Download Print this page

HP Brocade 8/12c Command Reference Manual

Brocade fabric os command reference manual supporting fabric os v7.0.0 (april 2011).
Hide thumbs
   
1
2
3
4
5
6
Table of Contents
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990

Advertisement

53-1002147-01
®
29 April 2011
Fabric OS
Command Reference Manual
Supporting Fabric OS v7.0.0

Advertisement

   Also See for HP Brocade 8/12c

   Related Manuals for HP Brocade 8/12c

   Summary of Contents for HP Brocade 8/12c

  • Page 1

    53-1002147-01 ® 29 April 2011 Fabric OS Command Reference Manual Supporting Fabric OS v7.0.0...

  • Page 2

    Copyright © 2011 Brocade Communications Systems, Inc. All Rights Reserved. Brocade, the B-wing symbol, BigIron, DCX, Fabric OS, FastIron, IronView, NetIron, SAN Health, ServerIron, TurboIron, and Wingspan are registered trademarks, and Brocade Assurance, Brocade NET Health, Brocade One, Extraordinary Networks, MyBrocade, VCS, and VDX are trademarks of Brocade Communications Systems, Inc., in the United States and/or in other countries.

  • Page 3: Document History

    Brocade Communications Systems, Incorporated Corporate and Latin American Headquarters Asia-Pacific Headquarters Brocade Communications Systems, Inc. Brocade Communications Systems China HK, Ltd. 130 Holger Way No. 1 Guanghua Road San Jose, CA 95134 Chao Yang District Tel: 1-408-333-8000 Units 2718 and 2818 Fax: 1-408-333-8101 Beijing 100020, China E-mail: info@brocade.com...

  • Page 4

    Document Title Publication Number Summary of Changes Publication Date Fabric OS Command Reference 53-1000436-01 June 2007 Fabric OS Command Reference 53-1000599-01 Added 13 new commands, October 2007 Updated 23 commands with new options in support of v6.0. Removed 46 obsolete commands.

  • Page 5

    Document Title Publication Number Summary of Changes Publication Date Fabric OS Command Reference 53-1001337-01 Added 18 new commands. July 2009 Modified 27 commands with new command operands to support new Fabric OS v6.3.0 features. Removed 6 deprecated command options. Removed 6 diagnostic commands that now require root access.

  • Page 6

    Fabric OS Command Reference 53-1002147-01...

  • Page 7: Table Of Contents

    Contents About This Document In this chapter ..........xix How this document is organized.

  • Page 8: Table Of Contents

    Contents ......... . 48 aliRemove .

  • Page 9: Table Of Contents

    Contents ..........121 cmsh .

  • Page 10: Table Of Contents

    Contents ......... . 259 fanShow .

  • Page 11: Table Of Contents

    Contents ......... . . 351 fipsCfg .

  • Page 12: Table Of Contents

    Contents ......... . 436 iodReset .

  • Page 13: Table Of Contents

    Contents ......... 534 nsAllShow .

  • Page 14: Table Of Contents

    Contents ........655 portCfgFportBuffers ....... . . 656 portCfgGeMediaType .

  • Page 15: Table Of Contents

    Contents ........750 portLoopbackTest ......... 753 portMirror .

  • Page 16: Table Of Contents

    Contents ........903 sensorShow .

  • Page 17: Table Of Contents

    Contents ........999 sysMonitor .

  • Page 18

    Contents ......1081 Command validation checks ....1082 Encryption commands and permissions .

  • Page 19: About This Document, How This Document Is Organized

    About This Document In this chapter • How this document is organized ........xix •...

  • Page 20: Supported Hardware And Software

    Supported hardware and software This document includes updated information specific to new functionality introduced in Fabric OS v7.0.0. Table lists the hardware platforms supported in Fabric OS v7.0 release.The ASIC type for each piece of hardware is provided in parenthesis. ASIC names may be used in this document to distinguish between types of switches that share certain characteristics.

  • Page 21

    Although many different software and hardware configurations are tested and supported by Brocade Communications Systems, Inc. for Fabric OS v7.0.0, documenting all possible configurations and scenarios is beyond the scope of this document. This document is specific to Fabric OS v7.0.0. To obtain information about an OS version other than v7.0.0, refer to the documentation for that OS version.

  • Page 22

    Access Gateway • New options to support static F_Port mapping: ag --staticadd N_Port [F_Port1; F_Port2;...] ag --staticdel N_Port [F_Port1; F_Port2;...] • New options to configure reliability counters: ag --reliabilitycounterset ag --reliabilitycountershow • agShow - Displays additional Access Gateway F-Port information if both switches run Fabric OS v7.0.0 Advanced Performance Monitoring (APM).

  • Page 23

    • portLedTest - The --slot option must be specified with the -port option on bladed systems. • bpPortLoopbackTest - New spd_mode 16 for 16G platforms. • PortLoopbackTest - New spd_mode 10 and 16 for 10G and 16G platforms. Encryption Updates to cryptoCfg command to support the following new functionality: •...

  • Page 24

    • fwMailcfg - Support for multiple e-mails (up to 5). • thConfig - New operand -sfptype to support SFP monitoring. • Ability to interrupt and restart Fabric Watch monitoring: portThConfig --pause | --continue sysMonitor --pause | --continue thConfig --pause | --continuue •...

  • Page 25

    • portShow fciptunnel/fcipcircuit enhancements: New -s | --summary option displays a summary view of the tunnel configuration parameters for a specific VE_Port. New -d | --detail option displays a full view configuration details for all configured tunnels when used with the all port specifier. •...

  • Page 26: Platform Support

    Licensing Updated for new platforms. New ICL license display strings: • licenseShow Platform Support The following help pages have explicit platform-specific restrictions and information. This information be updated to remove references to unsupported platforms, add new platforms, and validate restrictions that need to include the new 16G platforms.

  • Page 27: Port Mirroring

    portCfgAutoDisable --remove - Remove specified triggers. portCfgAutoDisable --addall - Add all triggers. portCfgAutoDisable --removeall - Remove all triggers. portCfgAutoDisable--addexcept - Add all triggers except provided options. portCfgAutoDisable --show - Show configured/added options. • portCfgShow - displays the configured values . •...

  • Page 28

    • fabSwitchShow (Brocade internal use only) • fabStatsClear (Brocade internal use only) • fabSwitchClear (Brocade internal use only) • fastWriteCfg • fcLunQuery • firmWareKeyUpdate • fmConfig • fwConfigure • fwShow • iodDelayReset • iodDelayShow • interOpMode • iscsiCfg • iscsiChipTest •...

  • Page 29: Document Conventions

    • supportShowCfgShow • fosConfig The following command options are deprecated: • cfgDefault - -chassis • portCmd -tperf -loop • portCmd -tperf -crc • thConfig - ST (State Change) area of the SFP class is no longer supported. • fipsCfg --disable fips (Brocade internal use only) •...

  • Page 30: Command Syntax Conventions, Key Terms

    Command syntax conventions Command syntax in the synopsis section follows these conventions: command Commands are printed in bold. --option, option Command options are printed in bold. -argument, arg Arguments are printed in bold. Optional element. variable Variables are printed in italics. In the help pages, values are underlined or enclosed in angle brackets <...

  • Page 31: Additional Information

    For definitions of SAN-specific terms, visit the Storage Networking Industry Association online dictionary http://www.snia.org/education/dictionary Notice to the reader This document may contain references to the trademarks of the following corporations. These trademarks are the properties of their respective companies and corporations. These references are made for informational purposes only.

  • Page 32

    Other industry resources For additional resource information, visit the Technical Committee T11 Web site. This Web site provides interface standards for high-performance and mass storage applications for Fibre Channel, storage management, and other applications: http://www.t11.org For information about the Fibre Channel industry, visit the Fibre Channel Industry Association Web site: http://www.fibrechannel.org Getting technical help Contact your switch support supplier for hardware, firmware, and software support, including product...

  • Page 33: Document Feedback

    Document feedback Quality is our first concern at Brocade, and we have made every effort to ensure the accuracy and completeness of this document. However, if you find an error or an omission, or you think that a topic needs further development, we want to hear from you. Forward your feedback to: documentation@brocade.com Provide the title and version number and as much detail as possible about your issue, including the topic heading and page number and your suggestions for improvement.

  • Page 34

    xxxiv Fabric OS Command Reference 53-1002147-01...

  • Page 35: In This Chapter, Understanding Role-based Access Control

    Chapter Using Fabric OS Commands In this chapter • Understanding role-based access control......1 •...

  • Page 36: Understanding Virtual Fabric Restrictions

    Understanding Virtual Fabric restrictions Additional command restrictions apply depending on whether Virtual Fabrics or Admin Domains are enabled in a fabric. NOTE Virtual Fabrics and Admin Domains are mutually exclusive and are not supported at the same time on a switch.

  • Page 37: Understanding Admin Domain Restrictions, Using The Command Line Interface

    Understanding Admin Domain restrictions Refer to Appendix A, “Command Availability” for context and switch type information as it applies to CLI commands. Understanding Admin Domain restrictions A subset of Fabric OS commands is subject to Admin Domain restrictions that may be in place. In order to execute an AD-restricted command on a switch or device, the switch or device must be part of a given Admin Domain, and the user must be logged in to that Admin Domain.

  • Page 38

    Using the command line interface The documentation for each command includes a synopsis of its syntax, a description of command use, and a set of examples. The same information can be accessed by issuing help command on a Brocade switch or director. This command displays the help page for the specified command. For example, to display the help page for ad, type: switch:admin>...

  • Page 39: Aaaconfig

    Chapter Fabric OS Commands aaaConfig Manages RADIUS and LDAP configuration information. SYNOPSIS aaaconfig aaaconfig --show aaaconfig --add | --change server -conf radius | ldap [-p port] [-d domain] [-t timeout] [-s secret] [-a chap | pap | peap-mschapv2] aaaconfig --remove server -conf radius | ldap aaaconfig --move server -conf radius | ldap to_position aaaconfig --authspec aaa1[;aaa2 [-backup] [-nologout] aaaconfig --help...

  • Page 40

    aaaConfig The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. OPERANDS This command has the following operands: server Specifies an IP address or a server name in dot-decimal notation.

  • Page 41

    aaaConfig Valid protocols are one of the following: Password Authentication Protocol chap Challenge-Handshake Authentication Protocol peap-mschapv2 Protected Extensible Authentication Protocol (requires Fabric OS v5.3.0 or later) --remove server Removes the specified server from the configuration. The server must match one of the IP addresses or the names shown in the current configuration.

  • Page 42

    aaaConfig "radius;local" Enables the current RADIUS configuration as the primary AAA service and the switch-local database as the secondary AAA service. If "radius" and "local" are specified, and if the RADIUS servers are reachable and the user credentials are correct, the user authentication succeeds. If the user provides credentials from the switch database, the RADIUS authentication fails but login succeeds through the switch database.

  • Page 43

    aaaConfig To replace the AAA service with backup option: switch:admin> aaaconfig --authspec "ldap;local" -backup To change the authentication mechanism with the no logout provision: switch:admin> aaaconfig --authspec radius -nologout switch:admin> aaaconfig --show RADIUS CONFIGURATIONS ===================== Position Server : 172.20.1.68 Port : 1812 Secret : testing123...

  • Page 44

    Manages Admin Domain operations. SYNOPSIS ad --activate ad_id ad --add ad_id [-d "dev_list"] [-s "switch_list"] ad --apply ad --clear [-f] ad --create ad_id [-d "dev_list"] [-s "switch_list"] ad --deactivate ad_id ad --delete ad_id ad --exec ad_id "command_list" ad --remove ad_id [-d "dev_list"] [-s "switch_list"] ad --rename ad_id new_ad_id ad --save ad --select ad_id...

  • Page 45

    Before creating Admin Domains, the default zone mode should be set to "No Access". To set the default zone mode to "No Access" execute the following command sequence: switch:admin> ad --select AD0 switch:admin> defzone --noaccess switch:admin> cfgsave Refer to defZone help for more information. All switches, switch ports and devices in the fabric that are not specified in any other Admin Domain are treated as implicit members of AD0.

  • Page 46

    --create arguments Creates a new Admin Domain with optionally specified device or switch members. A newly created Admin Domain is in an activated state. It initially contains no zone database. The newly created Admin Domain remains in the transaction buffer until you issue ad --apply or ad --save.

  • Page 47

    --show arguments Displays the membership information of the specified Admin Domain or all Admin Domains. When executed in an AD255 context and an Admin Domain name is not specified, all information about all existing Admin Domains is displayed. When executed in an AD0-AD254 context, the command, by default, displays the members of the current Admin Domain's effective configuration, and therefore you cannot specify an ad_id or mode.

  • Page 48

    -d "dev_list" Specifies the list of devices in an Admin Domain, in quotation marks. Separate each entry in the device list with a semicolon (;). Valid formats include the following: D,PI Uses existing zone D,PI member types. Benefits include the following: •...

  • Page 49

    Displays the Admin Domain configuration stored in persistent memory (defined configuration). Displays the currently enforced Admin Domain configuration currently enforced (effective configuration). EXAMPLES To enable AD5: switch:admin> ad --activate 5 You are about to activate a new admin domain. Do you want to activate '5' admin domain \ (yes, y, no, n): [no] y To enable AD_13: switch:admin>...

  • Page 50

    To deactivate Admin Domain 5: switch:admin> ad --deactivate 5 You are about to deactivate an AD. This operation will fail if an effective zone \ configuration exists in the AD Do you want to deactivate '5' admin domain \ (yes, y, no, n): [no] y To delete AD13: switch:admin>...

  • Page 51

    To display all ADs: switch:admin> ad --show Current AD: 255 : AD255 Transaction buffer configuration: --------------------------------- no configuration Defined configuration: ---------------------- AD: 1 : Active Device WWN members: 21:00:00:80:e5:12:8b:37; 21:00:00:80:e5:12:8b:55; Switch port members: 1,0; 1,1; 1,2; 1,3; 1,4; 1,5; 1,6; 1,7; 1,8; 1,9; 1,10; 1,11; 1,12;...

  • Page 52

    To display the Admin Domain effective configuration information: switch:admin> ad --show -m 2 Current AD: 255 : AD255 Effective configuration: ------------------------ AD: 1 : Active Device WWN members: 21:00:00:80:e5:12:8b:37; 21:00:00:80:e5:12:8b:55; Switch port members: 1,0; 1,1; 1,2; 1,3; 1,4; 1,5; 1,6; 1,7; 1,8; 1,9; 1,10; 1,11; 1,12;...

  • Page 53

    1,337; ---------------------------- * - Member does not exist + - Member is AD Unaware To abort the Admin Domain management transaction buffer: switch:admin> ad --transabort You are about to abort the outstanding AD transaction. Do you want to abort the AD transaction \ (yes, y, no, n): [no] y To display the current Admin Domain transaction: switch:admin>...

  • Page 54

    Enables Access Gateway (AG) and manages AG-specific operations. SYNOPSIS ag --help ag --show ag --modeshow | --modeenable | --modedisable ag [--policyenable | --policydisable] policy ag --policyshow ag --mapshow [N_Port] ag [--mapset | --mapadd | --mapdel] N_Port [F_Port1; F_Port2;...] ag [--staticadd | --staticdel ] N_Port [F_Port1; F_Port2;...] ag --pgshow [pgid] ag --pgcreate pgid "N_Port1 [;N_Port2;...]"...

  • Page 55

    ag --printalpamap F_Port ag --deletepwwnfromdb PWWN ag --clearalpamap F_Port ag --addwwnmapping N_Port "WWN [;WWN2;...]" | --all ag --delwwnmapping N_Port "WWN [;WWN2;...]" | --all ag --addwwnpgmapping Port_Group "WWN [;WWN2;...]" | --all ag --delwwnpgmapping Port_Group "WWN [;WWN2;...]" | --all ag --addwwnfailovermapping N_Port "WWN [;WWN2;...]" | --all ag --delwwnfailovermapping N_Port "WWN [;WWN2;...]"...

  • Page 56

    AG configuration changes are saved persistently as configuration keys. Use the portCfgNPort command to set a port as N_Port. This command supports multiple configurations for mapping device logins to N_Ports for the purposes of load balancing and redistribution in the event of a fabric change. If multiple mappings are configured, the system considers the available mappings in a fixed order of priority to determine which of the available N_Ports should be assigned to the login request.

  • Page 57

    • Advanced Device Security (ADS) policy. This policy restricts access to the fabric at the AG level to a set of authorized devices. Unauthorized access is rejected and the system logs a RASLOG message. You can configure the list of allowed devices for each F_Port by specifying their Port WWN. Refer to the ag --ads* commands for information on managing advanced device security.

  • Page 58

    --mapshow [N_Port | device_WWN] Displays the F_Ports that are configured and currently mapped to a given "primary" N_Port. Optionally specify an N_Port to display the F_Ports that are mapped to the specified N_Port only, or specify a device WWN to display the N_Port to which the device WWN is mapped.

  • Page 59

    --pgremove pgid Deletes the specified port group. The N_Ports in the port group that was deleted are moved to the default port group, which is pgid 0. --pgmapadd pgid "F_Port1[;F_Port2;...]" Maps the specified F_Ports to the PG identified by the pgid. Upon execution, the system identifies the least loaded N_Port in the port group and maps the F_Ports to that N_Port.

  • Page 60

    --failoverenable [N_Port] | -pg pgid Enables the failover policy for a given N_Port or for all N_Ports in the given port group. When failover policy is enabled for a given N_Port, F_Ports behave as follows: • If only primary F_Port to N_Port mapping is in place, all currently mapped F_Ports fail over to another available N_Port in the event the original N_Port becomes disabled.

  • Page 61

    --adsset "F_Port [;F_Port2;...]" "WWN [;WWN2;...]" Sets the list of devices that are allowed to login to a specified set of F_Ports. Devices are specified by their world wide names. Lists must be enclosed in double quotation marks. List members must be separated by semicolons. The maximum number of entries in the allowed device list is twice the per port maximum login count.

  • Page 62

    --addwwnmapping N_Port "WWN [;WWN2;...]" | --all Maps one or more device WWNs to a preferred N_Port. All traffic form the specified devices is forced through the specified N_Port, regardless of which F_Port the device logs into. In the event the designated N_Port should become unavailable, an alternate port can serve as a preferred failover port.

  • Page 63

    --wwnmapshow Displays all device WWN mappings. For each device WWN, the command displays the N_Port number to which it is mapped, the secondary (failover) N_Port, and the port group if applicable. The "Current" field shows the port the device is currently using. If the device is not logged in, the field displays "none." If the device is logged in to a port other than the one it is mapped to, the field displays that port.

  • Page 64

    0x6d0c00 20:0c:00:05:1e:37:11:aa 1 0 10.32.74.109 10;11; 0x6d0d00 20:0d:00:05:1e:37:11:aa 0 1 10.32.74.109 12;13; ----------------------------------------------------------- F_Port information : Port PortID Attached PWWN N_Port Preferred login N_port exceeded? ---------------------------------------------------------- 4 0x6d0a01 21:00:00:e0:8b:83:e3:cd 5 0x6d0a02 21:01:00:e0:8b:a3:e3:cd 6 0x6d0a03 21:00:00:e0:8b:83:3e:ce 7 0x6d0b01 21:01:00:e0:8b:a3:3e:ce 8 0x6d0b02 21:00:00:e0:8b:83:5c:cd 9 0x6d0b03 21:01:00:e0:8b:a3:5c:cd 10 0x6d0c02 10:00:00:06:2b:0a:a3:93 11 0x6d0c01 10:00:00:06:2b:0a:a3:92...

  • Page 65

    To disable auto port configuration policy when the switch is disabled: switch:admin> ag --policydisable auto Default factory settings will be restored. Default mappings will come into effect. Please save the current configuration using configupload. Do you want to continue? (yes, y, no, n): [no] y Access Gateway configuration has been restored \ to factory default To enable the ADS policy:...

  • Page 66

    To add F_Port 5 to N_Port 2 (observe that N_Port 2 already has mapped F_Ports): switch:admin> ag --mapadd 2 "5" To display the new mappings: switch:admin> ag --mapshow N_Port Configured Static Current Failover Failback PG_ID PG_Name _F_Ports _F_Ports F_Ports ----------------------------------------------------------------- None SecondFabric 7;8;9...

  • Page 67

    _F_Ports _F_Ports -------------------------------------------------------------- None None -------------------------------------------------------------- Static N-Port to F-Port Mapping N-Port F-Port -------------------------------------------------------------- -------------------------------------------------------------- AG failover policy commands To display failover policy settings for all N_Ports: switch:admin> ag --failovershow N_Port failover_bit --------------------------- To set and display failover and failback policies on a single port: switch:admin>...

  • Page 68

    To set and display failback policy settings on a single port: switch:admin> ag --failbackenable 0 Failback policy cannot be enabled since failover policy is disabled for port 0 switch:admin> ag --failbackenable 2 Failback policy is enabled for port 2 switch:admin> ag --failbackenable 3 Failback on N_Port 3 is not supported switch:admin>...

