Brocade Communications Systems 1606 Service manual

53-1001336-01
28 July 2009
Fabric OS
Administrator’s Guide
Supporting Fabric OS v6.3.0

Copyright © 2007-2009 Brocade Communications Systems, Inc. All Rights Reserved.
Brocade, the B-wing symbol, BigIron, DCX, Fabric OS, FastIron, IronPoint, IronShield, IronView, IronWare, JetCore, NetIron,
SecureIron, ServerIron, StorageX, and TurboIron are registered trademarks, and DCFM, Extraordinary Networks, and SAN Health
are trademarks of Brocade Communications Systems, Inc., in the United States and/or in other countries. All other brands,
products, or service names are or may be trademarks or service marks of, and are used to identify, products or services of their
respective owners.
Notice: This document is for informational purposes only and does not set forth any warranty, expressed or implied, concerning
any equipment, equipment feature, or service offered or to be offered by Brocade. Brocade reserves the right to make changes to
this document at any time, without notice, and assumes no responsibility for its use. This informational document describes
features that may not be currently available. Contact a Brocade sales office for information on feature and product availability.
Export of technical data contained in this document may require an export license from the United States government.
The authors and Brocade Communications Systems, Inc. shall have no liability or responsibility to any person or entity with
respect to any loss, cost, liability, or damages arising from the information contained in this book or the computer programs that
accompany it.
The product described by this document may contain “open source” software covered by the GNU General Public License or other
open source license agreements. To find out which open source software is included in Brocade products, view the licensing
terms applicable to the open source software, and obtain a copy of the programming source code, please visit
http://www.brocade.com/support/oscd.
Brocade Communications Systems, Incorporated
Document History
Corporate and Latin American Headquarters
Brocade Communications Systems, Inc.
1745 Technology Drive
San Jose, CA 95110
Tel: [phone]
Fax: [phone]
E-mail: [email protected]
Asia-Pacific Headquarters
Brocade Communications Systems China HK, Ltd.
No. 1 Guanghua Road
Chao Yang District
Units 2718 and 2818
Beijing 100020, China
Tel: [phone]
Fax: [phone]
E-mail: [e-mail]
European Headquarters
Brocade Communications Switzerland Sàrl
Centre Swissair
Tour B - 4ème étage
29, Route de l'Aéroport
Case Postale 105
CH-1215 Genève 15
Switzerland
Tel: [phone]
Fax: [phone]
E-mail: [e-mail]
Asia-Pacific Headquarters
Brocade Communications Systems Co., Ltd. (Shenzhen WFOE)
Citic Plaza
No. 233 Tian He Road North
Unit 1308 – 13th Floor
Guangzhou, China
Tel: [phone]
Fax: [phone]
E-mail: [e-mail]
Title Publication number Summary of changes Date
Fabric OS Procedures Guide 53-0000518-02 First released edition. April 2003
Fabric OS Procedures Guide 53-0000518-03 Revised for Fabric OS v4.2.0. December 2003
Fabric OS Procedures Guide 53-0000518-04 Revised to include switch-specific
information.
March 2004
Fabric OS Procedures Guide 53-0000518-05 Revised for Fabric OS v4.4.0. September 2004
Fabric OS Procedures Guide 53-0000518-06 Revised to add RADIUS and SSL
procedures.
October 2004
Fabric OS Administrator’s Guide 53-0000518-07 Revised book title. Added information
about 200E, 4012, and 48000
switches.
April 2005
Fabric OS Administrator’s Guide 53-1000043-01 Revised for Fabric OS v5.1.0. January 2006

Fabric OS Administrator’s Guide iii
53-1001336-01
Fabric OS Administrator’s Guide 53-1000043-02 Removed SilkWorm 4016 and 4020
from supported switches; FCIP chapter
updates.
June 2006
Fabric OS Administrator’s Guide 53-1000239-01 Revised for Fabric OS v5.2.0 features.
Added new hardware platforms:
Brocade FC4-48 and FC4-16IP.
September 2006
Fabric OS Administrator’s Guide 53-1000448-01 Added Fabric OS v5.3.0 features.
Added support for new hardware
platforms: Brocade 7600, FA4-18, and
FC10-6.
15 June 2007
Fabric OS Administrator’s Guide 53-1000598-01 Added Fabric OS v6.0.0 features.
Added support for new hardware
platforms: Brocade DCX Backbone,
FC8-16, FC8-32, and FC8-48.
19 October 2007
Fabric OS Administrator’s Guide 53-1000598-02 Changed “DCX” and “DCX director” to
the correct name: Brocade DCX
Backbone. Also, added the word
“director” to the 48000.
22 January 2008
Fabric OS Administrator’s Guide 53-1000598-03 Added Fabric OS v6.1.0 features.
Added support for new hardware
platforms: Brocade 5300, 5100, and
300.
12 March 2008
Fabric OS Administrator’s Guide 53-1000598-04 Updated document to streamline
content. No new hardware or Fabric
OS features.
18 July 2008
Fabric OS Administrator’s Guide 53-1001185-01 Added Fabric OS v 6.2.0 software
features and support for new
hardware platforms: Brocade DCX-4S.
24 November 2008
Fabric OS Administrator’s Guide 53-1001336-01 Added Fabric OS v6.3.0 software
features and support for new
hardware platforms.
July 2009
Title Publication number Summary of changes Date

