HP StorageWorks SN6000 Command Line Interface Manual Download Page 168

Page: 168 / 330

168 Command Reference

ipsec policy

Description

Manages policies in the Security Policy database.

Authority

Admin session and an Ipsec Edit session

Syntax

ipsec policy

copy [policy_source] [policy_destination]

create [policy]

delete [policy]

edit [policy]

list

[option]

rename [policy_old] [policy_new]

Operands

copy [policy_source] [policy_destination]

Creates a new policy named [policy_destination] and copies the configuration into it from the

policy given by [policy_source]. You must enter the

ipsec save

command afterwards to save

your changes. [policy_destination] must not begin with

DynamicSP_

, which is reserved for

dynamic policies.

create [policy]

Creates a policy with the name given by [policy]. A policy name must begin with a letter and be

no longer than 32 characters. Valid characters are alphanumeric, _, $, ^, and -. The Security

Policy database supports a maximum of 128 user-defined policies. You must enter the

ipsec save

command afterwards to save your changes.

Table 14

describes the policy

parameters:

Table 14

Policy configuration parameters

Parameter

Description

Description

Description of the policy

SourceAddress

IP address (version 4 or 6) or DNS host name of the host, switch, or

gateway from which data originates

SourcePort

Source port number in the range

—

65535

DestinationAddress

IP address (version 4 or 6) or DNS host name of the host, switch, or

gateway receiving data. If you specified an IP address for the

SourceAddress

, the

DestinationAddress

must use the same

IP version format.

DestinationPort

Destination port number in the range

—

65535

Protocol

Protocol or application to which to apply IP security. Enter an

operand for one of the following protocols or an integer in the

range

—

255

•

Internet Control Message Protocol for IPv4 (ICMP)

•

Internet Control Message Protocol for IPv6 (ICMP6)

•

Internet Protocol, version 4 (IPv4)

•

Transmission Control Protocol (TCP)

•

User Datagram Protocol (UDP)

•

Any protocol

ICMPv6 Type

ICMP number (0–255). You are prompted for this parameter only if

you specify ICMP6 for the Protocol parameter.

Summary of Contents for StorageWorks SN6000

Page 1: ...face CLI describing fabric switch and port management tasks This guide also provides an alphabetical listing of the CLI commands including the command syntax operands and notes and examples of their use This guide is for users who are responsible for installing and servicing Fibre Channel equipment using the command line interface Part Number 5697 0406 Published June 2010 Edition 2 ...

Page 2: ...he only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services Nothing herein should be construed as constituting an additional warranty HP shall not be liable for technical or editorial errors or omissions contained herein Microsoft Windows and Internet Explorer are U S registered trademarks of Microsoft Corporation HP Stor...

Page 3: ...pplying IP security 25 Displaying IP security information 26 Policy and association information 26 IP security configuration history 27 IP security configuration limits 27 Managing the security policy database 27 Creating a policy 28 Deleting a policy 28 Modifying a user defined policy 29 Renaming a user defined policy 30 Copying a policy 30 Managing the security association database 30 Creating a...

Page 4: ...53 Connectivity tests for switches 53 Displaying switch test status 54 Canceling a switch test 54 Verifying and tracing Fibre Channel connections 55 Managing switch feature upgrades 55 Displaying feature licenses 55 Installing a feature license key 56 Managing idle session timers 56 5 Port Configuration 57 Displaying port information 57 Port configuration parameters 57 Port operational information...

Page 5: ...om a zone 80 Managing aliases 81 Creating an alias 81 Deleting an alias 81 Renaming an alias 81 Copying an alias 81 Adding members to an alias 81 Removing members from an alias 81 7 Connection Security Configuration 83 Managing SSL and SSH services 83 Displaying SSL and SSH services 84 Creating an SSL security certificate 85 8 Device Security Configuration 87 Displaying security database informati...

Page 6: ...105 Call Home messages 106 Technical support interface 107 Configuring the Call Home service 108 Managing the Call Home database 109 Displaying Call Home database information 110 Creating a profile 112 Deleting a profile 112 Modifying a profile 113 Renaming a profile 113 Copying a profile 113 Adding a data capture configuration 114 Modifying a data capture configuration 114 Deleting a data capture...

Page 7: ...t 172 passwd 173 ping 174 profile 175 ps 178 quit 179 reset 180 security 188 securityset 191 set alarm 193 set beacon 194 set config port 195 set config security 199 set config security portbinding 200 set config switch 201 set config threshold 203 set config zoning 205 set log 206 set pagebreak 209 set port 210 set setup callhome 211 set setup radius 213 set setup services 216 set setup snmp 219 ...

Page 8: ...show setup snmp 270 show setup system 271 show steering 273 show switch 274 show system 276 show temp 277 show testlog 278 show timezone 279 show topology 280 show users 281 show version 282 show voltage 284 shutdown 285 snmpv3user 286 test cancel 289 test port 290 test status 292 test switch 294 uptime 296 user 297 whoami 299 zone 300 zoneset 303 zoning active 305 zoning cancel 306 zoning clear 3...

Page 9: ...guration defaults 183 18 Port configuration defaults 183 19 Port threshold alarm configuration defaults 184 20 Zoning configuration defaults 184 21 SNMP configuration defaults 184 22 RADIUS configuration defaults 185 23 Switch services configuration defaults 185 24 DNS host name configuration defaults 186 25 IPv4 Ethernet configuration defaults 186 26 IPv6 Ethernet configuration defaults 187 27 Ev...

Page 10: ...iguration parameters 224 57 Timer configuration parameters 225 58 Switch administrative state parameters 229 59 Show about display entries 231 60 Log monitoring components 249 61 Event log display filter parameters 250 62 Transceiver information 254 63 Name server display parameters 257 64 Show port display entries 261 65 Switch operational parameters 274 66 Show version display entries 282 67 SNM...

Page 11: ...command followed by the switch Internet Protocol IP address telnet ip_address The IP address can be one of the following 4 byte IP version 4 IPv4 address 16 byte IP version 6 IPv6 address Domain Name System DNS host name requires a DNS server The Telnet window opens prompting you for a login 2 Enter an account name and password The default account name is admin and its password is password switch ...

Page 12: ...s are available to all user accounts Commands that perform configuration tasks are available only after entering the admin start command to open an Admin session A user account must have Admin authority to enter the admin start command The following is an example of how to open and close an Admin session SN6000 FC Switch admin start SN6000 FC Switch admin SN6000 FC Switch admin admin end Entering ...

Page 13: ...a time by turning on page breaks By default page breaks are turned off The following is an example of how to turn page breaks on and how it affects the display SN6000 FC Switch set pagebreak on SN6000 FC Switch zone list Zone ZoneSet Zone1 alpha beta Zone2 delta echo Zone3 sierra tango Zone4 gamma delta Press any key to continue q to quit Creating a support file If you contact technical support ab...

Page 14: ...ete 43430 bytes sent in 0 292 secs 1 5e 02 Kbytes sec Remote system type is UNIX Using binary mode to transfer files 221 You have transferred 43430 bytes in 1 files 221 Total traffic for this session was 43888 bytes in 1 transfers 221 Thank you for using the FTP service on localhost localdomain If your workstation does not have an FTP server enter the create support command to create the support f...

Page 15: ...er and password enter the FTP account name and password images images user images password images 3 Set binary mode and use the get command to download the file configdata ftp bin ftp get configdata xxxxx bytes sent in xx secs ftp quit To upload a file from the workstation to the switch 1 Enter the ftp command and the switch IP address or symbolic name ftp 10 0 0 1 2 When prompted for a user and p...

Page 16: ...16 Command Line Interface Usage ...

Page 17: ...se expires in 50 days gregj admin authority True expires in 100 days fred admin authority True never expires The following example displays user accounts that are logged on to the switch SN6000 FC Switch admin user list User Ethernet Addr Port Logged in Since admin OB session1 10 20 68 108 1031 day month date time year admin OB session2 10 20 68 108 1034 day month date time year snmp OB session3 U...

Page 18: ...account password set account expiration in days 0 2000 0 never 0 100 should this account have admin authority y n n y OK to add user account user1 with admin authority and to expire in 100 days Please confirm y n n y Modifying user accounts and passwords Only the admin user account can modify a user account delete a user account or change the password of another user account However all user accou...

Page 19: ...he admin user account changes the password for the user account named user2 SN6000 FC Switch admin start SN6000 FC Switch admin passwd user2 Press q and the ENTER key to abort this command account OLD password account NEW password 8 20 chars please confirm account NEW password password has been changed ...

Page 20: ...20 User Account Configuration ...

Page 21: ...n 133 0x85 WWN 10 00 00 c0 dd 0d 53 91 SymbolicName SN6000 FC Switch HostName undefined EthIPv4Address 10 20 116 133 EthIPv6Address undefined indicates principal switch The show setup system command displays the entire switch network configuration which includes the following IP configurations versions 4 and 6 DNS server configuration To display specific information add the corresponding keyword F...

Page 22: ... Address Resolution Protocol RARP Dynamic Host Configuration Protocol DHCP To configure the IPv4 parameters enter the set setup system ipv4 command SN6000 FC Switch admin set setup system ipv4 A list of attributes with formatting and current values will follow Enter a new value or simply press the ENTER key to accept the current value If you wish to terminate this process before reaching the end o...

Page 23: ... command SN6000 FC Switch admin set setup system ipv6 A list of attributes with formatting and current values will follow Enter a new value or simply press the ENTER key to accept the current value If you wish to terminate this process before reaching the end of the list press q or Q and the ENTER key to do so Current Values EthIPv6NetworkEnable False EthIPv6Discovery Static EthIPv6NetworkAddress ...

Page 24: ...rchList4 undefined DNSSearchList5 undefined New Value press ENTER to accept current value q to quit n for none DNSClientEnabled True False DNSLocalHostname hostname DNSServerDiscovery 1 Static 2 Dhcp 3 Dhcpv6 DNSServer1Address IPv4 or IPv6 Address DNSServer2Address IPv4 or IPv6 Address DNSServer3Address IPv4 or IPv6 Address DNSSearchListDiscovery 1 Static 2 Dhcp 3 Dhcpv6 DNSSearchList1 domain name...

Page 25: ...security policy database and define the following parameters Connection source and destination Data traffic direction inbound or outbound Protocols for which to protect data traffic Security protocols Authentication Header AH or Encapsulating Security Payload ESP Level of protection IP Security discard or none Security associations are located in the security association database and define the en...

Page 26: ...ations that is policies and associations that have been saved in the database Policies and associations that are being edited but have not been saved You can display the following types of IP security configuration information Policy and association information page 26 IP security configuration history page 27 IP security configuration limits page 27 Policy and association information To display g...

Page 27: ...figuration and the user account that made it Checksum for the active and inactive databases IP security configuration limits To display a summary of the objects in the IP security configuration and their maximum limits enter the ipsec limits command as shown in the following example SN6000 FC Switch ipsec limits Configured saved IPsec Information IPsec Attribute Maximum Current MaxConfiguredSAs 51...

Page 28: ... fe80 250 daff feb7 9d02 DestinationPort decimal value 1 65535 Protocol decimal value or keyword Allowed keywords icmp icmp6 ip4 tcp udp or any any Direction 1 in 2 out 2 Priority value 2147483647 to 214783647 Action 1 discard 2 none 3 ipsec 3 ProtectionDesired select one transport mode only 1 ah Authentication Header 2 esp Encapsulating Security Payload 3 both 2 espRuleLevel 1 default 2 use 3 req...

Page 29: ...ch host espRuleLevel require New Value press ENTER to not specify value q to quit n for none Description string value 0 127 bytes SourceAddress IPv4 IPv6 or hostname PrefixLength SourcePort decimal value 1 65535 DestinationAddress IPv4 IPv6 or hostname PrefixLength DestinationPort decimal value 1 65535 Protocol decimal value or keyword Allowed keywords icmp icmp6 ip4 tcp udp or any tcp Direction 1...

Page 30: ...h user defined and dynamic policies To copy a policy policy_1 enter the ipsec policy copy command as shown in the following example SN6000 FC Switch admin start SN6000 FC Switch admin ipsec edit SN6000 FC Switch admin ipsec ipsec policy copy policy_1 policy_a SN6000 FC Switch admin ipsec ipsec save The IPsec configuration will be saved and activated Please confirm y n n y Managing the security ass...