  • Page 69

    To remove the port group with pgid 2: switch:admin> ag --pgremove 2 Port Group 2 has been removed successfully switch:admin> ag --pgshow PG_ID PG_Name PG_Mode N_Ports F_Ports ----------------------------------------------- lb,mfnm 4;5;6 FirstFabric 10;11 ----------------------------------------------- To enable managed fabric name monitoring in port group 3: switch:admin>...

  • Page 70

    To delete secondary port mapping for F_Ports 7, 8 and 9: switch:admin> ag --prefdel "7;8;9" 3 Preferred N_Port is deleted successfully \ for the F_Port[s] To set secondary port mapping for F_Ports 7, 8 and 9: switch:admin> ag --prefset "7;8;9" 3 Preferred N_Port is set successfully \ for the F_Port[s ADS Policy commands...

  • Page 71

    To enable persistent ALPA in stringent mode: switch:admin> ag --persistentalpaenable 1 -s Persistent ALPA mode is enabled To disable persistent ALPA mode: switch:admin> ag --persistentalpaenable 0 Persistent ALPA mode is enabled To display the ALPA database entries for F_Port 5: switch:admin>...

  • Page 72

    To create a WWN to port group mapping for all currently mapped devices (this command does not affect devices not already mapped or connecting later). switch:admin> ag --addwwnpgmapping 4 --all To add port 13 as a preferred failover N_Port for a device: switch:admin>...

  • Page 73: Agautomapbalance

    agAutoMapBalance agAutoMapBalance Controls automatic remapping of F_Ports in AG mode. SYNOPSIS agautomapbalance --enable [-fport | -nport] [-pg Port_Group_Number | -all] agautomapbalance --disable [-fport | -nport] [-pg Port_Group_Number | -all] agautomapbalance --force agautomapbalance --show agautomapbalance --help DESCRIPTION Use this command to control the automatic rebalancing of F_Ports for login distribution in the event that an F_Port goes offline or an N_Port comes online.

  • Page 74

    agAutoMapBalance -nport Enables automatic login redistribution in the event that one or more N_Ports come online. When automatic login redistribution is enabled, the F_Ports mapped to the current N_Ports are rebalanced among the N_Ports. --disable Disables automatic login redistribution upon removal or addition of a specified port type.

  • Page 75

    agAutoMapBalance To disable automatic login redistribution on F_Port offline events: switch:admin> agautomapbalance --disable -fport To enable automatic login redistribution on F_Ports and N_Ports on port group 1 in the Access Gateway: switch:admin> agautomapbalance --enable -fport pg 1 To disable automatic login redistribution on F_Ports and N_Ports on all port groups in the Access Gateway: switch:admin>...

  • Page 76: Agshow

    agShow agShow Displays the Access Gateway information registered with the fabric. SYNOPSIS agshow agshow --name ag_name agshow --local DESCRIPTION This command displays the details of the F_Ports and the configured N_Ports in the Access Gateway attached to the fabric. The command output displays the following information. Name The name of the Access Gateway.

  • Page 77

    agShow OPERANDS This command has the following optional operands: --name ag_name Displays information regarding a specific Access Gateway that is registered with this fabric. --local Display information regarding all Access Gateways that are locally registered to this switch. EXAMPLES To display the Access Gateway information registered with the fabric: switch:admin>...

  • Page 78

    agShow Local/Remote Name ---------------------------------- local L5D_B10_4016_1 local L5D_B14_4024_1 local L5D_B13_200_AG SEE ALSO portCfgNPIVPort Fabric OS Command Reference 53-1001764-01...

  • Page 79: Aliadd

    aliAdd aliAdd Adds a member to a zone alias. SYNOPSIS aliadd "aliName","member[; member...]" DESCRIPTION Use this command to add one or more members to an existing zone alias. The alias member list cannot contain another zone alias. This command changes the defined configuration. For the change to become effective, enable the zone configuration with the cfgEnable command.

  • Page 80: Alicreate

    aliCreate aliCreate Creates a zone alias. SYNOPSIS alicreate "aliName","member[; member...]" DESCRIPTION Use this command to create a new zone alias. The zone alias member list must have at least one member (empty lists are not allowed). The alias member list cannot contain another zone alias. Refer to the zoneCreate command for more information on name and member specifications.

  • Page 81: Alidelete

    aliDelete aliDelete Deletes a zone alias. SYNOPSIS alidelete "aliName" DESCRIPTION Use this command to delete a zone alias. This command changes the defined configuration. For the change to become effective, enable the zone configuration with the cfgEnable command. For the change to be preserved across switch reboots, save the zone configuration to nonvolatile memory with the cfgSave command.

  • Page 82: Aliremove

    aliRemove aliRemove Removes a member from a zone alias. SYNOPSIS aliremove "aliName","member[; member...]" DESCRIPTION Use this command to remove one or more members from an existing zone alias. If all members are removed, the zone alias is deleted. This command changes the defined configuration. For the change to become effective, enable the zone configuration with the cfgEnable command.

  • Page 83: Alishow

    aliShow aliShow Displays zone alias information. SYNOPSIS alishow ["pattern"][, mode] DESCRIPTION Use this command to display zone configuration information. Use the pattern operand to display only matching zone alias names in the defined configuration. If no parameters are specified, all zone configuration information (both defined and effective) is displayed.

  • Page 84: Aptpolicy

    aptPolicy aptPolicy Changes or displays the Advanced Performance Tuning (APT) policy. SYNOPSIS aptpolicy [policy] aptpolicy -ap [ap_policy] DESCRIPTION Use this command to display and change the advanced performance tuning (APT) policies on a switch. Several internal performance tuning parameters can be modified with this command. The default parameters (AP shared Link Policy) are optimized for most SAN applications;...

  • Page 85

    aptPolicy • The FC address of the destination fabric device (DID) for this frame. • The FC Originator Exchange ID (OXID) for this frame. This policy optimizes the utilization of the available paths by allowing I/O traffic between different SID, DID, or OXID pairs to use different paths. All frames received on an ingress port with the same SID, DID, or OXID parameters take the same path unless there is a fabric event.

  • Page 86: Auditcfg

    auditCfg auditCfg Modifies and displays the audit log filter configuration. SYNOPSIS auditcfg --class audit_class auditcfg --enable | --disable auditcfg --severity severity_level auditcfg --show DESCRIPTION Use this command to configure the audit logging and to display the audit log configuration. This command allows you to set filters by configuring certain classes, to add or remove any of the classes in the filter list, to set severity levels for audit messages, and to enable or disable audit filters.

  • Page 87

    auditCfg To display the configuration: switch:admin> auditcfg --show Audit filter is enabled. 1-ZONE 2-SECURITY 3-CONFIGURATION 4-FIRMWARE 5-FABRIC 6-FW 7-LS Severity level: INFO To disable audit logging: switch:admin> auditcfg --disable Audit filter is disabled. SEE ALSO auditDump Fabric OS Command Reference 53-1001764-01...

  • Page 88: Auditdump

    auditDump auditDump Displays or clears the audit log. SYNOPSIS auditdump -s | -show auditdump -c | -clear DESCRIPTION Use this command to display or clear the audit log on the switch. The audit log persistently saves the most recent 256 log entries on the switch. On modular platforms, the entries are not shared across CPs. To display or clear the logs, this command must be issued for each CP separately.

  • Page 89: Authutil

    authUtil authUtil Displays and sets the authentication configuration. SYNOPSIS authutil authutil --show authutil --set option value authutil --policy -sw option | -dev option authutil --authinit [slot/]port[, [slot/]port...] | allE DESCRIPTION Use this command to display and set local switch authentication parameters. Use --set to change authentication parameters such as protocol, Diffie-Hellman group (DH group), or hash type.

  • Page 90

    authUtil enabled. Specifying "*" enables all DH groups 0, 1, 2, 3, and 4, in that order. This means that in authentication negotiation, the NULL DH group is given priority over all other groups. In the case of a port that is enabled for encryption and you specify "*", the DH group 4 is selected.

  • Page 91

    authUtil --authinit [slot/]port [, [slot/]port...| allE Reinitiates authentication on selected ports after changing the DH-CHAP group, hash type, and shared secret between a pair of switches. This command does not work on Private, Loop, NPIV and FICON devices. The command can reinitiate authentication only if the device was previously authenticated.

  • Page 92

    authUtil To set the Device policy to passive mode: switch:admin> authutil --policy -dev passive Warning: Activating the authentication policy requires DH-CHAP secrets on both switch and device. Otherwise, the F-port will be disabled during next F-port bring-up. ARE YOU SURE (yes, y, no, n): [no] y Device authentication is set to PASSIVE To set the device authentication policy to "on"...

  • Page 93: Bannerset

    bannerSet bannerSet Sets the banner on the local switch. SYNOPSIS bannerset [banner] DESCRIPTION Use this command to set the banner on the local switch. The banner is a string of alphanumeric characters. It is displayed after you log in to a switch. The banner can be created using the banner operand or interactively by entering the bannerSet command without an operand.

  • Page 94: Bannershow

    bannerShow bannerShow Displays the banner text. SYNOPSIS bannershow DESCRIPTION Use this command to display the text of the local switch banner. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 95: Bcastshow

    bcastShow bcastShow Displays broadcast routing information. SYNOPSIS bcastshow DESCRIPTION Use this command to display the broadcast routing information for all ports in the switch. The broadcast routing information indicates all ports that are members of the broadcast distribution tree: ports that are able to send and receive broadcast frames.

  • Page 96: Bladecfggemode

    bladeCfgGeMode bladeCfgGeMode Configures a GbE port or a 10GbE port on the Brocade FX8-24 blade. SYNOPSIS bladecfggemode --set mode -slot slot bladecfggemode --show -slot slot | -all bladecfggemode --help DESCRIPTION Use this command to configure the GbE port mode on the Brocade FX8-24 extension blade or to display the configuration.

  • Page 97

    bladeCfgGeMode To display the GbE port mode for all configured slots: switch:admin> bladecfggemode --show -all bladeCfgGeMode: Blade in slot 1 is configured in 1GigE Mode 1GigE mode: only the ge0-9 ports are enabled (xge0 and xge1 \ are disabled) bladeCfgGeMode: Blade in slot 4 is configured in 10GigE Mode 10GigE mode: only xge0 and xge1 are enabled (ge0-9 ports \ are disabled)

  • Page 98: Bladedisable

    bladeDisable bladeDisable Disables all user ports on a blade. SYNOPSIS bladedisable slot DESCRIPTION Use this command to disable all user ports on a blade. All Fibre Channel ports on the blade are taken offline. If the switch was connected to a fabric through this blade, the remaining switches reconfigure, and the switch reconfigures based on the other blade ports.

  • Page 99

    bladeDisable ------ In_Sync Disabled ------ In_Sync Disabled ------ In_Sync Disabled ------ In_Sync Disabled ------ In_Sync Disabled ------ In_Sync Disabled ------ In_Sync Disabled ------ In_Sync Disabled ------ In_Sync Disabled ------ In_Sync Disabled ------ In_Sync Disabled ------ In_Sync Disabled ------ In_Sync Disabled ------ In_Sync Disabled...

  • Page 100: Bladeenable

    bladeEnable bladeEnable Enables all user ports on a blade. SYNOPSIS bladeenable slot DESCRIPTION Use this command to enable all user ports on a blade. All ports within the blade that did not fail the power-on self-test (POST) are enabled (except for persistently disabled ports). They may come online if connected to a device, or remain offline if disconnected.

  • Page 101

    bladeEnable UNKNOWN VACANT SW BLADE ENABLED CP BLADE ENABLED CP BLADE ENABLED SW BLADE ENABLED UNKNOWN VACANT UNKNOWN VACANT UNKNOWN VACANT SEE ALSO bladeDisable, chassisDisable, chassisEnable, portEnable, portDisable, switchDisable, switchShow Fabric OS Command Reference 53-1001764-01...

  • Page 102: Bladeswap

    bladeSwap bladeSwap Swaps the area numbers for matching port pairs of two blades. SYNOPSIS bladeSwap -src source_slot -dest destination_slot DESCRIPTION Use this command to swap the area numbers for matching port pairs of two blades. All ports must qualify for swapping for this command to succeed. It validates that the blades in the indicated slots are of the same type, have the same number of ports, and that the port pairs are in the same partition.

  • Page 103: Bootluncfg

    bootLunCfg bootLunCfg Transparently configures the boot LUN for an HBA. SYNOPSIS bootluncfg --add HBA_WWN PWWN LUN_ID bootluncfg --delete HBA_WWN [PWWN LUN_ID] bootluncfg --show bootluncfg --help DESCRIPTION Use this command to configure the boot LUN for an HBA. Existing fabric-based boot LUN discovery allows the host's boot LUN information to be stored in the fabric zone database by using a zone name that contains the PWWN of an HBA port.

  • Page 104

    bootLunCfg EXAMPLES To configure a boot LUN: switch:admin> bootluncfg --add 11:22:ab:44:44:ff:44:ca \ 1b:6c:55:55:55:3a:55:ff 9abc345fa1112410 Operation Successful To display existing Port/LUN mappings: switch:admin> bootluncfgn--show 00:11:22:33:44:55:66:77 00:00:00:00:aa:bb:cc:dd;00:00:00:01:ee:ff:11:22; \ 00:00:00:02:9a:bc:34:5f;00:00:00:03:a1:11:24:10 aa:aa:aa:aa:aa:aa:aa:aa 00:00:00:00:11:11:11:11;00:00:00:01:11:11:11:11; \ 00:00:00:02:9a:bc:34:5f;00:00:00:03:a1:11:24:10 bb:aa:aa:aa:aa:aa:aa:aa 00:00:00:00:11:11:11:11;00:00:00:01:11:11:11:11; \ 00:00:00:02:9a:bc:34:5f;00:00:00:03:a1:11:24:10 To remove an HBA to Port/LUN mapping: switch:admin>...

  • Page 105: Bottleneckmon

    bottleneckMon bottleneckMon Monitors and reports latency and congestion bottlenecks on F_Ports and E_Ports. SYNOPSIS bottleneckmon --enable [-cthresh congestion_threshold] [-lthresh latency_threshold] [-time seconds] [-qtime seconds] [-alert | -noalert] [-lsubsectimethresh time_threshold] [-lsubsecsevthresh severity_threshold] bottleneckmon --disable bottleneckmon --config [-cthresh congestion_threshold] [-lthresh latency_threshold][-time seconds] [-qtime seconds] [-alert | -noalert] [-lsubsectimethresh time_threshold] [-lsubsecsevthresh severity_threshold]...

  • Page 106

    bottleneckMon Enabling or disabling bottleneck detection is a switch-wide operation. If Virtual Fabrics are enabled, the configuration is applied per logical switch and affects all ports on the current logical switch. After the (logical) switch-wide bottleneck detection parameters have been set, you can you can fine-tune the configuration for specific ports.

  • Page 107

    bottleneckMon 6 seconds in an interval of 10 seconds, and 1 second out of the other 4 seconds was affected by a bottleneck, the display for that interval would show 25% as the percentage of affected seconds (1 out of 4), and state "no data for 6 seconds."...

  • Page 108

    bottleneckMon Credit recovery on back-end ports Use the --cfgcredittools commands to enable or disable credit recovery of external back-end ports and to display the configuration. When this feature is enabled, credit is recovered on external back-end ports (ports connected to the core blade or core blade back-end ports) when credit loss has been detected on these ports.

  • Page 109

    bottleneckMon switch from another logical switch, bottleneck detection is enabled upon completion of the move. You can configure optional thresholds and alerts when you enable the feature, or you can change selected parameters later with the --config command. --config Modifies bottleneck detection parameters on specified ports or, when a port list is not specified, on the entire switch.

  • Page 110

    bottleneckMon and no greater than 1. The default value is 0.8. Note that the application of the sub-second numerical limits is approximate. This command erases the statistics history and restarts alert calculations (if alerting is enabled) on the specified ports. When used with the config option, you must specify a port.

  • Page 111

    bottleneckMon The following operands are optional: -interval seconds Specifies the time window in seconds over which the percentage of seconds affected by bottleneck conditions is displayed in the output. When a port is specified with the --show command, the maximum interval is 10800 seconds (3 hours).

  • Page 112

    bottleneckMon EXAMPLES Bottleneck detection examples To enable bottleneck detection on the switch without alerts (statistics collected with default parameters are still available for viewing): switch:admin> bottleneckmon --enable To enable bottleneck detection on the switch with alerts using default values for thresholds and time (preferred use case): switch:admin>...

  • Page 113

    bottleneckMon Feb 26 21:56:10 Feb 26 21:56:20 Feb 26 21:56:00 Feb 26 21:56:10 Feb 26 21:55:50 Feb 26 21:56:00 Feb 26 21:55:40 Feb 26 21:55:50 Feb 26 21:55:30 Feb 26 21:55:40 To display bottleneck statistics for a single port: switch:admin> bottleneckmon --show -interval 5 -span 30 2/4 ============================================= Wed Jan 13 18:54:35 UTC 2010...

  • Page 114

    bottleneckMon Jan 13 18:54:10 Jan 13 18:54:15 20.00 Jan 13 18:54:15 Jan 13 18:54:20 80.00 Jan 13 18:54:20 Jan 13 18:54:25 0.00 Jan 13 18:54:25 Jan 13 18:54:30 0.00 Jan 13 18:54:30 Jan 13 18:54:35 40.00 To display bottleneck configuration details for the switch: switch:admin>...

  • Page 115

    bottleneckMon To enable back-end port credit recovery with the link reset threshold option and to display the configuration: switch:admin> bottleneckmon --cfgcredittools -intport \ -recover onLrThresh switch:admin> bottleneckmon --showcredittools Internal port credit recovery is Enabled with LrOnThresh To disable back-end port credit recovery and to display the configuration: switch:admin>...

  • Page 116: Bpportloopbacktest

    bpPortLoopbackTest bpPortLoopbackTest Sends and receives data from the same BP port to perform a functional test of the port. SYNOPSIS bpportloopbacktest [--slot slot] [-nframes count] [-pklen count] [-lb_mode mode] [-spd_mode mode ] [-bpports itemlist ] DESCRIPTION Use this command to verify the functional operation of the switch. The test sends frames from a specified blade processor (BP) port transmitter and loops the frames back into the same BP port's receiver.

  • Page 117

    bpPortLoopbackTest At each pass, a different data type is used to create the frame from a palette of seven. If a pass of seven is requested, seven different frames are used in the test. If eight passes, the first seven frames are unique, and the eighth frame is the same as the first.

  • Page 118

    bpPortLoopbackTest Runs test at 8 Gbps (Default for Condor2). Runs test at 16 Gbps (Condor3 only). -bpports itemlist Specifies a list of blade ports to test. By default all valid blade ports in the specified blade are tested. On the Brocade Encryption platforms, ports 80-103 are the only valid ports, because these are the only blade ports with access to the Vader chip.

  • Page 119: Bpturboramtest

    bpTurboRamTest bpTurboRamTest MBIST test for AP Blade BP ASICs. SYNOPSIS bpturboramtest [--slot slot] [ -passcnt count ] [ -bpports itemlist ] DESCRIPTION Use this command to verify the on-chip static random access memory (SRAM) located in the Blade Processor (BP) ASICs of the Application Processor (AP) blade. The command makes use of the memory built-in self-test (MBIST) circuitry.

  • Page 120

    bpTurboRamTest EXAMPLES To run the test in default mode: switch:admin> bpturboramtest Running bpturboramtest ....Board Init Running Vader bist test Vader bist test PASSED Running Ob1 bist test Ob1 bist test PASSED BIST test PASSED on all ASIC(s) Test Complete: bpturboramtest Pass 1 of 1 Duration 0 hr, 1 min &...

  • Page 121: Bufopmode

    bufOpMode bufOpMode Changes or displays the Buffer Optimized Mode. SYNOPSIS bufopmode --set slot [-f] bufopmode --reset slot bufopmode --show slot bufopmode --showall DESCRIPTION Use this command to display or change the buffer optimized mode on a switch. When buffer optimized mode is enabled on a slot, additional buffers are allocated on the internal ports. Use this feature, if you have slow draining devices connected to the slot and there are no long distance links or F_Port buffers configured on that slot.

  • Page 122

    bufOpMode Slot 9: buffer optimized mode - Off Slot 10: buffer optimized mode - Off Slot 11: buffer optimized mode - Off Slot 12: buffer optimized mode - On -------------------------------------------------- * indicates buffer optimization not supported on this blade To display current buffer optimized mode for a single slot switch:admin>...

  • Page 123

    bufOpMode Slot 11: buffer optimized mode - Off* Slot 12: buffer optimized mode - Off* ----------------------------------------------------------- * indicates buffer optimization not supported on this blade SEE ALSO slotShow, slotPowerOn, slotPowerOff Fabric OS Command Reference 53-1001764-01...

  • Page 124: Ceeportledtest

    ceePortLedTest ceePortLedTest DESCRIPTION See portLedTest. SEE ALSO None Fabric OS Command Reference 53-1001764-01...

  • Page 125: Ceeportloopbacktest

    ceePortLoopbackTest ceePortLoopbackTest DESCRIPTION See portLoopbackTest. SEE ALSO None Fabric OS Command Reference 53-1001764-01...

  • Page 126: Ceeturboramtest

    ceeTurboRamTest ceeTurboRamTest DESCRIPTION See turboRamTest. SEE ALSO None Fabric OS Command Reference 53-1001764-01...

