HP StoreFabric SN6500B Service-Handbuch

53-1002745-02

25 March 2013

Fabric OS

Administrator’s Guide

Supporting Fabric OS 7.1.0

ADX, AnyIO, Brocade, Brocade Assurance, the B-wing symbol, DCX, Fabric OS, ICX, MLX, MyBrocade, OpenScript, VCS, VDX, and

Vyatta are registered trademarks, and HyperEdge, The Effortless Network, and The On-Demand Data Center are trademarks of

Brocade Communications Systems, Inc., in the United States and/or in other countries. Other brands, products, or service names

mentioned may be trademarks of their respective owners.

Notice: This document is for informational purposes only and does not set forth any warranty, expressed or implied, concerning

any equipment, equipment feature, or service offered or to be offered by Brocade. Brocade reserves the right to make changes to

this document at any time, without notice, and assumes no responsibility for its use. This informational document describes

features that may not be currently available. Contact a Brocade sales office for information on feature and product availability.

Export of technical data contained in this document may require an export license from the United States government.

The authors and Brocade Communications Systems, Inc. shall have no liability or responsibility to any person or entity with

respect to any loss, cost, liability, or damages arising from the information contained in this book or the computer programs that

accompany it.

The product described by this document may contain “open source” software covered by the GNU General Public License or other

open source license agreements. To find out which open source software is included in Brocade products, view the licensing

terms applicable to the open source software, and obtain a copy of the programming source code, please visit

http://www.brocade.com/support/oscd.

Brocade Communications Systems, Incorporated

Document History

Corporate and Latin American Headquarters

Brocade Communications Systems, Inc.

130 Holger Way

San Jose, CA 95134

Tel: 1-408-333-8000

Fax: 1-408-333-8101

E-mail: info@brocade.com

Asia-Pacific Headquarters

Brocade Communications Systems China HK, Ltd.

No. 1 Guanghua Road

Chao Yang District

Units 2718 and 2818

Beijing 100020, China

Tel: +8610 6588 8888

Fax: +8610 6588 9999

E-mail: china-info@brocade.com

European Headquarters

Brocade Communications Switzerland Sàrl

Centre Swissair

Tour B - 4ème étage

29, Route de l'Aéroport

Case Postale 105

CH-1215 Genève 15

Switzerland

Tel: +41 22 799 5640

Fax: +41 22 799 5641

E-mail: emea-info@brocade.com

Asia-Pacific Headquarters

Brocade Communications Systems Co., Ltd. (Shenzhen WFOE)

Citic Plaza

No. 233 Tian He Road North

Unit 1308 – 13th Floor

Guangzhou, China

Tel: +8620 3891 2000

Fax: +8620 3891 2111

E-mail: china-info@brocade.com

Title Publication number Summary of changes Date

Fabric OS Administrator’s Guide 53-1002745-01 Added Fabric OS v7.1.0 software features

and support for new hardware platforms:

Brocade 5430 and 6520.

December 2012

Fabric OS Administrator’s Guide 53-1002745-02 Corrected errors and omissions in the guide. March 2013

Fabric OS Administrator’s Guide 3

53-1002745-02

Contents (High Level)

Section I Standard Features

Chapter 1 Understanding Fibre Channel Services . . . . . . . . . . . . . . . . . . . . . . . . . 43

Chapter 2 Performing Basic Configuration Tasks . . . . . . . . . . . . . . . . . . . . . . . . . . 55

Chapter 3 Performing Advanced Configuration Tasks . . . . . . . . . . . . . . . . . . . . . .79

Chapter 4 Routing Traffic . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .111

Chapter 5 Managing User Accounts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .133

Chapter 6 Configuring Protocols. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 177

Chapter 7 Configuring Security Policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .195

Chapter 8 Maintaining the Switch Configuration File . . . . . . . . . . . . . . . . . . . . . . 241

Chapter 9 Installing and Maintaining Firmware . . . . . . . . . . . . . . . . . . . . . . . . . .255

Chapter 10 Managing Virtual Fabrics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .275

Chapter 11 Administering Advanced Zoning. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .303

Chapter 12 Traffic Isolation Zoning. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .345

Chapter 13 Bottleneck Detection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .375

Chapter 14 In-flight Encryption and Compression . . . . . . . . . . . . . . . . . . . . . . . . .393

Chapter 15 NPIV . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .419

Chapter 16 Dynamic Fabric Provisioning: Fabric-Assigned PWWN. . . . . . . . . . . . .425

