Cisco MDS 9509 Director Manuals

Manuals and User Guides for Cisco MDS 9509 Director. We have 2 Cisco MDS 9509 Director manuals available for free PDF download: Configuration Manual, Overview

Cisco MDS 9509 Director Configuration Manual (1096 pages)

MDS 9000 Family

Brand: Cisco | Category: Network Hardware | Size: 12 MB

Table of Contents
4
Document Conventions
51
Related Documentation
52
Obtaining Documentation
53
Obtaining Technical Assistance
55
Getting Started
59
Hardware Overview
61
Product Overview
61
Graceful Shut down
65
Dynamic Vsans
66
Device Alias Distribution
67
- Inter-VSAN Routing
  67
- Trunking
  68
  - Portchannels
    68
Enhanced Zoning
67
Intelligent Zoning
67
IP Services

68
- Ficon
  69
  - Fabric Binding
    69
  - Rlir
    69
  - IP Storage
    69
  - Call Home
    70
  - Qos and Congestion Control
    70
  - SPAN and RSPAN
    71
  - Switch Management Features
    71
    
    Redundant Supervisor Module Management
    71
    
    Fabric Management
    72
    
    Security Management
    72
  - Port Tracking
    74
  - SAN Extension Tuner
    74
  - Command Scheduler
    74
  - Intelligent Storage Services
    74
- Tools for Software Configuration
  74
  - Cli
    75
  - Cisco MDS 9000 Fabric Manager
    75
Before You Begin

77
- About the Switch Prompt
  78
- Default Switch Roles
  79
- About the CLI Command Modes
  79
- CLI Command Hierarchy
  80
  - EXEC Mode Options
    81
  - Configuration Mode
    82
  - Getting Help
    84
  - Command Completion
    85
  - File System Completion
    85
- CLI Command Configuration Options
  86
- Displaying the Switch Configuration
  86
- Saving a Configuration
  89
- Clearing a Configuration
  89
- Displaying Users
  89
- Sending Messages to Users
  89
- Using the Ping Command
  90
- Using the Extended Ping Command
  90
- Using Traceroute
  92
- Setting the Shell Timeout
  92
  - Displaying VTY Sessions
    93
  - Clearing VTY Sessions
    93
- Setting the Terminal Timeout
  93
- Setting the Terminal Type
  94
- Setting the Terminal Length
  94
- Setting the Terminal Width
  94
- Displaying Terminal Settings
  94
- Internal Bootflash:
  96
- Initializing Internal Bootflash:
  97
- Formatting External Compactflash
  97
- Using the File System
  98
  - Setting the Current Directory
    98
  - Displaying the Current Directory
    99
  - Displaying File Checksums
    99
  - Listing the Files in a Directory
    99
  - Creating a Directory
    100
  - Deleting an Existing Directory
    100
  - Moving Files
    100
    
    Copying Files
    101
    
    Deleting Files
    101
  - Displaying File Contents
    101
  - Saving Command Output to a File
    102
  - Compressing and Uncompressing Files
    102
  - Displaying the Last Lines in a File
    103
    
    Setting the Delay Time
    104
CHAPTER 3 Obtaining and Installing Licenses3-1

108
- Licensing Terminology
  108
- Licensing Model
  109
- Licensing High Availability
  111
- Options to Install a License
  112
- Obtaining a Factory-Installed License
  112
- Performing a Manual Installation
  112
- Obtaining the License Key File
  113
- Installing the License Key File
  114
- Backing up License Files
  115
- Identifying License Features in Use
  115
- Uninstalling Licenses
  115
- Updating Licenses
  116
- Grace Period Alerts
  117
- License Transfers between Switches
  118
- Displaying License Information
  118
CHAPTER 4 Initial Configuration4-1

122
- Initial Setup Routine
  122
  - Preparing to Configure the Switch
    124
  - Default Login
    124
  - Setup Options
    125
  - Assigning Setup Information
    126
    
    Configuring Out-Of-Band Management
    126
    
    Configuring In-Band Management
    130
    
    Using the Setup Command
    134
- Accessing the Switch
  134
- Assigning a Switch Name
  135
- Where Do You Go Next?
  135
- Verifying the Module Status
  136
- Configuring Date and Time
  136
- Configuring the Time Zone
  137
- NTP Configuration
  138
  - NTP Configuration Guidelines
    139
- NTP Configuration Distribution
  140
- Committing NTP Configuration Changes
  141
- Discarding NTP Configuration Changes
  141
- Releasing Fabric Session Lock
  142
- Database Merge Guidelines
  142
- NTP Session Status Verification
  142
- Management Interface Configuration
  142
- Obtaining Remote Management Access
  143
- Using the Force Option
  143
- Default Gateway Configuration
  144
- Configuring the Default Gateway
  144
- Telnet Server Connection
  145
  - Disabling a Telnet Connection
    145
- Configuring Console Port Settings
  146
  - Verifying Console Port Settings
    146
- Configuring COM1 Port Settings
  147
  - Verifying COM1 Port Settings
    147
- Configuring Modem Connections
  148
CHAPTER 5 Using the CFS Infrastructure5-1