Page 31: ...t an authentication algorithm 1 hmac md5 16 byte key 2 hmac sha1 20 byte key 3 hmac sha256 32 byte key 4 aes xcbc mac 16 byte key authentication algorithm choice 2 AuthenticationKey quoted string or raw hex bytes 12345678901234567890 Encryption select an encryption algorithm 1 des cbc 8 byte key 2 3des cbc 24 byte key 3 null 0 byte key 4 blowfish cbc 5 56 byte key 5 aes cbc 16 24 32 byte key 6 two...

Page 32: ...scription string value 0 127 bytes SourceAddress hostname IPv4 or IPv6 Address DestinationAddress hostname IPv4 or IPv6 Address Protocol 1 esp 2 esp old 3 ah 4 ah old ah SPI decimal value 256 4294967295 Authentication select an authentication algorithm 1 hmac md5 16 byte key 2 hmac sha1 20 byte key 3 hmac sha256 32 byte key 4 aes xcbc mac 16 byte key authentication algorithm choice AuthenticationK...

Page 33: ...h admin ipsec ipsec association copy association_1 association_a SN6000 FC Switch admin ipsec ipsec save The IPsec configuration will be saved and activated Please confirm y n n y Resetting the IP security configuration Resetting the IP security configuration deletes all policies and associations from the switch You can use either the ipsec clear command or the reset ipsec command to do this In an...

Page 34: ...34 Network Configuration ...

Page 35: ...g a switch page 49 Installing firmware page 50 Testing a switch page 52 Verifying and tracing Fibre Channel connections page 55 Managing switch feature upgrades page 55 Managing idle session timers page 56 Displaying switch information You can display the following types of the switch information Name server information page 36 Switch operational information page 37 System process information page...

Page 36: ...0 20 37 1b cf fd 4 8 0x8 0824c6 NL 3 22 00 00 20 37 2b 07 b4 20 00 00 20 37 2b 07 b4 5 8 0x8 0824c9 NL 3 22 00 00 20 37 2b 08 57 20 00 00 20 37 2b 08 57 6 8 0x8 0824cb NL 3 22 00 00 20 37 1b cf f6 20 00 00 20 37 1b cf f6 7 8 0x8 0824cc NL 3 22 00 00 20 37 2b 0b ec 20 00 00 20 37 2b 0b ec 8 8 0x8 0824d6 NL 3 22 00 00 20 37 2b 07 e1 20 00 00 20 37 2b 07 e1 9 8 0x8 0824da NL 3 22 00 00 20 37 2b 0b 1a...

Page 37: ...0 bc 56 BootVersion Vx x x x 0 day month date time year CreditPool 0 DomainID 19 0x13 FirstPortAddress 130000 FlashSize MBytes 128 LogFilterLevel Critical MaxPorts 20 NumberOfResets 15 ReasonForLastReset PowerUp ActiveImageVersion build date Vx x x 0 day month date time year PendingImageVersion build date Vx x x 0 day month date time year ActiveConfiguration default AdminState Online AdminModeActi...

Page 38: ... 2 03 02 30 mserver 256 224 0 0 0 7 00 00 06 2 03 02 30 eport 257 224 0 0 0 6 00 00 13 2 03 02 30 zoning 282 254 0 0 0 5 00 00 00 2 03 02 26 qfsApp 284 224 0 0 0 6 00 00 08 2 03 02 26 snmpservicepath 285 282 0 0 0 5 00 00 00 2 03 02 26 qfsApp 308 224 0 0 0 8 00 00 29 2 03 02 25 cim_server Elapsed time between resets The uptime command displays the elapsed time since the switch was last reset and t...

Page 39: ...abled True FDMIEnabled False FDMIEntries 10 DefaultDomainID 19 0x13 DomainIDLock True SymbolicName sw108 R_A_TOV 10000 E_D_TOV 2000 PrincipalPriority 254 ConfigDescription Default Config ConfigLastSavedBy admin OB session5 ConfigLastSavedOn day month date time year InteropMode Standard Zoning configuration parameters To display the zoning configuration parameters enter the show config zoning comma...

Page 40: ... WWN 0 True 10 20 30 40 50 60 70 80 1 True 10 20 30 40 50 60 70 80 2 False No port binding entries found 3 True 10 20 30 40 50 60 70 80 4 True 10 20 30 40 50 60 70 80 5 False No port binding entries found 6 True 10 20 30 40 50 60 70 81 7 False No port binding entries found 8 True 10 20 30 40 50 60 70 80 9 False No port binding entries found 10 False No port binding entries found 11 False No port b...

Page 41: ...ch Installation and Reference Guide Firmware information To display a summary of switch identity information including the firmware version enter the show version command The following is an example of the show version command SN6000 FC Switch show version Command Line Interface SHell CLISH SystemDescription HP StorageWorks SN6000 DualPower Supply Fibre Channel Switch HostName undefined EthIPv4Net...

Page 42: ... Simple SAN Connection Manager version 1 0 does not support the SSL service If SSL is enabled you will be unable to manage the switch using this version of Simple SAN Connection Manager To display the current switch services settings enter the show setup services command as shown in the following example SN6000 FC Switch show setup services System Services Telnet Enabled True SSHEnabled False GUIM...

Page 43: ...configuration may be required after enabling a service If services are disabled the connection to the switch may be lost When enabling SSL please verify that the date time settings on this switch and the workstation from where the SSL connection will be started match and then a new certificate may need to be created to ensure a secure connection to this switch TelnetEnabled True False True SSHEnab...

Page 44: ...ist command does not require an Admin session SN6000 FC Switch config list Current list of configurations default config_1 config_2 Activating a switch configuration To activate a switch configuration config_1 enter the config activate command in an Admin session as shown in the following example SN6000 FC Switch admin config activate config_1 Copying a switch configuration To create a copy of an ...

Page 45: ...configuration named config_10132003 However the new configuration does not take effect until you activate it with the config activate command SN6000 FC Switch admin config config save config_10132003 SN6000 FC Switch admin config activate config_10132003 SN6000 FC Switch admin admin end The admin end command releases the Admin session for other administrators when you are finished making changes t...

Page 46: ...e database and Call Home service configuration NOTE Configuration backup files are deleted from the switch during a power cycle or a switch reset Downloading the configuration file Use FTP to download the configdata file to your workstation for safekeeping and to upload the file back to the switch for the restore function To download the configdata file open an FTP session on the switch and login ...

Page 47: ... in unison The following is an example of how to turn the beacon on and off SN6000 FC Switch set beacon on SN6000 FC Switch set beacon off Managing the date and time The switch date and time can be set explicitly using the date command or it can be set automatically through a Network Time Protocol NTP server The date command also displays the current time Unlike the date command the NTP server als...

Page 48: ...uatemala America Guayaquil America Guyana America Halifax America Havana America Hermosillo America Indiana America Indianapolis America Monterrey America Montevideo America Montreal America Montserrat America Nassau America New_York America Nipigon America Nome America Noronha America North_Dakota America Panama America Pangnirtung Press ENTER for more options or q to make a selection q Enter sel...

Page 49: ...alse NTPServerDiscovery Static NTPServerAddress 10 20 10 10 New Value press ENTER to accept current value q to quit n for none NTPClientEnabled True False True NTPServerDiscovery 1 Static 2 Dhcp 3 Dhcpv6 NTPServerAddress hostname IPv4 or IPv6 Address 10 20 3 4 Do you want to save and activate this system setup y n n y Resetting a switch Table 4 describes the methods for resetting a switch the corr...

Page 50: ...sfy the following conditions No changes are being made to switches in the fabric including powering up powering down disconnecting or connecting inter switch links ISLs changing switch configurations or installing firmware No port on the switch is in the diagnostic state No Zoning Edit sessions are open on the switch No changes are being made to attached devices including powering up powering down...

Page 51: ...luding any Telnet sessions When the firmware activation is complete you may log in to the switch again Do you want to continue y n y Press q and the ENTER key to abort this command 2 Enter your choice for the file transfer protocol with which to download the firmware image file FTP requires an user account and a password TFTP does not FTP or TFTP ftp 3 Enter your account name on the remote host FT...

Page 52: ...f your workstation has neither an FTP nor a TFTP server open an FTP session and download the firmware image file by entering the following FTP commands ftp ip_address or switchname user images password images ftp bin ftp put filename ftp quit 2 Display the list of firmware image files on the switch to confirm that the file was loaded SN6000 FC Switch admin start SN6000 FC Switch admin image list 3...

Page 53: ...ctions A transceiver with a loopback plug is required for all ports The following example performs an offline internal loopback test on a switch SN6000 FC Switch admin start SN6000 FC Switch admin set switch state diagnostics SN6000 FC Switch admin test switch offline internal A list of attributes with formatting and current values will follow Enter a new value or simply press the ENTER key to acc...

Page 54: ... online Displaying switch test status You can display the test status while the test is in progress by entering the test status switch command as shown in the following example SN6000 FC Switch test status switch Test Test Test Loop Test Level Type Status Count Failures Switch Offline internal Passed 4 0 Port Test Test Loop Test Num Type Status Count Failures 0 Offline internal Passed 4 0 1 Offlin...

Page 55: ... 2e 14 97 20 0e 00 c0 dd 02 cc 2e 14 20 04 00 c0 dd 02 cc 2e 4 Managing switch feature upgrades A feature license key is a password that you can purchase from your switch distributor or authorized reseller to upgrade your switch License keys vary according to the features you purchase The following license key features are available The HP StorageWorks SN6000 Stackable 20Gb ISL Upgrade LTU enables...

Page 56: ...lt no timeout limit is enforced on idle login sessions idle Admin sessions are ended after 30 minutes To display the idle login and Admin session configuration enter the show setup system timers command as shown in the following example SN6000 FC Switch show setup system timers System Information AdminTimeout 30 InactivityTimeout 0 To configure idle login and Admin session limits enter the set set...

Page 57: ...rmation page 60 Port configuration parameters To display the port configuration parameters enter the show config port command These parameters determine the operational characteristics of the port See Table 33 for descriptions of these parameters SN6000 FC Switch show config port 3 Configuration Name default Port Number 3 AdminState Online LinkSpeed Auto PortType GL SymbolicName Port3 ALFairness F...

Page 58: ...0100 PortWWN 20 01 00 c0 dd 0d 70 c9 POSTFaultCode 00000000 POSTStatus Passed RunningType E SupportedSpeeds 1 2 4 8Gb s SymbolicName Port1 SyncStatus SyncAcquired TestFaultCode 00000000 TestStatus NeverRun UpstreamISL False XmitterEnabled True Port Statistics ALInit 2 LIP_F8_F7 0 ALInitError 0 LinkFailures 0 BadFrames 0 Login 1 BBCR_FrameFailures 0 Logout 0 BBCR_RRDYFailures 0 LongFramesIn 0 Class...

Page 59: ...lds at which the switch issues alarms See Table 37 for descriptions of these parameters SN6000 FC Switch show config threshold Configuration Name default Threshold Configuration Information ThresholdMonitoringEnabled False CRCErrorsMonitoringEnabled True RisingTrigger 25 FallingTrigger 1 SampleWindow 10 DecodeErrorsMonitoringEnabled True RisingTrigger 25 FallingTrigger 0 SampleWindow 10 ISLMonitor...

Page 60: ...0 0 11 0 0 0 0 0 0 12 0 0 0 0 0 0 13 0 0 0 0 0 0 14 0 7K 7K 0 245 245 15 136M 58K 136M 68K 1K 70K 16 47M 23K 47M 23K 726 24K 17 0 0 0 0 0 0 18 23K 47M 47M 726 23K 24K 19 0 0 0 0 0 0 20 0 0 0 0 0 0 21 0 0 0 0 0 0 22 0 0 0 0 0 0 23 0 0 0 0 0 0 Transceiver information Enter the show media command to display operational information about a transceiver as shown in the following example For a descriptio...

Page 61: ...ate 1 Online 2 Offline 3 Diagnostics 4 Down Online offline LinkSpeed 1 1Gb s 2 2Gb s 4 4Gb s 8 8Gb s A Auto Auto PortType GL G F FL TR GL SymPortName string max 32 chars Port1 ALFairness True False False DeviceScanEnable True False True ForceOfflineRSCN True False False ARB_FF True False False InteropCredit decimal value 0 255 0 FANEnable True False True AutoPerfTuning True False True MSEnable Tru...