Chapter 17 Managing Administrative Domains . . . . . . . . . . . . . . . . . . . . . . . . . . .433

Section II Licensed Features

Chapter 18 Administering Licensing. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .463

Chapter 19 Inter-chassis Links . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .491

Chapter 20 Monitoring Fabric Performance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .499

Chapter 21 Optimizing Fabric Behavior . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 517

Chapter 22 Managing Trunking Connections . . . . . . . . . . . . . . . . . . . . . . . . . . . . .533

Chapter 23 Managing Long-Distance Fabrics . . . . . . . . . . . . . . . . . . . . . . . . . . . .551

Chapter 24 Using FC-FC Routing to Connect Fabrics . . . . . . . . . . . . . . . . . . . . . . .569

4Fabric OS Administrator’s Guide

53-1002745-02

Appendix A Port Indexing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .611

Appendix B FIPS Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .615

Appendix C Hexadecimal Conversion . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .627

Fabric OS Administrator’s Guide 5

53-1002745-02

Contents

About This Document

How this document is organized . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33

Supported hardware and software . . . . . . . . . . . . . . . . . . . . . . . . . . 34

What’s new in this document. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35

Document conventions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36

Notice to the reader . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37

Additional information. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38

Getting technical help. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38

Document feedback . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40

Section I Standard Features

Chapter 1 Understanding Fibre Channel Services

Fibre Channel services overview . . . . . . . . . . . . . . . . . . . . . . . . . . . .43

Management server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .44

Platform services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44

Platform services and Virtual Fabrics. . . . . . . . . . . . . . . . . . . . .45

Enabling platform services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45

Disabling platform services. . . . . . . . . . . . . . . . . . . . . . . . . . . . .45

Management server database. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45

Displaying the management server ACL. . . . . . . . . . . . . . . . . . . 46

Adding a member to the ACL. . . . . . . . . . . . . . . . . . . . . . . . . . . . 46

Deleting a member from the ACL . . . . . . . . . . . . . . . . . . . . . . . . 47

Viewing the contents of the management server database . . . 48

Clearing the management server database . . . . . . . . . . . . . . . 49

Topology discovery . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49

Displaying topology discovery status . . . . . . . . . . . . . . . . . . . . . 49

Enabling topology discovery . . . . . . . . . . . . . . . . . . . . . . . . . . . .49

Disabling topology discovery . . . . . . . . . . . . . . . . . . . . . . . . . . . .50

Device login . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51

Principal switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51

E_Port login process . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51

Fabric login process . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .52

Port login process . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .52

RSCNs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .52

Duplicate Port World Wide Name . . . . . . . . . . . . . . . . . . . . . . . . 53

High availability of daemon processes . . . . . . . . . . . . . . . . . . . . . . .53

6Fabric OS Administrator’s Guide

53-1002745-02

Chapter 2 Performing Basic Configuration Tasks

Fabric OS overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .55

Fabric OS command line interface. . . . . . . . . . . . . . . . . . . . . . . . . . . 56

Console sessions using the serial port. . . . . . . . . . . . . . . . . . . . 56

Telnet or SSH sessions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57

Getting help on a command . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58

Viewing a history of command line entries . . . . . . . . . . . . . . . .59

Password modification . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61

Default account passwords. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61

The switch Ethernet interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .62

Virtual Fabrics and the Ethernet interface. . . . . . . . . . . . . . . . .63

Displaying the network interface settings . . . . . . . . . . . . . . . . .63

Static Ethernet addresses. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .64

DHCP activation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 66

IPv6 autoconfiguration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .68

Date and time settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69

Setting the date and time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .69

Time zone settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .69

Network time protocol . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71

Domain IDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .72

Displaying the domain IDs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73

Setting the domain ID . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74

Switch names . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74

Customizing the switch name . . . . . . . . . . . . . . . . . . . . . . . . . . . 74

Chassis names . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75

Customizing chassis names . . . . . . . . . . . . . . . . . . . . . . . . . . . .75

Fabric name. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75

Configuring the fabric name . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75

High availability considerations for fabric names . . . . . . . . . . . 76

Upgrade and downgrade considerations for fabric names. . . . 76

Config file upload and download considerations for fabric

names. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 76

Switch activation and deactivation . . . . . . . . . . . . . . . . . . . . . . . . . . 76

Disabling a switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 76

Enabling a switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 76

Switch and Backbone shutdown . . . . . . . . . . . . . . . . . . . . . . . . . . . . 76