iv Fabric OS Administrator’s Guide
53-1001336-01

Fabric OS Administrator’s Guide v
53-1001336-01
Contents
Figures
Tables
About This Document
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxxiii
How this document is organized . . . . . . . . . . . . . . . . . . . . . . . . . . xxxiii
Supported hardware and software . . . . . . . . . . . . . . . . . . . . . . . . xxxiv
What’s new in this document. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxxv
Document conventions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxxvi
Notice to the reader . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxxviii
Additional information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxxviii
Getting technical help. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxxix
Document feedback . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xl
Section I Standard Features
Chapter 1 Performing Basic Configuration Tasks
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1
Fabric OS overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1
Fabric OS command line interface . . . . . . . . . . . . . . . . . . . . . . . . . . . 2
Console sessions using the serial port. . . . . . . . . . . . . . . . . . . . . 2
Telnet or SSH sessions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
Getting help on a command . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
Password modification . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
Default account passwords. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
The Ethernet interface on your switch. . . . . . . . . . . . . . . . . . . . . . . . . 6
Virtual Fabrics and the Ethernet interface . . . . . . . . . . . . . . . . . . 6
Displaying the network interface settings . . . . . . . . . . . . . . . . . . 6
Static Ethernet addresses. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
DHCP activation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
IPv6 autoconfiguration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .10
Date and time settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
Setting the date and time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
Time zone settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .11
Network time protocol . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .13

vi Fabric OS Administrator’s Guide
53-1001336-01
Domain IDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .14
Displaying the domain IDs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
Setting the domain ID . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Switch names . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .15
Customizing the switch name . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
Chassis names . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .16
Customizing chassis names . . . . . . . . . . . . . . . . . . . . . . . . . . . .16
Switch activation and deactivation . . . . . . . . . . . . . . . . . . . . . . . . . . 16
Disabling a switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .16
Enabling a switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .17
Switch and enterprise-class platform shutdown. . . . . . . . . . . . . . . . 17
Powering off a Brocade switch . . . . . . . . . . . . . . . . . . . . . . . . . . 17
Powering off a Brocade enterprise-class platform . . . . . . . . . .17
Basic connections . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
Device connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
Switch connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .18
Chapter 2 Performing Advanced Configuration Tasks
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
PIDs and PID binding overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
Core PID addressing mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22
Fixed addressing mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22
10-bit addressing mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22
256-area addressing mode. . . . . . . . . . . . . . . . . . . . . . . . . . . . .23
WWN-based PID assignment . . . . . . . . . . . . . . . . . . . . . . . . . . .23
Ports. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .25
Setting port names . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .26
Port identification by slot and port number . . . . . . . . . . . . . . . .26
Port identification by port area ID. . . . . . . . . . . . . . . . . . . . . . . . 27
Port identification by index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
Swapping port area IDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28
Port activation and deactivation. . . . . . . . . . . . . . . . . . . . . . . . .28
Setting port speeds . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .29
Setting the same speed for all ports on the switch. . . . . . . . . .29
Blade terminology and compatibility . . . . . . . . . . . . . . . . . . . . . . . . . 30
CP blades . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .31
Core blades . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .32
Port and application blade compatibility . . . . . . . . . . . . . . . . . .32
Enabling and disabling blades . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .33
Enabling blades . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
Disabling blades. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34
Blade swapping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34
Swapping blades . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35
Swapping blades . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37
Power conservation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37
Powering off a port blade . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .38
Powering on a port blade . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38

Fabric OS Administrator’s Guide vii
53-1001336-01
Inter-chassis links . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38
Supported topologies. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .39
Gateway links . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .40
Configuring a link through a gateway . . . . . . . . . . . . . . . . . . . . . 41
Equipment status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41
Checking switch operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . .41
Verifying High Availability features (directors and
enterprise-class platforms only) . . . . . . . . . . . . . . . . . . . . . . . . .41
Verifying fabric connectivity. . . . . . . . . . . . . . . . . . . . . . . . . . . . .43
Verifying device connectivity . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43
Track and control switch changes . . . . . . . . . . . . . . . . . . . . . . . . . . .43
Enabling the track changes feature . . . . . . . . . . . . . . . . . . . . . . 44
Displaying the status of the track changes feature. . . . . . . . . .44
Viewing the switch status policy threshold values . . . . . . . . . .44
Setting the switch status policy threshold values . . . . . . . . . . . 45
Audit log configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .46
Auditable event classes. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .47
Verifying host syslog prior to configuring the audit log . . . . . . . 48
Configuring an audit log for specific event classes . . . . . . . . . .48
High availability of daemon processes . . . . . . . . . . . . . . . . . . . . . . .49
Chapter 3 Understanding Fibre Channel Services
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51
Fibre Channel services overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51
The Management Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .52
Platform services. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .52
Platform services in a Virtual Fabric. . . . . . . . . . . . . . . . . . . . . . 52
Enabling platform services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53
Disabling platform services. . . . . . . . . . . . . . . . . . . . . . . . . . . . .53
Management server database. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .53
Displaying the management server ACL . . . . . . . . . . . . . . . . . .54
Adding a member to the ACL . . . . . . . . . . . . . . . . . . . . . . . . . . . 54
Deleting a member from the ACL . . . . . . . . . . . . . . . . . . . . . . . . 55
Viewing the contents of the management server database. . .56
Clearing the management server database . . . . . . . . . . . . . . . 57
Topology discovery . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57
Displaying topology discovery status . . . . . . . . . . . . . . . . . . . . .57
Enabling topology discovery . . . . . . . . . . . . . . . . . . . . . . . . . . . .57
Disabling topology discovery. . . . . . . . . . . . . . . . . . . . . . . . . . . . 57
Chapter 4 Routing Traffic
About this chapter. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59
Routing overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .59
Path versus route selection. . . . . . . . . . . . . . . . . . . . . . . . . . . . .59
FSPF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .60
Fibre Channel NAT . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60

