the switch distributes that zone set to the temporary zoning database on every switch in the fabric.
4–Managing Fabric Zoning Managing Zone Sets If you selected a stack and the zoning database is not identical on all switches in the stack, choose a switch from the Select Source Switch list. Changes that you make to this switch are distributed to the other switches in the stack.
4–Managing Fabric Zoning Managing Zones Click Apply to view the Save Zoning and Error Check dialog box, which presents the following options: Perform Error Check checks for zoning conflicts, such as empty zones, aliases, or zone sets. This option is recommended before saving.
4–Managing Fabric Zoning Managing Zones NOTE: If you enter the name of a zone that already exists in the database, the Enterprise Fabric Suite application asks if you would like to add that zone and its membership to the zone set. To add switch ports or attached devices to the zone, choose one of the following options: ...
4–Managing Fabric Zoning Managing Zones Click Apply to display the Save Zoning and Error Check dialog box, which presents the following options: Perform Error Check checks for zoning conflicts, such as empty zones, aliases, or zone sets. This option is recommended before saving.
4–Managing Fabric Zoning Managing Zones Select the WWN, Domain/Port, or First Port Address option. Enter the hexadecimal value for the port/device according to the option selected: 16 digits for a WWN member, 4 digits for a Domain/ Port member (in format: DDPP), or a 6-digit Fibre Channel Address for a First Port Address member (in format: DDPPAA), where DD=domain ID, PP=port number, and AA=AL_PA.
4–Managing Fabric Zoning Managing Zones Click Apply to display the Save Zoning and Error Check dialog box, which presents the following options: Perform Error Check checks for zoning conflicts, such as empty zones, aliases, or zone sets. This option is recommended before saving.
4–Managing Fabric Zoning Managing Zones Removing a Zone from a Zone Set To remove a zone from a zone set: Select a switch or stack in the fabric tree. On the Zoning menu, click Edit Zoning to view the Edit Zoning window. If you selected a stack and the zoning database is not identical on all switches in the stack, choose a switch from the Select Source Switch list.
4–Managing Fabric Zoning Managing Aliases Click Apply to display the Save Zoning and Error Check dialog box, which presents the following options: Perform Error Check checks for zoning conflicts, such as empty zones, aliases, or zone sets. This option is recommended before saving.
4–Managing Fabric Zoning Managing Aliases Close cancels the Apply operation without saving the changes. Click Close to close the Save Zoning and Error Check dialog box. Click Close to close the Edit Zoning dialog box. Adding a Member to an Alias You can add a port/device to an alias by domain ID and port number, device port Fibre Channel address, or the device port WWN.
4–Managing Fabric Zoning Managing Aliases Save Zoning save the changes to the zoning database with an option to activate a zone set. The Zone set activation dialog box prompts you to activate a zone set. Click Yes, to select and activate a zone set; click No to save the changes without activating a zone set.
Managing Switches This chapter describes the tasks used to manage switches in the fabric. Managing User Accounts Only the Admin account can manage user accounts with the User Account Administration dialog boxes. However, any user can modify their own password. To open a User Account Administration dialog box, on the Switch menu, click User Accounts.
5–Managing Switches Managing User Accounts NOTE: If the same user account exists on a switch and its RADIUS server, that user can log in with either password, but the authority and account expiration always come from the switch database. Creating User Accounts A switch can have a maximum of 15 user accounts.
5–Managing Switches Managing User Accounts If the account is to have the ability to modify switch configurations, select the Admin Authority Enabled option. Enter a password in the New Password box and enter it again in the Verify Password box. A password must have a minimum of 8 characters and no more than 20.
5–Managing Switches Managing User Accounts Figure 5-2. User Account Administration Dialog Box—Remove Account Changing a User Account Password A user can change the password for their account, but only the Admin account user can change the password for another user’s account. If the user’s original password is not known, the Admin account user must remove the account and then add the account with the new password.
5–Managing Switches Managing User Accounts Click Close to close the User Account Administration dialog box. Figure 5-3. User Account Administration Dialog Box—Change Password Modifying a User Account To modify a user account on a switch: Select a switch or stack in the fabric tree. On the Switch menu, click User Accounts to view the User Account Administration dialog box.
5–Managing Switches Viewing Switch Information Click Close to close the User Account Administration dialog box. Figure 5-4. User Account Administration Dialog Box—Modify Account Viewing Switch Information The faceplate and backplate displays and data windows provide the following switch information: Device and HBA information ...
5–Managing Switches Viewing Switch Information On the View menu, click Refresh. Press F5 Right-click a switch in the topology display, and click Refresh Switch on the shortcut menu. Right-click in the graphic window of the faceplate display, and click Refresh Switch on the shortcut menu.
5–Managing Switches Viewing Switch Information Figure 5-6. Switch Data Window Buttons The Switch data window boxes are described in Table 5-1. Table 5-1. Switch Data Window Fields Field Description Summary Group Switch Type Switch model First Port Address Switch Fibre Channel address World Wide Name Switch World Wide Name Serial Number...