Page 62: ... of inter fabric connection uses the Fibre Channel industry N Port ID Virtualization NPIV and makes local and remote devices accessible to each other while maintaining the local and remote fabrics as separate fabrics You can connect multiple SN6000 Fibre Channel Switches to one or more remote fabrics using multiple TR_Ports Local and remote devices are identified by their respective port worldwide...

Page 63: ...tics 4 Down Online LinkSpeed 1 1Gb s 2 2Gb s 4 4Gb s 8 8Gb s A Auto Auto PortType GL G F FL TR GL TR SymPortName string max 32 chars Port1 Finished configuring attributes This configuration must be saved see config save command and activated see config activate command before it can take effect To discard this configuration use the config cancel command SN6000 FC Switch admin config config save SN...

Page 64: ...r devices that are permitted to log in to a particular switch port Switches or devices that are not among the established 32 are refused access to the port To display the port binding configuration for all ports enter the show config security portbinding command as shown in the following example SN6000 FC Switch show config security portbinding Configuration Name default Port Binding Status WWN 0 ...

Page 65: ...tivate command before it can take effect To discard this configuration use the config cancel command Resetting a port To reinitialize one or more ports and to discard any temporary changes that have been made to the administrative state or link speed enter the reset port command The following example reinitializes port 1 SN6000 FC Switch reset port 1 Configuring port threshold alarms The switch ca...

Page 66: ...Trigger decimal value 0 1000 0 SampleWindow decimal value 1 1000 sec 10 ISLMonitoringEnabled True False True RisingTrigger decimal value 1 1000 2 FallingTrigger decimal value 0 1000 0 SampleWindow decimal value 1 1000 sec 10 LoginMonitoringEnabled True False True RisingTrigger decimal value 1 1000 5 FallingTrigger decimal value 0 1000 1 SampleWindow decimal value 1 1000 sec 10 LogoutMonitoringEnab...

Page 67: ...st SN6000 FC Switch admin start SN6000 FC Switch admin test port 1 online A list of attributes with formatting and current values will follow Enter a new value or simply press the ENTER key to accept the default value If you wish to terminate this process before reaching the end of the list press q or Q and the ENTER key to do so LoopCount decimal value 1 4294967295 429496729 FrameSize decimal val...

Page 68: ... If you wish to terminate this process before reaching the end of the list press q or Q and the ENTER key to do so LoopCount decimal value 1 4294967295 429496729 FrameSize decimal value 40 2148 256 DataPattern 32 bit hex value or Default Default StopOnError True False True LoopForever True False False Do you want to start the test y n n y The test has been started A notification with the test resu...

Page 69: ...rrent fabric zoning This section describes the zoning configuration tasks Displaying zoning database information A switch maintains three zoning databases Non volatile This zoning database is permanent and contains all zone sets zones and aliases that you create and save on a switch The zone sets in the non volatile zoning database are known as configured zone sets Volatile This zoning database is...

Page 70: ...4 82 bf d2 18 c2 50 06 04 82 bf d2 18 d2 10 00 00 00 c9 23 bd 31 wwn_221416 50 06 04 82 bf d2 18 c2 50 06 04 82 bf d2 18 d2 10 00 00 00 c9 22 14 16 wwn_2215c3 50 06 04 82 bf d2 18 c2 50 06 04 82 bf d2 18 d2 10 00 00 00 c9 22 15 c3 Configured saved in NVRAM Zoning Information ZoneSet Zone ZoneMember wwn wwn_23bd31 50 06 04 82 bf d2 18 c2 50 06 04 82 bf d2 18 d2 10 00 00 00 c9 23 bd 31 wwn_221416 50...

Page 71: ... 50 06 04 82 bf d2 18 c2 50 06 04 82 bf d2 18 d2 21 00 00 e0 8b 02 41 2f wwn_23bd31 50 06 04 82 bf d2 18 c2 50 06 04 82 bf d2 18 d2 10 00 00 00 c9 23 bd 31 wwn_221416 50 06 04 82 bf d2 18 c2 50 06 04 82 bf d2 18 d2 10 00 00 00 c9 22 14 16 wwn_2215c3 50 06 04 82 bf d2 18 c2 50 06 04 82 bf d2 18 d2 10 00 00 00 c9 22 15 c3 To display the name of the active zone set and its activation history enter th...

Page 72: ...n ZoneSet Zone ZoneMember ZS1 Z1 10 00 00 c0 dd 00 b9 f9 10 00 00 c0 dd 00 b9 fa Z2 10 00 00 c0 dd 00 b9 fb 10 00 00 c0 dd 00 b9 fc Edited zone set information The edited zone set is a zone set that you were modifying when a change occurred to the active zone set or a fabric merge occurred To display the unsaved edited zone set information enter the zoning edited command in an Admin session and a ...

Page 73: ...nd as shown in the following example SN6000 FC Switch zone zonesets zone1 Current List of ZoneSets for Zone zone1 zone_set_1 Zone membership information To display the members for a specified zone enter the zone members command as shown in the following example SN6000 FC Switch zone members wwn_b0241f Current List of Members for Zone wwn_b0241f 50 06 04 82 bf d2 18 c2 50 06 04 82 bf d2 18 d2 21 00...

Page 74: ...2 18 c6 Zoning modification history To display a record of zoning modifications enter the zoning history command as shown in the following example SN6000 FC Switch zoning history Active Database Information ZoneSetLastActivated DeactivatedBy Remote ZoneSetLastActivated DeactivatedOn day mon date hh mm ss yyyy Database Checksum 00000000 Inactive Database Information ConfigurationLastEditedBy admin ...

Page 75: ..._2_NewJBOD2 3 ZoneAlias 3 ZoneDomainPort 4 ZoneFCAddr MaxMembersPerAlias 2000 2 AliasInAZone ActiveZones 19 ActiveZoneMembers 160 To display abbreviated limits information enter the zoning limits brief command Configuring the zoning database You can configure how the zoning database is applied to the switch and exchanged with the fabric by using the zoning configuration parameters The following zo...

Page 76: ...king changes at the same time through Telnet QuickTools Enterprise Fabric Management Suite or another management application You must also open a Config Edit session with the config edit command and indicate which configuration you want to modify If you do not specify a configuration name the active configuration is assumed The Config Edit session provides access to the set config zoning command a...

Page 77: ...ving changes enter the zoning cancel command SN6000 FC Switch admin zoning zoning cancel 4 To activate the changes to the active zone set enter the zoneset activate command SN6000 FC Switch admin zoneset activate zoneset_1 The active zone set is propagated throughout the fabric 5 When you are finished making changes to the switch enter the admin end command to release the Admin session for other a...

Page 78: ...s and aliases that are not currently active Please confirm y n n y SN6000 FC Switch admin zoning save Managing zone sets All zone set management tasks except Activating a zone set page 79 and Deactivating a zone set page 79 require an Admin session and a Zoning Edit session Creating a zone set To create a new zone set enter the zoneset create command as shown in the following example SN6000 FC Swi...

Page 79: ...set_1 zone_1 zone_2 SN6000 FC Switch admin zoning zoning save Activating a zone set To apply zoning to the fabric enter the zoneset activate command as shown in the following example SN6000 FC Switch admin start SN6000 FC Switch admin zoneset activate zoneset_1 Deactivating a zone set To deactivate the active zone set and disable zoning in the fabric enter the zoneset deactivate command as shown i...

Page 80: ...zoning edit SN6000 FC Switch admin zoning zone copy zone_1 zone_2 SN6000 FC Switch admin zoning zoning save Adding members to a zone To add ports devices to zone_1 enter the zone add command as shown in the following example SN6000 FC Switch admin start SN6000 FC Switch admin zoning edit SN6000 FC Switch admin zoning zone add zone_1 alias_1 1 4 1 5 SN6000 FC Switch admin zoning zoning save Removin...

Page 81: ...N6000 FC Switch admin start SN6000 FC Switch admin zoning edit SN6000 FC Switch admin zoning alias rename alias_1 alias_a SN6000 FC Switch admin zoning zoning save Copying an alias To copy alias_1 and its contents to alias_2 enter the alias copy command as shown in the following example SN6000 FC Switch admin start SN6000 FC Switch admin zoning edit SN6000 FC Switch admin zoning alias copy alias_1...

Page 82: ...82 Zoning Configuration ...

Page 83: ... SSH and SSL services Simple SAN Connection Manager version 1 0 does not support the SSL service If SSL is enabled you will be unable to manage the switch using this version of Simple SAN Connection Manager To establish a secure Telnet connection your workstation must use an SSH client To enable secure SSL connections you must first synchronize the date and time on the switch and workstation See M...

Page 84: ...re the SSL connection will be started match and then a new certificate may need to be created to ensure a secure connection to this switch TelnetEnabled True False True SSHEnabled True False False True GUIMgmtEnabled True False True SSLEnabled True False False True EmbeddedGUIEnabled True False True SNMPEnabled True False True NTPEnabled True False False CIMEnabled True False False FTPEnabled True...

Page 85: ...efore the certificate creation date and expires 365 days after the creation date Should the original certificate become invalid enter the create certificate command to create a new one as shown in the following example SN6000 FC Switch admin create certificate The current date and time is day mon date hh mm ss UTC yyyy This is the time used to stamp onto the certificate Is the date and time correc...

Page 86: ...86 Connection Security Configuration ...

Page 87: ...urity sets on the switch In addition to providing authorization the switch can be configured to require authentication to validate the identity of the connecting switch device or host Authentication can be performed locally using the switch s security database or remotely using a RADIUS server such as Microsoft RADIUS Displaying security database information You can display the following informati...

Page 88: ...0 10 21 17 Authentication Chap Primary Hash MD5 Primary Secret Secondary Hash SHA 1 Secondary Secret Binding 0 Active security set information The security active and securityset active commands display information about the active security set To display component groups and group members enter the security active command as shown in the following example SN6000 FC Switch security active Active S...

Page 89: ...he securityset groups command as shown in the following example SN6000 FC Switch securityset groups alpha Current list of Groups for SecuritySet alpha group1 ISL group2 Port To display the security sets for which a specified group is a member enter the group securitysets command as shown in the following example SN6000 FC Switch group securitysets group_1 Current list of SecuritySets for Group gro...

Page 90: ...y month date time year Database Checksum 00007558 Security database history includes the following information Time of the most recent security set activation or deactivation and the user account that performed it Time of the most recent modifications to the security database and the user account that made them Checksum for the security database Security database limits To display a summary of the...

Page 91: ...pects of the switch configuration as well To modify the security configuration you must open an Admin session with the admin start command An Admin session prevents other accounts from making changes at the same time either through Telnet QuickTools Simple SAN Connection Manager or Enterprise Fabric Management Suite In addition you must open a Config Edit session with the config edit command and i...

Page 92: ...e 5 To release the Admin session for other administrators enter the admin end command SN6000 FC Switch admin admin end Resetting the security database There are two ways to remove all groups and security sets from the security database Enter the security clear command as shown in the following example SN6000 FC Switch admin security security clear All security information will be cleared Please co...

Page 93: ...d disable security in the fabric enter the securityset deactivate command as shown in the following example SN6000 FC Switch admin securityset deactivate Managing groups All group management tasks require an Admin session and a Security Edit session Creating a group Creating a group involves specifying a group name and a group type There are three types of groups ISL group secures connected switch...

Page 94: ...oup Name Group_1 Group Type ISL Member WWN 00 00 00 00 00 00 00 00 10 00 00 c0 dd 00 90 a3 Authentication None Chap None chap PrimaryHash MD5 SHA 1 MD5 PrimarySecret 32 hex or 16 ASCII char value 0123456789abcdef SecondaryHash MD5 SHA 1 None None SecondarySecret 40 hex or 20 ASCII char value Binding domain ID 1 239 0 None 0 Finished configuring attributes To discard this configuration use the secu...

Page 95: ...A 1 MD5 sha 1 PrimarySecret 40 hex or 20 ASCII char value 12345678901234567890 SecondaryHash MD5 SHA 1 None None md5 SecondarySecret 32 hex or 16 ASCII char value 1234567890123456 Binding domain ID 1 239 0 None 3 Finished configuring attributes To discard this configuration use the security cancel command Removing members from a group To remove a member from a group enter the group remove command ...

