Brocade Communications Systems Brocade 8/12c Command Reference Manual

Brocade Communications Systems Brocade 8/12c Command Reference Manual

Brocade fabric os command reference manual supporting fabric os v7.0.0 (april 2011)
Hide thumbs Also See for Brocade 8/12c:
Table of Contents

Advertisement

53-1002147-01
®
29 April 2011
Fabric OS
Command Reference Manual
Supporting Fabric OS v7.0.0

Advertisement

Table of Contents
loading

Summary of Contents for Brocade Communications Systems Brocade 8/12c

  • Page 1 53-1002147-01 ® 29 April 2011 Fabric OS Command Reference Manual Supporting Fabric OS v7.0.0...
  • Page 2 Copyright © 2011 Brocade Communications Systems, Inc. All Rights Reserved. Brocade, the B-wing symbol, BigIron, DCX, Fabric OS, FastIron, IronView, NetIron, SAN Health, ServerIron, TurboIron, and Wingspan are registered trademarks, and Brocade Assurance, Brocade NET Health, Brocade One, Extraordinary Networks, MyBrocade, VCS, and VDX are trademarks of Brocade Communications Systems, Inc., in the United States and/or in other countries.
  • Page 3: Document History

    Brocade Communications Systems, Incorporated Corporate and Latin American Headquarters Asia-Pacific Headquarters Brocade Communications Systems, Inc. Brocade Communications Systems China HK, Ltd. 130 Holger Way No. 1 Guanghua Road San Jose, CA 95134 Chao Yang District Tel: 1-408-333-8000 Units 2718 and 2818 Fax: 1-408-333-8101 Beijing 100020, China E-mail: info@brocade.com...
  • Page 4 Document Title Publication Number Summary of Changes Publication Date Fabric OS Command Reference 53-1000436-01 June 2007 Fabric OS Command Reference 53-1000599-01 Added 13 new commands, October 2007 Updated 23 commands with new options in support of v6.0. Removed 46 obsolete commands.
  • Page 5 Document Title Publication Number Summary of Changes Publication Date Fabric OS Command Reference 53-1001337-01 Added 18 new commands. July 2009 Modified 27 commands with new command operands to support new Fabric OS v6.3.0 features. Removed 6 deprecated command options. Removed 6 diagnostic commands that now require root access.
  • Page 6 Fabric OS Command Reference 53-1002147-01...
  • Page 7: Table Of Contents

    Contents About This Document In this chapter ..........xix How this document is organized.
  • Page 8 Contents ......... . 48 aliRemove .
  • Page 9 Contents ..........121 cmsh .
  • Page 10 Contents ......... . 259 fanShow .
  • Page 11 Contents ......... . . 351 fipsCfg .
  • Page 12 Contents ......... . 436 iodReset .
  • Page 13 Contents ......... 534 nsAllShow .
  • Page 14 Contents ........655 portCfgFportBuffers ....... . . 656 portCfgGeMediaType .
  • Page 15 Contents ........750 portLoopbackTest ......... 753 portMirror .
  • Page 16 Contents ........903 sensorShow .
  • Page 17 Contents ........999 sysMonitor .
  • Page 18 Contents ......1081 Command validation checks ....1082 Encryption commands and permissions .
  • Page 19: About This Document

    About This Document In this chapter • How this document is organized ........xix •...
  • Page 20: Supported Hardware And Software

    Supported hardware and software This document includes updated information specific to new functionality introduced in Fabric OS v7.0.0. Table lists the hardware platforms supported in Fabric OS v7.0 release.The ASIC type for each piece of hardware is provided in parenthesis. ASIC names may be used in this document to distinguish between types of switches that share certain characteristics.
  • Page 21: What Is New In This Document

    Although many different software and hardware configurations are tested and supported by Brocade Communications Systems, Inc. for Fabric OS v7.0.0, documenting all possible configurations and scenarios is beyond the scope of this document. This document is specific to Fabric OS v7.0.0. To obtain information about an OS version other than v7.0.0, refer to the documentation for that OS version.
  • Page 22 Access Gateway • New options to support static F_Port mapping: ag --staticadd N_Port [F_Port1; F_Port2;...] ag --staticdel N_Port [F_Port1; F_Port2;...] • New options to configure reliability counters: ag --reliabilitycounterset ag --reliabilitycountershow • agShow - Displays additional Access Gateway F-Port information if both switches run Fabric OS v7.0.0 Advanced Performance Monitoring (APM).
  • Page 23 • portLedTest - The --slot option must be specified with the -port option on bladed systems. • bpPortLoopbackTest - New spd_mode 16 for 16G platforms. • PortLoopbackTest - New spd_mode 10 and 16 for 10G and 16G platforms. Encryption Updates to cryptoCfg command to support the following new functionality: •...
  • Page 24 • fwMailcfg - Support for multiple e-mails (up to 5). • thConfig - New operand -sfptype to support SFP monitoring. • Ability to interrupt and restart Fabric Watch monitoring: portThConfig --pause | --continue sysMonitor --pause | --continue thConfig --pause | --continuue •...
  • Page 25 • portShow fciptunnel/fcipcircuit enhancements: New -s | --summary option displays a summary view of the tunnel configuration parameters for a specific VE_Port. New -d | --detail option displays a full view configuration details for all configured tunnels when used with the all port specifier. •...
  • Page 26: Platform Support

    Licensing Updated for new platforms. New ICL license display strings: • licenseShow Platform Support The following help pages have explicit platform-specific restrictions and information. This information be updated to remove references to unsupported platforms, add new platforms, and validate restrictions that need to include the new 16G platforms.
  • Page 27: Deprecated Commands

    portCfgAutoDisable --remove - Remove specified triggers. portCfgAutoDisable --addall - Add all triggers. portCfgAutoDisable --removeall - Remove all triggers. portCfgAutoDisable--addexcept - Add all triggers except provided options. portCfgAutoDisable --show - Show configured/added options. • portCfgShow - displays the configured values . •...
  • Page 28 • fabSwitchShow (Brocade internal use only) • fabStatsClear (Brocade internal use only) • fabSwitchClear (Brocade internal use only) • fastWriteCfg • fcLunQuery • firmWareKeyUpdate • fmConfig • fwConfigure • fwShow • iodDelayReset • iodDelayShow • interOpMode • iscsiCfg • iscsiChipTest •...
  • Page 29: Cli Usage Conventions

    • supportShowCfgShow • fosConfig The following command options are deprecated: • cfgDefault - -chassis • portCmd -tperf -loop • portCmd -tperf -crc • thConfig - ST (State Change) area of the SFP class is no longer supported. • fipsCfg --disable fips (Brocade internal use only) •...
  • Page 30: Command Syntax Conventions

    Command syntax conventions Command syntax in the synopsis section follows these conventions: command Commands are printed in bold. --option, option Command options are printed in bold. -argument, arg Arguments are printed in bold. Optional element. variable Variables are printed in italics. In the help pages, values are underlined or enclosed in angle brackets <...
  • Page 31: Notice To The Reader

    For definitions of SAN-specific terms, visit the Storage Networking Industry Association online dictionary http://www.snia.org/education/dictionary Notice to the reader This document may contain references to the trademarks of the following corporations. These trademarks are the properties of their respective companies and corporations. These references are made for informational purposes only.
  • Page 32: Other Industry Resources

    Other industry resources For additional resource information, visit the Technical Committee T11 Web site. This Web site provides interface standards for high-performance and mass storage applications for Fibre Channel, storage management, and other applications: http://www.t11.org For information about the Fibre Channel industry, visit the Fibre Channel Industry Association Web site: http://www.fibrechannel.org Getting technical help Contact your switch support supplier for hardware, firmware, and software support, including product...
  • Page 33: Document Feedback

    Document feedback Quality is our first concern at Brocade, and we have made every effort to ensure the accuracy and completeness of this document. However, if you find an error or an omission, or you think that a topic needs further development, we want to hear from you. Forward your feedback to: documentation@brocade.com Provide the title and version number and as much detail as possible about your issue, including the topic heading and page number and your suggestions for improvement.
  • Page 34 xxxiv Fabric OS Command Reference 53-1002147-01...
  • Page 35: Chapter 1 Using Fabric Os Commands

    Chapter Using Fabric OS Commands In this chapter • Understanding role-based access control......1 •...
  • Page 36: Understanding Virtual Fabric Restrictions

    Understanding Virtual Fabric restrictions Additional command restrictions apply depending on whether Virtual Fabrics or Admin Domains are enabled in a fabric. NOTE Virtual Fabrics and Admin Domains are mutually exclusive and are not supported at the same time on a switch.
  • Page 37: Understanding Admin Domain Restrictions

    Understanding Admin Domain restrictions Refer to Appendix A, “Command Availability” for context and switch type information as it applies to CLI commands. Understanding Admin Domain restrictions A subset of Fabric OS commands is subject to Admin Domain restrictions that may be in place. In order to execute an AD-restricted command on a switch or device, the switch or device must be part of a given Admin Domain, and the user must be logged in to that Admin Domain.
  • Page 38 Using the command line interface The documentation for each command includes a synopsis of its syntax, a description of command use, and a set of examples. The same information can be accessed by issuing help command on a Brocade switch or director. This command displays the help page for the specified command. For example, to display the help page for ad, type: switch:admin>...
  • Page 39: Chapter 2 Fabric Os Commands

    Chapter Fabric OS Commands aaaConfig Manages RADIUS and LDAP configuration information. SYNOPSIS aaaconfig aaaconfig --show aaaconfig --add | --change server -conf radius | ldap [-p port] [-d domain] [-t timeout] [-s secret] [-a chap | pap | peap-mschapv2] aaaconfig --remove server -conf radius | ldap aaaconfig --move server -conf radius | ldap to_position aaaconfig --authspec aaa1[;aaa2 [-backup] [-nologout] aaaconfig --help...
  • Page 40 aaaConfig The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. OPERANDS This command has the following operands: server Specifies an IP address or a server name in dot-decimal notation.
  • Page 41 aaaConfig Valid protocols are one of the following: Password Authentication Protocol chap Challenge-Handshake Authentication Protocol peap-mschapv2 Protected Extensible Authentication Protocol (requires Fabric OS v5.3.0 or later) --remove server Removes the specified server from the configuration. The server must match one of the IP addresses or the names shown in the current configuration.
  • Page 42 aaaConfig "radius;local" Enables the current RADIUS configuration as the primary AAA service and the switch-local database as the secondary AAA service. If "radius" and "local" are specified, and if the RADIUS servers are reachable and the user credentials are correct, the user authentication succeeds. If the user provides credentials from the switch database, the RADIUS authentication fails but login succeeds through the switch database.
  • Page 43 aaaConfig To replace the AAA service with backup option: switch:admin> aaaconfig --authspec "ldap;local" -backup To change the authentication mechanism with the no logout provision: switch:admin> aaaconfig --authspec radius -nologout switch:admin> aaaconfig --show RADIUS CONFIGURATIONS ===================== Position Server : 172.20.1.68 Port : 1812 Secret : testing123...
  • Page 44 Manages Admin Domain operations. SYNOPSIS ad --activate ad_id ad --add ad_id [-d "dev_list"] [-s "switch_list"] ad --apply ad --clear [-f] ad --create ad_id [-d "dev_list"] [-s "switch_list"] ad --deactivate ad_id ad --delete ad_id ad --exec ad_id "command_list" ad --remove ad_id [-d "dev_list"] [-s "switch_list"] ad --rename ad_id new_ad_id ad --save ad --select ad_id...
  • Page 45 Before creating Admin Domains, the default zone mode should be set to "No Access". To set the default zone mode to "No Access" execute the following command sequence: switch:admin> ad --select AD0 switch:admin> defzone --noaccess switch:admin> cfgsave Refer to defZone help for more information. All switches, switch ports and devices in the fabric that are not specified in any other Admin Domain are treated as implicit members of AD0.
  • Page 46 --create arguments Creates a new Admin Domain with optionally specified device or switch members. A newly created Admin Domain is in an activated state. It initially contains no zone database. The newly created Admin Domain remains in the transaction buffer until you issue ad --apply or ad --save.
  • Page 47 --show arguments Displays the membership information of the specified Admin Domain or all Admin Domains. When executed in an AD255 context and an Admin Domain name is not specified, all information about all existing Admin Domains is displayed. When executed in an AD0-AD254 context, the command, by default, displays the members of the current Admin Domain's effective configuration, and therefore you cannot specify an ad_id or mode.
  • Page 48 -d "dev_list" Specifies the list of devices in an Admin Domain, in quotation marks. Separate each entry in the device list with a semicolon (;). Valid formats include the following: D,PI Uses existing zone D,PI member types. Benefits include the following: •...
  • Page 49 Displays the Admin Domain configuration stored in persistent memory (defined configuration). Displays the currently enforced Admin Domain configuration currently enforced (effective configuration). EXAMPLES To enable AD5: switch:admin> ad --activate 5 You are about to activate a new admin domain. Do you want to activate '5' admin domain \ (yes, y, no, n): [no] y To enable AD_13: switch:admin>...
  • Page 50 To deactivate Admin Domain 5: switch:admin> ad --deactivate 5 You are about to deactivate an AD. This operation will fail if an effective zone \ configuration exists in the AD Do you want to deactivate '5' admin domain \ (yes, y, no, n): [no] y To delete AD13: switch:admin>...
  • Page 51 To display all ADs: switch:admin> ad --show Current AD: 255 : AD255 Transaction buffer configuration: --------------------------------- no configuration Defined configuration: ---------------------- AD: 1 : Active Device WWN members: 21:00:00:80:e5:12:8b:37; 21:00:00:80:e5:12:8b:55; Switch port members: 1,0; 1,1; 1,2; 1,3; 1,4; 1,5; 1,6; 1,7; 1,8; 1,9; 1,10; 1,11; 1,12;...
  • Page 52 To display the Admin Domain effective configuration information: switch:admin> ad --show -m 2 Current AD: 255 : AD255 Effective configuration: ------------------------ AD: 1 : Active Device WWN members: 21:00:00:80:e5:12:8b:37; 21:00:00:80:e5:12:8b:55; Switch port members: 1,0; 1,1; 1,2; 1,3; 1,4; 1,5; 1,6; 1,7; 1,8; 1,9; 1,10; 1,11; 1,12;...
  • Page 53 1,337; ---------------------------- * - Member does not exist + - Member is AD Unaware To abort the Admin Domain management transaction buffer: switch:admin> ad --transabort You are about to abort the outstanding AD transaction. Do you want to abort the AD transaction \ (yes, y, no, n): [no] y To display the current Admin Domain transaction: switch:admin>...
  • Page 54 Enables Access Gateway (AG) and manages AG-specific operations. SYNOPSIS ag --help ag --show ag --modeshow | --modeenable | --modedisable ag [--policyenable | --policydisable] policy ag --policyshow ag --mapshow [N_Port] ag [--mapset | --mapadd | --mapdel] N_Port [F_Port1; F_Port2;...] ag [--staticadd | --staticdel ] N_Port [F_Port1; F_Port2;...] ag --pgshow [pgid] ag --pgcreate pgid "N_Port1 [;N_Port2;...]"...
  • Page 55 ag --printalpamap F_Port ag --deletepwwnfromdb PWWN ag --clearalpamap F_Port ag --addwwnmapping N_Port "WWN [;WWN2;...]" | --all ag --delwwnmapping N_Port "WWN [;WWN2;...]" | --all ag --addwwnpgmapping Port_Group "WWN [;WWN2;...]" | --all ag --delwwnpgmapping Port_Group "WWN [;WWN2;...]" | --all ag --addwwnfailovermapping N_Port "WWN [;WWN2;...]" | --all ag --delwwnfailovermapping N_Port "WWN [;WWN2;...]"...
  • Page 56 AG configuration changes are saved persistently as configuration keys. Use the portCfgNPort command to set a port as N_Port. This command supports multiple configurations for mapping device logins to N_Ports for the purposes of load balancing and redistribution in the event of a fabric change. If multiple mappings are configured, the system considers the available mappings in a fixed order of priority to determine which of the available N_Ports should be assigned to the login request.
  • Page 57 • Advanced Device Security (ADS) policy. This policy restricts access to the fabric at the AG level to a set of authorized devices. Unauthorized access is rejected and the system logs a RASLOG message. You can configure the list of allowed devices for each F_Port by specifying their Port WWN. Refer to the ag --ads* commands for information on managing advanced device security.
  • Page 58 --mapshow [N_Port | device_WWN] Displays the F_Ports that are configured and currently mapped to a given "primary" N_Port. Optionally specify an N_Port to display the F_Ports that are mapped to the specified N_Port only, or specify a device WWN to display the N_Port to which the device WWN is mapped.
  • Page 59 --pgremove pgid Deletes the specified port group. The N_Ports in the port group that was deleted are moved to the default port group, which is pgid 0. --pgmapadd pgid "F_Port1[;F_Port2;...]" Maps the specified F_Ports to the PG identified by the pgid. Upon execution, the system identifies the least loaded N_Port in the port group and maps the F_Ports to that N_Port.
  • Page 60 --failoverenable [N_Port] | -pg pgid Enables the failover policy for a given N_Port or for all N_Ports in the given port group. When failover policy is enabled for a given N_Port, F_Ports behave as follows: • If only primary F_Port to N_Port mapping is in place, all currently mapped F_Ports fail over to another available N_Port in the event the original N_Port becomes disabled.
  • Page 61 --adsset "F_Port [;F_Port2;...]" "WWN [;WWN2;...]" Sets the list of devices that are allowed to login to a specified set of F_Ports. Devices are specified by their world wide names. Lists must be enclosed in double quotation marks. List members must be separated by semicolons. The maximum number of entries in the allowed device list is twice the per port maximum login count.
  • Page 62 --addwwnmapping N_Port "WWN [;WWN2;...]" | --all Maps one or more device WWNs to a preferred N_Port. All traffic form the specified devices is forced through the specified N_Port, regardless of which F_Port the device logs into. In the event the designated N_Port should become unavailable, an alternate port can serve as a preferred failover port.
  • Page 63 --wwnmapshow Displays all device WWN mappings. For each device WWN, the command displays the N_Port number to which it is mapped, the secondary (failover) N_Port, and the port group if applicable. The "Current" field shows the port the device is currently using. If the device is not logged in, the field displays "none." If the device is logged in to a port other than the one it is mapped to, the field displays that port.
  • Page 64 0x6d0c00 20:0c:00:05:1e:37:11:aa 1 0 10.32.74.109 10;11; 0x6d0d00 20:0d:00:05:1e:37:11:aa 0 1 10.32.74.109 12;13; ----------------------------------------------------------- F_Port information : Port PortID Attached PWWN N_Port Preferred login N_port exceeded? ---------------------------------------------------------- 4 0x6d0a01 21:00:00:e0:8b:83:e3:cd 5 0x6d0a02 21:01:00:e0:8b:a3:e3:cd 6 0x6d0a03 21:00:00:e0:8b:83:3e:ce 7 0x6d0b01 21:01:00:e0:8b:a3:3e:ce 8 0x6d0b02 21:00:00:e0:8b:83:5c:cd 9 0x6d0b03 21:01:00:e0:8b:a3:5c:cd 10 0x6d0c02 10:00:00:06:2b:0a:a3:93 11 0x6d0c01 10:00:00:06:2b:0a:a3:92...
  • Page 65 To disable auto port configuration policy when the switch is disabled: switch:admin> ag --policydisable auto Default factory settings will be restored. Default mappings will come into effect. Please save the current configuration using configupload. Do you want to continue? (yes, y, no, n): [no] y Access Gateway configuration has been restored \ to factory default To enable the ADS policy:...
  • Page 66 To add F_Port 5 to N_Port 2 (observe that N_Port 2 already has mapped F_Ports): switch:admin> ag --mapadd 2 "5" To display the new mappings: switch:admin> ag --mapshow N_Port Configured Static Current Failover Failback PG_ID PG_Name _F_Ports _F_Ports F_Ports ----------------------------------------------------------------- None SecondFabric 7;8;9...
  • Page 67 _F_Ports _F_Ports -------------------------------------------------------------- None None -------------------------------------------------------------- Static N-Port to F-Port Mapping N-Port F-Port -------------------------------------------------------------- -------------------------------------------------------------- AG failover policy commands To display failover policy settings for all N_Ports: switch:admin> ag --failovershow N_Port failover_bit --------------------------- To set and display failover and failback policies on a single port: switch:admin>...
  • Page 68 To set and display failback policy settings on a single port: switch:admin> ag --failbackenable 0 Failback policy cannot be enabled since failover policy is disabled for port 0 switch:admin> ag --failbackenable 2 Failback policy is enabled for port 2 switch:admin> ag --failbackenable 3 Failback on N_Port 3 is not supported switch:admin>...
  • Page 69 To remove the port group with pgid 2: switch:admin> ag --pgremove 2 Port Group 2 has been removed successfully switch:admin> ag --pgshow PG_ID PG_Name PG_Mode N_Ports F_Ports ----------------------------------------------- lb,mfnm 4;5;6 FirstFabric 10;11 ----------------------------------------------- To enable managed fabric name monitoring in port group 3: switch:admin>...
  • Page 70 To delete secondary port mapping for F_Ports 7, 8 and 9: switch:admin> ag --prefdel "7;8;9" 3 Preferred N_Port is deleted successfully \ for the F_Port[s] To set secondary port mapping for F_Ports 7, 8 and 9: switch:admin> ag --prefset "7;8;9" 3 Preferred N_Port is set successfully \ for the F_Port[s ADS Policy commands...
  • Page 71 To enable persistent ALPA in stringent mode: switch:admin> ag --persistentalpaenable 1 -s Persistent ALPA mode is enabled To disable persistent ALPA mode: switch:admin> ag --persistentalpaenable 0 Persistent ALPA mode is enabled To display the ALPA database entries for F_Port 5: switch:admin>...
  • Page 72 To create a WWN to port group mapping for all currently mapped devices (this command does not affect devices not already mapped or connecting later). switch:admin> ag --addwwnpgmapping 4 --all To add port 13 as a preferred failover N_Port for a device: switch:admin>...
  • Page 73: Agautomapbalance

    agAutoMapBalance agAutoMapBalance Controls automatic remapping of F_Ports in AG mode. SYNOPSIS agautomapbalance --enable [-fport | -nport] [-pg Port_Group_Number | -all] agautomapbalance --disable [-fport | -nport] [-pg Port_Group_Number | -all] agautomapbalance --force agautomapbalance --show agautomapbalance --help DESCRIPTION Use this command to control the automatic rebalancing of F_Ports for login distribution in the event that an F_Port goes offline or an N_Port comes online.
  • Page 74 agAutoMapBalance -nport Enables automatic login redistribution in the event that one or more N_Ports come online. When automatic login redistribution is enabled, the F_Ports mapped to the current N_Ports are rebalanced among the N_Ports. --disable Disables automatic login redistribution upon removal or addition of a specified port type.
  • Page 75 agAutoMapBalance To disable automatic login redistribution on F_Port offline events: switch:admin> agautomapbalance --disable -fport To enable automatic login redistribution on F_Ports and N_Ports on port group 1 in the Access Gateway: switch:admin> agautomapbalance --enable -fport pg 1 To disable automatic login redistribution on F_Ports and N_Ports on all port groups in the Access Gateway: switch:admin>...
  • Page 76: Agshow

    agShow agShow Displays the Access Gateway information registered with the fabric. SYNOPSIS agshow agshow --name ag_name agshow --local DESCRIPTION This command displays the details of the F_Ports and the configured N_Ports in the Access Gateway attached to the fabric. The command output displays the following information. Name The name of the Access Gateway.
  • Page 77 agShow OPERANDS This command has the following optional operands: --name ag_name Displays information regarding a specific Access Gateway that is registered with this fabric. --local Display information regarding all Access Gateways that are locally registered to this switch. EXAMPLES To display the Access Gateway information registered with the fabric: switch:admin>...
  • Page 78 agShow Local/Remote Name ---------------------------------- local L5D_B10_4016_1 local L5D_B14_4024_1 local L5D_B13_200_AG SEE ALSO portCfgNPIVPort Fabric OS Command Reference 53-1001764-01...
  • Page 79: Aliadd

    aliAdd aliAdd Adds a member to a zone alias. SYNOPSIS aliadd "aliName","member[; member...]" DESCRIPTION Use this command to add one or more members to an existing zone alias. The alias member list cannot contain another zone alias. This command changes the defined configuration. For the change to become effective, enable the zone configuration with the cfgEnable command.
  • Page 80: Alicreate

    aliCreate aliCreate Creates a zone alias. SYNOPSIS alicreate "aliName","member[; member...]" DESCRIPTION Use this command to create a new zone alias. The zone alias member list must have at least one member (empty lists are not allowed). The alias member list cannot contain another zone alias. Refer to the zoneCreate command for more information on name and member specifications.
  • Page 81: Alidelete

    aliDelete aliDelete Deletes a zone alias. SYNOPSIS alidelete "aliName" DESCRIPTION Use this command to delete a zone alias. This command changes the defined configuration. For the change to become effective, enable the zone configuration with the cfgEnable command. For the change to be preserved across switch reboots, save the zone configuration to nonvolatile memory with the cfgSave command.
  • Page 82: Aliremove

    aliRemove aliRemove Removes a member from a zone alias. SYNOPSIS aliremove "aliName","member[; member...]" DESCRIPTION Use this command to remove one or more members from an existing zone alias. If all members are removed, the zone alias is deleted. This command changes the defined configuration. For the change to become effective, enable the zone configuration with the cfgEnable command.
  • Page 83: Alishow

    aliShow aliShow Displays zone alias information. SYNOPSIS alishow ["pattern"][, mode] DESCRIPTION Use this command to display zone configuration information. Use the pattern operand to display only matching zone alias names in the defined configuration. If no parameters are specified, all zone configuration information (both defined and effective) is displayed.
  • Page 84: Aptpolicy

    aptPolicy aptPolicy Changes or displays the Advanced Performance Tuning (APT) policy. SYNOPSIS aptpolicy [policy] aptpolicy -ap [ap_policy] DESCRIPTION Use this command to display and change the advanced performance tuning (APT) policies on a switch. Several internal performance tuning parameters can be modified with this command. The default parameters (AP shared Link Policy) are optimized for most SAN applications;...
  • Page 85 aptPolicy • The FC address of the destination fabric device (DID) for this frame. • The FC Originator Exchange ID (OXID) for this frame. This policy optimizes the utilization of the available paths by allowing I/O traffic between different SID, DID, or OXID pairs to use different paths. All frames received on an ingress port with the same SID, DID, or OXID parameters take the same path unless there is a fabric event.
  • Page 86: Auditcfg

    auditCfg auditCfg Modifies and displays the audit log filter configuration. SYNOPSIS auditcfg --class audit_class auditcfg --enable | --disable auditcfg --severity severity_level auditcfg --show DESCRIPTION Use this command to configure the audit logging and to display the audit log configuration. This command allows you to set filters by configuring certain classes, to add or remove any of the classes in the filter list, to set severity levels for audit messages, and to enable or disable audit filters.
  • Page 87 auditCfg To display the configuration: switch:admin> auditcfg --show Audit filter is enabled. 1-ZONE 2-SECURITY 3-CONFIGURATION 4-FIRMWARE 5-FABRIC 6-FW 7-LS Severity level: INFO To disable audit logging: switch:admin> auditcfg --disable Audit filter is disabled. SEE ALSO auditDump Fabric OS Command Reference 53-1001764-01...
  • Page 88: Auditdump

    auditDump auditDump Displays or clears the audit log. SYNOPSIS auditdump -s | -show auditdump -c | -clear DESCRIPTION Use this command to display or clear the audit log on the switch. The audit log persistently saves the most recent 256 log entries on the switch. On modular platforms, the entries are not shared across CPs. To display or clear the logs, this command must be issued for each CP separately.
  • Page 89: Authutil

    authUtil authUtil Displays and sets the authentication configuration. SYNOPSIS authutil authutil --show authutil --set option value authutil --policy -sw option | -dev option authutil --authinit [slot/]port[, [slot/]port...] | allE DESCRIPTION Use this command to display and set local switch authentication parameters. Use --set to change authentication parameters such as protocol, Diffie-Hellman group (DH group), or hash type.
  • Page 90 authUtil enabled. Specifying "*" enables all DH groups 0, 1, 2, 3, and 4, in that order. This means that in authentication negotiation, the NULL DH group is given priority over all other groups. In the case of a port that is enabled for encryption and you specify "*", the DH group 4 is selected.
  • Page 91 authUtil --authinit [slot/]port [, [slot/]port...| allE Reinitiates authentication on selected ports after changing the DH-CHAP group, hash type, and shared secret between a pair of switches. This command does not work on Private, Loop, NPIV and FICON devices. The command can reinitiate authentication only if the device was previously authenticated.
  • Page 92 authUtil To set the Device policy to passive mode: switch:admin> authutil --policy -dev passive Warning: Activating the authentication policy requires DH-CHAP secrets on both switch and device. Otherwise, the F-port will be disabled during next F-port bring-up. ARE YOU SURE (yes, y, no, n): [no] y Device authentication is set to PASSIVE To set the device authentication policy to "on"...
  • Page 93: Bannerset

    bannerSet bannerSet Sets the banner on the local switch. SYNOPSIS bannerset [banner] DESCRIPTION Use this command to set the banner on the local switch. The banner is a string of alphanumeric characters. It is displayed after you log in to a switch. The banner can be created using the banner operand or interactively by entering the bannerSet command without an operand.
  • Page 94: Bannershow

    bannerShow bannerShow Displays the banner text. SYNOPSIS bannershow DESCRIPTION Use this command to display the text of the local switch banner. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 95: Bcastshow

    bcastShow bcastShow Displays broadcast routing information. SYNOPSIS bcastshow DESCRIPTION Use this command to display the broadcast routing information for all ports in the switch. The broadcast routing information indicates all ports that are members of the broadcast distribution tree: ports that are able to send and receive broadcast frames.
  • Page 96: Bladecfggemode

    bladeCfgGeMode bladeCfgGeMode Configures a GbE port or a 10GbE port on the Brocade FX8-24 blade. SYNOPSIS bladecfggemode --set mode -slot slot bladecfggemode --show -slot slot | -all bladecfggemode --help DESCRIPTION Use this command to configure the GbE port mode on the Brocade FX8-24 extension blade or to display the configuration.
  • Page 97 bladeCfgGeMode To display the GbE port mode for all configured slots: switch:admin> bladecfggemode --show -all bladeCfgGeMode: Blade in slot 1 is configured in 1GigE Mode 1GigE mode: only the ge0-9 ports are enabled (xge0 and xge1 \ are disabled) bladeCfgGeMode: Blade in slot 4 is configured in 10GigE Mode 10GigE mode: only xge0 and xge1 are enabled (ge0-9 ports \ are disabled)
  • Page 98: Bladedisable

    bladeDisable bladeDisable Disables all user ports on a blade. SYNOPSIS bladedisable slot DESCRIPTION Use this command to disable all user ports on a blade. All Fibre Channel ports on the blade are taken offline. If the switch was connected to a fabric through this blade, the remaining switches reconfigure, and the switch reconfigures based on the other blade ports.
  • Page 99 bladeDisable ------ In_Sync Disabled ------ In_Sync Disabled ------ In_Sync Disabled ------ In_Sync Disabled ------ In_Sync Disabled ------ In_Sync Disabled ------ In_Sync Disabled ------ In_Sync Disabled ------ In_Sync Disabled ------ In_Sync Disabled ------ In_Sync Disabled ------ In_Sync Disabled ------ In_Sync Disabled ------ In_Sync Disabled...
  • Page 100: Bladeenable

    bladeEnable bladeEnable Enables all user ports on a blade. SYNOPSIS bladeenable slot DESCRIPTION Use this command to enable all user ports on a blade. All ports within the blade that did not fail the power-on self-test (POST) are enabled (except for persistently disabled ports). They may come online if connected to a device, or remain offline if disconnected.
  • Page 101 bladeEnable UNKNOWN VACANT SW BLADE ENABLED CP BLADE ENABLED CP BLADE ENABLED SW BLADE ENABLED UNKNOWN VACANT UNKNOWN VACANT UNKNOWN VACANT SEE ALSO bladeDisable, chassisDisable, chassisEnable, portEnable, portDisable, switchDisable, switchShow Fabric OS Command Reference 53-1001764-01...
  • Page 102: Bladeswap

    bladeSwap bladeSwap Swaps the area numbers for matching port pairs of two blades. SYNOPSIS bladeSwap -src source_slot -dest destination_slot DESCRIPTION Use this command to swap the area numbers for matching port pairs of two blades. All ports must qualify for swapping for this command to succeed. It validates that the blades in the indicated slots are of the same type, have the same number of ports, and that the port pairs are in the same partition.
  • Page 103: Bootluncfg

    bootLunCfg bootLunCfg Transparently configures the boot LUN for an HBA. SYNOPSIS bootluncfg --add HBA_WWN PWWN LUN_ID bootluncfg --delete HBA_WWN [PWWN LUN_ID] bootluncfg --show bootluncfg --help DESCRIPTION Use this command to configure the boot LUN for an HBA. Existing fabric-based boot LUN discovery allows the host's boot LUN information to be stored in the fabric zone database by using a zone name that contains the PWWN of an HBA port.
  • Page 104 bootLunCfg EXAMPLES To configure a boot LUN: switch:admin> bootluncfg --add 11:22:ab:44:44:ff:44:ca \ 1b:6c:55:55:55:3a:55:ff 9abc345fa1112410 Operation Successful To display existing Port/LUN mappings: switch:admin> bootluncfgn--show 00:11:22:33:44:55:66:77 00:00:00:00:aa:bb:cc:dd;00:00:00:01:ee:ff:11:22; \ 00:00:00:02:9a:bc:34:5f;00:00:00:03:a1:11:24:10 aa:aa:aa:aa:aa:aa:aa:aa 00:00:00:00:11:11:11:11;00:00:00:01:11:11:11:11; \ 00:00:00:02:9a:bc:34:5f;00:00:00:03:a1:11:24:10 bb:aa:aa:aa:aa:aa:aa:aa 00:00:00:00:11:11:11:11;00:00:00:01:11:11:11:11; \ 00:00:00:02:9a:bc:34:5f;00:00:00:03:a1:11:24:10 To remove an HBA to Port/LUN mapping: switch:admin>...
  • Page 105: Bottleneckmon

    bottleneckMon bottleneckMon Monitors and reports latency and congestion bottlenecks on F_Ports and E_Ports. SYNOPSIS bottleneckmon --enable [-cthresh congestion_threshold] [-lthresh latency_threshold] [-time seconds] [-qtime seconds] [-alert | -noalert] [-lsubsectimethresh time_threshold] [-lsubsecsevthresh severity_threshold] bottleneckmon --disable bottleneckmon --config [-cthresh congestion_threshold] [-lthresh latency_threshold][-time seconds] [-qtime seconds] [-alert | -noalert] [-lsubsectimethresh time_threshold] [-lsubsecsevthresh severity_threshold]...
  • Page 106 bottleneckMon Enabling or disabling bottleneck detection is a switch-wide operation. If Virtual Fabrics are enabled, the configuration is applied per logical switch and affects all ports on the current logical switch. After the (logical) switch-wide bottleneck detection parameters have been set, you can you can fine-tune the configuration for specific ports.
  • Page 107 bottleneckMon 6 seconds in an interval of 10 seconds, and 1 second out of the other 4 seconds was affected by a bottleneck, the display for that interval would show 25% as the percentage of affected seconds (1 out of 4), and state "no data for 6 seconds."...
  • Page 108 bottleneckMon Credit recovery on back-end ports Use the --cfgcredittools commands to enable or disable credit recovery of external back-end ports and to display the configuration. When this feature is enabled, credit is recovered on external back-end ports (ports connected to the core blade or core blade back-end ports) when credit loss has been detected on these ports.
  • Page 109 bottleneckMon switch from another logical switch, bottleneck detection is enabled upon completion of the move. You can configure optional thresholds and alerts when you enable the feature, or you can change selected parameters later with the --config command. --config Modifies bottleneck detection parameters on specified ports or, when a port list is not specified, on the entire switch.
  • Page 110 bottleneckMon and no greater than 1. The default value is 0.8. Note that the application of the sub-second numerical limits is approximate. This command erases the statistics history and restarts alert calculations (if alerting is enabled) on the specified ports. When used with the config option, you must specify a port.
  • Page 111 bottleneckMon The following operands are optional: -interval seconds Specifies the time window in seconds over which the percentage of seconds affected by bottleneck conditions is displayed in the output. When a port is specified with the --show command, the maximum interval is 10800 seconds (3 hours).
  • Page 112 bottleneckMon EXAMPLES Bottleneck detection examples To enable bottleneck detection on the switch without alerts (statistics collected with default parameters are still available for viewing): switch:admin> bottleneckmon --enable To enable bottleneck detection on the switch with alerts using default values for thresholds and time (preferred use case): switch:admin>...
  • Page 113 bottleneckMon Feb 26 21:56:10 Feb 26 21:56:20 Feb 26 21:56:00 Feb 26 21:56:10 Feb 26 21:55:50 Feb 26 21:56:00 Feb 26 21:55:40 Feb 26 21:55:50 Feb 26 21:55:30 Feb 26 21:55:40 To display bottleneck statistics for a single port: switch:admin> bottleneckmon --show -interval 5 -span 30 2/4 ============================================= Wed Jan 13 18:54:35 UTC 2010...
  • Page 114 bottleneckMon Jan 13 18:54:10 Jan 13 18:54:15 20.00 Jan 13 18:54:15 Jan 13 18:54:20 80.00 Jan 13 18:54:20 Jan 13 18:54:25 0.00 Jan 13 18:54:25 Jan 13 18:54:30 0.00 Jan 13 18:54:30 Jan 13 18:54:35 40.00 To display bottleneck configuration details for the switch: switch:admin>...
  • Page 115 bottleneckMon To enable back-end port credit recovery with the link reset threshold option and to display the configuration: switch:admin> bottleneckmon --cfgcredittools -intport \ -recover onLrThresh switch:admin> bottleneckmon --showcredittools Internal port credit recovery is Enabled with LrOnThresh To disable back-end port credit recovery and to display the configuration: switch:admin>...
  • Page 116: Bpportloopbacktest

    bpPortLoopbackTest bpPortLoopbackTest Sends and receives data from the same BP port to perform a functional test of the port. SYNOPSIS bpportloopbacktest [--slot slot] [-nframes count] [-pklen count] [-lb_mode mode] [-spd_mode mode ] [-bpports itemlist ] DESCRIPTION Use this command to verify the functional operation of the switch. The test sends frames from a specified blade processor (BP) port transmitter and loops the frames back into the same BP port's receiver.
  • Page 117 bpPortLoopbackTest At each pass, a different data type is used to create the frame from a palette of seven. If a pass of seven is requested, seven different frames are used in the test. If eight passes, the first seven frames are unique, and the eighth frame is the same as the first.
  • Page 118 bpPortLoopbackTest Runs test at 8 Gbps (Default for Condor2). Runs test at 16 Gbps (Condor3 only). -bpports itemlist Specifies a list of blade ports to test. By default all valid blade ports in the specified blade are tested. On the Brocade Encryption platforms, ports 80-103 are the only valid ports, because these are the only blade ports with access to the Vader chip.
  • Page 119: Bpturboramtest

    bpTurboRamTest bpTurboRamTest MBIST test for AP Blade BP ASICs. SYNOPSIS bpturboramtest [--slot slot] [ -passcnt count ] [ -bpports itemlist ] DESCRIPTION Use this command to verify the on-chip static random access memory (SRAM) located in the Blade Processor (BP) ASICs of the Application Processor (AP) blade. The command makes use of the memory built-in self-test (MBIST) circuitry.
  • Page 120 bpTurboRamTest EXAMPLES To run the test in default mode: switch:admin> bpturboramtest Running bpturboramtest ....Board Init Running Vader bist test Vader bist test PASSED Running Ob1 bist test Ob1 bist test PASSED BIST test PASSED on all ASIC(s) Test Complete: bpturboramtest Pass 1 of 1 Duration 0 hr, 1 min &...
  • Page 121: Bufopmode

    bufOpMode bufOpMode Changes or displays the Buffer Optimized Mode. SYNOPSIS bufopmode --set slot [-f] bufopmode --reset slot bufopmode --show slot bufopmode --showall DESCRIPTION Use this command to display or change the buffer optimized mode on a switch. When buffer optimized mode is enabled on a slot, additional buffers are allocated on the internal ports. Use this feature, if you have slow draining devices connected to the slot and there are no long distance links or F_Port buffers configured on that slot.
  • Page 122 bufOpMode Slot 9: buffer optimized mode - Off Slot 10: buffer optimized mode - Off Slot 11: buffer optimized mode - Off Slot 12: buffer optimized mode - On -------------------------------------------------- * indicates buffer optimization not supported on this blade To display current buffer optimized mode for a single slot switch:admin>...
  • Page 123 bufOpMode Slot 11: buffer optimized mode - Off* Slot 12: buffer optimized mode - Off* ----------------------------------------------------------- * indicates buffer optimization not supported on this blade SEE ALSO slotShow, slotPowerOn, slotPowerOff Fabric OS Command Reference 53-1001764-01...
  • Page 124: Ceeportledtest

    ceePortLedTest ceePortLedTest DESCRIPTION See portLedTest. SEE ALSO None Fabric OS Command Reference 53-1001764-01...
  • Page 125: Ceeportloopbacktest

    ceePortLoopbackTest ceePortLoopbackTest DESCRIPTION See portLoopbackTest. SEE ALSO None Fabric OS Command Reference 53-1001764-01...
  • Page 126: Ceeturboramtest

    ceeTurboRamTest ceeTurboRamTest DESCRIPTION See turboRamTest. SEE ALSO None Fabric OS Command Reference 53-1001764-01...
  • Page 127: Cfgactvshow

    cfgActvShow cfgActvShow Displays effective zone configuration information. SYNOPSIS cfgactvshow DESCRIPTION Use this command to display the effective zone configuration information. The current configuration is a single zone configuration that is currently in effect. The devices that an initiator sees are based on this configuration. The effective configuration is built when a specified zone configuration is enabled.
  • Page 128: Cfgadd

    cfgAdd cfgAdd Adds a member to a zone configuration. SYNOPSIS cfgadd "cfgName", "member[; member...]" DESCRIPTION Use this command to add one or more members to an existing zone configuration. This command changes the Defined Configuration. For the change to take effect, enable the configuration with the cfgEnable command.
  • Page 129: Cfgclear

    cfgClear cfgClear Clears all zone configurations. SYNOPSIS cfgclear DESCRIPTION Use this command to clear all zone information in the transaction buffer. All defined zone objects in the transaction buffer are deleted. If an attempt is made to commit the empty transaction buffer while a zone configuration is enabled, you are warned to first disable the enabled zone configuration or to provide a valid configuration with the same name.
  • Page 130: Cfgcreate

    cfgCreate cfgCreate Creates a zone configuration. SYNOPSIS cfgcreate "cfgName", "member[;member...]" DESCRIPTION Use this command to create a new zone configuration. This command changes the Defined Configuration (see cfgShow). For the change to become effective, enable the configuration with the cfgEnable command. For the change to be preserved across switch reboots, save the configuration to nonvolatile memory with the cfgSave command.
  • Page 131: Cfgdelete

    cfgDelete cfgDelete Deletes a zone configuration. SYNOPSIS cfgdelete "cfgName" DESCRIPTION Use this command to delete a zone configuration. This command changes the Defined Configuration (see cfgShow). For the change to become effective, enable the configuration with the cfgEnable command. For the change to be preserved across switch reboots, save the configuration to nonvolatile memory with the cfgSave command.
  • Page 132: Cfgdisable

    cfgDisable cfgDisable Disables a zone configuration. SYNOPSIS cfgdisable DESCRIPTION Use this command to disable the current zone configuration. The fabric returns to non-zoning mode, a mode in which all devices can see each other. This command ends and commits the current zoning transaction buffer to both volatile and nonvolatile memory.
  • Page 133: Cfgenable

    cfgEnable cfgEnable Enables a zone configuration. SYNOPSIS cfgenable "cfgName" DESCRIPTION Use this command to enable a zone configuration. The command builds the specified zone configuration . It checks for undefined zone names, zone alias names, or other inconsistencies, by expanding zone aliases, removing duplicate entries, and then installing the effective configuration.
  • Page 134: Cfgremove

    cfgRemove cfgRemove Removes a member from a zone configuration. SYNOPSIS cfgremove "cfgName","member[; member...]" DESCRIPTION Use this command to remove one or more members from an existing zone configuration. If all members are removed, the zone configuration is deleted. This command changes the Defined Configuration (see cfgShow). For the change to become effective, enable the configuration with the cfgEnable command.
  • Page 135: Cfgsave

    cfgSave cfgSave Saves the zone configuration to nonvolatile memory. SYNOPSIS cfgsave DESCRIPTION Use this command to save the current zone configuration. This command writes the defined configuration and the name of the effective configuration to nonvolatile memory in all switches in the fabric.
  • Page 136: Cfgshow

    cfgShow cfgShow Displays zone configuration information. SYNOPSIS cfgshow ["pattern"] [, mode] DESCRIPTION Use this command to display zone configuration information. If no operand is specified, all zone configuration information (both defined and effective) is displayed. If the local switch has an outstanding transaction, this command displays the most recently edited zone configuration that has not yet been saved.
  • Page 137 cfgShow EXAMPLES To display all zone configurations that start with "Test": switch:admin> cfgshow "Test*" cfg: Test1 Blue_zone cfg: Test_cfg Red_zone; Blue_zone To display all zone configuration information: switch:admin> cfgshow Defined configuration: cfg: USA1 Blue_zone cfg: USA_cfg Red_zone; Blue_zone zone: Blue_zone 1,1;...
  • Page 138: Cfgsize