Page 133
5–Managing Switches Viewing Switch Information Table 5-1. Switch Data Window Fields (Continued) Field Description Administrative State Current switch administrative state Configured Admin Administrative state that is stored in the switch configuration State Beacon Status Switch LEDs are blinking (On) or not blinking (Off). Status Group Operational State Switch operational state: Online, Offline, Diagnostic, Down...
Page 134
5–Managing Switches Viewing Switch Information Table 5-1. Switch Data Window Fields (Continued) Field Description Test Fault Code Code value for the last recorded diagnostic test status recorded on the switch Network Group IPv4 Enabled Internet Protocol version 4 Enabled or Disabled IPv4 Address Internet Protocol version 4 address IPv4 Subnet Mask...
Page 135
5–Managing Switches Viewing Switch Information Table 5-1. Switch Data Window Fields (Continued) Field Description Login Level Authority level of the user name Super User Super user privileges Enabled or Disabled UserAuthentication Enforcement of account names and authority (always True) Enabled Firmware Group Firmware Version Active firmware version...
Page 136
5–Managing Switches Viewing Switch Information Table 5-1. Switch Data Window Fields (Continued) Field Description SSH Enabled Secure Shell status. If Enabled, an encrypted data path is pro- vided for command line interface sessions. SSL Enabled Secure Sockets Layer status. If enabled, encryption for switch management web applet and CIM sessions is provided.
5–Managing Switches Viewing Switch Information Table 5-1. Switch Data Window Fields (Continued) Field Description Advanced Group R_A_TOV Resource allocation timeout value (in milliseconds) E_D_TOV Error detect timeout value (in milliseconds) Number of Donor Total number of donor port groups. A donor group is a set of Groups ports on a switch that can donate buffer credits to one another.
5–Managing Switches Configuring Port Threshold Alarms Figure 5-7. Stack Links Data Window The Stack Links data window fields are described in Table 5-2. Table 5-2. Stack Links Data Window Field Description Status Icon depicting current link status Switch 1 The first switch discovered in the fabric, and the port to which the ISL is connected Switch 2 The second switch discovered in the fabric, and the port...
5–Managing Switches Configuring Port Threshold Alarms To configure port threshold alarms: Select a switch in the fabric tree. On the Switch menu, click Port Threshold Alarm Configuration to view the Port Threshold Alarm Configuration dialog box (Figure 5-8). Figure 5-8. Port Threshold Alarm Configuration Dialog Box Select the Enable All Port Threshold Alarms option to enable monitoring for all the individual alarm types that are enabled.
5–Managing Switches Paging a Switch NOTE: The switch downs a port if a rising trigger alarm is not cleared after three consecutive sample windows. Generate rising Generate rising trigger alarm; trigger alarm; eligibility ends eligibility ends Rising Trigger Event Count Falling Trigger Generate falling...
5–Managing Switches Setting the Date/time and Enabling NTP Client Setting the Date/time and Enabling NTP Client The Date/Time dialog box (Figure 5-10) enables you to manually set the date, time, and time zone on a switch, or to enable NTP (Network Time Protocol) Client to synchronize the date and time on the switch with an NTP server.
5–Managing Switches Resetting a Switch If you selected a stack, choose a switch from the Initial Configuration drop-down list. Changes that you make to this switch are distributed to the other switches in the stack. In the NTP area of the Date/Time dialog box, clear the NTP Client Enabled checkbox.
5–Managing Switches Configuring a Switch Table 5-3. Switch Resets Reset Type Description Hard Reset Resets a switch with a Power On Self Test. This reset activates the pending firmware and it is disruptive to switch traffic. NOTE: If performing a Reset or a Hard Reset, the support files, the firmware image files that have not been unpacked, and the configuration backup files that were created on the switch are deleted.
Logged-In LEDs on both switches flash to show the affected ports. For information about the Domain ID Lock and Principal Priority parameters, see the QLogic 5800V Series Stackable Fibre Channel Switch Command Line Interface Guide.
5–Managing Switches Configuring a Switch If you connect a new switch to an existing fabric with its domain ID unlocked, and a domain conflict occurs, the new switch is isolated as a separate fabric. However, you can remedy this by resetting the new switch or taking it offline then back online.
The current administrative state is set using the Set Switch command. For information about the command line interface, see the QLogic 5800V Series Stackable Fibre Channel Switch Command Line Interface Guide.
5–Managing Switches Configuring a Switch FDMI is comprised of the fabric-to-device interface and the application-to-fabric interface. The fabric-to-device interface enables a device’s management information to be registered. The application-to-fabric interface provides the framework by which an application obtains device information from the fabric. Use the FDMI HBA Entry Limit box on the Switch Properties dialog box to configure the maximum number of HBAs that can be registered with a switch.
5–Managing Switches Configuring a Switch Figure 5-12. Advanced Switch Properties Dialog Box Make changes to the R_A_TOV and E_D_TOV switch timeout values: R_A_TOV (Resource Allocation Timeout)—maximum time a frame could be delayed and still be delivered. The default is 10000 milliseconds.