  • Page 127: Cfgactvshow

    cfgActvShow cfgActvShow Displays effective zone configuration information. SYNOPSIS cfgactvshow DESCRIPTION Use this command to display the effective zone configuration information. The current configuration is a single zone configuration that is currently in effect. The devices that an initiator sees are based on this configuration. The effective configuration is built when a specified zone configuration is enabled.

  • Page 128: Cfgadd

    cfgAdd cfgAdd Adds a member to a zone configuration. SYNOPSIS cfgadd "cfgName", "member[; member...]" DESCRIPTION Use this command to add one or more members to an existing zone configuration. This command changes the Defined Configuration. For the change to take effect, enable the configuration with the cfgEnable command.

  • Page 129: Cfgclear

    cfgClear cfgClear Clears all zone configurations. SYNOPSIS cfgclear DESCRIPTION Use this command to clear all zone information in the transaction buffer. All defined zone objects in the transaction buffer are deleted. If an attempt is made to commit the empty transaction buffer while a zone configuration is enabled, you are warned to first disable the enabled zone configuration or to provide a valid configuration with the same name.

  • Page 130: Cfgcreate

    cfgCreate cfgCreate Creates a zone configuration. SYNOPSIS cfgcreate "cfgName", "member[;member...]" DESCRIPTION Use this command to create a new zone configuration. This command changes the Defined Configuration (see cfgShow). For the change to become effective, enable the configuration with the cfgEnable command. For the change to be preserved across switch reboots, save the configuration to nonvolatile memory with the cfgSave command.

  • Page 131: Cfgdelete

    cfgDelete cfgDelete Deletes a zone configuration. SYNOPSIS cfgdelete "cfgName" DESCRIPTION Use this command to delete a zone configuration. This command changes the Defined Configuration (see cfgShow). For the change to become effective, enable the configuration with the cfgEnable command. For the change to be preserved across switch reboots, save the configuration to nonvolatile memory with the cfgSave command.

  • Page 132: Cfgdisable

    cfgDisable cfgDisable Disables a zone configuration. SYNOPSIS cfgdisable DESCRIPTION Use this command to disable the current zone configuration. The fabric returns to non-zoning mode, a mode in which all devices can see each other. This command ends and commits the current zoning transaction buffer to both volatile and nonvolatile memory.

  • Page 133: Cfgenable

    cfgEnable cfgEnable Enables a zone configuration. SYNOPSIS cfgenable "cfgName" DESCRIPTION Use this command to enable a zone configuration. The command builds the specified zone configuration . It checks for undefined zone names, zone alias names, or other inconsistencies, by expanding zone aliases, removing duplicate entries, and then installing the effective configuration.

  • Page 134: Cfgremove

    cfgRemove cfgRemove Removes a member from a zone configuration. SYNOPSIS cfgremove "cfgName","member[; member...]" DESCRIPTION Use this command to remove one or more members from an existing zone configuration. If all members are removed, the zone configuration is deleted. This command changes the Defined Configuration (see cfgShow). For the change to become effective, enable the configuration with the cfgEnable command.

  • Page 135: Cfgsave

    cfgSave cfgSave Saves the zone configuration to nonvolatile memory. SYNOPSIS cfgsave DESCRIPTION Use this command to save the current zone configuration. This command writes the defined configuration and the name of the effective configuration to nonvolatile memory in all switches in the fabric.

  • Page 136: Cfgshow

    cfgShow cfgShow Displays zone configuration information. SYNOPSIS cfgshow ["pattern"] [, mode] DESCRIPTION Use this command to display zone configuration information. If no operand is specified, all zone configuration information (both defined and effective) is displayed. If the local switch has an outstanding transaction, this command displays the most recently edited zone configuration that has not yet been saved.

  • Page 137

    cfgShow EXAMPLES To display all zone configurations that start with "Test": switch:admin> cfgshow "Test*" cfg: Test1 Blue_zone cfg: Test_cfg Red_zone; Blue_zone To display all zone configuration information: switch:admin> cfgshow Defined configuration: cfg: USA1 Blue_zone cfg: USA_cfg Red_zone; Blue_zone zone: Blue_zone 1,1;...

  • Page 138: Cfgsize

    cfgSize cfgSize Displays zone and Admin Domain database size details. SYNOPSIS cfgsize [integer] DESCRIPTION Use this command to display the size details of the zone database and the Admin Domain database. When executed in a non-AD255 context, the size details include maximum size, the committed size, and the transaction size of the Zone database in bytes.

  • Page 139

    cfgSize EXAMPLES To display the zone database on a Brocade 6510 switch:admin> cfgsize Zone DB max size - 1045274 bytes Available Zone DB size - 1041503 bytes committed - 2759 transaction - 0 To display Admin Domain and zone database size information in an AD255 context: switch:admin>...

  • Page 140: Cfgtransabort

    cfgTransAbort cfgTransAbort Aborts the current zoning transaction. SYNOPSIS cfgtransabort [token] DESCRIPTION Use this command to abort the current zoning transaction without committing it. All changes made since the transaction was started are removed and the zone configuration database is restored to the state before the transaction was started.

  • Page 141: Cfgtransshow

    cfgTransShow cfgTransShow Displays information about the current zoning transaction. SYNOPSIS cfgtransshow DESCRIPTION Use this command to display the ID of the current zoning transaction. In addition, the command provides information on whether or not the transaction can be aborted. The transaction cannot be aborted if it is an internal zoning transaction.

  • Page 142: Chassisbeacon

    chassisBeacon chassisBeacon Sets chassis beaconing mode. SYNOPSIS chassisbeacon [mode] DESCRIPTION Use this command to enable or disable beaconing on a chassis. Chassis beaconing can be used to locate a failing chassis in a group of chassis. Use the portBeacon command to locate a failing port, and use the switchBeacon command to locate a failing (logical) switch.

  • Page 143: Chassisdisable

    chassisDisable chassisDisable Disables all user ports in a chassis. SYNOPSIS chassisdisable [-force] DESCRIPTION Use this command to disable a Virtual Fabric-aware chassis. All Fibre Channel ports are taken offline. This command prompts for confirmation unless the -force option is used. If the chassis is partitioned into logical switches that are part of logical fabrics, the remaining switches in these fabrics reconfigure.

  • Page 144: Chassisdistribute

    chassisDistribute chassisDistribute Distributes IP filter policies. SYNOPSIS chassisdistribute -db policy_db -fid FID [-force] chassisdistribute -db policy_db -domain domain_list [-force] DESCRIPTION Use this command to manually distribute IP Filter policies. The behavior of this command depends on whether Virtual Fabrics are enabled or disabled. •...

  • Page 145

    chassisDistribute NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. OPERANDS This command has the following operands: -db policy_list Specifies the list of policy sets, also called security databases, to be distributed.

  • Page 146: Chassisenable

    chassisEnable chassisEnable Enables all user ports in a chassis. SYNOPSIS chassisenable DESCRIPTION Use this command to enable a Virtual Fabric-aware chassis. All Fibre Channel ports that passed the power-on self test (POST) are enabled. They may come online if connected to a device, or remain offline if disconnected.

  • Page 147: Chassisname

    chassisName chassisName Displays or sets the chassis name. SYNOPSIS chassisname [name] DESCRIPTION Use this command to display or change the name associated with the chassis. Use this command without parameters to display the current chassis name. Use this command with the name operand to assign a new chassis name.

  • Page 148: Chassisshow

    chassisShow chassisShow Displays all field replaceable units (FRUs). SYNOPSIS chassisshow DESCRIPTION Use this command to display the Field Replaceable Unit (FR) header content for each object in the chassis and chassis backplane version. This command displays the following information: The chassis family, for example, DCX 8510. The backplane version number, in hexadecimal: Chassis Backplane Revision: xx The first line of each record contains the object ID.

  • Page 149

    chassisShow NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. OPERANDS None EXAMPLES To display the FRUs for a DCX 8510-8: switch:user>...

  • Page 150: Classconfig

    classConfig classConfig Displays RBAC class permissions. SYNOPSIS classconfig --show class_name | -all | -classlist classconfig --showcli command classconfig --showroles class_name classconfig --help DESCRIPTION Use this command to display information about role-based access control (RBAC) permissions for one or all meta-object format (MOF) classes, to display permissions for a specified command, or to display the permissions for a specified MOF class.

  • Page 151

    classConfig --showcli command Displays the RBAC permissions for the specified command and associated command options. The output displays the command name, the command options, the RBAC class permissions for each command option, and the MOF class. --showroles class_name Displays the role permissions the specified MOF class. --help Displays the command usage.

  • Page 152

    classConfig 46. PortMirror 47. RADIUS 48. Reboot 49. Restricted 50. RoleConfig 51. RoutingAdvanced 52. RoutingBasic 53. Security 54. SessionManagement 55. SNMP 56. Statistics 57. StatisticsDevice 58. StatisticsPort 59. SwitchConfiguration 60. SwitchManagement 61. SwitchManagementIPConfiguration 62. SwitchPortConfiguration 63. SwitchPortManagement 64. Topology 65. USBManagement 66.

  • Page 153

    classConfig To display the RBAC permissions for the UserManagement class: switch:admin> classconfig --showroles UserManagement Roles that have access to the RBAC class 'usermanagement' are: Role Name Permission --------- ---------- Admin Factory Root SecurityAdmin To display the RBAC permissions for a command: switch:admin>...

  • Page 154: Clihistory

    cliHistory cliHistory Displays switch command history. SYNOPSIS clihistory DESCRIPTION This command saves the following information whenever a command is executed on the switch: • Timestamp • Username • IP address of the Telnet session • Options • Arguments This command displays the local CLI command history. The information is saved in the SSHOW_SYS file as part of supportSave and in the CTRACE traceDump file, which is also included with the supportSave package.

  • Page 155: Cmsh

    cmsh cmsh Opens the CEE command shell. SYNOPSIS cmsh DESCRIPTION Use this command to open a shell for managing 10 GbE interfaces and Layer2/Layer3 protocol services. The CEE management shell provides a hierarchical CLI interface. Refer to the CEE Command Reference and the CEE Administrator's Guide for information on how to use the CEE commands and configuration procedures.

  • Page 156

    cmsh To create an FCoE VLAN: switch:admin> cmsh switch:admin>en switch:admin>#conf t switch:admin>(config)#protocol lldp switch:admin>(conf-lldp)# advertise dcbx-fcoe-app-tlv switch:admin>(conf-lldp)# advertise dcbx-fcoe-logical-link-tlv switch:admin>(conf-lldp)#exit switch:admin>(config)#exit switch:admin>(config)# vlan classifier rule 1 proto \ fcoe encap ethv2 switch:admin>(config)# vlan classifier rule 2 proto fip \ encap ethv2 switch:admin>(config)# vlan classifier group 1 add rule 1 switch:admin>(config)# vlan classifier group 1 add rule 2 switch:admin>(config)#interface vlan 5...

  • Page 157: Configdefault

    configDefault configDefault Resets the nonpersistent configuration data to factory defaults. SYNOPSIS configdefault [-fid FID | -all | -switch] DESCRIPTION Use this command to reset the nonpersistent configuration settings to their factory default values. Configuration data is grouped into chassis information and switch information. Each configuration type is managed separately.

  • Page 158

    configDefault The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. OPERANDS This command has the following operands: -fid FID Specifies the Fabric ID of the logical switch for which to reset the configuration.

  • Page 159: Configdownload

    configDownload configDownload Downloads configuration data to the system. SYNOPSIS configdownload configdownload [- all ] [-p ftp | -ftp] ["host","user","path" [,"passwd"]] configdownload [- all ] [-p scp | -scp ] ["host","user","path"] configdownload [- all ] [-p sftp | -sftp ] ["host","user","path"] configdownload [- all ] [-local | -USB | -U ["file"]] configdownload [-fid FID | -chassis | -all | -switch] [-p ftp | -ftp ] ["host","user","path"...

  • Page 160

    configDownload The system configuration data is downloaded separately. It is grouped into chassis information and switch information. Each configuration type is managed separately and the behavior of configDownload depends on the environment in which the command is executed and which part of the system configuration you wish to download.

  • Page 161

    configDownload Security parameters and the switch identity cannot be changed by configDownload. Parameters such as the switch name and IP address are ignored; they are lines in the configuration file that begin with "boot". Security parameters and version stamp are ignored; they are the lines in the configuration file that begin with "sec".

  • Page 162

    configDownload -chassis Downloads the chassis configuration only. -switch Downloads the switch configuration only. This operand is valid only in non-VF mode. "host" Specifies the name or the IP address of the external host, from which to download the configuration. IPv4 and IPv6 addresses are supported. To be able to mention the FTP server by name, you need to set up two DNS servers with dnsConfig.

  • Page 163

    configDownload EXAMPLES To download the switch configuration file interactively to the current logical switch from a local directory (no chassis permissions): switch:admin> configdownload Protocol (scp, ftp, sftp, local) [ftp]: Server Name or IP Address [host]: 192.168.163.233 User Name [user]: admin Path/Filename [<home dir>/config.txt]: Section (all|chassis|FID# [all]): *** CAUTION ***...

  • Page 164: Configlist

    configList configList Lists uploaded configuration files. SYNOPSIS configlist -local | -USB | -U DESCRIPTION This command displays a list of names, sizes, and creation dates of configuration files saved on the local chassis or on an attached USB device. These files are created when the configUpload command is executed with the -local or the -USB option.

  • Page 165: Configremove

    configRemove configRemove Deletes a saved configuration file. SYNOPSIS configremove -local | -USB | -U [file] DESCRIPTION This command deletes a configuration file that was previously saved to the local chassis or to an attached USB device by using the configUpload command. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 166: Configshow

    configShow configShow Displays system configuration settings. SYNOPSIS configshow configshow [-all | -fid FID | -chassis | -switch] | [-local | -USB | -U] [file] [-pattern "pattern"] DESCRIPTION Use this command to display system configuration settings. Some but not all of these parameters are set by the configure and configureChassis commands.

  • Page 167

    configShow -local [file] Displays the content of a configuration file that was previously created by configUpload and stored on the chassis. The output can be optionally filtered by -pattern "pattern". If file is omitted, the command prompts for a file name. The output format when -local is specified matches that of configUpload and contains a superset of the information provided when -local is not specified.

  • Page 168

    configShow passwdcfg.lockoutthreshold:0 passwdcfg.lockoutduration:30 passwdcfg.adminlockout:0 passwdcfg.repeat:1 passwdcfg.sequence:1 passwdcfg.status:0 fips.mode:0 fips.selftests:0 ipfilter.0.name:default_ipv4 ipfilter.0.numofrules:12 ipfilter.0.rule.1:0,0x23,0,0,6,22 ipfilter.0.rule.10:0,0x23,0,0,17,123 ipfilter.0.rule.11:0,0x63,0,0,6,600,1023 ipfilter.0.rule.12:0,0x63,0,0,17,600,1023 ipfilter.0.rule.2:0,0x23,0,0,6,23 ipfilter.0.rule.3:0,0x23,0,0,6,897 ipfilter.0.rule.4:0,0x23,0,0,6,898 ipfilter.0.rule.5:0,0x23,0,0,6,111 ipfilter.0.rule.6:0,0x23,0,0,6,80 ipfilter.0.rule.7:0,0x23,0,0,6,443 ipfilter.0.rule.8:0,0x23,0,0,17,161 ipfilter.0.rule.9:0,0x23,0,0,17,111 ipfilter.0.state:3 ipfilter.0.type:0 ipfilter.1.name:default_ipv6 ipfilter.1.numofrules:12 ipfilter.1.rule.1:0,0x23,0,0,6,22 ipfilter.1.rule.10:0,0x23,0,0,17,123 ipfilter.1.rule.11:0,0x63,0,0,6,600,1023 ipfilter.1.rule.12:0,0x63,0,0,17,600,1023 ipfilter.1.rule.2:0,0x23,0,0,6,23 ipfilter.1.rule.3:0,0x23,0,0,6,897 ipfilter.1.rule.4:0,0x23,0,0,6,898 ipfilter.1.rule.5:0,0x23,0,0,6,111 ipfilter.1.rule.6:0,0x23,0,0,6,80 ipfilter.1.rule.7:0,0x23,0,0,6,443 ipfilter.1.rule.8:0,0x23,0,0,17,161 ipfilter.1.rule.9:0,0x23,0,0,17,111 ipfilter.1.state:3 ipfilter.1.type:1 (output truncated) To filter the content to display only the password configuration:...

  • Page 169

    configShow To display switch configuration data for FID 20: switch :admin> configshow -fid 20 [Configuration upload Information] Configuration Format = 2.0 date = Tue Oct 7 14:53:12 2008 FOS version = v6.2.0.0 Number of LS = 3 [Switch Configuration Begin : 0] SwitchName = Spirit_66 Fabric ID = 20 [Boot Parameters]...

  • Page 170: Configupload

    configUpload configUpload Uploads system configuration data to a file. SYNOPSIS configupload configupload [-all] [-p ftp | -ftp] ["host","user","path" [,"passwd"]] configupload [-all] [-p scp | -scp] ["host","user","path"] configupload [-all] [-p sftp | -sftp] ["host","user","path"] configupload [-all] [-force] [-local | USB |-U] ["file"] configupload [-fid FID | -chassis | -all | -switch] [-p ftp | -ftp]["host","user","path"...

  • Page 171

    configUpload The system configuration data is uploaded separately. It is grouped into chassis information and switch information. Each configuration type is managed separately and the behavior of configUpload depends on the environment in which the command is executed and which part of the system configuration you wish to upload.

  • Page 172

    configUpload -fid FID Uploads switch configuration data from a logical switch specified by its fabric ID. This parameter is valid only in a Virtual Fabric environment and requires chassis permissions. -chassis Uploads chassis configuration only. -all Uploads all system configuration data including chassis and switch configuration for all logical switches.

  • Page 173

    configUpload EXAMPLES To upload the switch configuration interactively from a switch that is not enabled for Virtual Fabrics: switch:admin> configupload Protocol (scp, ftp, sftp, local) [ftp]: sftp Server Name or IP Address [host]: 192.168.38.245 User Name [user]: jdoe File Name [<home dir>/config.txt]: Section (all|chassis|switch [all]): Password: ****** configUpload complete: All config parameters are uploaded...

  • Page 174: Configure

    configure configure Changes switch configuration settings. SYNOPSIS configure DESCRIPTION Use this command to change switch configuration settings. Configuration data is grouped into chassis information and switch information. Each configuration type is managed separately. For information on file format and specific parameters contained in each section, refer to the configUpload help page.

  • Page 175

    configure The following parameters can be modified with the configure command: Fabric Parameters Fabric settings control the overall behavior and operation of the fabric. Some of these settings, such as the domain, are assigned automatically and may differ from one switch to another in a given fabric. Other parameters, such as buffer-to-buffer credit or timeout values, can be modified to suit specific applications or operating environments but must be in agreement among all switches to allow formation of the fabric.

  • Page 176

    configure WWN Based persistent PID When enabled, this feature supports both dynamic and static WWN-based PID assignment. In dynamic PID binding, the first area assigned to a device when it logs in is bound to the device WWN and remains persistent through subsequent logins.

  • Page 177

    configure R_A_TOV The resource allocation time out value specified in milliseconds. This variable works with the variable E_D_TOV to determine switch actions when presented with an error condition. Allocated circuit resources with detected errors are not released until the time value has expired.

  • Page 178

    configure Per-frame Route Priority In addition to the eight virtual channels used in frame routing priority, support is also available for per-frame-based prioritization when this value is set. When Per-frame Route Priority is set to 1, the virtual channel ID is used in conjunction with a frame header to form the final virtual channel ID.

  • Page 179

    configure The values for virtual channel settings are as follows: Field Default Range ____________________________________ VC Priority 2 2 to 3 VC Priority 3 2 to 3 VC Priority 4 2 to 3 VC Priority 5 2 to 3 VC Priority 6 2 to 3 VC Priority 7 2 to 3...

  • Page 180

    configure Zoning Operation Parameters The following zoning operation parameter can be modified. Disable NodeName Zone Checking Specify 1 to disable using node WWN when specifying nodes in the zone database. Specify 0 to enable using node WWN when specifying nodes in the zone data.

  • Page 181

    configure Portlog Events Enable/Disable Settings These settings determine whether or not various types of port events are logged. Each event type displayed on the screen is enabled by default ("on"). When disabled, this event is not logged by the port log. Application Attributes A number of application attributes are configurable.

  • Page 182

    configure R_A_TOV: (4000..120000) [10000] E_D_TOV: (1000.. 5000) [2000] WAN_TOV: (0..30000) [0] MAX_HOPS: (7..19) [7] Data field size: (256..2112) [2112] Sequence Level Switching: (0..1) [0] Disable Device Probing: (0..1) [0] Suppress Class F Traffic: (0..1) [0] Per-frame Route Priority: (0..1) [0] Long Distance Fabric: (0..1) [0] BB credit: (1..27) [16] Disable FID Check (yes, y, no, n): [no]...