viii Fabric OS Administrator’s Guide
53-1001336-01
Routing policies. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .61
Displaying the current routing policy . . . . . . . . . . . . . . . . . . . . . 61
Exchange-based routing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .62
Port-based routing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .62
AP route policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .62
Routing in Virtual Fabrics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .63
Route selection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64
Dynamic load sharing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64
Static route assignment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .64
Frame order delivery . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .65
Forcing in-order frame delivery across topology changes. . . . .66
Restoring out-of-order frame delivery across topology
changes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .66
Lossless Dynamic Load Sharing on ports . . . . . . . . . . . . . . . . . . . . . 66
Configuring lossless dynamic load sharing on ports . . . . . . . . .66
Lossless dynamic load sharing in Virtual Fabrics . . . . . . . . . . .66
Frame Redirection. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67
Creating a frame redirect zone . . . . . . . . . . . . . . . . . . . . . . . . . .68
Deleting a frame redirect zone . . . . . . . . . . . . . . . . . . . . . . . . . .68
Viewing redirect zones. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 68
Chapter 5 Managing User Accounts
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69
User accounts overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .69
Role-Based Access Control (RBAC). . . . . . . . . . . . . . . . . . . . . . .70
The management channel . . . . . . . . . . . . . . . . . . . . . . . . . . . . .73
Local database user accounts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74
Default accounts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .74
Local account passwords . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75
Local account database distribution . . . . . . . . . . . . . . . . . . . . . . . . .76
Distributing the local user database . . . . . . . . . . . . . . . . . . . . .76
Accepting distribution of user databases on the local switch .76
Rejecting distributed user databases on the local switch . . . .77
Password policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .77
Password strength policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .77
Password history policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 78
Password expiration policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . .79
Account lockout policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79
The boot PROM password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81
Setting the boot PROM password for a switch with a
recovery string . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81
Setting the boot PROM password for a director with a
recovery string . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82
Setting the boot PROM password for a switch without a
recovery string . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83
Setting the boot PROM password for a director without a
recovery string . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84

Fabric OS Administrator’s Guide ix
53-1001336-01
The authentication model using RADIUS and LDAP . . . . . . . . . . . . .85
Setting the switch authentication mode . . . . . . . . . . . . . . . . . .87
Fabric OS user accounts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 87
Fabric OS users on the RADIUS server. . . . . . . . . . . . . . . . . . . .88
The RADIUS server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 91
LDAP configuration and Microsoft Active Directory . . . . . . . . . .97
Authentication servers on the switch . . . . . . . . . . . . . . . . . . . .100
Configuring local authentication as backup. . . . . . . . . . . . . . .101
Chapter 6 Configuring Standard Security Features
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .103
Security protocols . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .103
Secure Copy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .104
Setting up SCP for configUploads and downloads . . . . . . . . .105
Secure Shell protocol . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .105
SSH public key authentication . . . . . . . . . . . . . . . . . . . . . . . . .106
Secure Sockets Layer protocol. . . . . . . . . . . . . . . . . . . . . . . . . . . . .108
Browser and Java support. . . . . . . . . . . . . . . . . . . . . . . . . . . . .108
SSL configuration overview . . . . . . . . . . . . . . . . . . . . . . . . . . . .108
Certificate authorities . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .109
The browser . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .111
Root certificates for the Java Plug-in . . . . . . . . . . . . . . . . . . . .112
Simple Network Management Protocol. . . . . . . . . . . . . . . . . . . . . .113
SNMP and Virtual Fabrics . . . . . . . . . . . . . . . . . . . . . . . . . . . . .114
The security level . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .114
The snmpConfig command . . . . . . . . . . . . . . . . . . . . . . . . . . . .115
Telnet protocol. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .115
Blocking Telnet. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .115
Unblocking Telnet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .116
Listener applications. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .117
Ports and applications used by switches . . . . . . . . . . . . . . . . . . . .117
Port configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .118
Chapter 7 Configuring Advanced Security Features
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .119
ACL policies overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .119
How the ACL policies are stored . . . . . . . . . . . . . . . . . . . . . . . .119
Policy members . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .120
ACL policy management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .120
Displaying ACL policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .121
Saving changes without activating the policies . . . . . . . . . . . .121
Activating policy changes . . . . . . . . . . . . . . . . . . . . . . . . . . . . .121
Deleting an ACL policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .121
Adding a member to an existing ACL policy . . . . . . . . . . . . . . .122
Removing a member from an ACL policy . . . . . . . . . . . . . . . . .122
Aborting unsaved policy changes . . . . . . . . . . . . . . . . . . . . . . .122