5–Managing Switches Configuring a Switch Figure 5-13. System Services Dialog Box NOTE: Use caution when disabling the Embedded GUI, GUI Mgmt, and Telnet options, as it is possible to disable all access to the switch except through a serial connection. The following system services are available: ...
5–Managing Switches Managing Switch Stacks switch management application (GUI). After enabling the SSL service, you must then log off the fabric and log on again to establish a secure connection. To disable SSL when using a user authentication RADIUS server, the RADIUS authentication order must first be set to Local. ...
5–Managing Switches Managing Switch Stacks Configuring Switches in a Stack The stack dialog boxes are essentially the same as their corresponding switch dialog boxes, except that the Select Switch for Initial Configuration drop-down list is added to each dialog box. The stack dialog boxes display the information for the switch selected in the Select Switch for Initial Configuration drop-down list.
5–Managing Switches Managing Switch Stacks Select all ports on all switches in the stack. Security Consistency Checklist The Security Consistency Checklist dialog box (Figure 5-14) enables you to view current security-related settings, such as, firmware versions, embedded GUI, in-band management, date/time on switches. Any changes must be made through the appropriate dialog box, such as Network Properties dialog box, Switch Properties dialog box, or SNMP Properties dialog box.
5–Managing Switches Configuring the Network Configuring the Network Network configuration includes: Network IP configuration Network Domain Name Service (DNS) configuration Network IP security To configure IP and DNS parameters: Select a switch in the fabric tree. On the Switch menu, click Network and click Network Properties to view the Network Properties dialog box.
5–Managing Switches Configuring the Network Figure 5-15. Network Properties Dialog Boxes Network IP Configuration The IP configuration identifies the switch on the Ethernet network, determines which network discovery method to use, and enables/disables the IPv4 and IPv6 network addressing. An IPv4 address is 32 bits and consists of four blocks of decimal numbers, with each block separated by a period.
5–Managing Switches Configuring the Network NOTE: Switches without IPv6 addressing enabled cannot communicate over Ethernet with hosts or switches using the IPv6 addressing. Table 5-4 describes the network IP configuration parameters. Table 5-4. Network Properties Dialog Box—IP Fields Field Description IPv4 Network Enable this option to permit the IPv4 addressing format to be used anytime you are required to enter an IP address.
5–Managing Switches Configuring the Network Table 5-4. Network Properties Dialog Box—IP Fields Field Description Discovery Choose one of the following methods for assigning the IP address: Static—uses the IP configuration parameters entered in the Network Properties dialog box DHCPv6 (Dynamic Host Configuration Protocol version 6)—acquires the IP configuration from a DHCP server.
5–Managing Switches Configuring the Network Table 5-5. Network Properties Dialog Box—DNS Fields Field Description Server Discovery Choose one of the following methods by which to assign the IP address: Static—uses the IP configuration parameters entered in the Network Properties dialog box. ...
5–Managing Switches Configuring the Network Select an entry switch in the fabric tree. On the Switch menu, click Network and click Ipsec Properties to view the IPsec Configuration dialog box (Figure 5-16). NOTE: The IPsec Configuration dialog box is only available with a secure fabric on the entry switch.
5–Managing Switches Configuring the Network Table 5-6. IPsec Configuration Dialog Box Buttons Button Description Copy Copies the selected association or policy. This puts the association or pol- workstation clipboard icy into the . When you paste a copy, it is added to the list.
5–Managing Switches Configuring the Network Figure 5-17. Create IP Security Policy Dialog Box Table 5-7. Create IP Security Policy Dialog Box Fields Field Description Name Name of policy Description Description of policy Source Address Source port number (1–65535) Source Prefix Length of prefix in source address Length Destination...
Page 161
5–Managing Switches Configuring the Network Table 5-7. Create IP Security Policy Dialog Box Fields (Continued) Field Description Protocol Protocol or application to which to apply IP security. Enter a key- word for one of the following protocols or an integer (0-255): ...
5–Managing Switches Configuring the Network Table 5-7. Create IP Security Policy Dialog Box Fields (Continued) Field Description espRuleLevel Rule level to apply for ESP protection: Default Use Require Security Associations A security association defines the encryption algorithm and encryption key to apply when called by a security policy.
5–Managing Switches Configuring the Network Table 5-8. Create IP Security Association Dialog Box Fields Field Description Name Association name Description Association description Source IP address (version 4 or 6) or DNS host name of the host, switch, or Address gateway from which data originates Destination IP address (version 4 or 6) or DNS host name of the host, switch, or Address...
5–Managing Switches Configuring the Network IPsecIKE Properties Internet Key Exchange (IKE) provides a means to automatically create an IPsec SA on both SA endpoints. This simplifies the algorithm and key setup for both endpoints. Each endpoint must identify the remote device as IKE peer and must specify traffic to protect using IKE policy configuration.
5–Managing Switches Configuring the Network Figure 5-19. IKE Configuration Dialog Box Adding a Peer Configuration To add a peer configuration: On the Switch menu, click Network, and then click IPsecIKE Properties to view the IKE Configuration dialog box (Figure 5-19). On the IKE Peer Database side, click Add to view the Create Peer dialog (Figure 5-20).