    cfgSize cfgSize Displays zone and Admin Domain database size details. SYNOPSIS cfgsize [integer] DESCRIPTION Use this command to display the size details of the zone database and the Admin Domain database. When executed in a non-AD255 context, the size details include maximum size, the committed size, and the transaction size of the Zone database in bytes.
  • Page 139 cfgSize EXAMPLES To display the zone database on a Brocade 6510 switch:admin> cfgsize Zone DB max size - 1045274 bytes Available Zone DB size - 1041503 bytes committed - 2759 transaction - 0 To display Admin Domain and zone database size information in an AD255 context: switch:admin>...
  • Page 140: Cfgtransabort

    cfgTransAbort cfgTransAbort Aborts the current zoning transaction. SYNOPSIS cfgtransabort [token] DESCRIPTION Use this command to abort the current zoning transaction without committing it. All changes made since the transaction was started are removed and the zone configuration database is restored to the state before the transaction was started.
  • Page 141: Cfgtransshow

    cfgTransShow cfgTransShow Displays information about the current zoning transaction. SYNOPSIS cfgtransshow DESCRIPTION Use this command to display the ID of the current zoning transaction. In addition, the command provides information on whether or not the transaction can be aborted. The transaction cannot be aborted if it is an internal zoning transaction.
  • Page 142: Chassisbeacon

    chassisBeacon chassisBeacon Sets chassis beaconing mode. SYNOPSIS chassisbeacon [mode] DESCRIPTION Use this command to enable or disable beaconing on a chassis. Chassis beaconing can be used to locate a failing chassis in a group of chassis. Use the portBeacon command to locate a failing port, and use the switchBeacon command to locate a failing (logical) switch.
  • Page 143: Chassisdisable

    chassisDisable chassisDisable Disables all user ports in a chassis. SYNOPSIS chassisdisable [-force] DESCRIPTION Use this command to disable a Virtual Fabric-aware chassis. All Fibre Channel ports are taken offline. This command prompts for confirmation unless the -force option is used. If the chassis is partitioned into logical switches that are part of logical fabrics, the remaining switches in these fabrics reconfigure.
  • Page 144: Chassisdistribute

    chassisDistribute chassisDistribute Distributes IP filter policies. SYNOPSIS chassisdistribute -db policy_db -fid FID [-force] chassisdistribute -db policy_db -domain domain_list [-force] DESCRIPTION Use this command to manually distribute IP Filter policies. The behavior of this command depends on whether Virtual Fabrics are enabled or disabled. •...
  • Page 145 chassisDistribute NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. OPERANDS This command has the following operands: -db policy_list Specifies the list of policy sets, also called security databases, to be distributed.
  • Page 146: Chassisenable

    chassisEnable chassisEnable Enables all user ports in a chassis. SYNOPSIS chassisenable DESCRIPTION Use this command to enable a Virtual Fabric-aware chassis. All Fibre Channel ports that passed the power-on self test (POST) are enabled. They may come online if connected to a device, or remain offline if disconnected.
  • Page 147: Chassisname

    chassisName chassisName Displays or sets the chassis name. SYNOPSIS chassisname [name] DESCRIPTION Use this command to display or change the name associated with the chassis. Use this command without parameters to display the current chassis name. Use this command with the name operand to assign a new chassis name.
  • Page 148: Chassisshow

    chassisShow chassisShow Displays all field replaceable units (FRUs). SYNOPSIS chassisshow DESCRIPTION Use this command to display the Field Replaceable Unit (FR) header content for each object in the chassis and chassis backplane version. This command displays the following information: The chassis family, for example, DCX 8510. The backplane version number, in hexadecimal: Chassis Backplane Revision: xx The first line of each record contains the object ID.
  • Page 149 chassisShow NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. OPERANDS None EXAMPLES To display the FRUs for a DCX 8510-8: switch:user>...
  • Page 150: Classconfig

    classConfig classConfig Displays RBAC class permissions. SYNOPSIS classconfig --show class_name | -all | -classlist classconfig --showcli command classconfig --showroles class_name classconfig --help DESCRIPTION Use this command to display information about role-based access control (RBAC) permissions for one or all meta-object format (MOF) classes, to display permissions for a specified command, or to display the permissions for a specified MOF class.
  • Page 151 classConfig --showcli command Displays the RBAC permissions for the specified command and associated command options. The output displays the command name, the command options, the RBAC class permissions for each command option, and the MOF class. --showroles class_name Displays the role permissions the specified MOF class. --help Displays the command usage.
  • Page 152 classConfig 46. PortMirror 47. RADIUS 48. Reboot 49. Restricted 50. RoleConfig 51. RoutingAdvanced 52. RoutingBasic 53. Security 54. SessionManagement 55. SNMP 56. Statistics 57. StatisticsDevice 58. StatisticsPort 59. SwitchConfiguration 60. SwitchManagement 61. SwitchManagementIPConfiguration 62. SwitchPortConfiguration 63. SwitchPortManagement 64. Topology 65. USBManagement 66.
  • Page 153 classConfig To display the RBAC permissions for the UserManagement class: switch:admin> classconfig --showroles UserManagement Roles that have access to the RBAC class 'usermanagement' are: Role Name Permission --------- ---------- Admin Factory Root SecurityAdmin To display the RBAC permissions for a command: switch:admin>...
  • Page 154: Clihistory

    cliHistory cliHistory Displays switch command history. SYNOPSIS clihistory DESCRIPTION This command saves the following information whenever a command is executed on the switch: • Timestamp • Username • IP address of the Telnet session • Options • Arguments This command displays the local CLI command history. The information is saved in the SSHOW_SYS file as part of supportSave and in the CTRACE traceDump file, which is also included with the supportSave package.
  • Page 155: Cmsh

    cmsh cmsh Opens the CEE command shell. SYNOPSIS cmsh DESCRIPTION Use this command to open a shell for managing 10 GbE interfaces and Layer2/Layer3 protocol services. The CEE management shell provides a hierarchical CLI interface. Refer to the CEE Command Reference and the CEE Administrator's Guide for information on how to use the CEE commands and configuration procedures.
  • Page 156 cmsh To create an FCoE VLAN: switch:admin> cmsh switch:admin>en switch:admin>#conf t switch:admin>(config)#protocol lldp switch:admin>(conf-lldp)# advertise dcbx-fcoe-app-tlv switch:admin>(conf-lldp)# advertise dcbx-fcoe-logical-link-tlv switch:admin>(conf-lldp)#exit switch:admin>(config)#exit switch:admin>(config)# vlan classifier rule 1 proto \ fcoe encap ethv2 switch:admin>(config)# vlan classifier rule 2 proto fip \ encap ethv2 switch:admin>(config)# vlan classifier group 1 add rule 1 switch:admin>(config)# vlan classifier group 1 add rule 2 switch:admin>(config)#interface vlan 5...
  • Page 157: Configdefault

    configDefault configDefault Resets the nonpersistent configuration data to factory defaults. SYNOPSIS configdefault [-fid FID | -all | -switch] DESCRIPTION Use this command to reset the nonpersistent configuration settings to their factory default values. Configuration data is grouped into chassis information and switch information. Each configuration type is managed separately.
  • Page 158 configDefault The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. OPERANDS This command has the following operands: -fid FID Specifies the Fabric ID of the logical switch for which to reset the configuration.
  • Page 159: Configdownload

    configDownload configDownload Downloads configuration data to the system. SYNOPSIS configdownload configdownload [- all ] [-p ftp | -ftp] ["host","user","path" [,"passwd"]] configdownload [- all ] [-p scp | -scp ] ["host","user","path"] configdownload [- all ] [-p sftp | -sftp ] ["host","user","path"] configdownload [- all ] [-local | -USB | -U ["file"]] configdownload [-fid FID | -chassis | -all | -switch] [-p ftp | -ftp ] ["host","user","path"...
  • Page 160 configDownload The system configuration data is downloaded separately. It is grouped into chassis information and switch information. Each configuration type is managed separately and the behavior of configDownload depends on the environment in which the command is executed and which part of the system configuration you wish to download.
  • Page 161 configDownload Security parameters and the switch identity cannot be changed by configDownload. Parameters such as the switch name and IP address are ignored; they are lines in the configuration file that begin with "boot". Security parameters and version stamp are ignored; they are the lines in the configuration file that begin with "sec".
  • Page 162 configDownload -chassis Downloads the chassis configuration only. -switch Downloads the switch configuration only. This operand is valid only in non-VF mode. "host" Specifies the name or the IP address of the external host, from which to download the configuration. IPv4 and IPv6 addresses are supported. To be able to mention the FTP server by name, you need to set up two DNS servers with dnsConfig.
  • Page 163 configDownload EXAMPLES To download the switch configuration file interactively to the current logical switch from a local directory (no chassis permissions): switch:admin> configdownload Protocol (scp, ftp, sftp, local) [ftp]: Server Name or IP Address [host]: 192.168.163.233 User Name [user]: admin Path/Filename [<home dir>/config.txt]: Section (all|chassis|FID# [all]): *** CAUTION ***...
  • Page 164: Configlist

    configList configList Lists uploaded configuration files. SYNOPSIS configlist -local | -USB | -U DESCRIPTION This command displays a list of names, sizes, and creation dates of configuration files saved on the local chassis or on an attached USB device. These files are created when the configUpload command is executed with the -local or the -USB option.
  • Page 165: Configremove

    configRemove configRemove Deletes a saved configuration file. SYNOPSIS configremove -local | -USB | -U [file] DESCRIPTION This command deletes a configuration file that was previously saved to the local chassis or to an attached USB device by using the configUpload command. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 166: Configshow

    configShow configShow Displays system configuration settings. SYNOPSIS configshow configshow [-all | -fid FID | -chassis | -switch] | [-local | -USB | -U] [file] [-pattern "pattern"] DESCRIPTION Use this command to display system configuration settings. Some but not all of these parameters are set by the configure and configureChassis commands.
  • Page 167 configShow -local [file] Displays the content of a configuration file that was previously created by configUpload and stored on the chassis. The output can be optionally filtered by -pattern "pattern". If file is omitted, the command prompts for a file name. The output format when -local is specified matches that of configUpload and contains a superset of the information provided when -local is not specified.
  • Page 168 configShow passwdcfg.lockoutthreshold:0 passwdcfg.lockoutduration:30 passwdcfg.adminlockout:0 passwdcfg.repeat:1 passwdcfg.sequence:1 passwdcfg.status:0 fips.mode:0 fips.selftests:0 ipfilter.0.name:default_ipv4 ipfilter.0.numofrules:12 ipfilter.0.rule.1:0,0x23,0,0,6,22 ipfilter.0.rule.10:0,0x23,0,0,17,123 ipfilter.0.rule.11:0,0x63,0,0,6,600,1023 ipfilter.0.rule.12:0,0x63,0,0,17,600,1023 ipfilter.0.rule.2:0,0x23,0,0,6,23 ipfilter.0.rule.3:0,0x23,0,0,6,897 ipfilter.0.rule.4:0,0x23,0,0,6,898 ipfilter.0.rule.5:0,0x23,0,0,6,111 ipfilter.0.rule.6:0,0x23,0,0,6,80 ipfilter.0.rule.7:0,0x23,0,0,6,443 ipfilter.0.rule.8:0,0x23,0,0,17,161 ipfilter.0.rule.9:0,0x23,0,0,17,111 ipfilter.0.state:3 ipfilter.0.type:0 ipfilter.1.name:default_ipv6 ipfilter.1.numofrules:12 ipfilter.1.rule.1:0,0x23,0,0,6,22 ipfilter.1.rule.10:0,0x23,0,0,17,123 ipfilter.1.rule.11:0,0x63,0,0,6,600,1023 ipfilter.1.rule.12:0,0x63,0,0,17,600,1023 ipfilter.1.rule.2:0,0x23,0,0,6,23 ipfilter.1.rule.3:0,0x23,0,0,6,897 ipfilter.1.rule.4:0,0x23,0,0,6,898 ipfilter.1.rule.5:0,0x23,0,0,6,111 ipfilter.1.rule.6:0,0x23,0,0,6,80 ipfilter.1.rule.7:0,0x23,0,0,6,443 ipfilter.1.rule.8:0,0x23,0,0,17,161 ipfilter.1.rule.9:0,0x23,0,0,17,111 ipfilter.1.state:3 ipfilter.1.type:1 (output truncated) To filter the content to display only the password configuration:...
  • Page 169 configShow To display switch configuration data for FID 20: switch :admin> configshow -fid 20 [Configuration upload Information] Configuration Format = 2.0 date = Tue Oct 7 14:53:12 2008 FOS version = v6.2.0.0 Number of LS = 3 [Switch Configuration Begin : 0] SwitchName = Spirit_66 Fabric ID = 20 [Boot Parameters]...
  • Page 170: Configupload

    configUpload configUpload Uploads system configuration data to a file. SYNOPSIS configupload configupload [-all] [-p ftp | -ftp] ["host","user","path" [,"passwd"]] configupload [-all] [-p scp | -scp] ["host","user","path"] configupload [-all] [-p sftp | -sftp] ["host","user","path"] configupload [-all] [-force] [-local | USB |-U] ["file"] configupload [-fid FID | -chassis | -all | -switch] [-p ftp | -ftp]["host","user","path"...
  • Page 171 configUpload The system configuration data is uploaded separately. It is grouped into chassis information and switch information. Each configuration type is managed separately and the behavior of configUpload depends on the environment in which the command is executed and which part of the system configuration you wish to upload.
  • Page 172 configUpload -fid FID Uploads switch configuration data from a logical switch specified by its fabric ID. This parameter is valid only in a Virtual Fabric environment and requires chassis permissions. -chassis Uploads chassis configuration only. -all Uploads all system configuration data including chassis and switch configuration for all logical switches.
  • Page 173 configUpload EXAMPLES To upload the switch configuration interactively from a switch that is not enabled for Virtual Fabrics: switch:admin> configupload Protocol (scp, ftp, sftp, local) [ftp]: sftp Server Name or IP Address [host]: 192.168.38.245 User Name [user]: jdoe File Name [<home dir>/config.txt]: Section (all|chassis|switch [all]): Password: ****** configUpload complete: All config parameters are uploaded...
  • Page 174: Configure

    configure configure Changes switch configuration settings. SYNOPSIS configure DESCRIPTION Use this command to change switch configuration settings. Configuration data is grouped into chassis information and switch information. Each configuration type is managed separately. For information on file format and specific parameters contained in each section, refer to the configUpload help page.
  • Page 175 configure The following parameters can be modified with the configure command: Fabric Parameters Fabric settings control the overall behavior and operation of the fabric. Some of these settings, such as the domain, are assigned automatically and may differ from one switch to another in a given fabric. Other parameters, such as buffer-to-buffer credit or timeout values, can be modified to suit specific applications or operating environments but must be in agreement among all switches to allow formation of the fabric.
  • Page 176 configure WWN Based persistent PID When enabled, this feature supports both dynamic and static WWN-based PID assignment. In dynamic PID binding, the first area assigned to a device when it logs in is bound to the device WWN and remains persistent through subsequent logins.
  • Page 177 configure R_A_TOV The resource allocation time out value specified in milliseconds. This variable works with the variable E_D_TOV to determine switch actions when presented with an error condition. Allocated circuit resources with detected errors are not released until the time value has expired.
  • Page 178 configure Per-frame Route Priority In addition to the eight virtual channels used in frame routing priority, support is also available for per-frame-based prioritization when this value is set. When Per-frame Route Priority is set to 1, the virtual channel ID is used in conjunction with a frame header to form the final virtual channel ID.
  • Page 179 configure The values for virtual channel settings are as follows: Field Default Range ____________________________________ VC Priority 2 2 to 3 VC Priority 3 2 to 3 VC Priority 4 2 to 3 VC Priority 5 2 to 3 VC Priority 6 2 to 3 VC Priority 7 2 to 3...
  • Page 180 configure Zoning Operation Parameters The following zoning operation parameter can be modified. Disable NodeName Zone Checking Specify 1 to disable using node WWN when specifying nodes in the zone database. Specify 0 to enable using node WWN when specifying nodes in the zone data.
  • Page 181 configure Portlog Events Enable/Disable Settings These settings determine whether or not various types of port events are logged. Each event type displayed on the screen is enabled by default ("on"). When disabled, this event is not logged by the port log. Application Attributes A number of application attributes are configurable.
  • Page 182 configure R_A_TOV: (4000..120000) [10000] E_D_TOV: (1000.. 5000) [2000] WAN_TOV: (0..30000) [0] MAX_HOPS: (7..19) [7] Data field size: (256..2112) [2112] Sequence Level Switching: (0..1) [0] Disable Device Probing: (0..1) [0] Suppress Class F Traffic: (0..1) [0] Per-frame Route Priority: (0..1) [0] Long Distance Fabric: (0..1) [0] BB credit: (1..27) [16] Disable FID Check (yes, y, no, n): [no]...
  • Page 183 configure Arbitrated Loop parameters (yes, y, no, n): [no] System services (yes, y, no, n): [no] Portlog events enable (yes, y, no, n): [no] ssl attributes (yes, y, no, n): [no] rpcd attributes (yes, y, no, n): [no] cfgload attributes (yes, y, no, n): [no] webtools attributes (yes, y, no, n): [no] SEE ALSO configDefault, configShow, configureChassis, ipAddrSet, portCfgLongDistance, switchDisable,...
  • Page 184: Configurechassis

    configureChassis configureChassis Changes chassis-level system configuration settings. SYNOPSIS configurechassis DESCRIPTION Use this command to modify chassis-level system configuration settings. Configuration data is grouped into chassis information and switch information. Each configuration type is managed separately. Use the configure command to modify switch configuration parameters. Use the configureChassis command to modify the following chassis configuration parameters: •...
  • Page 185 configureChassis System attributes The following system-related parameters are configurable on a Virtual Fabric-aware switch. system.blade.bladeFaultOnHwErrMsk If this field is set to a value other than 0, then any nonfatal HW ASIC data parity error causes the problem blade to be powered off. The valid range is 0x0 to 0xffff. The default value is 0x0.
  • Page 186 configureChassis Path/Filename [<home dir>/config.txt]: Section (all|chassis|FID# [all]): Password: ***** configUpload complete: All selected config parameters are uploaded admin@hq1:ls /temp/config config.txt_Brocade5100_20110220_151606 admin@hq1: date Sun Feb 20 15:17:14 UTC 2011 SEE ALSO configDefault, configShow, chassisEnable, chassisDisable, configure, ipAddrSet, portCfgLongDistance, switchDisable, switchEnable, upTime Fabric OS Command Reference 53-1001764-01...
  • Page 187: Cryptocfg

    cryptoCfg cryptoCfg Performs encryption configuration and management functions. SYNOPSIS cryptocfg --help -nodecfg cryptocfg --help -groupcfg cryptocfg --help -hacluster cryptocfg --help -devicecfg cryptocfg --help -transcfg cryptocfg --help -decommission DESCRIPTION Use the cryptoCfg command to configure and manage the Brocade Encryption Switch and the FS8-18 encryption blade.
  • Page 188 cryptoCfg cryptocfg --initnode cryptocfg --initEE [slot] cryptocfg --regEE [slot] cryptocfg --enableEE [slot] cryptocfg --disableEE [slot] cryptocfg --export -scp -dhchallenge vault_IP_address | -currentMK | -KACcert | -KACcsr | -CPcert host_IP host_username host_file_path cryptocfg --export -usb -dhchallenge vault_IP_address | -currentMK | -KACcert | -KACcsr | -CPcert dest_filename cryptocfg --import -scp local_name host_IP host_username host_file_path cryptocfg --import -usb dest_filename source_filename...
  • Page 189 cryptoCfg • Group-wide policy configuration. • Zeroization of all critical security parameters on the local encryption switch or blade. • Certificate display and management. • Display of the local encryption engine status. • Rebalancing of disk and tape LUNS for optimized performance. •...
  • Page 190 cryptoCfg Some of the certificates generated with this command may need to be exported so that they can be registered with external entities, such as the key vault or the group leader, for mutual authentication. Refer to the Fabric OS Encryption Administrator's Guide for details.
  • Page 191 cryptoCfg --export Exports a certificate from the local encryption switch or blade to a specified external host or to a mounted USB device. This command is valid on all nodes. The files are exported from the predetermined directory that was generated during the node initialization phase.
  • Page 192 cryptoCfg Files to be imported include member node CP certificates and key vault certificates. Use the cryptocfg --show -file -all command to view all imported files. The following operands are supported with the --importcommand: -scp Imports a specified certificate from an external host using the secure copy (SCP) protocol.
  • Page 193 cryptoCfg --dereg -membernode Removes the registration for the specified member node. This command is valid only on the group leader. The node is identified by the switch WWN. member_node_WWN Specifies the member node by its switch WWN. This operand is required when removing a node registration.
  • Page 194 cryptoCfg For the SKM, run this command only for the primary key vault. The login credential must match a valid username/password pair configured on the key vault. The same username/password must be configured on all the nodes of any given encryption group to prevent \ivity issues between the SKM and the switch.
  • Page 195 cryptoCfg diag Runs diagnostic tests including retrieval, archival and synchronization of the tests in the key vault cluster. EXAMPLES To initialize a node and generate certificates (output shows what is generated and where it is stored): SecurityAdmin:switch> cryptocfg --initnode This will overwrite all identification and authentication data ARE YOU SURE (yes, y, no, n): [no] y Notify SPM of Node Cfg...
  • Page 196 cryptoCfg To register a member node with the group leader: SecurityAdmin:switch> cryptocfg --reg -membernode 10:00:00:05:1e:39:14:00 enc_switch1_cert.pem 10.32.244.60 Operation succeeded. To deregister a member node: SecurityAdmin:switch> cryptocfg --dereg -membernode 10:00:00:05:1e:53:b6:80 Operation succeeded. To generate a trusted link establishment package (TEP): SecurityAdmin:switch> cryptocfg --dhchallenge 10.33.54.231 Operation succeeded.
  • Page 197 cryptoCfg 10:00:00:05:1e:47:30:00/3 10.32.72.105 EE_STATE_ONLINE Reachable 10:00:00:05:1e:47:30:00/10 10.32.72.106 EE_STATE_ONLINE Reachable 10:00:00:05:1e:47:30:00/12 10.32.72.107 EE_STATE_ONLINE Reachable EE Slot: SP state: Online Primary Link KeyID: 85:1c:ca:dd:fc:8c:31:fc:87:21:26:d1:24:a0:92:be Secondary Link KeyID:98:4f:b4:98:c0:42:ab:6b:6d:65:ba:f2:fc:aa:b5:8a No HA cluster membership EE Attributes: Link IP Addr : 10.32.72.76 Link GW IP Addr : 10.32.64.1 Link Net Mask : 255.255.240.0...
  • Page 198 cryptoCfg To display the key vault diagnostics configuration: switch:admin> cryptocfg --kvdiag -show Key vault diagnostic periodic tests Enabled Interval: 5 minute(s) Test Type: (diag) key retrieval/archival readiness Operation succeeded To change the interval at which the key vault diagnostics is run: switch:admin>...
  • Page 199 cryptoCfg cryptocfg --show -mkexported_keyids key_id cryptocfg --show -groupcfg cryptocfg --show -groupmember -all | node_WWN cryptocfg --show -egstatus -cfg | -stat cryptocfg --sync -encgroup cryptocfg --sync -securitydb DESCRIPTION Use these cryptoCfg commands to create or delete an encryption group, to add or remove group member nodes, key vaults, and authentication cards, to enable or disable system cards, to enable quorum authentication and set the quorum size, to manage keys including key recovery from backup, to configure group-wide policies, and to sync the encryption group databases.
  • Page 200 cryptoCfg :Key Vault/CA Certificate Validity: Yes or No Port for Key Vault Connection: numeric identifier Time of Day on Key Server: time stamp or N/A Server SDK Version: revision number or N/A • Diagnostic information for the encryption node (key vault client): Node KAC Certificate Validity: Yes (valid) or No (invalid) Time of Day on the Switch: time stamp Client SDK Version: SDK revision number...
  • Page 201 cryptoCfg Current master key ID (or primary link key ID): Shows key ID or zero if not configured. Alternate master key (or secondary link key) state: Not configured, Saved, Created, Propagated, Valid, or Invalid. Alternate master key ID (or secondary link key ID): Shows key ID or zeroif not configured. •...
  • Page 202 cryptoCfg --reg -keyvault Registers the specified key vault (primary or secondary) with the encryption engines of all nodes present in an encryption group. Upon successful registration, a connection to the key vault is automatically established. This command is valid only on the group leader. Registered certificates are distributed from the group leader to all member nodes in the encryption group.
  • Page 203 cryptoCfg value Specifies the key vault type. The default is set to no value. This operand is required. Valid values for -keyvault include the following parameters: Specifies the NetApp LKM appliance (trusted key vault). Specifies the RSA Key Manager (RKM) (opaque key repository). Specifies one of the following: the HP Secure Key Manager (SKM) or the HP Enterprise Secure Key Manager (ESKM).
  • Page 204 cryptoCfg --set -systemcard> enable | disable Enables or disables the system card usage policy. When the policy is enabled, a system card is required to be inserted in an encryption engine to enable encryption after a power-cycle event. When quorum authentication is enabled (Quorum Size is >...
  • Page 205 cryptoCfg --exportmasterkey Exports the current master key encrypted in a key generated from a specified pass phrase. By default this command backs up the key to the attached key vaults, or optionally to a predetermined file on the switch. This command is valid only on the group leader.
  • Page 206 cryptoCfg --show -groupmember Displays detailed information for all encryption group members or for a single member. This command is valid on all member nodes and on the group leader. The following required operands are mutually exclusive: -all Displays information on all nodes in the existing encryption group. node_WWN Displays information on a single specified node.
  • Page 207 cryptoCfg To register a NetApp LKM appliance as the primary key vault "LKM1": SecurityAdmin:switch> cryptocfg --reg -regkeyvault LKM1 lkmcert.pem 10.33.54.231 primary decru-lkm-1 Register key vault status: Operation Succeeded. To set the key vault type to LKM: SecurityAdmin:switch> cryptocfg --set -keyvault LKM Set key vault status: Operation Succeeded.
  • Page 208 cryptoCfg To recover the master key from the key vault to the current location: SecurityAdmin:switch> cryptocfg --recovermasterkey currentMK -keyID bd:ae:2d:0b:b9:1a:ad:18:0d:eb:fe:c9:67:ed:29:b0 Enter the passphrase: passphrase Recover master key status: Operation succeeded. To display the saved key IDs associated with a repeatedly exported master key SecurityAdmin:switch>...
  • Page 209 cryptoCfg Time of Day on the Switch: Fri Jan 29 23:01:55.205779 GMT 2010 Client SDK Version: OpenKey Reference Lib 2.0.9 Client Username: Client Usergroup: Connection Timeout: 20 seconds Response Timeout: 20 seconds Connection Idle Timeout: Key Vault configuration and connectivity checks successful, ready for key operations.
  • Page 210 cryptoCfg Certificate: GL_cpcert.pem Current Master Key State: Not configured Current Master KeyID: 00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00 Alternate Master Key State:Not configured Alternate Master KeyID:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00 EE Slot: 0 SP state: Operational; Need Valid KEK Current Master KeyID: 00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00 Alternate Master KeyID:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00 No HA cluster membership Node Name: 10:00:00:05:1e:39:14:00 State:...
  • Page 211 cryptoCfg cryptocfg --replace [-haclustermember HA_cluster_name] current_node_WWN [slot] new_node_WWN [slot] cryptocfg --show -hacluster -all | HA_cluster_name DESCRIPTION Use these cryptoCfg commands to configure and manage High Availability (HA) clusters. An HA cluster consists of two encryption engines configured to host the CryptoTargets and to provide the active/standby failover and failback capabilities in a pair-wise relationship in a single fabric.
  • Page 212 cryptoCfg node_WWN Specifies the WWN of the switch or chassis to which the encryption engine belongs. This operand is optional; if omitted, only the HA cluster name is defined. You may add EEs separately with the --add -haclustermember command. slot Specifies the encryption engine slot number on bladed systems.
  • Page 213 cryptoCfg current_node_WWN [slot Specifies the WWN of the encryption engine to be replaced. This operand is required. On bladed systems, include the encryption engine slot number. new_node_WWN [slot] Specifies the WWN of the encryption engine that is to replace the current encryption engine.
  • Page 214 cryptoCfg HA cluster name: HAC2 - 2 EE entries Status: Defined Slot Number Status 10:00:00:05:1e:53:4c:91 Online 10:00:00:05:1e:53:74:87 Online To replace an encryption engine in HA cluster "HAC2": SecurityAdmin:switch> cryptocfg --replace -haclustermember HAC2 10:00:00:05:1e:53:4c:91 10:00:00:05:1e:39:53:67 Replace HA cluster member status: Operation Succeeded. To remove HA cluster member 10:00:00:05:1e:53:74:87 from the HA cluster "HAC2": SecurityAdmin:switch>...
  • Page 215 cryptoCfg cryptocfg --move -container crypto_target_container_name new_node_WWN [new_slot] cryptocfg --add -initiator crypto_target_container_name initiator_PWWN initiator_NWWN [[initiator_PWWN initiator_NWWN]...] cryptocfg --remove -initiator crypto_target_container_name initiator_PWWN [initiator_PWWN...] cryptocfg --add -LUN crypto_target_container_name LUN_Num | LUN_Num_Range initiator_PWWN initiator_NWWN [initiator_PWWN initiator_NWWN]...] [-lunstate encrypted | cleartext] [-keyID keyID] [-encryption_format native | DF_compatible] [-encrypt | -cleartext] [-enable_encexistingdata | -disable_encexistingdata] [-enablerekey time_period | -disable_rekey]...
  • Page 216 cryptoCfg cryptocfg --resume_rekey crypto_target_container_name LUN_Num initiator_PWWN cryptocfg --discoverLUN crypto_target_container_name cryptocfg --show -container -all -cfg | -stat cryptocfg --show -container crypto_target_container_name -cfg | -stat cryptocfg --show -tapepool -all | -label pool_label | -num pool_num -cfg | -stat cryptocfg --show -LUN crypto_target_container_name LUN_Num initiator_PWWN -cfg | -stat cryptocfg --show -rekey -all cryptocfg --show -rekey crypto_target_container_name...
  • Page 217 cryptoCfg CTC configuration uses a transaction model. Configuration changes must be committed before they take effect. Use the cryptocfg --commit command to commit the transaction. Refer to section "5. Transaction management" for more information. This command set supports the following tasks: •...
  • Page 218 cryptoCfg Encrypt existing data: disabled or enabled Rekey: disabled or enabled Key life: the key life span (in days) Volume/Pool label: the label for the tape volume or tape pool Internal EE LUN state: Encrypted, Cleartext, or Disabled (Data state is cleartext but metadata exists on the LUN, or vice versa.) Encryption algorithm: AES256-ECB (DF_compatible), AES256-GCM (native) or None (cleartext)
  • Page 219 cryptoCfg • Key life (in days); number of days until expiration • Rekey status: numeric value • Key expiration time • Rekey session number: numeric value • Percentage complete • Rekey state: Read or write Phase • Rekey role: primary, alternate •...
  • Page 220 cryptoCfg Tape policy type: pool-based or LUN-based Key life: key lifespan in days Volume/pool label LUN state: Refer to the Fabric OS Encryption Administrator's Guide. Encryption algorithm: AES256 -XTS (disk), AES256-CCM (tape), or none Compression algorithm Key ID state: available or not available Key ID: numeric identifier if available New LUN: Yes or No Replication LUN type: Primary or Mirror...
  • Page 221 cryptoCfg Volume/pool label: user-defined label Rekey status: numeric value If rekey- or tape sessions are in progress, the command shows the following information: • Number of rekey sessions in progress: numeric value • For each rekey session the display includes the following parameters: Rekey session number: numeric value Percent completion: numeric value Rekey state: Read or Write phase...
  • Page 222 cryptoCfg • Number of rekey sessions in progress: numeric value • For each rekey session the display includes the following parameters: Rekey session number: numeric value Percent completion: numeric value Rekey state. Displays one of the following parameters:  Rekey Setup ...
  • Page 223 cryptoCfg NOTES Encryption groups and HA clusters must be configured before performing any CryptoTarget container and Crypto LUN configurations. When adding a LUN to a CryptoTarget container, special attention should be paid to the input format. A LUN number can be entered either as a 16-bit (2 bytes) number in hex notation (for example, 0x07) or as a 64-bit (8 bytes) number in WWN format (for example, 00:07:00:00:00:00:00:00).
  • Page 224: New_Node_Wwn [New_Slot]

    cryptoCfg This operand is optional. You may add initiators at the time when the CTC is created or any time thereafter with the --add -initiator command. The following operands are required when specifying an initiator: initiator_PWWN Specifies the initiator port WWN. initiator_NWWN Specifies the initiator node WWN.
  • Page 225: Initiator_Pwwn Initiator_Nwwn

    cryptoCfg --add -initiator Adds one or more initiators to an existing CTC. An initiator that is added to a CTC facilitates discovering the LUNs of the target as exposed to these initiators. You must still add the initiators when you add the LUN to the CTC to enable access for these initiators.
  • Page 226: -Lunstate Encrypted | Cleartext

    cryptoCfg LUN policies are configured per HA or DEK cluster. For multi-path LUNs exposed through multiple target ports and thus configured on multiple CTCs on different EEs in an HA cluster or DEK cluster, the same LUN policies must be configured. Refer to the Fabric OS Administrator's Guide for more information.
  • Page 227: [-Enable_Encexistingdata | -Disable_Encexistingdata] [-Enablerekey Time_Period | -Disable_Rekey]

    cryptoCfg -newLUN Indicates that the LUN created does not contain any user data and will be part of a replication configuration. This operand is optional. The presence of this operand is incompatible with the -keyID, -key_lifespan, and -enable_rekey options. An RSA RKM must be configured and replication must be enabled (cryptocfg --set replication enabled) before invoking this command.
  • Page 228 cryptoCfg • The -key_lifespan parameter cannot be modified for tape LUNs once it has been set. • Exercise caution when modifying policy parameters while tape sessions are in progress. For information on the impact of encryption policy changes while tape sessions are in progress, refer to the Fabric OS Encryption Administrator's Guide.
  • Page 229: -Key_Lifespan Time_In_Days | None

    cryptoCfg This command is valid only on the group leader. The following operands are supported: -label pool_label | -num pool_num Specifies the tape pool volume label or alternately the tape pool ID. This is a user-defined identifier, which must be unique within the encryption group and should match the tape pool label or ID that is configured on the tape backup application.
  • Page 230 cryptoCfg --manual_rekey Performs a manual rekeying of a specified LUN associated with a specified CTC. Manual rekeying is performed in both online and offline fashion depending on whether or not the host is online or host I/O is present. If any policy-based rekeying operation is currently in progress, this command aborts with a warning message.
  • Page 231 cryptoCfg --show -container Displays all CTCs in the encryption group. This command is valid on all nodes. The following operands are supported: -all -cfg Displays the configuration for all containers in the encryption group. -all -stat Displays the runtime status for all containers hosted on the local node only. crypto_target_container_name Displays information for the specified CryptoTarget container.
  • Page 232 cryptoCfg --show -rekey Displays information about rekey sessions in progress. This command is valid on all nodes. The following operands are mutually exclusive: -all Lists all rekey sessions in progress on the current node. crypto_target_container_name Lists all rekey sessions in progress for a specified CryptoTarget container. You may further specify either one of the following operands: LUN_Num Lists all rekey sessions in progress for a specific Crypto LUN of the specified...
  • Page 233 cryptoCfg LUN_Num Specifies the number of the LUN whose metadata needs to be reread. initiator_PWWN Specifies the initiator port WWN for the specified LUN. --reclaimWWN Reclaims the WWNs of the specified member node or encryption engine. This command removes the WWNs from the specified entity. Once removed you can reallocate the WWNs.
  • Page 234 cryptoCfg nscamshow for remote switches: Switch entry for 2 state rev owner known v611 0xfffc01 Device list: count 13 Type Pid COS PortName NodeName NL 0208d3;3;20:0c:00:06:2b:0f:72:6d;20:00:00:06:2b:0f:72:6d; FC4s: FCP PortSymb:[55]"LSI7404XP-LC BR A.1 03-01081-02D FW:01.03.06 Port 1" Fabric Port Name: 20:08:00:05:1e:34:e0:6b Permanent Port Name: 20:0c:00:06:2b:0f:72:6d Port Index: 8 Share Area: No Device Shared in Other AD: No...
  • Page 235 cryptoCfg Number of host(s): Configuration status:committed Host: 10:00:00:00:c9:2b:c9:3a \ 20:00:00:00:c9:2b:c9:3a 20:02:00:05:1e:41:4e:1d \ 20:03:00:05:1e:41:4e:1d Number of LUN(s): Operation Succeeded Discover the LUNs seen by the initiators in the CryptoTarget container. FabricAdmin:switch> cryptocfg --discoverLUN my_disk_tgt Container name: my_disk_tgt Number of LUN(s): Host: 10:00:00:00:c9:2b:c9:3a LUN number: LUN serial number:...
  • Page 236 cryptoCfg Rekey: disabled Internal EE LUN state: Encryption enabled Encryption algorithm: AES256-XTS Key ID state: Read write Key ID:3a:21:6a:bd:f2:37:d7:ea:6b:73:f6:19:72:89:c6:4f Key creation time: Sun Jun 1 20:21:32 2008 New LUN: Replication LUN type: Primary Operation Succeeded Display Crypto LUN configuration. FabricAdmin:switch> cryptocfg --show -LUN my_disk_tgt 0 10:00:00:00:c9:2b:c9:3a -cfg EE node: 10:00:00:05:1e:41:9a:7e...
  • Page 237 cryptoCfg To display the tape pool configuration: FabricAdmin:switch> cryptocfg --show -container -all -cfg Encryption group name: brocade Number of Container(s): 2 Container name: pc21_stk10k Type: tape EE node: 10:00:00:05:1e:53:8a:28 EE slot: Target: 50:01:04:f0:00:b2:ea:6c \ 50:01:04:f0:00:b2:ea:6b 20:00:00:05:1e:53:8a:24 \ 20:01:00:05:1e:53:8a:24 Number of host(s): Configuration status: committed Host:...
  • Page 238 cryptoCfg EE node: 10:00:00:05:1e:53:75:01 EE slot: Target: 21:00:00:04:cf:6e:58:2c \ 20:00:00:04:cf:6e:58:2c Target PID: 0107d5 20:28:00:05:1e:53:74:fd \ 20:29:00:05:1e:53:74:fd VT PID: 012805 Number of host(s): Number of rekey session(s):1 Host: 10:00:00:db:69:78:93:0e \ 20:00:00:db:69:78:93:0e Host PID: 000000 20:36:00:05:1e:53:74:fd \ 20:37:00:05:1e:53:74:fd VI PID: 012806 Number of LUN(s): LUN number: LUN type: disk...
  • Page 239 cryptoCfg Rekey: enabled Key ID: not available Key life: 300 (days) Rekey status: Operation Succeeded To display all tape sessions in progress on the local node: FabricAdmin:switch> cryptocfg --show -tape_sessions -all Number of tape session(s): Container name: apps92 EE node: 10:00:00:05:1e:43:ee:00 EE slot: Target:...
  • Page 240 cryptoCfg To reclaim all WWNs associated with a member node when no containers are present on the node: switch:admin> cryptocfg --reclaimWWN -membernode 10:00:00:05:33:13:7a:e8 Warning: WWN reclaim operation may result in momentary IO disruption. Make sure that the Membernodes are not hosting any container. ARE YOU SURE (yes, y, no, n): [no] y Operation succeeded.
  • Page 241 cryptoCfg OPERANDS The cryptoCfg transaction management function has the following operands: --help transcfg Displays the synopsis for the transaction management function. --commit Commits the transaction. This command saves the defined configuration to nonvolatile storage. Changes are persistent across reboots and power cycles. This command overwrites existing configuration parameters and therefore prompts for confirmation.
  • Page 242 cryptoCfg • Device decommissioning is supported only with the LKM and RKM key vaults. • Decommissioning of tape devices or snap drive volumes is currently no supported. • Decommissioning does not automatically delete the keys. You must manually delete the keys from the key vault to complete the operation.
  • Page 243 cryptoCfg Display the key IDs to be deleted manually from the keyvault switch:admin> cryptocfg --show -decommissionedkeyids Please Delete these keyed from the vault: 76:a0:01:f2:34:6e:44:cc:35:e9:be:71:64:ca:5e:90 switch:admin> cryptocfg --show vendorspecifickeyid aa:8b:91:b0:35:6f:da:92:8a:72:b3:97:92:1b:ca:b4 uuid = b7e07a6a-db64-40c2-883a-0bc6c4e923e6 Manually delete the keys from the vault. This step requires accessing the Key Vault GUI and deleting the keys manually.
  • Page 244: Datatypeshow

    dataTypeShow dataTypeShow Displays sample data stream types used in some diagnostic commands. SYNOPSIS datatypeshow [-seed value] DESCRIPTION Use this command to display sample data stream types used in diagnostic commands. There are 25 different sample data types. The command displays an example of each data stream. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 245: Date

    date date Displays or sets the switch date and time. SYNOPSIS date ["newdate"] DESCRIPTION Use this command to display or set the date and time. All switches maintain current date and time in flash memory. Date and time are used for logging events. Normal switch operation does not depend on the date and time;...
  • Page 246 date EXAMPLES To display the current date and time and then modify it: switch:admin> date Thu Mar 24 17:15:00 UTC 2011 switch:admin> date "03224182011" Thu Mar 24 18:20:26 UTC 2011 SEE ALSO errShow, ficonCupSet, ficonCupShow, portLogShow, tsClockServer, tsTimeZone, upTime Fabric OS Command Reference 53-1001764-01...
  • Page 247: Dbgshow

    dbgShow dbgShow Displays current values of debug and verbosity levels of the specified module. SYNOPSIS dbgshow [module_name] DESCRIPTION Use this command to display the current values of debug and verbosity levels of the specified module. If no module name is specified, this command displays a listing of all modules along with debug and verbosity levels.
  • Page 248: Defzone

    defZone defZone Sets or displays the default zone access mode. SYNOPSIS defzone [--noaccess | --allaccess | --show] DESCRIPTION Use this command to display or set the Default Zone access mode. Setting the Default Zone mode initializes a zoning transaction (if one is not already in progress), and create reserved zoning objects. A default zone controls device access when zoning is not enabled.
  • Page 249 defZone A cfgSave, cfgEnable, or cfgDisable command must be performed subsequent to the use of this command to commit the changes and distribute them to the fabric. If a cfgSave is performed and the fabric is already in the No Access default zone state, a cfgDisable is sent to the fabric.
  • Page 250: Diagclearerror

    diagClearError diagClearError Clears the diagnostics failure status. SYNOPSIS diagclearerror [[--slot] slot] -all DESCRIPTION Use this command to clear the diagnostics failure status. When used without operands, this command clears all port failure flags. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 251: Diagdisablepost

    diagDisablePost diagDisablePost Disables the power-on self-test (POST). SYNOPSIS diagdisablepost DESCRIPTION Use this command to disable POST. A reboot is not required for this command to take effect. Use the diagPost command to display the current POST status, and use diagEnablePost to enable POST. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 252: Diagenablepost

    diagEnablePost diagEnablePost Enables the power-on self-test (POST). SYNOPSIS diagenablepost DESCRIPTION Use this command to enable POST. A reboot is not required for this command to take effect. POST includes two phases: POST Phase I mainly tests hardware and POST Phase II tests system functionality. Use the diagPost command to display the current POST status, and use diagDisablePost to disable POST.
  • Page 253: Diaghelp

    diagHelp diagHelp Displays diagnostic command information. SYNOPSIS diaghelp DESCRIPTION Use this command to display a short description of diagnostic commands. Use default operands when running diagnostics commands. Non-default settings require detailed knowledge of the underlying hardware and are intended for support personnel only. Contact support if you want to use these operands.
  • Page 254: Diagpost

    diagPost diagPost Displays the diagnostic power-on self-test (POST) configuration. SYNOPSIS diagpost DESCRIPTION Use this command to display the current POST configuration. Use diagEnablePost or diagDisablePost to modify the POST configuration. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 255: Diagretry

    diagRetry diagRetry Sets or displays diagnostic retry mode. SYNOPSIS diagretry [mode | -show] DESCRIPTION Use this command to enable retry mode if the mode value is nonzero and to disable the retry mode if the mode value is 0. The mode value is saved in nonvolatile memory until you change the mode. Changes made by this command do not require a reboot to take effect.
  • Page 256: Diagshow

    diagShow diagShow Displays diagnostics status. SYNOPSIS diagshow [--slot number] [-uports itemlist] [-bports itemlist] [-use_bports value] DESCRIPTION Use this command to display the diagnostics status for the specified list of blade or user ports. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 257: Distribute

    distribute distribute Distributes data to switches in a fabric. SYNOPSIS distribute -p policy_list -d switch_list DESCRIPTION Use this command to distribute data to a specified list of switches in the fabric. The distributed data must be from the list of currently supported policy sets: Switch Connection Control Policy Device Connection Control Policy Password Database and Password Configuration Policy...
  • Page 258 distribute To distribute the Switch Connection Control Policy, Fabric Configuration Server Policy, and Password database to all domains in the fabric that support the distribute feature: switch:admin> distribute -p "SCC;FCS;PWD" -d "*" Wildcard domains are: 1 3 5 To distribute the FCS policy, and the Password database to all domains in the fabric that support the distribute feature: switch:admin>...
  • Page 259: Dlsreset

