Brocade Communications Systems A7533A - Brocade 4Gb SAN Switch Base Service manual

53-1000603-01
19 October 2007
iSCSI Gateway Service
Administrator’s Guide
Supporting Fabric OS v6.0.0

Copyright © 2007 Brocade Communications Systems, Inc. All Rights Reserved.
Brocade, the Brocade B weave logo, Fabric OS, File Lifecycle Manager, MyView, Secure Fabric OS, SilkWorm, and StorageX are
registered trademarks and the Brocade B wing logo and Tapestry are trademarks of Brocade Communications Systems, Inc., in
the United States and/or in other countries. FICON is a registered trademark of IBM Corporation in the U.S. and other countries.
All other brands, products, or service names are or may be trademarks or service marks of, and are used to identify, products or
services of their respective owners.
Notice: This document is for informational purposes only and does not set forth any warranty, expressed or implied, concerning
any equipment, equipment feature, or service offered or to be offered by Brocade. Brocade reserves the right to make changes to
this document at any time, without notice, and assumes no responsibility for its use. This informational document describes
features that may not be currently available. Contact a Brocade sales office for information on feature and product availability.
Export of technical data contained in this document may require an export license from the United States government.
The authors and Brocade Communications Systems, Inc. shall have no liability or responsibility to any person or entity with
respect to any loss, cost, liability, or damages arising from the information contained in this book or the computer programs that
accompany it.
The product described by this document may contain “open source” software covered by the GNU General Public License or other
open source license agreements. To find-out which open source software is included in Brocade products, view the licensing
terms applicable to the open source software, and obtain a copy of the programming source code, please visit http://
www.brocade.com/support/oscd.
Brocade Communications Systems, Incorporated
Document History
The following table lists all versions of the iSCSI Gateway Service Administrator’s Guide.
Corporate Headquarters
Brocade Communications Systems, Inc.
1745 Technology Drive
San Jose, CA 95110
Tel: [phone]
Fax: [phone]
Email: [e-mail]
Asia-Pacific Headquarters
Brocade Communications Singapore Pte. Ltd.
9 Raffles Place
#59-02 Republic Plaza 1
Singapore 048619
Tel: [phone]
Fax: [phone]
Email: [email protected]
European and Latin American Headquarters
Brocade Communications Switzerland Sàrl
Centre Swissair
Tour A - 2ème étage
29, Route de l'Aéroport
Case Postale 105
CH-1215 Genève 15
Switzerland
Tel: [phone]
Fax: [phone]
Email: [email protected]
Document Title Publication
Number Summary of Changes Publication Date
iSCSI Gateway Service
Administrator’s Guide
53-1000412-01 First version October 2006
iSCSI Gateway Service
Administrator’s Guide
53-1000440-01 Second version June 2007
iSCSI Gateway Service
Administrator’s Guide
53-1000603-01 Third version October 2007

iSCSI Gateway Service Administrator’s Guide iii
53-1000603-01
Contents
About This Document
Supported hardware and software . . . . . . . . . . . . . . . . . . . . . . . . . . vii
How this document is organized . . . . . . . . . . . . . . . . . . . . . . . . . . . . vii
Document conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . viii
Text formatting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . viii
Notes, cautions, and warnings . . . . . . . . . . . . . . . . . . . . . . . . . . viii
Key terms. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ix
Additional information. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xi
Brocade resources. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xi
Other industry resources. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xii
Optional Brocade features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xii
Getting technical help. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xii
Document feedback . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xiii
Chapter 1 Introduction to the iSCSI Gateway Service
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1
Supported iSCSI initiators . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1
Overview of iSCSI gateway service. . . . . . . . . . . . . . . . . . . . . . . . . . . . 2
How iSCSI sessions are translated . . . . . . . . . . . . . . . . . . . . . . . . 3
Presenting FC targets as iSCSI virtual targets . . . . . . . . . . . . . . . 4
Identifying iSCSI components . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
Controlling access to the iSCSI VT . . . . . . . . . . . . . . . . . . . . . . . . 6
Switch-to-iSCSI initiator authentication . . . . . . . . . . . . . . . . . . . . 7
Load balancing through connection redirection . . . . . . . . . . . . . 7
Checklist for configuring iSCSI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
Chapter 2 Configuring the FC4-16IP Blade
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
FC4-16IP port numbering . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .12
Enabling the iSCSI gateway service . . . . . . . . . . . . . . . . . . . . . . . . . .13
Enabling the GbE interface. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13