Powering off a Brocade switch . . . . . . . . . . . . . . . . . . . . . . . . . . 77

Powering off a Brocade Backbone . . . . . . . . . . . . . . . . . . . . . . . 77

Basic connections . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 78

Device connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .78

Switch connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .78

Fabric OS Administrator’s Guide 7

53-1002745-02

Chapter 3 Performing Advanced Configuration Tasks

Port Identifiers (PIDs) and PID binding overview . . . . . . . . . . . . . . . 79

Core PID addressing mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80

Fixed addressing mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80

10-bit addressing mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80

256-area addressing mode. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81

WWN-based PID assignment . . . . . . . . . . . . . . . . . . . . . . . . . . . 82

Ports. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84

Port Types . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .84

Backbone port blades . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84

Configuring two Ethernet ports on one CP8 blade . . . . . . . . . . 85

Setting port names . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .86

Port identification by slot and port number . . . . . . . . . . . . . . . . 87

Port identification by port area ID. . . . . . . . . . . . . . . . . . . . . . . . 87

Port identification by index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 87

Configuring a device-switch connection. . . . . . . . . . . . . . . . . . . 88

Swapping port area IDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 88

Port activation and deactivation. . . . . . . . . . . . . . . . . . . . . . . . . 89

Port decommissioning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 90

Setting port modes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 90

Setting port speeds . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .92

Setting all ports on a switch to the same speed . . . . . . . . . . . .92

Setting port speed for a port octet . . . . . . . . . . . . . . . . . . . . . . . 93

Blade terminology and compatibility . . . . . . . . . . . . . . . . . . . . . . . . .93

CP blades . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 95

Core blades . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 95

Port and application blade compatibility . . . . . . . . . . . . . . . . . .96

FX8-24 compatibility notes . . . . . . . . . . . . . . . . . . . . . . . . . . . . .96

Enabling and disabling blades . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 96

Enabling blades . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97

Disabling blades. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97

Blade swapping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97

How blades are swapped . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .98

Swapping blades . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .100

Enabling and disabling switches . . . . . . . . . . . . . . . . . . . . . . . . . . .100

Power management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .101

Powering off a port blade . . . . . . . . . . . . . . . . . . . . . . . . . . . . .102

Powering on a port blade . . . . . . . . . . . . . . . . . . . . . . . . . . . . .102

Equipment status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .102

Checking switch operation . . . . . . . . . . . . . . . . . . . . . . . . . . . .102

Verifying High Availability features (Backbones only) . . . . . . .103

Verifying fabric connectivity. . . . . . . . . . . . . . . . . . . . . . . . . . . .103

Verifying device connectivity . . . . . . . . . . . . . . . . . . . . . . . . . . .104

Track and control switch changes . . . . . . . . . . . . . . . . . . . . . . . . . .104

Enabling the track changes feature . . . . . . . . . . . . . . . . . . . . .104

Displaying the status of the track changes feature. . . . . . . . .105

Viewing the switch status policy threshold values. . . . . . . . . .105

Setting the switch status policy threshold values . . . . . . . . . .106

8Fabric OS Administrator’s Guide

53-1002745-02

Audit log configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .107

Verifying host syslog prior to configuring the audit log . . . . . .108

Configuring an audit log for specific event classes . . . . . . . . .108

Duplicate PWWN handling during device login . . . . . . . . . . . . . . . .109

Setting the behavior for handling duplicate PWWNs. . . . . . . .110

Chapter 4 Routing Traffic

Routing overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .111

Paths and route selection . . . . . . . . . . . . . . . . . . . . . . . . . . . . .112

FSPF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .112

Fibre Channel NAT . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .113

Inter-switch links . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .114

Buffer credits . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .115

Congestions versus over-subscription . . . . . . . . . . . . . . . . . . .115

Virtual channels . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .115

Gateway links. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 117

Configuring a link through a gateway . . . . . . . . . . . . . . . . . . . .118

Routing policies. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .118

Displaying the current routing policy . . . . . . . . . . . . . . . . . . . .119

Port-based routing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .119

Exchange-based routing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .119

Device-based routing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .120

AP route policies. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .120

Route selection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .122

Dynamic Load Sharing. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .122

Frame order delivery . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .123

Forcing in-order frame delivery across topology changes. . . .123

Restoring out-of-order frame delivery across topology

changes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .123

Using Frame Viewer to understand why frames are dropped.124

Lossless Dynamic Load Sharing on ports . . . . . . . . . . . . . . . . . . . .125