    dlsReset dlsReset Disables Dynamic Load Sharing (DLS). SYNOPSIS dlsreset DESCRIPTION Use this command to disable Dynamic Load Sharing. If DLS is turned off, load sharing calculations are used only to place new routes. Once placed, existing routes are never moved from one output E_Port to another, unless the original output E_Port is no longer a recognized path to the remote domain.
  • Page 260: Dlsset

    dlsSet dlsSet Enables Dynamic Load Sharing (DLS) without frame loss. SYNOPSIS dlsset dlsset --enable -lossless dlsset --disable -lossless dlsset --help DESCRIPTION Use this command to enable or disable Dynamic Load Sharing (DLS) in the event of a fabric change, to configure DLS without frame loss, and to display the DLS configuration.
  • Page 261 dlsSet The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. OPERANDS --enable -lossless Enables the Lossless feature. Frame loss is reduced while the path is rerouted. If DLS is set on the switch, this command adds the Lossless feature to the existing DLS legacy mode.
  • Page 262 dlsSet DLS configuration commands on a switch with a port-based policy: switch:admin> dlsshow DLS is set by default with current routing policy DLS is set with Lossless enabled switch:admin> dlsreset DLS is not set switch:admin> dlsshow DLS is not set switch:admin>...
  • Page 263: Dlsshow

    dlsShow dlsShow Displays the setting of the Dynamic Load Sharing (DLS) option. SYNOPSIS dlsshow DESCRIPTION Use this command to display information about Dynamic Load Sharing configuration settings on the switch. Depending on the configuration, the command output displays one of the following messages: •...
  • Page 264: Dnsconfig

    dnsConfig dnsConfig Sets, displays, or removes domain name service (DNS) parameters. SYNOPSIS dnsconfig DESCRIPTION Use this command to display, set, or remove the domain name service parameters. The domain name service parameters are the domain name and the name server IP address for primary and secondary name servers.
  • Page 265: Enclosureshow

    enclosureShow enclosureShow Displays attributes of the switch enclosure. SYNOPSIS enclosureshow attribute DESCRIPTION Use this command to display attributes of the switch enclosure, including the vendor-specific enclosure identifier and the identifier of the enclosure interface to which the switch is attached. This command applies to products that are embedded in a blade server or storage chassis.
  • Page 266 enclosureShow connfuse Information about whether or not the switch has a fuse. EXAMPLES To display the identifier of the enclosure interface to which the switch is attached: switch:admin> enclosureShow slotid Bay 4 SEE ALSO chassisShow Fabric OS Command Reference 53-1001764-01...
  • Page 267: Errclear

    errClear errClear Clears all error log messages for all switch instances on this Control Processor (CP). SYNOPSIS errclear DESCRIPTION Use this command to clear all internal and external error log messages for all switch instances on the CP where the command is executed. For products with a single processor, all error log messages are cleared.
  • Page 268: Errdelimiterset

    errDelimiterSet errDelimiterSet Sets the error log start and end delimiters for messages sent to the console and syslog. SYNOPSIS errdelimiterset [-s "start_delimiter_string"] [-e "end_delimiter_string"] DESCRIPTION Use this command to set the error log start and end delimiters for log messages sent to the console and syslog.
  • Page 269: Errdump

    errDump errDump Displays the error log without pagination. SYNOPSIS errdump [-a | -r ] DESCRIPTION Use this command to dump external error log messages without any page breaks. When executed without operands, this command prints all error messages for the logical switch context in which the command is executed.
  • Page 270 errDump EXAMPLES To display the error log for the chassis: switch:admin> errdump -a Fabric OS: v7.0.0 2010/12/17-22:29:17, [SEC-1203], 9036, CHASSIS, INFO,\ Spir_67, Login information : Login successful via \ TELNET/SSH/RSH. IP Addr: 10.106.7.62 2010/12/17-22:29:17, [ZONE-1022], 9037, CHASSIS, INFO, \ Spir_67, The effective configuration has changed to meh. 2010/12/17-22:29:17, [FABR-1001], 9041, CHASSIS, WARNING, \ Spir_67, port 0, incompatible Long distance mode.
  • Page 271: Errfilterset

    errFilterSet errFilterSet Sets a filter for an error log destination. SYNOPSIS errfilterset [-d destination][-v severity] DESCRIPTION Use this command to set a filter for an error log destination. A filter is set based on the severity level of the messages. When used without operands, this command displays the filters that are currently in configured.
  • Page 272: Errmoduleshow

    errModuleShow errModuleShow Displays all the defined error log modules. SYNOPSIS errmoduleshow DESCRIPTION Use this command to display a list of all defined error log modules. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 273: Errshow

    errShow errShow Displays the error log messages with pagination. SYNOPSIS errshow [-a | -r] DESCRIPTION Use this command to display external error log messages one at a time. When executed without operands, this command prints the error messages for the logical switch context in which the command is executed.
  • Page 274 errShow EXAMPLES To display the error log for the chassis: switch:admin> errshow -a Fabric OS: v6.4.0 2010/08/25-10:10:41, [SEC-1203], 9036, CHASSIS, INFO, \ Spir_67, Login information : Login successful via \ TELNET/SSH/RSH. IP Addr: 10.106.7.62 [Type <CR> to continue, Q<CR> to stop: 2010/08/25-10:13:41, [ZONE-1022], 9037, CHASSIS, INFO,\ Spir_67, The effective configuration has changed to meh.
  • Page 275: Exit

    exit exit DESCRIPTION See logout. SEE ALSO None Fabric OS Command Reference 53-1001764-01...
  • Page 276: Fabretryshow

    fabRetryShow fabRetryShow Displays the retry count of the fabric commands. SYNOPSIS fabretryshow DESCRIPTION Use this command to display the retry count of the fabric commands. For each port, the command output displays counts for the following Switch Internal Link Service (SW_ILS) requests: Exchange Link Parameters Exchange Fabric Parameters HA_EFP...
  • Page 277 fabRetryShow NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. OPERANDS None EXAMPLES To display the retry count of Fabric OS Commands: switch:user>...
  • Page 278: Fabriclog

    fabricLog fabricLog Displays (all users) or manipulates (admin) the fabric log. SYNOPSIS fabriclog -s | --show [dport] fabriclog -c | --clear [dport] fabriclog -d | --disable fabriclog -e | --enable fabriclog -r size | --resize size fabriclog -h | --help DESCRIPTION Use this command to display, clear, disable, enable, or resize the fabric log.
  • Page 279 fabricLog The non-Principal switch is processing an RDI. The switch is in offline state. Port state. Port states include the following: The port is offline. The port is online. Exchange Link Parameters (ELP) Accept Frame (ACC) received. Link reset occurred on master or E_Port. Trunk Initiator: Exchange Mark Timestamp (EMT) sent.
  • Page 280 fabricLog NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. OPERANDS This command has the following operands: -s | --show [dport] Displays the fabric log.
  • Page 281: Fabricname

    fabricName fabricName Configures the fabric name parameter. SYNOPSIS fabricname --set fabric_name fabricname --clear fabricname --show fabricname --help DESCRIPTION Use this command to configure a name for the fabric. With Virtual Fabrics it is not uncommon to have multiple fabrics in a single chassis. These logical fabrics are identified by their Fabric ID.
  • Page 282 fabricName switch:user> fabricname --show Fabric Name: "my new fabric" To clear the fabric name: switch:user> fabricname --clear Fabric Name cleared! switch:user> fabricname --show Fabric Name is not configured SEE ALSO switchShow, fabricShow Fabric OS Command Reference 53-1001764-01...
  • Page 283: Fabricprincipal

    fabricPrincipal fabricPrincipal Sets the principal switch selection mode. SYNOPSIS fabricprincipal --help | -h fabricprincipal [--show | -q] fabricprincipal --enable [ -priority | -p priority] [-force | -f ] fabricprincipal --disable fabricprincipal [-f] mode DESCRIPTION Use this command to set principal switch selection mode for a switch and to set priorities for principal switch selection.
  • Page 284 fabricPrincipal 0x01 Highest priority. This is a user-defined value 0x02 Switch was principal prior to sending or receiving a build fabric (BF) request. This value is generated by the switch to initiate a fabric reconfiguration. This value should not be assigned. 0x3 - 0xFE Priority value range.
  • Page 285 fabricPrincipal To display the principal switch selection priority: switch:admin> fabricprincipal --show Principal Selection Mode: Enable Principal Switch Selection Priority: 0x10 SEE ALSO fabricShow Fabric OS Command Reference 53-1001764-01...
  • Page 286: Fabricshow

    fabricShow fabricShow Displays fabric membership information. SYNOPSIS fabricshow [-membership | -chassis] fabricshow -help DESCRIPTION Use this command to display information about switches in the fabric. If the switch is initializing or is disabled, the message "no fabric" is displayed. Running this command on an FCR or edge switch does not provide any router information; running this command on an edge switch with the -membership option does provide router information.
  • Page 287 fabricShow NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. OPERANDS This command has the following operands: -membership Displays fabric membership information with additional details of the FC Router, if present in the fabric.
  • Page 288 fabricShow To show additional details about the chassis: switch:admin> fabricshow -chassis Switch ID Name ENET IP Addr Chassis WWN Chassis Name --------------------------------------------------------------------- 4:fffc04 sw5100_126_128 10.38.17.126 10:00:00:05:1e:0e:eb:58 Brcd5100 5:fffc05 sw1500_127_128 10.38.17.127 10:00:00:05:1e:0e:eb:98 Brcd5100 The Fabric has 2 switches SEE ALSO fabricName, switchShow Fabric OS Command Reference 53-1001764-01...
  • Page 289: Fabstatsshow

    fabStatsShow fabStatsShow Displays fabric statistics. SYNOPSIS fabstatsshow DESCRIPTION Use this command to display statistics for the fabric. The following information is displayed: • Number of times a switch domain ID has been forcibly changed • Number of E_Port offline transitions •...
  • Page 290 fabStatsShow NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. OPERANDS None EXAMPLES To display the fabric statistics: switch:admin>...
  • Page 291: Fandisable

    fanDisable fanDisable Disables a fan unit. SYNOPSIS fandisable unit DESCRIPTION Use this command to disable a nonfaulty fan unit by setting the RPM speed to 0. NOTES This command is not available on nonbladed systems except for the Brocade 5300. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 292: Fanenable

    fanEnable fanEnable Enables a fan unit. SYNOPSIS fanenable unit DESCRIPTION Use this command to set a previously disabled fan unit back to the default RPM speed. NOTES This command is not available on nonbladed systems except for the Brocade 5300. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 293: Fanshow

    fanShow fanShow Displays fan status and speed. SYNOPSIS fanshow DESCRIPTION Use this command to display the current status and speed of each fan in the system. Fan status is displayed as follows: Fan is functioning correctly. absent Fan is not present. below minimum Fan is present but rotating too slowly or stopped.
  • Page 294: Fapwwn

    faPwwn faPwwn Manages fabric-assigned port world wide names. SYNOPSIS fapwwn --enable -port [slot/]port[-port] fapwwn --enable -ag AG_WWN] -port port fapwwn --disable -port [slot/]port[-port] fapwwn --disable -ag AG_WWN -port port fapwwn --assign [-ag AG_WWN] -port [slot/]port [-v VPWWN] fapwwn --delete -port [slot/]port[-port] fapwwn --delete -ag AG_WWN [-port port] fapwwn --delete -v VWWN fapwwn --move -srcport source_port -dstport dest_port...
  • Page 295 faPwwn A single port can be assigned up to two WWNs, one assigned automatically and one assigned by the user. Only one FA-PWWN can be active at any given time. The user-assigned FA-PWWN takes precedence over the automatically assigned FA-PWWN. This means, the switch will bind the user-assigned FA-PWWN to the port if both a user-assigned and an automatically assigned FA-PWWN are available.
  • Page 296 faPwwn The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. OPERANDS this command has the following operands: --enable Enables the FA-PWWN feature on the specified switch ports or AG ports.
  • Page 297 faPwwn Specifies all ports on the logical switch. This operand is valid only with the --show option. --move Moves an active FA-PWWN from a source to the specified destination port. Use this command to move a server across switch ports. If the source port has both a user-assigned and an automatically assigned FA-PWWN, the user-assigned FA-PWWN will be moved to the destination port as a user-assigned FA-PWWN and replace any automatically assigned FA-PWWN that may be active on that...
  • Page 298 faPwwn To assign an user-assigned FA-PWWN to an AG port: fapwwn --assign -ag 12:34:56:78:90:12:23:45 -port 0 \ -v 11:22:33:44:55:66:77:88 To delete the active FA-PWWN of a switch port: fapwwn --delete -port 10 To delete the active FA-PWWN of an AG port: fapwwn --delete -ag 12:34:56:78:90:12:34:56 -port 10 To display the active FA-PWWN for a single FC port (the real device PWWN is hidden): fapwwn --show -port 10...
  • Page 299 faPwwn 11:22:33:44:55:66:77:88 11403 AG/User 52:00:10:00:00:0f:50:32 2:00:10:00:00:0f:50:33 11404 AG/Auto 52:00:10:00:00:0f:50:38 AG/Auto (output split) To display the active FA-PWWNs of all ports associated with a single AG (in the following example, one VPWWN is not unassigned): fapwwn --show -ag 10:00:00:05:1e:d7:3d:dc ----------------------------------------------------------- AG Port Port Device Port WWN -----------------------------------------------------------...
  • Page 300: Fastboot

    fastBoot fastBoot Reboots the Control Processor (CP), bypassing the Power-On Self-Test (POST). SYNOPSIS fastboot DESCRIPTION Use this command to perform a "cold reboot" (power off/restart) of the CP bypassing POST when the system comes back up. Bypassing POST can reduce boot time significantly. If POST was previously disabled using the diagDisablePost command, then fastBoot is the same as reBoot.
  • Page 301 fastBoot To reboot a DCX without executing POST on startup (in the example, HA is enabled): switch:admin> fastboot Warning: This command is being run on a control processor (CP) based system and will cause the active CP to reboot. Are you sure you want to reboot the active CP [y/n]? y Broadcast message from root (pts/0) Sun Feb 28 19:49:45 2010...
  • Page 302: Fcipchiptest

    fcipChipTest fcipChipTest Tests functionality of components in the FCIP complex. SYNOPSIS fcipchiptest [--slot slot] [-testtype type] [-unit number] DESCRIPTION Use this command to verify the internal registers and memory of the network processor, FCIP FPGA, compression processor, and GigPHY. NOTES This command is supported only on the Brocade FR4-18i.
  • Page 303 fcipChipTest CHIP_TEST_IMAGE_VER_ERR CHIP_TEST_TIMEOUT_ERR CHIP_TEST_HEARBEAT_ERR CHIP_TEST_INVALID_RESULT EXAMPLES To run all tests on slot 7 and GbE port 1: switch:admin> fcipchiptest --slot 7 -unit 1 -testtype 0 Running fcipchiptest ....Test Complete: fcipchiptest Pass 1 of 1 Duration 0 hr, 1 min & 15 sec (0:1:15:351). passed.
  • Page 304: Fciphelp

    fcipHelp fcipHelp Displays FCIP command information. SYNOPSIS fciphelp DESCRIPTION Use this command to display a listing of Fibre Channel over IP (FCIP) commands with short descriptions for each command. FCIP commands require an FCIP license. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 305: Fcipledtest

    fcipLedTest fcipLedTest Exercises the GbE port LEDS on the Brocade 7800 and FX8-24. SYNOPSIS fcipledtest [slot | all] DESCRIPTION Use this command to exercise the GbE port LEDs on the Brocade 7800 and FX8-24. This test cycles through the port LEDs by lighting GREEN and then flashing GREEN on all ports for 3 seconds. As the test continues the ports turn AMBER and then flashing AMBER for 3 seconds.
  • Page 306: Fcippathtest

    fcipPathTest fcipPathTest Tests the data path of the FCIP complex. SYNOPSIS fcippathtest [--slot slot] [-lb_mode mode] [-nframes count] fcippathtest [--slot slot] [-unit number] [-path mode] [-nframes count] [-length data_length] [-compress mode] DESCRIPTION Use this command to verify the data paths in the FCIP complex. All data path modes run tests by comparing Fibre Channel frames or data packets transmitted from and received by the network processor due to the designated loopback.
  • Page 307 fcipPathTest External (SERDES) loopback Backend bypass and port loopback -path mode Specifies the loopback mode for the test on the Brocade FR4-18i only. By default, fcipPathTest uses the PHY and central ASIC loopback modes. You can specify one of the following alternate loopback modes: SFP loopback PHY loopback FCIP FPGA GMAC loopback...
  • Page 308 fcipPathTest EXAMPLES To run the test on slot 2 with PHY loopback sending 10 frames: switch:admin> fcippathtest --slot 2 -path 2 -nframes 10 Running fcippathtest ....Test Complete: fcippathtest Pass 10 of 10 Duration 0 hr, 1 min & 50 sec (0:1:50:942). passed.
  • Page 309: Fcoe

    FCoE FCoE Manages and displays FCoE configuration. SYNOPSIS fcoe --cfgshow [[slot/]port] fcoe --portcfg [[slot/]port] ve_port | vf_port fcoe --disable [slot/]port fcoe --enable [slot/]port fcoe --loginshow [[slot/]port] fcoe --fcmapset -vlan vid fcmapid fcoe --fcmapunset -vlan vid fcoe --fipcfg -advintvl intvl fcoe --fipcfgshow fcoe --resetlogin [-teport [slot/]port | -device wwn] fcoe --help DESCRIPTION...
  • Page 310 FCoE --enable Enables the specified FCoE port. --loginshow Displays information about the devices logged in to the specified FCoE port. --fcmapset Configures the FCMAP values for Fabric Provided MAC Addresses (FPMA) for the specified VLANs. -vlan vid Specifies the VLAN for which to set the FCMAP. fcmapid Specifies the FCMAP to be set.
  • Page 311 FCoE (Trunk port, master is Port 850200 Online E-Port (Trunk port, master is Port 850300 Online E-Port (Trunk port, master is Port 850400 Online E-Port (Trunk port, master is Port 850500 Online E-Port (Trunk port, master is Port 850600 Online E-Port (Trunk port, master is Port 850700...
  • Page 312 FCoE 18 ENABLED 20:12:00:05:1e:76:60:80 0 FCoE VF-Port 00:05:1e:76:60:8a 128 19 ENABLED 20:13:00:05:1e:76:60:80 0 FCoE VF-Port 00:05:1e:76:60:8b 128 20 ENABLED 20:14:00:05:1e:76:60:80 0 FCoE VF-Port 00:05:1e:76:60:8c 128 21 ENABLED 20:15:00:05:1e:76:60:80 0 FCoE VF-Port 00:05:1e:76:60:8d 128 (output truncated) To display FIP and FCMAP configurations on the Brocade 8000: switch:admin>...
  • Page 313: Fcoelogincfg

    fcoeLoginCfg fcoeLoginCfg Manages or displays the FCoE login configuration. SYNOPSIS fcoelogincfg --show [-switch swwn | -logingroup lgname] [-saved] | [-mergestatus] fcoelogincfg --save fcoelogincfg --transshow fcoelogincfg --transabort fcoelogincfg --purge -conflicting [-nonexisting] fcoelogincfg --purge -nonexisting [-conflicting] fcoelogincfg --enable fcoelogincfg --disable fcoelogincfg --help DESCRIPTION Use this command to save, abort, or display the current FCoE login configuration, including ongoing transactions and the effective (saved) configuration.
  • Page 314 fcoeLoginCfg --transshow Displays the current configuration transaction in progress fabric-wide. --transabort Aborts the FCoE login configuration transaction currently in progress. --purge Purges the specified entries from the effective configuration. Specify one or both of the following operands: -conflicting Purges all conflicting login groups and conflicting VN_Port mappings from the effective configuration.
  • Page 315 fcoeLoginCfg To perform a clean-up of the effective configuration: switch:admin> fcoelogincfg --purge -conflicting -nonexisting switch:admin> To disable the FCoE login configuration management on the switch: switch:admin> fcoelogincfg --disable switch:admin> fcoelogincfg --show Login management is disabled. Effective Configuration *********************** Login management is disabled. SEE ALSO fcoeLoginGroup Fabric OS Command Reference...
  • Page 316: Fcoelogingroup

    fcoeLoginGroup fcoeLoginGroup Creates and manages FCoE login group configuration. SYNOPSIS fcoelogingroup --create lgname -self | -switch swwn [-allowall | member[;member] ...] fcoelogingroup --delete lgname fcoelogingroup --add lgname member[;member] ... fcoelogingroup --remove lgname wwn fcoelogingroup --rename lgname newlgname fcoelogingroup --help DESCRIPTION Use this command to create or modify the FCoE login management configuration fabric-wide.
  • Page 317 fcoeLoginGroup lgname Specifies the name of the login group. --add Adds VN_Port devices to the login group. lgname Specifies the name of the login group to which VN_Port devices are to be added. member Identifies the WWN of the VN_Port. The WWN must be specified in hex as xx.xx.xx.xx.xx.xx.xx.xx.
  • Page 318: Fcping

    fcPing fcPing Sends a Fibre Channel Extended Link Service (ELS) Echo request to a pair of ports or to a single destination, or executes a SuperPing. SYNOPSIS fcping [--number frames] [--length size] [--interval wait] [--pattern pattern] [--bypasszone] [--quiet] [source] destination fcping --allpaths [-printisl] [-maxtries M]...
  • Page 319 fcPing NOTES The ELS Echo may not be supported on all devices. In such cases, the response could be either an ELS reject or a request timeout. By default, fcPing sends five ELS Echo requests to each port. When a device does not respond to the ELS Echo request, further debugging may be needed to determine, whether the device does not support ELS Echo, or whether the request is rejected for some other reason.
  • Page 320 fcPing --quiet Suppresses the diagnostic output. Only zoning information, if applicable, and the summary line are displayed. The following operands are valid only when fcPing is executed to perform a SuperPing: --allpaths [args] destination Executes a SuperPing that covers all available paths to the specified destination. The number of actual paths covered depends on two other parameters that you can optionally specify.
  • Page 321 fcPing Pinging 21:00:00:20:37:25:ad:05 [0x211e8] with 12 bytes of data: Request rejected Request rejected Request rejected Request rejected Request rejected 5 frames sent, 0 frames received, 5 frames rejected, 0 frames timeout Round-trip min/avg/max = 0/0/0 usec To display one device that accepts the request and another device that does not respond to the request: switch:admin>...
  • Page 322 fcPing Permanent Port Name: 20:07:00:05:1e:35:10:7f Port Index: 5 Share Area: No Device Shared in Other AD: No Redirect: No Partial: NO N 370501; 3;10:00:00:00:c9:3f:7c:b8;20:00:00:00:c9:3f:7c:b8; na FC4s: FCP NodeSymb: [44] "Emulex LP1050 FV1.81A1 DV5-5.20A9 DELL1750-3" Fabric Port Name: 20:05:00:05:1e:34:01:f5 Permanent Port Name: 20:07:00:05:1e:35:10:7f Port Index: 5 Share Area: No Device Shared in Other AD: No...
  • Page 323 fcPing Successfully completed superping for all paths SWITCH3--> SWITCH4 STATUS --------------------------------------------------------- (2/7,2/EMB)[2] (30/EMB,30/8)[128] (40/9, 40/EMB)[128] SUCCESS Successfully completed superping for all paths To execute a SuperPing and print statistical coverage of each ISL and internal port along the potential paths (in the example, a few errors are recorded on the ISLs 3/205->2/25, 3/204->2/27, 2/42->101/3, and 2/1->101/8, but the internal port analysis shows that errors are recorded on the internal port 0/284 in domain 2, which is the potential faulty link): switch:admin>...
  • Page 324 fcPing To execute a superPing with a coverage count of 1000 and a maxtries value of 5000 (in the example, the ISL (3/204->204/27), could not be covered 1000 times): switch:admin> fcping --allpaths -covcount 1000 -maxtries 5000 -printisl 165 Pinging(size:12 bytes) destination domain 165 through all paths PATH SWITCH1-->...
  • Page 325: Fcplogclear

    fcpLogClear fcpLogClear Clears the FCPD debug information log. SYNOPSIS fcplogclear DESCRIPTION Use this command to clear the debug information logged by the Fibre Channel Protocol daemon (FCPD). NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 326: Fcplogdisable

    fcpLogDisable fcpLogDisable Disables the FCPD debug information log. SYNOPSIS fcplogdisable DESCRIPTION Use this command to disable the logging of debug information by the Fibre Channel Protocol daemon (FCPD). NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 327: Fcplogenable

    fcpLogEnable fcpLogEnable Enables the FCPD debug information log. SYNOPSIS fcplogenable DESCRIPTION Use this command to enable Fibre Channel Protocol daemon (FCPD) logging. Debug information logging is enabled by default. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 328: Fcplogshow

    fcpLogShow fcpLogShow Displays the FCPD debug information log. SYNOPSIS fcplogshow DESCRIPTION Use this command to display the debug information logged at various stages during the Fibre Channel Protocol daemon (FCPD) device probing. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 329: Fcpprobeshow

    fcpProbeShow fcpProbeShow Displays the Fibre Channel Protocol (FCP) probe information. SYNOPSIS fcpprobeshow [slot/]port DESCRIPTION Use this command to display the Fibre Channel Protocol daemon (FCPD) device probing information for the devices attached to the specified F_Port or FL_Port. This information includes the number of successful logins and SCSI INQUIRY commands sent over this port and a list of the attached devices.
  • Page 330: Fcprlsshow

    fcpRlsShow fcpRlsShow Displays the Fibre Channel Protocol (FCP) Read Link Status (RLS) information. SYNOPSIS fcprlsshow [slot/]port DESCRIPTION Use this command to display the FCP RLS information for an F_Port or FL_Port. This information describes the number of loss-of-signal, loss-of-sync, CRC errors, and other failure events detected on the specified port.
  • Page 331: Fcrbcastconfig

    fcrBcastConfig fcrBcastConfig Displays or sets the broadcast frame forwarding option. SYNOPSIS fcrbcastconfig --show fcrbcastconfig --enable -f fabric_id fcrbcastconfig --disable -f fabric_id fcrbcastconfig --help DESCRIPTION Use this command to enable or disable the broadcast frame option or to display the current configuration. If no operands are specified, this command displays the usage.
  • Page 332 fcrBcastConfig To display the new configuration: switch:admin> fcrbcastconfig --show Broadcast configuration is enabled for FID: 2 128 SEE ALSO bcastShow, portRouteShow Fabric OS Command Reference 53-1001764-01...
  • Page 333: Fcrchiptest

    fcrChipTest fcrChipTest Tests the functionality of FC Router FPGA. SYNOPSIS fcrchiptest [--slot slot] [-unit number] [-testtype type] DESCRIPTION Use this command to test the FC Router Field-programmable gate array (FPGA). This test verifies that all SRAM and register data bits in each ASIC can be independently written and read successfully. The method used is to write a walking 1 pattern to each location.
  • Page 334 fcrChipTest All FC Router FPGAs DIAGNOSTICS When a failure is detected, the test might report one or more of the following: DMA_ALLOC_FAIL DMA_READ_ABORT DMA_READ_TIMEOUT CHIP_INIT_TIMEOUT BIST_TIMEOUT BIST_FAIL EXAMPLES To run all tests on slot 7 and FC Router FPGA 1: switch:admin>...
  • Page 335: Fcrconfigure

    fcrConfigure fcrConfigure Sets FC Router configuration parameters. SYNOPSIS fcrconfigure DESCRIPTION Use this command to configure FC Router parameters. This is an interactive command. Before you can execute this command, you must disable FC routing by using the fosConfig command and disable the switch with the switchDisable command. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 336: Fcredgeshow

    fcrEdgeshow fcrEdgeshow Displays the FIDs of all configured EX_Ports. SYNOPSIS fcredgeshow fcredgeshow [-fid FabricID] fcredgeshow --help DESCRIPTION Use this command without operand to display information about all Fabric IDs (FIDs) that have been created on the chassis and are assigned to EX_Ports. When a FID is specified, fcredgeshow displays information for all EX_Ports configured with the specified FID.
  • Page 337 fcrEdgeshow To display the EX_Ports configured with a specified FID: switch:admin> fcredgeshow -fid 25 FID EX-port E-port Neighbor Switch (PWWN, SWWN ) ----------------------------------------------------------------- 20:f4:00:05:1e:38:a4:cb 10:00:00:05:1e:38:a4:cb To display a FID for which no EX_Ports are configured: switch:admin> fcredgeshow -fid 29 No EX-ports with FID 29 SEE ALSO fcrPhyDevShow, fcrProxyDevShow, fcrRouteShow, lsanZoneShow, switchShow, fcrFabricShow...
  • Page 338: Fcrfabricshow

    fcrFabricShow fcrFabricShow Displays the FC Routers on a backbone fabric. SYNOPSIS fcrfabricshow DESCRIPTION Use this command to display information about FC Routers that exist in an FC Router backbone fabric. The existing syntax is maintained for IPv6 support. When IPv6 addresses are not configured, the output of fcrFabricShow displays the IPv4 format.
  • Page 339 fcrFabricShow EX_Port FID Neighbor Switch Info (enet IP, WWN, name) ------------------------------------------------------- 10.33.35.80 10:00:00:05:1e:38:01:e7 "B10_3" 10.33.35.80 10:00:00:05:1e:38:01:e7 "B10_3" FC Router WWN: 10:00:00:05:1e:39:51:67, Dom ID: 5, Info: 10.33.36.96, "Scimitar" EX_Port FID Neighbor Switch Info (enet IP, WWN, name) -------------------------------------------------------- 10.33.35.80 10:00:00:05:1e:38:01:e7 "B10_3"* SEE ALSO fcrPhyDevShow, fcrProxyDevShow, fcrRouteShow, lsanZoneShow, switchShow...
  • Page 340: Fcrlsan

    fcrlSan fcrlSan Configures and displays LSAN policies. SYNOPSIS fcrlsan fcrlsan --add -enforce tag | -speed tag fcrlsan --remove -enforce tag | -speed tag fcrlsan --show -enforce | -speed | all fcrlsan --help DESCRIPTION Use this command to add or remove LSAN tags, or to display existing tags in the configuration. LSAN tagging optimizes an FC Router's behavior based on a specified subset of LSANS.
  • Page 341 fcrlSan --show Displays the specified tag from the LSAN tag configuration. --help Displays the command usage. -enforce tag Accepts only the LSANs from the edge fabric that matches the specified tag string into the local FCR database. A valid tag is a string of a maximum of eight characters.
  • Page 342: Fcrlsancount

    fcrLsanCount fcrLsanCount Displays or sets the maximum LSAN count. SYNOPSIS fcrlsancount [max_lsan_count] DESCRIPTION Use this command to set or display the maximum number of LSAN zones that can be configured on the edge fabric. By default, the maximum LSAN count is set to 3000, which is also the minimum. This command allows you to create up to 5000 LSANs on your edge fabric, if needed to support additional devices.
  • Page 343: Fcrlsanmatrix

    fcrLsanMatrix fcrLsanMatrix Creates, edits and displays LSAN fabric or FCR matrix information, which binds the LSAN Zone and device database information to specified edge fabric IDs or FCRs. SYNOPSIS fcrlsanmatrix fcrlsanmatrix --add -lsan FID FID | -fcr wwn wwn fcrlsanmatrix --remove -lsan FID FID | -fcr wwn wwn fcrlsanmatrix --apply -lsan | -fcr | -all fcrlsanmatrix --cancel -lsan | -fcr | -all fcrlsanmatrix --display -lsan | -fcr | -all...
  • Page 344 fcrLsanMatrix • Display the static and default/dynamic binding of the backbone to show which edge fabrics or FCRs can access each other. • Verify that the information in the cache is valid and does not disrupt existing import/export devices. • Run this command with the quickmode option to derive the LSAN Zone matrix from the current import/export database.
  • Page 345 fcrLsanMatrix To zero out database execute the following commands: fcrlsanmatrix --add -lsan 0 0 fcrlsanmatrix --add -fcr 00:00:00:00:00:00:00:00 00:00:00:00:00:00:00:00 fcrlsanmatrix --apply -all • In a dual backbone configuration, execute fcrlsanmatrix --fabricview on the FCR switches to confirm that the shared edge fabric FIDs have the same access in both backbones. •...
  • Page 346 fcrLsanMatrix To view the persistent changes: switch:admin> fcrlsanmatrix -lsan LSAN MATRIX is activated Fabric ID 1 Fabric ID 2 -------------------------------------- To view the LSAN Zone static and default/dynamic binding in the backbone where online fabrics are: 1, 2, 4, 5, 7, 8, 10: switch:admin>...
  • Page 347 fcrLsanMatrix To view all the static and the default/dynamic fabric binding in the backbone: switch:admin> fcrlsanmatrix --fabricview -lsan LSAN MATRIX is activated Fabric ID 1 Fabric ID 2 -------------------------------------- Default LSAN Matrix: 57 91 SEE ALSO fcrFabricShow, lsanZoneShow, fcrPhyDevShow, fcrProxyDevShow, fcrRouteShow, switchShow Fabric OS Command Reference 53-1001764-01...
  • Page 348: Fcrpathtest

    fcrPathTest fcrPathTest Tests the data path connection between the FC Router FPGA and the central ASIC. SYNOPSIS fcrpathtest [--slot slot] [-unit number] [-path mode] [-nframes count] DESCRIPTION Use this command to verify the data path connecting the FC Router field-programmable gate array (FPGA) and the central ASIC by sending frames from the FC Router FPGA port N transmitter, and looping the frames back into the same port's receiver.
  • Page 349 fcrPathTest OPERANDS This command has the following operands: --slot slot Specifies the slot number on which the diagnostic operates. The default is 0 and operates on fixed-port-count products. -unit number Specifies the FC Router FPGA to test. By default, all FC Router FPGAs in the specified slot are tested.
  • Page 350 fcrPathTest DIAG-TIMEOUT The port failed to receive back a frame that was sent out. This can be caused by a faulty SFP or indicate deeper problems in the main board or ASIC. Check for a faulty SFP. Replace the SFP if necessary. DIAG-XMIT The specified port failed to transmit frames.
  • Page 351: Fcrphydevshow

    fcrPhyDevShow fcrPhyDevShow Displays the FC Router physical device information. SYNOPSIS fcrphydevshow [-a][-f FID][-w wwn][-c][-d] DESCRIPTION Use this command to display the physical (real) devices that are configured to be exported to other fabrics. A device is considered to be configured to be exported to another fabric if it is a member of an LSAN zone.
  • Page 352 fcrPhyDevShow local failure the number of times the device login failed because of missing LSAN zones within the device fabric. remote failure the number of times the device login failed due to missing LSAN zones within the remote fabric. EXAMPLES To display the physical devices relevant to an FC Router: fcr:admin>...
  • Page 353: Fcrproxyconfig

    fcrProxyConfig fcrProxyConfig Displays or configures proxy devices presented by an FC Router. SYNOPSIS fcrproxyconfig [-s importedFID devWWN slot] [-r importedFID devWWN] DESCRIPTION Use this command to display or set the persistent configuration of proxy devices presented by the local FC Router. When used without operand, this command displays the persistent proxy device configuration;...
  • Page 354 fcrProxyConfig through 7FH). The address of the proxy device is derived from the PID format (for example, native, core, or extended edge) and the proxy device slot. If no proxy device WWN is stored in any slot for all edge fabrics, the following message is displayed "All slots empty."...
  • Page 355: Fcrproxydevshow

    fcrProxyDevShow fcrProxyDevShow Displays FC Router proxy device information. SYNOPSIS fcrproxydevshow [-a][-f fabricid][-w wwn] DESCRIPTION Use this command to display the proxy devices presented by FC Router EX_Ports and information about the proxy devices. A proxy device is a virtual device presented in to a fabric by an FC Router. A proxy device represents a real device on another fabric.
  • Page 356 fcrProxyDevShow -a -f fabricid Display the proxy devices in the specified fabric for all FC Routers in the same backbone fabric whether or not they are relevant to this FC Router. -f fabricid Display the proxy devices in the specified fabric that are relevant to this FC Router.
  • Page 357: Fcrresourceshow

    fcrResourceShow fcrResourceShow Displays FC Router physical resource usage. SYNOPSIS fcrresourceshow DESCRIPTION Use this command to display the FC Router-available resources. The maximum number allowed versus the currently used is displayed for various resources. The command output includes: LSAN Zones The maximum versus the currently used LSAN zones. LSAN Devices The maximum versus the currently used LSAN device database entries.
  • Page 358 fcrResourceShow OPERANDS None EXAMPLES To display the resource usage for the local FC Router: switch:admin> fcrresourceshow Daemon Limits: Max Allowed Currently Used ---------------------------- LSAN Zones: 3000 LSAN Devices: 10000 1208 Proxy Device Slots: 10000 WWN Pool Size Allocated ---------------------------- Phantom Node WWN: 8192 3790 Phantom Port WWN:...
  • Page 359: Fcrrouterportcost

    fcrRouterPortCost fcrRouterPortCost Displays or sets an FC Router port cost. SYNOPSIS fcrrouterportcost [[slot/]port] [cost] DESCRIPTION Use this command to set or display the cost of the FC Router ports. You can set the cost of the link to one of two fixed values: 1000 or 10000. The option 0 sets the cost of the link to the default value based on link type (EX/VEX).
  • Page 360 fcrRouterPortCost To display the cost on an EX_Port: switch:admin> fcrrouterportcost 7/10 0 switch:admin> fcrrouterportcost 7/10 Port Cost ------------------------ 7/10 1000 To set the cost of an EX_Port and display the result: switch:admin> fcrrouterportcost 7/10 10000 switch:admin> fcrrouterportcost 7/10 Port Cost ------------------------ 7/10 10000...
  • Page 361: Fcrrouteshow

    fcrRouteShow fcrRouteShow Displays FC Router route information. SYNOPSIS fcrrouteshow DESCRIPTION Use this command to display routes through the FC Router backbone fabric to accessible destination fabrics. An FC Router backbone fabric is the fabric that contains the E_Ports of this platform and routes inter-fabric traffic between imported fabrics, creating a meta-SAN.
  • Page 362: Fcrxlateconfig

    fcrXlateConfig fcrXlateConfig Configures a translate (xlate) domain's domain ID and state of persistence for both the EX_Port-attached fabric and the backbone fabric. SYNOPSIS fcrxlateconfig fcrxlateconfig importedFID exportedFID preferredDomainID fcrxlateconfig --remove | -r importedFID exportedFID fcrxlateconfig --enable persistxd fcrxlateconfig --disable persistxd fcrxlateconfig --show stalexd importedFID fcrxlateconfig --delete stalexd importedFID staleXlateDomainID fcrxlateconfig --help...
  • Page 363 fcrXlateConfig NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. Information displayed is not related to the entire backbone. The FC Router displays only connections to an edge fabric for which there are translate domain IDs.
  • Page 364 fcrXlateConfig --show stalexd [importedFID] Displays stale translate domains associated with the specified Fabric ID (1-128). A translate domain becomes stale when the remote edge fabric for which this translate domain was created in the specified edge fabric becomes unreachable. When issued without specifying an imported FID, this command lists all stale translate domains in all edge fabrics connected to the FCR.
  • Page 365: Fddcfg

    fddCfg fddCfg Manages the fabric data distribution configuration parameters. SYNOPSIS fddcfg --showall fddcfg --localaccept policy_list fddcfg --localreject policy_list fddcfg --fabwideset policy_list DESCRIPTION Use this command to manage the fabric data distribution configuration parameters. These parameters control the fabric-wide consistency policy. Switches can be locally configured to allow or reject a security policy.
  • Page 366 fddCfg --localreject policy_list Configures the switch to reject distributions of the specified policies in policy_list. However, a database cannot be rejected if it is specified in the fabric-wide consistency policy. The policies in policy_list must be separated by semicolons and enclosed in quotation marks; for example, "SCC;DCC". --fabwideset policy_list Sets the fabric-wide consistency policy.
  • Page 367: Fdmicacheshow

    fdmiCacheShow fdmiCacheShow Displays abbreviated remote FDMI device information, according to remote domain ID. SYNOPSIS fdmicacheshow DESCRIPTION Use this command to display FDMI cache information for remote domains only. The state of each remote domain, identified by its domain ID, is shown to be unknown, known, unsupported, or error.
  • Page 368: Fdmishow

    fdmiShow fdmiShow Displays detailed FDMI device information. SYNOPSIS fdmishow DESCRIPTION Use this command to display FDMI information for all HBAs and ports. Detailed FDMI information is displayed for local HBAs and ports. This information includes the HBA with its corresponding ports, along with their respective attributes. Only abbreviated FDMI information is shown for HBA and ports on remote switches.
  • Page 369: Ficoncfg

    ficonCfg ficonCfg Configures the specified FICON database. SYNOPSIS ficoncfg --set database port ficoncfg --reset database ficoncfg --help DESCRIPTION Use this command to configure a FICON database on a specified port. Refer to ficonShow for a description of the database content. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 370: Ficonclear

    ficonClear ficonClear Clears the records from the specified FICON database. SYNOPSIS ficonclear database DESCRIPTION Use this command to remove records from the local FICON database. The command effect depends on the specified database. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 371: Ficoncupset

    ficonCupSet ficonCupSet Sets FICON-CUP parameters for a switch. SYNOPSIS ficoncupset fmsmode enable | disable ficoncupset modereg bitname 0 | 1 ficoncupset MIHPTO seconds ficoncupset CRP PID CHID DESCRIPTION Use this command to set FICON-CUP (Control Unit Port) parameters for a switch. All parameters can be set while the switch is online.
  • Page 372 ficonCupSet Alternate control prohibited Host control prohibited MIHPTO Sets the missing interrupt handler primary timeout (MIHPTO) value for the CUP. The following operand is required: seconds Specifies the timeout value in seconds. Provide a decimal value in the range between 15 and 600 seconds. The default timeout value is 180 seconds. If a value greater than 63 seconds is specified, the timeout value is rounded down to the closest value divisible by 10.
  • Page 373 ficonCupSet 082300 Oper 082400 Reset 082400 Reset 612400 Reset Prim 612400 Reset SEE ALSO ficonCupShow Fabric OS Command Reference 53-1001764-01...
  • Page 374: Ficoncupshow

    ficonCupShow ficonCupShow Displays FICON-CUP parameters for a switch. SYNOPSIS ficoncupshow fmsmode ficoncupshow modereg [bitname] ficoncupshow MIHPTO ficoncupshow LP DESCRIPTION Use this command to display FICON-CUP (Control Unit Port) parameters for a switch. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 375 ficonCupShow EXAMPLES To display the FMS mode for the switch: switch:user> ficoncupshow fmsmode fmsmode for the switch: Enabled To display the mode register for the switch: switch:user> ficoncupshow modereg POSC DCAM ------------------------------ To display the ASM bit in the mode register for the switch: switch:user>...
  • Page 376: Ficonhelp

    ficonHelp ficonHelp Displays a list of FICON support commands. SYNOPSIS ficonhelp DESCRIPTION Use this command to display a list of FICON support commands with descriptions. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 377: Ficonshow

    ficonShow ficonShow Displays the contents of the specified FICON database. SYNOPSIS ficonshow database [fabric] DESCRIPTION Use this command to display the contents of a FICON database. The ficonShow database operand is the name of the database to display. If the fabric operand is absent, the command displays the members of the named database that are local to the switch on which the command was issued.
  • Page 378 ficonShow Incident Count Displays the incident count. This number increases by 1 for each incident within the individual switch. Link Incident Description Same as Link Incident Type. Link Incident Type Indicates the link incident type as one of the following: •...
  • Page 379 ficonShow 0x40 Other FC-4s including FCP and updates. 0x60 FC-SB-2 and updates and other FC-4s including FCP and updates. 0x80 FC-4 support not specified. 0xa0 Reserved. 0xc0 Reserved. 0xe0 Vendor-specific. Byte BB Possible values include the following: 0x00 Unspecified class. 0x01 Direct access storage device, if it is a storage port;...
  • Page 380 ficonShow 0xID CHIPID if channel port has registered with the switch. 0xPN If switch has registered with the channel, PN represents the FL port number. Part Number Displays the switch chassis part number. Displays the 24-bit Fibre Channel port address in 0xDDAAPP format. DD is Domain ID.
  • Page 381 ficonShow Time Stamp Displays the timestamp, expressed in date format. Type Same as Port Type. Type Number Displays the type number of the self-describing node. It also describes the machine type. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 382 ficonShow tag: 102b {Fmt Type PID Registered Port WWN Registered Node WWN \ 0x18 N 502e00 50:05:07:64:01:40:0f:ca 50:05:07:64:00:c1:69:ca \ flag Parm 0x10 0x200105 Type number: 002064 Model number: Manufacturer: Plant of Manufacture: 02 Sequence Number: 0000000169CA tag: 052e To display the local LIRR database: switch:admin>...
  • Page 383 ficonShow To display the local RLIR database: switch:user> ficonshow RLIR {Fmt Type PID Port Incident Count TS Format Time Stamp 0x18 N 502e00 46 1 Time server Mon Jan 13 04:29:33 2003 Port Status: Link not operational Link Failure Type: Loss of signal or synchronization Registered Port WWN Registered Node WWN Flag...
  • Page 384 ficonShow 0x502b00 50:05:07:64:01:00:15:8d The Local ILIR database has 2 entries. SEE ALSO ficonClear Fabric OS Command Reference 53-1001764-01...
  • Page 385: Fipscfg