iv iSCSI Gateway Service Administrator’s Guide
53-1000603-01
Configuring the GbE interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Assigning an IP address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Adding static IP routes (optional) . . . . . . . . . . . . . . . . . . . . . . . . 16
Verifying the network connection . . . . . . . . . . . . . . . . . . . . . . . . 16
Adding ARP entries (optional) . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
Chapter 3 Configuring iSCSI Virtual Targets
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
Changing and displaying the IQN Prefix. . . . . . . . . . . . . . . . . . . . . . . 19
Mapping FC targets to iSCSI VTs . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
Automatically creating iSCSI Virtual targets. . . . . . . . . . . . . . . .20
Creating iSCSI VTs manually . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
Displaying the iSCSI VT . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
Displaying LUN map configurations . . . . . . . . . . . . . . . . . . . . . . 27
Displaying iSCSI VT state and status . . . . . . . . . . . . . . . . . . . . . 28
Configuring discovery domains . . . . . . . . . . . . . . . . . . . . . . . . . . . . .28
Showing iSCSI initiator IQNs . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
Creating discovery domains . . . . . . . . . . . . . . . . . . . . . . . . . . . .29
Configuring discovery domain sets . . . . . . . . . . . . . . . . . . . . . . . . . . 30
Creating a DDSet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30
Enabling a DDSet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30
Configuring iSCSI initiator-to-VT authentication . . . . . . . . . . . . . . . . 31
Setting the user name and shared secret . . . . . . . . . . . . . . . . . 31
Configuring iSCSI VT authentication. . . . . . . . . . . . . . . . . . . . . . 31
Binding user names to an iSCSI VT . . . . . . . . . . . . . . . . . . . . . . 32
Deleting user names from an iSCSI VT binding list . . . . . . . . . . 32
Displaying CHAP configurations . . . . . . . . . . . . . . . . . . . . . . . . . 33
Committing the iSCSI-related configuration . . . . . . . . . . . . . . . . . . .33
Displaying current transactions . . . . . . . . . . . . . . . . . . . . . . . . .33
Saving current transactions . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34
Resolving conflicts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34
Enabling/disabling connection redirection for load balancing . . . .35
LUN masking considerations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36
Chapter 4 Creating the iSCSI FC Zone
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37
Overview of iSCSI FC zoning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37

iSCSI Gateway Service Administrator’s Guide v
53-1000603-01
Creating an iSCSI FC zone . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .39
Creating a zoning configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . .43
Chapter 5 Administering the iSNS Client
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45
Overview of iSNS configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . .46
Displaying iSNS service status. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46
Enabling the iSNS client service . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47
Disabling the iSNS client service . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48
Clearing the iSNS client configuration. . . . . . . . . . . . . . . . . . . . . . . . 48
Appendix A Scalability Guidelines
Appendix B Troubleshooting
Index

vi iSCSI Gateway Service Administrator’s Guide
53-1000603-01

iSCSI Gateway Service Administrator’s Guide vii
53-1000603-01
About This Document
This document is a procedural guide to help SAN administrators configure and manage the iSCSI
gateway service on the FC4-16IP blade in a Brocade 48000 director.
Supported hardware and software
This document is specific to Fabric OS v6.0.0 or higher running on the Brocade 48000 director with
an FC4-16IP blade installed.
In those instances in which procedures or parts of procedures documented here apply to some
switches but not to others, this guide identifies which switches are supported and which are not.
This document sometimes mentions other Fabric OS releases to highlight the changes in the latest
release or to point out interoperability issues with other Brocade models. It also specifies when
procedures or steps of procedures apply only to specific Brocade models.
Although many different software and hardware configurations are tested and supported by
Brocade Communications Systems, Inc. for this Brocade Fabric OS release, documenting all
possible configurations and scenarios is beyond the scope of this document.
How this document is organized
The document contains the following topics:
•Chapter 1, “Introduction to the iSCSI Gateway Service” describes the iSCSI gateway service
supported on the Brocade 48000 director running Fabric OS v6.0.0 or higher with one or more
iSCSI-enabled FC4-16IP blades.
•Chapter 2, “Configuring the FC4-16IP Blade” provides the initial setup steps to deploy an iSCSI
gateway solution.
•Chapter 3, “Configuring iSCSI Virtual Targets” describes how to create iSCSI virtual targets,
discovery domains, discovery domain sets, and how to configure iSCSI VT-iSCSI initiator
authentication.
•Chapter 4, “Creating the iSCSI FC Zone” describes how to create an iSCSI zone for discovery
domains.
•Chapter 5, “Administering the iSNS Client” describes how to enable the iSNS client on an iSCSI
gateway and configure it with an iSNS server.
The appendices provide scalability guidelines and troubleshooting assistance.