  • Page 183

    configure Arbitrated Loop parameters (yes, y, no, n): [no] System services (yes, y, no, n): [no] Portlog events enable (yes, y, no, n): [no] ssl attributes (yes, y, no, n): [no] rpcd attributes (yes, y, no, n): [no] cfgload attributes (yes, y, no, n): [no] webtools attributes (yes, y, no, n): [no] SEE ALSO configDefault, configShow, configureChassis, ipAddrSet, portCfgLongDistance, switchDisable,...

  • Page 184: Configurechassis

    configureChassis configureChassis Changes chassis-level system configuration settings. SYNOPSIS configurechassis DESCRIPTION Use this command to modify chassis-level system configuration settings. Configuration data is grouped into chassis information and switch information. Each configuration type is managed separately. Use the configure command to modify switch configuration parameters. Use the configureChassis command to modify the following chassis configuration parameters: •...

  • Page 185

    configureChassis System attributes The following system-related parameters are configurable on a Virtual Fabric-aware switch. system.blade.bladeFaultOnHwErrMsk If this field is set to a value other than 0, then any nonfatal HW ASIC data parity error causes the problem blade to be powered off. The valid range is 0x0 to 0xffff. The default value is 0x0.

  • Page 186

    configureChassis Path/Filename [<home dir>/config.txt]: Section (all|chassis|FID# [all]): Password: ***** configUpload complete: All selected config parameters are uploaded admin@hq1:ls /temp/config config.txt_Brocade5100_20110220_151606 admin@hq1: date Sun Feb 20 15:17:14 UTC 2011 SEE ALSO configDefault, configShow, chassisEnable, chassisDisable, configure, ipAddrSet, portCfgLongDistance, switchDisable, switchEnable, upTime Fabric OS Command Reference 53-1001764-01...

  • Page 187: Cryptocfg

    cryptoCfg cryptoCfg Performs encryption configuration and management functions. SYNOPSIS cryptocfg --help -nodecfg cryptocfg --help -groupcfg cryptocfg --help -hacluster cryptocfg --help -devicecfg cryptocfg --help -transcfg cryptocfg --help -decommission DESCRIPTION Use the cryptoCfg command to configure and manage the Brocade Encryption Switch and the FS8-18 encryption blade.

  • Page 188

    cryptoCfg cryptocfg --initnode cryptocfg --initEE [slot] cryptocfg --regEE [slot] cryptocfg --enableEE [slot] cryptocfg --disableEE [slot] cryptocfg --export -scp -dhchallenge vault_IP_address | -currentMK | -KACcert | -KACcsr | -CPcert host_IP host_username host_file_path cryptocfg --export -usb -dhchallenge vault_IP_address | -currentMK | -KACcert | -KACcsr | -CPcert dest_filename cryptocfg --import -scp local_name host_IP host_username host_file_path cryptocfg --import -usb dest_filename source_filename...

  • Page 189

    cryptoCfg • Group-wide policy configuration. • Zeroization of all critical security parameters on the local encryption switch or blade. • Certificate display and management. • Display of the local encryption engine status. • Rebalancing of disk and tape LUNS for optimized performance. •...

  • Page 190

    cryptoCfg Some of the certificates generated with this command may need to be exported so that they can be registered with external entities, such as the key vault or the group leader, for mutual authentication. Refer to the Fabric OS Encryption Administrator's Guide for details.

  • Page 191

    cryptoCfg --export Exports a certificate from the local encryption switch or blade to a specified external host or to a mounted USB device. This command is valid on all nodes. The files are exported from the predetermined directory that was generated during the node initialization phase.

  • Page 192

    cryptoCfg Files to be imported include member node CP certificates and key vault certificates. Use the cryptocfg --show -file -all command to view all imported files. The following operands are supported with the --importcommand: -scp Imports a specified certificate from an external host using the secure copy (SCP) protocol.

  • Page 193

    cryptoCfg --dereg -membernode Removes the registration for the specified member node. This command is valid only on the group leader. The node is identified by the switch WWN. member_node_WWN Specifies the member node by its switch WWN. This operand is required when removing a node registration.

  • Page 194

    cryptoCfg For the SKM, run this command only for the primary key vault. The login credential must match a valid username/password pair configured on the key vault. The same username/password must be configured on all the nodes of any given encryption group to prevent \ivity issues between the SKM and the switch.

  • Page 195

    cryptoCfg diag Runs diagnostic tests including retrieval, archival and synchronization of the tests in the key vault cluster. EXAMPLES To initialize a node and generate certificates (output shows what is generated and where it is stored): SecurityAdmin:switch> cryptocfg --initnode This will overwrite all identification and authentication data ARE YOU SURE (yes, y, no, n): [no] y Notify SPM of Node Cfg...

  • Page 196

    cryptoCfg To register a member node with the group leader: SecurityAdmin:switch> cryptocfg --reg -membernode 10:00:00:05:1e:39:14:00 enc_switch1_cert.pem 10.32.244.60 Operation succeeded. To deregister a member node: SecurityAdmin:switch> cryptocfg --dereg -membernode 10:00:00:05:1e:53:b6:80 Operation succeeded. To generate a trusted link establishment package (TEP): SecurityAdmin:switch> cryptocfg --dhchallenge 10.33.54.231 Operation succeeded.

  • Page 197

    cryptoCfg 10:00:00:05:1e:47:30:00/3 10.32.72.105 EE_STATE_ONLINE Reachable 10:00:00:05:1e:47:30:00/10 10.32.72.106 EE_STATE_ONLINE Reachable 10:00:00:05:1e:47:30:00/12 10.32.72.107 EE_STATE_ONLINE Reachable EE Slot: SP state: Online Primary Link KeyID: 85:1c:ca:dd:fc:8c:31:fc:87:21:26:d1:24:a0:92:be Secondary Link KeyID:98:4f:b4:98:c0:42:ab:6b:6d:65:ba:f2:fc:aa:b5:8a No HA cluster membership EE Attributes: Link IP Addr : 10.32.72.76 Link GW IP Addr : 10.32.64.1 Link Net Mask : 255.255.240.0...

  • Page 198

    cryptoCfg To display the key vault diagnostics configuration: switch:admin> cryptocfg --kvdiag -show Key vault diagnostic periodic tests Enabled Interval: 5 minute(s) Test Type: (diag) key retrieval/archival readiness Operation succeeded To change the interval at which the key vault diagnostics is run: switch:admin>...

  • Page 199

    cryptoCfg cryptocfg --show -mkexported_keyids key_id cryptocfg --show -groupcfg cryptocfg --show -groupmember -all | node_WWN cryptocfg --show -egstatus -cfg | -stat cryptocfg --sync -encgroup cryptocfg --sync -securitydb DESCRIPTION Use these cryptoCfg commands to create or delete an encryption group, to add or remove group member nodes, key vaults, and authentication cards, to enable or disable system cards, to enable quorum authentication and set the quorum size, to manage keys including key recovery from backup, to configure group-wide policies, and to sync the encryption group databases.

  • Page 200

    cryptoCfg :Key Vault/CA Certificate Validity: Yes or No Port for Key Vault Connection: numeric identifier Time of Day on Key Server: time stamp or N/A Server SDK Version: revision number or N/A • Diagnostic information for the encryption node (key vault client): Node KAC Certificate Validity: Yes (valid) or No (invalid) Time of Day on the Switch: time stamp Client SDK Version: SDK revision number...

  • Page 201

    cryptoCfg Current master key ID (or primary link key ID): Shows key ID or zero if not configured. Alternate master key (or secondary link key) state: Not configured, Saved, Created, Propagated, Valid, or Invalid. Alternate master key ID (or secondary link key ID): Shows key ID or zeroif not configured. •...

  • Page 202

    cryptoCfg --reg -keyvault Registers the specified key vault (primary or secondary) with the encryption engines of all nodes present in an encryption group. Upon successful registration, a connection to the key vault is automatically established. This command is valid only on the group leader. Registered certificates are distributed from the group leader to all member nodes in the encryption group.

  • Page 203

    cryptoCfg value Specifies the key vault type. The default is set to no value. This operand is required. Valid values for -keyvault include the following parameters: Specifies the NetApp LKM appliance (trusted key vault). Specifies the RSA Key Manager (RKM) (opaque key repository). Specifies one of the following: the HP Secure Key Manager (SKM) or the HP Enterprise Secure Key Manager (ESKM).

  • Page 204

    cryptoCfg --set -systemcard> enable | disable Enables or disables the system card usage policy. When the policy is enabled, a system card is required to be inserted in an encryption engine to enable encryption after a power-cycle event. When quorum authentication is enabled (Quorum Size is >...

  • Page 205

    cryptoCfg --exportmasterkey Exports the current master key encrypted in a key generated from a specified pass phrase. By default this command backs up the key to the attached key vaults, or optionally to a predetermined file on the switch. This command is valid only on the group leader.

  • Page 206

    cryptoCfg --show -groupmember Displays detailed information for all encryption group members or for a single member. This command is valid on all member nodes and on the group leader. The following required operands are mutually exclusive: -all Displays information on all nodes in the existing encryption group. node_WWN Displays information on a single specified node.

  • Page 207

    cryptoCfg To register a NetApp LKM appliance as the primary key vault "LKM1": SecurityAdmin:switch> cryptocfg --reg -regkeyvault LKM1 lkmcert.pem 10.33.54.231 primary decru-lkm-1 Register key vault status: Operation Succeeded. To set the key vault type to LKM: SecurityAdmin:switch> cryptocfg --set -keyvault LKM Set key vault status: Operation Succeeded.

  • Page 208

    cryptoCfg To recover the master key from the key vault to the current location: SecurityAdmin:switch> cryptocfg --recovermasterkey currentMK -keyID bd:ae:2d:0b:b9:1a:ad:18:0d:eb:fe:c9:67:ed:29:b0 Enter the passphrase: passphrase Recover master key status: Operation succeeded. To display the saved key IDs associated with a repeatedly exported master key SecurityAdmin:switch>...

  • Page 209

    cryptoCfg Time of Day on the Switch: Fri Jan 29 23:01:55.205779 GMT 2010 Client SDK Version: OpenKey Reference Lib 2.0.9 Client Username: Client Usergroup: Connection Timeout: 20 seconds Response Timeout: 20 seconds Connection Idle Timeout: Key Vault configuration and connectivity checks successful, ready for key operations.

  • Page 210

    cryptoCfg Certificate: GL_cpcert.pem Current Master Key State: Not configured Current Master KeyID: 00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00 Alternate Master Key State:Not configured Alternate Master KeyID:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00 EE Slot: 0 SP state: Operational; Need Valid KEK Current Master KeyID: 00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00 Alternate Master KeyID:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00 No HA cluster membership Node Name: 10:00:00:05:1e:39:14:00 State:...

  • Page 211

    cryptoCfg cryptocfg --replace [-haclustermember HA_cluster_name] current_node_WWN [slot] new_node_WWN [slot] cryptocfg --show -hacluster -all | HA_cluster_name DESCRIPTION Use these cryptoCfg commands to configure and manage High Availability (HA) clusters. An HA cluster consists of two encryption engines configured to host the CryptoTargets and to provide the active/standby failover and failback capabilities in a pair-wise relationship in a single fabric.

  • Page 212

    cryptoCfg node_WWN Specifies the WWN of the switch or chassis to which the encryption engine belongs. This operand is optional; if omitted, only the HA cluster name is defined. You may add EEs separately with the --add -haclustermember command. slot Specifies the encryption engine slot number on bladed systems.

  • Page 213

    cryptoCfg current_node_WWN [slot Specifies the WWN of the encryption engine to be replaced. This operand is required. On bladed systems, include the encryption engine slot number. new_node_WWN [slot] Specifies the WWN of the encryption engine that is to replace the current encryption engine.

  • Page 214

    cryptoCfg HA cluster name: HAC2 - 2 EE entries Status: Defined Slot Number Status 10:00:00:05:1e:53:4c:91 Online 10:00:00:05:1e:53:74:87 Online To replace an encryption engine in HA cluster "HAC2": SecurityAdmin:switch> cryptocfg --replace -haclustermember HAC2 10:00:00:05:1e:53:4c:91 10:00:00:05:1e:39:53:67 Replace HA cluster member status: Operation Succeeded. To remove HA cluster member 10:00:00:05:1e:53:74:87 from the HA cluster "HAC2": SecurityAdmin:switch>...

  • Page 215

    cryptoCfg cryptocfg --move -container crypto_target_container_name new_node_WWN [new_slot] cryptocfg --add -initiator crypto_target_container_name initiator_PWWN initiator_NWWN [[initiator_PWWN initiator_NWWN]...] cryptocfg --remove -initiator crypto_target_container_name initiator_PWWN [initiator_PWWN...] cryptocfg --add -LUN crypto_target_container_name LUN_Num | LUN_Num_Range initiator_PWWN initiator_NWWN [initiator_PWWN initiator_NWWN]...] [-lunstate encrypted | cleartext] [-keyID keyID] [-encryption_format native | DF_compatible] [-encrypt | -cleartext] [-enable_encexistingdata | -disable_encexistingdata] [-enablerekey time_period | -disable_rekey]...

  • Page 216

    cryptoCfg cryptocfg --resume_rekey crypto_target_container_name LUN_Num initiator_PWWN cryptocfg --discoverLUN crypto_target_container_name cryptocfg --show -container -all -cfg | -stat cryptocfg --show -container crypto_target_container_name -cfg | -stat cryptocfg --show -tapepool -all | -label pool_label | -num pool_num -cfg | -stat cryptocfg --show -LUN crypto_target_container_name LUN_Num initiator_PWWN -cfg | -stat cryptocfg --show -rekey -all cryptocfg --show -rekey crypto_target_container_name...

  • Page 217

    cryptoCfg CTC configuration uses a transaction model. Configuration changes must be committed before they take effect. Use the cryptocfg --commit command to commit the transaction. Refer to section "5. Transaction management" for more information. This command set supports the following tasks: •...

  • Page 218

    cryptoCfg Encrypt existing data: disabled or enabled Rekey: disabled or enabled Key life: the key life span (in days) Volume/Pool label: the label for the tape volume or tape pool Internal EE LUN state: Encrypted, Cleartext, or Disabled (Data state is cleartext but metadata exists on the LUN, or vice versa.) Encryption algorithm: AES256-ECB (DF_compatible), AES256-GCM (native) or None (cleartext)

  • Page 219

    cryptoCfg • Key life (in days); number of days until expiration • Rekey status: numeric value • Key expiration time • Rekey session number: numeric value • Percentage complete • Rekey state: Read or write Phase • Rekey role: primary, alternate •...

  • Page 220

    cryptoCfg Tape policy type: pool-based or LUN-based Key life: key lifespan in days Volume/pool label LUN state: Refer to the Fabric OS Encryption Administrator's Guide. Encryption algorithm: AES256 -XTS (disk), AES256-CCM (tape), or none Compression algorithm Key ID state: available or not available Key ID: numeric identifier if available New LUN: Yes or No Replication LUN type: Primary or Mirror...

  • Page 221

    cryptoCfg Volume/pool label: user-defined label Rekey status: numeric value If rekey- or tape sessions are in progress, the command shows the following information: • Number of rekey sessions in progress: numeric value • For each rekey session the display includes the following parameters: Rekey session number: numeric value Percent completion: numeric value Rekey state: Read or Write phase...

  • Page 222

    cryptoCfg • Number of rekey sessions in progress: numeric value • For each rekey session the display includes the following parameters: Rekey session number: numeric value Percent completion: numeric value Rekey state. Displays one of the following parameters:  Rekey Setup ...

  • Page 223

    cryptoCfg NOTES Encryption groups and HA clusters must be configured before performing any CryptoTarget container and Crypto LUN configurations. When adding a LUN to a CryptoTarget container, special attention should be paid to the input format. A LUN number can be entered either as a 16-bit (2 bytes) number in hex notation (for example, 0x07) or as a 64-bit (8 bytes) number in WWN format (for example, 00:07:00:00:00:00:00:00).

  • Page 224

    cryptoCfg This operand is optional. You may add initiators at the time when the CTC is created or any time thereafter with the --add -initiator command. The following operands are required when specifying an initiator: initiator_PWWN Specifies the initiator port WWN. initiator_NWWN Specifies the initiator node WWN.

  • Page 225

    cryptoCfg --add -initiator Adds one or more initiators to an existing CTC. An initiator that is added to a CTC facilitates discovering the LUNs of the target as exposed to these initiators. You must still add the initiators when you add the LUN to the CTC to enable access for these initiators.

  • Page 226

    cryptoCfg LUN policies are configured per HA or DEK cluster. For multi-path LUNs exposed through multiple target ports and thus configured on multiple CTCs on different EEs in an HA cluster or DEK cluster, the same LUN policies must be configured. Refer to the Fabric OS Administrator's Guide for more information.

  • Page 227

    cryptoCfg -newLUN Indicates that the LUN created does not contain any user data and will be part of a replication configuration. This operand is optional. The presence of this operand is incompatible with the -keyID, -key_lifespan, and -enable_rekey options. An RSA RKM must be configured and replication must be enabled (cryptocfg --set replication enabled) before invoking this command.

  • Page 228

    cryptoCfg • The -key_lifespan parameter cannot be modified for tape LUNs once it has been set. • Exercise caution when modifying policy parameters while tape sessions are in progress. For information on the impact of encryption policy changes while tape sessions are in progress, refer to the Fabric OS Encryption Administrator's Guide.

  • Page 229

    cryptoCfg This command is valid only on the group leader. The following operands are supported: -label pool_label | -num pool_num Specifies the tape pool volume label or alternately the tape pool ID. This is a user-defined identifier, which must be unique within the encryption group and should match the tape pool label or ID that is configured on the tape backup application.

  • Page 230

    cryptoCfg --manual_rekey Performs a manual rekeying of a specified LUN associated with a specified CTC. Manual rekeying is performed in both online and offline fashion depending on whether or not the host is online or host I/O is present. If any policy-based rekeying operation is currently in progress, this command aborts with a warning message.

  • Page 231

    cryptoCfg --show -container Displays all CTCs in the encryption group. This command is valid on all nodes. The following operands are supported: -all -cfg Displays the configuration for all containers in the encryption group. -all -stat Displays the runtime status for all containers hosted on the local node only. crypto_target_container_name Displays information for the specified CryptoTarget container.

  • Page 232

    cryptoCfg --show -rekey Displays information about rekey sessions in progress. This command is valid on all nodes. The following operands are mutually exclusive: -all Lists all rekey sessions in progress on the current node. crypto_target_container_name Lists all rekey sessions in progress for a specified CryptoTarget container. You may further specify either one of the following operands: LUN_Num Lists all rekey sessions in progress for a specific Crypto LUN of the specified...

  • Page 233

    cryptoCfg LUN_Num Specifies the number of the LUN whose metadata needs to be reread. initiator_PWWN Specifies the initiator port WWN for the specified LUN. --reclaimWWN Reclaims the WWNs of the specified member node or encryption engine. This command removes the WWNs from the specified entity. Once removed you can reallocate the WWNs.

  • Page 234

    cryptoCfg nscamshow for remote switches: Switch entry for 2 state rev owner known v611 0xfffc01 Device list: count 13 Type Pid COS PortName NodeName NL 0208d3;3;20:0c:00:06:2b:0f:72:6d;20:00:00:06:2b:0f:72:6d; FC4s: FCP PortSymb:[55]"LSI7404XP-LC BR A.1 03-01081-02D FW:01.03.06 Port 1" Fabric Port Name: 20:08:00:05:1e:34:e0:6b Permanent Port Name: 20:0c:00:06:2b:0f:72:6d Port Index: 8 Share Area: No Device Shared in Other AD: No...

  • Page 235

    cryptoCfg Number of host(s): Configuration status:committed Host: 10:00:00:00:c9:2b:c9:3a \ 20:00:00:00:c9:2b:c9:3a 20:02:00:05:1e:41:4e:1d \ 20:03:00:05:1e:41:4e:1d Number of LUN(s): Operation Succeeded Discover the LUNs seen by the initiators in the CryptoTarget container. FabricAdmin:switch> cryptocfg --discoverLUN my_disk_tgt Container name: my_disk_tgt Number of LUN(s): Host: 10:00:00:00:c9:2b:c9:3a LUN number: LUN serial number:...

  • Page 236

    cryptoCfg Rekey: disabled Internal EE LUN state: Encryption enabled Encryption algorithm: AES256-XTS Key ID state: Read write Key ID:3a:21:6a:bd:f2:37:d7:ea:6b:73:f6:19:72:89:c6:4f Key creation time: Sun Jun 1 20:21:32 2008 New LUN: Replication LUN type: Primary Operation Succeeded Display Crypto LUN configuration. FabricAdmin:switch> cryptocfg --show -LUN my_disk_tgt 0 10:00:00:00:c9:2b:c9:3a -cfg EE node: 10:00:00:05:1e:41:9a:7e...

  • Page 237

    cryptoCfg To display the tape pool configuration: FabricAdmin:switch> cryptocfg --show -container -all -cfg Encryption group name: brocade Number of Container(s): 2 Container name: pc21_stk10k Type: tape EE node: 10:00:00:05:1e:53:8a:28 EE slot: Target: 50:01:04:f0:00:b2:ea:6c \ 50:01:04:f0:00:b2:ea:6b 20:00:00:05:1e:53:8a:24 \ 20:01:00:05:1e:53:8a:24 Number of host(s): Configuration status: committed Host:...