xFabric OS Administrator’s Guide
53-1001336-01
FCS policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .123
FCS policy restrictions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .123
Ensuring fabric domains share policies . . . . . . . . . . . . . . . . . .124
Creating an FCS policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .124
Modifying the order of FCS switches . . . . . . . . . . . . . . . . . . . .125
FCS policy distribution . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .125
DCC policies. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .126
DCC policy restrictions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .127
Creating a DCC policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .127
Deleting a DCC policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .128
SCC policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .129
Creating an SCC policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .129
Authentication policy for fabric elements . . . . . . . . . . . . . . . . . . . .130
E_Port authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .131
Device authentication policy. . . . . . . . . . . . . . . . . . . . . . . . . . .132
AUTH policy restrictions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .133
Authentication protocols . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .133
Secret key pairs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .135
Fabric-wide distribution of the Auth policy . . . . . . . . . . . . . . . .136
IP Filter policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .137
Creating an IP Filter policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . .137
Cloning an IP Filter policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . .137
Displaying an IP Filter policy . . . . . . . . . . . . . . . . . . . . . . . . . . .137
Saving an IP Filter policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .138
Activating an IP Filter policy . . . . . . . . . . . . . . . . . . . . . . . . . . .138
Deleting an IP Filter policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . .138
IP Filter policy rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .138
IP Filter policy enforcement. . . . . . . . . . . . . . . . . . . . . . . . . . . .140
Adding a rule to an IP Filter policy . . . . . . . . . . . . . . . . . . . . . .141
Deleting a rule to an IP Filter policy . . . . . . . . . . . . . . . . . . . . .141
Aborting an IP Filter transaction . . . . . . . . . . . . . . . . . . . . . . . .141
IP Filter policy distribution . . . . . . . . . . . . . . . . . . . . . . . . . . . . .141
Policy database distribution . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .142
Database distribution settings . . . . . . . . . . . . . . . . . . . . . . . . .143
ACL policy distribution to other switches . . . . . . . . . . . . . . . . .144
Fabric-wide enforcement. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .144
Notes on joining a switch to the fabric . . . . . . . . . . . . . . . . . . .146
Management interface security . . . . . . . . . . . . . . . . . . . . . . . . . . . .148
Configuration examples. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .149
IPsec protocols. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .150
Security associations. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .151
Authentication and encryption algorithms . . . . . . . . . . . . . . . .151
IPsec policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .152
IKE policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .152
Creating the tunnel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .154
Example of an End-to-End Transport Tunnel mode. . . . . . . . .155

Fabric OS Administrator’s Guide xi
53-1001336-01
Chapter 8 Maintaining the Switch Configuration File
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .159
Configuration settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .159
Configuration file format . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .160
Configuration file backup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .162
Uploading a configuration file in interactive mode . . . . . . . . .163
Configuration file restoration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .163
Restrictions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .164
Configuration download without disabling a switch . . . . . . . .165
Configuration restoration in a FICON environment . . . . . . . . .167
Configurations across a fabric . . . . . . . . . . . . . . . . . . . . . . . . . . . . .168
Downloading a configuration file from one switch to
another same model switch . . . . . . . . . . . . . . . . . . . . . . . . . . .168
Security considerations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .169
Configuration Management for Virtual Fabrics. . . . . . . . . . . . . . . .169
Uploading a config file from a switch with Virtual Fabrics
enabled. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .169
Restoring a logical switch using configDownload . . . . . . . . . .170
Restrictions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .171
Brocade configuration form . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .171
Chapter 9 Installing and Maintaining Firmware
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .173
Firmware download process overview. . . . . . . . . . . . . . . . . . . . . . .173
Upgrading and downgrading firmware . . . . . . . . . . . . . . . . . . .174
Considerations for FICON CUP environments . . . . . . . . . . . . .175
HA sync state . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .175
Preparing for a firmware download . . . . . . . . . . . . . . . . . . . . . . . . .176
Connected switches. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .177
Finding the switch firmware version. . . . . . . . . . . . . . . . . . . . .177
Obtain and decompress firmware . . . . . . . . . . . . . . . . . . . . . .177
Firmware download on switches . . . . . . . . . . . . . . . . . . . . . . . . . . .178
Switch firmware download process overview . . . . . . . . . . . . .178
Firmware download on an enterprise-class platform . . . . . . . . . . .180
Enterprise-class platform firmware download process
overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .180
Firmware download from a USB device. . . . . . . . . . . . . . . . . . . . . .184
Enabling USB . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .184
Viewing the USB file system . . . . . . . . . . . . . . . . . . . . . . . . . . .184
Downloading from USB using the relative path . . . . . . . . . . . .184
Downloading from USB using the absolute path. . . . . . . . . . .184
SAS and SA applications. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .185
Downloading an application . . . . . . . . . . . . . . . . . . . . . . . . . . .185

xii Fabric OS Administrator’s Guide
53-1001336-01
FIPS Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .186
Public and Private Key Management . . . . . . . . . . . . . . . . . . . .186
The firmwareDownload Command . . . . . . . . . . . . . . . . . . . . . .187
Power-on Firmware Checksum Test . . . . . . . . . . . . . . . . . . . . .188
Test and restore firmware on switches . . . . . . . . . . . . . . . . . . . . . .188
Testing a different firmware version on a switch. . . . . . . . . . .188
Test and restore firmware on enterprise-class platforms . . . . . . .190
Testing different firmware versions on enterprise-class
platforms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .190
Validating a firmware download. . . . . . . . . . . . . . . . . . . . . . . . . . . .193
Chapter 10 Managing Virtual Fabrics
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .195
Virtual Fabrics overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .195
Logical switch overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .196
Default logical switch. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .196
Logical switches and fabric IDs. . . . . . . . . . . . . . . . . . . . . . . . .198
Port assignment in logical switches . . . . . . . . . . . . . . . . . . . . .198
Logical switches and connected devices . . . . . . . . . . . . . . . . .199
Logical fabric overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .200
Logical fabric and ISLs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .201
Logical fabric and ISL sharing. . . . . . . . . . . . . . . . . . . . . . . . . .202
Management model for logical switches. . . . . . . . . . . . . . . . . . . . .205
Account management and Virtual Fabrics . . . . . . . . . . . . . . . . . . .206
Supported platforms for Virtual Fabrics . . . . . . . . . . . . . . . . . . . . .206
Supported port configurations in the Brocade 5100 and
5300 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .206
Supported port configurations in the Brocade DCX and
DCX-4S . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .206
Virtual Fabrics interaction with other Fabric OS features . . . .207
Limitations and restrictions of Virtual Fabrics . . . . . . . . . . . . . . . .208
Restrictions on moving ports . . . . . . . . . . . . . . . . . . . . . . . . . .209
Enabling Virtual Fabrics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .209
Disabling Virtual Fabrics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .210
Configuring logical switches to use basic configuration values. . .211
Creating a logical switch or base switch . . . . . . . . . . . . . . . . . . . . .211
Executing a command in a different logical fabric context . . . . . .213
Deleting a logical switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .214
Adding and removing ports on a logical switch. . . . . . . . . . . . . . . .214
Displaying logical switch configuration . . . . . . . . . . . . . . . . . . . . . .215
Changing the fabric ID of a logical switch . . . . . . . . . . . . . . . . . . . .216
Changing a logical switch to a base switch . . . . . . . . . . . . . . . . . . .217
Configuring a logical switch to use XISLs . . . . . . . . . . . . . . . . . . . .218