160
- About CFS
  160
- Cisco SAN-OS Features Using CFS
  160
- CFS Features
  161
- CFS Protocol
  161
  - CFS Distribution Scopes
    162
  - CFS Distribution Modes
    162
    
    Uncoordinated Distribution
    162
  - Disabling CFS Distribution on a Switch
    163
  - CFS Application Requirements
    163
  - Enabling CFS for an Application
    163
    
    Committing Changes
    164
    
    Discarding Changes
    164
    
    Locking the Fabric
    164
  - Saving the Configuration
    165
    
    Clearing a Locked Session
    165
  - CFS Merge Support
    165
  - Displaying CFS Configuration Information
    166
  - Default Settings
    170
CHAPTER 6 Software Images6-1

171
- About Software Images
  171
  - Dependent Factors for Software Installation
    172
- Essential Upgrade Prerequisites
  172
- Software Upgrade Methods
  174
  - Determining Software Compatibility
    174
- Automated Upgrades
  175
  - Benefits of Using the Install All Command
    175
  - Recognizing Failure Cases
    176
  - Using the Install All Command
    177
    
    [####################] 100% -- Success
    179
    
    Upgrading Services Modules
    180
    
    Verifying Image Bootflash:/Isan-2.1.2
    181
  - Sample Install All Commands
    181
  - [####################] 100% -- Success
    182
  - [####################] 100% -- Success
    183
  - Impact Install-Type
    186
- Upgrade Status Verification
  188
- Manual Upgrade on a Dual Supervisor Switch
  189
  - Preparing for a Manual Installation
    189
  - Upgrading a Loader
    191
  - Upgrading the BIOS
    193
- Quick Upgrade
  195
- Downgrading from a Higher Release
  195
- Maintaining Supervisor Modules
  197
  - Standby Supervisor Boot Variable Version
    197
- Standby Supervisor Bootflash Memory
  197
- Standby Supervisor Boot Alert
  197
- Replacing Modules
  197
- Corrupted Bootflash Recovery
  198
- Working with Configuration Files
  
  211
- Unlocking the Startup Configuration File
  
  215
  - Copying Files
    216
  - Backing up the Current Configuration
    217
  - Rolling Back to a Previous Configuration
    217
    
    Restoring the Configured Redundancy Mode
    218
  - Accessing Remote File Systems
    219
  - Deleting Files
    219
CHAPTER 8 Configuring High Availability8-1

221
- About High Availability
  221
- Switchover Mechanisms
  222
  - HA Switchover Characteristics
    222
  - Initiating a Switchover
    222
- Switchover Guidelines
  223
  - Verifying Switchover Possibilities
    223
  - Process Restartability
    224
  - Synchronizing Supervisor Modules
    224
    
    Verifying the Copied Boot Variables
    224
  - Displaying HA Information
    225
CHAPTER 9 Managing System Hardware9-1

230
- Displaying Switch Hardware Inventory
  230
- Displaying the Switch Serial Number
  232
- Displaying Power Usage Information
  233
- Power Supply Configuration Modes
  234
  - Displaying Module Temperature
    238
- About Fan Modules
  238
- About Clock Modules
  239
- Displaying Environment Information
  239
- Default Settings
  240
CHAPTER 10 Managing Modules 10-1

241
- About Modules
  241
  - Supervisor Modules
    242
  - Switching Modules
    243
CHAPTER 37 Configuring IP Storage 37-1

243
- Services Modules
  243
  - Verifying the Status of a Module
    244
  - Checking the State of a Module
    244
  - Connecting to a Module
    245
  - Reloading Modules
    247
    
    Reloading the Switch
    247
    
    Power Cycling Modules
    247
    
    Reloading Switching Modules
    247
  - Preserving Module Configuration
    249
  - Purging Module Configuration
    250
  - Powering off Switching Modules
    250
  - Identifying Module Leds
    251
- EPLD Configuration
  255
  - Upgrading EPLD Images
    255
  - Displaying EPLD Versions
    259
- ASM and SSM Feature Support
  260
- Installing the SSI Boot Image on the SSM
  260
  - Using the Reload Module Command
    265
  - Using the Install Ssi Command
    267
- Installing the ASM-SFN Boot Image for VSFN
  269
  - Verifying the ASM-SFN Boot Image
    270
  - Default Settings
    278
CHAPTER 11 Configuring Interfaces11-1