Lossless core . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .126

Configuring Lossless Dynamic Load Sharing. . . . . . . . . . . . . .127

Lossless Dynamic Load Sharing in Virtual Fabrics . . . . . . . . .127

Enabling forward error correction (FEC) . . . . . . . . . . . . . . . . . . . . .128

Limitations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .128

Frame Redirection. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .130

Creating a frame redirect zone . . . . . . . . . . . . . . . . . . . . . . . . .130

Deleting a frame redirect zone . . . . . . . . . . . . . . . . . . . . . . . . .131

Viewing frame redirect zones . . . . . . . . . . . . . . . . . . . . . . . . . .131

Chapter 5 Managing User Accounts

User accounts overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .133

Role-Based Access Control . . . . . . . . . . . . . . . . . . . . . . . . . . . .134

The management channel . . . . . . . . . . . . . . . . . . . . . . . . . . . .136

Managing user-defined roles . . . . . . . . . . . . . . . . . . . . . . . . . .136

Fabric OS Administrator’s Guide 9

53-1002745-02

Local database user accounts . . . . . . . . . . . . . . . . . . . . . . . . . . . . .137

Default accounts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .138

Local account passwords . . . . . . . . . . . . . . . . . . . . . . . . . . . . .139

Local user account database distribution. . . . . . . . . . . . . . . . . . . .140

Distributing the local user database . . . . . . . . . . . . . . . . . . . .140

Accepting distributed user databases on the local switch . . .140

Rejecting distributed user databases on the local switch . . . 141

Password policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 141

Password strength policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 141

Password history policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .142

Password expiration policy . . . . . . . . . . . . . . . . . . . . . . . . . . . .143

Account lockout policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .143

The boot PROM password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .145

Setting the boot PROM password for a switch with a

recovery string . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .145

Setting the boot PROM password for a Backbone with a

recovery string . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .146

Setting the boot PROM password for a switch without a

recovery string . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 147

Setting the boot PROM password for a Backbone without

a recovery string. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .148

Remote authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .149

Remote Authentication Configuration . . . . . . . . . . . . . . . . . . .149

Setting the switch authentication mode . . . . . . . . . . . . . . . . .152

Fabric OS user accounts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .152

Fabric OS users on the RADIUS server. . . . . . . . . . . . . . . . . . .154

Setting up a RADIUS server. . . . . . . . . . . . . . . . . . . . . . . . . . . .156

LDAP configuration and Microsoft Active Directory . . . . . . . . .162

LDAP configuration and OpenLDAP . . . . . . . . . . . . . . . . . . . . .165

TACACS+ service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 171

Remote authentication configuration on the switch . . . . . . . . 174

Configuring local authentication as backup. . . . . . . . . . . . . . . 176

Chapter 6 Configuring Protocols

Security protocols . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 177

Secure Copy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .178

Setting up SCP for configuration uploads and downloads . . .179

Secure Shell protocol . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .179

SSH public key authentication . . . . . . . . . . . . . . . . . . . . . . . . .180

Secure Sockets Layer protocol . . . . . . . . . . . . . . . . . . . . . . . . . . . .182

Browser and Java support. . . . . . . . . . . . . . . . . . . . . . . . . . . . .182

SSL configuration overview . . . . . . . . . . . . . . . . . . . . . . . . . . . .183

The browser . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .186

Root certificates for the Java plugin . . . . . . . . . . . . . . . . . . . . .187

Simple Network Management Protocol . . . . . . . . . . . . . . . . . . . . . .188

SNMP and Virtual Fabrics . . . . . . . . . . . . . . . . . . . . . . . . . . . . .189

SNMP security levels . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .190

SNMP configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .190

10 Fabric OS Administrator’s Guide

53-1002745-02

Telnet protocol. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .190

Blocking Telnet. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .190

Unblocking Telnet. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .191

Listener applications. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .192

Ports and applications used by switches . . . . . . . . . . . . . . . . . . . .192

Port configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .193

Chapter 7 Configuring Security Policies

ACL policies overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .195

How the ACL policies are stored . . . . . . . . . . . . . . . . . . . . . . . .195

Policy members . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .196

ACL policy management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .196

Displaying ACL policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .197

Saving changes without activating the policies . . . . . . . . . . . .197

Activating ACL policy changes . . . . . . . . . . . . . . . . . . . . . . . . . .197