Fabric OS Administrator’s Guide xiii
53-1001336-01
Changing the context to a different logical fabric. . . . . . . . . . . . . .219
Creating a logical fabric using XISLs . . . . . . . . . . . . . . . . . . . . . . . .219
Chapter 11 Administering Advanced Zoning
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .221
Special zones . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .221
Zoning overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .222
Zone types . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .223
Zone objects. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .224
Zone aliases . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .225
Zone configurations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .226
Zoning enforcement. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .226
Considerations for zoning architecture . . . . . . . . . . . . . . . . . .227
Best practices for zoning. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .228
Broadcast zones . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .228
Broadcast zones and Admin Domains . . . . . . . . . . . . . . . . . . .229
Broadcast zones and FC-FC routing . . . . . . . . . . . . . . . . . . . . .230
High availability considerations with broadcast zones . . . . . .230
Loop devices and broadcast zones . . . . . . . . . . . . . . . . . . . . .230
Broadcast zones and default zoning . . . . . . . . . . . . . . . . . . . .230
Zone aliases . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .231
Creating an alias . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .231
Adding members to an alias . . . . . . . . . . . . . . . . . . . . . . . . . . .231
Removing members from an alias . . . . . . . . . . . . . . . . . . . . . .232
Deleting an alias . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .232
Viewing an alias in the defined configuration . . . . . . . . . . . . .233
Zone creation and maintenance . . . . . . . . . . . . . . . . . . . . . . . . . . .233
Creating a zone . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .233
Adding devices (members) to a zone . . . . . . . . . . . . . . . . . . . .234
Removing devices (members) from a zone . . . . . . . . . . . . . . .234
Deleting a zone . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .235
Viewing a zone in the defined configuration . . . . . . . . . . . . . .235
Validating a zone . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .235
Default zoning mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .236
Setting the default zoning mode. . . . . . . . . . . . . . . . . . . . . . . .237
Viewing the current default zone access mode. . . . . . . . . . . .237
Zoning database size . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .238

xiv Fabric OS Administrator’s Guide
53-1001336-01
Zoning configurations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .238
Creating a zoning configuration . . . . . . . . . . . . . . . . . . . . . . . .238
Adding zones (members) to a zoning configuration . . . . . . . .239
Removing zones (members) from a zone configuration . . . . .239
Enabling a zone configuration. . . . . . . . . . . . . . . . . . . . . . . . . .240
Disabling a zone configuration . . . . . . . . . . . . . . . . . . . . . . . . .240
Deleting a zone configuration . . . . . . . . . . . . . . . . . . . . . . . . . .241
Clearing changes to a configuration. . . . . . . . . . . . . . . . . . . . .241
Viewing all zone configuration information . . . . . . . . . . . . . . .241
Viewing selected zone configuration information . . . . . . . . . .242
Viewing the configuration in the effective zone database . . .242
Clearing all zone configurations . . . . . . . . . . . . . . . . . . . . . . . .243
Zone object maintenance. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .243
Copying a zone object . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .243
Deleting a zone object . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .244
Renaming a zone object . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .245
Zoning configuration management . . . . . . . . . . . . . . . . . . . . . . . . .245
New switch or fabric additions . . . . . . . . . . . . . . . . . . . . . . . . .245
Fabric segmentation and zoning . . . . . . . . . . . . . . . . . . . . . . .247
Security and zoning. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .247
Zone merging scenarios . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .248
Chapter 12 Managing iSCSI Gateway Service
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .251
iSCSI gateway service overview . . . . . . . . . . . . . . . . . . . . . . . . . . . .251
iSCSI session translation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .252
Basic and advanced LUN mapping. . . . . . . . . . . . . . . . . . . . . .253
iSCSI component identification of the IQN prefix . . . . . . . . . .254
Access control with discovery domains . . . . . . . . . . . . . . . . . .255
Switch-to-iSCSI initiator authentication . . . . . . . . . . . . . . . . . .256
Load balancing through connection redirection . . . . . . . . . . .256
Supported iSCSI initiators . . . . . . . . . . . . . . . . . . . . . . . . . . . . .258
Checklist for configuring iSCSI . . . . . . . . . . . . . . . . . . . . . . . . .258
FC4-16IP blade configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . .260
FC4-16IP port numbering . . . . . . . . . . . . . . . . . . . . . . . . . . . . .260
Enabling the iSCSI gateway service . . . . . . . . . . . . . . . . . . . . .261
Enabling GbE ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .262
Configuring the GbE interface. . . . . . . . . . . . . . . . . . . . . . . . . .263
iSCSI virtual target configuration . . . . . . . . . . . . . . . . . . . . . . . . . . .264
Automatic iSCSI VT creation . . . . . . . . . . . . . . . . . . . . . . . . . . .265
Manual iSCSI VT creation . . . . . . . . . . . . . . . . . . . . . . . . . . . . .267
Displaying the iSCSI virtual target LUN map . . . . . . . . . . . . . .270
Displaying iSCSI VT state and status . . . . . . . . . . . . . . . . . . . .271
Discovery domain and domain set configuration . . . . . . . . . . . . . .271
Displaying iSCSI initiator IQNs. . . . . . . . . . . . . . . . . . . . . . . . . .272
Creating discovery domains . . . . . . . . . . . . . . . . . . . . . . . . . . .272
Creating and enabling a discovery domain set . . . . . . . . . . . .272