    fipsCfg fipsCfg Configures FIPS (Federal Information Processing Standards) mode. SYNOPSIS fipscfg --enable fips | selftests | bootprom] [-nowarn] fipscfg --disable selftests | bootprom] [-nowarn] fipscfg --zeroize [-nowarn] fipscfg --show | --showall fipscfg --force fips fipscfg --verify fips DESCRIPTION Use this command to configure FIPS mode on the switch. In this mode, only FIPS-compliant algorithms are allowed.
  • Page 386 fipsCfg --zeroize [-nowarn] Erases all passwords, shared secrets, private keys, etc. in the system. --show | --showall Displays the current FIPS configuration. --force fips This option enables FIPS mode even if prerequisites are not met, except under the following two conditions: •...
  • Page 387 fipsCfg To attempt enabling FIPS when prerequisites are not met: switch:admin> fipscfg --enable fips SelfTests mode is not enabled. Root account is enabled. Authentication uses MD5 hash algorithm. Authentication uses DH group 0. Telnet port number <23> for the policy <default_ipv4> \ is in permit state.
  • Page 388 fipsCfg 1. Delete all existing CSRs. 2. Delete all existing certificates. 3. Reset the certificate filename to none. 4. Disable secure protocols. Continue (yes, y, no, n): [no] Operation cancelled. Zeroizing Radius configuration: RADIUS configuration does not exist. LDAP configuration does not exist. Zeroizing IPSec static SA configuration.
  • Page 389: Firmwarecommit

    firmwareCommit firmwareCommit Commits switch firmware. SYNOPSIS firmwarecommit DESCRIPTION Use this command to commit a firmware download to a CP. This command copies an updated firmware image to the secondary partition and commits both partitions of the CP to an updated version of the firmware.
  • Page 390: Firmwaredownload

    firmwareDownload firmwareDownload Downloads firmware from a remote host, a local directory, or a USB device. SYNOPSIS To invoke the command in interactive mode: firmwaredownload To download FOS firmware over a network: firmwaredownload [ -s [ -b | -n ] ] [ -p ftp | scp | sftp ] host user pfile...
  • Page 391 firmwareDownload All systems supported by this firmware have two partitions of nonvolatile storage (primary and secondary) to store two firmware images. This command always downloads the new image to the secondary partition and then swaps partitions so the secondary partition becomes the primary. By default, firmwareDownload reboots the system and activates the new image.
  • Page 392 firmwareDownload Disables autocommit mode. When autocommit mode is disabled, the firmwareCommit command must be executed manually to propagate the downloaded image to both partitions of the storage device. host Specify a valid FTP or SSH server name or IP address. IPV4 and IPv6 addresses are supported.
  • Page 393 firmwareDownload Removes all of the installed SA images in the system during SAS firmware download. By default, downloading a SAS image does not remove the installed SA images. If this option is specified, the installed SA images are removed. This option is only valid with the -a sas option.
  • Page 394 firmwareDownload of this command. This command will cause a warm/non-disruptive boot on the active CP, but will require that existing telnet, secure telnet or SSH sessions sessions be restarted. To download firmware interactively: switch:admin> firmwaredownload Server Name or IP Address: 192.168.32.10 User Name: admin File Name: ~admin/dist/FOS7.0.0/ Network Protocol(1-auto-select, 2-FTP, 3-SCP, 4-SFTP) [1]:...
  • Page 395: Firmwaredownloadstatus

    firmwareDownloadStatus firmwareDownloadStatus Displays the status of a firmware download. SYNOPSIS firmwaredownloadstatus DESCRIPTION Use this command to display an event log that records the progress and status of events during a firmware download. The event log is created by the firmware download process and is kept until you issue another firmwareDownload command.
  • Page 396 firmwareDownloadStatus [5]: Fri Mar 25 16:58:44 2011 Slot 7 (CP1, standby): Firmware commit operation has started to restore the secondary partition. [6]: Fri Mar 25 16:58:45 2011 Slot 7 (CP1, standby): The firmware commit operation has started. This may take up to 10 minutes. [7]: Fri Mar 25 17:05:34 2011 Slot 7 (CP1, standby): The commit operation has completed successfully.
  • Page 397: Firmwarekeyshow

    firmwareKeyShow firmwareKeyShow Displays the public key used for signed firmware validation. SYNOPSIS firmwarekeyshow DESCRIPTION This command displays the contents of the public key used for validating the integrity of firmware images when signed firmware validation is enabled. NOTES A firmware key should be installed on every switch as a part of the Fabric OS installation. The presence of a firmware key does not imply that the firmware signature is checked during firmwareDownload.
  • Page 398: Firmwarerestore

    firmwareRestore firmwareRestore Restores the former active firmware image. SYNOPSIS firmwarerestore DESCRIPTION Use this command to restore the former active Fabric OS firmware image. This command can only be run if autocommit was disabled during the firmwareDownload process. After a firmwareDownload and a reboot (with autocommit disabled), the downloaded firmware becomes active.
  • Page 399: Firmwareshow

    firmwareShow firmwareShow Displays the firmware version and download history. SYNOPSIS firmwareshow firmwareshow --history firmwareshow --help DESCRIPTION Use this command to display the firmware versions and the firmware download history. The command shows the firmware versions on both the primary and secondary partitions of the storage device. When this command is issued while a firmware download is in process, an appropriate warning message is displayed.
  • Page 400 firmwareShow To display the firmware download history: switch:admin> firmwareshow --history Firmware version history Sno Date & Time Switch Name Slot PID FOS Version 1 Fri Feb 18 12:58:06 2011 CDCX16 1556 Fabos Version v7.0.0d 2 Wed Feb 16 07:27:38 2011 CDCX16 1560 Fabos Version v7.0.0c...
  • Page 401: Fmmonitor

    fmMonitor fmMonitor Manages frame monitor configuration. SYNOPSIS fmmonitor --create frame_type -pat bit_pattern [-port port_list] [-highth value] [-action actions] [-timebase time_base] [-nosave] fmmonitor --delete frame_type fmmonitor --show [frame_type] [-port port_list | -all] [-timeinterval interval] fmmonitor --change frame_type [-pat bit_pattern] [-highth value] [-action actions][-timebase time_base] fmmonitor --addmonitor frame_type -port port_list [-nosave] fmmonitor --delmonitor frame_type [-port port_list] [-nosave] fmmonitor --clear frame_type -port port_list...
  • Page 402 fmMonitor This command requires an Advanced Performance Monitoring license. A Fabric Watch license is optional. Without a Fabric Watch license, you cannot use the alert mechanism, but you can still configure frame monitors and observe the counters. This command is not supported on virtual FC ports (VE/VEX_Port), EX_Port, mirror ports, GbE ports, and FCoE ports.
  • Page 403 fmMonitor -pat bit_pattern Specifies a unique combination of values in the first 64 bytes of a frame. The syntax for the bit patterns is as follows: "offset,bitmask, value;[offset, bitmask,value;] ...;" for example, "12,0xFF,0x08;4,0xFF,0x06;40,0xFF,0x08, 0x28;". This example monitors for SCSI read command traffic transmitted from a port by filtering on offset 12 with a value of 0x08 (SCSI-FCP), on offset 4 with value 0x06 (unsolicited command), and on offset 40 with values of 0x08 or 0x28 (read command).
  • Page 404 fmMonitor -port port_list Specifies one or more ports on which to install the monitor for the specified frame type. This operand is optional; if omitted, the monitor is installed on all eligible ports. A port list can consist of the following: •...
  • Page 405 fmMonitor --delete frame_type Deletes an existing frame type. This command removes the entire configuration, including configured threshold and associated actions. It also removes any frame monitors of the specified type from all ports. This operand is not valid with predefined frame types. --clear frame_type -port port_list Clears the ports on which the specified frame type is monitored from the persistent configuration.
  • Page 406 fmMonitor To save the port configuration persistently: switch:admin> fmmonitor --save SCSI To delete the custom frame monitor "MyFrameMonitor" from all ports: switch:admin> fmmonitor --delmonitor MyFrameMonitor To delete the entire frame type configuration: switch:admin> fmmonitor --delete MyFrameMonitor To clear the counters for the SCSI2_READ monitor from ports 7-10: switch:admin>...
  • Page 407 fmMonitor -|scsi3reserve|N/A |None |None |N/A -|ip |N/A |None |None |N/A -|abts |N/A |None |None |N/A -|baacc |N/A |None |None |N/A 000002|beta |0000000000000145|10 |Email |None |saved To display the number of frames of type ISCSI_RW per second during a five-second interval: switch:admin>...
  • Page 408: Fosconfig

    fosConfig fosConfig Displays or modifies Fabric OS features. SYNOPSIS fosconfig --enable feature fosconfig --disable feature fosconfig --show DESCRIPTION Use this command to enable or disable a feature, or to display the current operating status of features on a switch. This command can be run while the switch is online. The following features are supported (refer to the Notes for limitations): •...
  • Page 409 fosConfig ethsw Enables the Ethernet switch service on the switch. The Ethernet switch service is disabled by default. Enabling the Ethernet switch service does not disrupt the FC traffic. --disable feature Disables a feature on the switch. Valid values for feature include the following: Disables the FC Routing service on the switch.
  • Page 410 fosConfig To enable Virtual Fabrics: switch:admin> fosconfig --enable vf WARNING: This is a disruptive operation that \ requires a reboot to take effect. All EX ports will be disabled upon reboot. Would you like to continue [Y/N]y To disable Virtual Fabrics: switch:admin>...
  • Page 411: Fosexec

    fosExec fosExec Executes a command in a specified logical switch context. SYNOPSIS fosexec --fid FID -cmd "cmd [args]" fosexec --fid all [-force] -cmd "cmd [args]" DESCRIPTION Use this command to execute any Fabric OS command on a specified logical switch context or on all logical switches.
  • Page 412 fosExec Default Switch: No, Address Mode 0] Index Slot Port Address Media Speed State Proto =================================================== 640000 No_Module 640100 No_Module 640200 No_Module To enable port 5/0 on all logical switches: switch:admin> fosexec --fid all -cmd "portenable 5/0" --------------------------------------------------- "portenable" on FID 128: --------------------------------------------------- "portenable"...
  • Page 413 fosExec To display the switch name for all logical switches without confirmation: switch:user> fosexec --fid all -force -cmd "switchname" ------------------------------------ "switchname" on FID 10: switch_10 ----------------------------------- "switchname" on FID 20: switch_20 SEE ALSO setContext, userConfig Fabric OS Command Reference 53-1001764-01...
  • Page 414: Framelog

    frameLog frameLog Displays information about discarded frames. SYNOPSIS framelog --disable framelog --enable framelog --clear framelog --show [-txport [slot/]port] [-rxport [slot/]port] [-sid source_PID][-did destination_PID] [-sfid fabric_ID] [-dfid fabric_ID>] [-mode summary | dump] [-n num_items] DESCRIPTION Use this command to disable or re-enable the frame log, and to display detailed information about the discarded frames logged by the frame log.
  • Page 415 frameLog Type Reason for the frame discard. Frames can be discarded for a variety of reasons. The only discard reason currently handled by the frame log is timeout. Count The number of discarded frames logged in the frame log that have the log timestamp, TX port, RX port, SID, DID, SFID and DFID values listed on this line of output.
  • Page 416 frameLog -sid source_PID Displays only the frames with the specified 24-bit source address in the FC header. The port ID (PID) must be written in hexadecimal and must be prefixed by -did destination_PID Displays only the frames with the specified 24-bit destination address in the FC header.
  • Page 417 frameLog Jan 31 18:34:46 7/32 7/33 timeout 00 03 a0 00 00 03 a1 00 00 28 00 00 00 00 00 00 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Jan 31 18:34:46 7/32 7/33 timeout 00 03 a0 00 00 03 a1 00 00 28 00 00 00 00 00 00...
  • Page 418: Frureplace

    fruReplace fruReplace Provides an interactive interface to help replace a field replaceable unit (FRU). SYNOPSIS frureplace fru DESCRIPTION Use this command to replace a FRU. The command automatically performs the necessary backup and restore operations to accommodate the replacement. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 419: Fspfshow

    fspfShow fspfShow Displays Fabric Shortest Path First (FSPF) protocol information. SYNOPSIS fspfshow DESCRIPTION Use this command to display FSPF protocol information and internal data structures of the FSPF module. The command displays the following fields: version Version of the FSPF protocol. domainID Domain number of the local switch.
  • Page 420 fspfShow lsrDelayTo Link State Record delay time out value in milliseconds. lsrDelayCount Counter of delayed Link State Records. ddb_sem FSPF semaphore ID. event_sch FSPF scheduled events bit map. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 421 fspfShow f_ports[9] = 0x00000000 f_ports[10] = 0x00000000 f_ports[11] = 0x00000000 f_ports[12] = 0x00000000 seg_ports[0] = 0x00000002 seg_ports[1] = 0x00000000 seg_ports[2] = 0x00000000 seg_ports[3] = 0x00000000 seg_ports[4] = 0x00000000 seg_ports[5] = 0x00000000 seg_ports[6] = 0x00000000 seg_ports[7] = 0x00000000 seg_ports[8] = 0x00000000 seg_ports[9] = 0x00000000 seg_ports[10]...
  • Page 422: Fwalarmsfilterset

    fwAlarmsFilterSet fwAlarmsFilterSet Enables or disables alarms for Fabric Watch. SYNOPSIS fwalarmsfilterset [mode] DESCRIPTION Use this command to configure alarm filtering for Fabric Watch. By turning off the alarms, all nonenvironment class alarms are suppressed. By turning on the alarms, all class alarms are generated. NOTES This command requires a Fabric Watch license.
  • Page 423: Fwalarmsfiltershow

    fwAlarmsFilterShow fwAlarmsFilterShow Displays alarm filtering for Fabric Watch. SYNOPSIS fwalarmsfiltershow DESCRIPTION Use this command to display whether alarm filtering is enabled or disabled. NOTES This command requires a Fabric Watch license. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 424: Fwclassinit

    fwClassInit fwClassInit Initializes all classes under Fabric Watch. SYNOPSIS fwclassinit DESCRIPTION Use this command to initialize all classes under Fabric Watch. The command should only be used after installing a Fabric Watch license to start licensed Fabric Watch classes. Refer to the Fabric Watch Administrator's Guide for a list of supported Fabric Watch classes.
  • Page 425: Fwconfigreload

    fwConfigReload fwConfigReload Reloads the Fabric Watch configuration. SYNOPSIS fwconfigreload DESCRIPTION Use this command to reload the Fabric Watch configuration. This command should only be used after downloading a new Fabric Watch configuration file from a host. NOTES This command requires a Fabric Watch license. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 426: Fwfrucfg

    fwFruCfg fwFruCfg Displays or modifies FRU state alert configuration. SYNOPSIS fwfrucfg [--show] DESCRIPTION Use this command to configure states and actions for field-replaceable units (FRUs) and small form-factor pluggables (SFPs). Based on these configuration settings, Fabric Watch generates actions when a FRU or SFP state changes. For SFPs, Fabric Watch monitors state changes in following events: SFP inserted, SPP removed, SFP faulty.
  • Page 427 fwFruCfg WWN Alarm State: (0..31) [1] WWN Alarm Action: (0..17) [1] SFP Alarm State: (0..19) [0] SFP Alarm Action: (0..17) [0] Fru configuration left unchanged SEE ALSO fwHelp, fwMailCfg, sfpShow Fabric OS Command Reference 53-1001764-01...
  • Page 428: Fwhelp

    fwHelp fwHelp Displays Fabric Watch command information. SYNOPSIS fwhelp DESCRIPTION Use this command to display the commands that configure Fabric Watch. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 429: Fwmailcfg

    fwMailCfg fwMailCfg Displays and configures Fabric Watch email alerts. SYNOPSIS fwmailcfg DESCRIPTION Use this command to display or modify the configuration and status of the Fabric Watch email alert on the switch. Switch elements monitored by Fabric Watch are divided into classes, and e-mail alerts are based on the classes.
  • Page 430 fwMailCfg : Filter Performance Monitor class : Security class : Resource Monitor class : FRU Class : Quit Select an item => : (0..13) [11] 1 Mail Recipient information -------------------------------------------- Email Alert = disabled Mail Recipients = NONE -------------------------------------------- : Show Mail Configuration Information : Disable Email Alert : Enable Email Alert : Send Test Mail...
  • Page 431 fwMailCfg : F/FL Port (Optical) class : Resource class : quit Select a class => : (1..6) [6] 6 Mail Recipient Information ____________________________________ Email Alert = disabled Mail Recipient = NONE : Show Mail Configuration Information : Disable Email Alert : Enable Email Alert : Send Test Mail : Set Recipient Mail Address for Email Alert...
  • Page 432: Fwportdetailshow

    fwPortDetailShow fwPortDetailShow Displays the port information for specified user ports. SYNOPSIS fwportdetailshow [--p port] | [--s portState] DESCRIPTION Use this command to print the overall status of a specified port. The output of this command is different for IPv4 and IPv6 addresses. The overall status is calculated based on the following contributors: Port Errors The number of link loss occurrences exceeding the limit for the time period.
  • Page 433 fwPortDetailShow When used without operands, this command displays information for all ports. NOTES This command requires a Fabric Watch license. Port errors are not supported for virtual ports and SFP errors are not applicable for virtual ports. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 434 fwPortDetailShow To retrieve a port detail report for all ports in healthy state: switch:user> fwportdetailshow --s h Port Detail Report Report time: 05/21/2007 11:22:58 PM Switch Name: switch IP address: 192.168.163.237 Port Exception report [by Healthy] --------Port-Errors------------ Port# Type State Dur(H:M) LFA LSY LSI PER INW \ ------------------------------------------------\ HEALTHY...
  • Page 435: Fwsamshow

    fwSamShow fwSamShow Generates switch availability monitor (SAM) report. SYNOPSIS fwsamshow DESCRIPTION Use this command to display a switch availability monitor (SAM) report. This report displays uptime and downtime for each port and enables you to check if a particular port is failing more often than the others. The information displayed includes total uptime, total downtime, number of faulty occurrences, and total percent of downtime for each port.
  • Page 436: Fwset

    fwSet fwSet Sets port persistence time. SYNOPSIS fwset --port --persistence seconds DESCRIPTION Use this command to set port persistence time, a parameters controlled by Fabric Watch. Port persistence time specifies the time in seconds during which a port must persistently be in a marginal state before being labeled as such.
  • Page 437: Fwsettocustom

    fwSetToCustom fwSetToCustom Sets Fabric Watch thresholds and alarm levels to custom values. SYNOPSIS fwsettocustom DESCRIPTION Use this command to set threshold and alarm levels to custom values for all Fabric Watch classes and areas. Fabric Watch uses two types of settings: factory default settings and user-defined custom settings. •...
  • Page 438 fwSetToCustom Trigger : Above Action: None Trigger : Below Action: Raslog,SNMP Default: TimeBase: None Value Trigger : Above Action: None Trigger : Below Action: Raslog,SNMP Buffer: Custom: Value : 20 Default: Value : 10 Class: RESOURCE Area : FLASH ThLevel : Cust (Applied) ActLevel: Def High Custom:...
  • Page 439: Fwsettodefault

    fwSetToDefault fwSetToDefault Returns Fabric Watch thresholds and alarm levels to default values. SYNOPSIS fwsettodefault DESCRIPTION Use this command to return Fabric Watch thresholds and alarm levels to defaults for all classes and areas in Fabric Watch. Fabric Watch uses two types of settings: factory default settings and user-defined custom settings. •...
  • Page 440 fwSetToDefault Value Trigger : Above Action: None Trigger : Below Action: Raslog,SNMP Buffer: Custom: Value : 20 Default: Value : 10 Class: RESOURCE Area : FLASH ThLevel : Def ActLevel: Def High Custom: TimeBase: None Value : 110 Trigger : Above Action: Raslog,SNMP Trigger : Below Action: Raslog Default: TimeBase: None...
  • Page 441: Hadisable

    haDisable haDisable Disables the High Availability feature. SYNOPSIS hadisable DESCRIPTION Use this command to disable the High Availability (HA) feature on a switch. If the HA feature is already disabled, this command does nothing. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 442: Hadump

    haDump haDump Displays High Availability status information. SYNOPSIS hadump DESCRIPTION Use this command to display information about the status of the High Availability (HA) feature on a switch or a chassis. This command displays the following information: • Time Stamp •...
  • Page 443 haDump NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. OPERANDS None EXAMPLES To view information about the High Availability feature status on a Brocade DCX 8510-8: switch:admin>...
  • Page 444: Haenable

    haEnable haEnable Enables the High Availability feature. SYNOPSIS haenable DESCRIPTION Use this command to enable the High Availability (HA) feature on a switch. If the HA feature is already enabled, this command has no effect. If the HA feature is disabled, this command enables it. The standby CP reboots as part of the process. The command displays a warning message and prompts for confirmation before rebooting the CP.
  • Page 445: Hafailover

    haFailover haFailover Forces the failover mechanism so that the standby control processor (CP) becomes the active CP. SYNOPSIS hafailover DESCRIPTION Use this command to force the failover mechanism to occur so that the standby CP becomes the active CP. In case the active and standby CPs are not synchronized or the system is not in redundant mode, the command aborts.
  • Page 446: Hashow

    haShow haShow Displays control processor (CP) status. SYNOPSIS hashow DESCRIPTION Use this command to display the control processor status. The display includes the following information: • Local CP state (slot number and CP ID), warm or cold, recovering or recovered. •...
  • Page 447 haShow OPERANDS None EXAMPLES To display CP status on a Brocade DCX 8510-8 with a healthy standby CP: switch:admin> hashow Local CP (Slot 7, CP1) : Active, Warm Recovered Remote CP (Slot 6, CP0) : Standby, Healthy HA Enabled, Heartbeat Up, HA State Synchronized SEE ALSO haDisable, haEnable, haFailover...
  • Page 448: Hasyncstart

    haSyncStart haSyncStart Enables High Availability state synchronization. SYNOPSIS hasyncstart DESCRIPTION Use this command to enable the High Availability (HA) state synchronization. After issuing haSyncStop, the switch does not go back to sync start unless you perform one of the following actions: reboot the active CP, reboot the standby CP, insert a new standby CP (blade), or issue the haSyncStart command The time it takes for the HA sync to complete depends on the system configuration.
  • Page 449: Hasyncstop

    haSyncStop haSyncStop Disables High Availability state synchronization. SYNOPSIS hasyncstop DESCRIPTION Use this command to temporarily disable High Availability (HA) synchronization. After issuing haSyncStop, the switch does not go back to sync start unless you perform one of the following actions: reboot the active CP, reboot the standby CP, insert a new standby CP (blade), or issue the haSyncStart command The time it takes for the HA sync to complete depends on the system configuration.
  • Page 450: Help

    help help Displays command help information. SYNOPSIS help [command] help [-p | -page] help --help DESCRIPTION Use this command without operands to display an alphabetical listing of commands for which help is available. When used without an operand, the command listing displays without page break. Pipe the output through the Unix grep command to filter the output.
  • Page 451 help Tuning policy auditcfg Modifies and displays audit log filter configuration. auditdump Display audit log (output truncated) To search for the string "zone" while paging is enabled (enter /zone after issuing the command): switch:admin> help -p aaaconfig Configure RADIUS for AAA services Specifies all administration domain (AD)-level operations Configure the Access Gateway feature...
  • Page 452 Displays shell history. SYNOPSIS history DESCRIPTION Use this command to view the shell history. The shell history mechanism is similar to the UNIX shell history facility. The h command displays the 20 most recent commands typed into the shell; the oldest commands are replaced as new ones are entered.
  • Page 453: Historylastshow

    historyLastShow historyLastShow Displays the latest entry in the field replaceable unit (FRU) history log. SYNOPSIS historylastshow DESCRIPTION Use this command to display the latest entry of the history log, which records insertion and removal events for field-replaceable units (FRUs), such as blades, power supplies, fans, and world wide name (WWN) cards.
  • Page 454: Historymode

    historyMode historyMode Displays the mode of the field replaceable unit (FRU) history log. SYNOPSIS historymode DESCRIPTION Use this command to display the mode of the history buffer, which records the insertion and removal of FRUs on a switch or chassis. This command supports two modes of handling new log entries once the history buffer has reached its maximum size: Rotating mode...
  • Page 455: Historyshow

    historyShow historyShow Displays the entire field replaceable unit (FRU) history log. SYNOPSIS historyshow DESCRIPTION Use this command to display the entire history log, which records insertion and removal events for field-replaceable units (FRUs), such as blades, power supplies, fans, and world wide name (WWN) cards.
  • Page 456 historyShow Unit 3 Inserted at Tue Aug 14 10:23:45 2001 Factory Part Number: 20-123456-12 Factory Serial Number: 1013456800 Unit 1 Inserted at Tue Aug 14 11:03:45 2001 Factory Part Number: 40-0000031-03 Factory Serial Number: 1013456800 SW BLADE Slot 3 Removed at Tue Aug 14 12:10:09 2001 Factory Part Number: 60-0001532-03 Factory Serial Number:...
  • Page 457 Displays a process summary. SYNOPSIS i [processID] DESCRIPTION Use this command to display information about a specified process or about all processes running on the local switch. One line is displayed per process. Fields displayed with this command include the Process flags: ALIGNWARN 001 print alignment warning messages...
  • Page 458 Processor utilization for scheduling Priority number of the process; higher numbers mean lower priority Nice value used in priority computation ADDR Memory address of the process The total size of the process in virtual memory, in pages WCHAN The address of an event for which a process is sleeping (if blank, process is running) The controlling terminal of the process (? displayed for no controlling terminal) TIME...
  • Page 459: Iclcfg

    iclCfg iclCfg Enables or disables Inter-chassis links (ICL). SYNOPSIS iclcfg --enable slot/icl_group iclcfg --disable slot/icl_group iclcfg --persistentenable slot/icl_group iclcfg --persistentdisable slot/icl_group iclcfg --help DESCRIPTION Use this command to enable or disable an inter-chassis link (ICL) or to enable or disable an ICL persistently.
  • Page 460 iclCfg To disable the ICL for ports 16-31 persistently: iclcfg --persistentdisable 8/1 switch:user> To enable the ICL for ports 16-31 persistently: iclcfg --persistentdnable 8/1 switch:user> SEE ALSO None Fabric OS Command Reference 53-1001764-01...
  • Page 461: Ifmodeset

    ifModeSet ifModeSet Sets the link operating mode for a network interface. SYNOPSIS ifmodeset ["interface"] DESCRIPTION Use this command to set the link operating mode for a network interface. An operating mode is confirmed with a y or yes at the prompt. If the operating mode selected differs from the current mode, the change is saved and the command exits.
  • Page 462 ifModeSet Advertise 100 Mbps / Full Duplex (yes, y, no, n): [yes] y Advertise 100 Mbps / Half Duplex (yes, y, no, n): [yes] y Advertise 10 Mbps / Full Duplex (yes, y, no, n): [yes] y Advertise 10 Mbps / Half Duplex (yes, y, no, n): [yes] y Committing configuration...done.
  • Page 463: Ifmodeshow

    ifModeShow ifModeShow Displays the link operating mode and MAC address for a network interface. SYNOPSIS ifmodeshow interface DESCRIPTION Use this command to display the link operating mode and MAC address for a network interface. On the CP of a Brocade DCX or DCX-S4, this command supports eth0 and eth3 as interface parameters.
  • Page 464 ifModeShow To display the active interface: ras010:root> ifmodeshow bond0 Currently Active Slave: eth0 SEE ALSO ifModeSet Fabric OS Command Reference 53-1001764-01...
  • Page 465: Interfaceshow

    interfaceShow interfaceShow Displays FSPF interface information. SYNOPSIS interfaceshow [slot/][port] DESCRIPTION Use this command to display the two data structures associated with FSPF interfaces (E_Ports) on the switch: • The permanently allocated interface descriptor block (IDB). • The neighbor data structure. This data structure is allocated when a switch port becomes an E_Port. The neighbor data structure contains all the information relating to the switch that is connected to an adjacent switch.
  • Page 466 interfaceShow downReason Type of last State Change Notification that caused this interface to go down. iState Current state of this interface. The state can be UP or DOWN. An interface in DOWN state does not have an allocated neighbor data structure and cannot be used to route traffic to other switches.
  • Page 467 interfaceShow helloTo Hello timeout value, in milliseconds. When this timeout expires, a Hello frame is sent to the neighbor switch through this port. rXmitTo Retransmission timeout value, in milliseconds. It is used to transmit topology information to the neighbor switch. If no acknowledgement is received within this value, the frame is retransmitted.
  • Page 468 interfaceShow When invoked without operands, this command displays the interface information for all ports on the switch (including non-E_Ports). EXAMPLES To display FSPF interface information: switch:user> interfaceshow 1/4 idbP = 0x1008b3d0 Interface 4 data structure: nghbP = 0x1008c668 ifNo masterPort = 4 (self) defaultCost = 500...
  • Page 469 interfaceShow nHloOut attLsuOut nLsuOut attLsaOut nLsaOut SEE ALSO nbrStateShow, portShow, switchShow Fabric OS Command Reference 53-1001764-01...
  • Page 470: Iodreset

    iodReset iodReset Disables in-order delivery (IOD) on a switch. SYNOPSIS iodreset DESCRIPTION Use this command to disable in-order delivery enforcement on the local switch. IOD is disabled by default, and can only be disabled after it has been enabled with the iodSet command. This command disables the legacy IOD enforcement only.
  • Page 471: Iodset

    iodSet iodSet Enables in-order delivery (IOD). SYNOPSIS iodset iodset --help DESCRIPTION Use this command to enforce in-order delivery of frames during a fabric topology change. In a stable fabric, frames are always delivered in order, even when the traffic between switches is shared among multiple paths.
  • Page 472: Iodshow

    iodShow iodShow Displays the in-order delivery (IOD) setting. SYNOPSIS iodshow DESCRIPTION Use this command to display the IOD setting on the switch. By default, IOD is disabled. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 473: Ipaddrset

    ipAddrSet ipAddrSet Sets the Ethernet and FC IP addresses. SYNOPSIS ipaddrset [-ipv6 ] [--add x:x:x:x:x:x:x/n | --delete] ipaddrset [-cp cp_number | -chassis] [-ipv6 ] [--add x:x:x:x:x:x:x/n | --delete] ipaddrset [-slot slot] [-eth0 | -eth1] [--add x.x.x.x/n | --delete] ipaddrset [-slot slot] -gate [--add x.x.x.x | --delete] ipaddrset -ls FID --add IPv4_address/prefix ipaddrset -ls FID --delete ipaddrset -ipv6 [-auto | -noauto]...
  • Page 474 ipAddrSet • Use the -auto and -noauto options to enable or disable stateless IPv6 autoconfiguration. • Use the -ls option with appropriate arguments to set or delete the IPv4 Fibre Channel address and prefix for the IPFC interface of a logical switch. In a Virtual Fabric environment, each logical fabric is represented by a separate IPFC network interface.
  • Page 475 ipAddrSet -ipv6 [-auto | -noauto] Enables or disables stateless IPv6 autoconfiguration on a switch or chassis. When autoconfiguration is enabled, the host automatically performs configuration of IPv6 addresses and periodic nondisruptive reconfiguration. By default, autoconfiguration is disabled. -ls FID Specifies the logical fabric ID for which to configure an IPFC network interface. The FID is a decimal number.
  • Page 476 ipAddrSet To configure an IPv4 FC address for the IPFC interface associated with a logical switch with fabric ID 123: switch:admin> ipaddrset -ls 123 --add 11.1.2.4/24 IP address is being changed...Done. To verify the IPv4 FC address for the logical switch: switch:admin>...
  • Page 477 ipAddrSet To enable DHCP on a standalone, non-AP platform: switch:admin> ipaddrset Ethernet IP Address [192.168.74.102]: Ethernet Subnetmask [255.255.255.0]: Gateway IP Address [192.168.74.1]: DHCP [Off]: on SEE ALSO ipAddrShow Fabric OS Command Reference 53-1001764-01...
  • Page 478: Ipaddrshow

    ipAddrShow ipAddrShow Displays IP address information for a switch or control processor (CP). SYNOPSIS ipaddrshow ipaddrshow [-cp cp_number] | -chassis ipaddrshow -slot slot [-eth0 | -eth1 | -gate DESCRIPTION Use this command to display the IP addresses configured in the system. The -cp option displays the IP address for a specified CP on modular platforms, or use the command without arguments to display the IP address on a standalone switch, or the IP addresses for both CPs on a chassis.
  • Page 479 ipAddrShow Refer to the RFC 2462 specification for more information. On modular platforms with intelligent blades, the addresses configured for each slot can be shown with the -slot option. On standalone platforms, all command options are ignored. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 480 ipAddrShow chassis 0 stateless fd00:60:69bc:63:205:1eff:fe39:e45a/64 preferred chassis 0 stateless fec0:60:69bc:63:205:1eff:fe39:e45a/64 preferred cp 0 stateless fd00:60:69bc:63:205:1eff:fe40:6230/64 preferred cp 0 stateless fec0:60:69bc:63:205:1eff:fe40:6230/64 preferred cp 1 stateless fd00:60:69bc:63:205:1eff:fe39:ff2a/64 preferred cp 1 stateless fec0:60:69bc:63:205:1eff:fe39:ff2a/64 preferred IPv6 Gateways: cp 0 fe80:60:69bc:63::3 cp 0 fe80:60:69bc:63::1 cp 0 fe80:60:69bc:63::2 cp 1 fe80:60:69bc:63::1 cp 1 fe80:60:69bc:63::2 cp 1 fe80:60:69bc:63::3...
  • Page 481: Ipfilter

    ipFilter ipFilter Manages the IP filter policies. SYNOPSIS ipfilter --create policyname -type ipv4 | ipv6 ipfilter --clone policyname -from src_policyname ipfilter --show [-a] [policyname] ipfilter --save [policyname] ipfilter --activate policyname ipfilter --delete policyname ipfilter --addrule policyname -rule rule_number[ -sip source_IP] -dp destination_port -proto protocol -act permit | deny [-type INPUT | FWD] [-dip destination_IP] ipfilter --delrule policyname -rule rule number...
  • Page 482 ipFilter OPERANDS This command has the following operands: policyname Specifies an IP filter policy name. The policy name is a unique string composed of a maximum of 20 alphanumeric or underscore characters. The default_ipv4 and default_ipv6 names are reserved for default IP filter policies. The policy name is case-insensitive and is always stored as lower case.
  • Page 483 ipFilter The following arguments are supported with the --addrule option: -sip source_IP Specifies the source IP address. For filters of type IPv4, the address must be a 32-bit address in dot notation, or a CIDR-style IPv4 prefix. For filters of type IPv6, the address must be a 12- bit IPv6 address in any format specified by RFC3513, or a CIDR-style IPv6 prefix.
  • Page 484 ipFilter To add a new rule to the policy and specify the source IP address, destination port, and protocol, and to permit the rule: switch:admin> ipfilter --addrule ex1 -sip fec0:60:69bc:60:260:69ff:fe80:d4a -dp 23 -proto tcp -act permit To display all existing IP filter policies: switch:admin>...
  • Page 485 ipFilter 600 - 1023 permit 600 - 1023 permit Name: default_ipv6, Type: ipv6, State: defined Rule Source IP Protocol Dest Port Action permit permit permit permit permit permit permit permit permit permit 600 - 1023 permit 600 - 1023 permit Name: ex1, Type: ipv6, State: active Rule Source IP...
  • Page 486 ipFilter switch:admin> ipfilter --show Name: default_ipv4, Type: ipv4, State: active Name: default_ipv4, Type: ipv4, State: active Rule Source IP Protocol Dest Port Action permit permit permit permit permit permit permit permit permit permit 600 - 1023 permit 600 - 1023 permit Name: ex2, Type: ipv4, State: defined Rule Source IP...
  • Page 487 ipFilter 600-1023 Name: ex2, Type: ipv4, State: defined (modified) Rule Source_IP Proto Dest_Port Action Flow Destination_IP 10.32.69.99 10.32.69.99 SEE ALSO policy, distribute Fabric OS Command Reference 53-1001764-01...
  • Page 488: Ipsecconfig

    ipSecConfig ipSecConfig Configures Internet Protocol security (IPSec) policies for Ethernet management interfaces. SYNOPSIS ipsecconfig --enable [default] --disable ipsecconfig --add | --modify type [subtype] [arguments] ipsecconfig --delete [type] arguments ipsecconfig --flush manual-sa ipsecconfig --show type [subtype] arguments ipsecconfig --help [command_type subtype] DESCRIPTION Use this command to configure the Internet Protocol Security (IPSec) feature for traffic flows on switch Ethernet management interfaces, or to display the current configuration.
  • Page 489 ipSecConfig • Flush existing SAs from the kernel SA database (SADB). • Display policy parameters. Representation of IP addresses When configuring IPSec policies, IP addresses and ports must be specified in the following format: IP address IPv4 addresses are expressed in dotted decimal notation consisting of numeric characters (0-9) and periods (.), for example, 203.178.141.194.
  • Page 490 ipSecConfig type Specifies the policy to be created. Supported policies include the following: policy ips Creates or modifies an IPSec policy. This policy determines the security services afforded to a packet and the treatment of a packet in the network. An IPSec policy allows classifying IP packets into different traffic flows and specifies the actions or transformations performed on IP packets on each of the traffic flows.
  • Page 491 ipSecConfig -mode tunnel | transport Specifies the IPSec transform mode. In tunnel mode, the IP datagram is fully encapsulated by a new IP datagram using the IPSec protocol. In transport mode, only the payload of the IP datagram is handled by the IPSec protocol inserting the IPSec header between the IP header and the upper-layer protocol header.
  • Page 492 ipSecConfig -tag name Specifies a name for the SA. This is a user-generated name. The name must be between 1 and 32 characters in length, and may include alphanumeric characters, dashes (-), and underscores (_). This operand is required. -protocol ah | esp Specifies the IPSec protocol.
  • Page 493 ipSecConfig -id identifier Specifies the local identifier. The switch is identified by its IPv4 or IPv6 address. -remoteid identifier Specifies the peer identifier. The remote peer is identified by its IPv4 or IPv6 address. -enc algorithm Specifies the encryption algorithm. Valid encryption algorithms include the following: 3des_cbc DES algorithm...
  • Page 494 ipSecConfig The following operands are optional (use secCertUtil to import the key files to the local and remote systems) -psk file Specifies the preshared key filename. -pubkey file Specifies the public key filename (in X.509 PEM format). -privkey file Specifies the private key filename (in X.509 PEM format). -peerpubkey file Specifies the peer public key filename (in X.509 PEM format).
  • Page 495 ipSecConfig -ipsec ah | esp Specifies the IPSec protocol. Encapsulating Security Payload (ESP) provides confidentiality, data integrity and data source authentication of IP packets, and protection against replay attacks. Authentication Header (AH) provides data integrity, data source authentication, and protection against replay attacks but, unlike ESP, does not provide confidentiality.
  • Page 496 ipSecConfig --delete Deletes a specified policy or all policies of a certain typefrom the configuration database. You can delete IPSec policies, IKE policies, and SADB entries. When deleting IPSec policies, you have the option to delete specific components only, such as the transform or the selector, and recreate these components without having to recreate the entire policy.
  • Page 497 ipSecConfig type Specifies the policy to be displayed. Valid values for type include the following: policy ips Displays the IPSec policy configuration. A policy subtype must be specified when displaying the IPSec policy configuration. Valid subtypes include the following: selector Displays IPSec selector parameters including IPSec policy name, IP address of the local entity, IP address of the remote entity, direction of traffic flow (inbound or outbound), upper layer protocol used, and IPSec transform index.
  • Page 498 ipSecConfig Create an IPSec SA policy named AH01, which uses AH protection with MD5. switch:admin> ipsecconfig --add policy ips sa -t AH01 -p ah -auth hmac_md5 Create an IPSec proposal IPSEC-AH to use AH01 as SA. switch:admin> ipsecconfig --add policy ips sa-proposal -t IPSEC-AH -sa AH01 Configure the SA proposal's lifetime in time units.
  • Page 499 ipSecConfig Create an IPSec proposal IPSEC-ESP to use ESP01 as the SA. switch:admin> ipsecconfig --add policy ips sa-proposal -t IPSEC-ESP -sa ESP01 Configure the SA proposal lifetime in seconds. switch:admin> ipsecconfig --add policy ips sa-proposal -t IPSEC-ESP -lttime 280000 -sa ESP01 Import the public key for the BROCADE300 (Brocade300.pem), the private key for BROCADE300 (Brocade300-key.pem), and the public key of the external host (remote-peer.pem) in X.509 PEM format from the remote certificate server (10.6.103.139).
  • Page 500 ipSecConfig Example 3 The following example illustrates how to secure traffic between two systems using AH with SHA1 and ESP protection with 3DES and configure IKE with preshared keys. The two systems are a switch, a Brocade 300 (IP address 10.33.74.13), and an external UNIX host (IPv4 address 10.33.69.132). On the system console, log in to the switch as Admin and enable IPSec.
  • Page 501 ipSecConfig Example 4 The following example illustrates how to secure traffic between two systems using protection with MD5 and Manually keyed SAs. The two systems are a switch, the BROCADE300 (IPv4 address 10.33.74.13), and an external UNIX host (IPv4 address 10.33.69.132). On the system console, log in to the switch as Admin and enable IPSec.
  • Page 502 ipSecConfig created: Oct 15 23:34:55 2008 current: Oct 15 23:35:06 2008 diff: 11(s) hard: 2621440(s) soft: 2137448(s) last: Oct 15 23:34:55 2008 hard: 0(s) soft: 0(s) current: 540(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 5 hard: 0 soft: 0 sadb_seq=0 pid=10954 refcnt=0 To display a specified IPSec SA: switch:admin>...
  • Page 503 ipSecConfig switch:admin> ipsecconfig --help modify policy ike Usage: ipsecConfig --modify policy ike ARGUMENTS ARGUMENTS -tag <name> ike policy name -remote <addr> peers ipaddress -id <identifier> local identifier -remoteid <identifier> peers identifier -enc <ALGORITHM> encryption algorithm -hash <ALGORITHM> hash algorithm -prf <ALGORITHM> prf algorithm -dh <number>...
  • Page 504: Islshow

    islShow islShow Displays interswitch link (ISL) information. SYNOPSIS islshow DESCRIPTION Use this command to display the current connections and status of the interswitch link (ISL) for each port on a switch. The command output includes the following information: • Node world wide name (WWN) •...
  • Page 505 islShow 6:162->160 10:00:00:60:69:e2:09:fa 5 B2400 \ sp:-------- bw: 0.001G 7:384-> 16 10:00:00:05:1e:37:02:73 39 DCX \ sp:-------- bw: 10.000G 8:385-> 16 10:00:00:05:1e:37:02:73 43 B53000 \ sp:-------- bw: 11.000G To display interswitch links with encryption or compression enabled: switch:user> islshow 1: 33-> 29 10:00:00:60:69:80:4f:84 3 B3200 2.000G bw: 4.000G TRUNK ENCRYPT...
  • Page 506: Itemlist

    itemList itemList Lists parameter syntax information. SYNOPSIS item_list = element | element white item_list element = item | item - item item = num | slot [white]/ [white] num slot = num num = hex | int int = int digit | digit hex = 0x hex digit | hex hex digit digit = 0|1|2|3|4|5|6|7|8|9 hex digit = digit |A|B|C|D|E|F|a|b|c|d|e|f...
  • Page 507 itemList within the current switch (selected during Telnet login) are tested. When specified in an item list, user ports might be specified by either the area portion of the ports Fibre Channel address or with slot/port notation. For nonblade systems, the port number on the silkscreen is the area number, so the two notations are identical.
  • Page 508: Killtelnet

    killTelnet killTelnet Terminates an open Telnet session. SYNOPSIS killtelnet DESCRIPTION Use this command to terminate an open Telnet session. The command lists all current Telnet and serial port login sessions and information such as session number, login name, idle time, IP address of the connection, and timestamp of when the login session was opened.
  • Page 509: Ldapcfg

    ldapCfg ldapCfg Maps LDAP AD server roles to default switch roles. SYNOPSIS ldapcfg --maprole ldaprole switchrole ldapcfg --unmaprole ldaprole ldapcfg --show ldapcfg --help DESCRIPTION Use this command to map a Lightweight Directory Access Protocol (LDAP) Active Directory (AD) server role to one of the default roles available on a switch. This command also provides an option to remove an existing mapping.
  • Page 510 ldapCfg --unmaprole Removes the mapping between an LDAP role and a switch role. Use the --show option for a listing of existing mappings. The following operand is required: ldaprole Specifies the LDAP AD sever role to be removed from the mapping. --show Displays a table of existing mappings between LDAP roles and their corresponding switch role.
  • Page 511: Lfcfg

    lfCfg lfCfg Configures and displays logical fabrics. SYNOPSIS lfcfg [--show | --showall] -cfg lfcfg [--show | --showall] -lisl [-v] lfcfg [--show -xisl [slot/]port | --showall -xisl lfcfg --lislenable lfcfg --help DESCRIPTION Use this command to display logical fabric configuration information, to determine the status of logical interswitch links (LISLs), to enable LISLs between logical switches, and to display information about the XISLs and LISLs associated with each XISL.
  • Page 512 lfCfg Port Number of the logical LISL port. remote-domain Domain ID of the base switch in the remote chassis. Name Switch name. State Port state: Online or Offline. Associated physical ports Physical ports associated with the LISL ports. When lfCfg is issued within a logical switch context, only the configuration regarding that switch and the fabrics reachable from that switch is displayed.
  • Page 513 lfCfg --lislenable Re-enables all LISLs in the fabric that were disabled because of some conflict or error condition in the fabric. This command provides the option of manually reestablishing the LISLs after the error condition has been resolved. --help Displays the command usage. EXAMPLES To display logical fabric information for FID 2 in all chassis reachable from the base fabric.
  • Page 514 lfCfg Displays status information about the LISLs in the logical switch set by the context: switch:admin> lfcfg --show -lisl -v ID Port# remote-domain Name State Associated Physical Ports PT Online 1/29, 2/41, 3/33, 4/24 To display information about all LISLs in the chassis: switch:admin>...
  • Page 515: Licenseadd