Page 96: ...96 Device Security Configuration ...

Page 97: ...uthentication A RADIUS server can also be configured to authenticate user accounts See User Account Configuration page 17 A secure connection is required to authenticate user logins with a RADIUS server See Connection Security Configuration page 83 Displaying RADIUS server information To display RADIUS server information enter the show setup radius command as shown in the following example For inf...

Page 98: ...in set setup radius common A list of attributes with formatting and current values will follow Enter a new value or simply press the ENTER key to accept the current value If you wish to terminate this process before reaching the end of the attributes for the server being processed press q or Q and the ENTER key to do so If you wish to terminate the configuration process completely press qq or QQ a...

Page 99: ... and the ENTER key to so do PLEASE NOTE SSL must be enabled in order to configure RADIUS User Authentication SSL can be enabled using the set setup services command Server 1 Current Values ServerIPAddress 10 20 11 8 ServerUDPPort 1812 DeviceAuthServer True UserAuthServer True AccountingServer False Timeout 10 Retries 0 SignPackets False Secret New Server 1 Value press ENTER to accept current value...

Page 100: ...100 RADIUS Server Configuration ...

Page 101: ...on as shown in the following example SN6000 FC Switch admin set log stop To start recording event messages in the switch log enter the set log start command in an Admin session as shown in the following example SN6000 FC Switch admin set log start Displaying the event log To display the event log enter the show log command Each log message has the following format ordinal time_stamp severity messa...

Page 102: ... in the display enter the show log display command with an operand that corresponds to one of the following severity levels and component events Informative events Warning events Critical events E_Port events Management server events Name server events Port events Switch management events SNMP events Zoning events The following example filters the event log display for critical events SN6000 FC Sw...

Page 103: ... To return the event log configuration to the factory default enter the set log restore command in an Admin session as shown in the following example SN6000 FC Switch admin set log restore Clearing the event log To delete all entries in the event log enter the set log clear command in an Admin session as shown in the following example SN6000 FC Switch admin set log clear Logging to a remote host T...

Page 104: ...c value 0 1440 minutes 0 never 0 LocalLogEnabled True False True RemoteLogEnabled True False False RemoteLogHostAddress dot notated IP Address 10 0 0 254 NTPClientEnabled True False False NTPServerAddress dot notated IP Address 10 0 0 254 EmbeddedGUIEnabled True False True Creating and downloading a log file To collect the event log messages in a file logfile on the switch enter the set log archiv...

Page 105: ...t email messages can be sent Configure the Call Home service The Call Home service configuration consists of primary and secondary Simple Mail Transfer Protocol SMTP server specifications and contact information You must enable and specify an address and service port for at least one SMTP server See Configuring the Call Home service page 108 Configure the Call Home database The Call Home database ...

Page 106: ...stats command You can also clear the queue of email messages using the callhome queue clear command There are three email message formats full text short text and Tsc1 The full text format contains the switch and event information plus the contact information from the Call Home profile and SNMP configurations The short text and Tsc1 formats contain basic switch and event information Tsc1 is format...

Page 107: ...0 0002 Time Wed Jul 25 17 02 40 343 CDT 2007 Switch Location Room 123 Rack 9 Bay 3 Contact Information George Smith 12345 4th Street City State 952 999 9999 george smith work com Technical support interface The Tech_Support_Center profile provides a way to collect and send switch status and trend data periodically by email to specified technical support resources To use this feature you must creat...

Page 108: ...rAddr 0 0 0 0 PrimarySMTPServerPort 25 PrimarySMTPServerEnable False SecondarySMTPServerAddr 0 0 0 0 SecondarySMTPServerPort 25 SecondarySMTPServerEnable False ContactEmailAddress nobody localhost localdomain PhoneNumber undefined StreetAddress undefined FromEmailAddress nobody localhost localdomain ReplyToEmailAddress nobody localhost localdomain ThrottleDupsEnabled True New Value press ENTER to ...

Page 109: ...Connection Manager Enterprise Fabric Management Suite or any other management application SN6000 FC Switch admin start 2 Open a Callhome Edit session with the callhome edit command The Callhome Edit session provides access to the profile callhome and capture commands that are used to make modifications to the Call Home database SN6000 FC Switch admin callhome edit SN6000 FC Switch admin callhome c...

Page 110: ...owing example SN6000 FC Switch callhome history CallHome Database History ConfigurationLastEditedBy admin OB session2 ConfigurationLastEditedOn day mmm dd hh mm ss yyyy DatabaseChecksum 000014a3 ProfileName group4 ProfileLevel Warn ProcessedCount 286 ProcessedLast day mmm dd hh mm ss yyyy ProfileName group5 ProfileLevel Alarm ProcessedCount 25 ProcessedLast day mmm dd hh mm ss yyyy To display a li...

Page 111: ...n2 company com RecipientEmail admin3 company com RecipientEmail admin7 company com RecipientEmail admin8 company com RecipientEmail admin9 company com RecipientEmail admin10 company com ProfileName group5 Level Alarm Format ShortText MaxSize any size up to max of 40000 EmailSubject CallHome Alarm RecipientEmail me1 company com RecipientEmail me10 company com To display information about email mess...

Page 112: ... Format 1 FullText 2 ShortText 3 Tsc1 MaxSize decimal value 650 2000000 EmailSubject string max 64 chars N None Technical problem RecipientEmail ex admin company com N None 1 undefined admin0 company com The profile has been created This configuration must be saved with the callhome save command before it can take effect or to discard this configuration use the callhome cancel command SN6000 FC Sw...

Page 113: ...dmin company com N None 1 john smith domain com 2 undefined The profile has been edited This configuration must be saved with the callhome save command before it can take effect or to discard this configuration use the callhome cancel command SN6000 FC Switch admin callhome callhome save The CallHome database profiles will be saved and activated Please confirm y n n y Renaming a profile To rename ...

Page 114: ... effect or to discard this configuration use the callhome cancel command Modifying a data capture configuration to modify a data capture configuration in the Tech_Support_Center profile enter the capture edit command as shown in the following example SN6000 FC Switch admin start SN6000 FC Switch admin callhome edit SN6000 FC Switch admin callhome capture edit Capture Entries for Profile Tech_Suppo...

Page 115: ...ill appear on the screen when the test has completed SN6000 FC Switch admin Test for Callhome Profile group4 Passed Changing Simple Mail Transfer Protocol servers The Call Home service configuration enables you to specify a primary and a secondary SMTP server to which the switch connects The active server is the server that receives messages from the switch By default the primary SMTP server is th...

Page 116: ... SN6000 FC Switch admin callhome callhome clear SN6000 FC Switch admin callhome callhome save The CallHome database profiles will be saved and activated Please confirm y n n y To clear all Call Home profiles and reset the Call Home service configuration to the factory defaults enter the reset callhome command as shown in the following example SN6000 FC Switch admin start SN6000 FC Switch admin res...

Page 117: ...A list of attributes with formatting and current values will follow Enter a new value or simply press the ENTER key to accept the current value If you wish to terminate this process before reaching the end of the list press q or Q and the ENTER key to do so PLEASE NOTE Further configuration may be required after enabling a service If services are disabled the connection to the switch may be lost W...

Page 118: ...torageWorks SN6000 Stackable Dual Power Supply Fibre Channel Switch ObjectID 1 3 6 1 4 1 3873 1 25 AuthFailureTrap True ProxyEnabled True SNMPv3Enabled False Trap1Enabled False Trap1Address 10 0 0 254 Trap1Port 162 Trap1Severity warning Trap1Version 2 Trap2Enabled False Trap2Address 0 0 0 0 Trap2Port 162 Trap2Severity warning Trap2Version 2 Trap3Enabled False Trap3Address 0 0 0 0 Trap3Port 162 Tra...

Page 119: ...t setup snmp common A list of attributes with formatting and current values will follow Enter a new value or simply press the ENTER key to accept the current value If you wish to terminate this process before reaching the end of the list press q or Q and the ENTER key to do so Current Values SnmpEnabled True Contact sysContact undefined Location sysLocation undefined ReadCommunity public WriteComm...

Page 120: ...rsion 2 Trap1Community northdakota New Value press ENTER to not specify value q to quit Trap1Enabled True False Trap1Address hostname IPv4 or IPv6 Address Trap1Port decimal value 1 65535 Trap1Severity select a severity level 1 unknown 6 warning 2 emergency 7 notify 3 alert 8 info 4 critical 9 debug 5 error 10 mark Trap1Version 1 2 Trap1Community string max 32 chars Do you want to save and activate...

Page 121: ... set the SNMPv3Enabled parameter to True SN6000 FC Switch admin start SN6000 FC Switch admin set setup snmp common A list of attributes with formatting and current values will follow Enter a new value or simply press the ENTER key to accept the current value If you wish to terminate this process before reaching the end of the list press q or Q and the ENTER key to do so Current Values SnmpEnabled ...

Page 122: ...rocess before reaching the end of the list press q or Q and the ENTER OR Ctrl C key to do so Username 8 32 chars snmpuser1 Group 0 ReadOnly 1 ReadWrite ReadOnly 1 Authentication True False False t AuthType 1 MD5 2 SHA MD5 1 AuthPhrase 8 32 chars Confirm AuthPhrase Privacy True False False t PrivType 1 DES DES 1 PrivPhrase 8 32 chars Confirm PrivPhrase Do you want to save and activate this snmpv3us...

Page 123: ...er attributes with formatting and current attribute values for the specified SNMPV3 user will follow Enter a new value OR simply press the ENTER key where ever allowed to accept the current value If you wish to terminate this process before reaching the end of the list press q or Q and the ENTER OR Ctrl C key to do so Username 8 32 chars snmpuser1 Group 0 ReadOnly 1 ReadWrite ReadWrite 1 Authentic...

Page 124: ...124 Simple Network Management Protocol Configuration ...

Page 125: ...command include all of the set config commands Commands that modify the Call Home email notification configuration require a Callhome Edit session which is opened by the callhome edit command These commands include the callhome capture and profile commands Commands that modify the Internet Protocol Security configuration require an Ipsec Edit session which is opened by the ipsec edit command These...

Page 126: ...d or stop Closes the Admin session The hardreset hotreset quit shutdown and reset switch commands will also end an Admin session cancel Terminates an Admin session opened by another user Use this operand with care because it terminates the Admin session without warning the other user and without saving pending changes Notes Closing a Telnet window during an Admin session does not release the sessi...

Page 127: ...ts copy alias_source alias_destination Creates a new alias named alias_destination and copies the membership into it from the alias given by alias_source create alias Creates an alias with the name given by alias An alias name must begin with a letter and be no longer than 64 characters Valid characters are 0 9 A Z a z _ and The zoning database supports a maximum of 256 aliases delete alias Delete...

Page 128: ...tch alias list Current list of Zone Aliases alias1 alias2 The following is an example of the alias members command SN6000 FC Switch alias members alias1 Current list of members for Zone Alias alias1 50 06 04 82 bf d2 18 c4 50 06 04 82 bf d2 18 c5 50 06 04 82 bf d2 18 c6 See also zoning edit page 310 ...

Page 129: ...e secondary clear Clears all Call Home profile information from the volatile edit copy of the Call Home database This operand requires a Callhome Edit session This operand does not affect the non volatile Call Home database However if you enter the callhome clear command followed by the callhome save command the non volatile Call Home database will be cleared from the switch NOTE The preferred met...

Page 130: ...Saves changes made during the current Callhome Edit session test profile profile Tests the Call Home profile given by profile Examples The following is an example of the callhome history command SN6000 FC Switch callhome history CallHome Database History ConfigurationLastEditedBy admin OB session2 ConfigurationLastEditedOn day mmm dd hh mm ss yyyy DatabaseChecksum 000014a3 ProfileName group4 Profi...

Page 131: ...e10 company com The following is an example of the callhome list command SN6000 FC Switch callhome list Configured Profiles group4 group5 The following is an example of the callhome test profile command SN6000 FC Switch admin start SN6000 FC Switch admin callhome test profile group4 A callhome profile test has been started A notification with the test result will appear on the screen when the test...

Page 132: ...Table 7 Data capture configuration parameters Parameter Description TimeOfDay Time of day to send status and trend data to the Tech_Support_Center profile email recipients The format is hh mm on a 24 hour clock The default 02 00 DayOfWeek Day of the week to send status and trend data to the Tech_Support_Center profile email recipients Values can be Sun Mon Tue Wed Thur Fri Sat The default is Sat I...