5–Managing Switches Configuring the Network Figure 5-20. Create Peer Dialog Box Table 5-9 provides field definitions for the Create Peer dialog box. Table 5-9. Create Peer Dialog Box Fields Field Description Name User-defined, l imited to 32 characters Description User-defined, l imited to 127 characters Address Must be a hostname, IPv4, or IPv6 address...
Page 167
5–Managing Switches Configuring the Network Table 5-9. Create Peer Dialog Box Fields Field Description Authentication Which type of secret key to use for peer authentication. Options: public_key, secret Certificate Name Available only when you select the public_key Authentication option Certificate SwitchID Available only when you select the public_key Authentication option Certificate PeerID...
5–Managing Switches Configuring the Network Figure 5-21. Edit Peer Dialog Box Copying a Peer Configuration To copy a peer configuration to the workstation clipboard: NOTE: Copy/pasting a current peer configuration is a convenient way to add/configure a new peer. On the Switch menu, click Network, and then click IPsecIKE Properties to view the IKE Configuration dialog box (Figure 5-19).
5–Managing Switches Configuring the Network The peer configuration that was copied to the workstation clipboard is added to the IKE Peer Database list, and is automatically renamed. Click OK to save the changes and exit the IKE Configuration dialog box, or click Cancel to exit without saving any changes.
IPsec mode options: transport, tunnel Local Address Must be the switch's hostname, IPv4 or IPv6 address, or key- word All for all the switch's addresses Local Port QLogic switch IP ports to protect. Values between 1–65535, or keyword All 5-46 59266-01 B...
Page 171
5–Managing Switches Configuring the Network Table 5-10. Create Policy Dialog Box Fields Field Description Remote Address Available only when tunnel option is selected in Mode drop-down. Must be an IPv4 or IPV6 address, with an optional prefix length specifier of /n for switch to subnet policies. Remote Port Range between 1–65535 Protocol...
5–Managing Switches Configuring the Network Click Edit to view the Edit Policy dialog box (Figure 5-23). On the Edit Policy dialog box, make the changes. Refer to Table 5-10 field definitions. Click OK to close the Edit Policy dialog box. Click OK to save the changes and exit the IKE Configuration dialog box, or click Cancel to exit without saving any changes.
Page 173
5–Managing Switches Configuring the Network On the Switch menu, click Network, and then click IPsecIKE Properties to view the IKE Configuration dialog box (Figure 5-19). On the IKE Policy Database side, click the policy in the list to be copied. Click Copy.
5–Managing Switches Configuring the Network IPsec Certificates A certificate is used to authenticate an IKE peer. A certificate name is a string of up to 32 characters. The peer systems automatically exchange their own digital certificates and provide authentication based on the validity of the certificates and their enclosed public keys.
5–Managing Switches Configuring the Network Table 5-11. IKE Certificates Dialog Box Buttons Button Description Delete CA — Deletes the selected certificate authority an entity or ven- dor that issues and verifies certificates for use by other par- ties Generate Key —...
5–Managing Switches Configuring the Network Click Close to close the IKE Certs dialog box. Generating a Certificate Key To generate a certificate key: On the Switch menu, click Network, and then click IPsec Certs to view the IKE Certs dialog box (Figure 5-24).
5–Managing Switches Configuring the Network Importing a Certificate To import a certificate: On the Switch menu, click Network, and then click IPsec Certs to view the IKE Certs dialog box (Figure 5-24). Below the Certificates window, click Import Cert to view the Local Certificate dialog box.
5–Managing Switches Configuring the Network Generating a Certificate Request To generate a certificate request: On the Switch menu, click Network, and then click IPsec Certs to view the IKE Certs dialog box (Figure 5-24). Below the Certificates window, click Generate Cert Request to view the Certificate Request dialog box (Figure 5-25).
5–Managing Switches Configuring the Network Table 5-12 provides field definitions for the Certificate Request dialog box. Table 5-12. Certificate Request Dialog Box Definitions Option Description Select a configured key Distinguished Name Specify the certificate subject name (X.500/LDAP format) Add Alt Name Allows you to add a subjectAltName to the certificate Delete Alt Name Deletes the selected subjectAltName from the certificate...
5–Managing Switches Configuring SNMP Configuring SNMP The Simple Network Management Protocol configuration includes properties and trap parameters plus SNMP v3 manager and user parameters. SNMP Configuration and Trap Configuration Parameters SNMP configuration defines how authentication traps are managed. SNMP trap configuration defines how traps are set.
5–Managing Switches Configuring SNMP NOTE: Since Read Community, Trap Community, and Write Community settings are like passwords and are write-only fields, the current settings are displayed as asterisks. Table 5-13 describes the fields on the SNMP Properties dialog box. Table 5-13. SNMP Properties Dialog Box Fields Field Description SNMP Enabled...