  • Page 238

    cryptoCfg EE node: 10:00:00:05:1e:53:75:01 EE slot: Target: 21:00:00:04:cf:6e:58:2c \ 20:00:00:04:cf:6e:58:2c Target PID: 0107d5 20:28:00:05:1e:53:74:fd \ 20:29:00:05:1e:53:74:fd VT PID: 012805 Number of host(s): Number of rekey session(s):1 Host: 10:00:00:db:69:78:93:0e \ 20:00:00:db:69:78:93:0e Host PID: 000000 20:36:00:05:1e:53:74:fd \ 20:37:00:05:1e:53:74:fd VI PID: 012806 Number of LUN(s): LUN number: LUN type: disk...

  • Page 239

    cryptoCfg Rekey: enabled Key ID: not available Key life: 300 (days) Rekey status: Operation Succeeded To display all tape sessions in progress on the local node: FabricAdmin:switch> cryptocfg --show -tape_sessions -all Number of tape session(s): Container name: apps92 EE node: 10:00:00:05:1e:43:ee:00 EE slot: Target:...

  • Page 240

    cryptoCfg To reclaim all WWNs associated with a member node when no containers are present on the node: switch:admin> cryptocfg --reclaimWWN -membernode 10:00:00:05:33:13:7a:e8 Warning: WWN reclaim operation may result in momentary IO disruption. Make sure that the Membernodes are not hosting any container. ARE YOU SURE (yes, y, no, n): [no] y Operation succeeded.

  • Page 241

    cryptoCfg OPERANDS The cryptoCfg transaction management function has the following operands: --help transcfg Displays the synopsis for the transaction management function. --commit Commits the transaction. This command saves the defined configuration to nonvolatile storage. Changes are persistent across reboots and power cycles. This command overwrites existing configuration parameters and therefore prompts for confirmation.

  • Page 242

    cryptoCfg • Device decommissioning is supported only with the LKM and RKM key vaults. • Decommissioning of tape devices or snap drive volumes is currently no supported. • Decommissioning does not automatically delete the keys. You must manually delete the keys from the key vault to complete the operation.

  • Page 243

    cryptoCfg Display the key IDs to be deleted manually from the keyvault switch:admin> cryptocfg --show -decommissionedkeyids Please Delete these keyed from the vault: 76:a0:01:f2:34:6e:44:cc:35:e9:be:71:64:ca:5e:90 switch:admin> cryptocfg --show vendorspecifickeyid aa:8b:91:b0:35:6f:da:92:8a:72:b3:97:92:1b:ca:b4 uuid = b7e07a6a-db64-40c2-883a-0bc6c4e923e6 Manually delete the keys from the vault. This step requires accessing the Key Vault GUI and deleting the keys manually.

  • Page 244: Datatypeshow

    dataTypeShow dataTypeShow Displays sample data stream types used in some diagnostic commands. SYNOPSIS datatypeshow [-seed value] DESCRIPTION Use this command to display sample data stream types used in diagnostic commands. There are 25 different sample data types. The command displays an example of each data stream. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 245: Date

    date date Displays or sets the switch date and time. SYNOPSIS date ["newdate"] DESCRIPTION Use this command to display or set the date and time. All switches maintain current date and time in flash memory. Date and time are used for logging events. Normal switch operation does not depend on the date and time;...

  • Page 246

    date EXAMPLES To display the current date and time and then modify it: switch:admin> date Thu Mar 24 17:15:00 UTC 2011 switch:admin> date "03224182011" Thu Mar 24 18:20:26 UTC 2011 SEE ALSO errShow, ficonCupSet, ficonCupShow, portLogShow, tsClockServer, tsTimeZone, upTime Fabric OS Command Reference 53-1001764-01...

  • Page 247: Dbgshow

    dbgShow dbgShow Displays current values of debug and verbosity levels of the specified module. SYNOPSIS dbgshow [module_name] DESCRIPTION Use this command to display the current values of debug and verbosity levels of the specified module. If no module name is specified, this command displays a listing of all modules along with debug and verbosity levels.

  • Page 248: Defzone

    defZone defZone Sets or displays the default zone access mode. SYNOPSIS defzone [--noaccess | --allaccess | --show] DESCRIPTION Use this command to display or set the Default Zone access mode. Setting the Default Zone mode initializes a zoning transaction (if one is not already in progress), and create reserved zoning objects. A default zone controls device access when zoning is not enabled.

  • Page 249

    defZone A cfgSave, cfgEnable, or cfgDisable command must be performed subsequent to the use of this command to commit the changes and distribute them to the fabric. If a cfgSave is performed and the fabric is already in the No Access default zone state, a cfgDisable is sent to the fabric.

  • Page 250: Diagclearerror

    diagClearError diagClearError Clears the diagnostics failure status. SYNOPSIS diagclearerror [[--slot] slot] -all DESCRIPTION Use this command to clear the diagnostics failure status. When used without operands, this command clears all port failure flags. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 251: Diagdisablepost

    diagDisablePost diagDisablePost Disables the power-on self-test (POST). SYNOPSIS diagdisablepost DESCRIPTION Use this command to disable POST. A reboot is not required for this command to take effect. Use the diagPost command to display the current POST status, and use diagEnablePost to enable POST. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 252: Diagenablepost

    diagEnablePost diagEnablePost Enables the power-on self-test (POST). SYNOPSIS diagenablepost DESCRIPTION Use this command to enable POST. A reboot is not required for this command to take effect. POST includes two phases: POST Phase I mainly tests hardware and POST Phase II tests system functionality. Use the diagPost command to display the current POST status, and use diagDisablePost to disable POST.

  • Page 253: Diaghelp

    diagHelp diagHelp Displays diagnostic command information. SYNOPSIS diaghelp DESCRIPTION Use this command to display a short description of diagnostic commands. Use default operands when running diagnostics commands. Non-default settings require detailed knowledge of the underlying hardware and are intended for support personnel only. Contact support if you want to use these operands.

  • Page 254: Diagpost

    diagPost diagPost Displays the diagnostic power-on self-test (POST) configuration. SYNOPSIS diagpost DESCRIPTION Use this command to display the current POST configuration. Use diagEnablePost or diagDisablePost to modify the POST configuration. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 255: Diagretry

    diagRetry diagRetry Sets or displays diagnostic retry mode. SYNOPSIS diagretry [mode | -show] DESCRIPTION Use this command to enable retry mode if the mode value is nonzero and to disable the retry mode if the mode value is 0. The mode value is saved in nonvolatile memory until you change the mode. Changes made by this command do not require a reboot to take effect.

  • Page 256: Diagshow

    diagShow diagShow Displays diagnostics status. SYNOPSIS diagshow [--slot number] [-uports itemlist] [-bports itemlist] [-use_bports value] DESCRIPTION Use this command to display the diagnostics status for the specified list of blade or user ports. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 257: Distribute

    distribute distribute Distributes data to switches in a fabric. SYNOPSIS distribute -p policy_list -d switch_list DESCRIPTION Use this command to distribute data to a specified list of switches in the fabric. The distributed data must be from the list of currently supported policy sets: Switch Connection Control Policy Device Connection Control Policy Password Database and Password Configuration Policy...

  • Page 258

    distribute To distribute the Switch Connection Control Policy, Fabric Configuration Server Policy, and Password database to all domains in the fabric that support the distribute feature: switch:admin> distribute -p "SCC;FCS;PWD" -d "*" Wildcard domains are: 1 3 5 To distribute the FCS policy, and the Password database to all domains in the fabric that support the distribute feature: switch:admin>...

  • Page 259: Dlsreset

    dlsReset dlsReset Disables Dynamic Load Sharing (DLS). SYNOPSIS dlsreset DESCRIPTION Use this command to disable Dynamic Load Sharing. If DLS is turned off, load sharing calculations are used only to place new routes. Once placed, existing routes are never moved from one output E_Port to another, unless the original output E_Port is no longer a recognized path to the remote domain.

  • Page 260: Dlsset

    dlsSet dlsSet Enables Dynamic Load Sharing (DLS) without frame loss. SYNOPSIS dlsset dlsset --enable -lossless dlsset --disable -lossless dlsset --help DESCRIPTION Use this command to enable or disable Dynamic Load Sharing (DLS) in the event of a fabric change, to configure DLS without frame loss, and to display the DLS configuration.

  • Page 261

    dlsSet The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. OPERANDS --enable -lossless Enables the Lossless feature. Frame loss is reduced while the path is rerouted. If DLS is set on the switch, this command adds the Lossless feature to the existing DLS legacy mode.

  • Page 262

    dlsSet DLS configuration commands on a switch with a port-based policy: switch:admin> dlsshow DLS is set by default with current routing policy DLS is set with Lossless enabled switch:admin> dlsreset DLS is not set switch:admin> dlsshow DLS is not set switch:admin>...

  • Page 263: Dlsshow

    dlsShow dlsShow Displays the setting of the Dynamic Load Sharing (DLS) option. SYNOPSIS dlsshow DESCRIPTION Use this command to display information about Dynamic Load Sharing configuration settings on the switch. Depending on the configuration, the command output displays one of the following messages: •...

  • Page 264: Dnsconfig

    dnsConfig dnsConfig Sets, displays, or removes domain name service (DNS) parameters. SYNOPSIS dnsconfig DESCRIPTION Use this command to display, set, or remove the domain name service parameters. The domain name service parameters are the domain name and the name server IP address for primary and secondary name servers.

  • Page 265: Enclosureshow

    enclosureShow enclosureShow Displays attributes of the switch enclosure. SYNOPSIS enclosureshow attribute DESCRIPTION Use this command to display attributes of the switch enclosure, including the vendor-specific enclosure identifier and the identifier of the enclosure interface to which the switch is attached. This command applies to products that are embedded in a blade server or storage chassis.

  • Page 266

    enclosureShow connfuse Information about whether or not the switch has a fuse. EXAMPLES To display the identifier of the enclosure interface to which the switch is attached: switch:admin> enclosureShow slotid Bay 4 SEE ALSO chassisShow Fabric OS Command Reference 53-1001764-01...

  • Page 267: Errclear

    errClear errClear Clears all error log messages for all switch instances on this Control Processor (CP). SYNOPSIS errclear DESCRIPTION Use this command to clear all internal and external error log messages for all switch instances on the CP where the command is executed. For products with a single processor, all error log messages are cleared.

  • Page 268: Errdelimiterset

    errDelimiterSet errDelimiterSet Sets the error log start and end delimiters for messages sent to the console and syslog. SYNOPSIS errdelimiterset [-s "start_delimiter_string"] [-e "end_delimiter_string"] DESCRIPTION Use this command to set the error log start and end delimiters for log messages sent to the console and syslog.

  • Page 269: Errdump

    errDump errDump Displays the error log without pagination. SYNOPSIS errdump [-a | -r ] DESCRIPTION Use this command to dump external error log messages without any page breaks. When executed without operands, this command prints all error messages for the logical switch context in which the command is executed.

  • Page 270

    errDump EXAMPLES To display the error log for the chassis: switch:admin> errdump -a Fabric OS: v7.0.0 2010/12/17-22:29:17, [SEC-1203], 9036, CHASSIS, INFO,\ Spir_67, Login information : Login successful via \ TELNET/SSH/RSH. IP Addr: 10.106.7.62 2010/12/17-22:29:17, [ZONE-1022], 9037, CHASSIS, INFO, \ Spir_67, The effective configuration has changed to meh. 2010/12/17-22:29:17, [FABR-1001], 9041, CHASSIS, WARNING, \ Spir_67, port 0, incompatible Long distance mode.

  • Page 271: Errfilterset

    errFilterSet errFilterSet Sets a filter for an error log destination. SYNOPSIS errfilterset [-d destination][-v severity] DESCRIPTION Use this command to set a filter for an error log destination. A filter is set based on the severity level of the messages. When used without operands, this command displays the filters that are currently in configured.

  • Page 272: Errmoduleshow

    errModuleShow errModuleShow Displays all the defined error log modules. SYNOPSIS errmoduleshow DESCRIPTION Use this command to display a list of all defined error log modules. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 273: Errshow

    errShow errShow Displays the error log messages with pagination. SYNOPSIS errshow [-a | -r] DESCRIPTION Use this command to display external error log messages one at a time. When executed without operands, this command prints the error messages for the logical switch context in which the command is executed.

  • Page 274

    errShow EXAMPLES To display the error log for the chassis: switch:admin> errshow -a Fabric OS: v6.4.0 2010/08/25-10:10:41, [SEC-1203], 9036, CHASSIS, INFO, \ Spir_67, Login information : Login successful via \ TELNET/SSH/RSH. IP Addr: 10.106.7.62 [Type <CR> to continue, Q<CR> to stop: 2010/08/25-10:13:41, [ZONE-1022], 9037, CHASSIS, INFO,\ Spir_67, The effective configuration has changed to meh.

  • Page 275: Exit

    exit exit DESCRIPTION See logout. SEE ALSO None Fabric OS Command Reference 53-1001764-01...

  • Page 276: Fabretryshow

    fabRetryShow fabRetryShow Displays the retry count of the fabric commands. SYNOPSIS fabretryshow DESCRIPTION Use this command to display the retry count of the fabric commands. For each port, the command output displays counts for the following Switch Internal Link Service (SW_ILS) requests: Exchange Link Parameters Exchange Fabric Parameters HA_EFP...

  • Page 277

    fabRetryShow NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. OPERANDS None EXAMPLES To display the retry count of Fabric OS Commands: switch:user>...

  • Page 278: Fabriclog

    fabricLog fabricLog Displays (all users) or manipulates (admin) the fabric log. SYNOPSIS fabriclog -s | --show [dport] fabriclog -c | --clear [dport] fabriclog -d | --disable fabriclog -e | --enable fabriclog -r size | --resize size fabriclog -h | --help DESCRIPTION Use this command to display, clear, disable, enable, or resize the fabric log.

  • Page 279

    fabricLog The non-Principal switch is processing an RDI. The switch is in offline state. Port state. Port states include the following: The port is offline. The port is online. Exchange Link Parameters (ELP) Accept Frame (ACC) received. Link reset occurred on master or E_Port. Trunk Initiator: Exchange Mark Timestamp (EMT) sent.

  • Page 280

    fabricLog NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. OPERANDS This command has the following operands: -s | --show [dport] Displays the fabric log.

  • Page 281: Fabricname

    fabricName fabricName Configures the fabric name parameter. SYNOPSIS fabricname --set fabric_name fabricname --clear fabricname --show fabricname --help DESCRIPTION Use this command to configure a name for the fabric. With Virtual Fabrics it is not uncommon to have multiple fabrics in a single chassis. These logical fabrics are identified by their Fabric ID.

  • Page 282

    fabricName switch:user> fabricname --show Fabric Name: "my new fabric" To clear the fabric name: switch:user> fabricname --clear Fabric Name cleared! switch:user> fabricname --show Fabric Name is not configured SEE ALSO switchShow, fabricShow Fabric OS Command Reference 53-1001764-01...

  • Page 283: Fabricprincipal

    fabricPrincipal fabricPrincipal Sets the principal switch selection mode. SYNOPSIS fabricprincipal --help | -h fabricprincipal [--show | -q] fabricprincipal --enable [ -priority | -p priority] [-force | -f ] fabricprincipal --disable fabricprincipal [-f] mode DESCRIPTION Use this command to set principal switch selection mode for a switch and to set priorities for principal switch selection.

  • Page 284

    fabricPrincipal 0x01 Highest priority. This is a user-defined value 0x02 Switch was principal prior to sending or receiving a build fabric (BF) request. This value is generated by the switch to initiate a fabric reconfiguration. This value should not be assigned. 0x3 - 0xFE Priority value range.

  • Page 285

    fabricPrincipal To display the principal switch selection priority: switch:admin> fabricprincipal --show Principal Selection Mode: Enable Principal Switch Selection Priority: 0x10 SEE ALSO fabricShow Fabric OS Command Reference 53-1001764-01...

  • Page 286: Fabricshow

    fabricShow fabricShow Displays fabric membership information. SYNOPSIS fabricshow [-membership | -chassis] fabricshow -help DESCRIPTION Use this command to display information about switches in the fabric. If the switch is initializing or is disabled, the message "no fabric" is displayed. Running this command on an FCR or edge switch does not provide any router information; running this command on an edge switch with the -membership option does provide router information.

  • Page 287

    fabricShow NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. OPERANDS This command has the following operands: -membership Displays fabric membership information with additional details of the FC Router, if present in the fabric.

  • Page 288

    fabricShow To show additional details about the chassis: switch:admin> fabricshow -chassis Switch ID Name ENET IP Addr Chassis WWN Chassis Name --------------------------------------------------------------------- 4:fffc04 sw5100_126_128 10.38.17.126 10:00:00:05:1e:0e:eb:58 Brcd5100 5:fffc05 sw1500_127_128 10.38.17.127 10:00:00:05:1e:0e:eb:98 Brcd5100 The Fabric has 2 switches SEE ALSO fabricName, switchShow Fabric OS Command Reference 53-1001764-01...

  • Page 289: Fabstatsshow

    fabStatsShow fabStatsShow Displays fabric statistics. SYNOPSIS fabstatsshow DESCRIPTION Use this command to display statistics for the fabric. The following information is displayed: • Number of times a switch domain ID has been forcibly changed • Number of E_Port offline transitions •...

  • Page 290

    fabStatsShow NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. OPERANDS None EXAMPLES To display the fabric statistics: switch:admin>...

  • Page 291: Fandisable

    fanDisable fanDisable Disables a fan unit. SYNOPSIS fandisable unit DESCRIPTION Use this command to disable a nonfaulty fan unit by setting the RPM speed to 0. NOTES This command is not available on nonbladed systems except for the Brocade 5300. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 292: Fanenable

    fanEnable fanEnable Enables a fan unit. SYNOPSIS fanenable unit DESCRIPTION Use this command to set a previously disabled fan unit back to the default RPM speed. NOTES This command is not available on nonbladed systems except for the Brocade 5300. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 293: Fanshow

    fanShow fanShow Displays fan status and speed. SYNOPSIS fanshow DESCRIPTION Use this command to display the current status and speed of each fan in the system. Fan status is displayed as follows: Fan is functioning correctly. absent Fan is not present. below minimum Fan is present but rotating too slowly or stopped.

  • Page 294: Fapwwn

    faPwwn faPwwn Manages fabric-assigned port world wide names. SYNOPSIS fapwwn --enable -port [slot/]port[-port] fapwwn --enable -ag AG_WWN] -port port fapwwn --disable -port [slot/]port[-port] fapwwn --disable -ag AG_WWN -port port fapwwn --assign [-ag AG_WWN] -port [slot/]port [-v VPWWN] fapwwn --delete -port [slot/]port[-port] fapwwn --delete -ag AG_WWN [-port port] fapwwn --delete -v VWWN fapwwn --move -srcport source_port -dstport dest_port...

  • Page 295

    faPwwn A single port can be assigned up to two WWNs, one assigned automatically and one assigned by the user. Only one FA-PWWN can be active at any given time. The user-assigned FA-PWWN takes precedence over the automatically assigned FA-PWWN. This means, the switch will bind the user-assigned FA-PWWN to the port if both a user-assigned and an automatically assigned FA-PWWN are available.

  • Page 296

    faPwwn The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. OPERANDS this command has the following operands: --enable Enables the FA-PWWN feature on the specified switch ports or AG ports.

  • Page 297

    faPwwn Specifies all ports on the logical switch. This operand is valid only with the --show option. --move Moves an active FA-PWWN from a source to the specified destination port. Use this command to move a server across switch ports. If the source port has both a user-assigned and an automatically assigned FA-PWWN, the user-assigned FA-PWWN will be moved to the destination port as a user-assigned FA-PWWN and replace any automatically assigned FA-PWWN that may be active on that...

  • Page 298

    faPwwn To assign an user-assigned FA-PWWN to an AG port: fapwwn --assign -ag 12:34:56:78:90:12:23:45 -port 0 \ -v 11:22:33:44:55:66:77:88 To delete the active FA-PWWN of a switch port: fapwwn --delete -port 10 To delete the active FA-PWWN of an AG port: fapwwn --delete -ag 12:34:56:78:90:12:34:56 -port 10 To display the active FA-PWWN for a single FC port (the real device PWWN is hidden): fapwwn --show -port 10...

  • Page 299

    faPwwn 11:22:33:44:55:66:77:88 11403 AG/User 52:00:10:00:00:0f:50:32 2:00:10:00:00:0f:50:33 11404 AG/Auto 52:00:10:00:00:0f:50:38 AG/Auto (output split) To display the active FA-PWWNs of all ports associated with a single AG (in the following example, one VPWWN is not unassigned): fapwwn --show -ag 10:00:00:05:1e:d7:3d:dc ----------------------------------------------------------- AG Port Port Device Port WWN -----------------------------------------------------------...

  • Page 300: Fastboot

    fastBoot fastBoot Reboots the Control Processor (CP), bypassing the Power-On Self-Test (POST). SYNOPSIS fastboot DESCRIPTION Use this command to perform a "cold reboot" (power off/restart) of the CP bypassing POST when the system comes back up. Bypassing POST can reduce boot time significantly. If POST was previously disabled using the diagDisablePost command, then fastBoot is the same as reBoot.