Page 133: ...rd this configuration use the callhome cancel command The following is an example of the capture edit command SN6000 FC Switch admin start SN6000 FC Switch admin callhome edit SN6000 FC Switch admin callhome capture edit Capture Entries for Profile Tech_Support_Center Index TimeOfDay DayOfWeek Interval 1 02 00 Sat 1 weeks Please select a capture entry from the list above q to quit 1 A list of attr...

Page 134: ...s for Profile Tech_Support_Center Index TimeOfDay DayOfWeek Interval 1 02 00 Sat 1 weeks Please select a capture entry from the list above q to quit 1 The selected capture entry has been removed from profile Tech_Support_Center This configuration must be saved with the callhome save command before it can take effect or to discard this configuration use the callhome cancel command See also profile ...

Page 135: ...y port_list source_port_number can be 0 23 port_list can be a list of port numbers or ranges delimited by spaces Notes See Table 33 for a description of the port configuration parameters Examples The following example configures ports 8 19 based on port 0 SN6000 FC Switch admin start SN6000 FC Switch admin config edit SN6000 FC Switch admin clone config port 0 8 19 Port 0 configuration will be clo...

Page 136: ... The switch supports up to 10 configurations including the default configuration delete config_name Deletes the configuration given by config_name from the switch You cannot delete the default configuration Default Config nor the active configuration edit config_name Opens an edit session for the configuration given by config_name If you omit config_name the currently active configuration is used ...

Page 137: ...Fabric Management Suite Archive function are not compatible with the config restore command The configdata backup file does not include the security group primary or secondary secrets and therefore are not restored Unless you edit the security database and reconfigure the secrets the switch will be isolated from the fabric save config_name Saves changes made during a configuration edit session in ...

Page 138: ...ig restore The switch will be reset after restoring the configuration Please confirm y n n y Alarm Msg day month date time year A1005 0021 SM Configuration is being restored this could take several minutes Alarm Msg day month date time year A1000 000A SM The switch will be reset in 3 seconds due to a config restore SN6000 FC Switch admin Alarm Msg day month date time year A1000 0005 SM The switch ...

Page 139: ...etting the time and date set timezone command for information about setting the time zone on the switch and workstation set setup system command for information about enabling the Network Time Protocol for synchronizing the time and date on the switch and workstation from an NTP server support Assembles all log files and switch memory data into a file dump_support tgz on the switch If your worksta...

Page 140: ... seconds FTP the dump support file to another machine y n y Enter address of ftp server hostname IPv4 or IPv6 10 20 33 130 Login name johndoe Enter remote directory name bin support Would you like to continue downloading support file y n n y Connected to 10 20 33 130 10 20 33 130 220 localhost localdomain FTP server Version wu 2 6 1 18 ready 331 Password required for johndoe Password xxxxxxx 230 U...

Page 141: ...the millennium and century YY 00 through 99 corresponds to the decade and year If you omit MMDDhhmmCCYY the current date is displayed which does not require an Admin session Notes Network Time Protocol NTP must be disabled to set the time with the date command To disable the NTPClientEnabled parameter enter the set setup system command When setting the date and time on a switch that is enabled for...

Page 142: ...142 Command Reference exit Description Closes the switch connection Authority None Syntax exit Notes You can also press Control D to close the switch connection ...

Page 143: ... without the 0x prefix 16 character hexadecimal world wide port name WWPN with the format xx xx xx xx xx xx xx xx or xxxxxxxxxxxxxxxx count number Number of times given by number to repeat the command If you omit this keyword the command is repeated once timeout seconds Number of seconds given by seconds to wait for a response If you omit this keyword the switch waits 1 second for a response Examp...

Page 144: ... without the 0x prefix 16 character hexadecimal world wide port name WWPN with the format xx xx xx xx xx xx xx xx or xxxxxxxxxxxxxxxx port_destination The Fibre Channel port at which to end the trace port_destination can have the following formats 6 character hexadecimal device Fibre Channel address hex Enter addresses with or without the 0x prefix 16 character hexadecimal world wide port name WWP...

Page 145: ...le 20Gb ISL Upgrade LTU enables the XPAK ports to transmit at 20 Gb s instead of the default 10 Gb s The HP StorageWorks SN6000 Stackable 4 port FC Switch Upgrade LTU enables additional SFP ports in increments of four on the HP StorageWorks SN6000 Stackable 8Gb 12 port Single Power FC Switch for totals of 16 20 or 24 ports Examples The following is an example of the feature add command SN6000 FC S...

Page 146: ...mware install The switch will be reset This process will cause a disruption to I O traffic Continuing with this action will terminate all management sessions including any Telnet sessions When the firmware activation is complete you may log in to the switch again Do you want to continue y n y Press q and the ENTER key to abort this command FTP or TFTP ftp User Account johndoe IP Address 10 0 0 254...

Page 147: ...ncluding any Telnet sessions When the firmware activation is complete you may log in to the switch again Do you want to continue y n y Press q and the ENTER key to abort this command FTP or TFTP tftp IP Address 10 0 0 254 Source Filename 8 0 xx xx_epc About to install image Do you want to continue y n y Connected to 10 0 0 254 10 0 0 254 220 localhost localdomain FTP server Version wu 2 6 1 18 rea...

Page 148: ... all three tables Table 8 ISL group member attributes Attribute Description Member Worldwide name of the switch that would attach to the switch A member cannot belong to more than one group Authentication Enables Chap or disables None authentication using the Challenge Handshake Authentication Protocol CHAP The default is None PrimaryHash The preferred hash function to use to decipher the encrypte...

Page 149: ...ed hash function to use to decipher the encrypted primary secret sent by the Port group member The hash functions are MD5 or SHA 1 If the Port group member does not support the primary hash the switch will use the secondary hash PrimarySecret Hexadecimal string that is encrypted by the primary hash for authentication with the Port group member The string has the following lengths depending on the ...

Page 150: ...sl Configures security for attachments to other switches port Configures security for attachments to N_Port devices ms Configures security for attachments to N_Port devices that are issuing management server commands delete group Deletes the group given by group edit group member Initiates an editing session in which to change the attributes of a worldwide name given by member in a group given by ...

Page 151: ...rldwide name This option is available only if FabricBindingEnabled is set to True using the set config security command 0 zero specifies no binding Table 12 Group member attributes continued Attribute Description Operands list Displays a list of all groups and the security sets of which they are members This operand is available without an Admin session members group Displays all members of the gr...

Page 152: ...tes To discard this configuration use the security cancel command The following is an example of the group edit command SN6000 FC Switch admin start SN6000 FC Switch admin security edit SN6000 FC Switch admin security group edit G1 10 00 00 c0 dd 00 90 a3 A list of attributes with formatting and current values will follow Enter a new value or simply press the ENTER key to accept the current value ...

Page 153: ...uide 153 The following is an example of the group members command SN6000 FC Switch group members group_1 Current list of members for Group group_1 10 00 00 c0 dd 00 71 ed 10 00 00 c0 dd 00 72 45 10 00 00 c0 dd 00 90 ef 10 00 00 c0 dd 00 b8 b7 See also security page 188 ...

Page 154: ...nding firmware and clears the alarm log To save the alarm log before resetting see the set log command Authority Admin session Syntax hardreset Notes To reset the switch without a power on self test see the reset command To reset the switch without disrupting traffic see the hotreset command See also hotreset page 157 set log page 206 reset page 180 ...

Page 155: ...command all Displays a list of all available commands including command variations Examples The following is an example of the help config command SN6000 FC Switch help config config CONFIG_OPTIONS The config command operates on configurations Usage config activate backup cancel copy delete edit list restore save The following is an example of the help config edit command SN6000 FC Switch help con...

Page 156: ...line number to re execute the corresponding command from the History display Enter partial command string to re execute a command that matches the command string Enter to re execute the most recent command Examples The following is an example of the history command SN6000 FC Switch history 1 show switch 2 date 3 help set 4 history SN6000 FC Switch 3 help set set SET_OPTIONS There are many attribut...

Page 157: ...essful non disruptive activation you should first satisfy the following conditions No changes are being made to switches in the fabric including installing firmware powering up powering down disconnecting or connecting ISLs and changing the switch configuration No port on the switch is in the diagnostic state No zoning changes are being made on the switch No changes are being made to attached devi...

Page 158: ...e then resets the switch to activate the firmware This is disruptive The command prompts you for the following File transfer protocol FTP or TFTP IP address or DNS host name of the remote host An account name and password on the remote host FTP only Pathname for the firmware image file list Displays the list of image files that reside on the switch tftp ip_address file_source file_destination Retr...

Page 159: ...ess 10 0 0 254 Source Filename 8 0 00 xx_epc About to install image Do you want to continue y n y Connected to 10 0 0 254 10 0 0 254 220 localhost localdomain FTP server Version wu 2 6 1 18 ready 331 Password required for johndoe Password xxxxxxxxx 230 User johndoe logged in bin 200 Type set to I verbose Verbose mode off This may take several seconds The switch will now reset Connection closed by ...

Page 160: ...ommand edit Opens an Ipsec Edit session in which to create and manage associations and policies Ipsec Edit session commands include ipsec clear ipsec association commands and ipsec policy commands This operand requires an Admin session history Displays a history of IP security modifications This operand does not require an Admin session History information includes the following Time of the most r...

Page 161: ... The following is an example of the ipsec limits command SN6000 FC Switch ipsec limits Configured saved IPsec Information IPsec Attribute Maximum Current MaxConfiguredSAs 512 0 MaxConfiguredSPs 128 0 See also ipsec association page 162 ipsec list page 165 ipsec policy page 168 ...

Page 162: ...nter the Ipsec Save command afterwards to save your changes Table 13 describes the association configuration parameters Table 13 Association configuration parameters Parameter Description Description Description of the association indicating its purpose or the types of connections which it secures SourceAddress IP address version 4 or 6 or DNS host name of the host switch or gateway from which dat...

Page 163: ...given by association For descriptions of the association parameters refer to Table 13 If the connection is not secure SSH is disabled the AuthenticationKey and EncryptionKey values are masked list option Displays the configuration for the policies given by option If you omit option the command displays the configuration of all active associations option can be one of the following association Disp...

Page 164: ...4 or IPv6 Address fe80 250 daff feb7 9d02 Protocol 1 esp 2 esp old 3 ah 4 ah old 1 SPI decimal value 256 4294967295 333 Authentication select an authentication algorithm 1 hmac md5 16 byte key 2 hmac sha1 20 byte key 3 hmac sha256 32 byte key 4 aes xcbc mac 16 byte key authentication algorithm choice 2 AuthenticationKey quoted string or raw hex bytes 12345678901234567890 Encryption select an encry...

Page 165: ... configuration for all active associations configured Displays the configuration for all user defined associations edited Displays the configuration for all associations that have been modified but not saved configured Displays a summary of the user defined associations and policies edited Displays a summary of the associations and policies that have been modified but not saved policy option Displ...

Page 166: ... following is an example of the ipsec list association command SN6000 FC Switch ipsec list association Active IPsec Information h2h sh sa Description Host to host switch host Source fe80 2c0 ddff fe03 d4c1 Destination fe80 250 daff feb7 9d02 Protocol esp SPI 333 0x14d Authentication hmac sha1 Encryption 3des cbc h2h hs sa Description Host to host host switch Source fe80 250 daff feb7 9d02 Destinat...

Page 167: ... Protocol esp SPI 444 0x1bc Authentication hmac sha1 Encryption 3des cbc The following is an example of the ipsec list policy command SN6000 FC Switch ipsec list policy Active IPsec Information h2h hs sp Description Host to host host switch Source fe80 250 daff feb7 9d02 128 Destination fe80 2c0 ddff fe03 d4c1 128 Protocol any Direction in Priority 0 Action ipsec Rule Protocol Mode Level 1 esp tra...

Page 168: ...command afterwards to save your changes Table 14 describes the policy parameters Table 14 Policy configuration parameters Parameter Description Description Description of the policy SourceAddress IP address version 4 or 6 or DNS host name of the host switch or gateway from which data originates SourcePort Source port number in the range 1 65535 DestinationAddress IP address version 4 or 6 or DNS h...