282
- Fibre Channel Interfaces
  282
  - About Interface Modes
    283
    
    Auto Mode
    286
  - About Interface States
    286
    
    Administrative States
    286
    
    Operational States
    286
    
    Reason Codes
    287
  - Configuring Fibre Channel Interface
    289
  - Graceful Shut down
    289
    
    Interface Modes
    290
    
    TL Port ALPA Caches
    291
    
    Displaying the ALPA Cache Contents
    291
    
    Clearing the ALPA Cache
    292
    
    Administrative Speeds
    292
    
    Interface Descriptions
    292
    
    Buffer-To-Buffer Credits
    292
    
    Performance Buffers
    294
    
    Extended Bb_Credits
    294
    
    Frame Encapsulation
    296
    
    Receive Data Field Size
    296
    
    Beacon Mode
    297
    
    Identifying the Beacon Leds
    298
    
    About Speed Leds
    298
    
    Bit Error Thresholds
    298
    
    Switch Port Attribute Default Values
    299
    
    SFP Transmitter Types
    300
  - Configuring Management Interfaces
    300
  - Configuring VSAN Interfaces
    302
  - Configuring CIM
    302
    
    Added Security on a CIM Server
    302
  - Displaying Interface Information
    303
    
    Displaying TL Port Information
    312
    
    TL Port Translation Guidelines
    313
    
    Default Settings
    314
CHAPTER 12 Configuring Trunking 12-1

317
- About Trunking
  317
  - Configuring the Trunk Mode
    319
- Trunk-Allowed VSAN Configuration
  319
- Trunking Configuration Guidelines
  322
- Displaying Trunking Information
  323
- Default Settings
  324
CHAPTER 13 Configuring Portchannels13-1

326
- Portchannel Functionality
  326
- Portchannel Examples
  326
- About Portchanneling and Trunking
  328
- About Load Balancing
  328
- Portchannel Creation
  330
- Portchannel Modes
  331
- Deleting Portchannels
  332
- Interface Addition to a Portchannel
  332
  - Forcing an Interface Addition
    333
  - Compatibility Check
    334
  - Suspended and Isolated States
    334
- Deleting Interfaces from a Portchannel
  335
- Portchannel Configuration Guidelines
  335
  - Error Detection
    335
  - Valid Configurations
    336
  - Invalid Configuration Examples
    337
- Portchannel Protocol
  337
  - About Portchannel Protocols
    338
  - Channel Group Creation
    338
  - Autocreation Functionality
    339
  - Enabling and Configuring Autocreation
    340
- Portchannel Configuration Verification
  341
- Default Settings
  344
CHAPTER 14 Configuring Domain Parameters14-1

346
- About Fcdomain Phases
  346
- Domain Restart
  347
- Domain Configuration
  348
- Switch Priority
  350
- Allowed Domain ID Lists
  350
- Merged Stable Fabrics
  351
- Contiguous Domain Assignments
  351
- Fcdomain Initiation
  352
- Fabric Name
  352
  - Incoming Rcfs
    352
  - Persistent FC Ids
    353
    
    Enabling Persistent FC Ids
    354
    
    Unique Area FC Ids for some Hbas
    355
  - Persistent FC ID Selective Purging
    357
  - Displaying Fcdomain Information
    357
  - Default Settings
    360
CHAPTER 15 Scheduling Maintenance Jobs 15-1

363
- About the Command Scheduler
  363
- Scheduler Terminology
  363
- Scheduling Guidelines
  364
- Scheduler Configuration
  364
  - Command Scheduler Initialization
    365
  - Job Definition
    365
    
    Job Deletion
    366
  - Schedule Definition
    367
    
    Periodic Schedule Definition
    367
    
    One-Time Schedule Definition
    368
    
    Schedule Deletion
    368
    
    Job Disassociation
    369
    
    Schedule Time Deletion
    369
  - Execution Log
    369
    
    Clearing the Log File Contents
    369
- Scheduler Configuration Verification
  370
- Default Settings
  371
CHAPTER 16 Configuring and Managing Vsans16-1

375
- VSAN Advantages
  375
- How Vsans Work
  376
- Vsans Versus Zones
  378
- Default and Isolated Vsans
  379
  - Default VSAN
    379
  - Isolated VSAN
    379
- VSAN Attributes
  380
  - Operational State of a VSAN
    380
- VSAN Membership
  380
- Creating and Configuring Vsans Statically
  381
  - Assigning Static Port VSAN Membership
    381
  - Deleting Static Vsans
    382
  - Displaying Static VSAN Configurations
    383
  - Default Settings
    384
CHAPTER 17 Creating Dynamic Vsans17-1