  • Page 301

    fastBoot To reboot a DCX without executing POST on startup (in the example, HA is enabled): switch:admin> fastboot Warning: This command is being run on a control processor (CP) based system and will cause the active CP to reboot. Are you sure you want to reboot the active CP [y/n]? y Broadcast message from root (pts/0) Sun Feb 28 19:49:45 2010...

  • Page 302: Fcipchiptest

    fcipChipTest fcipChipTest Tests functionality of components in the FCIP complex. SYNOPSIS fcipchiptest [--slot slot] [-testtype type] [-unit number] DESCRIPTION Use this command to verify the internal registers and memory of the network processor, FCIP FPGA, compression processor, and GigPHY. NOTES This command is supported only on the Brocade FR4-18i.

  • Page 303

    fcipChipTest CHIP_TEST_IMAGE_VER_ERR CHIP_TEST_TIMEOUT_ERR CHIP_TEST_HEARBEAT_ERR CHIP_TEST_INVALID_RESULT EXAMPLES To run all tests on slot 7 and GbE port 1: switch:admin> fcipchiptest --slot 7 -unit 1 -testtype 0 Running fcipchiptest ....Test Complete: fcipchiptest Pass 1 of 1 Duration 0 hr, 1 min & 15 sec (0:1:15:351). passed.

  • Page 304: Fciphelp

    fcipHelp fcipHelp Displays FCIP command information. SYNOPSIS fciphelp DESCRIPTION Use this command to display a listing of Fibre Channel over IP (FCIP) commands with short descriptions for each command. FCIP commands require an FCIP license. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 305: Fcipledtest

    fcipLedTest fcipLedTest Exercises the GbE port LEDS on the Brocade 7800 and FX8-24. SYNOPSIS fcipledtest [slot | all] DESCRIPTION Use this command to exercise the GbE port LEDs on the Brocade 7800 and FX8-24. This test cycles through the port LEDs by lighting GREEN and then flashing GREEN on all ports for 3 seconds. As the test continues the ports turn AMBER and then flashing AMBER for 3 seconds.

  • Page 306: Fcippathtest

    fcipPathTest fcipPathTest Tests the data path of the FCIP complex. SYNOPSIS fcippathtest [--slot slot] [-lb_mode mode] [-nframes count] fcippathtest [--slot slot] [-unit number] [-path mode] [-nframes count] [-length data_length] [-compress mode] DESCRIPTION Use this command to verify the data paths in the FCIP complex. All data path modes run tests by comparing Fibre Channel frames or data packets transmitted from and received by the network processor due to the designated loopback.

  • Page 307

    fcipPathTest External (SERDES) loopback Backend bypass and port loopback -path mode Specifies the loopback mode for the test on the Brocade FR4-18i only. By default, fcipPathTest uses the PHY and central ASIC loopback modes. You can specify one of the following alternate loopback modes: SFP loopback PHY loopback FCIP FPGA GMAC loopback...

  • Page 308

    fcipPathTest EXAMPLES To run the test on slot 2 with PHY loopback sending 10 frames: switch:admin> fcippathtest --slot 2 -path 2 -nframes 10 Running fcippathtest ....Test Complete: fcippathtest Pass 10 of 10 Duration 0 hr, 1 min & 50 sec (0:1:50:942). passed.

  • Page 309: Fcoe

    FCoE FCoE Manages and displays FCoE configuration. SYNOPSIS fcoe --cfgshow [[slot/]port] fcoe --portcfg [[slot/]port] ve_port | vf_port fcoe --disable [slot/]port fcoe --enable [slot/]port fcoe --loginshow [[slot/]port] fcoe --fcmapset -vlan vid fcmapid fcoe --fcmapunset -vlan vid fcoe --fipcfg -advintvl intvl fcoe --fipcfgshow fcoe --resetlogin [-teport [slot/]port | -device wwn] fcoe --help DESCRIPTION...

  • Page 310

    FCoE --enable Enables the specified FCoE port. --loginshow Displays information about the devices logged in to the specified FCoE port. --fcmapset Configures the FCMAP values for Fabric Provided MAC Addresses (FPMA) for the specified VLANs. -vlan vid Specifies the VLAN for which to set the FCMAP. fcmapid Specifies the FCMAP to be set.

  • Page 311

    FCoE (Trunk port, master is Port 850200 Online E-Port (Trunk port, master is Port 850300 Online E-Port (Trunk port, master is Port 850400 Online E-Port (Trunk port, master is Port 850500 Online E-Port (Trunk port, master is Port 850600 Online E-Port (Trunk port, master is Port 850700...

  • Page 312

    FCoE 18 ENABLED 20:12:00:05:1e:76:60:80 0 FCoE VF-Port 00:05:1e:76:60:8a 128 19 ENABLED 20:13:00:05:1e:76:60:80 0 FCoE VF-Port 00:05:1e:76:60:8b 128 20 ENABLED 20:14:00:05:1e:76:60:80 0 FCoE VF-Port 00:05:1e:76:60:8c 128 21 ENABLED 20:15:00:05:1e:76:60:80 0 FCoE VF-Port 00:05:1e:76:60:8d 128 (output truncated) To display FIP and FCMAP configurations on the Brocade 8000: switch:admin>...

  • Page 313: Fcoelogincfg

    fcoeLoginCfg fcoeLoginCfg Manages or displays the FCoE login configuration. SYNOPSIS fcoelogincfg --show [-switch swwn | -logingroup lgname] [-saved] | [-mergestatus] fcoelogincfg --save fcoelogincfg --transshow fcoelogincfg --transabort fcoelogincfg --purge -conflicting [-nonexisting] fcoelogincfg --purge -nonexisting [-conflicting] fcoelogincfg --enable fcoelogincfg --disable fcoelogincfg --help DESCRIPTION Use this command to save, abort, or display the current FCoE login configuration, including ongoing transactions and the effective (saved) configuration.

  • Page 314

    fcoeLoginCfg --transshow Displays the current configuration transaction in progress fabric-wide. --transabort Aborts the FCoE login configuration transaction currently in progress. --purge Purges the specified entries from the effective configuration. Specify one or both of the following operands: -conflicting Purges all conflicting login groups and conflicting VN_Port mappings from the effective configuration.

  • Page 315

    fcoeLoginCfg To perform a clean-up of the effective configuration: switch:admin> fcoelogincfg --purge -conflicting -nonexisting switch:admin> To disable the FCoE login configuration management on the switch: switch:admin> fcoelogincfg --disable switch:admin> fcoelogincfg --show Login management is disabled. Effective Configuration *********************** Login management is disabled. SEE ALSO fcoeLoginGroup Fabric OS Command Reference...

  • Page 316: Fcoelogingroup

    fcoeLoginGroup fcoeLoginGroup Creates and manages FCoE login group configuration. SYNOPSIS fcoelogingroup --create lgname -self | -switch swwn [-allowall | member[;member] ...] fcoelogingroup --delete lgname fcoelogingroup --add lgname member[;member] ... fcoelogingroup --remove lgname wwn fcoelogingroup --rename lgname newlgname fcoelogingroup --help DESCRIPTION Use this command to create or modify the FCoE login management configuration fabric-wide.

  • Page 317

    fcoeLoginGroup lgname Specifies the name of the login group. --add Adds VN_Port devices to the login group. lgname Specifies the name of the login group to which VN_Port devices are to be added. member Identifies the WWN of the VN_Port. The WWN must be specified in hex as xx.xx.xx.xx.xx.xx.xx.xx.

  • Page 318: Fcping

    fcPing fcPing Sends a Fibre Channel Extended Link Service (ELS) Echo request to a pair of ports or to a single destination, or executes a SuperPing. SYNOPSIS fcping [--number frames] [--length size] [--interval wait] [--pattern pattern] [--bypasszone] [--quiet] [source] destination fcping --allpaths [-printisl] [-maxtries M]...

  • Page 319

    fcPing NOTES The ELS Echo may not be supported on all devices. In such cases, the response could be either an ELS reject or a request timeout. By default, fcPing sends five ELS Echo requests to each port. When a device does not respond to the ELS Echo request, further debugging may be needed to determine, whether the device does not support ELS Echo, or whether the request is rejected for some other reason.

  • Page 320

    fcPing --quiet Suppresses the diagnostic output. Only zoning information, if applicable, and the summary line are displayed. The following operands are valid only when fcPing is executed to perform a SuperPing: --allpaths [args] destination Executes a SuperPing that covers all available paths to the specified destination. The number of actual paths covered depends on two other parameters that you can optionally specify.

  • Page 321

    fcPing Pinging 21:00:00:20:37:25:ad:05 [0x211e8] with 12 bytes of data: Request rejected Request rejected Request rejected Request rejected Request rejected 5 frames sent, 0 frames received, 5 frames rejected, 0 frames timeout Round-trip min/avg/max = 0/0/0 usec To display one device that accepts the request and another device that does not respond to the request: switch:admin>...

  • Page 322

    fcPing Permanent Port Name: 20:07:00:05:1e:35:10:7f Port Index: 5 Share Area: No Device Shared in Other AD: No Redirect: No Partial: NO N 370501; 3;10:00:00:00:c9:3f:7c:b8;20:00:00:00:c9:3f:7c:b8; na FC4s: FCP NodeSymb: [44] "Emulex LP1050 FV1.81A1 DV5-5.20A9 DELL1750-3" Fabric Port Name: 20:05:00:05:1e:34:01:f5 Permanent Port Name: 20:07:00:05:1e:35:10:7f Port Index: 5 Share Area: No Device Shared in Other AD: No...

  • Page 323

    fcPing Successfully completed superping for all paths SWITCH3--> SWITCH4 STATUS --------------------------------------------------------- (2/7,2/EMB)[2] (30/EMB,30/8)[128] (40/9, 40/EMB)[128] SUCCESS Successfully completed superping for all paths To execute a SuperPing and print statistical coverage of each ISL and internal port along the potential paths (in the example, a few errors are recorded on the ISLs 3/205->2/25, 3/204->2/27, 2/42->101/3, and 2/1->101/8, but the internal port analysis shows that errors are recorded on the internal port 0/284 in domain 2, which is the potential faulty link): switch:admin>...

  • Page 324

    fcPing To execute a superPing with a coverage count of 1000 and a maxtries value of 5000 (in the example, the ISL (3/204->204/27), could not be covered 1000 times): switch:admin> fcping --allpaths -covcount 1000 -maxtries 5000 -printisl 165 Pinging(size:12 bytes) destination domain 165 through all paths PATH SWITCH1-->...

  • Page 325: Fcplogclear

    fcpLogClear fcpLogClear Clears the FCPD debug information log. SYNOPSIS fcplogclear DESCRIPTION Use this command to clear the debug information logged by the Fibre Channel Protocol daemon (FCPD). NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 326: Fcplogdisable

    fcpLogDisable fcpLogDisable Disables the FCPD debug information log. SYNOPSIS fcplogdisable DESCRIPTION Use this command to disable the logging of debug information by the Fibre Channel Protocol daemon (FCPD). NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 327: Fcplogenable

    fcpLogEnable fcpLogEnable Enables the FCPD debug information log. SYNOPSIS fcplogenable DESCRIPTION Use this command to enable Fibre Channel Protocol daemon (FCPD) logging. Debug information logging is enabled by default. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 328: Fcplogshow

    fcpLogShow fcpLogShow Displays the FCPD debug information log. SYNOPSIS fcplogshow DESCRIPTION Use this command to display the debug information logged at various stages during the Fibre Channel Protocol daemon (FCPD) device probing. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 329: Fcpprobeshow

    fcpProbeShow fcpProbeShow Displays the Fibre Channel Protocol (FCP) probe information. SYNOPSIS fcpprobeshow [slot/]port DESCRIPTION Use this command to display the Fibre Channel Protocol daemon (FCPD) device probing information for the devices attached to the specified F_Port or FL_Port. This information includes the number of successful logins and SCSI INQUIRY commands sent over this port and a list of the attached devices.

  • Page 330: Fcprlsshow

    fcpRlsShow fcpRlsShow Displays the Fibre Channel Protocol (FCP) Read Link Status (RLS) information. SYNOPSIS fcprlsshow [slot/]port DESCRIPTION Use this command to display the FCP RLS information for an F_Port or FL_Port. This information describes the number of loss-of-signal, loss-of-sync, CRC errors, and other failure events detected on the specified port.

  • Page 331: Fcrbcastconfig

    fcrBcastConfig fcrBcastConfig Displays or sets the broadcast frame forwarding option. SYNOPSIS fcrbcastconfig --show fcrbcastconfig --enable -f fabric_id fcrbcastconfig --disable -f fabric_id fcrbcastconfig --help DESCRIPTION Use this command to enable or disable the broadcast frame option or to display the current configuration. If no operands are specified, this command displays the usage.

  • Page 332

    fcrBcastConfig To display the new configuration: switch:admin> fcrbcastconfig --show Broadcast configuration is enabled for FID: 2 128 SEE ALSO bcastShow, portRouteShow Fabric OS Command Reference 53-1001764-01...

  • Page 333: Fcrchiptest

    fcrChipTest fcrChipTest Tests the functionality of FC Router FPGA. SYNOPSIS fcrchiptest [--slot slot] [-unit number] [-testtype type] DESCRIPTION Use this command to test the FC Router Field-programmable gate array (FPGA). This test verifies that all SRAM and register data bits in each ASIC can be independently written and read successfully. The method used is to write a walking 1 pattern to each location.

  • Page 334

    fcrChipTest All FC Router FPGAs DIAGNOSTICS When a failure is detected, the test might report one or more of the following: DMA_ALLOC_FAIL DMA_READ_ABORT DMA_READ_TIMEOUT CHIP_INIT_TIMEOUT BIST_TIMEOUT BIST_FAIL EXAMPLES To run all tests on slot 7 and FC Router FPGA 1: switch:admin>...

  • Page 335: Fcrconfigure

    fcrConfigure fcrConfigure Sets FC Router configuration parameters. SYNOPSIS fcrconfigure DESCRIPTION Use this command to configure FC Router parameters. This is an interactive command. Before you can execute this command, you must disable FC routing by using the fosConfig command and disable the switch with the switchDisable command. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 336: Fcredgeshow

    fcrEdgeshow fcrEdgeshow Displays the FIDs of all configured EX_Ports. SYNOPSIS fcredgeshow fcredgeshow [-fid FabricID] fcredgeshow --help DESCRIPTION Use this command without operand to display information about all Fabric IDs (FIDs) that have been created on the chassis and are assigned to EX_Ports. When a FID is specified, fcredgeshow displays information for all EX_Ports configured with the specified FID.

  • Page 337

    fcrEdgeshow To display the EX_Ports configured with a specified FID: switch:admin> fcredgeshow -fid 25 FID EX-port E-port Neighbor Switch (PWWN, SWWN ) ----------------------------------------------------------------- 20:f4:00:05:1e:38:a4:cb 10:00:00:05:1e:38:a4:cb To display a FID for which no EX_Ports are configured: switch:admin> fcredgeshow -fid 29 No EX-ports with FID 29 SEE ALSO fcrPhyDevShow, fcrProxyDevShow, fcrRouteShow, lsanZoneShow, switchShow, fcrFabricShow...

  • Page 338: Fcrfabricshow

    fcrFabricShow fcrFabricShow Displays the FC Routers on a backbone fabric. SYNOPSIS fcrfabricshow DESCRIPTION Use this command to display information about FC Routers that exist in an FC Router backbone fabric. The existing syntax is maintained for IPv6 support. When IPv6 addresses are not configured, the output of fcrFabricShow displays the IPv4 format.

  • Page 339

    fcrFabricShow EX_Port FID Neighbor Switch Info (enet IP, WWN, name) ------------------------------------------------------- 10.33.35.80 10:00:00:05:1e:38:01:e7 "B10_3" 10.33.35.80 10:00:00:05:1e:38:01:e7 "B10_3" FC Router WWN: 10:00:00:05:1e:39:51:67, Dom ID: 5, Info: 10.33.36.96, "Scimitar" EX_Port FID Neighbor Switch Info (enet IP, WWN, name) -------------------------------------------------------- 10.33.35.80 10:00:00:05:1e:38:01:e7 "B10_3"* SEE ALSO fcrPhyDevShow, fcrProxyDevShow, fcrRouteShow, lsanZoneShow, switchShow...

  • Page 340: Fcrlsan

    fcrlSan fcrlSan Configures and displays LSAN policies. SYNOPSIS fcrlsan fcrlsan --add -enforce tag | -speed tag fcrlsan --remove -enforce tag | -speed tag fcrlsan --show -enforce | -speed | all fcrlsan --help DESCRIPTION Use this command to add or remove LSAN tags, or to display existing tags in the configuration. LSAN tagging optimizes an FC Router's behavior based on a specified subset of LSANS.

  • Page 341

    fcrlSan --show Displays the specified tag from the LSAN tag configuration. --help Displays the command usage. -enforce tag Accepts only the LSANs from the edge fabric that matches the specified tag string into the local FCR database. A valid tag is a string of a maximum of eight characters.

  • Page 342: Fcrlsancount

    fcrLsanCount fcrLsanCount Displays or sets the maximum LSAN count. SYNOPSIS fcrlsancount [max_lsan_count] DESCRIPTION Use this command to set or display the maximum number of LSAN zones that can be configured on the edge fabric. By default, the maximum LSAN count is set to 3000, which is also the minimum. This command allows you to create up to 5000 LSANs on your edge fabric, if needed to support additional devices.

  • Page 343: Fcrlsanmatrix

    fcrLsanMatrix fcrLsanMatrix Creates, edits and displays LSAN fabric or FCR matrix information, which binds the LSAN Zone and device database information to specified edge fabric IDs or FCRs. SYNOPSIS fcrlsanmatrix fcrlsanmatrix --add -lsan FID FID | -fcr wwn wwn fcrlsanmatrix --remove -lsan FID FID | -fcr wwn wwn fcrlsanmatrix --apply -lsan | -fcr | -all fcrlsanmatrix --cancel -lsan | -fcr | -all fcrlsanmatrix --display -lsan | -fcr | -all...

  • Page 344

    fcrLsanMatrix • Display the static and default/dynamic binding of the backbone to show which edge fabrics or FCRs can access each other. • Verify that the information in the cache is valid and does not disrupt existing import/export devices. • Run this command with the quickmode option to derive the LSAN Zone matrix from the current import/export database.

  • Page 345

    fcrLsanMatrix To zero out database execute the following commands: fcrlsanmatrix --add -lsan 0 0 fcrlsanmatrix --add -fcr 00:00:00:00:00:00:00:00 00:00:00:00:00:00:00:00 fcrlsanmatrix --apply -all • In a dual backbone configuration, execute fcrlsanmatrix --fabricview on the FCR switches to confirm that the shared edge fabric FIDs have the same access in both backbones. •...

  • Page 346

    fcrLsanMatrix To view the persistent changes: switch:admin> fcrlsanmatrix -lsan LSAN MATRIX is activated Fabric ID 1 Fabric ID 2 -------------------------------------- To view the LSAN Zone static and default/dynamic binding in the backbone where online fabrics are: 1, 2, 4, 5, 7, 8, 10: switch:admin>...

  • Page 347

    fcrLsanMatrix To view all the static and the default/dynamic fabric binding in the backbone: switch:admin> fcrlsanmatrix --fabricview -lsan LSAN MATRIX is activated Fabric ID 1 Fabric ID 2 -------------------------------------- Default LSAN Matrix: 57 91 SEE ALSO fcrFabricShow, lsanZoneShow, fcrPhyDevShow, fcrProxyDevShow, fcrRouteShow, switchShow Fabric OS Command Reference 53-1001764-01...

  • Page 348: Fcrpathtest

    fcrPathTest fcrPathTest Tests the data path connection between the FC Router FPGA and the central ASIC. SYNOPSIS fcrpathtest [--slot slot] [-unit number] [-path mode] [-nframes count] DESCRIPTION Use this command to verify the data path connecting the FC Router field-programmable gate array (FPGA) and the central ASIC by sending frames from the FC Router FPGA port N transmitter, and looping the frames back into the same port's receiver.

  • Page 349

    fcrPathTest OPERANDS This command has the following operands: --slot slot Specifies the slot number on which the diagnostic operates. The default is 0 and operates on fixed-port-count products. -unit number Specifies the FC Router FPGA to test. By default, all FC Router FPGAs in the specified slot are tested.

  • Page 350

    fcrPathTest DIAG-TIMEOUT The port failed to receive back a frame that was sent out. This can be caused by a faulty SFP or indicate deeper problems in the main board or ASIC. Check for a faulty SFP. Replace the SFP if necessary. DIAG-XMIT The specified port failed to transmit frames.

  • Page 351: Fcrphydevshow

    fcrPhyDevShow fcrPhyDevShow Displays the FC Router physical device information. SYNOPSIS fcrphydevshow [-a][-f FID][-w wwn][-c][-d] DESCRIPTION Use this command to display the physical (real) devices that are configured to be exported to other fabrics. A device is considered to be configured to be exported to another fabric if it is a member of an LSAN zone.