    licenseAdd licenseAdd Adds a license key to a switch. SYNOPSIS licenseadd license DESCRIPTION Use this command to add a license key to a switch. Some features of the switch and the fabric to which it is connected are optional, licensed products. Without a valid license installed for such products, their services are not available.
  • Page 516: Licensehelp

    licenseHelp licenseHelp Displays commands used to administer license keys. SYNOPSIS licensehelp DESCRIPTION Use this command to display a list of the commands used to administer license keys. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 517: Licenseidshow

    licenseIdShow licenseIdShow Displays the system license ID. SYNOPSIS licenseidshow DESCRIPTION Use this command to display the license ID of the system. Some features of the switch and the fabric are optional, licensed products. Without a license installed for such products, the services provided by these features are not available. This command displays the system license ID used for generating and validating licenses on the system.
  • Page 518: Licenseport

    licensePort licensePort Manages Dynamic Ports On Demand (DPOD) licenses. SYNOPSIS licenseport --release port licenseport --reserve port licenseport --show licenseport --method dynamic | static DESCRIPTION Use this command to manage and display Dynamic Ports on Demand (DPOD) license assignments. Dynamic Ports On Demand (DPOD) is an optional feature available on all embedded platforms. DPOD takes the expansion capability of static Ports On Demand (POD) and adds the flexibility of activating any available port as long as a valid license is available.
  • Page 519 licensePort EXAMPLES To activate Dynamic Ports On Demand: switch:admin> licenseport --method dynamic The POD method has been changed to dynamic. Please reboot the switch now for this change to take effect. To release a port from a Dynamic POD license assignment and to display the assignments: switch:admin>...
  • Page 520 licensePort To disable Dynamic Ports On Demand: switch:admin> licenseport --method static The POD method has been changed to static. Please reboot the switch now for this change to take effect. SEE ALSO licenseAdd, licenseHelp, licenseRemove, licenseShow, licenseShow Fabric OS Command Reference 53-1001764-01...
  • Page 521: Licenseremove

    licenseRemove licenseRemove Removes or deactivates a license key. SYNOPSIS licenseremove license DESCRIPTION Use this command to remove an existing license key from a switch or to deactivate the license key. The existing license key must be entered exactly as shown by the licenseShow command. License keys are case-sensitive.
  • Page 522 licenseRemove Enhanced Group Management license XFJXYHmPtCWC93CLgBD9BZD9AmTFgDStFDJGMaLKC9FgWAfgSE: 8 Gig FC license Expiry Date 03/06/2009 License is expired Hf7MBEEGCFNmTAWXXF99RtHXQN4RRtM3mLGtrWZLAMaTaAY9EB: Storage Application Services license Expiry Date 03/07/2009 SEE ALSO licenseAdd, licenseHelp, licenseIdShow, licenseShow Fabric OS Command Reference 53-1001764-01...
  • Page 523: Licenseshow

    licenseShow licenseShow Displays current license keys. SYNOPSIS licenseshow DESCRIPTION Use this command to display current license keys, along with a list of licensed products enabled by these keys. Depending on the type of license, this command displays the following information: Permanent licenses •...
  • Page 524 licenseShow Fabric Watch license RyeSzRScycazfT0G: Trunking license RyeSzRScycS0fT09: 4 Domain Fabric license To display the license keys on a switch with temporary (expired) licenses installed: switch:admin> licenseShow 7QmYFYJrmDgE9tTS4AYXB9trYSGtMtrQZSTK4ZSC7FC9ZAYAgE: Integrated Routing license Expiry Date 01/16/2008 License is expired 33YBfZfKZ3tQKrRJJRtgmS3JDtCL99P4fYrJYQP7GffS4ASmNE: Enterprise Bundle license Expiry Date 01/16/2008 License is expired To display the license keys on a switch with universal time-based licenses:...
  • Page 525 licenseShow To display an ICL license on a Brocade DCX before and after a firmware upgrade to Fabric OS v7.0.0. switch:admin> licenseshow X3ffNTZM9CNmM4SKFLYTGS4WmCRCgAZZBJDTB: Inter Chassis Link (16 link) license switch:admin> licenseshow X3ffNTZM9CNmM4SKFLYTGS4WmCRCgAZZBJDTB: Inter Chassis Link (16 link) license SEE ALSO licenseAdd, licenseHelp, licenseIdShow, licenseRemove Fabric OS Command Reference...
  • Page 526: Licenseslotcfg

    licenseSlotCfg licenseSlotCfg Configures and displays slot-based licensed features. SYNOPSIS licenseslotcfg --add feature slot licenseslotcfg --remove feature slot licenseslotcfg --show licenseslotcfg --help DESCRIPTION Use this command to configure and manage licenses for the Brocade FX8-24 extension blade on the slot where the blade is installed. Slot-based licenses allow you to select the slots the license will enable up to the purchased capacity and thereby increase existing capacity without disrupting the slots for which licensed features are already enabled.
  • Page 527 licenseSlotCfg --show Displays all slot-based licenses in the chassis. --help Displays the command usage. EXAMPLES To add a license key for the slot-based Advance Extension feature for eight slots: switch:admin> licenseadd DXXtN3LmRSMWCSW3XmfSBPfrWKLZ3HMTN73rP9GANJMA adding license-key \ [DXXtN3LmRSMWCSW3XmfSBPfrWKLZ3HMTN73rP9GANJMA] To display the installed license (new license in bold): switch:admin>...
  • Page 528 licenseSlotCfg A7N9rATZLYgFa7JBfmGEJKETgCMHFGQMY4gfLmGAa4GA: Advanced FICON Acceleration (FTR_AFA) license Capacity 6 Consumed 2 Configured Blade Slots 3,4 DXXtN3LmRSMWCSW3XmfSBPfrWKLZ3HMTN73rP9GANJMA: Advanced Extension (FTR_AE) license Capacity 8 Consumed 4 Configured Blade Slots 3,4,11,12 switch:admin> licenseslotcfg --show FTR_10G license - blade slots configured = 1,3,5,12 FTR_AE license - blade slots configured = 3,4,11,12 FTR_AFA license - blade slots configured = 3,4 To deactivate the Advanced Extension license on slots 3 and 12, and to display the: results: switch:admin>...
  • Page 529 licenseSlotCfg Expiry Date 03/06/2009 License is expired Hf7MBEEGCFNmTAWXXF99RtHXQN4RRtM3mLGtrWZLAMaTaAY9EB: Storage Application Services license Expiry Date 03/07/2009 To remove the Advanced Extension license completely (marked inactive): switch:admin> licenseremove \ DXXtN3LmRSMWCSW3XmfSBPfrWKLZ3HMTN73rP9GANJMA removing license-key [DXXtN3LmRSMWCSW3XmfSBPfrWKLZ3HMTN73rP9GANJMA] switch:admin> licenseshow SSezcSec9RXTf0dj: Performance Monitor license KgrfCBHgRtfBrGKH4D7f9S3FBX7K3MtTtBHKrYHA4CMB: 10 Gigabit Ethernet (FTR_10G) license Capacity 8 Consumed 4 Configured Blade Slots 1,3,5,12...
  • Page 530: Linkcost

    linkCost linkCost Sets or displays the Fabric Shortest Path First (FSPF) cost of a link. SYNOPSIS linkcost [[slot/]port [cost]] DESCRIPTION Use this command to set or display the cost of an interswitch link (ISL). The cost of a link is a dimensionless positive number.
  • Page 531 linkCost (E_PORT) 1/10 1/11 1/12 1/13 1/14 1/15 Type <CR> to continue, Q<CR> to stop: To set the ISL cost on a port: switch:admin> linkcost 1/9 1000 To display the new cost value on the same port: switch:admin> linkcost 1/9 Interface1/9 (E_PORT) Cost...
  • Page 532: Login

    login login Logs in as new user. SYNOPSIS login DESCRIPTION Use this command to log in to the switch with another user name and password, without first logging out from the original session. If you originally connected through a Telnet or rlogin session, that session is left open.
  • Page 533: Logout

    logout logout Logs out from a shell session. SYNOPSIS logout DESCRIPTION Use this command to log out from a shell session. Remote login connections are closed and the local serial connections return to the login prompt. The exit command is accepted as a synonym for logout, as is Ctrl-D at the beginning of a line. OPERANDS None EXAMPLES...
  • Page 534: Lsanzoneshow

    lsanZoneShow lsanZoneShow Displays logical SAN zone information. SYNOPSIS lsanzoneshow [-s] [-f fabricid] [-w wwn] [-z zonename] DESCRIPTION Use this command to display the inter-fabric zones or LSAN zones. These zones are normal WWN zones created in FC Router EX_Port-connected fabrics and backbone fabrics. The LSAN zones are identified by the text string "lsan_"...
  • Page 535 lsanZoneShow -w wwn Displays LSAN zones containing the specified port WWN. The WWN format is xx:xx:xx:xx:xx:xx:xx:xx. -z zonename Displays LSAN zones with the specified zone name. The database for zones is displayed per switch, which can differ from the database stored on the other FCR switches.
  • Page 536: Lscfg

    lsCfg lsCfg Configures and manages a logical switch SYNOPSIS lscfg --create FID [-b | -base] [-f | -force] lscfg --delete FID lscfg --config FID -slot slot1[-slot2] [-port [ port1[-port2]] [-f |-force] lscfg --restore_to_default FID lscfg --restore_slot_to_default slot lscfg --change FID [[-newfid FID] | [-base]] [-force] lscfg --show [-ge] [-provision] lscfg --help DESCRIPTION...
  • Page 537 lsCfg -b | -base Creates a base logical switch on the chassis. A base logical switch communicates among different logical switches. Legacy switches can be connected to the base logical switch through EX_Ports, and interswitch links (ISLs) between base logical switches enable communication among different logical switches.
  • Page 538 lsCfg -b | -base Turns an existing logical switch into a base switch. When this command is issued on a switch that is already a base switch, this command removes the base switch properties. This command disables the current logical switch. After making the change, you must re-enable the switch.
  • Page 539 lsCfg To delete a logical switch: switch:admin> lscfg --delete 2 All active login sessions for FID 2 have been terminated. Switch successfully deleted. To assign ports to a logical switch: switch:admin> lscfg --config 2 -port 10-12 This operation requires that the affected ports be disabled. Would you like to continue [y/n]?: y Making this configuration change.
  • Page 540 lsCfg To display the partition configuration for all slots with the -ge option: switch:admin> lscfg --show -provision -ge Created switches: 128(ds) 2(bs) Slot ------------------------------------------------------- Port | 128 | | 128 | 128 | | 128 | | 128 | 128 | | 128 | | 128 | 128 | | 128 |...
  • Page 541 lsCfg To make logical switch FID 1 the base switch without confirmation: switch:admin> lscfg --change 1 -base -force Disabling the current base switch... Disabling switch fid 1 Disabling the proposed new base switch... Disabling switch fid 1 Please enable your switches when ready. To make logical switch FID 1 the base switch with confirmation: switch:admin>...
  • Page 542: Lsdbshow

    lsDbShow lsDbShow Displays the Fabric Shortest Path First (FSPF) link state database. SYNOPSIS lsdbshow [domain] DESCRIPTION Use this command to display an FSPF link state database record for switches in the fabric or for a specified domain. There are two types of database entries: •...
  • Page 543 lsDbShow lsAge Age, in seconds, of this LSR. An LSR is removed from the database when its age exceeds 3,600 seconds. reserved Reserved for future use. type Type of the LSR. Always 1. options Always 0. lsId ID of this LSR. It is identical to the domain ID. advertiser Domain ID of the switch that originated this LSR.
  • Page 544 lsDbShow EXAMPLES To display the link state record for a switch: switch:admin> lsdbshow 1 Domain = 1 (self), Link State Database Entry pointer = 0x1096da60 lsrP = 0x109784b0 earlyAccLSRs ignoredLSRs lastIgnored = Never installTime = Aug 26 18:20:41.451 lseFlags = 0xa uOutIfsP[0] = 0x00000000 uOutIfsP[1]...
  • Page 545: Memshow

    memShow memShow Displays the amounts of free and used memory in a switch. SYNOPSIS memshow [-b | -k | -m] DESCRIPTION Use this command to display free and used memory in the switch, as well as the shared memory and buffers used by the kernel.
  • Page 546: Motd

    motd motd Sets the banner on the chassis. SYNOPSIS motd --set string motd --show DESCRIPTION Use this command to set the banner on the chassis. The banner is a string of alphanumeric characters. It is displayed before you log in to a switch. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 547: Mscapabilityshow

    msCapabilityShow msCapabilityShow Displays the Management Server (MS) capabilities. SYNOPSIS mscapabilityshow DESCRIPTION Use this command to display the supported capabilities of the Management Server for each switch in the fabric. An asterisk displays next to the name of the local switch. NOTES Reliable commit service (RCS) is a fabric-wide capability and is supported only if all the switches in the fabric support the service.
  • Page 548: Msconfigure

    msConfigure msConfigure Configures the Management Server (MS) access control list (ACL). SYNOPSIS msconfigure DESCRIPTION Use this command to configure the MS Access Control List (ACL). The MS allows a Storage Area Network (SAN) management application to retrieve and administer the fabric and Interconnect Elements, such as switches.
  • Page 549 msConfigure 20:02:00:60:69:00:60:15 Done Display the access list Add member based on its Port/Node WWN Delete member based on its Port/Node WWN select : (0..3) [1] 0 done ... SEE ALSO msCapabilityShow, msPlatShow, msPlClearDB, msPlMgmtActivate, msPlMgmtDeactivate, msTdDisable, msTdEnable, msTdReadConfig, secPolicyShow Fabric OS Command Reference 53-1001764-01...
  • Page 550: Msplatshow

    msPlatShow msPlatShow Displays the Management Server (MS) platform database. SYNOPSIS msplatshow DESCRIPTION Use this command to display information from the MS platform database. This command displays the name of each platform object with the platform type (GATEWAY, HOST_BUS_ADAPTER, and so forth), associated management addresses, and associated node names.
  • Page 551: Msplatshowdbcb

    msPlatShowDBCB msPlatShowDBCB Displays the Management Server (MS) platform service database control block. SYNOPSIS msplatshowdbcb DESCRIPTION Use this command to display the control block fields associated with the platform database. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 552: Msplcleardb

    msPlClearDB msPlClearDB Clears the Management Server (MS) platform database on all switches in the fabric. SYNOPSIS msplcleardb DESCRIPTION Use this command to clear the MS platform database in the entire fabric. Because this operation cannot be undone, it should not be performed unless it is intended to resolve a database conflict between two joining fabrics or to establish an entirely new fabric with an empty database.
  • Page 553: Msplmgmtactivate

    msPlMgmtActivate msPlMgmtActivate Activates the Management Server (MS) platform service. SYNOPSIS msplmgmtactivate DESCRIPTION Use this command to activate the MS platform service throughout the fabric. This command attempts to activate the MS platform service for each switch in the fabric. The change takes effect immediately and is committed to the configuration database of each affected switch.
  • Page 554: Msplmgmtdeactivate

    msPlMgmtDeactivate msPlMgmtDeactivate Deactivates the Management Server (MS) platform service. SYNOPSIS msplmgmtdeactivate DESCRIPTION Use this command to deactivate the MS platform service throughout the fabric. This command deactivates the MS platform service for each switch in the fabric and commits the change to nonvolatile storage.
  • Page 555: Mstddisable

    msTdDisable msTdDisable Disables the Management Server (MS) topology discovery service. SYNOPSIS mstddisable ["ALL"] DESCRIPTION Use this command to disable the management server topology discovery service on a local switch or an entire fabric. This change takes effect immediately and commits to the configuration database for all affected switches.
  • Page 556: Mstdenable

    msTdEnable msTdEnable Enables the Management Server (MS) topology discovery service. SYNOPSIS mstdenable ["ALL"] DESCRIPTION Use this command to enable the MS topology discovery service on the local switch or throughout the fabric. The change takes effect immediately and commits to the configuration database for all affected switches.
  • Page 557: Mstdreadconfig

    msTdReadConfig msTdReadConfig Displays the status of The Management Server (MS) topology discovery service. SYNOPSIS mstdreadconfig DESCRIPTION Use this command to check whether or not the management server topology discovery service is enabled. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 558: Myid

    myId myId Displays the current login session details. SYNOPSIS myid DESCRIPTION Use this command to display the status of the system and the login session details. This includes IPv4 or IPv6 addresses associated with the login session. The login session gives details of the following: •...
  • Page 559: Nbrstateshow

    nbrStateShow nbrStateShow Displays the state of FSPF neighbors. SYNOPSIS nbrstateshow [slot/][port] DESCRIPTION Use this command to display information about fabric shortest path first (FSPF) neighbors to the local switch or information about a neighbor to a specified port. FSPF defines a neighbor as a remote E_Port interface that is directly attached to the local switch.
  • Page 560 nbrStateShow port Specify the port number to display, relative to its slot for bladed systems. Use switchShow to list valid ports. This operand is optional; if omitted, all neighbor states are displayed. EXAMPLES To display information about a neighbor directly connected to the local switch: switch:user>...
  • Page 561: Nbrstatsclear

    nbrStatsClear nbrStatsClear Resets FSPF interface counters. SYNOPSIS nbrstatsclear [slot/][port] DESCRIPTION Use this command to reset the counters of fabric shortest path first (FSPF) frames transmitted and received on all interswitch links (ISLs) or on a specified ISL Use this command without operands to reset counters on all interfaces.
  • Page 562 nbrStatsClear To verify the changes: switch:admin> interfaceshow 1/0 idbP = 0x10050a38 Interface 0 data structure: nghbP = 0x1004ce68 ifNo masterPort = 0 (self) defaultCost = 500 cost = 500 (output truncated) SEE ALSO interfaceShow, portShow, switchShow Fabric OS Command Reference 53-1001764-01...
  • Page 563: Nodefind

    nodeFind nodeFind Displays all device Name Server (NS) entries matching a given WWN, device PID, or alias. SYNOPSIS nodefind WWN | PID | ALIAS DESCRIPTION Use this command to display the NS information for all devices in the fabric that have either a port world wide name (WWN) or a node WWN matching the given WWN;...
  • Page 564 nodeFind To display all the device information matching the alias "a320": switch:user> nodefind a320 Local: Type Pid PortName NodeName NL 0314d9;3;22:00:00:04:cf:5d:dc:2d;20:00:00:04:cf:5d:dc:2d; 0 FC4s: FCP [SEAGATE ST318452FC 0001] Fabric Port Name: 20:14:00:60:69:80:04:79 Permanent Port Name: 22:00:00:04:cf:5d:dc:2d Device type: Physical Target Port Index: 20 Share Area: No Device Shared in Other AD: No Aliases: a320...
  • Page 565: Nsaliasshow

    nsAliasShow nsAliasShow Displays local Name Server (NS) information, with aliases. SYNOPSIS nsaliasshow [-r ][-t] DESCRIPTION Use this command to display local name server information with the added feature of displaying the defined configuration aliases to which the device belongs. If there are no defined configuration aliases for that device, no alias is displayed.
  • Page 566 nsAliasShow EXAMPLES To display local NS information with aliases: switch:user> nsaliasshow Type Pid PortName NodeName TTL(sec) N 010600;3;20:06:00:05:1e:38:81:71;10:00:00:05:1e:38:81:71; na Fabric Port Name: 20:06:00:05:1e:7a:7a:00 Permanent Port Name: 20:06:00:05:1e:38:81:71 Port Index: 6 Share Area: No Device Shared in Other AD: No Redirect: No Partial: No Aliases: MyAlias1 MyAlias2 N 010601;3;23:0d:00:05:1e:38:81:71;50:00:51:e3:88:17:10:0d;...
  • Page 567 nsAliasShow Redirect: No Partial: No Aliases: N 010602;3;10:00:00:00:00:00:00:01;10:00:00:00:00:00:00:01; 3 FC4s: FCP PortSymb: [41] "Brocade Ioblaster Initiator#00,pid#10602." Fabric Port Name: 20:06:00:05:1e:7a:7a:00 Permanent Port Name: 20:06:00:05:1e:38:81:71 Port Index: 6 Share Area: No Device Shared in Other AD: No Redirect: No Partial: No Aliases: DeviceAlias The Local Name Server has 3 entries } To display local NS information with aliases with the -r and -t options:...
  • Page 568: Nsallshow

    nsAllShow nsAllShow Displays global name server information. SYNOPSIS nsallshow [type] DESCRIPTION Use this command to display the 24-bit Fibre Channel addresses of all devices in all switches in the fabric. When used with the type operand, the command displays only devices of the specified FC-4 type. FC-4 type codes are referenced in the Fibre Channel Framing and Signaling (FC-FS) standards documentation (see "TYPE codes - FC-4").
  • Page 569: Nscamshow

    nsCamShow nsCamShow Displays information about remote devices in the Name Server (NS) cache. SYNOPSIS nscamshow [-t] DESCRIPTION Use this command to display the local NS cache information about the devices discovered in the fabric by the NS cache manager. If the NS cache manager does not discover new switches or new devices in the fabric, the command displays the message "No Entry is found!"...
  • Page 570 nsCamShow Virtual The device is contrived by the switch. The device is connected to the NX_Port, using FDISC to log in to the switch. iSCSI Device is connected to the iSCSI port. iSCSI The second attribute indicates the role of the device. Valid role attributes include the following: Unknown (initiator/target) Device role is not detected...
  • Page 571 nsCamShow Partial: No 5c1700; 3;23:00:00:05:1e:53:e3:8a;50:00:51:e5:3e:38:a0:00; FC4s: FCP PortSymb: [34] "Brocade DPC Entity-Slot#00,DPC#00." Fabric Port Name: 20:17:00:05:1e:53:e3:8a Permanent Port Name: 23:00:00:05:1e:53:e3:8a Port Index: 23 Share Area: No Device Shared in Other AD: No Redirect: No Partial: No (output truncated) To display the output with the -t option: switch:user>...
  • Page 572: Nsshow

    nsShow nsShow Displays local Name Server (NS) information. SYNOPSIS nsshow [-r][-t] DESCRIPTION Use this command to display local NS information about devices connected to a switch. If no information is available for the switch, the command displays the following message: "There is no entry in the Local Name Server."...
  • Page 573 nsShow Partial Displays "Yes" if t the device entry is incomplete; otherwise displays "No." Devices that are incomplete are displayed by the nsShow and nsCamShow commands, and have routing established, but are not considered during device discovery (for example, during FC-GS Name Server Queries). The following information is displayed only if the device has registered the information (for example, the switch automatically registers SCSI inquiry data for FCP target devices): •...
  • Page 574 nsShow The device is connected to the NX_Port, using FDISC to log in to the switch. iSCSI The device is connected to the iSCSI port. The second attribute indicates the role of the device. Valid role attributes include the following: Unknown (initiator/target) Device role is not detected Initiator...
  • Page 575 nsShow Partial: No N 010e00;3;21:00:00:e0:8b:12:8a:be;20:00:00:e0:8b:12:8a:be;\ 0x01000001 FC4s: FCP NodeSymb: [41] "QLA2340 FW:v3.03.06 DVR:v9.0.0.2 (w32 IP)" Fabric Port Name: 20:0e:00:05:1e:34:00:70 Permanent Port Name: 21:00:00:e0:8b:12:8a:be Port Index: 14 Share Area: No Device Shared in Other AD: No Redirect: No Partial: No The Local Name Server has 2 entries } To display local name server information with -r and -t options.
  • Page 576: Nszonemember

    nsZoneMember nsZoneMember Displays the information on online devices zoned with a specified device. SYNOPSIS nszonemember pid | wwn nszonemember -a | -u DESCRIPTION Use this command to display information on all online devices zoned with the specified device. The device can be specified by WWN or Port ID (PID). Use this command with the -u option to display all unzoned devices in the entire fabric.
  • Page 577 nsZoneMember NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. OPERANDS This command has the following operands: PID | WWN Specifies the port ID or WWN of the device for which to display zoned devices.
  • Page 578 nsZoneMember To display all the unzoned devices in the fabric: switch:admin> nszonemember -u Pid: 0xb01ea9; Aliases: trimm32b_1 Pid: 0xb01eaa; Aliases: trimm32b_2 Pid: 0xb01eab; Aliases: trimm32b_3 Pid: 0xb01eac; Aliases: trimm32b_4 Pid: 0xb01fad; Aliases: trimm32a_5 Pid: 0xb01fae; Aliases: trimm32a_6 Pid: 0xb01fb1; Aliases: trimm32a_7 Pid: 0xb01fb2;...
  • Page 579: Passwd

    passwd passwd Changes the password for a specified user. SYNOPSIS passwd [user_account] [-old old_password] [-new new_password] DESCRIPTION Use this command to change a user account password. Passwords can be changed locally on any switch. For the password database to be distributed to other switches in the fabric, the switches must be configured to accept the password database with the fddCfg command.
  • Page 580 passwd NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. OPERANDS The following operand is optional: user_account Specifies the user account for which the password is to be changed.
  • Page 581 passwd Password matches one of the previous passwords The password you entered matches one of the previous passwords. You must wait longer to change your password You cannot change the password before the minimum aging period expires. Password contains invalid characters The password you entered contains invalid characters.
  • Page 582: Passwdcfg

    passwdCfg passwdCfg Manages the password policies. SYNOPSIS passwdcfg --set options value passwdcfg --disableadminlockout passwdcfg --enableadminlockout passwdcfg --setdefault passwdcfg --showall passwdcfg --help DESCRIPTION Use this command to manage password policies. Use --set to configure the following password policies: • Password strength policy •...
  • Page 583 passwdCfg A failed login attempt counter is maintained for each user on each switch instance. The counters for all user accounts are reset to zero when the account lockout policy is enabled. The counter for an individual account is reset to zero when the account is unlocked after the lock-out duration period expires. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 584 passwdCfg -maxpasswordage value Specifies the maximum number of days that can elapse before a password must be changed. This is the password expiration period. -maxpasswordage can be set at 0 to 999. Setting this parameter to 0 disables password expiration. The default value is 0.
  • Page 585 passwdCfg --setdefault Resets all password policies to their default values. --help Displays the command usage. DIAGNOSTICS The passwdCfg command may fail for any of the following reasons: Permission failure You not permitted to execute the command. Invalid command line option An unrecognized command line option was specified.
  • Page 586 passwdCfg EXAMPLES To display the current password configuration parameters: switch:admin> passwdcfg --showall passwdcfg.minlength: 8 passwdcfg.lowercase: 0 passwdcfg.uppercase: 0 passwdcfg.digits: 0 passwdcfg.punctuation: 0 passwdcfg.history: 1 passwdcfg.minpasswordage: 0 passwdcfg.maxpasswordage: 0 passwdcfg.warning: 0 passwdcfg.lockoutthreshold: 0 passwdcfg.lockoutduration: 30 passwdcfg.status: 0 To set password configuration parameters, specifying that a password must contain at least two uppercase characters, and that passwords expire in 90 days from the date they are defined: switch:admin>...
  • Page 587: Pathinfo

    pathInfo pathInfo Displays routing information and statistics along a path covering multiple switches. SYNOPSIS pathinfo pathinfo -f FID destination_switch [destination_port] [-r] [-t] pathinfo destination_switch [source_port[destination_port]] [-r] [-t] DESCRIPTION Use this command to display routing information from a source port on the local switch to a destination port on another switch.
  • Page 588 pathInfo In Port The port on which the switch receives frames. For hop 0, this is source_port. identified by the port index. Domain ID The domain ID of the switch. Name The name of the switch. Out Port The output port that the frames take to reach the next hop. For the last hop, this is destination_port identified by the port index.
  • Page 589 pathInfo Words The total number of 4-byte Fibre Channel words. Frames The total number of frames. Errors The total number of errors that may have caused a frame not to be received correctly. This includes cyclic redundancy check (CRC) errors, bad end-of-frame (EOF) errors, frame truncated errors, frame-too-short errors, and encoding errors inside a frame.
  • Page 590 pathInfo destination_port Specifies the port on the destination switch for the path being traced. This operand returns the state of this port. The embedded port (-1) is used by default, or if you specify a destination port that is not active. The destination is specified as the port index.
  • Page 591 pathInfo To display basic path information in traceroute format: switch:admin> pathinfo 91 -t traceroute to domain 91(web225) , 25 hops Domain ID (Name) time taken for the hop ----------------------------------------------- 10 (web229) 0.0331 us To display basic path information in traceroute format with reverse path option: switch:admin>...
  • Page 592 pathInfo Target port is Embedded In Port Domain ID (Name) Out Port Cost --------------------------------------------------------- 9 (web226) 1000 Port --------------------------------------- B/s (1s) B/s (64s) Txcrdz (1s) Txcrdz (64s) F/s (1s) F/s (64s) 2743 Words 2752748 2822763 Frames 219849 50881 Errors In Port Domain ID (Name) Out Port Cost...
  • Page 593: Pdshow

    pdShow pdShow Displays data from a panic dump file. SYNOPSIS pdshow [panic_dump_file] DESCRIPTION Use this command to display data from a panic dump file. The panic dump file contains information that might be useful to determine the cause of the system panic. When executed without any arguments, this command displays output from the latest panic dump file available on the switch.
  • Page 594: Perfaddeemonitor

    perfAddEEMonitor perfAddEEMonitor Adds an end-to-end monitor to a port. SYNOPSIS perfaddeemonitor [slot/]port SourceID DestID DESCRIPTION Use this command to add an end-to-end performance monitor to a port. The performance monitor counts the number of words received, number of words transmitted, and number of CRC errors detected using either of the following conditions: •...
  • Page 595 perfAddEEMonitor DestID Specifies the 3-byte DID (destination ID) of the destination device. It should be in "0xDDAAPP" format, where DD is domain ID, AA is area ID and PP is AL_PA ID. For example, 0x050200 has a domain ID of 5, an area ID of 2, and an AL_PA ID of 0.
  • Page 596 perfAddEEMonitor Get name server information. Name server info shows four devices (two of which are virtual) connected to the Encryption Switch along with their PIDs: EncryptionSwitch:Securityadmin> nsshow Type Pid COS PortName NodeName TTL(sec) N 0a0100;3;2f:ff:00:06:2b:0e:b3:3c;2f:ff:00:06:2b:0e:b3:3c;na FC4s: FCP PortSymb: [18] "SANBlaze V3.0 Port" Fabric Port Name: 20:01:00:05:1e:53:b8:45 Permanent Port Name: 2f:ff:00:06:2b:0e:b3:3c Port Index: 1...
  • Page 597 perfAddEEMonitor Add another EE monitor on port 1 between the Virtual Target SID and the Target DID: EncryptionSwitch:SecurityAdmin> perfaddeemonitor 1 \ 0x0a2001 0x01a000 End-to-End monitor number 1 added. Display the EE monitors on the Encryption Switch: EncryptionSwitch:SecurityAdmin> perfmonitorshow --class EE 1 There are 2 end-to-end monitor(s) defined on port OWNER_APP TX_COUNT...
  • Page 598: Perfcfgclear

    perfCfgClear perfCfgClear Clears the previously saved performance monitoring configuration settings from nonvolatile memory. SYNOPSIS perfcfgclear DESCRIPTION Use this command to clear the previously saved end-to-end performance monitoring configuration settings from nonvolatile memory. NOTES This command requires an Advanced Performance Monitoring license. This command is not supported on virtual FC ports (VE/VEX_Port), EX_Port, M (Mirror) ports and GbE ports.
  • Page 599: Perfcfgrestore

    perfCfgRestore perfCfgRestore Restores performance monitoring configuration settings from nonvolatile memory. SYNOPSIS perfcfgrestore DESCRIPTION Use this command to restore the performance monitoring configuration information from nonvolatile memory. This does not restore the information cleared by the perfCfgClear command; rather, it restores the configuration from nonvolatile memory.
  • Page 600: Perfcfgsave

    perfCfgSave perfCfgSave Saves performance monitoring configuration settings to nonvolatile memory. SYNOPSIS perfcfgsave DESCRIPTION Use this command to save the current Performance Monitor configuration for end-to-end (EE) performance monitors to nonvolatile memory. Configuration changes are saved persistently across power cycles. The number of monitors that can be saved to flash memory is limited as follows: •...
  • Page 601: Perfclearalpacrc

    perfClearAlpaCrc perfClearAlpaCrc Clears the CRC error count associated with a port and arbitrated loop physical address (AL_PA). SYNOPSIS perfclearalpacrc [slot/]port [ALPA] DESCRIPTION Use this command to clear a specific cyclic redundancy check (CRC) error counter associated with a specific port and AL_PA, or all such counters on a port. NOTES This command requires an Advanced Performance Monitoring license.
  • Page 602: Perfdeleemonitor

    perfDelEEMonitor perfDelEEMonitor Deletes one or all end-to-end performance monitors from a port. SYNOPSIS perfdeleemonitor [slot/]port [monitorId] DESCRIPTION Use this command to delete an end-to-end performance monitor from a port, or all such monitors associated with a port. NOTES This command requires an Advanced Performance Monitoring license. This command is not supported on virtual FC ports (VE/VEX_Port), EX_Port, M (Mirror) ports and GbE ports.
  • Page 603: Perfhelp

    perfHelp perfHelp Displays performance monitoring help information. SYNOPSIS perfhelp DESCRIPTION Use this command to display the help commands available for performance monitoring. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 604: Perfmonitorclear

    perfMonitorClear perfMonitorClear Clears counters of end-to-end and ISL performance monitors on a port. SYNOPSIS perfmonitorclear --class monitor_class [slot/]port [monitorId] DESCRIPTION Use this command to clear counters for performance monitors on a port, specified by class. Monitor classes include end-to-end monitors (EE) and interswitch link monitors ISL). Issuing the portStatsClear command on a port clears all end-to-end and filter-based monitors (but not ISL monitors) for all the ports in the same quad.
  • Page 605 perfMonitorClear To clear statistics counters for an ISL monitor: switch:admin> perfmonitorclear --class ISL 1 This will clear ISL monitor on port 1, continue? \ (yes, y, no, n): [no] y SEE ALSO perfAddEEMonitor, perfMonitorShow Fabric OS Command Reference 53-1001764-01...
  • Page 606: Perfmonitorshow

    perfMonitorShow perfMonitorShow Displays end-to-end and interswitch link performance monitors on a port. SYNOPSIS perfmonitorshow --class monitor_class [slot/]port [interval] DESCRIPTION Use this command to display End-to-End (EE) performance monitors on a port. If interval is specified, the command displays a snapshot of the traffic at the specified interval. If no interval is specified, this command displays the following information: The monitor number.
  • Page 607 perfMonitorShow interval The interval value must be greater than or equal to 5, and it must be a multiple of 5. In the case of end-to-end monitor, Tx and Rx counts are displayed in the unit of byte when this operand is specified. This operand is optional; if the operand is not specified, this command displays cumulative counts.
  • Page 608: Perfresourceshow

    perfResourceShow perfResourceShow Displays performance monitor resources for a logical switch. SYNOPSIS perfresourceshow --portttRes [[slot/]port] perfResourceShow --eeRes [[slot/]port] perfResourceShow --fabmodeRes perfResourceShow --installed [[slot/]port] perfResourceShow --help DESCRIPTION Use this command to determine the physical resources available to support the installation of performance monitors on a logical switch port. In a Virtual Fabric environment, performance monitors installed on a logical switch share the physical resources of the switches that make up the base fabric.
  • Page 609 perfResourceShow --help Displays the command usage. EXAMPLES To display the number of Top Talkers that can be installed on the current logical switch: switch:admin> perfresourceshow --portttRes ====================================================== Installed Available Slot/PortRange ====================================================== 2/13 3/5,3/7,3/12 Port list information --------------------- Slot ----------------------------------------------------- Port | - | - | | - | | - |...
  • Page 610 perfResourceShow | - | - | | - | | - | | - | - | | - | | - | | - | - | | - | | - | | - | 0 | | - | | - | | - | - | | - |...
  • Page 611: Perfsetporteemask

    perfSetPortEEMask perfSetPortEEMask Sets the overall mask for end-to-end (EE) performance monitors. SYNOPSIS perfsetporteemask [slot/]port "TxSIDMsk " "TxDIDMsk " "RxSIDMsk" "RxDIDMsk" DESCRIPTION Use this command to set the mask for an end-to-end (EE) performance monitor. This command allows selecting the Fibre Channel frames for which to collect performance statistics. When setting the EE mask on a port, all existing EE monitors on that port are deleted.
  • Page 612 perfSetPortEEMask Specifies that the field does triggers EE monitors. TxDIDMsk Specify the transmitting Destination ID mask, in quotation marks, in dd:aa:pp format. RxSIDMsk Specify the receiving Source ID mask, in quotation marks, in dd:aa:pp format. RxDIDMsk Specify the destination ID mask, in quotation marks, in dd:aa:pp format. EXAMPLES To set the overall mask for end-to-end monitors on a port: switch:admin>...
  • Page 613: Perfshowalpacrc

    perfShowAlpaCrc perfShowAlpaCrc Displays the CRC error count by port or by arbitrated loop physical address (AL_PA). SYNOPSIS perfshowalpacrc [slot/]port [ALPA] DESCRIPTION Use this command to display the cyclic redundancy check (CRC) error count of one or all devices attached to a port. If the AL_PA operand is specified, only the CRC count for that AL_PA device is displayed.
  • Page 614: Perfshowporteemask

    perfShowPortEEMask perfShowPortEEMask Displays the current address mask for end-to-end performance monitors on a port. SYNOPSIS perfshowporteemask [slot/]port DESCRIPTION Use this command to display the current mask shared across all end-to-end (EE) performance monitors of a port. There are only two commands that can modify the value of the EE mask: perfSetPortEEMask and perfCfgRestore.
  • Page 615 perfShowPortEEMask RxSID Area: RxSID ALPA: RxDID Domain: RxDID Area: RxDID ALPA: SEE ALSO perfAddEEMonitor, perfDelEEMonitor, perfSetPortEEMask Fabric OS Command Reference 53-1001764-01...
  • Page 616: Perfttmon

    perfTTmon perfTTmon Installs the Top Talker monitor in the specified mode. SYNOPSIS perfttmon Port Mode: perfttmon --add egress | ingress [slot/]port perfttmon --show [slot/]port [number_of_flows] [wwn| pid] perfttmon --delete [slot/]port Fabric Mode: perfttmon --add fabricmode perfttmon --show dom domain id [number_of_flows] [wwn| pid] perfttmon --delete fabricmode DESCRIPTION...
  • Page 617 perfTTmon You cannot install a Top Talker and an End-to-End Monitor on the same port. Brocade recommends against installing a Top Talkers and an End-to-End Monitor on the ports belonging to the same ASIC chip. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 618 perfTTmon number of top talking flows Specifies "n" Top Talking flows. Valid values are between 1 and 32. If a value greater than 32 is entered, Top Talker displays counters for only 32 flows and a warning message. This operand is optional; if omitted, the command displays the top 8 flows.
  • Page 619: Policy

    policy policy Displays or modifies the encryption and authentication algorithms for security policies. SYNOPSIS policy option type number [-enc method] [-auth algorithm] [-pfs value] [-dh group] [-seclife seconds] DESCRIPTION Use this command to display or modify the encryption and authentication algorithms for security policies. You can configure a maximum of 32 Internet key exchange (IKE) and 32 Internet protocol security (IPSec) policies.
  • Page 620 policy AES-128 Advanced encryption standard, 128-bit key. AES-256 Advanced encryption standard, 256-bit key. -auth algorithm Specifies the authentication algorithm. The default is SHA-1. Algorithms include the following: SHA-1 Secure hash algorithm. Message digest 5. AES-XCBC Advanced encryption standard. Valid only with IPSec. -pfs value Specifies the perfect forward secrecy.
  • Page 621 policy To display all IKE policy settings: switch:admin> policy --show ike all IKE Policy 1 ----------------------------------------- Authentication Algorithm: SHA-1 Encryption: AES-128 Perfect Forward Secrecy: on Diffie-Hellman Group: 1 SA Life (seconds): 28800 IKE Policy 29 ----------------------------------------- Authentication Algorithm: SHA-1 Encryption: AES-128 Perfect Forward Secrecy: on Diffie-Hellman Group: 1 SA Life (seconds): 28800...
  • Page 622: Portaddress

    portAddress portAddress Assigns the lower 16 bits of the Fibre Channel Port ID. SYNOPSIS portaddress --bind [slot/]port [16-bit_address] [--auto] portaddress --unbind [slot/]port portaddress --show [[slot/]port] portaddress --findPID 24-bit_Port_ID portaddress --help DESCRIPTION Use this command to bind the 16-bit address to the lower two bytes of a port 24-bit Fibre Channel address, or to unbind the currently bound address for the specified port.
  • Page 623 portAddress 16-bit_address Specifies the 16-bit address to be bound to the FC address. Note that only the upper 10 bits of the PID can be used for a unique route. Therefore, not all addresses in the 16-bit range are available. --auto Enables autobinding on the specified port.
  • Page 624 portAddress 0x0000 8 bit 0x0100 8 bit 0x0200 8 bit 0x0300 8 bit 0x0400 8 bit 0x0500 8 bit 0x0600 8 bit 0x0700 8 bit 0x1800 8 bit 0x1900 8 bit 0x1a00 8 bit 0x1b00 8 bit 0x1c00 8 bit 0x1d00 8 bit 0x1e00...
  • Page 625: Portalpashow

    portAlpaShow portAlpaShow Displays the Arbitrated Loop Physical Addresses (AL_PAs) of devices attached to a port. SYNOPSIS portalpashow [slot/]port DESCRIPTION Use this command to display the AL_PAs of devices connected to a port, and whether these devices are public or private. If the specified port is not an active FL_Port or if no AL_PAs are present, this command prints an error.
  • Page 626: Portbeacon

    portBeacon portBeacon Sets port beaconing mode. SYNOPSIS portbeacon --enable [slot/]port portbeacon --disable [slot/]port portbeacon --show [slot/]port portbeacon --help DESCRIPTION Use this command to enable or disable beaconing mode on a specified port. When beaconing mode is enabled on a port, the port LED flashes amber and green for 2.5 seconds each in an alternating pattern.
  • Page 627 portBeacon To display beaconing mode on a port: switch:admin> chassisbeacon --show 2/1 PortBeacon status of : slot 2, port 1 is ON SEE ALSO chassisBeacon, switchBeacon Fabric OS Command Reference 53-1001764-01...
  • Page 628: Portbuffershow

    portBufferShow portBufferShow Displays the buffer usage information for a port group or for all port groups in the switch. SYNOPSIS portbuffershow [[slot/]port] DESCRIPTION Use this command to display the current long distance buffer information for the ports in a port group. The port group can be specified by giving any port number in that group.
  • Page 629 portBufferShow Remaining Buffers The remaining (unallocated and reserved) buffers in a port group. A hyphen in one of the display fields indicates that no relevant information is available; there may be no connection to a port, or the port is disabled, or the port is not an E_Port. When invoked without operands, this command displays the long distance buffer information for all the port groups of the switch.
  • Page 630: Portcamshow

    portCamShow portCamShow Displays port-based filter CAM utilization. SYNOPSIS portcamshow [slot/]port DESCRIPTION Use this command to display the current filter Content-Addressable Memory (CAM) utilization of a specified port. The command displays the following information: SID used Total number of CAM entries used by this port. Note that each CAM entry, either source ID (SID) or destination ID (DID) CAM, can be shared among a certain number of ports, depending on the ASIC.
  • Page 631 portCamShow EXAMPLES To display the filter CAM utilization for a single port on a switch: switch:user> portcamshow 3/2 -------------------------------------------------- Area SID used DID used SID entries DID entries 350400 2b2200 2b1200 220400 -------------------------------------------------- SID Free, DID Free: (61, 511) To display port CAM entries on shared ports (in the example, port 7/31 and 7/39 are shared ports and 7/31 is the primary port): switch:user>...
  • Page 632: Portcfg

