Brocade Communications Systems A7533A - Brocade 4Gb SAN Switch Base Service manual

53-1001189-01
November 24, 2008
Access Gateway
Administrator’s Guide
Supporting Fabric OS 6.2.0

Copyright © 2007-2008 Brocade Communications Systems, Inc. All Rights Reserved.
Brocade, Fabric OS, File Lifecycle Manager, MyView, and StorageX are registered trademarks and the Brocade B-wing symbol,
DCX, and SAN Health are trademarks of Brocade Communications Systems, Inc., in the United States and/or in other countries.
All other brands, products, or service names are or may be trademarks or service marks of, and are used to identify, products or
services of their respective owners.
Notice: This document is for informational purposes only and does not set forth any warranty, expressed or implied, concerning
any equipment, equipment feature, or service offered or to be offered by Brocade. Brocade reserves the right to make changes to
this document at any time, without notice, and assumes no responsibility for its use. This informational document describes
features that may not be currently available. Contact a Brocade sales office for information on feature and product availability.
Export of technical data contained in this document may require an export license from the United States government.
The authors and Brocade Communications Systems, Inc. shall have no liability or responsibility to any person or entity with
respect to any loss, cost, liability, or damages arising from the information contained in this book or the computer programs that
accompany it.
The product described by this document may contain “open source” software covered by the GNU General Public License or other
open source license agreements. To find-out which open source software is included in Brocade products, view the licensing
terms applicable to the open source software, and obtain a copy of the programming source code, please visit
http://www.brocade.com/support/oscd.
Brocade Communications Systems, Incorporated
Corporate Headquarters
Brocade Communications Systems, Inc.
1745 Technology Drive
San Jose, CA 95110
Tel: [phone]
Fax: [phone]
Email: [e-mail]
Asia-Pacific Headquarters
Brocade Communications Singapore Pte. Ltd.
30 Cecil Street
#19-01 Prudential Tower
Singapore 049712
Tel: [phone]
Fax: [phone]
Email: [email protected]
European and Latin American Headquarters
Brocade Communications Switzerland Sàrl
Centre Swissair
Tour B - 4ème étage
29, Route de l'Aéroport
Case Postale 105
CH-1215 Genève 15
Switzerland
Tel: [phone]
Fax: [phone]
Email: [email protected]

Access Gateway Administrator’s Guide iii
53-1001189-01
Document History
The following table lists all versions of the Access Gateway Administrator’s Guide.
Document Title Publication Number Summary of Changes Publication Date
Access Gateway Administrator’s Guide 53-1000430-01 First version January 2007
Access Gateway Administrator’s Guide 53-1000633-01 Added support for the 200E June 2007
Access Gateway Administrator’s Guide 53-1000605-01 Added support for new policies
and changes to N_Port
mappings.
October 2007
Access Gateway Administrator’s Guide 53-1000605-02 Added support for new
platforms:
300 and the 4424.
Added support for new features:
- Masterless Trunking
- Direct Target Connectivity
- Advance Device Security policy
- 16- bit routing
March 2008
Access Gateway Administrator’s Guide 53-1000605-03 Added support for:
- Cascading Access Gateway.
July 2008
Access Gateway Administrator’s Guide 53-1000605-04 Updated to fix the table of
contents
July 2008
Access Gateway Administrator’s Guide 53-1001189-01 Updated for FOS 6.2 November 2008

iv Access Gateway Administrator’s Guide
53-1001189-01

Access Gateway Administrator’s Guide v
53-1001189-01
Contents
About This Document
How this document is organized . . . . . . . . . . . . . . . . . . . . . . . . . . . . xiii
Supported hardware and software . . . . . . . . . . . . . . . . . . . . . . . . . . xiii
What’s new in this document. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xiv
Document conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xiv
Text formatting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xiv
Command syntax conventions . . . . . . . . . . . . . . . . . . . . . . . . . . xiv
Notes, cautions, and warnings . . . . . . . . . . . . . . . . . . . . . . . . . . xv
Key terms. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xv
Notice to the reader . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xvi
Additional information. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xvi
Brocade resources. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xvii
Other industry resources . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xvii
Optional Brocade features . . . . . . . . . . . . . . . . . . . . . . . . . . . . xvii
Getting technical help. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .xvii
Document feedback . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xviii
Chapter 1 Getting Started
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1
Brocade Access Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1
Fabric OS features in Access Gateway mode . . . . . . . . . . . . . . . . . . . 2
Access Gateway port types . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
Comparison of Access Gateway ports to standard switch ports. 4
How Access Gateway maps ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
Access Gateway limitations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
Upgrade and downgrade considerations for switches in AG mode . . 6
Advance Device Security policy. . . . . . . . . . . . . . . . . . . . . . . . . . . 7
Automatic Port Configuration policy . . . . . . . . . . . . . . . . . . . . . . . 7
Port Grouping policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
Chapter 2 Enabling Policies on Switches in Access Gateway Mode
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
Access Gateway policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
Showing current policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