Fabric OS Administrator’s Guide xv
53-1001336-01
iSCSI initiator-to-VT authentication configuration. . . . . . . . . . . . . .273
Setting the user name and shared secret . . . . . . . . . . . . . . . .273
Binding user names to an iSCSI VT . . . . . . . . . . . . . . . . . . . . .273
Deleting user names from an iSCSI VT binding list . . . . . . . . .274
Displaying CHAP configurations . . . . . . . . . . . . . . . . . . . . . . . .274
Committing the iSCSI-related configuration . . . . . . . . . . . . . . . . . .274
Resolving conflicts between iSCSI configurations . . . . . . . . . . . . .275
LUN masking considerations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .276
iSCSI FC zoning overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .276
iSCSI FC zone creation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .277
Zoning configuration creation . . . . . . . . . . . . . . . . . . . . . . . . . . . . .281
Creating and enabling a zoning configuration . . . . . . . . . . . . .281
iSNS client service configuration . . . . . . . . . . . . . . . . . . . . . . . . . . .282
Displaying iSNS client service status . . . . . . . . . . . . . . . . . . . .283
Enabling the iSNS client service . . . . . . . . . . . . . . . . . . . . . . . .283
Disabling the iSNS client service . . . . . . . . . . . . . . . . . . . . . . .284
Clearing the iSNS client configuration . . . . . . . . . . . . . . . . . . .284
Chapter 13 Administering NPIV
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .285
NPIV overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .285
Fixed addressing mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .285
10-Bit addressing mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .285
Enabling and disabling NPIV . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .286
Configuring NPIV . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .286
Viewing NPIV port configuration information . . . . . . . . . . . . . . . . .287
Viewing virtual PID login information . . . . . . . . . . . . . . . . . . . .289
Chapter 14 Interoperability for Merged SANs
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .291
Interoperability overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .291
Connectivity solutions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .292
Domain ID offset modes. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .293
Configuring the Domain_ID offset . . . . . . . . . . . . . . . . . . . . . .294
McDATA Fabric mode configuration restrictions. . . . . . . . . . . . . . .294
McDATA Open Fabric mode configuration restrictions. . . . . . . . . .295
Interoperability support for logical switches . . . . . . . . . . . . . . . . . .296
Switch configurations for interoperability . . . . . . . . . . . . . . . . . . . .296
Enabling McDATA Open Fabric mode . . . . . . . . . . . . . . . . . . . .297
Enabling McDATA Fabric mode . . . . . . . . . . . . . . . . . . . . . . . . .297
Enabling Brocade Native mode . . . . . . . . . . . . . . . . . . . . . . . .298

xvi Fabric OS Administrator’s Guide
53-1001336-01
Zone management in interoperable fabrics . . . . . . . . . . . . . . . . . .299
Zoning restrictions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .299
Zone name restrictions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .300
Zoning modes. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .300
Setting the safe zone mode on a stand-alone switch . . . . . . .301
Setting the safe zone mode fabric-wide. . . . . . . . . . . . . . . . . .301
Disabling safe zone mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . .301
Effective zone configuration . . . . . . . . . . . . . . . . . . . . . . . . . . .301
Saving the effective zone configuration to the Defined
Database . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .302
Frame Redirection in interoperable fabrics . . . . . . . . . . . . . . . . . .302
Traffic Isolation zones in interoperable fabrics. . . . . . . . . . . . . . . .303
Brocade SANtegrity implementation in mixed fabric SANS . . . . . .303
Fabric OS Layer 2 Fabric Binding . . . . . . . . . . . . . . . . . . . . . . .304
E_Port authentication between Fabric OS and M-EOS switches . .304
Switch authentication policy . . . . . . . . . . . . . . . . . . . . . . . . . . .306
Dumb switch authentication . . . . . . . . . . . . . . . . . . . . . . . . . . .309
Authentication of EX_Port, VE_Port, and VEX_Port
connections . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .310
Authentication of VE_Port-to-VE_Port connections . . . . . . . . .311
Authentication of VEX_Port-to-VE_Port connections . . . . . . . .314
Authentication of VEX_Port-to-VEX_Port connections . . . . . . .315
FCR SANtegrity . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .315
Fabric Binding behavior in a mixed fabric . . . . . . . . . . . . . . . .316
Configuring the preferred domain ID and the insistent
domain ID . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .316
FICON implementation in a mixed fabric. . . . . . . . . . . . . . . . . . . . .317
Fabric OS version change restrictions in an interoperable e
nvironment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .317
Coordinated Hot Code Load . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .318
Bypassing the Coordinated HCL check on firmware
download . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .318
Coordinated HCL on switches firmware downloads . . . . . . . .319
Upgrade and downgrade considerations for HCL for
interoperability . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .319
McDATA-aware features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .319
McDATA-unaware features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .320
M-EOS feature limitations in mixed fabrics . . . . . . . . . . . . . . .322
Supported hardware in an interoperable environment . . . . . . . . .323
Supported features in an interoperable environment . . . . . . . . . .326
Unsupported features in an interoperable environment . . . . . . . .328