5–Managing Switches Configuring SNMP Table 5-13. SNMP Properties Dialog Box Fields (Continued) Field Description Trap 1 Enabled Enables or disables the trap. if disabled, traps are not sent to trap monitoring stations and the trap settings are not configu- rable. Trap Address Specifies the IP address to which SNMP traps are sent.
5–Managing Switches Configuring SNMP Figure 5-27. SNMP v3 Manager Dialog Box Adding an SNMP v3 User To enable SNMP v3 security and add an SNMP v3 user: Select the entry switch in the fabric tree. On the Switch menu, click SNMP and click SNMP v3 Manager to view the SNMP v3 Manager dialog box (Figure 5-27).
5–Managing Switches Configuring SNMP Figure 5-28. SNMP v3 User Editor Dialog Box Table 5-14. SNMP v3 User Editor Dialog Box Fields Field Description User Name Name assigned to this SNMP v3 user Group Sets user Read privileges: Read Only permits user to view SNMP v3 user settings. ...
5–Managing Switches Configuring SNMP Click OK to save the settings and close the SNMP v3 User Editor dialog box. In the SNMP v3 Manager dialog box, click OK to save and activate the SNMP v3 security configuration. Modifying an SNMP v3 User To modify an SNMP v3 user: Select the entry switch in the fabric tree.
5–Managing Switches Configuring Call Home Configuring Call Home The Call Home feature enables you to configure switches to send alerts and events to pagers and email. You can configure the types of events to cover and where to send the alerts using the Call Home Setup dialog box (Figure 5-29).
Page 187
5–Managing Switches Configuring Call Home Table 5-15. Call Home Setup Dialog Box Fields (Continued) Field Description Primary SMTP Server Service port number that the primary SMTP server is listening Port: on to accept connections from SMTP sending agents Secondary SMTP: Secondary SMTP server.
5–Managing Switches Configuring Call Home Table 5-15. Call Home Setup Dialog Box Fields (Continued) Field Description Throttle Duplicates: Boolean setting that indicates whether duplicate messages should be suppressed and accumulated. If True, after an email has been transmitted, Call Home does not transmit email for switch events that would result in duplicate emails during a specified time window (default is 15 seconds).
5–Managing Switches Configuring Call Home Figure 5-30. Call Home Profile Manager Dialog Box Creating a Profile To create a profile: On the Edit menu, click Add New Profile to view the Call Home Profile Editor dialog box (Figure 5-31) Enter profile information in the fields described in Table 5-16, and click OK to save the changes.
5–Managing Switches Configuring Call Home Figure 5-31. Call Home Profile Editor Dialog Box Table 5-16. Call Home Editor Dialog Box Fields Field Description Name Profile name Level Severity level of the event (Alarm, Critical, Warning, None) to be pro- cessed by the profile for which to send emails Format Format used to compile and email a message in response to an incoming event that is processed by the profile:...
5–Managing Switches Configuring Call Home Table 5-16. Call Home Editor Dialog Box Fields Field Description Max Size Maximum number of bytes allowed for an email message compiled (650–2,000,00 for the profile. Most email messages are relatively small, under 2 KB. However, emails that are produced by a capture operation can be as large as 2 MB due to the inclusion of file attachments.
5–Managing Switches Configuring Call Home Using the Call Home Profile Editor Tech Support Center — Profile Dialog Box You can use the Call Home Profile Editor Tech Support Center Profile dialog box — to create, edit, or remove a Tech Support Center profile. You can view the Call Home Profile Editor Tech Support Center Profile dialog box two ways: click —...
Page 193
5–Managing Switches Configuring Call Home Table 5-17 lists the entries on the Call Home Editor Tech Support Center Profile — dialog box. Table 5-17. Call Home Editor Tech Support Center Profile Entries — Entry Description Name The name automatically assigned to the profile. This pro- file cannot be changed or deleted, but the settings can be modified.
5–Managing Switches Configuring Call Home Table 5-17. Call Home Editor Tech Support Center Profile Entries — Entry Description Day of Week The day of the week, specified as Sunday, Monday, Tues- day, Wednesday, Thursday, Friday or Saturday, when the capture operation will be executed on the switch. The default is Monday.
5–Managing Switches Configuring Call Home Applying All Profiles on a Switch to Other Switches You can apply all profiles on a switch to one or more switches in a fabric using the Call Home Profile Multiple Switch Apply dialog box (Figure 5-33).
5–Managing Switches Configuring Call Home Using the Call Home Message Queue Use the Call Home Message Queue dialog box (Figure 5-34) to access the logged call home statistics. Click Update Stats to refresh with the most recent switch Call Home information. Click Clear Queue to clear the current statistics. Figure 5-34.
5–Managing Switches Testing a Switch Changing SMTP Servers The Change Over option changes the inactive SMTP server to the active SMTP server. To make the inactive SMTP become the active SMTP: Select a switch in the fabric tree. On the Switch menu, click Call Home and click Change Over to view the Call Home Change Over dialog box (Figure 5-36).