386
- About DPVM
  386
- DPVM Requirements
  386
- Enabling DPVM
  386
- About DPVM Databases
  387
- Configuring Config and Pending Databases
  387
  - Activating Config Databases
    388
- About Autolearned Entries
  388
- Enabling Autolearning
  389
  - Clearing Learned Entries
    389
- Configuring DPVM Database Distribution
  389
  - Disabling DPVM Database Distribution
    390
    
    Locking the Fabric
    390
    
    Committing Changes
    390
    
    Discarding Changes
    391
    
    Clearing a Locked Session
    391
    
    Database Merge Guidelines
    391
- Copying DPVM Databases
  391
- Comparing Database Differences
  392
- Displaying DPVM Configurations
  393
- Sample DPVM Configuration
  394
  - Default Settings
    396
  - About IVR
    398
  - IVR Features
    399
CHAPTER 18 Configuring Inter-VSAN Routing18-1

399
- IVR Terminology
  399
- IVR Guidelines
  400
  - Domain ID Guidelines
    400
  - Transit VSAN Guidelines
    401
  - Border Switch Guidelines
    401
  - IVR Configuration
    401
  - Unique Domain ID Configuration Options
    402
  - Enabling IVR
    402
  - IVR Configuration Distribution
    402
    
    Database Implementation
    403
    
    Enabling Configuration Distribution
    403
    
    Locking the Fabric
    403
    
    Committing the Changes
    403
    
    Discarding the Changes
    404
    
    Clearing a Locked Session
    404
    
    About IVR NAT
    404
  - Enabling IVR NAT
    406
  - About IVR Topologies
    406
  - Configuring IVR Topologies
    406
    
    Manually Configuring the IVR Topology
    407
    
    Configuring an IVR Topology Database
    407
    
    Activating a Manually Configured IVR Topology
    408
    
    Configuring IVR Topology Automatic Mode
    409
    
    Verifying the IVR Topology
    410
  - Non-Unique VSAN Ids Using Afids
    411
  - Configuring the AFID Database
    411
    
    Verifying the AFID Database
    412
  - Adding IVR Virtual Domain
    412
    
    Verifying the IVR Virtual Domain Configuration
    413
  - Persistent FC Ids for IVR
    413
  - Configuring Persistent FC Ids for IVR
    414
    
    Clearing the IVR Fcdomain Database
    415
    
    Verifying the Persistent FC ID Configuration
    415
  - About Ivzs and Ivzss
    416
    
    Ivzs Versus Zones
    416
    
    Automatic IVZ Creation
    417
  - Configuring Ivzs and Ivzss
    418
    
    Creating and Activating Ivzs and Ivzss
    418
  - Configuring Luns in IVR Zoning
    419
  - Configuring the Qos Attribute
    420
    
    Verifying the Qos Attribute Configuration
    420
    
    Using the Force Option
    420
  - Clearing the IVZ Database
    421
  - Verifying IVZ and IVZS Configuration
    421
- About IVR Service Groups
  423
- Configuring IVR Service Groups
  423
  - Verifying IVR Service Group Configuration
    424
- IVR Interoperability
  424
- Configuring IVR Using Read-Only Zoning
  424
- Database Merge Guidelines
  425
- Configuring IVR Logging Levels
  426
  - Verifying Logging Level Configuration
    427
  - Example Configurations
    427
  - Manual Topology Configuration
    427
  - Auto-Topology Configuration
    430
  - Default Settings
    432
CHAPTER 19 Configuring and Managing Zones19-1

434
- Zoning Features
  434
- Zoning Example
  435
- Zone Implementation
  436
- Zone Configuration
  436
  - Configuring a Zone
    437
- Alias Configuration
  438
- Zone Set Creation
  439
  - Active and Full Zone Set Considerations
    440
  - Activating a Zone Set
    442
- Zone Enforcement
  442
- The Default Zone
  443
- Zone Set Distribution
  443
  - Enabling Full Zone Set Distribution
    444
  - One-Time Distribution
    444
- Recovering from Link Isolation
  445
  - Importing and Exporting Zone Sets
    446
- Zone Set Duplication
  446
  - Copying Zone Sets
    446
  - Zone Database Information
    447
  - Zone-Based Traffic Priority
    447
    
    Configuring Default Zone Qos Priority Attributes
    448
  - Configuring Broadcast Zoning
    448
  - About LUN Zoning
    449
    
    Configuring a LUN-Based Zone
    450
    
    Assigning Luns to Storage Subsystems
    450
  - About Read-Only Zones
    451
    
    Read-Only Zone Configuration Guidelines
    451
    
    Configuring Read-Only Zones
    451
  - Displaying Zone Information
    453
  - About Enhanced Zoning
    459
    