viii iSCSI Gateway Service Administrator’s Guide
53-1000603-01
Document conventions
This section describes text formatting conventions and important notices formats.
Text formatting
The narrative-text formatting conventions that are used in this document are as follows:
bold text Identifies command names
Identifies the names of user-manipulated GUI elements
Identifies keywords and operands
Identifies text to enter at the GUI or CLI
italic text Provides emphasis
Identifies variables
Identifies paths and Internet addresses
Identifies document titles
code text Identifies CLI output
Identifies syntax examples
For readability, command names in the narrative portions of this guide are presented in mixed
lettercase: for example, switchShow. In actual examples, command lettercase is often all
lowercase. Otherwise, this manual specifically notes those cases in which a command is case
sensitive. The ficonCupSet and ficonCupShow commands are an exception to this convention.
Notes, cautions, and warnings
The following notices appear in this document.
NOTE
A note provides a tip, emphasizes important information, or provides a reference to related
information.
A caution alerts you to potential damage to hardware, firmware, software, or data.
A warning alerts you to potential danger to personnel.

iSCSI Gateway Service Administrator’s Guide ix
53-1000603-01
Key terms
For definitions of SAN-specific terms, visit the Storage Networking Industry Association online
dictionary at: http://www.snia.org/education/dictionary.
For definitions specific to Brocade and Fibre Channel, see the Brocade Glossary.
The following terms are used in this manual to describe the iSCSI gateway service and its
components.
discovery domain
(DD) A group of iSCSI virtual targets and iSCSI initiators. Discovery domains
are used for access control and authentication. Only the iSCSI initiators in the
same discovery domain as the iSCSI virtual targets can connect to the FC
targets. When there are no discovery domains, all iSCSI initiators can access
all iSCSI virtual targets (and therefore all FC targets) on the gateway.
discovery domain set
(DDSet) A group of discovery domains that can be enabled or disabled. The
set is used to configure access control and authentication models.
FC portal
An FC_Port that connects the iSCSI virtual initiator to the SAN.
iSCSI virtual initiator
(iSCSI VI) Proxies iSCSI initiator connections to iSCSI virtual target with the
physical FC targets on the SAN. Each iSCSI-enable port has one iSCSI virtual
initiator. An iSCSI virtual initiator is similar to an F_Port in the fabric. The iSCSI
VI registers with the Name Server using a symbolic port name (PWWN) and
node name (NWWN).
IQN
(iSCSI Qualified Name) An iSCSI address that uniquely identifies an iSCSI
device on the network. It is the equivalent of a Fibre Channel WWN and is in
human readable form. The iSCSI gateway supports only IQNs and does not
support IEEE, EUI, and IEEE NAA names.
iSCSI initiator
In client/server terminology, a client that connects to a service (iSCSI virtual
target) offered by the server (iSCSI gateway). It is identified by an IQN. The
iSCSI initiator proxies communications between applications and data
located on a remote SCSI devices to allow applications to access data from a
remote SCSI device, such as an FC target across a TCP/IP network.
iSCSI portal
An iSCSI-enabled FC4-16IP GbE port that is assigned an IP address and
connected to the (IP) network. This port receives the iSCSI initiator
connection to the iSCSI virtual target. The port is bound to an iSCSI virtual
initiator that connects to the FC target in the SAN.

xiSCSI Gateway Service Administrator’s Guide
53-1000603-01
iSCSI portal group
A set of iSCSI-enabled ports. The portal group allows the iSCSI initiator to
access iSCSI virtual targets using any available port. An iSCSI session may
have several connections to an iSCSI VT on any port in the group. Each
FC4-16IP blade has eight GbE ports. The portal group name is the slot
number of the blade. All online iSCSI-enabled GbE ports participate in the
portal group.
iSCSI virtual target
(iSCSI VT) An iSCSI representation of LUNs from one or more FC targets. The
physical FC LUN is mapped to the iSCSI virtual targets. It is identified by an
IQN. The iSCSI gateway proxies the iSCSI initiators connection to the physical
FC targets using iSCSI virtual targets.
iSCSI connection
A single link between an iSCSI initiator and iSCSI target over a TCP/IP network
that carries control messages, SCSI commands, parameters, and data.
iSCSI session
The basic communication “pipe” from an iSCSI initiator to an iSCSI virtual
target. A session is a group of TCP/IP connections that link an iSCSI initiator
with an iSCSI virtual target. Connections can be added or removed from a
session. Sessions are identified by a Session ID (SSID).
iSNS client
Initiates transactions with iSNS servers using the iSNSP, registers device
attribute information in a common discovery domain, downloads information
about other registered clients and receives asynchronous notification of
events that occur in their discovery domains.
iSNS server
Responds to iSNS protocol queries and requests made by iSNS clients using
the iSNSP. iSNS servers initiate iSNSP state change notifications and store
properly authenticated information submitted by a registration request in an
iSNS database.
iSNS database
Both iSCSI initiators and targets can register, and each entity can inquire
about other initiators and targets. For example, a client initiator can obtain
information about target devices from an iSNS server.
LUN mapping
Logic Unit Number mapping. The mapping of the iSCSI virtual target and the
physical FC target.