Page 169: ...urity association is required whenever a packet is sent that is matched with the policy espRuleLevel Rule level to apply for ESP protection Default Use the system wide default for the protocol Use Use a security association if one is available Require A security association is required whenever a packet is sent that is matched with the policy Table 14 Policy configuration parameters continued Para...

Page 170: ...NTER to not specify value q to quit Description string value 0 127 bytes Host to host switch host SourceAddress IPv4 IPv6 or hostname PrefixLength fe80 2c0 ddff fe03 d4c1 SourcePort decimal value 1 65535 DestinationAddress IPv4 IPv6 or hostname PrefixLength fe80 250 daff feb7 9d02 DestinationPort decimal value 1 65535 Protocol decimal value or keyword Allowed keywords icmp icmp6 ip4 tcp udp or any...

Page 171: ... Description Reinitializes the specified loop port Authority Admin session Syntax lip port_number Operands port_number The number of the port to be reinitialized Ports are numbered beginning with 0 Examples The following is an example of the lip command SN6000 FC Switch admin lip 2 ...

Page 172: ...72 Command Reference logout Description Closes the switch connection Authority None Syntax logout Notes You can also press Control D to close the switch connection See also exit page 142 logout page 172 ...

Page 173: ...unt name To change the password for an account name other than your own you must open an Admin session with the account name admin If you omit account_name you will be prompted to change the password for the current account name Examples The following is an example of the passwd command SN6000 FC Switch admin start SN6000 FC Switch admin passwd user2 Press q and the ENTER key to abort this command...

Page 174: ...t and end with an alphanumeric character A host name can end with a period ipv4 host_address IP address version 4 or DNS host name of the switch you want to query Broadcast IP addresses such as 255 255 255 255 are not valid ipv6 host_address IP address version 6 or DNS host name of the switch you want to query Examples The following is an example of a ping command that successfully communicated wi...

Page 175: ...le A profile name must begin with a letter and be no longer than 32 characters Valid characters are alphanumeric _ and The Tech_Support_Center profile name is reserved The Call Home database supports a maximum of 25 profiles You must enter the callhome save command to save your changes Table 15 describes the profile configuration parameters Table 15 Profile configuration parameters Parameter Descr...

Page 176: ...must enter the callhome save command to save your changes Examples The following is an example of the profile create command SN6000 FC Switch admin start SN6000 FC Switch admin callhome edit SN6000 FC Switch admin callhome profile create profile_1 A list of attributes with formatting and default values will follow Enter a new value or simply press the ENTER key to accept the current value If you w...

Page 177: ... ShortText MaxSize 1000 EmailSubject Switch Problem RecipientEmail up to 10 entries allowed 1 john smith domain com New Value press ENTER to accept current value q to quit Level Alarm Critical Warn None Format 1 FullText 2 ShortText 3 Tsc1 MaxSize decimal value 650 2000000 EmailSubject string max 64 chars N None RecipientEmail ex admin company com N None 1 john smith domain com 2 undefined The pro...

Page 178: ...ds 248 224 0 3 2 8 00 09 59 2 03 02 31 mgmtApp 249 224 0 0 0 3 00 00 16 2 03 02 31 sys2swlog 251 224 0 0 0 4 00 00 06 2 03 02 30 fc2 252 224 0 0 0 6 00 00 16 2 03 02 30 nserver 253 224 0 0 0 8 00 00 08 2 03 02 30 PortApp 254 224 0 0 0 5 00 00 03 2 03 02 30 qfsApp 255 224 0 0 0 5 00 00 09 2 03 02 30 mserver 256 224 0 0 0 7 00 00 06 2 03 02 30 eport 257 224 0 0 0 6 00 00 13 2 03 02 30 zoning 282 254...

Page 179: ...re Channel Switch Command Line Interface Guide 179 quit Description Closes the switch connection Authority None Syntax quit Notes You can also press Control D to close the switch connection See also exit page 142 logout page 172 ...

Page 180: ...tion RADIUS configuration switch services configuration zoning configuration and Call Home configuration to the factory default values as described in Table 17 through Table 30 The switch configuration is activated automatically NOTE Because this operand changes network parameters the workstation could lose communication with the switch and release the Admin session This operand does not affect in...

Page 181: ...eted from the switch during a switch reset Firmware image files that have not been unpacked Configuration backup files Support files system Resets the following system configuration settings to the factory default values DNS host Table 24 IPv4 Ethernet Table 25 IPv6 Ethernet Table 26 Event logging Table 27 NTP Table 28 Timers Table 29 NOTE Because this operand changes network parameters the workst...

Page 182: ...and to display the DNS host configuration The default values are shown in Table 24 Enter the show setup system ipv4 command to display the IPv4 Ethernet configuration The default values are shown in Table 25 Enter the show setup system ipv6 command to display the IPv6 Ethernet configuration The default values are shown in Table 26 Enter the show setup system logging command to display the event lo...

Page 183: ...ion Config Default Table 18 Port configuration defaults Parameter SFP Port Defaults XPAK Port Defaults AdminState Online Online LinkSpeed Auto Auto PortType GL G SymbolicName Port n where n is the port number 20 G n where n is the port number ALFairness False N A DeviceScanEnabled True True ForceOfflineRSCN False False ARB_FF False N A InteropCredit 0 0 ExtCredit 0 N A FANEnable True N A AutoPerfT...

Page 184: ...gger FallingTrigger SampleWindow True 2 0 10 LoginMonitoringEnabled RisingTrigger FallingTrigger SampleWindow True 5 1 10 LogoutMonitoringEnabled RisingTrigger FallingTrigger SampleWindow True 5 1 10 LOSMonitoringEnabled RisingTrigger FallingTrigger SampleWindow True 100 5 10 Table 20 Zoning configuration defaults Parameter Default MergeAutoSave True DefaultZone Allow DiscardInactive False Table 2...

Page 185: ...1 4 1 3873 1 25 AuthFailureTrap False ProxyEnabled True SNMPv3Enabled False Trap 1 5 Address Trap 1 10 0 0 254 Traps 2 5 0 0 0 0 Trap 1 5 Port 162 Trap 1 5 Severity Warning Trap 1 5 Version 2 Trap 1 5 Enabled False Table 21 SNMP configuration defaults continued Parameter Default Table 22 RADIUS configuration defaults Parameter Default DeviceAuthOrder Local UserAuthOrder Local TotalServers 0 Device...

Page 186: ...SClientEnabled False DNSLocalHostname undefined DNSServerDiscovery Static DNSServer1Address undefined DNSServer2Address undefined DNSServer3Address undefined DNSSearchListDiscovery Static DNSSearchList1 undefined DNSSearchList2 undefined DNSSearchList3 undefined DNSSearchList4 undefined DNSSearchList5 undefined Table 25 IPv4 Ethernet configuration defaults Parameter Default EthIPv4NetworkEnable Tr...

Page 187: ... defaults Parameter Default LocalLogEnabled True RemotelogEnabled False RemoteLogHostAddress 10 0 0 254 Table 28 NTP server configuration defaults Parameter Default NTPClientEnabled False NTPServerAddress 10 0 0 254 EmbeddedGUIEnabled True Table 29 Timer configuration defaults Parameter Default AdminTimeout 30 InactivityTimeout 0 Table 30 Security configuration defaults Parameter Default AutoSave ...

Page 188: ...witch NOTE The preferred method for clearing the security database from the switch is the reset security command edit Initiates a Security Edit session in which to make changes to the security database A Security Edit session enables you to use the group and securityset commands to create add and delete security sets groups and group members To close a Security Edit session and save changes enter ...

Page 189: ...6000 FC Switch security active Active Security Information SecuritySet Group GroupMember alpha group1 ISL 10 00 00 00 00 10 21 16 Authentication Chap Primary Hash MD5 Primary Secret Secondary Hash SHA 1 Secondary Secret Binding 0 10 00 00 00 00 10 21 17 Authentication Chap Primary Hash MD5 Primary Secret Secondary Hash SHA 1 Secondary Secret Binding 0 The following is an example of the security hi...

Page 190: ...tyset defined Configured Security Information SecuritySet Group GroupMember alpha group1 ISL 10 00 00 00 00 10 21 16 Authentication Chap Primary Hash MD5 Primary Secret Secondary Hash SHA 1 Secondary Secret Binding 0 10 00 00 00 00 10 21 17 Authentication Chap Primary Hash MD5 Primary Secret Secondary Hash SHA 1 Secondary Secret Binding 0 See also group page 148 securityset page 191 ...

Page 191: ..._list A security set can have a maximum of three groups but no more than one group of each group type copy security_set_source security_set_destination Creates a new security set named security_set_destination and copies into it the membership from the security set given by security_set_source create security_set Creates the security set with the name given by security_set A security set name must...

Page 192: ...By Remote LastActivatedOn day month date time year The following is an example of the securityset groups command SN6000 FC Switch securityset groups alpha Current list of Groups for SecuritySet alpha group1 ISL group2 Port The following is an example of the securityset list command SN6000 FC Switch securityset list Current list of SecuritySets alpha beta See also group page 148 security page 188 ...

Page 193: ...cribes the output stream alarm parameters Table 31 Output stream alarm parameters Parameter Description clear Clears the alarm log history This value requires an Admin session on Enables the display of alarms in the session output stream off Disables the display of alarms in the session output stream Disabling the display of alarms in the output stream allows command scripts to run without interru...

Page 194: ...ing a switch Authority None Syntax set beacon state Operands state Table 32 describes the beacon state parameters Table 32 Beacon state parameters Parameter Description on Enables the flashing beacon off Disables the flashing beacon Examples The following is an example of the set beacon command SN6000 FC Switch set beacon on ...

Page 195: ...r a new value or press Enter to accept the current value shown in brackets Enter q to end the configuration Table 33 describes the port configuration parameters Table 33 Port configuration parameters Parameter Description AdminState Port administrative state Online Activates and prepares the port to send data This is the default Offline Prevents the port from receiving signal and accepting a devic...

Page 196: ...d True and the port is an FL_Port MFSEnable is automatically enabled LCFEnable and VIEnable are overridden to False If AutoPerfTuning is disabled False MFSEnable LCFEnable and VIEnable retain their original values LCFEnable Link control frame preference routing This parameter appears only if AutoPerfTuning is False Enables True or disables False preferred routing of frames with R_CTL 1100 Class 2 ...

Page 197: ...admin start SN6000 FC Switch admin config edit SN6000 FC Switch admin config set config port 1 A list of attributes with formatting and current values will follow Enter a new value or simply press the ENTER key to accept the current value If you wish to terminate this process before reaching the end of the list press q or Q and the ENTER key to do so Configuring Port Number 1 AdminState 1 Online 2...

Page 198: ... Q and the ENTER key to do so Configuring Port Number 20 AdminState 1 Online 2 Offline 3 Diagnostics 4 Down Online LinkSpeed 10 10Gb s 20 20Gb s A Auto Auto PortType G F G SymPortName string max 32 chars 20G 20 DeviceScanEnable True False True ForceOfflineRSCN True False False AutoPerfTuning True False True MSEnable True False True IOStreamGuard Enable Disable Auto Auto Finished configuring attrib...

Page 199: ... the saving of changes to active security set in the switch s permanent memory The default is True FabricBindingEnabled Enables True or disables False the configuration and enforcement of fabric binding on all switches in the fabric Fabric binding associates switch worldwide names with a domain ID in the creation of ISL groups The default is False Examples The following is an example of the set co...

Page 200: ...lse WWN Worldwide port name for the port device that is allowed to connect to the port given by port_number Examples The following is an example of the set config security portbinding command SN6000 FC Switch admin start SN6000 FC Switch admin config edit SN6000 FC Switch admin config set config security portbinding 1 A list of attributes with formatting and current values will follow Enter a new ...

Page 201: ...bles False forwarding of broadcast frames The default is True InbandEnabled Inband management Enables True or disables False the ability to manage the switch over an ISL The default is True FDMIEnabled Fabric Device Monitoring Interface FDMI Enables True or disables False the monitoring of target and initiator device information The default is True FDMIEntries The number of device entries to maint...

Page 202: ...aching the end of the list press q or Q and the ENTER key to do so AdminState 1 Online 2 Offline 3 Diagnostics Online BroadcastEnabled True False True InbandEnabled True False True FDMIEnabled True False True FDMIEntries decimal value 0 1000 1000 DefaultDomainID decimal value 1 239 2 DomainIDLock True False False SymbolicName string max 32 chars SN6000 FC Switch R_A_TOV decimal value 100 100000 ms...