    Advantages of Enhanced Zoning
    460
    
    Changing from Basic Zoning to Enhanced Zoning
    460
    
    Changing from Enhanced Zoning to Basic Zoning
    461
    
    Enabling Enhanced Zoning
    461
    
    Modifying the Zone Database
    462
    
    Creating Attribute Groups
    462
    
    Merging the Database
    463
    
    The Merge Process
    464
    
    Default Zone Policies
    464
    
    Broadcasting a Zone
    464
    
    Displaying Enhanced Zone Information
    466
    
    Default Settings
    468
CHAPTER 20 Distributing Device Alias Services20-1

469
- About Device Aliases
  469
- Device Alias Features
  470
- Device Alias Requirements
  470
- Zone Aliases Versus Device Aliases
  470
- Modifying the Device Alias Database
  471
  - Locking the Fabric
    471
  - Committing Changes
    472
  - Discarding Changes
    472
  - Fabric Lock Override
    472
  - Device Alias Distribution
    473
  - Database Merge Guidelines
    473
- Device Alias Statistics Cleanup
  474
- FSPF Features
  480
CHAPTER 21 Configuring Fibre Channel Routing Services and Protocols21-1

480
- FSPF Examples
  480
  - Fault Tolerant Fabric
    480
  - Redundant Links
    481
  - Global FSPF Configuration
    482
  - FSPF Configuration Deletion
    483
  - FSPF Routing Protocol Usage
    483
  - Link State Record Defaults
    483
- FSPF Interface Configuration
  484
  - FSPF Link Cost
    484
  - Hello Time Intervals
    484
  - Dead Time Intervals
    484
  - Retransmitting Intervals
    485
- Configuring Fibre Channel Routes
  486
- Clearing FSPF Counters
  487
- Broadcast and Multicast Routing
  488
- In-Order Delivery
  488
  - Reordering Network Frames
    489
  - Reordering Portchannel Frames
    489
  - Enabling In-Order Delivery
    490
    
    Enabling IOD Globally
    490
    
    Enabling IOD for a VSAN
    491
  - Displaying the IOD Status
    491
  - Configuring the Drop Latency Time
    491
  - Displaying Latency Information
    492
- Flow Statistics Configuration
  493
  - Configuring Flow Statistics
    493
    
    Counting Flow Statistics
    493
    
    Clearing FIB Statistics
    494
    
    Displaying Flow Statistics
    494
  - Displaying Routing and Forwarding Information
    495
    
    Displaying Global FSPF Information
    497
    
    Displaying the FSPF Database
    498
    
    Displaying FSPF Interfaces
    499
    
    Default Settings
    499
CHAPTER 22 Managing FLOGI, Name Server, FDMI, and RSCN Databases

501
- Displaying FLOGI Details
  501
- About the Name Server Proxy Feature
  502
- Displaying FDMI
  505
- About RSCN Information
  507
  - Displaying RSCN Information
    507
  - About the Multi-Pid Option
    508
  - Suppressing Domain Format SW-Rscns
    509
  - Clearing RSCN Statistics
    509
CHAPTER 23 Discovering SCSI Targets23-1

511
- About SCSI LUN Discovery
  511
- Starting SCSI LUN Discovery
  512
- Initiating Customized Discovery
  512
CHAPTER 24 Configuring FICON24-1

518
- About FICON
  518
- FICON Requirements
  518
- MDS-Specific FICON Advantages
  519
  - Fabric Optimization with Vsans
    519
  - FCIP Support
    520
  - Portchannel Support
    520
  - Vsans for FICON and FCP Intermixing
    520
  - Cisco MDS-Supported FICON Features
    521
- FICON Port Numbering
  523
- Port Addresses
  524
- Implemented and Unimplemented Port Addresses
  524
- Installed and Uninstalled Ports
  525
- FICON Port Numbering Guidelines
  525
- FCIP and Portchannel Port Numbers
  525
- FC ID Allocation
  526
- FICON Cascading
  526
- FICON VSAN Prerequisites
  527
- Enabling FICON
  527
  - Effects of Enabling FICON
    527
- Setting up a Basic FICON Configuration
  528
- Manually Enabling FICON
  531
  - The Code-Page Option
    532
  - FICON Host Control
    533
    