5–Managing Switches Testing a Switch Figure 5-37. Switch Diagnostics Dialog Box To test a switch: Select a switch in the fabric tree. On the Switch menu, click Switch Diagnostics and click Online Switch Diagnostics; or on the Switch menu, click Switch Diagnostics and click Offline Switch Diagnostics to view the Switch Diagnostics dialog box.
5–Managing Switches Archiving a Switch Select a Loop Count option. The Loop Forever option runs the test until you click Stop Test. The Loop Count option runs the test the number of times you entered in the Loop Count box. Select the default test pattern or enter a user-defined (hexadecimal) test pattern.
5–Managing Switches Restoring a Switch Select a switch in the fabric tree. On the Switch menu, click Archive. In the Save dialog box, enter a file name. Click Save. Restoring a Switch Restoring a switch loads the archived switch configuration parameters to the switch.
Page 201
5–Managing Switches Restoring a Switch Log in to the switch you want to restore. You cannot restore a switch over an ISL. Select the switch in the fabric tree. On the Switch menu, click Restore to display the Restore dialog box (Figure 5-38).
To restore user accounts, you must select the Reset User Accounts to Default option in the maintenance menu. For information about maintenance mode and the maintenance menu, see “Recovering a Switch” in the QLogic 5800V Series Fibre Channel Stackable Switch Installation Guide or the QLogic 5800V Series Stackable Fibre Channel Switch Command Line Interface Guide.
5–Managing Switches Installing Feature License Keys Installing Feature License Keys A feature license key is a password that you can purchase from your switch distributor or authorized reseller to upgrade your switch. License keys vary according to the features you purchase. The feature license keys available for purchase are: ...
5–Managing Switches Downloading a Support File Enter the license key in the Key box, and click Get Description. The license key description is retrieved and displayed in the Description area for you to verify that this is the license key you ordered. If it is not the correct key, repeat Step 3 Step...
5–Managing Switches Installing Firmware Installing Firmware Installing firmware involves loading, unpacking, and activating the firmware image on the switch. Enterprise Fabric Suite does this in one operation. To provide consistent performance throughout the fabric, ensure that all switches are running the same version firmware.
5–Managing Switches Installing Firmware Select a firmware image file from the Version drop-down list. Change the folder (path). Click Browse to search for a different firmware image file, select the folder, and then click Rescan to search the selected folder. Figure 5-42.
5–Managing Switches Installing Firmware Figure 5-43. Load Firmware Dialog Box for a Stack Click Start to begin the firmware load process. A message explains what type of reset is required to activate the firmware. Click OK to continue the firmware installation. Click Close to close the Load Firmware dialog box.
Managing Ports This chapter describes port management tasks. Viewing Port Information The faceplate display uses color and text to show the port type, operational state, transmission speed, and media status. To display number and status information for a port, position the cursor over a port on the faceplate display. The status information changes depending on the View menu option selected.
6–Managing Ports Viewing Port Information Figure 6-1. Port Information Data Window The Port Information data window has several buttons from which you can choose the type of information to display as shown in Table 6-1. Table 6-1. Port Information Data Window Buttons Button Description Summary—basic port status information...
6–Managing Ports Viewing Port Information Table 6-2. Port Information Data Window—Summary Fields Description Port Address Port Fibre Channel address Administrative Port Administrative port type (G, GL, F, FL, TR, or Donor). This Type value is persistent; it is maintained during a switch reset. Dur- ing port auto-configuration, it is used to determine which oper- ational port states are allowed.
6–Managing Ports Viewing Port Information Table 6-2. Port Information Data Window—Summary (Continued) Fields Description Test Status Status from the most recent port test Test Fault Code Fault code from the most recent port test Table 6-3. Port Information Data Window—Advanced Field Description MFS Mode...
6–Managing Ports Viewing Port Information Table 6-4. Port Information Data Window—Extended Credits Field Description Max Credits Avail- Maximum number of credits granted to a port that can be used able when extending port credits Credits to Donate Number of credits available to be donated by the selected port Donor Group Donor group of the selected port Valid Donor Groups...
6–Managing Ports Viewing Port Information Table 6-6. Port Information Data Window—Digital Diagnostics Monitoring Field Description Details Ports with media that support DDM show the information (i).but- ton. Click (i) to view the measured values and the associated ven- dor-defined status in the Detailed Media Display dialog box (Figure 6-2).
6–Managing Ports Viewing Port Information Port Statistics Data Window The Port Statistics data window (Figure 6-3) displays statistics for port performance. To view the Port Statistics data window: Select a switch or a stack in the fabric tree. Select one or more ports in the faceplate display, and click the Port Stats data window tab.
Page 217
6–Managing Ports Viewing Port Information Table 6-7. Port Statistics Data Window Fields Field Description Start Time Beginning of the period over which the statistics apply: Start time for the Absolute view is not applicable Start time for the Rate view is the beginning of polling interval ...
6–Managing Ports Viewing Port Information Table 6-7. Port Statistics Data Window Fields (Continued) Field Description Decode Errors Number of invalid words transmitted detected during decoding. Decoding is from the 10-bit characters and spe- cial K characters. Ep Connects Number of E_Port logins FBusy Number of class 2 and class 3 fabric busy (F_BSY) frames generated by this port in response to incoming...