  • Page 352

    fcrPhyDevShow local failure the number of times the device login failed because of missing LSAN zones within the device fabric. remote failure the number of times the device login failed due to missing LSAN zones within the remote fabric. EXAMPLES To display the physical devices relevant to an FC Router: fcr:admin>...

  • Page 353: Fcrproxyconfig

    fcrProxyConfig fcrProxyConfig Displays or configures proxy devices presented by an FC Router. SYNOPSIS fcrproxyconfig [-s importedFID devWWN slot] [-r importedFID devWWN] DESCRIPTION Use this command to display or set the persistent configuration of proxy devices presented by the local FC Router. When used without operand, this command displays the persistent proxy device configuration;...

  • Page 354

    fcrProxyConfig through 7FH). The address of the proxy device is derived from the PID format (for example, native, core, or extended edge) and the proxy device slot. If no proxy device WWN is stored in any slot for all edge fabrics, the following message is displayed "All slots empty."...

  • Page 355: Fcrproxydevshow

    fcrProxyDevShow fcrProxyDevShow Displays FC Router proxy device information. SYNOPSIS fcrproxydevshow [-a][-f fabricid][-w wwn] DESCRIPTION Use this command to display the proxy devices presented by FC Router EX_Ports and information about the proxy devices. A proxy device is a virtual device presented in to a fabric by an FC Router. A proxy device represents a real device on another fabric.

  • Page 356

    fcrProxyDevShow -a -f fabricid Display the proxy devices in the specified fabric for all FC Routers in the same backbone fabric whether or not they are relevant to this FC Router. -f fabricid Display the proxy devices in the specified fabric that are relevant to this FC Router.

  • Page 357: Fcrresourceshow

    fcrResourceShow fcrResourceShow Displays FC Router physical resource usage. SYNOPSIS fcrresourceshow DESCRIPTION Use this command to display the FC Router-available resources. The maximum number allowed versus the currently used is displayed for various resources. The command output includes: LSAN Zones The maximum versus the currently used LSAN zones. LSAN Devices The maximum versus the currently used LSAN device database entries.

  • Page 358

    fcrResourceShow OPERANDS None EXAMPLES To display the resource usage for the local FC Router: switch:admin> fcrresourceshow Daemon Limits: Max Allowed Currently Used ---------------------------- LSAN Zones: 3000 LSAN Devices: 10000 1208 Proxy Device Slots: 10000 WWN Pool Size Allocated ---------------------------- Phantom Node WWN: 8192 3790 Phantom Port WWN:...

  • Page 359: Fcrrouterportcost

    fcrRouterPortCost fcrRouterPortCost Displays or sets an FC Router port cost. SYNOPSIS fcrrouterportcost [[slot/]port] [cost] DESCRIPTION Use this command to set or display the cost of the FC Router ports. You can set the cost of the link to one of two fixed values: 1000 or 10000. The option 0 sets the cost of the link to the default value based on link type (EX/VEX).

  • Page 360

    fcrRouterPortCost To display the cost on an EX_Port: switch:admin> fcrrouterportcost 7/10 0 switch:admin> fcrrouterportcost 7/10 Port Cost ------------------------ 7/10 1000 To set the cost of an EX_Port and display the result: switch:admin> fcrrouterportcost 7/10 10000 switch:admin> fcrrouterportcost 7/10 Port Cost ------------------------ 7/10 10000...

  • Page 361: Fcrrouteshow

    fcrRouteShow fcrRouteShow Displays FC Router route information. SYNOPSIS fcrrouteshow DESCRIPTION Use this command to display routes through the FC Router backbone fabric to accessible destination fabrics. An FC Router backbone fabric is the fabric that contains the E_Ports of this platform and routes inter-fabric traffic between imported fabrics, creating a meta-SAN.

  • Page 362: Fcrxlateconfig

    fcrXlateConfig fcrXlateConfig Configures a translate (xlate) domain's domain ID and state of persistence for both the EX_Port-attached fabric and the backbone fabric. SYNOPSIS fcrxlateconfig fcrxlateconfig importedFID exportedFID preferredDomainID fcrxlateconfig --remove | -r importedFID exportedFID fcrxlateconfig --enable persistxd fcrxlateconfig --disable persistxd fcrxlateconfig --show stalexd importedFID fcrxlateconfig --delete stalexd importedFID staleXlateDomainID fcrxlateconfig --help...

  • Page 363

    fcrXlateConfig NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. Information displayed is not related to the entire backbone. The FC Router displays only connections to an edge fabric for which there are translate domain IDs.

  • Page 364

    fcrXlateConfig --show stalexd [importedFID] Displays stale translate domains associated with the specified Fabric ID (1-128). A translate domain becomes stale when the remote edge fabric for which this translate domain was created in the specified edge fabric becomes unreachable. When issued without specifying an imported FID, this command lists all stale translate domains in all edge fabrics connected to the FCR.

  • Page 365: Fddcfg

    fddCfg fddCfg Manages the fabric data distribution configuration parameters. SYNOPSIS fddcfg --showall fddcfg --localaccept policy_list fddcfg --localreject policy_list fddcfg --fabwideset policy_list DESCRIPTION Use this command to manage the fabric data distribution configuration parameters. These parameters control the fabric-wide consistency policy. Switches can be locally configured to allow or reject a security policy.

  • Page 366

    fddCfg --localreject policy_list Configures the switch to reject distributions of the specified policies in policy_list. However, a database cannot be rejected if it is specified in the fabric-wide consistency policy. The policies in policy_list must be separated by semicolons and enclosed in quotation marks; for example, "SCC;DCC". --fabwideset policy_list Sets the fabric-wide consistency policy.

  • Page 367: Fdmicacheshow

    fdmiCacheShow fdmiCacheShow Displays abbreviated remote FDMI device information, according to remote domain ID. SYNOPSIS fdmicacheshow DESCRIPTION Use this command to display FDMI cache information for remote domains only. The state of each remote domain, identified by its domain ID, is shown to be unknown, known, unsupported, or error.

  • Page 368: Fdmishow

    fdmiShow fdmiShow Displays detailed FDMI device information. SYNOPSIS fdmishow DESCRIPTION Use this command to display FDMI information for all HBAs and ports. Detailed FDMI information is displayed for local HBAs and ports. This information includes the HBA with its corresponding ports, along with their respective attributes. Only abbreviated FDMI information is shown for HBA and ports on remote switches.

  • Page 369: Ficoncfg

    ficonCfg ficonCfg Configures the specified FICON database. SYNOPSIS ficoncfg --set database port ficoncfg --reset database ficoncfg --help DESCRIPTION Use this command to configure a FICON database on a specified port. Refer to ficonShow for a description of the database content. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 370: Ficonclear

    ficonClear ficonClear Clears the records from the specified FICON database. SYNOPSIS ficonclear database DESCRIPTION Use this command to remove records from the local FICON database. The command effect depends on the specified database. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 371: Ficoncupset

    ficonCupSet ficonCupSet Sets FICON-CUP parameters for a switch. SYNOPSIS ficoncupset fmsmode enable | disable ficoncupset modereg bitname 0 | 1 ficoncupset MIHPTO seconds ficoncupset CRP PID CHID DESCRIPTION Use this command to set FICON-CUP (Control Unit Port) parameters for a switch. All parameters can be set while the switch is online.

  • Page 372

    ficonCupSet Alternate control prohibited Host control prohibited MIHPTO Sets the missing interrupt handler primary timeout (MIHPTO) value for the CUP. The following operand is required: seconds Specifies the timeout value in seconds. Provide a decimal value in the range between 15 and 600 seconds. The default timeout value is 180 seconds. If a value greater than 63 seconds is specified, the timeout value is rounded down to the closest value divisible by 10.

  • Page 373

    ficonCupSet 082300 Oper 082400 Reset 082400 Reset 612400 Reset Prim 612400 Reset SEE ALSO ficonCupShow Fabric OS Command Reference 53-1001764-01...

  • Page 374: Ficoncupshow

    ficonCupShow ficonCupShow Displays FICON-CUP parameters for a switch. SYNOPSIS ficoncupshow fmsmode ficoncupshow modereg [bitname] ficoncupshow MIHPTO ficoncupshow LP DESCRIPTION Use this command to display FICON-CUP (Control Unit Port) parameters for a switch. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 375

    ficonCupShow EXAMPLES To display the FMS mode for the switch: switch:user> ficoncupshow fmsmode fmsmode for the switch: Enabled To display the mode register for the switch: switch:user> ficoncupshow modereg POSC DCAM ------------------------------ To display the ASM bit in the mode register for the switch: switch:user>...

  • Page 376: Ficonhelp

    ficonHelp ficonHelp Displays a list of FICON support commands. SYNOPSIS ficonhelp DESCRIPTION Use this command to display a list of FICON support commands with descriptions. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 377: Ficonshow

    ficonShow ficonShow Displays the contents of the specified FICON database. SYNOPSIS ficonshow database [fabric] DESCRIPTION Use this command to display the contents of a FICON database. The ficonShow database operand is the name of the database to display. If the fabric operand is absent, the command displays the members of the named database that are local to the switch on which the command was issued.

  • Page 378

    ficonShow Incident Count Displays the incident count. This number increases by 1 for each incident within the individual switch. Link Incident Description Same as Link Incident Type. Link Incident Type Indicates the link incident type as one of the following: •...

  • Page 379

    ficonShow 0x40 Other FC-4s including FCP and updates. 0x60 FC-SB-2 and updates and other FC-4s including FCP and updates. 0x80 FC-4 support not specified. 0xa0 Reserved. 0xc0 Reserved. 0xe0 Vendor-specific. Byte BB Possible values include the following: 0x00 Unspecified class. 0x01 Direct access storage device, if it is a storage port;...

  • Page 380

    ficonShow 0xID CHIPID if channel port has registered with the switch. 0xPN If switch has registered with the channel, PN represents the FL port number. Part Number Displays the switch chassis part number. Displays the 24-bit Fibre Channel port address in 0xDDAAPP format. DD is Domain ID.

  • Page 381

    ficonShow Time Stamp Displays the timestamp, expressed in date format. Type Same as Port Type. Type Number Displays the type number of the self-describing node. It also describes the machine type. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 382

    ficonShow tag: 102b {Fmt Type PID Registered Port WWN Registered Node WWN \ 0x18 N 502e00 50:05:07:64:01:40:0f:ca 50:05:07:64:00:c1:69:ca \ flag Parm 0x10 0x200105 Type number: 002064 Model number: Manufacturer: Plant of Manufacture: 02 Sequence Number: 0000000169CA tag: 052e To display the local LIRR database: switch:admin>...

  • Page 383

    ficonShow To display the local RLIR database: switch:user> ficonshow RLIR {Fmt Type PID Port Incident Count TS Format Time Stamp 0x18 N 502e00 46 1 Time server Mon Jan 13 04:29:33 2003 Port Status: Link not operational Link Failure Type: Loss of signal or synchronization Registered Port WWN Registered Node WWN Flag...

  • Page 384

    ficonShow 0x502b00 50:05:07:64:01:00:15:8d The Local ILIR database has 2 entries. SEE ALSO ficonClear Fabric OS Command Reference 53-1001764-01...

  • Page 385: Fipscfg

    fipsCfg fipsCfg Configures FIPS (Federal Information Processing Standards) mode. SYNOPSIS fipscfg --enable fips | selftests | bootprom] [-nowarn] fipscfg --disable selftests | bootprom] [-nowarn] fipscfg --zeroize [-nowarn] fipscfg --show | --showall fipscfg --force fips fipscfg --verify fips DESCRIPTION Use this command to configure FIPS mode on the switch. In this mode, only FIPS-compliant algorithms are allowed.

  • Page 386

    fipsCfg --zeroize [-nowarn] Erases all passwords, shared secrets, private keys, etc. in the system. --show | --showall Displays the current FIPS configuration. --force fips This option enables FIPS mode even if prerequisites are not met, except under the following two conditions: •...

  • Page 387

    fipsCfg To attempt enabling FIPS when prerequisites are not met: switch:admin> fipscfg --enable fips SelfTests mode is not enabled. Root account is enabled. Authentication uses MD5 hash algorithm. Authentication uses DH group 0. Telnet port number <23> for the policy <default_ipv4> \ is in permit state.

  • Page 388

    fipsCfg 1. Delete all existing CSRs. 2. Delete all existing certificates. 3. Reset the certificate filename to none. 4. Disable secure protocols. Continue (yes, y, no, n): [no] Operation cancelled. Zeroizing Radius configuration: RADIUS configuration does not exist. LDAP configuration does not exist. Zeroizing IPSec static SA configuration.

  • Page 389: Firmwarecommit

    firmwareCommit firmwareCommit Commits switch firmware. SYNOPSIS firmwarecommit DESCRIPTION Use this command to commit a firmware download to a CP. This command copies an updated firmware image to the secondary partition and commits both partitions of the CP to an updated version of the firmware.

  • Page 390: Firmwaredownload

    firmwareDownload firmwareDownload Downloads firmware from a remote host, a local directory, or a USB device. SYNOPSIS To invoke the command in interactive mode: firmwaredownload To download FOS firmware over a network: firmwaredownload [ -s [ -b | -n ] ] [ -p ftp | scp | sftp ] host user pfile...

  • Page 391

    firmwareDownload All systems supported by this firmware have two partitions of nonvolatile storage (primary and secondary) to store two firmware images. This command always downloads the new image to the secondary partition and then swaps partitions so the secondary partition becomes the primary. By default, firmwareDownload reboots the system and activates the new image.

  • Page 392

    firmwareDownload Disables autocommit mode. When autocommit mode is disabled, the firmwareCommit command must be executed manually to propagate the downloaded image to both partitions of the storage device. host Specify a valid FTP or SSH server name or IP address. IPV4 and IPv6 addresses are supported.

  • Page 393

    firmwareDownload Removes all of the installed SA images in the system during SAS firmware download. By default, downloading a SAS image does not remove the installed SA images. If this option is specified, the installed SA images are removed. This option is only valid with the -a sas option.

  • Page 394

    firmwareDownload of this command. This command will cause a warm/non-disruptive boot on the active CP, but will require that existing telnet, secure telnet or SSH sessions sessions be restarted. To download firmware interactively: switch:admin> firmwaredownload Server Name or IP Address: 192.168.32.10 User Name: admin File Name: ~admin/dist/FOS7.0.0/ Network Protocol(1-auto-select, 2-FTP, 3-SCP, 4-SFTP) [1]:...

  • Page 395: Firmwaredownloadstatus

    firmwareDownloadStatus firmwareDownloadStatus Displays the status of a firmware download. SYNOPSIS firmwaredownloadstatus DESCRIPTION Use this command to display an event log that records the progress and status of events during a firmware download. The event log is created by the firmware download process and is kept until you issue another firmwareDownload command.

  • Page 396

    firmwareDownloadStatus [5]: Fri Mar 25 16:58:44 2011 Slot 7 (CP1, standby): Firmware commit operation has started to restore the secondary partition. [6]: Fri Mar 25 16:58:45 2011 Slot 7 (CP1, standby): The firmware commit operation has started. This may take up to 10 minutes. [7]: Fri Mar 25 17:05:34 2011 Slot 7 (CP1, standby): The commit operation has completed successfully.

  • Page 397: Firmwarekeyshow

    firmwareKeyShow firmwareKeyShow Displays the public key used for signed firmware validation. SYNOPSIS firmwarekeyshow DESCRIPTION This command displays the contents of the public key used for validating the integrity of firmware images when signed firmware validation is enabled. NOTES A firmware key should be installed on every switch as a part of the Fabric OS installation. The presence of a firmware key does not imply that the firmware signature is checked during firmwareDownload.

  • Page 398: Firmwarerestore

    firmwareRestore firmwareRestore Restores the former active firmware image. SYNOPSIS firmwarerestore DESCRIPTION Use this command to restore the former active Fabric OS firmware image. This command can only be run if autocommit was disabled during the firmwareDownload process. After a firmwareDownload and a reboot (with autocommit disabled), the downloaded firmware becomes active.

  • Page 399: Firmwareshow

    firmwareShow firmwareShow Displays the firmware version and download history. SYNOPSIS firmwareshow firmwareshow --history firmwareshow --help DESCRIPTION Use this command to display the firmware versions and the firmware download history. The command shows the firmware versions on both the primary and secondary partitions of the storage device. When this command is issued while a firmware download is in process, an appropriate warning message is displayed.

  • Page 400

    firmwareShow To display the firmware download history: switch:admin> firmwareshow --history Firmware version history Sno Date & Time Switch Name Slot PID FOS Version 1 Fri Feb 18 12:58:06 2011 CDCX16 1556 Fabos Version v7.0.0d 2 Wed Feb 16 07:27:38 2011 CDCX16 1560 Fabos Version v7.0.0c...

  • Page 401: Fmmonitor

    fmMonitor fmMonitor Manages frame monitor configuration. SYNOPSIS fmmonitor --create frame_type -pat bit_pattern [-port port_list] [-highth value] [-action actions] [-timebase time_base] [-nosave] fmmonitor --delete frame_type fmmonitor --show [frame_type] [-port port_list | -all] [-timeinterval interval] fmmonitor --change frame_type [-pat bit_pattern] [-highth value] [-action actions][-timebase time_base] fmmonitor --addmonitor frame_type -port port_list [-nosave] fmmonitor --delmonitor frame_type [-port port_list] [-nosave] fmmonitor --clear frame_type -port port_list...

  • Page 402

    fmMonitor This command requires an Advanced Performance Monitoring license. A Fabric Watch license is optional. Without a Fabric Watch license, you cannot use the alert mechanism, but you can still configure frame monitors and observe the counters. This command is not supported on virtual FC ports (VE/VEX_Port), EX_Port, mirror ports, GbE ports, and FCoE ports.

  • Page 403

    fmMonitor -pat bit_pattern Specifies a unique combination of values in the first 64 bytes of a frame. The syntax for the bit patterns is as follows: "offset,bitmask, value;[offset, bitmask,value;] ...;" for example, "12,0xFF,0x08;4,0xFF,0x06;40,0xFF,0x08, 0x28;". This example monitors for SCSI read command traffic transmitted from a port by filtering on offset 12 with a value of 0x08 (SCSI-FCP), on offset 4 with value 0x06 (unsolicited command), and on offset 40 with values of 0x08 or 0x28 (read command).

  • Page 404

    fmMonitor -port port_list Specifies one or more ports on which to install the monitor for the specified frame type. This operand is optional; if omitted, the monitor is installed on all eligible ports. A port list can consist of the following: •...

  • Page 405

    fmMonitor --delete frame_type Deletes an existing frame type. This command removes the entire configuration, including configured threshold and associated actions. It also removes any frame monitors of the specified type from all ports. This operand is not valid with predefined frame types. --clear frame_type -port port_list Clears the ports on which the specified frame type is monitored from the persistent configuration.

  • Page 406

    fmMonitor To save the port configuration persistently: switch:admin> fmmonitor --save SCSI To delete the custom frame monitor "MyFrameMonitor" from all ports: switch:admin> fmmonitor --delmonitor MyFrameMonitor To delete the entire frame type configuration: switch:admin> fmmonitor --delete MyFrameMonitor To clear the counters for the SCSI2_READ monitor from ports 7-10: switch:admin>...

  • Page 407

    fmMonitor -|scsi3reserve|N/A |None |None |N/A -|ip |N/A |None |None |N/A -|abts |N/A |None |None |N/A -|baacc |N/A |None |None |N/A 000002|beta |0000000000000145|10 |Email |None |saved To display the number of frames of type ISCSI_RW per second during a five-second interval: switch:admin>...

  • Page 408: Fosconfig

    fosConfig fosConfig Displays or modifies Fabric OS features. SYNOPSIS fosconfig --enable feature fosconfig --disable feature fosconfig --show DESCRIPTION Use this command to enable or disable a feature, or to display the current operating status of features on a switch. This command can be run while the switch is online. The following features are supported (refer to the Notes for limitations): •...

  • Page 409

    fosConfig ethsw Enables the Ethernet switch service on the switch. The Ethernet switch service is disabled by default. Enabling the Ethernet switch service does not disrupt the FC traffic. --disable feature Disables a feature on the switch. Valid values for feature include the following: Disables the FC Routing service on the switch.

  • Page 410

    fosConfig To enable Virtual Fabrics: switch:admin> fosconfig --enable vf WARNING: This is a disruptive operation that \ requires a reboot to take effect. All EX ports will be disabled upon reboot. Would you like to continue [Y/N]y To disable Virtual Fabrics: switch:admin>...

  • Page 411: Fosexec

    fosExec fosExec Executes a command in a specified logical switch context. SYNOPSIS fosexec --fid FID -cmd "cmd [args]" fosexec --fid all [-force] -cmd "cmd [args]" DESCRIPTION Use this command to execute any Fabric OS command on a specified logical switch context or on all logical switches.

  • Page 412

    fosExec Default Switch: No, Address Mode 0] Index Slot Port Address Media Speed State Proto =================================================== 640000 No_Module 640100 No_Module 640200 No_Module To enable port 5/0 on all logical switches: switch:admin> fosexec --fid all -cmd "portenable 5/0" --------------------------------------------------- "portenable" on FID 128: --------------------------------------------------- "portenable"...