    Host Moves the Switch Offline
    533
    
    Host Changes FICON Port Parameters
    533
    
    Host Controls the Time Stamp
    533
  - Time Stamp Cleanup
    534
  - FICON SNMP Control
    534
- Running Configuration Automatic Save
  535
- Binding Port Numbers to Portchannels
  536
- Binding Port Numbers to FCIP Interfaces
  536
- Configuring FICON Ports
  537
  - Port Blocking
    537
  - Port Prohibiting
    537
  - Port Address Name Assignment
    538
- FICON Configuration Files
  539
- Port Swapping
  541
  - Port Swapping Guidelines
    542
- Moving a FICON VSAN to an Offline State
  543
- Clearing FICON Device Allegiance
  543
- CUP In-Band Management
  543
  - Placing Cups in a Zone
    544
  - Displaying FICON Information
    544
    
    Receiving FICON Alerts
    544
    
    Displaying FICON Port Address Information
    545
    
    Displaying IPL File Information
    546
    
    Displaying the Configured FICON State
    548
    
    Displaying a Ports Administrative State
    549
    
    Displaying Control Unit Information
    549
    
    Displaying Buffer Information
    550
  - Fabric Binding Configuration
    553
    
    Port Security Versus Fabric Binding
    553
    
    Fabric Binding Enforcement
    554
    
    Fabric Binding Initiation
    554
    
    Switch WWN List Configuration
    555
    
    Fabric Binding Activation
    555
    
    Forcing Fabric Binding Activation
    556
    
    Saving Fabric Binding Configurations
    556
    
    Clearing the Fabric Binding Statistics
    557
    
    Deleting the Fabric Binding Database
    557
    
    Verifying Fabric Binding Configurations
    558
  - Displaying RLIR Information
    561
    
    Clearing RLIR Information
    565
  - Default Settings
    565
CHAPTER 25 Advanced Features and Concepts25-1

568
- Fibre Channel Time out Values
  568
  - Timer Configuration Across All Vsans
    568
  - Timer Configuration Per-VSAN
    568
  - Fctimer Distribution
    569
  - Committing Fctimer Changes
    569
  - Discarding Fctimer Changes
    570
- Fabric Lock Override
  570
- Database Merge Guidelines
  570
  - Displaying Configured FC Timer Values
    571
- Configuring World Wide Names
  571
  - Link Initialization WWN Usage
    572
- Configuring a Secondary MAC Address
  572
- Displaying WWN Information
  572
- FC ID Allocation for Hbas
  573
  - Default Company ID List
    573
  - Company ID Configuration Verification
    574
- Switch Interoperability
  575
  - Configuring Interoperability
    577
  - Verifying Interoperating Status
    578
  - Default Settings
    581
CHAPTER 26 Configuring Users and Common Roles26-1

585
- Role-Based Authorization
  585
  - Configuring Roles and Profiles
    586
    
    Modifying Profiles
    586
  - Configuring the VSAN Policy
    587
    
    Modifying the VSAN Policy
    588
    
    Committing the Changes
    589
    
    Discarding the Changes
    589
    
    Enabling Distribution
    589
    
    Clearing Sessions
    589
  - Displaying Role-Based Information
    590
  - Database Merge Guidelines
    590
  - Mapping of CLI Operations to SNMP
    593
- Configuring User Accounts
  594
  - Characteristics of Strong Passwords
    594
  - Creating or Updating Users
    595
  - Logging out Users
    596
  - Displaying User Account Information
    597
- Configuring SSH Services
  597
  - Enabling SSH Service
    597
  - Specifying the SSH Key
    598
  - Generating the SSH Server Key Pair
    598
    
    Overwriting a Generated Key Pair
    599
    
    Clearing SSH Hosts
    599
    
    Displaying SSH Protocol Status
    600
  - Recovering the Administrator Password
    601
    
    Using the CLI with Network-Admin Privilege
    601
    
    Power Cycling the Switch
    602
    
    Default Settings
    603
CHAPTER 27 Configuring SNMP27-1

606
- SNMP Security
  606
  - SNMP Version 1 and Version 2C
    606
  - SNMP Version 3
    606
- Snmpv3 CLI User Management and AAA Integration
  607
  - CLI and SNMP User Synchronization
    607
- Restricting Switch Access
  608
- Group-Based SNMP Access
  608
- Creating and Modifying Users
  608
  - Configuring SNMP Users from the CLI
    608
  - Enforcing Snmpv3 Message Encryption
    610
- Assigning Snmpv3 Users to Multiple Roles
  610
- AES Encryption-Based Privacy
  611
- Adding or Deleting Communities
  611
- Displaying SNMP Security Information
  617
- Default Settings
  619
CHAPTER 28 Configuring RADIUS and TACACS+28-1