Fabric OS Administrator’s Guide xvii
53-1001336-01
Chapter 15 Managing Administrative Domains
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .329
Administrative Domains overview . . . . . . . . . . . . . . . . . . . . . . . . . .329
Admin Domain features. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .331
Requirements for Admin Domains . . . . . . . . . . . . . . . . . . . . . .331
Admin Domain access levels . . . . . . . . . . . . . . . . . . . . . . . . . .332
User-defined Administrative Domains . . . . . . . . . . . . . . . . . . .332
System-defined Administrative Domains . . . . . . . . . . . . . . . . .332
Admin Domains and login . . . . . . . . . . . . . . . . . . . . . . . . . . . . .334
Admin Domain member types. . . . . . . . . . . . . . . . . . . . . . . . . .335
Admin Domains and switch WWN. . . . . . . . . . . . . . . . . . . . . . .336
Admin Domain compatibility, availability, and merging . . . . .338
Admin Domain management for physical fabric administrators . .338
Setting the default zoning mode for Admin Domains . . . . . . .338
Creating an Admin Domain . . . . . . . . . . . . . . . . . . . . . . . . . . . .339
User assignments to Admin Domains . . . . . . . . . . . . . . . . . . .340
Removing an Admin Domain from a user account . . . . . . . . .342
Activating an Admin Domain . . . . . . . . . . . . . . . . . . . . . . . . . . .342
Deactivating an Admin Domain . . . . . . . . . . . . . . . . . . . . . . . .343
Adding members to an existing Admin Domain. . . . . . . . . . . .343
Removing members from an Admin Domain. . . . . . . . . . . . . .344
Renaming an Admin Domain . . . . . . . . . . . . . . . . . . . . . . . . . .344
Deleting an Admin Domain . . . . . . . . . . . . . . . . . . . . . . . . . . . .345
Deleting all user-defined Admin Domains . . . . . . . . . . . . . . . .346
Deleting all user-defined Admin Domains non-disruptively . .346
Validating an Admin Domain member list . . . . . . . . . . . . . . . .349
SAN management with Admin Domains . . . . . . . . . . . . . . . . . . . . .350
CLI commands in an AD context. . . . . . . . . . . . . . . . . . . . . . . .351
Executing a command in a different AD context . . . . . . . . . . .351
Displaying an Admin Domain configuration . . . . . . . . . . . . . . .351
Switching to a different Admin Domain context . . . . . . . . . . .352
Admin Domain interactions with other Fabric OS features. . .353
Admin Domains, zones, and zone databases . . . . . . . . . . . . .354
Admin Domains and LSAN zones . . . . . . . . . . . . . . . . . . . . . . .355
Configuration upload and download in an AD context . . . . . .356
Section II Licensed Features
Chapter 16 Administering Licensing
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .359
Licensing overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .359
The Brocade 7800 Upgrade License. . . . . . . . . . . . . . . . . . . . . . . .365
ICL licensing. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .365
ICL 16-link license . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .365
ICL 8-link license . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .365
8G licensing. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .366

xviii Fabric OS Administrator’s Guide
53-1001336-01
Slot-based licensing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .366
Upgrade/downgrade considerations . . . . . . . . . . . . . . . . . . . .366
Adding a license to a slot . . . . . . . . . . . . . . . . . . . . . . . . . . . . .366
Removing a license from a slot. . . . . . . . . . . . . . . . . . . . . . . . .367
Time-based licenses . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .367
High availability considerations . . . . . . . . . . . . . . . . . . . . . . . .367
Configupload and download considerations . . . . . . . . . . . . . .368
Expired licenses . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .368
Universal Time-based licenses. . . . . . . . . . . . . . . . . . . . . . . . . . . . .368
Universal Time-based license expiration date . . . . . . . . . . . . .368
Extending a license . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .369
Deleting a license . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .369
Date change restriction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .369
Universal Time-based license shelf life . . . . . . . . . . . . . . . . . .369
Viewing installed licenses. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .369
Activating a license . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .369
Adding a licensed feature. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .370
Removing a licensed feature . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .371
Ports on Demand . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .371
Activating Ports on Demand . . . . . . . . . . . . . . . . . . . . . . . . . . .372
Dynamic Ports on Demand . . . . . . . . . . . . . . . . . . . . . . . . . . . .373
Displaying the port license assignments . . . . . . . . . . . . . . . . .373
Enabling Dynamic Ports on Demand . . . . . . . . . . . . . . . . . . . .374
Disabling Dynamic Ports on Demand. . . . . . . . . . . . . . . . . . . .374
Reserving a port license . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .375
Releasing a port from a POD set. . . . . . . . . . . . . . . . . . . . . . . .376
Chapter 17 Administering Advanced Performance Monitoring
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .377
Advanced Performance Monitoring overview . . . . . . . . . . . . . . . . .377
Types of monitors. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .377
Virtual Fabrics considerations for Advanced Performance
Monitoring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .378
End-to-end performance monitoring . . . . . . . . . . . . . . . . . . . . . . . .378
End-to-end monitors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .379
Adding end-to-end monitors . . . . . . . . . . . . . . . . . . . . . . . . . . .380
Setting a mask for an end-to-end monitor . . . . . . . . . . . . . . . .381
Deleting end-to-end monitors . . . . . . . . . . . . . . . . . . . . . . . . . .382
Filter-based performance monitoring . . . . . . . . . . . . . . . . . . . . . . .382
Adding standard filter-based monitors. . . . . . . . . . . . . . . . . . .383
Custom filter-based monitors . . . . . . . . . . . . . . . . . . . . . . . . . .383
Adding custom filter-based monitors . . . . . . . . . . . . . . . . . . . .384
Deleting filter-based monitors. . . . . . . . . . . . . . . . . . . . . . . . . .385
ISL performance monitoring. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .385