  • Page 413

    fosExec To display the switch name for all logical switches without confirmation: switch:user> fosexec --fid all -force -cmd "switchname" ------------------------------------ "switchname" on FID 10: switch_10 ----------------------------------- "switchname" on FID 20: switch_20 SEE ALSO setContext, userConfig Fabric OS Command Reference 53-1001764-01...

  • Page 414: Framelog

    frameLog frameLog Displays information about discarded frames. SYNOPSIS framelog --disable framelog --enable framelog --clear framelog --show [-txport [slot/]port] [-rxport [slot/]port] [-sid source_PID][-did destination_PID] [-sfid fabric_ID] [-dfid fabric_ID>] [-mode summary | dump] [-n num_items] DESCRIPTION Use this command to disable or re-enable the frame log, and to display detailed information about the discarded frames logged by the frame log.

  • Page 415

    frameLog Type Reason for the frame discard. Frames can be discarded for a variety of reasons. The only discard reason currently handled by the frame log is timeout. Count The number of discarded frames logged in the frame log that have the log timestamp, TX port, RX port, SID, DID, SFID and DFID values listed on this line of output.

  • Page 416

    frameLog -sid source_PID Displays only the frames with the specified 24-bit source address in the FC header. The port ID (PID) must be written in hexadecimal and must be prefixed by -did destination_PID Displays only the frames with the specified 24-bit destination address in the FC header.

  • Page 417

    frameLog Jan 31 18:34:46 7/32 7/33 timeout 00 03 a0 00 00 03 a1 00 00 28 00 00 00 00 00 00 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Jan 31 18:34:46 7/32 7/33 timeout 00 03 a0 00 00 03 a1 00 00 28 00 00 00 00 00 00...

  • Page 418: Frureplace

    fruReplace fruReplace Provides an interactive interface to help replace a field replaceable unit (FRU). SYNOPSIS frureplace fru DESCRIPTION Use this command to replace a FRU. The command automatically performs the necessary backup and restore operations to accommodate the replacement. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 419: Fspfshow

    fspfShow fspfShow Displays Fabric Shortest Path First (FSPF) protocol information. SYNOPSIS fspfshow DESCRIPTION Use this command to display FSPF protocol information and internal data structures of the FSPF module. The command displays the following fields: version Version of the FSPF protocol. domainID Domain number of the local switch.

  • Page 420

    fspfShow lsrDelayTo Link State Record delay time out value in milliseconds. lsrDelayCount Counter of delayed Link State Records. ddb_sem FSPF semaphore ID. event_sch FSPF scheduled events bit map. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 421

    fspfShow f_ports[9] = 0x00000000 f_ports[10] = 0x00000000 f_ports[11] = 0x00000000 f_ports[12] = 0x00000000 seg_ports[0] = 0x00000002 seg_ports[1] = 0x00000000 seg_ports[2] = 0x00000000 seg_ports[3] = 0x00000000 seg_ports[4] = 0x00000000 seg_ports[5] = 0x00000000 seg_ports[6] = 0x00000000 seg_ports[7] = 0x00000000 seg_ports[8] = 0x00000000 seg_ports[9] = 0x00000000 seg_ports[10]...

  • Page 422: Fwalarmsfilterset

    fwAlarmsFilterSet fwAlarmsFilterSet Enables or disables alarms for Fabric Watch. SYNOPSIS fwalarmsfilterset [mode] DESCRIPTION Use this command to configure alarm filtering for Fabric Watch. By turning off the alarms, all nonenvironment class alarms are suppressed. By turning on the alarms, all class alarms are generated. NOTES This command requires a Fabric Watch license.

  • Page 423: Fwalarmsfiltershow

    fwAlarmsFilterShow fwAlarmsFilterShow Displays alarm filtering for Fabric Watch. SYNOPSIS fwalarmsfiltershow DESCRIPTION Use this command to display whether alarm filtering is enabled or disabled. NOTES This command requires a Fabric Watch license. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 424: Fwclassinit

    fwClassInit fwClassInit Initializes all classes under Fabric Watch. SYNOPSIS fwclassinit DESCRIPTION Use this command to initialize all classes under Fabric Watch. The command should only be used after installing a Fabric Watch license to start licensed Fabric Watch classes. Refer to the Fabric Watch Administrator's Guide for a list of supported Fabric Watch classes.

  • Page 425: Fwconfigreload

    fwConfigReload fwConfigReload Reloads the Fabric Watch configuration. SYNOPSIS fwconfigreload DESCRIPTION Use this command to reload the Fabric Watch configuration. This command should only be used after downloading a new Fabric Watch configuration file from a host. NOTES This command requires a Fabric Watch license. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 426: Fwfrucfg

    fwFruCfg fwFruCfg Displays or modifies FRU state alert configuration. SYNOPSIS fwfrucfg [--show] DESCRIPTION Use this command to configure states and actions for field-replaceable units (FRUs) and small form-factor pluggables (SFPs). Based on these configuration settings, Fabric Watch generates actions when a FRU or SFP state changes. For SFPs, Fabric Watch monitors state changes in following events: SFP inserted, SPP removed, SFP faulty.

  • Page 427

    fwFruCfg WWN Alarm State: (0..31) [1] WWN Alarm Action: (0..17) [1] SFP Alarm State: (0..19) [0] SFP Alarm Action: (0..17) [0] Fru configuration left unchanged SEE ALSO fwHelp, fwMailCfg, sfpShow Fabric OS Command Reference 53-1001764-01...

  • Page 428: Fwhelp

    fwHelp fwHelp Displays Fabric Watch command information. SYNOPSIS fwhelp DESCRIPTION Use this command to display the commands that configure Fabric Watch. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 429: Fwmailcfg

    fwMailCfg fwMailCfg Displays and configures Fabric Watch email alerts. SYNOPSIS fwmailcfg DESCRIPTION Use this command to display or modify the configuration and status of the Fabric Watch email alert on the switch. Switch elements monitored by Fabric Watch are divided into classes, and e-mail alerts are based on the classes.

  • Page 430

    fwMailCfg : Filter Performance Monitor class : Security class : Resource Monitor class : FRU Class : Quit Select an item => : (0..13) [11] 1 Mail Recipient information -------------------------------------------- Email Alert = disabled Mail Recipients = NONE -------------------------------------------- : Show Mail Configuration Information : Disable Email Alert : Enable Email Alert : Send Test Mail...

  • Page 431

    fwMailCfg : F/FL Port (Optical) class : Resource class : quit Select a class => : (1..6) [6] 6 Mail Recipient Information ____________________________________ Email Alert = disabled Mail Recipient = NONE : Show Mail Configuration Information : Disable Email Alert : Enable Email Alert : Send Test Mail : Set Recipient Mail Address for Email Alert...

  • Page 432: Fwportdetailshow

    fwPortDetailShow fwPortDetailShow Displays the port information for specified user ports. SYNOPSIS fwportdetailshow [--p port] | [--s portState] DESCRIPTION Use this command to print the overall status of a specified port. The output of this command is different for IPv4 and IPv6 addresses. The overall status is calculated based on the following contributors: Port Errors The number of link loss occurrences exceeding the limit for the time period.

  • Page 433

    fwPortDetailShow When used without operands, this command displays information for all ports. NOTES This command requires a Fabric Watch license. Port errors are not supported for virtual ports and SFP errors are not applicable for virtual ports. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 434

    fwPortDetailShow To retrieve a port detail report for all ports in healthy state: switch:user> fwportdetailshow --s h Port Detail Report Report time: 05/21/2007 11:22:58 PM Switch Name: switch IP address: 192.168.163.237 Port Exception report [by Healthy] --------Port-Errors------------ Port# Type State Dur(H:M) LFA LSY LSI PER INW \ ------------------------------------------------\ HEALTHY...

  • Page 435: Fwsamshow

    fwSamShow fwSamShow Generates switch availability monitor (SAM) report. SYNOPSIS fwsamshow DESCRIPTION Use this command to display a switch availability monitor (SAM) report. This report displays uptime and downtime for each port and enables you to check if a particular port is failing more often than the others. The information displayed includes total uptime, total downtime, number of faulty occurrences, and total percent of downtime for each port.

  • Page 436: Fwset

    fwSet fwSet Sets port persistence time. SYNOPSIS fwset --port --persistence seconds DESCRIPTION Use this command to set port persistence time, a parameters controlled by Fabric Watch. Port persistence time specifies the time in seconds during which a port must persistently be in a marginal state before being labeled as such.

  • Page 437: Fwsettocustom

    fwSetToCustom fwSetToCustom Sets Fabric Watch thresholds and alarm levels to custom values. SYNOPSIS fwsettocustom DESCRIPTION Use this command to set threshold and alarm levels to custom values for all Fabric Watch classes and areas. Fabric Watch uses two types of settings: factory default settings and user-defined custom settings. •...

  • Page 438

    fwSetToCustom Trigger : Above Action: None Trigger : Below Action: Raslog,SNMP Default: TimeBase: None Value Trigger : Above Action: None Trigger : Below Action: Raslog,SNMP Buffer: Custom: Value : 20 Default: Value : 10 Class: RESOURCE Area : FLASH ThLevel : Cust (Applied) ActLevel: Def High Custom:...

  • Page 439: Fwsettodefault

    fwSetToDefault fwSetToDefault Returns Fabric Watch thresholds and alarm levels to default values. SYNOPSIS fwsettodefault DESCRIPTION Use this command to return Fabric Watch thresholds and alarm levels to defaults for all classes and areas in Fabric Watch. Fabric Watch uses two types of settings: factory default settings and user-defined custom settings. •...

  • Page 440

    fwSetToDefault Value Trigger : Above Action: None Trigger : Below Action: Raslog,SNMP Buffer: Custom: Value : 20 Default: Value : 10 Class: RESOURCE Area : FLASH ThLevel : Def ActLevel: Def High Custom: TimeBase: None Value : 110 Trigger : Above Action: Raslog,SNMP Trigger : Below Action: Raslog Default: TimeBase: None...

  • Page 441: Hadisable

    haDisable haDisable Disables the High Availability feature. SYNOPSIS hadisable DESCRIPTION Use this command to disable the High Availability (HA) feature on a switch. If the HA feature is already disabled, this command does nothing. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 442: Hadump

    haDump haDump Displays High Availability status information. SYNOPSIS hadump DESCRIPTION Use this command to display information about the status of the High Availability (HA) feature on a switch or a chassis. This command displays the following information: • Time Stamp •...

  • Page 443

    haDump NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. OPERANDS None EXAMPLES To view information about the High Availability feature status on a Brocade DCX 8510-8: switch:admin>...

  • Page 444: Haenable

    haEnable haEnable Enables the High Availability feature. SYNOPSIS haenable DESCRIPTION Use this command to enable the High Availability (HA) feature on a switch. If the HA feature is already enabled, this command has no effect. If the HA feature is disabled, this command enables it. The standby CP reboots as part of the process. The command displays a warning message and prompts for confirmation before rebooting the CP.

  • Page 445: Hafailover

    haFailover haFailover Forces the failover mechanism so that the standby control processor (CP) becomes the active CP. SYNOPSIS hafailover DESCRIPTION Use this command to force the failover mechanism to occur so that the standby CP becomes the active CP. In case the active and standby CPs are not synchronized or the system is not in redundant mode, the command aborts.

  • Page 446: Hashow

    haShow haShow Displays control processor (CP) status. SYNOPSIS hashow DESCRIPTION Use this command to display the control processor status. The display includes the following information: • Local CP state (slot number and CP ID), warm or cold, recovering or recovered. •...

  • Page 447

    haShow OPERANDS None EXAMPLES To display CP status on a Brocade DCX 8510-8 with a healthy standby CP: switch:admin> hashow Local CP (Slot 7, CP1) : Active, Warm Recovered Remote CP (Slot 6, CP0) : Standby, Healthy HA Enabled, Heartbeat Up, HA State Synchronized SEE ALSO haDisable, haEnable, haFailover...

  • Page 448: Hasyncstart

    haSyncStart haSyncStart Enables High Availability state synchronization. SYNOPSIS hasyncstart DESCRIPTION Use this command to enable the High Availability (HA) state synchronization. After issuing haSyncStop, the switch does not go back to sync start unless you perform one of the following actions: reboot the active CP, reboot the standby CP, insert a new standby CP (blade), or issue the haSyncStart command The time it takes for the HA sync to complete depends on the system configuration.

  • Page 449: Hasyncstop

    haSyncStop haSyncStop Disables High Availability state synchronization. SYNOPSIS hasyncstop DESCRIPTION Use this command to temporarily disable High Availability (HA) synchronization. After issuing haSyncStop, the switch does not go back to sync start unless you perform one of the following actions: reboot the active CP, reboot the standby CP, insert a new standby CP (blade), or issue the haSyncStart command The time it takes for the HA sync to complete depends on the system configuration.

  • Page 450: Help

    help help Displays command help information. SYNOPSIS help [command] help [-p | -page] help --help DESCRIPTION Use this command without operands to display an alphabetical listing of commands for which help is available. When used without an operand, the command listing displays without page break. Pipe the output through the Unix grep command to filter the output.

  • Page 451

    help Tuning policy auditcfg Modifies and displays audit log filter configuration. auditdump Display audit log (output truncated) To search for the string "zone" while paging is enabled (enter /zone after issuing the command): switch:admin> help -p aaaconfig Configure RADIUS for AAA services Specifies all administration domain (AD)-level operations Configure the Access Gateway feature...

  • Page 452

    Displays shell history. SYNOPSIS history DESCRIPTION Use this command to view the shell history. The shell history mechanism is similar to the UNIX shell history facility. The h command displays the 20 most recent commands typed into the shell; the oldest commands are replaced as new ones are entered.

  • Page 453: Historylastshow

    historyLastShow historyLastShow Displays the latest entry in the field replaceable unit (FRU) history log. SYNOPSIS historylastshow DESCRIPTION Use this command to display the latest entry of the history log, which records insertion and removal events for field-replaceable units (FRUs), such as blades, power supplies, fans, and world wide name (WWN) cards.

  • Page 454: Historymode

    historyMode historyMode Displays the mode of the field replaceable unit (FRU) history log. SYNOPSIS historymode DESCRIPTION Use this command to display the mode of the history buffer, which records the insertion and removal of FRUs on a switch or chassis. This command supports two modes of handling new log entries once the history buffer has reached its maximum size: Rotating mode...

  • Page 455: Historyshow

    historyShow historyShow Displays the entire field replaceable unit (FRU) history log. SYNOPSIS historyshow DESCRIPTION Use this command to display the entire history log, which records insertion and removal events for field-replaceable units (FRUs), such as blades, power supplies, fans, and world wide name (WWN) cards.

  • Page 456

    historyShow Unit 3 Inserted at Tue Aug 14 10:23:45 2001 Factory Part Number: 20-123456-12 Factory Serial Number: 1013456800 Unit 1 Inserted at Tue Aug 14 11:03:45 2001 Factory Part Number: 40-0000031-03 Factory Serial Number: 1013456800 SW BLADE Slot 3 Removed at Tue Aug 14 12:10:09 2001 Factory Part Number: 60-0001532-03 Factory Serial Number:...

  • Page 457

    Displays a process summary. SYNOPSIS i [processID] DESCRIPTION Use this command to display information about a specified process or about all processes running on the local switch. One line is displayed per process. Fields displayed with this command include the Process flags: ALIGNWARN 001 print alignment warning messages...

  • Page 458

    Processor utilization for scheduling Priority number of the process; higher numbers mean lower priority Nice value used in priority computation ADDR Memory address of the process The total size of the process in virtual memory, in pages WCHAN The address of an event for which a process is sleeping (if blank, process is running) The controlling terminal of the process (? displayed for no controlling terminal) TIME...

  • Page 459: Iclcfg

    iclCfg iclCfg Enables or disables Inter-chassis links (ICL). SYNOPSIS iclcfg --enable slot/icl_group iclcfg --disable slot/icl_group iclcfg --persistentenable slot/icl_group iclcfg --persistentdisable slot/icl_group iclcfg --help DESCRIPTION Use this command to enable or disable an inter-chassis link (ICL) or to enable or disable an ICL persistently.

  • Page 460

    iclCfg To disable the ICL for ports 16-31 persistently: iclcfg --persistentdisable 8/1 switch:user> To enable the ICL for ports 16-31 persistently: iclcfg --persistentdnable 8/1 switch:user> SEE ALSO None Fabric OS Command Reference 53-1001764-01...

  • Page 461: Ifmodeset

    ifModeSet ifModeSet Sets the link operating mode for a network interface. SYNOPSIS ifmodeset ["interface"] DESCRIPTION Use this command to set the link operating mode for a network interface. An operating mode is confirmed with a y or yes at the prompt. If the operating mode selected differs from the current mode, the change is saved and the command exits.

  • Page 462

    ifModeSet Advertise 100 Mbps / Full Duplex (yes, y, no, n): [yes] y Advertise 100 Mbps / Half Duplex (yes, y, no, n): [yes] y Advertise 10 Mbps / Full Duplex (yes, y, no, n): [yes] y Advertise 10 Mbps / Half Duplex (yes, y, no, n): [yes] y Committing configuration...done.

  • Page 463: Ifmodeshow

    ifModeShow ifModeShow Displays the link operating mode and MAC address for a network interface. SYNOPSIS ifmodeshow interface DESCRIPTION Use this command to display the link operating mode and MAC address for a network interface. On the CP of a Brocade DCX or DCX-S4, this command supports eth0 and eth3 as interface parameters.

  • Page 464

    ifModeShow To display the active interface: ras010:root> ifmodeshow bond0 Currently Active Slave: eth0 SEE ALSO ifModeSet Fabric OS Command Reference 53-1001764-01...

  • Page 465: Interfaceshow

    interfaceShow interfaceShow Displays FSPF interface information. SYNOPSIS interfaceshow [slot/][port] DESCRIPTION Use this command to display the two data structures associated with FSPF interfaces (E_Ports) on the switch: • The permanently allocated interface descriptor block (IDB). • The neighbor data structure. This data structure is allocated when a switch port becomes an E_Port. The neighbor data structure contains all the information relating to the switch that is connected to an adjacent switch.

  • Page 466

    interfaceShow downReason Type of last State Change Notification that caused this interface to go down. iState Current state of this interface. The state can be UP or DOWN. An interface in DOWN state does not have an allocated neighbor data structure and cannot be used to route traffic to other switches.

  • Page 467

    interfaceShow helloTo Hello timeout value, in milliseconds. When this timeout expires, a Hello frame is sent to the neighbor switch through this port. rXmitTo Retransmission timeout value, in milliseconds. It is used to transmit topology information to the neighbor switch. If no acknowledgement is received within this value, the frame is retransmitted.

  • Page 468

    interfaceShow When invoked without operands, this command displays the interface information for all ports on the switch (including non-E_Ports). EXAMPLES To display FSPF interface information: switch:user> interfaceshow 1/4 idbP = 0x1008b3d0 Interface 4 data structure: nghbP = 0x1008c668 ifNo masterPort = 4 (self) defaultCost = 500...

  • Page 469

    interfaceShow nHloOut attLsuOut nLsuOut attLsaOut nLsaOut SEE ALSO nbrStateShow, portShow, switchShow Fabric OS Command Reference 53-1001764-01...

  • Page 470: Iodreset

    iodReset iodReset Disables in-order delivery (IOD) on a switch. SYNOPSIS iodreset DESCRIPTION Use this command to disable in-order delivery enforcement on the local switch. IOD is disabled by default, and can only be disabled after it has been enabled with the iodSet command. This command disables the legacy IOD enforcement only.

  • Page 471: Iodset

    iodSet iodSet Enables in-order delivery (IOD). SYNOPSIS iodset iodset --help DESCRIPTION Use this command to enforce in-order delivery of frames during a fabric topology change. In a stable fabric, frames are always delivered in order, even when the traffic between switches is shared among multiple paths.

  • Page 472: Iodshow

    iodShow iodShow Displays the in-order delivery (IOD) setting. SYNOPSIS iodshow DESCRIPTION Use this command to display the IOD setting on the switch. By default, IOD is disabled. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.

  • Page 473: Ipaddrset

    ipAddrSet ipAddrSet Sets the Ethernet and FC IP addresses. SYNOPSIS ipaddrset [-ipv6 ] [--add x:x:x:x:x:x:x/n | --delete] ipaddrset [-cp cp_number | -chassis] [-ipv6 ] [--add x:x:x:x:x:x:x/n | --delete] ipaddrset [-slot slot] [-eth0 | -eth1] [--add x.x.x.x/n | --delete] ipaddrset [-slot slot] -gate [--add x.x.x.x | --delete] ipaddrset -ls FID --add IPv4_address/prefix ipaddrset -ls FID --delete ipaddrset -ipv6 [-auto | -noauto]...

  • Page 474

    ipAddrSet • Use the -auto and -noauto options to enable or disable stateless IPv6 autoconfiguration. • Use the -ls option with appropriate arguments to set or delete the IPv4 Fibre Channel address and prefix for the IPFC interface of a logical switch. In a Virtual Fabric environment, each logical fabric is represented by a separate IPFC network interface.

  • Page 475

    ipAddrSet -ipv6 [-auto | -noauto] Enables or disables stateless IPv