622
- Switch Management Security
  622
  - CLI Security Options
    622
  - SNMP Security Options
    622
- Switch AAA Functionalities
  622
  - Authentication
    622
- Authorization
  623
- Accounting
  623
- Remote AAA Services
  624
- Remote Authentication Guidelines
  624
- Server Groups
  624
- AAA Service Configuration Options
  624
- Error-Enabled Status
  625
- Configuring RADIUS
  625
  - Setting the RADIUS Server Address
    626
  - Setting the Global Preshared Key
    626
  - Setting the RADIUS Server Timeout Interval
    627
  - Setting Iterations of the RADIUS Server
    627
  - Defining Vendor-Specific Attributes
    627
    
    VSA Format
    628
    
    Specifying Snmpv3 on AAA Servers
    628
  - Displaying RADIUS Server Details
    629
- Configuring TACACS+
  630
  - About TACACS+
    630
  - Enabling TACACS+
    630
  - Setting the TACACS+ Server Address
    630
  - Setting the Global Secret Key
    631
  - Setting the Timeout Value
    632
  - Defining Custom Attributes for Roles
    632
    
    Supported TACACS+ Servers
    633
  - Displaying TACACS+ Server Details
    633
- Configuring Server Groups
  634
- Distributing AAA Server Configuration
  635
  - Enabling the RADIUS Server Distribution
    635
  - Starting a Distribution Session on a Switch
    636
  - Displaying the Session Status
    636
  - Displaying the Configuration to be Distributed
    637
  - Committing the Distribution
    637
  - Discarding the Distribution Session
    638
  - Clearing Sessions
    638
  - Disabling AAA Authentication
    639
  - Displaying AAA Authentication
    640
- Authentication and Authorization Process
  640
  - Configuring Accounting Services
    642
    
    Displaying Accounting Configuration
    642
    
    Clearing Accounting Logs
    643
  - Configuring Cisco ACS Servers
    644
  - Default Settings
    647
CHAPTER 29 Configuring IP Access Control Lists29-1

649
- IP Access Control Lists
  649
  - IP-ACL Configuration Guidelines
    650
  - Filter Contents
    650
    
    Protocol Information
    650
    
    Address Information
    650
    
    Port Information
    651
    
    ICMP Information
    652
    
    TOS Information
    652
  - IP-ACL Creation
    653
    
    Adding Filters to an Existing IP-ACL
    654
    
    Removing Entries from an Existing IP-ACL
    654
    
    Reading the IP-ACL Log Dump
    654
  - Applying an IP-ACL to an Interface
    655
  - IP-ACL Configuration Verification
    656
  - IP-ACL Counter Cleanup
    657
CHAPTER 30 Configuring Ipsec Network Security30-1

660
- About Ipsec
  660
- About IKE
  661
- Ipsec Prerequisites
  661
- Ipsec Compatibility
  662
- Ipsec and IKE Terminology
  662
- Supported Ipsec Transforms and Algorithms
  663
- Supported IKE Transforms and Algorithms
  664
- Initializing IKE
  665
- Configuring the IKE Domain
  665
- About IKE Tunnels
  665
- IKE Policy Negotiation
  665
  - Optional Configurations
    667
- Clearing IKE Tunnels or Domains
  669
- Refreshing Sas
  669
- Configuring Ipsec
  669
  - Crypto Acls
    669
    
    Crypto ACL Guidelines
    670
    
    Mirror Image Crypto Acls
    672
    
    The any Keyword in Crypto Acls
    673
  - Transform Sets in Ipsec
    673
  - Crypto Map Entries
    675
    
    SA Establishment between Peers
    675
    
    Crypto Map Configuration Guidelines
    676
    
    SA Lifetime Negotiation
    676
    
    The Auto-Peer Option
    677
    
    Perfect Forward Secrecy
    679
  - Crypto Map Set Interface Application
    679
- Ipsec Maintenance
  680
- Global Lifetime Values
  680
- Displaying IKE Configurations
  681
- Displaying Ipsec Configurations
  682
- Sample FCIP Configuration
  687
- Sample Iscsi Configuration
  692
  - Default Settings
    694
CHAPTER 31 Configuring FC-SP and DHCHAP31-1

696
- About Fabric Authentication
  696
- About DHCHAP
  697
- Configuring DHCHAP Authentication
  697
- DHCHAP Configuration
  698
- DHCHAP Authentication Modes
  698
- DHCHAP Hash Algorithm Configuration
  700
- DHCHAP Group Configuration
  700
- DHCHAP Password Configuration
  701
  - Locally Configuring the Device Name
    702
- DHCHAP Timeout Value
  703
  - Configuring the Timeout Value
    703
- Displaying Protocol Security Information
  703
  - DHCHAP AAA Authentication
    704
  - Sample Configuration
    705
  - Default Settings
    706
CHAPTER 32 Configuring Port Security32-1