    portCfg portCfg Manages port configuration parameters for FC ports, VE_ports, and GbE/10GbE ports. SYNOPSIS portcfg action [slot/] port arguments portcfg action [slot/] ge_port arguments portcfg action [slot/]ve_port options arguments portcfg action [slot/][ge_port options arguments DESCRIPTION Use this command to manage port configuration parameters on FC ports as well as on Gigabit Ethernet (GbE) ports on the Brocade 7800/FX8-24 and on the Brocade FR4-18i.
  • Page 633 portCfg In Fabric OS v7.0.0, the restrictions on addressing have been lifted. An IPv4 subnet can span multiple GbE interfaces, and you can now have multiple IPv6 addresses with the same prefix configured on different GbE interfaces on the same extension switch or blade. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 634 portCfg Valid modes for mirrorport include the following: --disable Disables the configuration. When disabled, a port cannot be a mirror port. --enable Enables the configuration. When the mirror port feature is enabled to a port, a mirror connection can use this port to mirror traffic. EXAMPLES To enable a mirror port configuration: switch:admin>...
  • Page 635 portCfg Valid options and arguments for ipif include the following: create src_ipaddr [netmask] mtu_size Creates IP interfaces. Specify the following: src_ipaddr Specifies source IP address in either IPv6 or IPv4 format: src_IPv6_addr/prefix_len Specifies the source IPv6 address of the virtual port if IPv6 is used. The address must be an IPv6 global, unicast address, followed by a prefix.
  • Page 636 portCfg dest_IPv4_addr netmask Specifies the destination IPv4 address of the virtual port, if IPv4 is used. If an IPv4 address is used, the subnet mask must be specified as well. Use a.b.c.d. format. gateway_router Specifies the IP address of an IP router that can route packets to the destination virtual port IP address.
  • Page 637 portCfg delete ipif_addr vlan_id [dst_ipaddr] Deletes an entry from the VLAN tag table. Valid arguments for add and delete include the following: ipif_addr Specifies the locally defined interface address in IPv6 or IPv4 format. vlan_id Specifies the VLAN ID used for this tag. The range is 1 to 4094. l2cos Specifies Layer 2 Class of Service/Priority, as defined in the IEEE 802.1p specification.
  • Page 638 portCfg To create an interface for a failover crossport on a Brocade FX8-24: Configure the interface for the local XGE port (xge0). switch:admin> portcfg ipif 8/xge0 create 192.168.10.20 \ 255.255.255.0 1500 Operation Succeeded Configure the interface for the nonlocal XGE port (xge1). switch:admin>...
  • Page 639 portCfg 2000::11 U H L 2000::1:250 U H L 2001:: 2000::1:250 fe80:: ff01:: ff02:: Flags: U=Usable G=Gateway H=Host C=Created(Interface) S=Static L=LinkLayer(Arp) To create an IP route for a failover crossport on a Brocade FX8-24: Configure the iproute for the local XGE port (xge0). switch:admin>...
  • Page 640 portCfg To display the VLAN tag configuration (for an explanation of the flags, refer to portShow): switch:admin> portshow vlantag ge2 Port: ge2 Interface Address VlanId L2CoS Flags Destination Address ------------------------------------------------------------- 192.168.2.10 Perm Net 0.0.0.0 192.168.0.20 Perm 192.168.0.10 192.168.0.21 Perm 192.168.0.11 2000::20 Perm 2000::10...
  • Page 641 portCfg Configure VLAN tagging on the default FCIP circuit. Configure Differentiated Services Code Point (DSCP) markings. Set the committed rate or minimum and maximum rates for the default circuit. Configure a tunnel for FICON emulation. • portcfg fcipcircuit - Create, modify, and delete additional FCIP circuits. Set or modify the committed rate or minimum and maximum rates for the circuit.
  • Page 642 portCfg modify [tunnel_arguments][circuit_arguments] Modifies the properties of an existing FCIP tunnel. To modify a tunnel, you must specify at least one of the tunnel or circuit parameters for the command to be effective. Any circuit attribute you change with the fciptunnel modify command affects only the FCIP circuit 0.
  • Page 643 portCfg -N | --no-read-pipelining Disables tape read-pipelining. This operand is valid only with fciptunnel create and -t must be specified enabling the feature. The combination of -t and -N effectively enables tape write-pipelining. When using this operand with fciptunnel modify, specify one or more of the following: -t | --tape-pipelining mode Modifies the Open System Tape Pipelining configuration.
  • Page 644 portCfg -i | --ipsec [0|1] Disables (0) or enables (1) Internet Protocol Security (IPSec) on the specified tunnel. Circuits that fall underneath a tunnel inherit the IPSec tunnel attributes. IPSec uses a predefined policy with IKEv2 for key negotiation, ESP transport mode for IPSec, and AES with 256-bit keys for Encryption (AES-GCM-ESP).
  • Page 645 portCfg --ficon-tape-read [0|1] Enables (1) or disables (0) FICON Tape Read Pipelining. This feature improves performance for certain applications when reading from FICON tape over extended distances. --ficon-tin-tir [0|1] Enables (1) or disables (0) FICON TIN/TIR emulation. This feature enhances recovery when a TIN/TIR exchange occurs as part of a channel recovery operation during tape emulation.
  • Page 646 portCfg --write-timer value Defines a time limit for pipelined write chains. This value is specified in milliseconds (ms). If a pipelined write chain takes longer than this value to complete, the ending status for the next write chain will be withheld from the channel.
  • Page 647 portCfg are set to a metric of 0 and one is set to a metric of 1, all data will flow over the metric 0 circuits. If all of the metric 0 circuits go down, traffic will run over the metric 1 circuits. This parameter is meaningful only, if you configure more than one circuit.
  • Page 648 portCfg delete tunnel_ID Deletes the specified FCIP tunnel. This command deletes all associated circuits created with the fciptunnel or fcipcircuit commands. Use the portShow command to display all FCIP tunnels and their associated circuits.: fcipcircuit Creates an FCIP circuit on an existing tunnel. Use this command to configure additional circuits.
  • Page 649 portCfg mgmtif Configures an inband management interface. A maximum of one interface is supported per GbE Port. Up to a total of 6 management interfaces are supported for the Brocade 7800 and up to a total of 11 interfaces for the Brocade FX8-24 (depending on blade operating mode).
  • Page 650 portCfg delete Deletes a management route for a specified destination IP Address. The following operands are required. dest_IPv4_addr Specifies the destination IP address for the management route in IPv4 format. netmask Specifies the subnet mask for the IPv4 address in a.b.c.d format. EXAMPLES To create a FICON-enabled tunnel, first create an empty FCIP tunnel without any circuits: switch:admin>...
  • Page 651 portCfg To enable FICON XRC and Teradata emulation on the tunnel: switch:admin> portcfg fciptunnel 1/12 modify --ficon-xrc 1 --ficon-tera-read 1 --ficon-tera-write 1 Operation succeeded To configure FCIP FastWrite and Tape Pipelining on the tunnel: switch:admin> portcfg fciptunnel 1/12 modify -f 1 -t 1 Operation succeeded To delete circuit 1: switch:admin>...
  • Page 652 portCfg Remote WWN: Not Configured Local WWN: 10:00:00:05:1e:c3:f0:16 Peer WWN: 00:00:00:00:00:00:00:00 Circuit Count: 2 Flags: 0x00000000 FICON: Off ------------------------------------------- Circuit ID: 16.0 Circuit Num: 0 Admin Status: Enabled Oper Status: In Progress Remote IP: 192.168.2.20 Local IP: 192.168.2.10 Metric: 0 Min Comm Rt: 25000000 Max Comm Rt: 25000000 SACK: On...
  • Page 653 portCfg To modify an existing circuit so it becomes the initiator (the following example uses the string option): switch:admin> portcfg fcipcircuit 16 \ modify 2 --connection-type initiator !!!! WARNING !!!! Modify operation can disrupt the traffic on the fcipcircuit specified \ for a brief period of time.
  • Page 654 portCfg On the Management Station, add route entries to get to the Brocade 7800 external inband management interfaces. linux# route add 192.168.1.0 netmask 255.255.255.0 gw 192.168.3.250 linux# route add 192.168.2.0 netmask 255.255.255.0 gw 192.168.3.250 Access the 7800 switches through the external inband management interfaces. linux# telnet 192.168.1.10 To delete an inband management interface: switch:admin>...
  • Page 655 portCfg OPERANDS This command has the following operands: slot For bladed systems only, specifies the slot number of the port to be configured, followed by a slash (/). ge_port Specifies the number of the port to be configured, relative to its slot for bladed systems.
  • Page 656 portCfg modify tunnel_id [arguments] Modifies the properties of an existing FCIP tunnel. This operation disrupts the traffic on the specified FCIP tunnel for a brief period of time. If IPSec is enabled on the FCIP tunnel, the tunnel cannot be modified. To modify the tunnel attributes, you must delete and re-create the tunnel.
  • Page 657 portCfg -r retransmission Specifies the maximum retransmissions. Values are 1 to 16. The default value is 8. If Tape Piplelining is enabled, the default value is calculated based on the minimum retransmit time to ensure that the TCP connection does not time out before the host times out.
  • Page 658 portCfg The following operands are supported with the fciptunnel qosmap option: tunnel_id Specifies the tunnel ID. The valid range is 0 to 7. -default Resets or sets the VC QoS map to default values. -delete Deletes the associated QoS map configuration file. This command removes the file from the configuration flash memory only.
  • Page 659 portCfg -r 1|0 Enables (1) or disables (2) Tape read pipelining. This feature improves performance for certain applications when reading from FICON tape over extended distances. -t 1|0 Enables or disables TIN/TIR emulation. This feature enhances recovery when a TIN/TIR exchange occurs as part of a channel recovery operation during tape emulation.
  • Page 660 portCfg -g | --rdMaxDevs value Defines the maximum number of concurrent emulated tape read operations. As concurrency increases, the value of emulation decreases. Excessive concurrency has the potential to oversubscribe packet data memory. The setting has significance only for host (channel) initiated operations at this side and does not affect tape read operations initiated by hosts (channels) attached at the opposite side.
  • Page 661 portCfg To modify the default VC QoS map settings for VC 1: switch:admin> portcfg fciptunnel ge1 qosmap 1 3 -Q 29 switch:admin> portcfg fciptunnel ge1 qosmap 1 3 -Q 28 -P 7 switch:admin> portcfg fciptunnel ge1 qosmap 1 3 -P 2 To return the VC QoS map settings to default values: switch:admin>...
  • Page 662: Portcfgalpa

    portCfgAlpa portCfgAlpa Configures the AL_PA offset on a specified port or range of ports. SYNOPSIS portcfgalpa [slot/]port, mode DESCRIPTION Use this command to set the Arbitrated Loop Physical Address (AL_PA) offset on a port or a range of ports to either 0x0 (default) or 0x13. Changes made by this command are persistent across switch reboots and power cycles.
  • Page 663: Portcfgautodisable

    portCfgAutoDisable portCfgAutoDisable Manages the port autodisable configuration. SYNOPSIS portcfgautodisable --enable [slot/]port[-port] portcfgautodisable --disable [slot/]port[-port] portcfgautodisable --add option [slot/]port[-port] portcfgautodisable --remove option [slot/]port[-port] portcfgautodisable --addall [slot/]port[-port] portcfgautodisable --removeall [slot/]port[-port] portcfgautodisable --addexcept option [slot/]port[-port] portcfgautodisable --show [slot/]port[-port] portcfgautodisable --help> DESCRIPTION Use this command to enable or disable the autodisable feature for a specified port or a range of ports and to manage the configuration.
  • Page 664 portCfgAutoDisable --add Specifies one or more trigger conditions that will disable the specified ports. Trigger conditions must be separated by a space, for example, LOSN OLS LIP. Trigger conditions are case insensitive. --remove Removes one or more trigger conditions from the port autodisable configuration. --addall Adds all supported trigger conditions to the port autodisable configuration.
  • Page 665 portCfgAutoDisable To add all trigger conditions except the LOSN condition: switch:admin> portcfgautodisable --addexcept LOSN 18 switch:admin> portcfgautodisable --show 18 Port Auto Disable: ON Configured Option(s): LOSG To attempt to enable and configure the port autodisable feature on a port for which the feature is already activated (the configuration is not updated): switch:admin>...
  • Page 666: Portcfgcompress

    portCfgCompress portCfgCompress Configures a port for compression. SYNOPSIS portcfgcompress --enable [slot]/port portcfgcompress --disable [slot]/port portcfgcompress --help DESCRIPTION Use this command to configure a port for compression. This command enables or disables the compression configuration on the specified port, and saves the configuration persistently. Configuring a port for compression is disruptive.
  • Page 667 portCfgCompress val 1 port 2 lscfg: The port cannot be moved to the requested switch because port or ports have Encryption/Compression enabled. Please disable the Encryption/Compression configuration. FID: Slot: Port: To disable the compression configuration: switch:admin> portcfgcompress --disable 2 To attempt to move a configured port to another logical switch: SEE ALSO portCfgEncrypt, portEncCompShow...
  • Page 668: Portcfgcreditrecovery

    portCfgCreditRecovery portCfgCreditRecovery Enables or disables credit recovery on a port. SYNOPSIS portcfgcreditrecovery --enable [slot/]port portcfgcreditrecovery --disable [slot/]port DESCRIPTION Use this command to enable or disable credit recovery on a port. The credit recovery feature enables credits or frames to be recovered. Only ports configured as long distance ports can utilize the credit recovery feature.
  • Page 669: Portcfgdefault

    portCfgDefault portCfgDefault Resets the port configuration to factory default value. SYNOPSIS portcfgdefault [slot/][ge]port DESCRIPTION Use this command to reset all configuration values on a specified port to their factory defaults. This command persistently disables ports capable of routing, which is the factory default value. Use the portCfgShow command to display the port configuration.
  • Page 670 portCfgDefault QOS Port Port Auto Disable: Rate Limit F_Port Buffers NPIV PP Limit: SEE ALSO portCfgEport, portCfgGport, portCfgLongDistance, portCfgLport, portCfgPersistentDisable, portCfgPersistentEnable, portCfgShow, portCfgSpeed, portCfgTrunkPort Fabric OS Command Reference 53-1001764-01...
  • Page 671: Portcfgdport

    portCfgDPort portCfgDPort Configures a port as a D_Port. SYNOPSIS portcfgdport --enable [slot/]port_list portcfgdport --disable [slot/]port_list portcfgdport --help DESCRIPTION Use this command to configure a diagnostic port (D_Port). The D_Port is not part of the fabric. It does not carry any interswitch traffic or data traffic. The D_Port is used solely for the purpose of running link-level diagnostics between two switches and to isolate link level fault on the port, in the small form factor pluggable (SFP), or in the cable.
  • Page 672 portCfgDPort • A set of ports separated by commas, for example "3,5,7,8"or 5/3,5,7,8 on bladed systems. • A wildcard '*' indicates all ports. The wild card should be enclosed in single quotation marks. --enable Configures the specified ports as D_Ports. --disable Clears the D_Port configuration on the specified ports.
  • Page 673: Portenccompshow

    portEncCompShow portEncCompShow Displays encryption and compression port configuration details. SYNOPSIS portenccompshow DESCRIPTION Use this command to display a list of ports that can be configured for encryption or compression. The command displays one section per ASIC and the ports configurable for that ASIC. The output includes the following information: User Port The port index number of the port to be configured.
  • Page 674 portEncCompShow ----------------------------------- SEE ALSO portCfgEncrypt, portCfgCompress Fabric OS Command Reference 53-1001764-01...
  • Page 675: Portcfgencrypt

    portCfgEncrypt portCfgEncrypt Configures a port for encryption. SYNOPSIS portcfgencrypt --enable [slot]/port portcfgencrypt --disable [slot]/port portcfgencrypt --help DESCRIPTION Use this command to configure a port for encryption. This command enables or disables the encryption configuration on the specified port and saves the configuration persistently. Before you can configure a port for encryption, you must configure the port for authentication.
  • Page 676 portCfgEncrypt To attempt to move a configured port to another logical switch: switch:admin> lscfg --config 15 -port 2 This operation requires that the affected ports be disabled. Would you like to continue [y/n]?: y Checking for cap port 2 After Checking for cap port 2 val 1 port 2 lscfg: The port cannot be moved to the requested switch because...
  • Page 677: Portcfgeport

    portCfgEport portCfgEport Enables or disables E_Port capability on a port or locks down a port as an E_Port. SYNOPSIS portcfgeport [slot/]port mode portcfgeport -i [index1[-index2] [...] [-f] mode] portcfgeport -slot [slot1[-slot2] [...] portcfgeport -h DESCRIPTION Use this command to enable or disable E_Port capability on a port or to lock down a port as an E_Port. E_Port capability is enabled by default.
  • Page 678 portCfgEport mode Specifies the E_Port configuration as one of the following: Disables E_Port capability for the specified ports. Enables the ports as E_Ports. This is the default port state. Locks down the ports as E_Ports. This command effectively disables the port's F_Port capability.
  • Page 679: Portcfgexport

    portCfgEXPort portCfgEXPort Sets a port to be an EX_Port, and sets and displays EX_Port configuration parameters. SYNOPSIS portcfgexport [slot/]port portcfgexport [-a admin] portcfgexport [-f fabricid] portcfgexport [-r ratov] portcfgexport [-e edtov] portcfgexport [-d domainid] portcfgexport [-p pidformat] portcfgexport [-t fabric_parameter] portcfgexport [-m port mode] portcfgexport [-i mode] DESCRIPTION...
  • Page 680 portCfgEXPort If the Fabric Parameter attribute value is "User configured", the port ID format R_A_TOV and E_D_TOV values display the configured values. A configuration change that would result in an invalid domain ID for McDATA Open Fabric mode or McDATA Fabric mode causes the preferred domain ID to be set to the minimum valid McDATA mode domain ID of 1.
  • Page 681 portCfgEXPort McDATA Open Fabric mode. McDATA Fabric mode. MCDATA fabric legacy mode. -i mode Enables or disables Insistent Domain Id (IDID) for the specified EX_Port. Specify 1 to enable IDID, specify 2 to disable IDID. This command must be issued from a McDATA edge switch attached to a single or dual FCR configuration.
  • Page 682: Portcfgfaultdelay

    portCfgFaultDelay portCfgFaultDelay Configures the fault delay for a single FC port. SYNOPSIS portcfgfaultdelay [slot/]port delay portcfgfaultdelay --help DESCRIPTION Use this command to configure the fault delay of an FC port. In the event that the link is noisy after a host power cycle, the switch may go into a soft fault state, which means a delay of R_A_TOV.
  • Page 683 portCfgFaultDelay Locked L_Port Locked G_Port Disabled E_Port Locked E_Port ISL R_RDY Mode RSCN Suppressed Persistent Disable LOS TOV enable NPIV capability QOS E_Port Port Auto Disable: Rate Limit EX Port Mirror Port Credit Recovery F_Port Buffers Fault Delay: 1(1.2sec) NPIV PP Limit: CSCTL mode: D-Port mode: Compression:...
  • Page 684 portCfgFaultDelay ........ Fault Delay where AE:QoSAutoEnable, AN:AutoNegotiate, ..:OFF, -:NotApplicable, ??:INVALID (output truncated) SEE ALSO portCfgShow Fabric OS Command Reference 53-1001764-01...
  • Page 685: Portcfgfec

    portCfgFec portCfgFec Enables or disables the Forward Error Correction flag in the chassis configuration file. SYNOPSIS portcfgfec --enable [slot/]port[-port] portcfgfec --disable [slot/]port[-port] portcfgfec --show portcfgfec --help DESCRIPTION Use this command to enable or disable the Forward Error Correction (FEC) flag on a specified port or on a range of ports, or to display the configuration.
  • Page 686 portCfgFec Forward Error Correction configured Displays ON if FEC is enabled on the port. Displays OFF if the feature is disabled (default). --help Displays the command usage. EXAMPLES To enable the FEC feature on a single port and to display the configuration: switch:admin>...
  • Page 687: Portcfgfillword

    portCfgFillword portCfgFillword Configures the fill word for a single 8G FC port. SYNOPSIS portcfgfillword [slot/]port, mode [passive] portcfgfillword --help DESCRIPTION Use this command to configure the fill word of an 8G FC port. By default, his command disables and re-enables the port and the port comes online with the new fill word setting. When used with the passive option, the new settings are not applied until the next time the port goes offline and comes back online.
  • Page 688 portCfgFillword To set the fill word of a port to ARBFF-ARBFF using the -arbff-arbff option: switch:admin> portcfgfillword 2/3, -arbff-arbff To set the fill word of a port to IDLE-ARBFF using the -idle-arbff option: switch:admin> portcfgfillword 27, -idle-arbff switch:admin> portcfgshow 27 Area Number: Speed Level: AUTO(HW)
  • Page 689: Portcfgfportbuffers

    portCfgFportBuffers portCfgFportBuffers Configures F_Port buffer allocation. SYNOPSIS portcfgfportbuffers --enable [slot/]port buffers portcfgfportbuffers --disable [slot/]port DESCRIPTION Use this command to change the default buffer allocation for an F_Port and to allocate a specified number of buffers to the port. When port buffer allocation is enabled, the number of buffers specified override the default F_Port buffer allocation.
  • Page 690: Portcfggemediatype

    portCfgGeMediaType portCfgGeMediaType Sets the selected mode for the ge0 and ge1 ports on the Brocade 7800. SYNOPSIS portcfggemediatype ge_port [optical | copper] portcfggemediatype --help DESCRIPTION Use this command to set the mode for ge0 and ge1 ports on the Brocade 7800. Each of the ge0 and ge1 ports on the Brocade 7800 can be configured as a copper port (RJ45) or an optical port (SFP).
  • Page 691 portCfgGeMediaType --help Displays the command usage. EXAMPLES To select an optical mode for ge0: switch:admin> portcfggemediatype ge0 optical To display the current configuration: switch:admin> portcfggemediatype ge0 Port ge1 is configured in optical mode To restore the default configuration (copper only ports are selected): switch:admin>...
  • Page 692: Portcfggport

    portCfgGport portCfgGport Designates a port as a G_Port; removes G_Port designation. SYNOPSIS portcfggport [slot/]port,mode DESCRIPTION Use this command to designate a port as a G_Port. After successful execution of this command, the switch attempts to initialize the specified port as an F_Port only, and does not attempt loop initialization (FL_Port) on the port.
  • Page 693: Portcfgislmode

    portCfgISLMode portCfgISLMode Enables or disables ISL R_RDY mode on a port. SYNOPSIS portcfgislmode [slot/]port,mode DESCRIPTION Use this command to enable or disable interswitch link read-ready (ISL R_RDY) mode on a port. Use the portCfgShow command to determine whether ISL R_RDY mode is enabled on a port. In ISL R_RDY mode, the port sends a primitive signal that the port is ready to receive frames.
  • Page 694 portCfgISLMode To disable ISL R_RDY mode on a port: switch:admin> portcfgislmode 1/3, 0 SEE ALSO configure, portCfgLongDistance, portCfgShow Fabric OS Command Reference 53-1001764-01...
  • Page 695: Portcfglongdistance

    portCfgLongDistance portCfgLongDistance Configures a port to support long distance links. SYNOPSIS portcfglongdistance [slot/]port [distance_level] [vc_translation_link_init] [desired_distance] DESCRIPTION Use this command to allocate frame buffer credits to a port or to configure a specified long distance link. The port can only be used as an E_Port. Changes made by this command are persistent across switch reboots and power cycles.
  • Page 696 portCfgLongDistance distance_level Specify the long distance level as one of the following (the numerical value representing each distance_level is shown in parentheses): L0 (0) Specify L0 to configure the port as a regular port. A total of 20 full-size frame buffers are reserved for data traffic, regardless of the port's operating speed;...
  • Page 697 portCfgLongDistance Interrupts: Link_failure: 0 Frjt: Unknown: Loss_of_sync: 0 Fbsy: Lli: Loss_of_sig: Proc_rqrd: Protocol_err: 0 Timed_out: Invalid_word: 0 Rx_flushed: Invalid_crc: Tx_unavail: Delim_err: Free_buffer: Address_err: Overrun: Lr_in: Suspended: Lr_out: Parity_err: Ols_in: 2_parity_err: 0 Ols_out: CMI_bus_err: SEE ALSO configure, portCfgISLMode, portCfgTrunkPort, portCfgShow, portShow, switchShow Fabric OS Command Reference 53-1001764-01...
  • Page 698: Portcfglosstov

    portCfgLossTov portCfgLossTov Enables or disables de-bouncing of signal loss for front end ports. SYNOPSIS portcfglosstov [slot/]port mode DESCRIPTION Use this command to enable or disable the de-bouncing of loss of signal for 100 ms for front end ports. Use portCfgShow to display the current setting. If executed without operands, the command prints the usage.
  • Page 699: Portcfglport

    portCfgLport portCfgLport Configures a port as an L_Port. SYNOPSIS portcfglport [[slot/]port] locked_mode [private_mode] [duplex_mode]] DESCRIPTION Use this command to designate a port as an L_Port, and to configure its behavior. When a port is designated as an L_Port, the switch attempts to initialize that port as a fabric L_Port (FL_Port). The switch will never attempt a point-to-point (F_Port) initialization on the port.
  • Page 700 portCfgLport To display the L_Port conditions: switch:admin> portcfglport [...] Ports of Slot 4 8 9 10 11 12 13 14 15 ---------------+--+--+--+--+---+--+--+--+--+--+--+--+---+--+--+-- [...] Locked L_Port ....ON ..ON ON Private L_Port ..
  • Page 701: Portcfgnpivport

    portCfgNPIVPort portCfgNPIVPort Enables or disables N_Port ID virtualization (NPIV) functionality on a port and sets the per-port login limit. SYNOPSIS portcfgnpivport --enable [slot/]port portcfgnpivport --disable [slot/]port portcfgnpivport --setloginlimit [slot/]port login_limit portcfgnpivport --help portcfgnpivport [slot/]port mode DESCRIPTION Use this command to enable or disable NPIV functionality on a port and to configure the maximum number of logins for this port.
  • Page 702 portCfgNPIVPort NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. When using portCfgNPIVPort --disable or --enable on trunked ports, you must disable all trunk member ports before changing the NPIV capability on a trunk member and then re-enable the trunked ports to ensure that the configuration changes take effect.
  • Page 703 portCfgNPIVPort Persistent Disable..ON ON ......LOS TOV enable ........ NPIV capability ON ON ON ON ON ON ON ON ON ON ON ON ON ON ON ON...
  • Page 704 portCfgNPIVPort Persistent Disable LOS TOV enable NPIV capability QOS E_Port Port Auto Disable: Rate Limit EX Port Mirror Port Credit Recovery F_Port Buffers Fault Delay: 0(R_A_TOV) NPIV PP Limit: CSCTL mode: Frame Shooter Port D-Port mode: SEE ALSO configure, portCfgDefault, portCfgShow Fabric OS Command Reference 53-1001764-01...
  • Page 705: Portcfgnport

    portCfgNPort portCfgNPort Enables or disables N_Port functionality for an Access Gateway port. SYNOPSIS portcfgnport [slot/]port1[-port2] [mode] DESCRIPTION Use this command to enable or disable N_Port functionality for an Access Gateway port or for a range of ports. The enabled N_Ports automatically come online if they are connected to an enterprise fabric switch that supports NPIV.
  • Page 706: Portcfgoctetspeedcombo

    portCfgOctetSpeedCombo portCfgOctetSpeedCombo Sets port speed combination for a port octet. SYNOPSIS portcfgoctetspeedcombo [slot]port combo portcfgoctetspeedcombo [slot]port -default DESCRIPTION Use this command to configure the speed for a port octet. A Condor 3 ASIC has six octets, each of which contains eight ports. You can configure up to three different speed combinations. When you configure a given port, the combination applies to all ports in the octet.
  • Page 707 portCfgOctetSpeedCombo combo Specifies the speed combination for the ports in the octet. The following speed combinations are supported: Supports autonegotiated or fixed port speeds of 16 Gbps,8 Gbps,4 Gbps, and 2 Gbps. Supports autonegotiated or fixed port speeds of 10 Gbps,8 Gbps,4 Gbps, and 2 Gbps.
  • Page 708: Portcfgpersistentdisable

    portCfgPersistentDisable portCfgPersistentDisable Persistently disables a port or a range of ports. SYNOPSIS portcfgpersistentdisable portcfgpersistentdisable [slot/]port1[-port2] [...] portcfgpersistentdisable -i [index1[-index2] [...] [-f]] portcfgpersistentdisable -slot [slot1[-slot2] [...] portcfgpersistentdisable -h DESCRIPTION Use this command to persistently disable a port or a range of ports. Persistently disabled ports remain disabled across power cycles, switch reboots, and switch enables.
  • Page 709 portCfgPersistentDisable -i index1[-index2] Persistently disables a port or a range of ports identified by port index numbers. You may specify multiple index ranges separated by a space, for example, -i 33-38 40-60. Ignores nonexisting ports. This operand is valid only with the -i option. -slot [slot1[-slot2] Persistently disables all ports on a slot or on a range of slots, for example, -s 3-5.
  • Page 710 portCfgPersistentDisable Disabled - YES YES YES YES Slot 0 ---------+---+---+---+---+---+---+---+-- Disabled YES YES YES YES YES YES YES YES SEE ALSO ficonCupSet, ficonCupShow, portCfgDefault, portDisable, portEnable, portCfgPersistentEnable, portShow, portSwapDisable, portSwapShow, switchShow Fabric OS Command Reference 53-1001764-01...
  • Page 711: Portcfgpersistentenable

    portCfgPersistentEnable portCfgPersistentEnable Persistently enables a port or a range of ports. SYNOPSIS portcfgpersistentenable portcfgpersistentenable [slot/]port1[-port2] [...] portcfgpersistentenable -i [index1[-index2] [...] [-f]] portcfgpersistentenable -s[lot] [slot1[-slot2] portcfgpersistentenable -h DESCRIPTION Use this command to persistently enable a port or a range of ports. If the port is connected to another switch when this command is issued, the fabric may reconfigure.
  • Page 712 portCfgPersistentEnable -i index1[-index2] Persistently enables a port or a range of ports identified by port index numbers. You may specify multiple index ranges separated by a space, for example, 33-38 40-60. Ignores nonexisting ports. This operand is valid only with the -i option. -slot [slot1[-slot2] Persistently enables all ports on a slot or on a range of slots, for example, -s 3-5.
  • Page 713: Portcfgqos

    PortCfgQoS PortCfgQoS Enables or disables QoS, sets the default configuration, and sets and resets the ingress rate limit. SYNOPSIS portcfgqos --disable | --enable [slot/]port portcfgqos --setratelimit [slot/]port ratelimit portcfgqos --resetratelimit [slot/]port portcfgqos --enable | --disable [slot/]port[-port] csctl_mode portcfgqos --default [slot/]port portcfgqos --help DESCRIPTION Use this command to configure traffic prioritization on a port.
  • Page 714 PortCfgQoS OPERANDS This command has the following operands: slot For bladed systems only, specifies the slot number of the port to configure, followed by a slash (/). port[-port] Specifies the port or port range to be configured, relative to the slot for bladed systems.
  • Page 715 PortCfgQoS To enable CS_CTL VC mode on a port when QoS is enabled.: switch:admin> portcfgqos --enable 1/10-16 csctl_mode Enabling CSCTL mode flows causes QoS zone flows to \ lose priority on such ports Do you want to proceed?(y/n): y switch:admin> portcfgshow -slot 1 Index: 9 10 11 12 13 14 15 16...
  • Page 716: Portcfgshow

    portCfgShow portCfgShow Displays port configuration settings. SYNOPSIS portcfgshow portcfgshow [slot/]port portcfgshow -i [ndex1[-index2] [...] [-f]] portcfgshow -slot slot1[-slot2] [...] portcfgshow option [slot/][ge_port] [arguments] [optional_arguments] DESCRIPTION Use this command to display the current configuration of a port. The behavior of this command is platform-specific;...
  • Page 717 portCfgShow Fill Word (Current) Displays the currently effective fill word setting. Possible values are 0(Idle-Idle), 1(arbff-arbff), 2(Idle-arbff), or 3(A-A then SW I-A).This parameter is set by the portcfgFillword command. AL_PA Offset 13 Displays (..) or OFF when the arbitrated loop physical address (AL_PA) on the port is configured to use a 0x0 AL_PA address (default).
  • Page 718 portCfgShow RSCN Suppressed Displays ON when RSCN suppression is enabled on the port. Displays (..) or OFF when RSCN suppression is disabled. This value is set by the portCfg rscnsupr command. Persistent Disable Displays ON when the port is persistently disabled; otherwise displays (..) or OFF. This value is set by the portCfgPersistentDisable command.
  • Page 719 portCfgShow NPIV PP Limit Displays the maximum number of allowed logins for the port. Displays the default of 126 or the configured maximum. This parameter is set with the portCfgNPIVPort --setloginlimit command. CSCTL mode Displays ON if CSCTL mode is enabled on the port. Displays (..) or OFF if the feature is disabled.
  • Page 720 portCfgShow -i index1[-index2] Specifies a port or a range of ports identified by port index numbers. You can specify multiple index ranges separated by a space, for example, -i 33-38 40-60. Ignores nonexisting ports. This operand is valid only with the -i option. -slot slot1[-slot2] Specifies a slot or a range of slots.
  • Page 721 portCfgShow -ipsec On the Brocade FR4-18i, this option displays IKE and IPSec policy information on IPSec-enabled tunnels. On the Brocade 7800/FX8-24, this option displays whether IPSec is enabled or disabled. If enabled, the key is displayed. If IPSec is enabled and configured in legacy mode, the mode is displayed as "legacy". The mode information is displayed whether or not you issue the -ipsec option.
  • Page 722 portCfgShow To display the port configuration settings on a Brocade 5100 for a range of ports specified by their index numbers: switch:admin> portcfgshow -i 3-5 Speed Fill Word(On Active) 0 Fill Word(Current) AL_PA Offset 13 Trunk Port Long Distance VC Link Init Locked L_Port Locked G_Port Disabled E_Port...
  • Page 723 portCfgShow Credit Recovery ON ON ON ON ON ON ON ON ON ON ON ON ON ON ON ON Fport Buffers ........ Port Auto Disable ..
  • Page 724 portCfgShow F_Port Buffers NPIV PP Limit: Fault Delay: 0(R_A_TOV) NPIV PP Limit: D-Port mode: Compression: Encryption: active To display port configuration settings on a DCX with a Brocade FCOE10-24 blade in Slot 12: switch:admin> portcfgshow -slot 12 Index: 112 113 114 115 116 117 118 119 [truncated] ------------------+---+---+---+-----+---+---+---+-----+---+---+- Octet Speed Combo...
  • Page 725 portCfgShow VC Link Init Locked L_Port Locked G_Port Disabled E_Port ISL R_RDY Mode RSCN Suppressed Persistent Disable LOS TOV enable NPIV capability QOS E_Port Port Auto Disable: Rate Limit EX Port Mirror Port Credit Recovery F_Port Buffers NPIV PP Limit: CSCTL mode: Fault Delay 1(1.2sec)
  • Page 726 portCfgShow Fastwrite off Tape Pipelining off Committed Rate 100000 Kbps (0.100000 Gbps) SACK on Min Retransmit Time 100 Keepalive Timeout 10 Max Retransmissions 8 VC QoS Mapping off DSCP (Control): 0, DSCP (Data): 0 VLAN Tagging Not Configured VC QoS Map: (default) VC DSCP L2CoS VC DSCP L2CoS VC DSCP L2CoS...
  • Page 727 portCfgShow Interface IPv6 Address Len MTU -------------------------------------------------------- 20::2:10 1500 Inband management configuration: configuration: IP Address Mac Address ------------------------------ Iproute Configuration: IP Address Mask Gateway Metric ------------------------------------------------------ 192.168.42.0 255.255.255.0 192.168.2.250 IPv6ddress Gateway Metric ------------------------------------------------------- 20:42:: 20::2:250 Inband Management route configuration: Fciptunnel configuration: Vlantag configuration: -------------------------...
  • Page 728 portCfgShow TPerf Option: Off IPSec: Enabled (legacy) IPSec Key: '12345678901234567890123456789012' QoS Percentages: High 50%, Med 30%, Low 20% Remote WWN: Not Configured Local WWN: 10:00:00:05:1e:52:fe:00 Flags: 0x00000000 FICON: Off switch:admin> portcfgshow fciptunnel 1/12 ------------------------------------------- Tunnel ID: 1/12 Tunnel Description: Compression: Off Fastwrite: Off Tape Acceleration: Off TPerf Option: Off...
  • Page 729: Portcfgspeed

    portCfgSpeed portCfgSpeed Configures the speed for a port or a range of ports. SYNOPSIS portcfgspeed [slot/]port speed portcfgspeed -i [index1[-index2] [-f] speed] portcfgspeed -slot [slot1[-slot2] [...] speed portcfgspeed -h DESCRIPTION Use this command to set the speed on a specified port or port range. This command disables and then re-enables the ports, and the ports come online with the new speed setting.
  • Page 730 portCfgSpeed -slot [slot1[-slot2] Configures all ports on a slot or on a range of slots, for example, -s 3-5. You may specify multiple slot ranges separated by a space, for example, -s 3-5 8-10. speed Sets speed for the specified ports. This operand is required. Valid values are one of the following.
  • Page 731: Portcfgtrunkport

    portCfgTrunkPort portCfgTrunkPort Enables or disables trunking on a port. SYNOPSIS portcfgtrunkport [slot/]port[,] mode DESCRIPTION Use this command to enable or disable trunking on a port. Use switchCfgTrunk to enable or disable trunking on all ports of a switch. When the command is executed to update the trunking configuration, the port to which the configuration applies is disabled and subsequently re-enabled with the new trunking configuration.
  • Page 732: Portcfgvexport

    portCfgVEXPort portCfgVEXPort Configures a port as a VEX_Port connected to an FC-IP and sets and displays VEX_Port configuration parameters. SYNOPSIS portcfgvexport [slot/]port portcfgvexport [-a admin] portcfgvexport [-f fabricid] portcfgvexport [-r ratov] portcfgvexport [-e edtov] portcfgvexport [-d domainid] portcfgvexport [-p pidformat] portcfgvexport [-t fabric_parameter] portcfgvexport [-m portmode] DESCRIPTION...
  • Page 733 portCfgVEXPort OPERANDS This command has the following operands: -a admin Enables or disables the specified port as a VEX_Port. Valid values are 1 (enable as VEX_Port), 2 (disable as VEX_Port and enable as non-VEX_Port). portCfgDefault may also be used to disable VEX_Ports. -f fabricid Specifies the fabric ID.
  • Page 734 portCfgVEXPort principal WWN: 10:00:00:60:69:c0:05:8a Fabric Parameters: Auto Negotiate R_A_TOV: 9000(N) E_D_TOV: 2000(N) Edge fabric's primary wwn: N/A Edge fabric's version stamp: N/A To set the fabric ID of port 2/21 to 5 and the port ID format to core: switch:admin> portcfgvexport 2/21 -f 5 -p 1 To configure port 2/20 as a VEX_Port and set the fabric ID to 4: switch:admin>...
  • Page 735: Portcmd

    portCmd portCmd Diagnoses intelligent ports. SYNOPSIS portcmd --ipperf [slot/]ge port -s src_ip -d dst_ip -S | -R [-i interval] [-p port] [-q diffserv] [-r committed_rate][-t running_time][-z size] [-v vlan_id [-c L2 Class-of-Service]] portcmd --ping [slot/][slot/]ge port -s src_ip -d dst_ip [-x | -crossport] [-n num_requests][-q service_type] [-t ttl][-w wait_time] [-z size][-v vlan_id [-c L2 Class-of-Service]] portcmd --traceroute [slot/][slot/]ge port...
  • Page 736 portCmd bad CRC payloads rx Number of bad CRC payloads received. out of seq PDUs rx Number of out-of-sequence PDUs received. flow control count Flow control count. last rtt Last Round trip in milliseconds (RT traffic only). When issued with the ipperf option, this command determines characteristics of the path to the remote host.
  • Page 737 portCmd OPERANDS This command has the following operands: slot For bladed systems only, specifies the slot number of the port to be configured, followed by a slash (/). ge port Specifies the port number of the GbE port on the blade. --ipperf Determines the path characteristics to the remote host.
  • Page 738 portCmd -v vlan_id Specifies the VLAN ID. Values must be in the range between 1 and 4094. There is no default value. Note that a VLAN tag entry must exist on the local and remote sides prior to issuing the -v option. A VLAN Tag table entry is dynamically maintained by the ipperf application.
  • Page 739 portCmd --traceroute Traces the IP router hops used to reach the host dst_ip from one of the source IP interfaces on the GbE port. Valid arguments include the following: -s src_ip Specifies the local IP address to use for sourcing the probe packets. IPv6 addresses are supported.
  • Page 740 portCmd -sink | -source Designates the switch to function either as a data sink or a data source. This operand is required. When -sink is specified, TPerf begins to respond to traffic sent by the switch acting as the data source. The process continues to run until it is either terminated by user intervention (Ctrl +C) or, if a value for duration is specified with the -t option, until the process completes the set time frame.
  • Page 741 portCmd -size pdu_size Specifies the PDU size to use (not including headers). The valid range is between 2048 and 10112 bytes. The default is equivalent to the maximum segment size (MSS). This is the maximum size if the -random option is specified. -interval interval Specifies the interval at which the statistics display is refreshed, in seconds.
  • Page 742 portCmd To set the path characteristic to source mode on the remote host using VLAN tagging with the -c option. switch:admin> portcmd --ipperf 8/ge0 -s 192.168.10.1 -d 192.168.20.1 -S -v 10 -c 3 To create a TPerf data sink on VE_Port 16: switch:admin>...
  • Page 743 portCmd To configure a TPerf source to generate one-way low priority traffic with a random PDU size from 2048 to 4000 bytes and a payload pattern of ones. switch:admin> portcmd --tperf 16 -source -low \ -size 4000 -random -unidirectional -pattern 2 TPerf has been configured successfully for 16 TPerf is generating traffic on 16 priority: low...
  • Page 744: Portdebug

    portDebug portDebug Sets debug level and verbose level of port modules. SYNOPSIS portdebug dbg_lvl, vbs_lvl DESCRIPTION Use this command to set the debug level and verbose level of port modules. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 745: Portdecom

    portDecom portDecom Decommissions and disables an E_Port without frame loss. SYNOPSIS portdecom portdecom [slot/]port portdecom --help DESCRIPTION Use this command to disable an E_Port without frame loss. The E_Port can either be a single redundant E_Port or an E_Port which is part of a trunk group. The port must be an operational E_Port with at least one other redundant E_Port available to reach all domains that the E_Port can reach.
  • Page 746: Portdisable

    portDisable portDisable Disables a port or a range of ports. SYNOPSIS portdisable [slot/]port1[-port2] [...] portdisable -i [index1[-index2] [...] [-f]] portdisable -slot [slot1[-slot2] [...] portdisable -h DESCRIPTION Use this command to disable a port or a range of ports. If the port is connected to another switch when disabled, the fabric may reconfigure.
  • Page 747 portDisable EXAMPLES To disable a single port. switch:admin> portdisable 2/4 To disable a range of ports: switch:admin> portdisable 2/4-8 To disable multiple port ranges: switch:admin> portdisable 2/24-26 3/10-12 4/3-4 To disable a port by specifying its index number: switch:admin> portdisable -i 176 To disable a range of ports by specifying the corresponding port index range: switch:admin>...
  • Page 748: Portdporttest

    portDPortTest portDPortTest Initiates or terminates a D_Port test. SYNOPSIS portdporttest --start [slot/]port_list portdporttest --stop [slot/]port_list portdporttest --show [slot/]port_list | all portdporttest --help DESCRIPTION Use this command to manually terminate or re-initiate testing on a diagnostic port (D_Port). The port must be configured as a D_Port and physically connected to a second D_Port on a remote switch. Refer to the portCfgDPort command for more information.
  • Page 749 portDPortTest Roundtrip link latency Displays roundtrip link latency in nanoseconds or unknown when the test is in progress. Roundtrip link latency is the time required for the light to travel from a given port to the port at the remote side of the link and back again. Estimated cable distance The estimated physical distance of the interswitch link in meters.
  • Page 750 portDPortTest EXAMPLES To initiate the D_Port test on a single port: switch:admin> portdporttest --start To terminate the D_Port test on a single port: switch:admin> portdporttest --stop To display the runtime status for a single D_Port while the test is in progress: switch:admin>...
  • Page 751: Portenable

    portEnable portEnable Enables a port or a range of ports. SYNOPSIS portenable [slot/]port1[-port2] [...] portenable -i [index1[-index2] [...]] [-f] portenable -slot [slot1[-slot2] portenable -h DESCRIPTION Use this command to enable a port or a range of ports. If a port is connected to another switch when this command is issued, the fabric may reconfigure.
  • Page 752 portEnable EXAMPLES To enable a single port: switch:admin> portenable 2/4 To enable a range of ports: switch:admin> portenable 2/4-8 To enable multiple port ranges: switch:admin> portenable 2/24-26 3/10-12 4/3-4 To enable a port by specifying its index number: switch:admin> portenable -i 176 portenable: portSwap feature enabled.
  • Page 753: Porterrshow

    portErrShow portErrShow Displays a port error summary. SYNOPSIS porterrshow DESCRIPTION Use this command to display an error summary for all ports. Counts are reported on frames transmitted by the port (Tx) or on frames received by the port (Rx). The display contains one output line per port. Numeric values exceeding 999 are displayed in units of thousands (k), or millions (m) if indicated.
  • Page 754 portErrShow c3-timeout rx The number of receive class 3 frames received at this port and discarded at the transmission port due to timeout (platform- and port-specific). NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 755: Portfencing

    portFencing portFencing Configures the Fabric Watch port fencing feature. SYNOPSIS portfencing --show portfencing --enable port_type_list | all -area area_list | -area all portfencing --disable port_type_list | all -area area_list | -area all portfencing --help DESCRIPTION Use this command to enable or disable the Fabric Watch port fencing feature for specified port types and Fabric Watch areas.
  • Page 756 portFencing The following operands are required with the --enable and --disable options. port_type_list | all Specifies one or more port types for which to enable or disable port fencing. When specifying multiple port types, the list members must be separated by a comma. Alternately, use the all option to specify all of the following port types: e-port Enables or disables port fencing for all E_Ports.
  • Page 757 portFencing To display the current port fencing configuration: switch:admin> portFencing --show Port Type|Area |PF Status ---------|----------------|------------ E-port |CRC |disabled |ITW |enabled |enabled |enabled |enabled FOP-port |CRC |enabled |ITW |enabled |enabled |C3TX_TO |enabled |enabled |enabled Port |CRC |enabled |ITW |disabled |disabled |C3TX_TO |disabled |disabled...
  • Page 758: Portflagsshow

    portFlagsShow portFlagsShow Displays the port status bitmaps for all ports in a switch. SYNOPSIS portflagsshow DESCRIPTION Use this command to display the following status for a port: SNMP Displays whether the port is online or offline. Physical Displays the port physical status. Valid values are In_Sync, No_Light (Condor 2 ports only), and No_SigDet (quad small form-factor pluggables (QSFPs) installed without cables).
  • Page 759 portFlagsShow 19 Offline No_Module PRESENT U_PORT LED 20 Offline No_Module PRESENT U_PORT LED 21 Offline No_Module PRESENT U_PORT LED 22 Offline No_Module PRESENT U_PORT LED (output truncated) To display the port status for QSFPs installed without cables (partial output) : 16 Offline No_SigDet PRESENT U_PORT LED...
  • Page 760: Portledtest