Fabric OS Administrator’s Guide xix
53-1001336-01
Top Talker monitors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .386
Adding a Top Talker monitor on an F_Port. . . . . . . . . . . . . . . .387
Deleting a Top Talker monitor on an F_Port . . . . . . . . . . . . . .387
Displaying the top nbandwidth-using flows on an F_Port . . .387
Adding Top Talker monitors on all switches in the fabric
(fabric mode) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .388
Deleting the fabric mode Top Talker monitors . . . . . . . . . . . .388
Displaying top talking flows for a given domain ID
(fabric mode) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .388
Limitations of Top Talker monitors . . . . . . . . . . . . . . . . . . . . . .389
Trunk monitoring. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .389
Displaying monitor counters. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .390
Clearing monitor counters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .391
Saving and restoring monitor configurations . . . . . . . . . . . . . . . . .392
Performance data collection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .392
Chapter 18 Optimizing Fabric Behavior
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .393
Adaptive Networking overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . .393
Top Talkers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .394
Traffic Isolation Routing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .394
TI zone failover . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .395
FSPF routing rules and traffic isolation . . . . . . . . . . . . . . . . . .396
Traffic Isolation Routing over FC routers . . . . . . . . . . . . . . . . . . . . .398
TI within an edge fabric . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .399
TI within a backbone fabric . . . . . . . . . . . . . . . . . . . . . . . . . . . .400
Limitations of TI zones over FC routers . . . . . . . . . . . . . . . . . .401
General rules for TI zones. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .401
Supported configurations for Traffic Isolation Routing. . . . . . . . . .402
Trunking with TI zones . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .403
Limitations and restrictions of Traffic Isolation Routing. . . . . . . . .403
Admin Domain considerations for Traffic Isolation Routing. . . . . .403
Virtual Fabric considerations for Traffic Isolation Routing . . . . . . .403
Traffic Isolation Routing over FC routers with Virtual Fabrics . . . .405
Creating a TI zone . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .406
Creating a TI zone in a base fabric . . . . . . . . . . . . . . . . . . . . . .408
Modifying TI zones. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .409
Changing the state of a TI zone . . . . . . . . . . . . . . . . . . . . . . . . . . . .410
Deleting a TI zone . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .410
Displaying TI zones . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .411
Setting up TI over FCR (sample procedure). . . . . . . . . . . . . . . . . . .412

xx Fabric OS Administrator’s Guide
53-1001336-01
QoS: Ingress Rate Limiting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .415
Limiting traffic from a particular device . . . . . . . . . . . . . . . . . .415
Disabling ingress rate limiting. . . . . . . . . . . . . . . . . . . . . . . . . .415
QoS: SID/DID traffic prioritization . . . . . . . . . . . . . . . . . . . . . . . . . .416
QoS zones. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .416
QoS on E_Ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .417
QoS over FC routers. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .418
Virtual Fabric considerations for traffic prioritization . . . . . . .419
High availability considerations for traffic prioritization . . . . .420
Supported configurations for traffic prioritization . . . . . . . . . .420
Limitations and restrictions for traffic prioritization . . . . . . . .420
Setting traffic prioritization . . . . . . . . . . . . . . . . . . . . . . . . . . . .421
Setting traffic prioritization over FC routers . . . . . . . . . . . . . . .423
Bottleneck detection. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .423
Supported configurations for bottleneck detection. . . . . . . . .424
How bottlenecks are reported. . . . . . . . . . . . . . . . . . . . . . . . . .424
Which ports should have bottleneck detection . . . . . . . . . . . .424
Limitations of bottleneck detection . . . . . . . . . . . . . . . . . . . . .424
High availability considerations for bottleneck detection. . . .425
Upgrade and downgrade considerations for bottleneck
detection. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .425
Virtual Fabrics considerations for bottleneck detection . . . . .425
Access Gateway considerations for bottleneck detection . . .425
Enabling bottleneck detection on a port . . . . . . . . . . . . . . . . .425
Displaying list of ports on which bottleneck detection is
enabled. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .426
Disabling bottleneck detection on a port . . . . . . . . . . . . . . . . .426
Changing bottleneck settings on a port . . . . . . . . . . . . . . . . . .427
Displaying history of bottlenecks on a port . . . . . . . . . . . . . . .427
Chapter 19 Managing Trunking Connections
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .429
Trunking overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .429
Criteria for managing trunking connections. . . . . . . . . . . . . . .430
Supported hardware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .431
Recommendations for trunking groups. . . . . . . . . . . . . . . . . . . . . .431
Basic trunk group configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . .432
Re-initializing ports for trunking . . . . . . . . . . . . . . . . . . . . . . . .432
Enabling Trunking on a port . . . . . . . . . . . . . . . . . . . . . . . . . . .432
Enabling Trunking on a switch . . . . . . . . . . . . . . . . . . . . . . . . .432
Displaying trunking information . . . . . . . . . . . . . . . . . . . . . . . .433
Trunking over long distance fabrics. . . . . . . . . . . . . . . . . . . . . . . . .434
F_Port trunking . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .435
Prerequisites for F_Port Trunking . . . . . . . . . . . . . . . . . . . . . . .435
Enabling F_Port trunking . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .436
Disabling F_Port trunking . . . . . . . . . . . . . . . . . . . . . . . . . . . . .436
F_Port Trunking in Virtual Fabrics. . . . . . . . . . . . . . . . . . . . . . .436
F_Port trunking considerations for Virtual Fabrics . . . . . . . . .437