708
- Port Security Features
  708
  - Port Security Enforcement
    708
- Port Security Initiation
  708
- Port Security Manual Configuration
  709
  - WWN Identification
    709
  - Authorized Port Pair Addition
    709
- Port Security Activation
  710
  - Database Activation Rejection
    711
  - Forcing Port Security Activation
    711
  - Database Reactivation
    712
- About Auto-Learning
  713
  - Enabling Auto-Learning
    713
  - Disabling Autolearning
    713
  - Auto-Learning Device Authorization
    714
  - Authorization Scenario
    714
  - Locking the Fabric
    716
  - Committing the Changes
    716
  - Discarding the Changes
    716
- Database Interaction
  718
  - Database Scenarios
    718
- Port Security Database Copy
  719
- Port Security Database Deletion
  720
- Port Security Database Cleanup
  720
CHAPTER 33 Configuring FCIP33-1

728
- About FCIP
  728
  - FCIP and VE Ports
    728
  - FCIP Links
    729
  - FCIP Profiles
    730
  - FCIP Interfaces
    730
- Enabling FCIP
  730
- Basic FCIP Configuration
  731
  - Creating FCIP Profiles
    731
  - Creating FCIP Links
    732
    
    Minimum Retransmit Timeout
    734
    
    Keepalive Timeout
    734
    
    Maximum Retransmissions
    735
    
    Path Mtus
    735
    
    Selective Acknowledgments
    735
    
    Window Management
    735
    
    Monitoring Congestion
    736
    
    Estimating Maximum Jitter
    737
    
    Buffer Size
    737
    
    Peer IP Address
    739
    
    Special Frames
    739
  - Active Connections
    740
  - Number of TCP Connections
    740
  - Time Stamp Control
    740
  - B Port Interoperability Mode
    742
    
    Configuring B Ports
    743
  - Quality of Service
    744
- Configuring E Ports
  744
- Advanced FCIP Features
  745
  - FCIP Write Acceleration
    745
  - FCIP Tape Acceleration
    747
  - FCIP Compression
    749
- Displaying FCIP Information
  750
  - FCIP High Availability
    756
    
    Fibre Channel Portchannels
    756
    
    Fspf
    757
    
    Vrrp
    757
    
    Ethernet Portchannels
    758
    
    Default Settings
    759

Cisco MDS 9509 Director Overview (60 pages)

Brand: Cisco | Category: Switch | Size: 7.38 MB

Cisco Categories

Switch IP Phone

Network Router Wireless Access Point Conference System

More Cisco Manuals

Cisco MDS 9509 Director Manuals

Cisco MDS 9509 Director Configuration Manual (1096 pages)

Table of Contents

IP Services

Before You Begin

CHAPTER 3 Obtaining and Installing Licenses3-1

CHAPTER 4 Initial Configuration4-1

CHAPTER 5 Using the CFS Infrastructure5-1

CHAPTER 6 Software Images6-1

Working with Configuration Files

Unlocking the Startup Configuration File

CHAPTER 8 Configuring High Availability8-1

CHAPTER 9 Managing System Hardware9-1

CHAPTER 10 Managing Modules 10-1

CHAPTER 37 Configuring IP Storage 37-1

CHAPTER 11 Configuring Interfaces11-1

CHAPTER 12 Configuring Trunking 12-1

CHAPTER 13 Configuring Portchannels13-1

CHAPTER 14 Configuring Domain Parameters14-1

CHAPTER 15 Scheduling Maintenance Jobs 15-1

CHAPTER 16 Configuring and Managing Vsans16-1

CHAPTER 17 Creating Dynamic Vsans17-1

CHAPTER 18 Configuring Inter-VSAN Routing18-1

CHAPTER 19 Configuring and Managing Zones19-1

CHAPTER 20 Distributing Device Alias Services20-1

CHAPTER 21 Configuring Fibre Channel Routing Services and Protocols21-1

CHAPTER 22 Managing FLOGI, Name Server, FDMI, and RSCN Databases

CHAPTER 23 Discovering SCSI Targets23-1

CHAPTER 24 Configuring FICON24-1

CHAPTER 25 Advanced Features and Concepts25-1

CHAPTER 26 Configuring Users and Common Roles26-1

CHAPTER 27 Configuring SNMP27-1

CHAPTER 28 Configuring RADIUS and TACACS+28-1

CHAPTER 29 Configuring IP Access Control Lists29-1

CHAPTER 30 Configuring Ipsec Network Security30-1

CHAPTER 31 Configuring FC-SP and DHCHAP31-1

CHAPTER 32 Configuring Port Security32-1

CHAPTER 33 Configuring FCIP33-1

Cisco MDS 9509 Director Overview (60 pages)

Table of Contents

Chassis

Cisco Mds 9000 Series Module Compatibility

Related Products

Cisco Categories