Page 219
6–Managing Ports Viewing Port Information Table 6-7. Port Statistics Data Window Fields (Continued) Field Description Login Count Number of device logins that have occurred on the switch Logout Count Number of device logouts that have occurred on the switch Long Frame Count Number of incidents in which one or more frames greater than the maximum size (2,136 bytes) are received Loop Timeouts...
6–Managing Ports Configuring Ports Table 6-7. Port Statistics Data Window Fields (Continued) Field Description Tx Link Resets Number of link reset primitives sent from this port to an attached port Total Offline Sequences Total number of offline sequences transmitted and received by the port Configuring Ports Use the drop-down lists in the Port Properties dialog box to change the following...
6–Managing Ports Configuring Ports The Port Properties dialog box fields are described in Table 6-8. Table 6-8. Port Properties Dialog Box Fields State Description Port Current port name Symbolic Name User-defined name for a port Operational State Port state that is currently active. This value may be different from the administrative port state, for example, due to an error condition.
6–Managing Ports Configuring Ports On the Port menu, click Port Properties to view the Port Properties dialog (Figure 6-4). For each port, enter a name for the port in the Symbolic Name field. Click OK. Port Types Each port can be configured to self-discover the proper port type to match the device or switch to which it is connected.
6–Managing Ports Configuring Ports Table 6-9. Port Types (Continued) State Description TR_Port Transparent router port—enables devices on a remote fabric to be mapped to devices on the local fabric. TR_Ports do not support online port diagnostics. Donor Donor port—enables buffer credits to be used by another port. Port States The port administrative state, which determines the operational state of a port has two forms: configured administrative state and current administrative state.
6–Managing Ports Configuring Ports Table 6-10. Port Operational States (Continued) State Description Downed—port is disabled, power is removed from the lasers, and the port cannot be logged in. To change the port administrative state: Select a switch in the fabric tree. Select one or more ports in the faceplate display.
6–Managing Ports Configuring Ports Port Media Status To display the port media status: Select a switch or stack in the fabric tree. On the View menu, click View Port Media. Table 6-13 describes the port media types and status. Table 6-13. Port Media Status Media icon Description Optical SFP, online (green/black), logged-in, active, and ready to...
6–Managing Ports Configuring Ports Enable—suppresses the reception of RSCN messages from other ports for which I/O StreamGuard is enable Disable—allows free transmission and reception of RSCN messages Auto—suppresses the reception of RSCN messages when the port is connected to an initiator device with an HBA.
6–Managing Ports Using the Extended Credits Wizard Click OK. Figure 6-5. Advanced Port Properties Dialog Box Using the Extended Credits Wizard The Extended Credit wizard is a series of dialog boxes that leads you through the process of extending credits based on transmission distance requirements. Warning dialog boxes are provided to help you avoid un-intentional changes.
6–Managing Ports Using the Extended Credits Wizard 25km at 2Gbps (30÷1.2) 12km at 4Gbps (30÷2.4) 6km at 8Gbps (30÷4.8) Extending credits requires a minimum cable length that is dependent on transmission speed, but is independent of the number of credits borrowed. Extending credits using short cables can cause excessive port resets.
6–Managing Ports Moving a Licensed Port Figure 6-6. Extended Credit Wizard Dialog Box NOTE: As credits are used, the Logged-In LEDs on the corresponding donor ports illuminate continuously. In addition, donor port Activity LEDs reflects the same traffic as the recipient port. Donor ports whose credits are being used are unavailable for device connections.
6–Managing Ports Resetting a Port Figure 6-7. Move Port License Dialog Box Resetting a Port The Reset Port option reinitializes the port using the saved configuration. To reset a port: In the faceplate display, select the port(s) to be reset. On the Port menu, click Reset Port.
6–Managing Ports Testing Ports NOTE: The online port diagnostic test is not allowed on a TR_Port. If attempted, an error message appears stating that an online port diagnostic test is not allowed on a TR port. Figure 6-8. Port Diagnostics Dialog Box To test a port: Select one or more ports on the faceplate display.
6–Managing Ports Graphing Port Performance Loop Forever runs the test until you click Stop Test. Loop Count runs the test a specified number of times. Select a Test Pattern option: Accept the default test pattern, or select the User-Defined option and enter a value.
6–Managing Ports Graphing Port Performance Select a fabric in the fabric tree. On the Fabric menu, click Start Performance View. Exiting Performance View To exit a Performance View session, on the File menu, click Exit. If you defined an encryption key, the current fabric view is saved automatically to your default Fabric View file upon exit.
6–Managing Ports Graphing Port Performance Figure 6-11. Load Default Fabric View File Dialog Box—Performance View Saving and Opening Fabric View Files In addition to the default Fabric View file, you can save and open your own Fabric View files. A Fabric View file contains the set of fabrics, graphs, and graphing options.
6–Managing Ports Graphing Port Performance Setting Performance View Preferences To set Performance View preferences: On the File menu, click Preferences to view the Preferences dialog box (Figure 6-12). Figure 6-12. Preferences Dialog Box—Performance View Set the following preferences: Working Directory—change the location of the working directory in which to save files.