Page 203: ...ault is False CRCErrorsMonitoringEnabled DecodeErrorsMonitoringEnabled ISLMonitoringEnabled LoginMonitoringEnabled LogoutMonitoringEnabled LOSMonitoringEnabled The event type enable disable parameter Enables True or disables False the generation of alarms for each of the following events CRC errors Decode errors ISL connection count Device login errors Device logout errors Loss of signal errors Ri...

Page 204: ...5 FallingTrigger decimal value 0 1000 0 SampleWindow decimal value 1 1000 sec 10 ISLMonitoringEnabled True False True RisingTrigger decimal value 1 1000 2 FallingTrigger decimal value 0 1000 0 SampleWindow decimal value 1 1000 sec 10 LoginMonitoringEnabled True False True RisingTrigger decimal value 1 1000 5 FallingTrigger decimal value 0 1000 1 SampleWindow decimal value 1 1000 sec 10 LogoutMonit...

Page 205: ...onfigurations should a switch have to be reset For this reason the MergeAutoSave parameter should be enabled in a production environment DefaultZone Enables Allow or disables Deny communication among ports devices that are not defined in the active zone set The default is Allow DiscardInactive Enables True or disables False the discarding of all inactive zone sets from that zoning database Inactiv...

Page 206: ...nt filter_list Specifies one or more components given by filter_list to monitor for events A component is a firmware module that is responsible for a particular portion of switch operation Use a space to delimit values in the list Table 39 describes the component event monitoring filter parameters Table 39 Component event monitoring filter parameters Parameter Description All Monitors all componen...

Page 207: ...arameter Description Critical Monitors critical events The critical level describes events that are generally disruptive to the administration or operation of the fabric but require no action This is the default severity level Warn Monitors warning and critical events The warning level describes events that are generally not disruptive to the administration or operation of the fabric but are more ...

Page 208: ...archive command start Starts the logging of events based on the port component and level operands assigned to the current configuration The logging continues until you enter the set log stop command stop Stops logging of events Notes In addition to critical warn and informative severity levels the highest event severity level is alarm The alarm level describes events that are disruptive to the adm...

Page 209: ...e parameters Parameter Description on Limits the display of information to 20 lines at a time The page break function affects the following commands alias list members show alarm log zone list members zoneset list zones zoning active list off Allows continuous display of information without a break This is the default Examples The following is an example of the set pagebreak command SN6000 FC Swit...

Page 210: ...b s This applies only to ports 20 23 20Gb s The port speed is 20 Gb s This applies only to ports 20 23 Auto The port speed is automatically detected state state Specifies the port administrative state Table 45 describes the port administrative state parameters Table 45 Port administrative state parameters Parameter Description Online Activates and prepares the port to send data Offline Prevents th...

Page 211: ...ault is False ContactEmailAddress Email address of the person to be notified to respond to the email message The format is account domain This information is included in the email message when the profile format is FullText PhoneNumber Contact phone number to be included in the email message text This information is included in the email message when the profile format is FullText StreetAddress Co...

Page 212: ...d the ENTER key to do so If either the Primary or Secondary SMTP Servers are enabled the FromEmailAddress attribute must be configured or the switch will not attempt to deliver messages Current Values PrimarySMTPServerAddr 0 0 0 0 PrimarySMTPServerPort 25 PrimarySMTPServerEnable False SecondarySMTPServerAddr 0 0 0 0 SecondarySMTPServerPort 25 SecondarySMTPServerEnable False ContactEmailAddress nob...

Page 213: ... Local Authenticate users using only the local security database This is the default Radius Authenticate users using only the security database on the RADIUS server RadiusLocal Authenticate users using the RADIUS server security database first If the RADIUS server is unavailable then use the local switch security database TotalServers Number of RADIUS servers to configure during this session Setti...

Page 214: ...a password for authentication purposes between the switch and the RADIUS server Table 48 Server specific RADIUS server configuration attributes Attribute Description Examples The following is an example of the set setup radius common command SN6000 FC Switch admin set setup radius common A list of attributes with formatting and current values will follow Enter a new value or simply press the ENTER...

Page 215: ...ENTER key to so do PLEASE NOTE SSL must be enabled in order to configure RADIUS User Authentication SSL can be enabled using the set setup services command Server 1 Current Values ServerIPAddress 10 20 11 8 ServerUDPPort 1812 DeviceAuthServer True UserAuthServer True AccountingServer False Timeout 10 Retries 0 SignPackets False Secret New Server 1 Value press ENTER to accept current value q to ski...

Page 216: ...nnection Manager Enterprise Fabric Management Suite SNMP and SMI S If this service is disabled the switch can only be managed inband or through the serial port The default is True SSLEnabled Enables True or disables False secure SSL connections for management applications including Simple SAN Connection Manager QuickTools Enterprise Fabric Management Suite and SMI S The default is False Simple SAN...

Page 217: ...is False CIMEnabled Enables True or disables False the management of the switch through third party applications that use SMI S The default is True FTPEnabled Enables True or disables False FTP for transferring files rapidly between the workstation and the switch The default is True MgmtServerEnabled Enables True or disables False the management of the switch through third party applications that ...

Page 218: ...isabled the connection to the switch may be lost When enabling SSL please verify that the date time settings on this switch and the workstation from where the SSL connection will be started match and then a new certificate may need to be created to ensure a secure connection to this switch TelnetEnabled True False True SSHEnabled True False False GUIMgmtEnabled True False True SSLEnabled True Fals...

Page 219: ... passed to the Call Home service configuration ReadCommunity Read community password that authorizes an SNMP agent to read information from the switch This is a write only field The value on the switch and the SNMP management server must be the same The read community password can be up to 32 characters excluding semicolon and comma The default is public WriteCommunity Write community password tha...

Page 220: ...rap 1 5 Version Specifies the SNMP version 1 or 2 to use in formatting traps The default is 2 Trap 1 5 Enabled Specifies whether traps event information are enabled True or disabled False The default is False Examples The following is an example of the set setup snmp common command SN6000 FC Switch admin set setup snmp common A list of attributes with formatting and current values will follow Ente...

Page 221: ...ist press q or Q and the ENTER key to do so Current Values Trap1Enabled True Trap1Address 10 20 33 181 Trap1Port 5001 Trap1Severity info Trap1Version 2 Trap1Community northdakota New Value press ENTER to not specify value q to quit Trap1Enabled True False Trap1Address hostname IPv4 or IPv6 Address Trap1Port decimal value 1 65535 Trap1Severity select a severity level 1 unknown 6 warning 2 emergency...

Page 222: ...ters Parameter Description DNSClientEnabled Enables True or disables False the DNS client The default is False DNSLocalHostname Name of local DNS server DNSServerDiscovery DNS server boot method 1 Static 2 DHCP Dynamic Host Configuration Protocol 3 DHCP version 6 The default is Static DNSServer1Address DNSServer2Address DNSServer3Address IP addresses version 4 or 6 of up to three DNS servers DNSSe...

Page 223: ...EthIPv4NetworkAddress Ethernet IP address The default is 10 0 0 1 EthIPv4NetworkMask Ethernet subnet mask address The default is 255 0 0 0 EthIPv4GatewayAddress Ethernet IP address gateway The default is 10 0 0 254 Operands ipv6 Prompts you in a line by line fashion to change the switch IPv6 Ethernet configuration parameters described in Table 54 To configure all system parameters omit the operand...

Page 224: ...l system parameters omit the operand For each parameter enter a new value or press Enter to accept the current value Table 56 NTP server configuration parameters Parameter Description NTPClientEnabled Enables True or disables False the Network Time Protocol NTP client on the switch This client enables the switch to synchronize its time with an NTP server This feature supports NTP version 4 and is ...

Page 225: ...value If you wish to terminate this process before reaching the end of the list press q or Q and the ENTER key to do so Current Values DNSClientEnabled False DNSLocalHostname undefined DNSServerDiscovery Static DNSServer1Address undefined DNSServer2Address undefined DNSServer3Address undefined DNSSearchListDiscovery Static DNSSearchList1 undefined DNSSearchList2 undefined DNSSearchList3 undefined ...

Page 226: ...otated IP Address EthIPv4NetworkMask dot notated IP Address EthIPv4GatewayAddress dot notated IPv4 Address Do you want to save and activate this system setup y n n The following is an example of the set setup system ipv6 command SN6000 FC Switch admin set setup system ipv6 A list of attributes with formatting and current values will follow Enter a new value or simply press the ENTER key to accept ...

Page 227: ...RemoteLogEnabled True False RemoteLogHostAddress hostname IPv4 or IPv6 Address Do you want to save and activate this system setup y n n The following is an example of the set setup system ntp command SN6000 FC Switch admin set setup system ntp A list of attributes with formatting and current values will follow Enter a new value or simply press the ENTER key to accept the current value If you wish ...

Page 228: ...TER key to accept the current value If you wish to terminate this process before reaching the end of the list press q or Q and the ENTER key to do so Current Values AdminTimeout 30 InactivityTimeout 0 New Value press ENTER to accept current value q to quit AdminTimeout dec value 0 1440 minutes 0 never InactivityTimeout dec value 0 1440 minutes 0 never Do you want to save and activate this system s...

Page 229: ...is the default offline Prevents the ports from receiving signal and accepting a device login diagnostics Prepares the ports for testing and prevents each port from accepting a device login When you leave the diagnostics state the switch automatically resets Notes QuickTools and Enterprise Fabric Management Suite override any temporary administrative state changes that have been made using the Set ...

Page 230: ... Atlantic Australia Europe Indian Pacific UTC Press ENTER for more options or q to make a selection America Grenada America Guadeloupe America Guatemala America Guayaquil America Guyana America Halifax America Havana America Hermosillo America Indiana America Indianapolis America Monterrey America Montevideo America Montreal America Montserrat America Nassau America New_York America Nipigon Americ...

Page 231: ...Description of the switch system HostName DNS host name EthIPv4NetworkAddress IP address IPv4 EthIPv6NetworkAddress IP address IPv6 MacAddress Media Access Control MAC address of the switch WorldWideName Worldwide name of the switch ChassisSerialNumber Serial number of the switch SymbolicName Symbolic name of the switch ActiveSWVersion Firmware version ActiveTimestamp Date and time that the firmwa...

Page 232: ...al Power Supply Fibre Channel Switch HostName undefined EthIPv4NetworkAddress 10 20 11 192 EthIPv6NetworkAddress MACAddress 00 c0 dd 00 71 ee WorldWideName 10 00 00 c0 dd 00 71 ed ChassisSerialNumber FAM033100024 SymbolicName SN6000 FC Switch ActiveSWVersion V8 0 x x xx xx ActiveTimestamp day month date time year POSTStatus Passed LicensedPorts 24 SwitchMode Full Fabric See also show version page ...

Page 233: ...er cycled Examples The following is an example of the show alarm command SN6000 FC Switch show alarm 1 Fri Jan 19 13 50 26 508 UTC 2007 A 1004 000F Port 4 Eport Isolating due to Merge Zone Failure 2 Fri Jan 19 13 50 26 513 UTC 2007 A 1004 0030 Topology change lost route to switch with domain ID 1 3 Sun Jan 21 07 59 28 677 UTC 2007 A 1004 0030 Topology change lost route to switch with domain ID 99 ...

Page 234: ... tree information and all ports that are currently transmitting and receiving broadcast frames Authority None Syntax show broadcast Examples The following is an example of the show broadcast command SN6000 FC Switch show broadcast Group Member Ports ISL Ports 0 3 16 15 16 ...

Page 235: ... status and temperature Authority None Syntax show chassis Examples The following is an example of the show chassis command SN6000 FC Switch show chassis Chassis Information BoardTemp 1 Degrees Celsius 26 BoardTemp 2 Degrees Celsius 31 BoardTemp 3 Degrees Celsius 31 PowerSupplyStatus 1 Good HeartBeatCode 1 HeartBeatStatus Normal ...