vi Access Gateway Administrator’s Guide
53-1001189-01
Advanced Device Security policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
Enabling the Advanced Device Security policy. . . . . . . . . . . . . . 10
Disabling the Advanced Device Security policy . . . . . . . . . . . . . 10
Setting which devices can log in if ADS policy is enabled. . . . . 10
Setting which devices cannot log in if ADS policy is enabled . . 11
Removing devices from the list of devices allowed at login . . . 11
Adding new devices to the list of devices allowed at login . . . . 11
Displaying the list of devices on the switch . . . . . . . . . . . . . . . .12
Automatic Port Configuration policy. . . . . . . . . . . . . . . . . . . . . . . . . .12
Enabling the Automatic Port Configuration policy . . . . . . . . . . .13
Disabling the Automatic Port Configuration policy . . . . . . . . . . 13
Rebalancing F_Ports with APC policy enabled. . . . . . . . . . . . . .13
Failover policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
Enabling the Failover policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Disabling the Failover policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
Failback policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
Enabling the Failback policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
Cold Failover policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
Port Grouping policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
Creating a port group. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
Adding an N_Port to a port group . . . . . . . . . . . . . . . . . . . . . . . . 20
Deleting an N_Port from a port group . . . . . . . . . . . . . . . . . . . . 20
Removing a port group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
Renaming a port group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
Disabling the Port Group policy. . . . . . . . . . . . . . . . . . . . . . . . . . 21
Access Gateway policy enforcement matrix . . . . . . . . . . . . . . . . . . .22
Access Gateway trunking . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22
Access Gateway trunking considerations for the Edge switch .23
Trunk group creation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .26
Setting up F_Port trunking . . . . . . . . . . . . . . . . . . . . . . . . . . . . .26
Assigning a Trunk Area . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
Enabling the DCC policy on trunk . . . . . . . . . . . . . . . . . . . . . . . .28
Configuration management for trunk areas . . . . . . . . . . . . . . . . . . .28
Enabling Access Gateway trunking . . . . . . . . . . . . . . . . . . . . . . . 28
Disabling F_Port trunking . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .30
F_Port Trunking monitoring . . . . . . . . . . . . . . . . . . . . . . . . . . . . .30
Access Gateway Cascading . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30
Chapter 3 Connecting Devices Using Access Gateway
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
Connectivity of multiple devices overview . . . . . . . . . . . . . . . . . . . . . 33
Fabric and Edge switch configuration . . . . . . . . . . . . . . . . . . . . . . . . 33
Verifying the switch mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .34
Setting the Fabric OS switch to Native Mode. . . . . . . . . . . . . . .35
Enabling NPIV on the M-EOS switch . . . . . . . . . . . . . . . . . . . . . . 35

Access Gateway Administrator’s Guide vii
53-1001189-01
Connectivity to Cisco Fabrics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .35
Access Gateway routing requirements with Cisco fabrics. . . . .36
Enabling NPIV on a Cisco switch. . . . . . . . . . . . . . . . . . . . . . . . .36
Workaround for QLogic-based devices . . . . . . . . . . . . . . . . . . . . 37
Editing Company ID List if no FC target devices on switch . . . . 37
Adding or deleting an OUI from the Company ID List . . . . . . . . 38
Enabling Flat FCID mode if no FC target devices on switch . . .39
Editing Company ID list if target devices on switch . . . . . . . . . .39
Access Gateway mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .40
Enabling Access Gateway mode . . . . . . . . . . . . . . . . . . . . . . . . .40
Port States . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41
Disabling Access Gateway mode . . . . . . . . . . . . . . . . . . . . . . . .42
Saving the Access Gateway configuration . . . . . . . . . . . . . . . . .42
Rejoining switches to a fabric. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43
Reverting to a previous configuration. . . . . . . . . . . . . . . . . . . . .43
Chapter 4 Configuring Ports in Access Gateway mode
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45
Port Initialization in Access Gateway mode. . . . . . . . . . . . . . . . . . . . 45
N_Ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46
Unlocking N_Ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47
Displaying N_Port configurations . . . . . . . . . . . . . . . . . . . . . . . . 48
Verifying port mapping and status . . . . . . . . . . . . . . . . . . . . . . .48
Displaying N_Port mapping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49
Displaying port status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .49
Port configurations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50
Adding F_Ports to an N_Port . . . . . . . . . . . . . . . . . . . . . . . . . . . .50
Removing F_Ports from an N_Port . . . . . . . . . . . . . . . . . . . . . . . 51
Adding a preferred secondary N_Port . . . . . . . . . . . . . . . . . . . . 52
Deleting F_Ports from a preferred secondary N_Port . . . . . . . .52
Appendix A Troubleshooting
Index

viii Access Gateway Administrator’s Guide
53-1001189-01

Access Gateway Administrator’s Guide ix
53-1001189-01
Figures
Figure 1 Access Gateway and fabric switch comparison . . . . . . . . . . . . . . . . . . . . . . . . . . . 2
Figure 2 Port usage comparison . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
Figure 3 Example F_Port-to-N_Port mapping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
Figure 4 Example 1 and 2 Failover policy behavior . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Figure 5 Failback policy behavior. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
Figure 6 Port Group Zero (pg0) setup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
Figure 7 Port grouping behavior. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
Figure 8 Port Group 1 (pg1) setup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
Figure 9 Access Gateway cascading . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31
Figure 10 Initialized ports in Access Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46
Figure 11 Example of adding an external F_Port (F9) on an embedded switch . . . . . . . . . 47

xAccess Gateway Administrator’s Guide
53-1001189-01