Deleting an ACL policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .197

Adding a member to an existing ACL policy . . . . . . . . . . . . . . .198

Removing a member from an ACL policy . . . . . . . . . . . . . . . . .198

Abandoning unsaved ACL policy changes . . . . . . . . . . . . . . . .198

FCS policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .199

FCS policy restrictions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .199

Ensuring fabric domains share policies . . . . . . . . . . . . . . . . . .200

Creating an FCS policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .201

Modifying the order of FCS switches . . . . . . . . . . . . . . . . . . . .201

FCS policy distribution . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .202

Device Connection Control policies . . . . . . . . . . . . . . . . . . . . . . . . .203

DCC policy restrictions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .203

Creating a DCC policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .204

Deleting a DCC policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .205

DCC policy behavior with Fabric-Assigned PWWNs . . . . . . . . .205

SCC Policies. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .206

Creating an SCC policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .207

Authentication policy for fabric elements . . . . . . . . . . . . . . . . . . . .207

E_Port authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .208

Device authentication policy . . . . . . . . . . . . . . . . . . . . . . . . . . .210

AUTH policy restrictions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .211

Authentication protocols . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .212

Secret key pairs for DH-CHAP . . . . . . . . . . . . . . . . . . . . . . . . . .213

FCAP configuration overview. . . . . . . . . . . . . . . . . . . . . . . . . . .215

Fabric-wide distribution of the authorization policy. . . . . . . . .217

Andere Handbücher für StoreFabric SN6500B

Dieses Handbuch passt für folgende Modelle

Inhaltsverzeichnis

Andere HP Software Handbücher

HP StorageWorks 2/140 - Director Switch Bedienungsanleitung

HP BB118BV - StorageWorks Data Protector Express... Betriebsanleitung

HP 500 G2 Sicherheitsleitfaden

HP T5135 - Compaq Thin Client Bedienungsanleitung

HP J3111A - JetDirect 600N Network Card Bedienungsanleitung

HP Integrity BL860c Bedienungsanleitung

HP StorageWorks 2/32 - SAN Switch Bedienungsanleitung

HP PROLIANT 56976839 Anleitung zur Verwendung

HP 418800-B21 - StorageWorks Modular Smart Array 70 Storage... Installationshandbuch

HP PROCURVE 2520 Bedienungsanleitung

HP xw3400 - Workstation Bedienungsanleitung

HP Xw460c - ProLiant - Blade Workstation Bedienungsanleitung

HP SN6000B Bedienungsanleitung

HP BL680c - ProLiant - G5 Bedienungsanleitung

HP T1936AA - Digital Sending Software Gebrauchs- und Pflegehandbuch

HP 742n - Pavilion - 512 MB RAM Montage- und Bedienungsanleitung

HP Data Protector A.06.11 Kurzanleitung zur Einrichtung

HP AJ878A - StorageWorks 320 GB Hard Drive Bedienungsanleitung

HP ProLiant BL280c G6 Bedienungsanleitung

HP BladeSystem Dual NC370i - Multifunction Network... Bedienungsanleitung

HP HPE XP P9500 Bedienungsanleitung

HP ProCurve J8766A Bedienungsanleitung

HP NAS 1200s Bedienungsanleitung

HP B6960-96035 Bedienungsanleitung

Beliebte Software Handbücher anderer Marken

COMPRO

COMPRO COMPROFM Bedienungsanleitung

Muratec

Muratec OFFICEBRIDGE ONLINE Bedienungsanleitung

Oracle

Oracle Contact Center Anywhere 8.1 Bedienungsanleitung

Adobe

Adobe 65007312 - Photoshop Lightroom Handbuch

Avaya

Avaya NULL One-X for RIM Blackberry Bedienungsanleitung

PS Audio

PS Audio PowerPlay Betriebsanleitung

Brady

Brady LOCKOUT PRO 3.0 Service-Handbuch

Avaya

Avaya Interaction Center Bedienungsanleitung

Texas Instruments

Texas Instruments TI-83 Plus Silver Edition Handbuch

Novell

Novell GROUPWISE 8 - INTERNET AGENT Bedienungsanleitung

Oracle

Oracle Application 9i Bedienungsanleitung

Acer

Acer RDM Bedienungsanleitung

Canon

Canon Vixia HF21 Bedienungsanleitung

Canon

Canon ZR950 Bedienungsanleitung

Samsung

Samsung Auto Backup Bedienungsanleitung

Polycom

Polycom Vortex EF2201 Montage- und Bedienungsanleitung

Brocade Communications Systems

Brocade Communications Systems Brocade 8/12c Bedienungsanleitung

Novell

Novell SP2 - S Bedienungsanleitung