6–Managing Ports Graphing Port Performance To change this polling frequency: On the Graph menu, click Set Polling Frequency to view the Set Graph Polling Frequency dialog box (Figure 6-13). Figure 6-13. Set Graph Polling Frequency Dialog Box Enter the new polling interval in seconds [1–60]. Performance View updates the graphs once during the interval.
6–Managing Ports Graphing Port Performance Select the fabric in the fabric tree On the Fabric menu, click Remove Fabric. Or, right-click on a fabric, and click Remove Fabric on the shortcut menu. Right-clicking on a graph opens a popup menu from which you can change graph options, print a graph, or save the graph statistics to a file.
6–Managing Ports Graphing Port Performance Figure 6-14. Default Graph Options Dialog Box To modify the graph options: Choose the units for the graph: Select the Show Bytes Data on Graph option to plot data in KBytes/second. Select the Show Frames Data on Graph option to plot data in frames/second.
6–Managing Ports Graphing Port Performance Choose the color scheme for the graph. Click a Select Color button to open its corresponding Select Color dialog box, which enables you to select a new color scheme. You can select the color for each data type, unit grid, and background by clicking the corresponding color field or button.
6–Managing Ports Graphing Port Performance Printing Graphs To print a graph: Select a graph On the File menu, click Print Graph Window. You can also right-click on a graph, and click Print Graph Window on the shortcut menu. Saving Graph Statistics to a File You can save statistics for one or all graphs to an XML or CSV file.
Page 242
6–Managing Ports Graphing Port Performance 6-34 59266-01 B...
Glossary active zone set arbitrated loop The zone set that defines the current A Fibre Channel topology where ports use zoning for the fabric. arbitration to establish a point-to-point circuit. active firmware Arbitrated Loop Physical Address (AL_PA) The firmware image on the switch that is in use.
User’s Guide Enterprise Fabric Suite 5800V Series Fibre Channel Switches Certificate Request File fabric database A file is generated on the switch and sent The set of fabrics opened during an Enter- to the customer's certificate authority prise Fabric Suite session. vendor to be authenticated.
Page 245
User’s Guide Enterprise Fabric Suite 5800V Series Fibre Channel Switches hard zone initiator A hard zone is a division of the fabric for The device that initiates a data exchange the purposes of controlling discovery and with a target device. inbound traffic.
Page 246
User’s Guide Enterprise Fabric Suite 5800V Series Fibre Channel Switches Management Information Base pending firmware A set of guidelines and definitions for The firmware image that is activated upon SNMP functions. See SNMP. the next switch reset. management workstation Power On Self Test (POST) PC workstation that manages the fabric Diagnostics that the switch performs at through the fabric management switch.
Page 247
User’s Guide Enterprise Fabric Suite 5800V Series Fibre Channel Switches Secure Sockets Layer stack A group of switches connected by their high speed stacking ports. Enterprise Fabric Suite auto-detects switches connected by their 10Gbps or 20Gbps ports and displays these stacked switches as a single stack entity in the faceplate display target...
Page 248
User’s Guide Enterprise Fabric Suite 5800V Series Fibre Channel Switches Glossary-6 59266-01 B...
Page 249
Index Numerics Broadcast 5-22 browser 30-day trial version location 1-10, 6-28 browser location account name Active Security data window Call Home 5-62 Active Zoneset data window Call Home Message Queue dialog box 5-72 add a peer 5-41 Call Home Profile Editor—Tech Support add a policy 5-45 Center Profile...
Page 250
User’s Guide Enterprise Fabric Suite 5800V Series Fibre Channel Switches event browser description 2-21 data window filtering 2-22 Active Security preference 1-9, 1-11 Configured Security save to file 2-23 Link sort 2-23 Decode error 5-15 event severity 2-22 default fabric view file 1-11 extended credits wizard 6-20...
Page 251
User’s Guide Enterprise Fabric Suite 5800V Series Fibre Channel Switches link selecting 1-25 graph status 1-25 print 6-33 Link data window rescale 6-32 link, delete statistics 6-33 login monitoring 5-15 type 6-32 logout monitoring 5-15 graphic window 1-15 loss of signal monitoring 5-15 group create...
Page 252
User’s Guide Enterprise Fabric Suite 5800V Series Fibre Channel Switches paging a switch 5-16 RADIUS - See Remote Authentication Dial-In User Service paste a peer 5-44 RADIUS server paste a policy 5-49 3-15 peer 5-40 authentication order 3-19 Performance View edit configuration 3-18 arrange graphs...
Page 253
User’s Guide Enterprise Fabric Suite 5800V Series Fibre Channel Switches SMTP server, change 5-73 SNMP v3 user account add user 5-59 managing modify user 5-61 maximum number remove user 5-61 security security 5-58 software license key Stack Links data window 5-13 storage targets 2-26...
Need help?
Do you have a question about the 5800V Series and is the answer not in the manual?
Questions and answers