    portLedTest portLedTest Cycles user port LEDs. SYNOPSIS portledtest [--slot slot_number] [-ports itemlist] [-npass count] [-action value] ceeportledtest [--slot slot_number] [-ports itemlist] [-npass count] [-action value] DESCRIPTION Use this command to exercise the user port LEDs in the current switch. When used without a slot or port specifier, all ports are tested.
  • Page 761 portLedTest Turn Port status LED off. Turn Port status LED amber. Turn Port status LED green. Turn Port speed LED green. Turn Port speed LED amber. EXAMPLES To test port LEDs: switch:admin> portledtest --slot 1 -ports 1/1-1/5 Running portledtest ....WARNING: This test should NOT be aborted in the middle.
  • Page 762: Portlogclear

    portLogClear portLogClear Clears the port log. SYNOPSIS portlogclear DESCRIPTION Use this command to clear the port log. It is recommended that you clear the port log before triggering an activity so that the log displays only the log events related to that activity. If the port log is disabled, portLogClear enables it.
  • Page 763: Portlogconfigshow

    portLogConfigShow portLogConfigShow Displays the current port log configuration. SYNOPSIS portlogconfigshow DESCRIPTION Use this command to display the current port log configuration. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 764: Portlogdisable

    portLogDisable portLogDisable Disables the port log facility. SYNOPSIS portlogdisable DESCRIPTION Use this command to disable the port log facility. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details.
  • Page 765: Portlogdump

    portLogDump portLogDump Displays the port log without page breaks. SYNOPSIS portlogdump [count[, saved]] DESCRIPTION Use this command to display the port log, listing all entries in the log without page breaks. This command displays the same information as portLogShow, but portLogShow prompts you to press Enter between each page.
  • Page 766: Portlogdumpport

    portLogDumpPort portLogDumpPort Displays the port log of a specified port without page breaks. SYNOPSIS portlogdumpport port_index DESCRIPTION Use this command to display the port log for a single port specified by its port index number. The command displays all entries in the log without any page breaks. This command is identical to portLogShowPort, except that portLogShowPort prompts you to press Enter to display the next page.
  • Page 767: Portlogenable

    portLogEnable portLogEnable Enables the port log facility. SYNOPSIS portogenable DESCRIPTION Use this command to enable the port log facility. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details.
  • Page 768: Portlogeventshow

    portLogEventShow portLogEventShow Displays information about port log events. SYNOPSIS portlogeventshow DESCRIPTION Use this command to display information about the ID associated with the various port log events. The Disabled field indicates whether the port log for that event ID is disabled (1) or enabled (0). NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 769: Portloginshow

    portLoginShow portLoginShow Displays port login status of devices attached to the specified port. SYNOPSIS portloginshow [slot/]port DESCRIPTION Use this command to display port login status received from devices attached to the specified port. For each login, this command displays the following fields: Type Type of login can display one of the following: FDISC, Discover F_Port Service Parameters or Virtual N_Port login.
  • Page 770 portLoginShow EXAMPLES To display the logins received by Port 23 (revealing one FLOGI (type fe) and two PLOGIs): switch:admin> portloginshow 23 Type World Wide Name credit df_sz cos ===================================================== 201700 21:00:00:e0:8b:05:a3:c9 2048 8 scr=1 201700 21:00:00:e0:8b:05:a3:c9 8 d_id=FFFC20 201700 21:00:00:e0:8b:05:a3:c9 8 d_id=FFFFFC SEE ALSO fcpProbeShow,...
  • Page 771: Portlogpdisc

    portLogPdisc portLogPdisc Sets or clears the debug_pdisc_flag. SYNOPSIS portlogpdisc 0 | 1 DESCRIPTION Use this command to set or clear the debug_pdisc_flag. This command is part of the environmental monitor. A setting of 1 enables logging of Port Discovery parameters. The PDISC log is disabled by default.
  • Page 772: Portlogreset

    portLogReset portLogReset Enables the port log facility. SYNOPSIS portlogreset DESCRIPTION Use this command to enable the port log facility. NOTES Refer to portLogClear for events that may disable the port log facility. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 773: Portlogresize

    portLogResize portLogResize Resizes the port log to include a specified number of entries. SYNOPSIS portlogresize num_entries DESCRIPTION Use this command to resize the port log to include a specified number of entries. If the specified number of entries is less than the already configured port log size, there is no change. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 774: Portlogshow

    portLogShow portLogShow Displays the port log with page breaks. SYNOPSIS portlogshow [count[, saved]] DESCRIPTION Use this command to display the port log with page breaks. This command displays the same information as portLogDump, but one page at a time. The port log is a circular log file in the switch firmware which can save up to 65,536 entries depending on the hardware platform.
  • Page 775 portLogShow ctout A CT based response is transmitted. errlog A message is added to the error log. loopscn A loop state change notification is posted. create A task is created. debug Indicates a debug message. nbrfsm Indicates a neighbor state transition. Indicates a speed negotiation state.
  • Page 776 portLogShow Tx & Rx Frame payload size. New state (see state codes below). pstate New physical state (see pstate codes below). ctin The CT-subtype: Simple Name Server. Alias Server. ctout The same as ctin. errlog Error level (refer to errShow). loopscn The current loop state during loop initialization.
  • Page 777 portLogShow ctin Argument 0 is divided into two 16-bit fields: [A] A bit map indicating whether subsequent arguments are valid (0001 means argument 1 is valid, 0003 means arguments 1 and 2 are valid). [B] The CT-based service command code. Argument 1 is the first word of the CT payload, if applicable (as specified in [A]).
  • Page 778 portLogShow Faulty E_Port F_Port Segmented pstate Valid pstate values include the following: Active State Link Reset: LR Transmit State Link Reset: LR Receive State Link Reset: LRR Receive State Link Failure: NOS Transmit State Link Failure: NOS Receive State Offline: OLS Transmit State Offline: OLS Receive State Offline: Wait for OLS State LIP reason...
  • Page 779 portLogShow 8009 LIP as requested by the LINIT ELS received. 800a LIP as requested by the LPC ELS received. Speed Negotiation States Valid states include the following: INIT Start negotiation. Negotiate master. Wait for signal. Negotiation follows. Negotiation complete. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 780 portLogShow 17:05:31.775 PORT Tx 02fffffd,00fffffd,0e08ffff,14000000 17:05:31.775 PORT debug 00c0ffee,00fd015c,14000000,00000001 17:05:31.777 PORT Rx c0fffffd,00fffffd,0e080907 17:05:31.778 PORT Tx 02fffffd,00fffffd,0e09ffff,14000000 17:05:31.779 PORT debug 00c0ffee,00fd015e,14000000,00000001 17:05:31.782 PORT Rx c0fffffd,00fffffd,0e090908 SEE ALSO portLogClear, portLogDump, upTime Fabric OS Command Reference 53-1001764-01...
  • Page 781: Portlogshowport

    portLogShowPort portLogShowPort Displays the port log of a specified port with page breaks. SYNOPSIS portlogshowport port_index DESCRIPTION Use this command to display the port log of a specified port with page breaks. This command displays the same information as portLogDumpPort, except that portLogDumpPort does not prompt you to press Enter to display the next page.
  • Page 782: Portlogtypedisable

    portLogTypeDisable portLogTypeDisable Disables the port log of a specified type. SYNOPSIS portlogtypedisable id DESCRIPTION Use this command to disable the port log for a specified port log type. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 783: Portlogtypeenable

    portLogTypeEnable portLogTypeEnable Enables the port log of a specified port log type. SYNOPSIS portlogtypeenable id DESCRIPTION Use this command to enable the port log for a specified port log type. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 784: Portloopbacktest

    portLoopbackTest portLoopbackTest Performs a functional test of port N->N path. SYNOPSIS portloopbacktest [--slot slot] [-nframes count] [-lb_mode mode] [-spd_mode mode] [-ports itemlist] ceeportloopbacktest [--slot slot] [-nframes count] [-lb_mode mode] [-spd_mode mode] [-ports itemlist] DESCRIPTION Use this command to verify the functional operation of the switch. The portLoopbackTest and ceePortLoopbackTest commands are platform-specific versions of the same test.
  • Page 785 portLoopbackTest CSPAT: 0x7e, 0x7e, 0x7e, 0x7e, ... BYTE_LFSR: 0x69, 0x01, 0x02, 0x05, ... CHALF_SQ: 0x4a, 0x4a, 0x4a, 0x4a, ... QUAD_NOT: 0x00, 0xff, 0x00, 0xff, ... CQTR_SQ: 0x78, 0x78, 0x78, 0x78, ... CRPAT: 0xbc, 0xbc, 0x23, 0x47, ... RANDOM: 0x25, 0x7f, 0x6e, 0x9a, ..NOTES Do not abort this test prematurely, using CTRL-C or q to quit.
  • Page 786 portLoopbackTest Runs test at 4 Gbps. Runs test at 8 Gbps (Default for 8 G platforms). Runs test at 10 Gbps (Default for 10 G platforms). -ports itemlist Specifies a list of blade ports to test. By default, all of the blade ports in the specified slot (--slot) are used.
  • Page 787: Portmirror

    portMirror portMirror Adds, deletes, or displays port mirror connections. SYNOPSIS portmirror portmirror --show portmirror --add [slot/]port SID DID portmirror --delete SID DID DESCRIPTION Use this command to add, delete, or display a mirror connection between two ports, a source and a destination port.
  • Page 788 portMirror State The state of the mirror connection. The state can either be "Defined" or "Enabled." In both cases, the port mirroring connection is persistently stored. A connection that is "Defined" has not been hardware-configured because at least one port is not online.
  • Page 789 portMirror --delete Deletes a mirror connection between a source and a destination. You must specify a SID and a DID when deleting a mirror connection. EXAMPLES To configure a port as a mirror port: switch:admin> portcfg mirrorport 18--enable Please confirm enable of Mirror Port: 17 (Y,y,N,n): [n] y To verify that port mirroring is enabled on port 18: switch:admin>...
  • Page 790 portMirror To display the mirror connections: switch:admin> portmirror --show Number of mirror connection(s) configured: 3 Mirror_Port State ---------------------------------------- 0x640c00 0x640800 Enabled 0x640700 0x640b00 Enabled 0x640700 0x640c00 Enabled To delete a port mirror connection between two local switch ports: switch:admin> portmirror --delete 0x640700 0x640c00 To add a port mirror connection between a local switch port and a remote switch port: switch:admin>...
  • Page 791: Portname

    portName portName Assigns or displays port names. SYNOPSIS portname portname [slot/]port [-n name] portname -i [index1[-index2][...][-f] [-n name]] portname -slot slot1[-slot2] [...][-n name] portname -h DESCRIPTION Use this command to assign a port name to a specified port or to a range of ports. The port name is included in the portShow output;...
  • Page 792 portName -n name Specifies the name to be assigned to the ports. The port name is a character string up to 128 characters, including spaces and characters, and excluding commas (,), semicolons (;), backlashes (\), and the at sign (@). To erase a port name, specify this operand as an empty string in double-quotation marks.
  • Page 793: Portperfshow

    portPerfShow portPerfShow Displays port throughput performance. SYNOPSIS portperfshow portperfshow [[slot/]port1[-[slot/]port2]] [-tx -rx | -tx | -rx] [-t interval]] portperfshow --help DESCRIPTION Use this command to display throughput information for all ports on a switch or chassis or to display the information for a specified port or port range.
  • Page 794 portPerfShow EXAMPLES To display performance information for all ports at a one second (default) interval: switch:user> portperfshow ==================================================================== 630.4m 630.4m ===================================================================== 0 210.1m 840.5m 210.1m Total ============================================== 2.5g ==================================================================== 630.4m 0 0 630.4m ===================================================================== 0 210.1m 840.6m 210.1m Total =============================================== 2.5g (output stopped) To display port performance for all ports with an interval of 5 seconds:...
  • Page 795 portPerfShow To display performance on a single port with at a 5 second interval: switch:user> portperfshow 0 -t 5 Total ================= 630.4m 630.4m Total ================= 630.3m 630.3m (output truncated) To display transmitter throughput for a single port at a 5 second interval: switch:user>...
  • Page 796: Portrouteshow

    portRouteShow portRouteShow Displays routing tables for the specified port. SYNOPSIS portrouteshow [slot/]port DESCRIPTION Use this command to display the port address ID for a specified port and the contents of the following port routing tables: External unicast routing table Displays how the specified port forwards unicast frames to remote domains in the following format: domain_number: ports_bitmap domain_number The remote domain ID to which frames are ultimately routed.
  • Page 797 portRouteShow EXAMPLES To display the routing tables for a port: switch:user> portrouteshow 4/15 port address ID: 0x02bf00 external unicast routing table: 1: 0x4 (vc=3) 2: 0x10000 (vc=0) internal unicast routing table: 60: 0x8000 (vc=2) 63: 0x1000 (vc=5) broadcast routing table: 0x10000 SEE ALSO bcastShow, fabricShow, switchShow, topologyShow,...
  • Page 798: Portshow

    portShow portShow Displays status and configuration parameters for ports and GbE ports. SYNOPSIS portshow [slot/][ge]port portshow -i [ index1 [-index2] [...]] [-f] portshow option [slot/]ge_port [optional_args] portshow option [all | ve_port] arguments [optional_arguments] portshow option [all |ge_port] arguments [optional_arguments] DESCRIPTION Use this command to display general port status and specific configuration parameters for a specified port, GbE port, or VE_Port.
  • Page 799 portShow NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. Some of the features supported by this command may require a license. In an AD context, if one of the L_Ports or NPIV ports is a part of the current AD, the complete device information attached to the port is shown in the output.
  • Page 800 portShow portType The port's type and revision numbers. POD Port Port on Demand License status. portState The port's SNMP state: Online Up and running. Offline Not online, see portPhys for more detail. Testing Running diagnostics. Faulty Failed diagnostics. Persistently Disabled Persistently disabled.
  • Page 801 portShow portId The port's 24-bit port ID. portIfId The user port's interface ID. portWwn The port's world wide name. portWwn of devices(s) connected The World Wide Port Names of connected devices. Distance The port's long-distance level. In the case of LD mode, the user configured distance and actual distance also are displayed.
  • Page 802 portShow DH Group Displays DH group [0-4] if DH-CHAP authentication is used. Otherwise displays N/A. Hash Algorithm Displays hash type (MD5 or SHA-1) if DH-CHAP authentication is used. Otherwise, displays N/A. Edge fabric's primary WWN If the EX_Port is connected to an edge switch with FCS policy enforcement, the WWN of the primary FCS is displayed when the edge fabric is secure and the primary FCS is online.
  • Page 803 portShow OPERANDS This command has the following port operands: slot For bladed systems only, specifies the slot number of the port to be displayed, followed by a slash (/). port Specifies the number of the port to be displayed, relative to its slot for bladed systems.
  • Page 804 portShow To display the current state of a port with encryption enabled: switch:admin> portshow 10/44 portIndex: 348 portName: slot10port44 portHealth: No Fabric Watch License Authentication: None portDisableReason: None portCFlags: 0x1 portFlags: 0x10000103 PRESENT ACTIVE E_PORT T_PORT\ T_MASTER G_PORT U_PORT ENCRYPT LOGIN LocalSwcFlags: 0x0 portType: 24.0...
  • Page 805 portShow To view xlate domains, you must issue the command on chassis with a Brocade FR4-18i blade. Note that the Front Domain ID is what is shown: switch:admin> portshow 8/4 portName: slot8port4 portHealth: No Fabric Watch License Authentication: None EX_Port Mode: Enabled Fabric ID: Front Phantom:...
  • Page 806 portShow To display an FCoE port: switch:admin> portshow 8 portIndex: portName: portHealth: HEALTHY Authentication: None portDisableReason: None portCFlags: 0x1 portFlags: 0x2cb03 PRESENT ACTIVE F_PORT G_PORT U_PORT\ LOGICAL_ONLINE LOGIN NOELP LED NSREG ACCEPT FLOGI portType: 17.0 POD Port: Port is licensed portState: 1 Online Protocol: FCoE...
  • Page 807 portShow ipif Displays the IP interface ID, IP address, netmask, and MTU for IPv4 addresses. Displays the prefix instead of the netmask for IPv6 addresses. Flags are explained in the command output (refer to the example below). iproute Displays the IP address, netmask, gateway, metrics, and flags. Displays the prefix instead of the netmask for IPv6 addresses.
  • Page 808 portShow Port: ge0 IP Address Mask Gateway Metric Flags ------------------------------------------------------------- 192.42.0.0 255.255.255.0 192.168.0.250 192.168.0.0 255.255.255.0 192.168.0.10 255.255.255.255 * U H L 192.168.0.11 255.255.255.255 * U H L 192.168.0.21 255.255.255.255 * 192.168.0.250 255.255.255.255 * U H L IPv6 Address Gateway Metric Flags ------------------------------------------------------------- 2000::...
  • Page 809 portShow 192.168.12.103 255.255.255.255 * U C (crossport) 192.168.12.201 255.255.255.255 * U H L (crossport) 192.168.21.0 255.255.255.0 U C (crossport) 192.168.21.103 255.255.255.255 * U C (crossport) 192.168.21.201 255.255.255.255 * U H L (crossport) To display the ARP tables on the Brocade 7800: switch:admin>...
  • Page 810 portShow • portShow fcipcircuit - Displays status and configuration for FCIP circuits: TCP statistics for the circuit Circuit-level VLAN tagging configuration Circuit-level Differentiated Services (DSCP) markings • portshow mgmtif - Displays the inband management interfaces. • portshow mgmtroute- Displays the routes for the inband management interfaces. •...
  • Page 811 portShow -d | --detail Displays a full view configuration details for all configured tunnels when used with the all port specifier. This view provides an alternative to specifying a specific VE_Port or to using the --perf option for a comprehensive view. -I | --ip-address Displays the IP addresses configured the specified circuits.
  • Page 812 portShow Displays data at the Initiator Target (SID/DID) FCP level. -itn Displays data at the Initiator Target nexus (SID/DID) level. -itl Displays data at the Initiator Target LUN (SID/DID/LUN) level. -twb Displays data at the Exchange (SID/DID/LUN/Exchange) level. command Specifies the type of information to be displayed. This operand is optional; if omitted, the default (-stats) is used.
  • Page 813 portShow -stats Displays global FICON Emulation statistics for the tunnel including FICON XRC Emulation, FICON Tape Write, FICON Tape Read, FICON Teradata Write, and FICON Teradata Read statistics. -fdpb adrs Displays FICON ports or a specific FICON Device Path Block. -fchb adrs Displays FICON logical partitions (LPARs) or a specific FICON Channel Control Block.
  • Page 814 portShow -rte Displays the current Routing Info SE memory. EXAMPLES To display FCIP tunnel configuration parameters on the Brocade 7800 with Ficon enabled: switch:admin> portshow fciptunnel 16 ------------------------------------------- Tunnel ID: 16 Tunnel Description: Admin Status: Enabled Oper Status: Up Compression: On (Aggressive) Fastwrite: Off Tape Acceleration: Off TPerf Option: Off...
  • Page 815 portShow To display an FCIP tunnel with additional circuit information: switch:admin> portshow fciptunnel 1/12 -c Tunnel ID: 1/12 Tunnel Description: Admin Status: Enabled Oper Status: Up Compression: Off Fastwrite: Off Tape Acceleration: Off TPerf Option: Off IPSec: Disabled QoS Percentages: High 50%, Med 30%, Low 20% Remote WWN: Not Configured Local WWN: 10:00:00:05:1e:52:fe:00 Peer WWN: 10:00:00:05:1e:39:a4:76...
  • Page 816 portShow To display additional performance parameters on tunnel 1/12 (add -c to display all circuits): switch:admin> portshow fciptunnel 1/12 --perf ------------------------------------------- Tunnel ID: 1/12 Tunnel Description: Admin Status: Enabled Oper Status: Up Compression: Off Fastwrite: Off Tape Acceleration: Off TPerf Option: Off IPSec: Disabled QoS Percentages: High 50%, Med 30%, Low 20% Remote WWN: Not Configured...
  • Page 817 portShow Remote WWN: Not Configured Local WWN: 10:00:00:05:1e:52:fe:00 Peer WWN: 10:00:00:05:1e:39:a4:76 Circuit Count: 2 Flags: 0x00000000 FICON: Off ------------------------------------------- Circuit ID: 1/12.0 Circuit Num: 0 Admin Status: Enabled Oper Status: Up Connection Type: Default Remote IP: 192.168.12.200 Local IP: 192.168.12.100 Metric: 0 Min Comm Rt: 2500000 Max Comm Rt: 2500000...
  • Page 818 portShow Keepalive Interval: 15 s Inactivity: 120 s ------------------------------------------- TCP Connection 1/12.0:15240900 Priority: F-Class (Output truncated) To display IPSec parameters on an IPSec-enabled tunnel: switch:admin> portshow fciptunnel 17 -i ------------------------------------------- Tunnel ID: 17 Tunnel Description: Admin Status: Enabled Oper Status: Empty Compression: Off Fastwrite: Off Tape Acceleration: Off...
  • Page 819 portShow |--> Circuit 1/12.1 High Level Circuit Stats: Operational Status: Up Connected Count: 1 Max Comm Rate: 2500000 Bytes In: 712 Bytes In Avg: 0 Bytes Out: 700 Bytes Out Avg: 0 Packets In: 4 Packets In Avg: 0 Packets Out: 5 Packets Out Avg: 0 Aggregate TCP Stats: TCP Bytes In: 68632640...
  • Page 820 portShow |---> TCP Conn 1/12.0:15240899 |---> TCP Conn 1/12.0:15240900 |---> TCP Conn 1/12.0:15240901 |---> TCP Conn 1/12.0:15241489 |---> TCP Conn 1/12.0:15241490 |---> TCP Conn 1/12.0:15241491 |---> TCP Conn 1/12.0:15241292 |---> TCP Conn 1/12.0:15241293 |---> TCP Conn 1/12.0:15241294 |---> TCP Conn 1/12.0:15241096 |--->...
  • Page 821 portShow Tape Acceleration: Off TPerf Option: Off IPSec: Enabled (legacy) QoS Percentages: High 50%, Med 30%, Low 20% Remote WWN: Not Configured Local WWN: 10:00:00:05:1e:52:fe:00 Peer WWN: 10:00:00:05:1e:39:a4:76 Circuit Count: 1 Flags: 0x00000000 FICON: Off To display a summary view of the FCIP tunnel and circuits showing then legacy flag for the tunnel: switch:admin>...
  • Page 822 portShow 1/22 Medium 2d23h11m 0.00 0.00 0.00 0.00 1/22 2d23h11m 0.00 0.00 0.00 0.00 1/22 0 1/xge0 - 2d23h11m 0.00 0.00 0.00 0.00 1/22 0 1/xge0 F-Class 2d23h11m 0.00 0.00 0.00 0.00 1/22 0 1/xge0 Medium 2d23h11m 0.00 0.00 0.00 0.00 1/22 0 1/xge0 Low...
  • Page 823 portShow Remote IP: 192.168.12.200 Local IP: 192.168.12.100 Metric: 0 Min Comm Rt: 2500000 Max Comm Rt: 2500000 SACK: On Min Retrans Time: 100 Max Retransmits: 8 Keepalive Timeout: 10000 Path MTU Disc: 0 VLAN ID: (Not Configured) L2CoS: (VLAN Not Configured) DSCP: 0 H: 0 M:...
  • Page 824 portShow Path MTU Disc: 0 VLAN ID: 300 L2CoS: F: 7 H: 5 M: 3 L: DSCP: 0 H: 0 M: 0 L: Flags: 0x00000000 To display additional performance parameters for a circuit: switch:admin> portshow fcipcircuit 1/12 0 --perf ------------------------------------------- Tunnel ID: 1/12 Tunnel Description: Admin Status: Enabled...
  • Page 825 portShow Oper Status: Up Connection Type: Default Remote IP: 192.168.12.200 Local IP: 192.168.12.100 Metric: 0 Min Comm Rt: 2500000 Max Comm Rt: 2500000 SACK: On Min Retrans Time: 100 Max Retransmits: 8 Keepalive Timeout: 10000 Path MTU Disc: 0 VLAN ID: (Not Configured) L2CoS: (VLAN Not Configured) DSCP: 0 H:...
  • Page 826 portShow Round Trip Time: 0 ms Out Of Order: 0 Slow Starts: 0 Performance Statistics - Priority: Medium Oper Status: Up Flow Ctrl State: Off Connected Count: 1 Duration: 3 days, 19 hours, 57 minutes, 43 seconds 26358236 Output Bytes 17 Bps 30s Avg, 79 Bps Lifetime Avg 29611 Output Packets 0 pkt/s 30s Avg, 0 pkt/s Lifetime Avg...
  • Page 827 portShow Interface IPv4 Address NetMask Effective MTU Flags -------------------------------------------------------------- 20.20.1.151 255.255.255.0 1500 Inband Management: ge2 Enabled Interface IPv4 Address NetMask Effective MTU Flags -------------------------------------------------------------- 20.20.2.151 255.255.255.0 1500 Flags: U=Up B=Broadcast D=Debug L=Loopback P=Point2Point R=Running N=NoArp PR=Promisc M=Multicast S=StaticArp LU=LinkUp To display the inband management interface for a single GbE Port on a Brocade 7800: switch:admin>...
  • Page 828 portShow To display the route for a single management interface on a Brocade 7800: switch:admin> portshow mgmtroute ge1 Inband Management Routes: Port: ge1 IP Address Mask Gateway Metric Flags ------------------------------------------------------------- 192.168.1.0 255.255.255.0 20.20.1.250 20.20.1.0 255.255.255.0 Flags: U=Usable G=Gateway H=Host C=Created(Interface) S=Static L=LinkLayer(Arp) To display FCP emulation statistics using the command with two levels and a single command: switch:admin>...
  • Page 829 portShow XRC Emulation Statistical Counts (decimal) ----------------------------------------------------------- Total Emulated RT Accepted Status 458399 Total Emulated RRS Chains 1475797 Total Emulated RRS Commands 1475797 Total Received RRS Bytes 59031880 Total XRC RRS Requests in Bytes 86871314608 Average RRS Request BlkSize Average RRS Requests per Chain Largest RRS Request Byte Count 58864 Ratio of RRS Read Bytes to the...
  • Page 830 portShow flg=10 parms=2001F2 typ=002086 mod=A04 mfg=IBM plnt=02 0410084000 0x176308640E****** Yes ESCN 0x14A40000 \ flg=10 parms=2001F2 typ=002086 mod=A04 mfg=IBM plnt=02 ------------------------ EgrOx IngOx Valid VTN ===== ===== ===== === sq=0000000E77DF tg=80F0 sq=0000000E77DF tg=80F2 sq=0000000E77DF tg=80F2 (Output split) To display the FICON Channel Blocks (all blocks and a specified block): switch:admin>...
  • Page 831 portShow 0410072000 0x176308640E0600** 0x00 0000 0410073100 0x176308640E0601** 0x00 0000 0410075100 0x176308640E0602** 0x00 0000 0410076880 0x176308640E0603** 0x00 0000 0410078000 0x176308640E0604** 0x00 0000 0410078880 0x176308640E0605** 0x00 0000 041007A000 0x176308640E0606** 0x00 0000 FC Egress parms: Type LPE BL CHPID Tag V Ve P B P VC EGID ==== === == ===== ========== = == = = = == ==== TAPE...
  • Page 832 portShow cmdHdrQueue cmdHdrQMax = MISC (hex) ========== state = 0x00 prevState = 0x18 lastStateArray= 0x1C371415 statusFlags = 0x4000 errorCode = 0x00 ingressOxid = 0xFFFF egressOxid = 0xFFFF allocatedOxid= 0xFFFF unsolIngrOxid = 0xFFFF lastStatus = 0x0C lastCmd = 0x00 tokenFlags = 0x00 lastCmdArray= 0x773E3E64 lastStsArray= 0x08040C0Cl \ astXprtArray=0x08040C0C lastSeqId...
  • Page 833 portShow maxWritePipe = 0x0000 maxReadPipe = 0x0002 teraCmdCode = 0x64 teraStatus = 0x0d emulTeraWriteOps = 0x00043085 emulTeraReadOps = 0x00000000 emulTeraWrtBytes = 0x00000001679cb8b0 emulTeraReadBytes = 0x0000000000000000 emulTeraWriteCcws = 0x00043085 emulTeraReadCcws= 0x00000000 multUnitCheckCnt = 0x00000000 currentWriteChain = 160 largestWriteChain = 43936 bytesInWritePipe atMaxWrtBytesCount IU Pacing Values:crrsIssued=0 creditsOutstanding=0 currentCreditBurst=0 Historic Emulation Headers:...
  • Page 834 portShow To display FICON emulation statistics on the Brocade 7800 (as the following examples show, this command can display emulation statistiocs for Teradata, Tape, and XRC depending on the FICON devices and FICON Emulation Features that are enabled on the tunnel. ): switch:admin>...
  • Page 835 portShow | RRS Ops |RRS| TLF| Read|Chains| +-----------+---+------+------+------+ 12039| 1| 58864| 26608| 1| 58864| 15658| 1| 58864| 28742| 1| 58864| 16041| 1| 58864| [...] (Output split and truncated) To display FICON emulation statistics for the FCIP tunnel: switch:admin> portshow xtun 23 -ficon -stats Emulation Common Statistical Counts (decimal) ============================================= TotalIngressFrames...
  • Page 836 portShow Total number of emulated Write CCWs = 1924228 Average Emulated Writes Blocksize 32760 Average Writes in Emulated Chains Write emulation slowdowns 3552 Slowdowns at Start of Chain 3340 Slowdowns at End of chain Current Host side Write FDCB Count Max Concurrent Write FDCB Count Current Write Limited FDCB Count Tape Read Emulation Statistical Counts (decimal)
  • Page 837 portShow Bit 28 [0x10000000] = 1 : TRIGGER_ON_LRJ Bit 27 [0x08000000] = 0 : TRIGGER_ON_UNIT_CHECK Bit 26 [0x04000000] = 1 : TRIGGER_ON_LOOKUP_FAIL Bit 25 [0x02000000] = 1 : TRIGGER_ON_FDCB_ABORT Bit 24 [0x01000000] = 1 : TRIGGER_ON_NOFDCB_ABORT Bit 23 [0x00800000] = 1 : TRIGGER_ON_LINKDOWN Bit 22 [0x00400000] = 0 : TRIGGER_ON_SENSE_CMD Bit 21 [0x00200000] = 0 : TRIGGER_ON_BUSYATTN Bit 20 [0x00100000] = 0 : TRIGGER_ON_XRCUNS...
  • Page 838 portShow To display FICON XRC performance data: switch:admin> portshow xtun 23 -ficon -xrcperf XRC Performance Monitor Data: ============================= Sample Time Period in ms: 11340 Emulated Chains per sec: 16 Emulated RRS Cmds per sec: 16 Emulated RRS Bytes per sec: 640 Average RRS Update Size: 40 FUNCTION Commands supported only on the Brocade FR4-18i blade...
  • Page 839 portShow Var H Variance high water mark Counter of out-of-order segments OOO H Out-of-order segments high water mark Sendw Cwnd Size of sender congestion window (bytes) Rx win Size of receive window (bytes) Fast Rtx Fast retransmits F Rtx H Fast retransmits high water mark Slow Rtx Slow retransmits...
  • Page 840 portShow OOO H Out-of-order segments high water mark Dup ACK Counter of duplicate ACKs Rtx Dup ACK Counter of retransmit packets due to duplicate ACK Fast Rtx Fast retransmits F Rtx H Fast retransmits high water mark Slow Rtx Slow retransmits InFlt H Packets in-flight high water mark SlowStarts...
  • Page 841 portShow • Fast retransmits • Out of order packets received -credits Displays FC data path credit data. -ipsec Displays IKE and IPSec policy information on IPSec-enabled tunnels. Security policies are configured with the portCfg command. -qosmap Displays the mapping table for VC to FCIP QoS. -bstr Displays FCIP TCP Byte Stream statistics on Byte Stream-enabled tunnels (Deprecated).
  • Page 842 portShow -mem adrs Displays memory in 256-byte increments: ! for next. -pools Displays current data buffer pool counts. -pmmr Displays PMMR pointers. -fastw Displays the FastWrite queue. -clear Clears post-display statistics; requires a preceding argument. EXAMPLES To display the connection parameter information for all FCIP tunnels on the switch and to show the current DiffServ markings being used for data connection as well as control connection (The following example displays high-water marks in bold for the data and control TCP connections of Tunnel 0): switch:admin>...
  • Page 843 portShow Connected Count: 3 Uptime 23 minutes, 53 seconds FC control traffic TCP connection: Local 192.168.10.2:4149, Remote 192.168.10.10:3225 Runtime parameters: Send MSS 1460 Bytes Sender stats: smoothed roundtrip 1 ms (HWM 1 ms), variance 1 (HWM 562) peer advertised window 13498368 Bytes negotiated window scale (shift count) 9 congestion window 25920 Bytes slow start threshold 20480 Bytes...
  • Page 844 portShow To display the performance information on an FCIP tunnel: switch:admin> portshow fciptunnel 9/ge0 0 -perf Slot: 9 Port: ge0 ------------------------------------------- Tunnel ID 0 Tunnel Description "Test Description" Remote IP Addr 10.62.0.100 Local IP Addr 10.10.9.100 Remote WWN Not Configured Local WWN 10:00:00:05:1e:39:d4:5a Compression on (Auto) Fastwrite on...
  • Page 845 portShow 4006508 input Bytes 464 Bps 30s avg, 505 Bps lifetime avg IKE Policy 1 IPSec Policy 1 Pre-Shared Key testingFIPSandIPSec To display the connection IPSec information on an FCIP tunnel on a GbE port: switch:admin> portshow fciptunnel 9/ge0 0 -ipsec Slot: 9 Port: ge0 ------------------------------------------- Tunnel ID 0...
  • Page 846 portShow Local WWN 10:00:00:05:1e:38:84:65 Compression off Fastwrite off Tape Pipelining off Committed Rate 900000 Kbps (0.900000 Gbps) SACK on Min Retransmit Time 100 Timeout 10 Max Retransmissions 8 VC QoS Mapping off DSCP Marking (Control): 0, DSCP Marking (Data): 0 VLAN Tagging Not Configured TCP Byte Streaming on Status : Active...
  • Page 847 portShow TCP Statistics Snapshot Duration: 3 minutes, 35 seconds ---------+-----------+-----+-----+-------+----------+-------+--------- Tunnel Num|Connection|LPort|RPort| OOO H |DupACK|Rtx DupACK ---------+-----------+-----------+-------+---------+-------+---------- Fast Rtx | F Rtx H Slow Rtx |InFlt H|SlowStarts|Rtx TO|Rtx Rtx TO ---------+-----------+-----------+-------+----------+-------+--------- CONTROL 4097 3225 - - - - - - - - - - - - - - - - - - -- - - - - - - - - - - - -- - - - DATA 4098 3226...
  • Page 848 portShow Min Retransmit Time 100 Keepalive Timeout 90 Max Retransmissions 9 VC QoS Mapping off DSCP Marking (Control): 10, DSCP Marking (Data): 62 VLAN Tagging Id 1062, L2CoS (Control): 1, L2CoS (data): 0 TCP Byte Streaming on Status : Active Connected Count: 1 Uptime 2 hours, 14 minutes, 34 seconds QoS Runtime Credit Controls:...
  • Page 849 portShow Keepalive Timeout 90 Max Retransmissions 9 VC QoS Mapping off DSCP Marking (Control): 10, DSCP Marking (Data): 62 VLAN Tagging Id 1062, L2CoS (Control): 1, L2CoS (data): 0 TCP Byte Streaming on Status : Active Connected Count: 1 Uptime 2 hours, 14 minutes, 47 seconds IKE Policy 1 IPSec Policy 1 Pre-Shared Key testingFIPSandIPSec...
  • Page 850: Portstats64Show

    portStats64Show portStats64Show Displays the 64-bit hardware statistics for a port. SYNOPSIS portstats64show [slot/]port [-long] DESCRIPTION Use this command to display 64-bit hardware statistics for a specified port. When used without the -long option, two integers are reported for most values, the lower and upper 32-bits are reported as two separate numbers.
  • Page 851 portStats64Show er64_disc_c3 Number of class 3 frames discarded. stat64_rateTxFrame Tx frame rate (frames/second). stat64_rateRxFrame Rx frame rate (frames/second). stat64_rateTxPeakFrame Tx peak frame rate (frames/second). stat64_rateRxPeakFrame Rx peak frame rate (frames/seconds). stat64_rateTxWord Tx Word rate (words/seconds). stat64_rateRxWord Rx Word rate (words/seconds). stat64_rateTxPeakWord Tx peak Word rate (words/sec).
  • Page 852 portStats64Show swConnUnitOpen, open Number of times the FL_Port entered OPEN state. swConnUnitInvalidARB, er_inv_arb Number of invalid arbitrated loops (ARBs). The following counters are platform-specific and applicable only to Condor2 and Goldeneye2 ASICs only. Refer to the Fabric OS Troubleshooting and Diagnostics Guide, Appendix A, for a table that correlates ASIC type with switch models.
  • Page 853 portStats64Show bottom_int : Class 3 frames received stat64_lc_rx top_int : Link control frames received bottom_int : Link control frames received stat64_mc_rx top_int : Multicast frames received bottom_int : Multicast frames received stat64_mc_to top_int : Multicast timeouts bottom_int : Multicast timeouts stat64_mc_tx top_int : Multicast frames transmitted bottom_int : Multicast frames transmitted...
  • Page 854 portStats64Show er64_type2_miss frames with FTB type 2 miss er64_type6_miss frames with FTB type 6 miss er64_zone_miss frames with hard zoning miss er64_lun_zone_miss 0 frames with LUN zoning miss lli64 Low level interrupts SEE ALSO portStatsClear, portStatsShow Fabric OS Command Reference 53-1001764-01...
  • Page 855: Portstatsclear

    portStatsClear portStatsClear Clears port hardware statistics. SYNOPSIS portstatsclear [slot/]port portstatsclear -i [index1[-index2] [...] [-f]] portstatsclear -slot [slot1[-slot2][...] portstatsclear -h DESCRIPTION Use this command to clear the hardware statistics for the specified ports. Including ALPA-based CRC monitor, End-to-End monitor, and Filter-based performance monitor statistics. You can identify a single port to be cleared by its port number or by its port index number.
  • Page 856 portStatsClear To clear hardware statistics for a range of ports specified by their index numbers: switch:admin> portstatsclear -i 32-40 To clear hardware statistics for multiple port ranges specified by their index numbers: switch:admin> portstatsclear -i 32-40 50-56 To clear hardware statistics for all ports on slots 3-5: switch:admin>...
  • Page 857: Portstatsshow

    portStatsShow portStatsShow Displays port hardware statistics. SYNOPSIS portstatsshow [slot/]port portstatsshow -i [index1[-index2][...] [-f]] portstatsshow -slot [slot1[-slot2][...] portstatsshow ge [slot/]ge port portstatsshow ip [slot/]ge port [ip_address] portstatsshow fcip [slot/]ge port [tunnel_number] portstatsshow -h DESCRIPTION Use this command to display port hardware statistics counters. Some counters are platform- or port-specific and display only on those platforms and ports.
  • Page 858 portStatsShow tim_rdy_pri The number of times that sending R_RDY or VC_RDY primitive signals was a higher priority than sending frames, due to diminishing credit reserves in the transmitter at the other end of the fiber. This parameter is sampled at intervals of 1.8 microseconds, and the counter is incremented by 1 if the condition is true.
  • Page 859 portStatsShow er_type1_miss The number of FCR frames with transmit errors. er_type2_miss The number of frames with routing errors. er_type6_miss The number of FCR frames with receive errors. er_zone_miss , er_lun_zone_miss The number of frames discarded due to hard zoning miss or LUN zoning miss. If Rx port hard zoning is enabled, frames will be discarded at the Rx port.
  • Page 860 portStatsShow ge_stat_rx_octets The number of octets received on the GbE port. ge_stat_rx_ucast_frms The number of unicast frames received on the GbE port. ge_stat_rx_mcast_frms The number of multicast frames received on the GbE port. ge_stat_rx_bcast_frms The number of broadcast frames received on the GbE port. ge_stat_rx_vlan_frms The number of VLAN frames received on the GbE port.
  • Page 861 portStatsShow Ignores nonexisting ports. This operand is valid only with the -i option. -slot [slot1[-slot2] Displays statistics for all ports on a slot or on a range of slots, for example, -s 3-5. You may specify multiple slot ranges separated by a space, for example, -s 3-5 8-10.
  • Page 862 portStatsShow er_type1_miss frames with FTB type 1 miss er_type2_miss frames with FTB type 2 miss er_type6_miss frames with FTB type 6 miss er_zone_miss frames with hard zoning miss er_lun_zone_miss frames with LUN zoning miss er_crc_good_eof Crc error with good eof er_inv_arb Invalid ARB open...
  • Page 863 portStatsShow To display port statistics for all IP addresses, slot 8, and GbE1 on the Brocade FR4-18i: switch:admin> portstatsshow ip 8/ge1 ip_err_crc IP CRC Errors ip_err_hdr_cksum IP Checksum Errors ip_err_tcp_data_chksum IP TCP Data Checksum Errors To display port statistics for IP address 192.168.255.10, slot 8, and GbE1 on the Brocade FR4-18i: switch:admin>...
  • Page 864: Portswap

    portSwap portSwap Swaps the port Address of two ports. SYNOPSIS portswap [slot1/]port1 [slot2/]port2 DESCRIPTION Use this command to swap the 24-bit port address (PID) for a pair of ports. Both ports must be disabled prior to executing this command and the port-swapping feature must be enabled using portSwapEnable.
  • Page 865: Portswapdisable

    portSwapDisable portSwapDisable Disables the PortSwap feature. SYNOPSIS portswapdisable DESCRIPTION Use this command to disable the PortSwap feature. The portSwap command cannot be used after this feature is disabled. The disabled state of the PortSwap feature is persistent across reboots and power cycles. Enabling or disabling the PortSwap feature does not affect previously performed PortSwap operations.
  • Page 866: Portswapenable

    portSwapEnable portSwapEnable Enables the PortSwap feature. SYNOPSIS portswapenable DESCRIPTION Use this command to enable the PortSwap feature. The portSwap command cannot be used unless the feature is first enabled with this command. The enabled state of the PortSwap feature is persistent across reboots and power cycles. Enabling or disabling the PortSwap feature does not affect previously performed PortSwap operations.
  • Page 867: Portswapshow

    portSwapShow portSwapShow Displays the state of the PortSwap feature. SYNOPSIS portswapshow DESCRIPTION Use this command to display the state of the PortSwap feature and information about swapped ports. If portSwap is enabled and ports have been swapped, the command displays the enabled status as well as the swapped ports and the new port address (the 24-bit PID) for these ports.
  • Page 868: Porttest

    portTest portTest Performs a functional test of a switch in a live fabric. SYNOPSIS porttest [-ports itemlist] [-iteration count] [-userdelay time] [-timeout time] [-pattern pattern] [-patsize size] [-seed seed] [-listtype porttype] DESCRIPTION Use this command to isolate problems in a single replaceable element and to trace problems to near-end terminal equipment, far-end terminal equipment, or the transmission line.
  • Page 869 portTest Use the stopPortTest command to stop the test. Refer to the stopPortTest help page for more information. Use the portTestShow command to view the current status of portTest. Refer to the portTestShow help page for more information. If there is a port type change during portTest execution, the test continues on a given port as long as it can be supported and it is asked to do so.
  • Page 870 portTest All N->N loopback ports. EXAMPLES To run a functional test on an active switch: switch:admin> porttest -ports 1/1-1/3 SEE ALSO portLoopbackTest, portTestShow, spinFab, stopPortTest Fabric OS Command Reference 53-1001764-01...
  • Page 871: Porttestshow

    portTestShow portTestShow Displays information from portTest. SYNOPSIS porttestshow [-ports itemlist] DESCRIPTION Use this command to display a snapshot of information from portTest. The command output displays statistical data about past test runs and values for parameters that were set when the test was run. Refer to the portTest help page for more information on the displayed parameters.
  • Page 872 portTestShow NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. OPERANDS This command has the following operand: -ports itemlist Displays test results for the specified ports.
  • Page 873: Portthconfig

    portThConfig portThConfig Configures Fabric Watch event thresholds per port type. SYNOPSIS portthconfig --set port_type -area area [-timebase time_base] [-highthreshold -value value -trigger above | below -action actions] [-lowthreshold -value value -trigger above | below -action actions] [-buffer value][-nosave] portthconfig --apply port_type -area area [-thresh_level def | cust] [-action_level def| cust] portthconfig --cancel port_type -area area [-thresh_level def | cust] [-action_level def| cust]...
  • Page 874 portThConfig NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. This command requires a Fabric Watch license. For more information on port threshold configuration procedures, including default values for specific area high/low thresholds, refer to the Fabric Watch Administrator's Guide.
  • Page 875 portThConfig Link reset Trunk Utilization Only the following areas are valid for VE_Ports. UTIL Port utilization PKTLOSS Packet loss State change --set Configures the Fabric Watch thresholds for monitoring a specified area for all ports of a specified port type. When configuring a threshold, you must specify a port type and area.
  • Page 876 portThConfig portlog Locks the port log. Following an event, the port log locks to retain information about an event, preventing the information from being overwritten as the log becomes full. none Event triggers no action. -buffer value Specifies the buffer value for in range behavior. A buffer defines a zone within which event criteria are met, rather than a single threshold value.
  • Page 877 portThConfig -area area[,area]... | all Specifies the area. You can either specify one or more areas separated by a comma, or you can specify all to indicate all areas. -port port_list | all Specifies one or more ports or all ports. The port_list operand supports one of the following values: •...
  • Page 878 portThConfig To cancel the custom settings that have previously been saved nonpersistently: switch:admin> portthconfig --cancel ve-port -area util -action_level cust -thresh_level cust To display the port threshold configuration for all port types and areas: switch:admin> portthconfig --show PortType: E-port Area : CRC ThLevel : Def ActLevel: Def...
  • Page 879 portThConfig Trigger : Below Action: None Default: TimeBase: Minute Value Trigger : Above Action: None Trigger : Below Action: None Buffer: Custom: Value : 100 Default: Value : 100 Port persistence time = 18s Area : LR ThLevel : Def ActLevel: Def High Custom:...
  • Page 880 portThConfig Custom: TimeBase: Minute Value Trigger : Above Action: None Trigger : Below Action: None Default: TimeBase: Minute Value Trigger : Above Action: None Trigger : Below Action: None Buffer: Custom: Value : 100 Default: Value : 100 Port persistence time = 18s To pause and continue E_Port monitoring: switch:admin>...
  • Page 881 portThConfig To display current values for CRC errors for all E_Ports: switch:admin> portthconfig --show e-port -area CRC -current PortType |Area |PortNo|C# |Value |State |Monitoring ---------|-------|------|----|---------|-------|---------- E-port |CRC |000000|n/a |0 |Info |Continue E-port |CRC |000001|n/a |0 |Info |Continue E-port |CRC |000002|n/a |0 |Info |Continue E-port...
  • Page 882: Porttrunkarea

    portTrunkArea portTrunkArea Assigns or removes a trunk area (TA) from a port or port trunk group; displays masterless F_Port trunking configuration. SYNOPSIS porttrunkarea --enable [slot/]port1[-port2] -index port_index porttrunkarea --disable [slot/]port1[-port2] porttrunkarea --disable all porttrunkarea --show disabled | enabled | trunk | all porttrunkarea --show slot/port1[-port2] DESCRIPTION Use this command to assign a static trunk area (TA) on a port or port trunk group, to remove a TA from a...
  • Page 883 portTrunkArea The --show trunk option displays the following information: Trunk Index Displays the trunk index. ptA->ptB ptA indicates the local user port; ptB indicates the remote user port. Port speed in Gbps. Bandwidth The bandwidth (Rx, Tx, and the combined total for Tx+Rx) of the trunk group. Values are displayed as either bits per second (Bps), kilobits per second (Kbps), megabits per second (Mbps), or gigabits per second (Gbps), rounded down to the next integer.
  • Page 884 portTrunkArea • Ports included in a TA share the same port index. The original port index may be removed in the process. This means that D, I zones referring to these indices are no longer part of the switch. For details and workarounds, refer to the Fabric OS Administrator's Guide.
  • Page 885 portTrunkArea trunk Displays configuration details for the port trunk group, including user port, neighboring user port, and master port properties. enabled Displays configuration details for all ports included in a user assigned TA (all ports on which masterless F_Port trunking is enabled). disabled Displays configuration details for all ports not included in a user assigned TA (all ports on which masterless F_Port trunking is not enabled).
  • Page 886 portTrunkArea To display trunk details for a user assigned TA 25 that includes ports 24-25: switch:admin> porttrunkarea --show trunk Trunk Index 25->0 8.000G \ bw: 16.000G deskew 15 MASTER Tx: Bandwidth 16.00Gbps, Throughput 1.63Gbps (11.84%) Rx: Bandwidth 16.00Gbps, Throughput 1.62Gbps (11.76%) Tx+Rx: Bandwidth 32.00Gbps, Throughput 3.24Gbps (11.80%) 24->1 8.000G bw:...
  • Page 887: Portzoneshow

    portZoneShow portZoneShow Displays the enforced zone type of the F_Ports and FL_Ports of a switch. SYNOPSIS portzoneshow DESCRIPTION Use this command to display the enforced zone type of the F_Ports and FL_Ports of a switch. Output shows virtual port number (decimal), physical port number (decimal), online status, and if online, port type.
  • Page 888: Powerofflistset

    powerOffListSet powerOffListSet Sets the order in which slots are powered off. SYNOPSIS powerofflistset DESCRIPTION Use this command to Modify the order in which slots are powered off. This command displays the current order, and then prompts you interactively to confirm or modify the power-off position for each slot. Whenever a power supply goes out of service or a field-replaceable unit (FRU) RU is inserted, the system's available power is compared to the system's required power to determine if there is enough power to operate.
  • Page 889 powerOffListSet 6th slot to be powered off: (7..9) [8] 9 7th slot to be powered off: (7..8) [8] 8 8th slot to be powered off: (7..7) [7] 7 Old POL New POL Power Off Order ------------------------------------- Proceed to change the POL order? (yes, y, no, n): [no] y SEE ALSO chassisShow, powerOffListShow, psShow, slotPowerOff, slotPowerOn, slotShow...
  • Page 890: Powerofflistshow

    powerOffListShow powerOffListShow Displays the order in which slots are powered off. SYNOPSIS powerofflistshow DESCRIPTION Use this command to display the order in which the physical slots are powered off. Whenever a power supply goes out of service or a field-replaceable unit (FRU) is inserted, the system's available power is compared to the system's required power to determine if there is enough power to operate.
  • Page 891: Psshow

    psShow psShow Displays power supply status. SYNOPSIS psshow DESCRIPTION Use this command to display the current status of the switch power supplies. The status of each supply is displayed as: Power supply functioning correctly. absent Power supply not present. unknown Unknown power supply unit installed.
  • Page 892: Roleconfig

    roleConfig roleConfig Manages user-defined roles. SYNOPSIS roleconfig --add role_name [-desc description] [-class rbac_class_list] [-perm permission] roleconfig --change role_name [-class rbac_class_list -perm permission [-desc description roleconfig --delete role_name [-force] roleconfig --copy new_role -role source_role roleconfig --show role_name | -all [-default] roleconfig --help DESCRIPTION Use this command to create or modify user-defined roles, to define permissions for these roles based on role-based access control (RBAC) permissions and meta-object format (MOF) classes, and to display...
  • Page 893 roleConfig The following operands are optional with --add and --change: -desc description Specifies a description for the role of up to 63 characters. Colons (:) are not permitted. -class class_list Specifies one or more MOF classes to which the role should have access. Classes must be separated by commas.
  • Page 894 roleConfig To change the access permissions of the previously created role and to display the results: switch:admin> roleconfig --change myzonesec -c pki -p N switch:admin> roleconfig --change myzonesec -c security -p O switch:admin> roleconfig --change myzonesec -c zoning -p OM switch:admin>...
  • Page 895: Reboot

    reBoot reBoot Reboots the control processor (CP). SYNOPSIS reboot [-f] DESCRIPTION Use this command to perform a "cold reboot" (power off/restart) of the control processor. This operation may be disruptive, and the command prompts for confirmation before executing. When you reboot a switch connected to a fabric, all traffic to and from that switch stops.
  • Page 896 reBoot To reboot a CP on a DCX when HA is enabled: switch:admin> reboot Warning: This command is being run on a control processor (CP) based system and will cause the active CP to reboot. Are you sure you want to reboot the active CP [y/n]? y Broadcast message from root (pts/0) Sun Feb 28 19:49:45 2010...
  • Page 897: Routehelp

    routeHelp routeHelp Displays a list of FSPF-related commands. SYNOPSIS routehelp DESCRIPTION Use this command to display a list of fabric-shortest-path-first (FSPF)-related commands. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 898: Secactivesize

    secActiveSize secActiveSize Displays the size of the active security database. SYNOPSIS secactivesize DESCRIPTION Use this command to display the size of the active security database. The command also displays the maximum database size. For switches running Fabric OS v6.2.0 and later, the maximum security database size is 1 megabyte per logical switch.
  • Page 899: Secauthsecret

    secAuthSecret secAuthSecret Manages the DH-CHAP shared secret key information. SYNOPSIS secauthsecret --show secauthsecret --set secauthsecret --remove value | --all DESCRIPTION Use this command to manage the DH-CHAP shared secret key database used for authentication. This command displays, sets, and removes shared secret key information from the database or deletes the entire database.
  • Page 900 secAuthSecret authentication. If switch is configured to do DH-CHAP, it is performed whenever a port or a switch is enabled. Warning: Please use a secure channel for setting secrets. Using an insecure channel is not safe and may compromise secrets. Following inputs should be specified for each entry.
  • Page 901: Seccertutil

    secCertUtil secCertUtil Manages certificates on a switch. SYNOPSIS seccertutil seccertutil genkey [-nowarn] [-keysize 1024 | 2048] seccertutil delkey [-nowarn][-all] seccertutil gencsr [-country country code] [-state state] [-locality locality] [-org organization] [-orgunit organization unit] [-cn common name] seccertutil delcsr [-nowarn] seccertutil showcsr seccertutil generate [-fcapall][-keysize 1024 | 2048] seccertutil delete [-ldapcacert file name ] | [-fcapcacert] | [-fcapswcert] | [-fcapall] [-nowarn]...
  • Page 902 secCertUtil • Configure a SSL certificate file name. • Enable secure protocols. This command takes an action and associated arguments. If only an action is specified, this command prompts interactively for input values of the associated arguments. The command runs noninteractively when the arguments associated with a given action are specified on the command line.
  • Page 903 secCertUtil -org organization Specifies the organization. Provide the full name, for example, Brocade. If the organization consists of multiple words, it must be enclosed in double quotes. -orgunit organization unit Specifies the organizational unit, for example, your department name. If the organizational unit consists of multiple words, it must be enclosed in double quotes.
  • Page 904 secCertUtil -fcapswcsr Exports the FCAP switch CSR certificate from the switch to the remote host. The FCAP switch CSR is exported as switchIPfcapSw.csr. -fcapcacert Exports the FCAP CA certificate from the switch to the remote host. The FCAP CA certificate is exported as switchIPfcapRootCA.pem. -protocol ftp | scp Specifies the protocol as either FTP or SCP.
  • Page 905 secCertUtil -login login name Specifies the login name for the server. -password password Specifies the password for the user account. When using SCP, for security reasons, do not enter a password on the command line. Use the interactive version instead. show Lists all existing PKI-based certificates on the switch.
  • Page 906 secCertUtil To generate a CSR in noninteractive mode: switch:admin> seccertutil gencsr -country US -state California -locality "San Jose" -org Brocade -orgunit software -cn 192.168.38.206 generating CSR, file name is: 192.168.38.206.csr Done To delete the CSR in interactive mode: switch:admin> seccertutil delcsr WARNING!!! About to delete CSR: 192.168.163.238.csr ARE YOU SURE (yes, y, no, n): [no] y...
  • Page 907 secCertUtil To import an FCAP CA certificate in interactive mode: switch:admin> seccertutil import -fcapcacert Select protocol [ftp or scp]: scp Enter IP address: 10.32.2.25 Enter remote directory: /users/myname/OPENSSL Enter certificate name (must have ".crt" or ".cer" ".pem" or ".psk" suffix):CACert.pem Enter Login Name: myname myname@10.32.2.25's password: Success: imported certificate [CACert.pem].
  • Page 908 secCertUtil To export an FCAP switch certificate in interactive mode: switch:admin> seccertutil export -fcapswcert Select protocol [ftp or scp]: scp Enter IP address: 10.32.2.25 Enter remote directory: /users/myname/OPENSSL Enter Login Name: myname myname@10.32.2.25's password: Success: exported FCAP switch certificate To export an FCAP switch CSR in interactive mode: switch:admin>...
  • Page 909 secCertUtil To display the FCAP PKI objects: switch:admin> seccertutil show -fcapall List of fcap files: Passphrase : Exist Private Key : Exist : Exist Certificate : Empty Root Certificate: Exist To list all LDAP certificates on a switch: switch:admin> seccertutil show -ldapcacert List of ldap ca certificate files: Sample.cer To display the content of the CSR one page at a time:...
  • Page 910: Secdefinesize

    secDefineSize secDefineSize Displays the size of the defined security database. SYNOPSIS secdefinesize DESCRIPTION Use this command to display the size of the defined security database. The command also displays the maximum database size. For switches running Fabric OS v6.2.0 and later, the maximum security database size is 1 Megabyte per logical switch.
  • Page 911: Secglobalshow

    secGlobalShow secGlobalShow Displays the current internal security state information. SYNOPSIS secglobalshow DESCRIPTION Use this command to display security server-specific information as a snapshot of its current state. The output may include information about the following: • General security parameters • The latest zone transaction •...
  • Page 912 secGlobalShow Zone Size (include enabled configuration) 312 bytes Zone sum e04b215b sec_db: free primaryDLPhase 0 ----wwnDL State----- usec --------- LOG CACHE --------- 14:08:50 813905136 secipadm_ipchange receives notification 14:08:50 850588912 secProcessIPChange starts processing 14:08:50 850588912 secProcessIPChange acks completion (Output truncated) SEE ALSO secActiveSize, secDefineSize Fabric OS Command Reference...
  • Page 913: Sechelp

    secHelp secHelp Displays information about security commands. SYNOPSIS sechelp DESCRIPTION Use this command to display a list of security commands with a brief description of the commands. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 914: Secpolicyabort

    secPolicyAbort secPolicyAbort Aborts all unsaved changes to the defined database. SYNOPSIS secpolicyabort DESCRIPTION Use this command to abort all changes to the defined security database that have not been saved to flash memory and to abort changes to policy creation and modification operations from all the switches if a fabric-wide consistency policy is not set for the particular policy.
  • Page 915: Secpolicyactivate

    secPolicyActivate secPolicyActivate Saves and activates the Defined Security Policy Set. SYNOPSIS secpolicyactivate DESCRIPTION Use this command to activate the current defined security policy to all switches in the fabric. This activates the policy set on the local switch or all switches in the fabric depending on the fabric-wide consistency policy.
  • Page 916: Secpolicyadd

    secPolicyAdd secPolicyAdd Adds members to an existing security policy. SYNOPSIS secpolicyadd "name","member[;member...]" DESCRIPTION Use this command to add one or more members to an existing access policy. Each policy corresponds to a management method. The list of members of a policy acts as an access control list for that management method.
  • Page 917 secPolicyAdd "member" Specify a list of one or more member switches to be included in the security policy. The list must be enclosed in quotation marks; members must be separated by semicolons. Depending on the policy type, members are specified as follows. FCS_POLICY or SCC_POLICY Members This policy type requires member IDs to be specified as WWN strings, Domains, or switch names.
  • Page 918: Secpolicycreate

    secPolicyCreate secPolicyCreate Creates a new security policy. SYNOPSIS secpolicycreate "name" [, "member[;member...]"] DESCRIPTION Use this command to create a new policy and to edit Switch Connection Control (SCC), Device Connection Control (DCC), and Fabric Configuration Server (FCS) policies on the local switch. All policies can be created only once, except for the DCC_POLICY_nnn.
  • Page 919 secPolicyCreate secpolicycreate DCC_POLICY "*" may be used to indicate DCC lockdown. This command creates a unique policy for each port in the fabric locking it down to the device connected or creating an empty policy to disallow any device to be connected to it.
  • Page 920 secPolicyCreate To create a device policy to allow two devices to attach to domain 3 ports 1 and 3 (the WWN of first device is 11:22:33:44:55:66:77:aa and the WWN of second device is 11:22:33:44:55:66:77:bb): primaryfcs:admin> secpolicycreate "DCC_POLICY_aB_7", \ "11:22:33:44:55:66:77:aa;11:22:33:44:55:66:77:bb;3[1,3]" DCC_POLICY_abc has been created. To create a SCC policy in a fabric with three switches: Check if a policy exists.
  • Page 921: Secpolicydelete

    secPolicyDelete secPolicyDelete Deletes an existing security policy. SYNOPSIS secpolicydelete name DESCRIPTION Use this command to delete an existing security policy from the defined security database. Run secPolicyActivate to delete the policies from the active security policy list. Deleting a security policy does not cause any traffic disruption.
  • Page 922 secPolicyDelete To delete all stale DCC policies in the fabric: primaryfcs:admin> secpolicydelete ALL_STALE_DCC_POLICY About to clear all STALE DCC policies ARE YOU SURE (yes, y, no, n): [no] y SEE ALSO secPolicyAbort, secPolicyActivate, secPolicyAdd, secPolicyCreate, secPolicyDump, secPolicyRemove, secPolicySave, secPolicyShow Fabric OS Command Reference 53-1001764-01...
  • Page 923: Secpolicydump

    secPolicyDump secPolicyDump Displays the members of one or all existing security policies. SYNOPSIS secpolicydump ["listtype"][,"name"] DESCRIPTION Use this command to display, without page breaks, the members of an existing policy in the active and defined (saved) databases. When issued without operands, this command displays the members of all security policies.
  • Page 924 secPolicyDump To display all security policies in the active database: switch:admin> secpolicydump "active" ____________________________________________________ ACTIVE POLICY SET FCS_POLICY Primary WWN DId swName -------------------------------------------------- 10:00:00:05:1e:39:5f:67 3 NeptuneSec 10:00:00:05:1e:90:09:4a - Unknown SCC_POLICY DId swName -------------------------------------------------- 10:00:00:05:1e:39:5f:67 3 NeptuneSec 10:00:00:05:1e:90:09:4a - Unknown DCC_POLICY_h1 Type DId swName --------------------------------------------------...
  • Page 925 secPolicyDump To display the SCC policies in the defined database: switch:admin> secpolicydump "Defined","SCC_POLICY" _________________________________________________ DEFINED POLICY SET SCC_POLICY DId swName ------------------------------------------------ 10:00:00:05:1e:39:5f:67 3 NeptuneSec 10:00:00:05:1e:90:09:4a - Unknown To display the SCC policies in the active database: switch:admin> secpolicydump "Active","SCC_POLICY" __________________________________________________ ACTIVE POLICY SET SCC_POLICY DId swName...
  • Page 926: Secpolicyfcsmove

    secPolicyFCSMove secPolicyFCSMove Moves a member in the FCS policy. SYNOPSIS secpolicyfcsmove [from, to] DESCRIPTION Use this command to move an FCS member from one position to another position in the FCS list. Only one FCS can be moved at a time. The first FCS switch in the list that is also present in the fabric is the Primary FCS.
  • Page 927 secPolicyFCSMove 10:00:00:05:1e:35:cd:ef 200 switch3 switch:admin> secpolicyfcsmove 3,1 ____________________________________________________ DEFINED POLICY SET FCS_POLICY Primary WWN DId swName ------------------------------------------------- 10:00:00:05:1e:35:cd:ef 200 switch3 10:00:00:05:1e:39:5f:67 2 switch1 10:00:00:05:1e:04:ef:0e 4 switch2 switch:admin> secpolicyactivate About to overwrite the current Active Policy Set. ARE YOU SURE (yes, y, no, n): [no] y secpolicyactivate command was completed successfully.
  • Page 928: Secpolicyremove

    secPolicyRemove secPolicyRemove Removes members from an existing security policy. SYNOPSIS secpolicyremove "name" ,"member[;member...]" DESCRIPTION Use this command to remove one or more members from an existing security policy. It is not possible to remove all members from the FCS_POLICY; the local switch WWN cannot be deleted from the FCS policy.
  • Page 929 secPolicyRemove Selects all ports on the switch. [3, 9] Selects ports 3 and 9 and all devices attached to those ports. [1-3, 5] Selects ports 1 through 3 and 5 and all devices attached to those ports. Selects all ports on the switch and devices currently attached to those ports. EXAMPLES To remove a member that has a WWN of 12:24:45:10:0a:67:00:40 from SCC policy: switch:admin>...
  • Page 930: Secpolicysave

    secPolicySave secPolicySave Saves a defined security policy to persistent memory. SYNOPSIS secpolicysave DESCRIPTION Use this command to save a defined security policy to persistent memory. SecPolicySave saves the modified SCC, DCC, and FCS policies to the Defined Security Policy Set on the local switch. NOTES This command is always a local switch operation.
  • Page 931: Secpolicyshow

    secPolicyShow secPolicyShow Displays an existing security policy including the FCS policy. SYNOPSIS secpolicyshow ["policy_set"[", name"]] DESCRIPTION Use this command to display the members of an existing policy in the Active or Defined security policy set. The command can be issued from all FCS switches. This command displays the policy database one page at a time.
  • Page 932 secPolicyShow To display all security policies from defined databases: switch:admin> secpolicyshow "defined" __________________________________________________ DEFINED POLICY FCS_POLICY Primary WWN DId swName __________________________________________________ 10:00:00:60:69:30:15:5c 1 primaryfcs 10:00:00:60:69:30:1e:62 4 switch ___________________________________________________ SEE ALSO fddCfg, secPolicyAbort, secPolicyActivate, secPolicyAdd, secPolicyCreate, secPolicyDelete, secPolicyDump, secPolicyRemove, secPolicySave Fabric OS Command Reference 53-1001764-01...
  • Page 933: Secstatsreset

    secStatsReset secStatsReset Resets one or all security statistics to 0. SYNOPSIS secstatsreset [name][,"domain[;domain]"] DESCRIPTION Use this command to reset one or all security statistics to 0. This command can be issued on any switch to reset the security statistics on the local switch or chassis. If an FCS policy is enabled and secStatsReset is issued on the primary FCS switch, this command can reset security statistics for any or all switches in the fabric.
  • Page 934 secStatsReset To reset DCC_POLICY statistics on domains 1 and 69: primaryfcs:admin> secstatsreset DCC_POLICY, "1;69" Reset DCC_POLICY statistic. SEE ALSO secStatsShow Fabric OS Command Reference 53-1001764-01...
  • Page 935: Secstatsshow

    secStatsShow secStatsShow Displays one or all security statistics. SYNOPSIS secstatsshow [name[,"domain[;domain]"]] DESCRIPTION Use this command to display one or all security statistics. This command can be issued on any switch to display local security statistics. If an FCS policy is enabled and secStatsShow is issued on the primary FCS switch, this command can retrieve and display the security statistics for any or all switches in the fabric.
  • Page 936 secStatsShow EXAMPLES To display the LOGIN policy statistics for the local domain. switch:admin> secstatsshow LOGIN Fabric Statistics: Domain 1: Name Value ========================================= LOGIN To display statistic information for TELNET_POLICY for all switches in the fabric from the primary FCS switch. primaryfsc:admin>...
  • Page 937: Sensorshow

    sensorShow sensorShow Displays sensor readings. SYNOPSIS sensorshow DESCRIPTION Use this command to display the current temperature, fan, and power supply status and readings from sensors located on the switch. The actual location of the sensors varies, depending on the switch type. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 938: Serdestunemode

    serDesTuneMode serDesTuneMode Configures and displays SerDes values on the Brocade FC8-16. SYNOPSIS serdestunemode --set serdestunemode --reset serdestunemode --show serdestunemode --help DESCRIPTION Use this command to set the SerDes tuning mode for the Brocade FC8-16 port blade and to display the configuration.
  • Page 939 serDesTuneMode To disable SerDes tuning mode and reset the SerDes values to defaults: switch:admin> serdestunemode --reset serdestunemode is turned ff New serdes values reset on slot = 2 New serdes values reset on slot = 7 switch:admin> serdestunemode --show serdestunemode is disabled SEE ALSO None Fabric OS Command Reference...
  • Page 940: Setcontext

    setContext setContext Sets the logical switch context to a specified FID. SYNOPSIS setcontext FID DESCRIPTION Use this command to set the logical switch context to a specified fabric ID (FID). The FID uniquely defines a partition as a logical switch. Use lscfg --show -cfg to display currently configured partitions and their FIDs.
  • Page 941: Setdbg

    setDbg setDbg Sets the debug level of the specified module. SYNOPSIS setdbg [module_name][level] DESCRIPTION Use this command to set the debug level of a specified module. Debug levels filter the display of debug messages to the serial console. By default, no debug messages are displayed. High debug level values can generate a large volume of messages, degrading the system response time.
  • Page 942: Setverbose

    setVerbose setVerbose Specifies module verbose level. SYNOPSIS setverbose [module_name][level] DESCRIPTION Use this command to set the verbose level of the specified module. These levels filter the display of the debug message to the serial console. By default, no debug messages are displayed. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 943: Sfpshow

    sfpShow sfpShow Displays Small Form-factor Pluggable (SFP) information. SYNOPSIS sfpshow sfpshow [slot/]geport [ -f] sfpshow -all sfpshow -health DESCRIPTION Use this command to display information about Serial Identification SFPs (also known as module definition "4" SFPs). These SFPs provide extended information that describes the SFP capabilities, interfaces, manufacturer, and other information.
  • Page 944 sfpShow -all Displays detailed data for all available SFPs on the switch. This operand is not compatible with slot/port operands. -health Displays SFP health status information from Fabric Watch for 10G and 16G SFPs and for 16G QSFPs (Quad Small Form-factor Pluggables). When Fabric Watch monitoring of SFPs is enabled with the thMonitor command, Fabric Watch monitors diagnostic SFP parameters such as current, voltage, receiver power, transmit power, and temperature.
  • Page 945 sfpShow Slot 2/Port 11: id Slot 2/Port 12: id Slot 2/Port 13: id Slot 2/Port 14: id Slot 2/Port 15: id Slot 3/Port 0: id (sw) Vendor: BROCADE \ Serial No: HAA110491000HJ2 Speed: 4,8,16_Gbps Health: Green Slot 3/Port 1: id (sw) Vendor: BROCADE \ Serial No: HAA110491000HN2 Speed: 4,8,16_Gbps Health: Green Slot...
  • Page 946 sfpShow To display detailed information about all SFPs: switch:user> sfpshow -all (output trunctaed) ============= Slot 2/Port 14: ============= Port 30 does not use an SFP! ============= Slot 2/Port 15: ============= Port 31 does not use an SFP! ============= Slot 3/Port ============= Identifier: Connector:...
  • Page 947 sfpShow To display mini-SFPs on a DCX-4S with a FC8-64 blade: switch:user> setcontext 52 switch:user> sfpshow Slot 8/Port 60: id (sw) Vendor: BROCADE Serial No: UYA109291003972 Speed: 2,4,8_Gbps Slot 8/Port 61: id (sw) Vendor: BROCADE Serial No: UYA109301011012 Speed: 2,4,8_Gbps Slot 8/Port 62: id (sw) Vendor: BROCADE Serial No: UYA109291004082...
  • Page 948 sfpShow Length 50u: (units 10 meters) Length 62.5u:0 (units 10 meters) Length Cu: (units 1 meter) Vendor Name: BROCADE Vendor OUI: 00:05:1e Vendor PN: 57-1000042-01 Vendor Rev: Wavelength: (units nm) Options: 0010 Tx_Disable BR Max: BR Min: Serial No: CZA109302000053 Date Code: 090504 DD Type:...
  • Page 949: Shellflowcontroldisable

    shellFlowControlDisable shellFlowControlDisable Disables XON/XOFF flow control on the console serial port. SYNOPSIS shellflowcontroldisable DESCRIPTION Use this command to disable XON/XOFF flow control on the console serial port. Flow control is disabled by default. Because this command changes the flow control on the console serial port, it must be executed from a session that is logged in from the console serial port.
  • Page 950: Shellflowcontrolenable

    shellFlowControlEnable shellFlowControlEnable Enables XON/XOFF flow control on the console serial port. SYNOPSIS shellflowcontrolenable DESCRIPTION Use this command to enable XON/XOFF flow control to the shell task. Flow control is disabled by default. Because this command changes the flow control on the console serial port, it must be executed from a session that is logged in from the console serial port.
  • Page 951: Slotpoweroff

    slotPowerOff slotPowerOff Removes power from a slot. SYNOPSIS slotpoweroff slot DESCRIPTION Use this command to turn off the power to a blade unit. The slot must have a valid blade unit present and the blade unit must be of a type that can be powered off. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 952: Slotpoweron

    slotPowerOn slotPowerOn Restores power to a slot. SYNOPSIS slotpoweron slot DESCRIPTION Use this command to turn on the power to a blade unit. The slot must have a valid blade unit present and the blade unit must be currently powered off. The slotShow command reports such slots as being in the state of INSERTED, NOT POWERED ON.
  • Page 953: Slotshow

    slotShow slotShow Displays the status of all slots in the system. SYNOPSIS slotshow [-m] [-p] DESCRIPTION Use this command to display the current status of each slot in the system. Depending on the option used, the command retrieves information on blade type, blade ID, status, Brocade model name, and power usage for each slot in the switch or chassis.
  • Page 954 slotShow FC10-6 switch blade FS8-18 application processor blade CR4S-8 core blade CP8 control processor blade FC8-48 switch blade Core8 core blade FC8-32 switch blade FCoE10-24 application processor blade FX8-24 application processor blade FC8-64 switch blade FC16-48 switch blade FC16-32 switch blade CR16-8 core blade CR16-4 core blade Status...
  • Page 955 slotShow DISABLED The blade is powered on but disabled. FAULTY The blade is faulty because an error was detected. UNKNOWN The blade is inserted but its state cannot be determined. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 956 slotShow CP BLADE ENABLED CORE BLADE CR16-8 ENABLED AP BLADE FX8-24 ENABLED SW BLADE FC16-32 ENABLED SW BLADE FC8-64 ENABLED SW BLADE FC16-48 ENABLED To display power consumption information on a Brocade DCX 8510-8: switch:user> slotshow -p Slot Blade Type DC Power Status Consumption...
  • Page 957 slotShow AP BLADE ENABLED Total DC Power Consumption: 1149 watts Total AC Power Consumption: 1276 watts AC @ 90% efficiency (4355 BTU) Power Efficiency: 3.32 watts per port, 0.83 watts per Gb To display power consumption information on a DCX-4S: switch:user>...
  • Page 958: Snmpconfig

    snmpConfig snmpConfig Manages the SNMP agent configuration. SYNOPSIS snmpConfig --show | --set | --default | --enable | --disable [snmpv1 | snmpv3 | | mibCapability | systemGroup | seclevel] snmpConfig --set mibCapability [-mib_name mib_name [-bitmask bit_mask]] snmpConfig --enable | --disable mibCapability -mib_name mib_name [-trap_name trap_name] snmpConfig --enable | --disable snmpv1 snmpConfig --help...
  • Page 959 snmpConfig --set Sets the SNMP agent configuration data of the specified category. This operand displays the current settings and then prompts you to change the values for each parameter. --default Sets the SNMP agent configuration data for a specified item to the default values. Generally, these default values may be available in the configuration database.
  • Page 960 snmpConfig SNMPv1 Configuration Parameters The agent supports six communities and their associated trap recipients and trap recipient severity levels. The first three communities are for read-write (rw) access and the last three are for read-only (ro) access. The default value for the trap recipient of each community is 0.0.0.0. The length of the community string should be in the range of 2 to 16 characters.
  • Page 961 snmpConfig • User 5: snmpuser2 • User 6: snmpuser3 The --default option sets the user name and password to default. If an FCS policy is enabled, the configuration must be updated on the primary switch and the nonprimary switches; unlike community strings, user names and passwords are not distributed for other switches in the fabric.
  • Page 962 snmpConfig ____________________________________________________ FA-MIB Enabled connUnitStatusChange(1) Enabled connUnitAddedTrap (2) Enabled connUnitDeletedTrap (3) Enabled connUnitEventTrap (4) 0x10 Enabled connUnitSensorStatusChange(5) 0x20 Enabled connUnitPortStatusChange (6) 0x40 Enabled ____________________________________________________ FICON-MIB Enabled linkRNIDDeviceRegistration (1) Enabled linkRNIDDevicedeRegistration(2) 0x4 Enabled linkLIRRListenerAdded (3) Enabled linkLIRRListenerRemoved (4) 0x10 Enabled linkRLIRFailureIncident (5) 0x20 Enabled ____________________________________________________...
  • Page 963 snmpConfig Warning Informational -mib_name mib_name Specifies the name of the MIB to be configured. This operand is required if you want to configure MIB traps noninteractively. Valid MIB names include the following. • FE-MIB • SW-MIB • FA-MIB • FICON-MIB •...
  • Page 964 snmpConfig SNMP GET security level Specifies security level for all SNMP GET requests. SNMP SET security level Specifies security level for SNMP SET requests only. Values include the following: No security. Authentication only. Authentication and Privacy. EXAMPLES To display the SNMPv1 configuration: switch:admin>...
  • Page 965 snmpConfig To set the access control configuration: switch:admin> snmpconfig --set accessControl SNMP access list configuration: Access host subnet area in dot notation: [0.0.0.0] 192.168.0.0 Read/Write? (true, t, false, f): [true] Access host subnet area in dot notation: [0.0.0.0] 10.32.148.0 Read/Write? (true, t, false, f): [true] f Access host subnet area in dot notation: [0.0.0.0] Read/Write? (true, t, false, f): [true] Access host subnet area in dot notation: [0.0.0.0] 10.33.0.0...
  • Page 966 snmpConfig swPmgrEventTrap: NO swFabricReconfigTrap: NO swFabricSegmentTrap: NO swExtTrap: NO [...] To enable the SW-MIB MIB only without changing the current trap configuration: switch:admin> snmpconfig --enable mibCapability -mib_name SW-MIB Operation succeeded switch:admin> snmpconfig --show mibCapability [...] SW-TRAP: YES swFault: NO swSensorScn: NO swFCPortScn: NO swEventTrap: YES DesiredSeverity:4...
  • Page 967 snmpConfig To display the configuration for all MIBs and associated traps: switch:admin> snmpconfig --show mibCapability FE-MIB: YES SW-MIB: YES FA-MIB: YES FICON-MIB: YES HA-MIB: YES FCIP-MIB: YES ISCSI-MIB: YES IF-MIB: YES BD-MIB: YES SW-TRAP: NO swFault: NO swSensorScn: NO swFCPortScn: NO swEventTrap: NO DesiredSeverity:None swFabricWatchTrap: NO...
  • Page 968 snmpConfig To restore the systemGroup configuration to default values: switch:admin> snmpconfig --default systemGroup ***** This command will reset the agent's system group configuration back to factory default ***** sysDescr = Fibre Channel Switch sysLocation = End User Premise sysContact = Field Support authTraps = 0 (OFF) ***** Are you sure? (yes, y, no, n): [no] y...
  • Page 969 snmpConfig Trap Entry 2: 10.35.52.34 Trap Port: 162 Trap User: snmpadmin2 Trap recipient Severity level: 5 Trap Entry 3: No trap recipient configured yet Trap Entry 4: No trap recipient configured yet Trap Entry 5: No trap recipient configured yet Trap Entry 6: No trap recipient configured yet To enable inform requests to be sent instead of trap requests:...
  • Page 970 snmpConfig To block access to SNMPv1/2c switch:admin> snmpconfig --disable snmpv1 switch:admin> snmpconfig --show SNMPv1 community and trap recipient configuration: Community 1: ram (rw) Trap recipient: 172.26.4.84 Trap port: 162 Trap recipient Severity level: 5 Community 2: OrigEquipMfr (rw) No trap recipient configured yet Community 3: private (rw) No trap recipient configured yet Community 4: public (ro)
  • Page 971: Snmptraps

    snmpTraps snmpTraps Sends or displays SNMP traps. SYNOPSIS snmptraps --send [-trap_name trap_name] [-ip_address ip_address] snmptraps --show [port] snmptraps --block -port [slot]port | ALL snmptraps --unblock -port [slot]port | ALL snmptraps --help DESCRIPTION Use this command to manage specific Simple Network Management Protocol (SNMP) traps. Use the --send option to send a specific SNMP trap to a recipient indicated by its IP address.
  • Page 972 snmpTraps --help Displays the command usage. EXAMPLES To send all traps to the configured recipients: switch:admin> snmpTraps --send Number of traps sent : 27 To send a bottleneck detection trap to recipient 172.16.0.12 switch:admin> snmptraps --send -trap_name \ bd-trap-ip_address 172.16.0.12. Number of traps sent : 1 To display the traps and MIBs supported in Fabric OS: switch:admin>...
  • Page 973 snmpTraps To configure the switch so that only two ports receive the port traps, you block all traps and then unblock the ports you want to receive the traps: switch:admin> snmpTraps --block ALL switch:admin> snmpTraps --unblock 17 switch:admin> snmpTraps --unblock 18 To display the blocked port status: switch:admin>...
  • Page 974: Spinfab

    spinFab spinFab Runs functional test of interswitch link (ISL) cabling and trunk group operation. SYNOPSIS spinfab [-nmegs count] [-framesize bytes] [-ports itemlist] [-setfail mode] [-fports flag] DESCRIPTION Use this command to verify the intended functional operation of interswitch links (ISLs) at the maximum speed by setting up the routing hardware so that test frames received by each E_Port are retransmitted on the same E_Port.
  • Page 975 spinFab • Long Distance ports. • F_Ports connected to an HBA. The following ports do not support the spinFab test: • Interchassis links (ICL) ports • F_Ports connected to an Access Gateway • EX_Ports • E_Ports connected to EX_Ports • If Access Gateway mode is enabled, spinFab tests only the F_Ports connected to Brocade-branded HBAs and skips all other ports (F_Ports connected to non-Brocade branded HBAs and N_Ports).
  • Page 976 spinFab Includes F_Ports in the port list for testing. DIAGNOSTICS When it detects failures, the test may report one or more of the following error messages. If errors persist, contact Technical Support. DATA ERR_STAT ERR_STATS ERR_STATS_2LONG ERR_STATS_BADEOF ERR_STATS_BADOS ERR_STATS_C3DISC ERR_STATS_CRC ERR_STATS_ENCIN ERR_STATS_ENCOUT ERR_STATS_TRUNC...
  • Page 977: Sshutil

    sshUtil sshUtil Manages public key authentication. SYNOPSIS sshutil allowuser user name sshutil showuser sshutil importpubkey sshutil showpubkeys sshutil delpubkeys sshutil genkey sshutil exportpubkey sshutil delprivkey sshutil help DESCRIPTION Use this command to enable and manage SSH public key authentication on a switch. SSH public key authentication provides a mechanism for authenticating an authorized user without a password.
  • Page 978 sshUtil OPERANDS This command supports the following operands: allowuser user name Configures the specified user to perform public key authentication and all related management operations for outgoing public key authentication. This operation can only be performed by the default admin. The default admin is, by default, a configured user.
  • Page 979 sshUtil genkey Generates an RSA private/public key pair on the local switch. This option can be performed only by a configured user. This option enables authentication for outgoing connections from the switch to a remote host. You must export the public key to a remote host to complete the setup.
  • Page 980 sshUtil /users/home/username/.ssh/id_dsa. Your public key has been saved in /users/home/username/.ssh/id_dsa.pub. The key fingerprint is: 3 0:9f:ae:b6:7f:7e:55:e4:b2:7a:51:f0:95:44:5c:d1 Import the public key from the remote host to the local switch: switch:username> sshutil importpubkey Enter user name for whom key is imported: username Enter IP address:Remote host IP Address Enter remote directory: ~username/.ssh Enter public key name(must have .pub suffix):id_dsa.pub...
  • Page 981 sshUtil Export the public key to a remote host: switch:username> sshutil exportpubkey Enter IP address: remote host IP Address Enter remote directory: ~username/.ssh Enter login name:username Password:****** public key out_going.pub is exported successfully. Append the public key to the authorized_keys file on the remote host: username@remotehost>...
  • Page 982: Statsclear

    statsClear statsClear Clears port and diagnostic statistics. SYNOPSIS statsclear [--slot slot] [-uports itemlist] [-bports itemlist] [-use_bports value] DESCRIPTION Use this command to clear the port and diagnostics statistics for the specified list of blade or user ports. You can issue this command on the FR4-18i blade in a Brocade chassis; however, the command is not supported by the Brocade platform and does not affect any other feature operations.
  • Page 983: Stopporttest

    stopPortTest stopPortTest Terminates the running portTest. SYNOPSIS stopporttest [-ports itemlist] DESCRIPTION Use this command to terminate the portTest command. Refer to the portTest help page for more information. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 984: Supportffdc

    supportFfdc supportFfdc Modifies or displays the first-fault data capture (FFDC) daemon. SYNOPSIS supportffdc [--disable | --enable | --show] DESCRIPTION Use this command to disable or enable the FFDC events, or to display the current configuration. If disabled, the daemon does not capture any data even when a message with FFDC attributes is logged. FFDC is enabled by default.
  • Page 985: Supportftp

    supportFtp supportFtp Sets, clears, or displays support FTP parameters and enables or disables auto file transfer. SYNOPSIS supportftp [-S] supportftp -s [-h host][-u username][-p password] [-d remotedirectory] [-l protocol] supportftp -t hours supportftp -R supportftp -e supportftp -d DESCRIPTION Use this command to set, clear, or display supportFtp parameters. The parameters set by this command are used by the supportSave and traceDump commands.
  • Page 986 supportFtp Clears all supportFtp parameters. Enables auto file transfer. Trace dump files are automatically transferred to a designated FTP server. The server parameters must be set before you can enable auto file transfer. Disables auto file transfer. EXAMPLES To set the FTP parameters: switch:admin>...
  • Page 987: Supportsave

    supportSave supportSave Saves RASLOG, TRACE, supportShow, core file, FFDC data, and other support information SYNOPSIS supportsave supportsave [-n] [-c] [-k] [-u user_name -p password -h host_ip -d remote_dir -l protocol] supportsave [-R] supportsave [-U -d remote_dir] supportsave [-t timeout_multiplier] DESCRIPTION Use this command to collect RASLOG, TRACE, supportShow, core file, FFDC data and other support information to a remote FTP location.
  • Page 988 supportSave Specifies that the supportFtp auto file transfer configuration transfer only core and FFDC files in noninteractive mode. -u user_name Specifies the user name for the FTP, SCP, or SFTP server. This operand is optional; if omitted, anonymous FTP is used. -p password Specifies the password for the FTP, SCP, or SFTP server.
  • Page 989 supportSave There will be two trace dump files transferred after this command. OK to proceed? (yes, y, no, n): [no] y Host IP or Host Name: 192.168.126.115 User Name: admin Password:******* Network Protocol(1-auto-select, 2-FTP, 3-SCP, 4-SFTP) [1]: 4 Remote Directory: /temp/support Saving support information for chassis:HL51,module:RAS...
  • Page 990 supportSave To run supportSave without confirmation on a Brocade DCX with AP blades included using supportFTP parameters (only Active CP output is shown): switch:admin> supportsave -n -c Saving support information for chassis:ras2,module:RAS... Saving support information for chassis:ras2,module:TRACE_OLD... Saving support information for chassis:ras2,module:TRACE_NEW... Saving support information for chassis:ras2,module:FABRIC...
  • Page 991: Supportshow

    supportShow supportShow Displays switch information for debugging purposes. SYNOPSIS supportshow supportshow [slot /]port1[-port2] [lines] DESCRIPTION Use this command to display support information from groups of preselected Fabric OS and Linux commands and other support and debugging information. You can specify a port or a range of ports for which to display this information.
  • Page 992 supportShow fcip FCIP group commands, disabled by default. Access Gateway group commands, disabled by default. dce_hsl DCE group commands, enabled by default. crypto Encryption group commands, disabled by default. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
  • Page 993 supportShow filter disabled perfmon disabled ficon disabled iswitch enabled asic_db enabled fcip disabled (not applicable to this platform) enabled dce_hsl enabled **** Begin start_port_log_cmd group **** Sun Dec 6 05:10:14 PST 2009 portlogdump: CURRENT CONTEXT -- 0 , 128 portlogdump time task event...
  • Page 994: Supportshowcfgdisable

    supportShowCfgDisable supportShowCfgDisable Disables a group of commands under the supportShow command. SYNOPSIS supportshowcfgdisable os | exception | port | fabric | services | security | network | portlog | system | extend | filter | perfmon | ficon | iswitch | asic_db | ag | dce_hsl | crypto | fcip DESCRIPTION Use this command to disable a group of commands under the supportShow command.
  • Page 995 supportShowCfgDisable asic_db Disables the ASIC DB group commands. Disables the Access Gateway group commands. dce_hsl Disables the DCE group commands. crypto Disables the encryption group commands fcip Disables the FCIP group commands. Supported only on the Brocade 7800/FX8-24 and FR4-18i. EXAMPLES To disable the OS group of commands under the supportShow command: switch:admin>...
  • Page 996: Supportshowcfgenable

    supportShowCfgEnable supportShowCfgEnable Enables a group of commands to be displayed under the supportShow command. SYNOPSIS supportshowcfgenable os | exception | port | fabric | services | security | network | portlog | system | extend | filter | perfmon | ficon | iswitch | asic_db | ag | dce_hsl |crypto | fcip DESCRIPTION Use this command to enable a group of commands to be displayed under the supportShow command.
  • Page 997 supportShowCfgEnable asic_db Enables the ASIC DB group commands. Enables the Access Gateway group commands. dce_hsl Disables the DCE group commands crypto Enables the encryption group commands. fcip Enables the FCIP group commands. Supported only on the Brocade 7800/FX8-24 and FR4-18i platforms. EXAMPLES To enable a group of commands under the supportShow command: switch:admin>...
  • Page 998: Supportshowcfgshow

    supportShowCfgShow supportShowCfgShow Displays the groups of commands enabled for display by the supportShow command. SYNOPSIS supportshowcfgshow DESCRIPTION Use this command to display the groups of commands enabled for display by the supportShow command. Use the supportShowCfgEnable and the supportShowCfgDisable commands to modify which groups are displayed.
  • Page 999 supportShowCfgShow iswitch enabled asic_db enabled fcip enabled enabled dce_hsl enabled SEE ALSO supportShow, supportShowCfgDisable, supportShowCfgEnable Fabric OS Command Reference 53-1001764-01...
  • Page 1000: Switchbeacon

    switchBeacon switchBeacon Sets switch beaconing mode on or off. SYNOPSIS switchbeacon [mode] DESCRIPTION Use this command to enable or disable switch beaconing mode. Switch beaconing can be used to locate a failing unit. When beaconing mode is turned on, the port LEDs flash amber, left to right and right to left, from port 0 to the highest port number and back to port 0.

This manual is also suitable for:

Fabric os v7.0.0

Table of Contents