Page 236: ...mber all ports are specified Examples The following is an example of the show config port command for port 3 SN6000 FC Switch show config port 3 Configuration Name default Port Number 3 AdminState Offline LinkSpeed Auto PortType GL SymbolicName Port3 ALFairness False DeviceScanEnabled True ForceOfflineRSCN False ARB_FF False InteropCredit 0 ExtCredit 0 FANEnabled True AutoPerfTuning True MSEnabled...

Page 237: ... SN6000 FC Switch show config port 20 Configuration Name default Port Number 20 AdminState Offline LinkSpeed 10Gb s PortType G SymbolicName 10G 20 DeviceScanEnabled True ForceOfflineRSCN False AutoPerfTuning False LCFEnabled False MFSEnabled True VIEnabled False MSEnabled True IOStreamGuard Disabled PDISCPingEnable True See also set config port page 195 ...

Page 238: ...0 5 False No port binding entries found 6 True 10 20 30 40 50 60 70 81 7 False No port binding entries found 8 True 10 20 30 40 50 60 70 80 9 False No port binding entries found 10 False No port binding entries found 11 False No port binding entries found 12 False No port binding entries found 13 False No port binding entries found 14 False No port binding entries found 15 False No port binding en...

Page 239: ...tries found 3 True 10 20 30 40 50 60 70 80 4 True 10 20 30 40 50 60 70 80 5 False No port binding entries found 6 True 10 20 30 40 50 60 70 81 7 False No port binding entries found 8 True 10 20 30 40 50 60 70 80 9 False No port binding entries found 10 False No port binding entries found 11 False No port binding entries found 12 False No port binding entries found 13 False No port binding entries ...

Page 240: ...ch Configuration Name default Switch Configuration Information AdminState Online BroadcastEnabled False InbandEnabled True FDMIEnabled False FDMIEntries 10 DefaultDomainID 19 0x13 DomainIDLock True SymbolicName SN6000 FC Switch R_A_TOV 10000 E_D_TOV 2000 PrincipalPriority 254 ConfigDescription Default Config ConfigLastSavedBy admin OB session5 ConfigLastSavedOn day month date time year InteropMode...

Page 241: ...ration Information ThresholdMonitoringEnabled False CRCErrorsMonitoringEnabled True RisingTrigger 25 FallingTrigger 1 SampleWindow 10 DecodeErrorsMonitoringEnabled True RisingTrigger 25 FallingTrigger 0 SampleWindow 10 ISLMonitoringEnabled True RisingTrigger 2 FallingTrigger 0 SampleWindow 10 LoginMonitoringEnabled True RisingTrigger 5 FallingTrigger 1 SampleWindow 10 LogoutMonitoringEnabled True ...

Page 242: ...tch Authority None Syntax show config zoning Examples The following is an example of the show config zoning command SN6000 FC Switch show config zoning Configuration Name default Zoning Configuration Information MergeAutoSave True DefaultZone Allow DiscardInactive False See also set config zoning page 205 ...

Page 243: ...FC Switch show domains Principal switch is remote 10 00 00 60 69 50 0b 6c Upstream Principal ISL is 1 Domain ID List Domain 97 0x61 WWN 10 00 00 c0 dd 00 71 ed Domain 98 0x62 WWN 10 00 00 60 df 22 2e 0c Domain 99 0x63 WWN 10 00 00 c0 dd 00 72 45 Domain 100 0x64 WWN 10 00 00 c0 dd 00 ba 68 Domain 101 0x65 WWN 10 00 00 60 df 22 2e 06 Domain 102 0x66 WWN 10 00 00 c0 dd 00 90 ef Domain 103 0x67 WWN 10...

Page 244: ...to Port Donor Group Extend Credit 0 GL 0 16 None 0 0 1 GL 0 16 None 0 0 2 GL 0 16 None 0 0 3 GL 0 16 None 0 0 4 GL 0 16 None 0 0 5 GL 0 16 None 0 0 6 GL 0 16 None 0 0 7 GL 0 16 None 0 0 8 GL 0 16 None 0 0 9 GL 0 16 None 0 0 10 GL 0 16 None 0 0 11 GL 0 16 None 0 0 12 GL 0 16 None 0 0 13 GL 0 16 None 0 0 14 GL 0 16 None 0 0 15 GL 0 16 None 0 0 16 G 0 16 None 0 0 17 GL 0 16 None 0 0 18 GL 0 16 None 0...

Page 245: ...Current High Warn High Alarm 0 BOARD Normal 24 65 70 1 DS1780 Normal 28 n a n a 2 MAX1617 Normal 31 65 70 3 ASIC Normal 49 95 100 Voltage Sensors Sensor Description Status Current Low Alarm High Alarm 0 2 5V Good 2 50 2 20 2 80 1 1 25V Good 1 24 1 00 1 50 2 3 3V Good 3 32 3 02 3 58 3 12V Good 12 00 10 00 13 31 4 1 2V Good 1 26 1 04 1 38 5 1 5V Good 1 50 1 31 1 68 6 1 8V_ANALOG Good 1 78 1 58 2 02 ...

Page 246: ...h only Examples The following is an example of the show fabric command SN6000 FC Switch show fabric Domain 133 0x85 WWN 10 00 00 c0 dd 0d 53 91 SymbolicName SN6000 FC Switch HostName undefined EthIPv4Address 10 20 116 133 EthIPv6Address undefined indicates principal switch The following is an example of the show fabric brief command SN6000 FC Switch show fabric brief Domain WWN SymbolicName 16 0x1...

Page 247: ...tID Manufacturer Model Ports 21 01 00 e0 8b 27 aa bc 610000 QLogic Corporation QLA2342 2 21 00 00 00 ca 25 9b 96 180100 QLogic Corporation QL2330 2 The following is an example of the show fdmi wwn command SN6000 FC Switch show fdmi 21 00 00 e0 8b 09 3b 17 FDMI Information Manufacturer QLogic Corporation SerialNumber 04202 Model QLA2342 ModelDescription QLogic QLA2342 PCI Fibre Channel Adapter Port...

Page 248: ...al inet6 addr fe80 2c0 ddff fe00 27 64 Scope Link UP BROADCAST RUNNING MULTICAST MTU 1500 Metric 1 RX packets 137168 errors 0 dropped 0 overruns 0 frame 0 TX packets 2194 errors 0 dropped 0 overruns 0 carrier 0 collisions 0 txqueuelen 1000 RX bytes 47764214 45 5 Mb TX bytes 328639 320 9 Kb lo Link encap Local Loopback inet addr 127 0 0 1 Mask 255 255 255 255 inet6 addr 1 128 Scope Host UP LOOPBACK...

Page 249: ...e event log number_of_events must be a positive integer component Displays the components currently being monitored for events Table 60 describes the log monitoring components Table 60 Log monitoring components Component Description Chassis Chassis hardware components such as fans and power supplies CLI Command line interface events Eport E_Port events Mgmtserver Management server events Nameserve...

Page 250: ...vel see the set log command port Displays the ports being monitored for events If an event occurs which is of the defined level and on a defined component but is not on a defined port no entry is made in the log settings Displays the current filter settings for component severity level port and display level This command is equivalent to executing the following commands separately show log compone...

Page 251: ...nth date time year I Eport Port 0 8 Sending init hello 330 day month date time year I Eport Port 0 8 Processing EFP oxid 0x8 331 day month date time year I Eport Port 0 8 Eport State E_A2_IDLE 332 day month date time year I Eport Port 0 8 EFP WWN 0x100000c0dd00b845 len 0x30 333 day month date time year I Eport Port 0 8 Sending LSU oxid 0xc type 1 334 day month date time year I Eport Port 0 8 Send ...

Page 252: ... 100 NeighborDomain 35 LocalPort 7 RemotePort 7 Cost 500 NeighborDomain 35 LocalPort 5 RemotePort 4 Cost 500 Local Domain LsID 35 Age 1166 Incarnation 0x800000cc NeighborDomain 34 LocalPort 16 RemotePort 16 Cost 100 NeighborDomain 34 LocalPort 19 RemotePort 18 Cost 100 NeighborDomain 36 LocalPort 5 RemotePort 4 Cost 250 NeighborDomain 34 LocalPort 7 RemotePort 7 Cost 500 NeighborDomain 34 LocalPor...

Page 253: ...ts Authority None Syntax show media port_number all installed Operands port_number The port for which to display transceiver information port_number can be 0 23 all Displays transceiver information for all ports installed Displays transceiver information for all ports that have transceivers installed Notes Table 62 describes the transceiver information in the show media display ...

Page 254: ...mperature in degrees Celsius Voltage Supply voltage in Volts The range is 0 6 55 Tx Bias Transmitter laser bias current in milliamps The range is 0 655 Tx Power Transmitter coupled output power in milliWatts The range is 0 6 55 Rx Power Received optical power in milliWatts The range is 0 6 55 Value Measured value Status State associated with the measured value Normal Value is in the normal operati...

Page 255: ...iaVendor FINISAR CORP MediaPartNumber FLTF8528P2BNV MediaRevision A MediaSerialNumber P6G22RL MediaSpeeds 2Gb s 4Gb s 8Gb s Temp Voltage Tx Bias Tx Pwr Rx Pwr C V mA mW mW Value 37 32 3 33 7 30 0 373 0 000 Status Normal HighWarning Normal Normal LowAlarm HighAlarm 95 00 3 90 17 00 0 637 1 264 HighWarning 90 00 3 70 14 00 0 637 0 791 LowWarning 20 00 2 90 2 00 0 082 0 028 LowAlarm 25 00 2 70 1 00 0...

Page 256: ... memory values are in 1K block units NOTE This operand will display memory activity updates until count is reached it cannot be interrupted Therefore avoid using large values for count Examples The following is an example of the show mem command SN6000 FC Switch show mem procs memory swap io system cpu r b swpd free buff cache si so bi bo in cs us sy id wa 1 0 0 334464 55932 18728 0 0 1 0 401 57 1...

Page 257: ... an example of the show ns local domain command SN6000 FC Switch show ns Seq Domain Port Port No ID ID Type COS PortWWN NodeWWN 1 19 0x13 1301e1 NL 3 21 00 00 20 37 73 13 69 20 00 00 20 37 73 13 69 2 19 0x13 1301e2 NL 3 21 00 00 20 37 73 12 9b 20 00 00 20 37 73 12 9b 3 19 0x13 1301e4 NL 3 21 00 00 20 37 73 05 26 20 00 00 20 37 73 05 26 4 19 0x13 130d00 N 3 21 01 00 e0 8b 27 a7 bc 20 01 00 e0 8b 27...

Page 258: ...show pagebreak Operands The pagebreak setting limits the display of information to 20 lines ON or allows the continuous display of information without a break OFF Examples The following is an example of the show pagebreak command SN6000 FC Switch show pagebreak current setting ON See also set pagebreak page 209 ...

Page 259: ...t_list Displays continuous performance data in bytes second received for the ports given by port_list port_list can be a set of port numbers and ranges delimited by spaces For example 0 2 10 15 specifies ports 0 2 10 11 12 13 14 and 15 If you omit port_list the command displays performance data for ports 0 15 Type q and press Enter to stop the display outbyte port_list Displays continuous performa...

Page 260: ...s s Bytes s Frames s Frames s Frames s Number in out total in out total 0 7K 136M 136M 245 68K 68K 1 58K 0 58K 1K 0 1K 2 0 0 0 0 0 0 3 0 0 0 0 0 0 4 0 0 0 0 0 0 5 0 0 0 0 0 0 6 0 7K 7K 0 245 245 7 136M 58K 136M 68K 1K 70K 8 7K 136M 136M 245 68K 68K 9 58K 0 58K 1K 0 1K 10 0 0 0 0 0 0 11 0 0 0 0 0 0 12 0 0 0 0 0 0 13 0 0 0 0 0 0 14 0 7K 7K 0 245 245 15 136M 58K 136M 68K 1K 70K 16 47M 23K 47M 23K 726...

Page 261: ...lve This causes a Link Reset to recover the credits ClassXFramesIn Number of class x frames received by this port ClassXFramesOut Number of class x frames sent by this port ClassXWordsIn Number of class x words received by this port ClassXWordsOut Number of class x words sent by this port ClassXToss Number of times an SOFi3 or SOFn3 frame is tossed ConfigType Configured port type G GL F FL TR or D...

Page 262: ...re the loop LIP_F8_AL_PS Number of LIP frames indicating a loop failure detected by the L_Port identified by AL_PS LIP_F7_F7 Number of LIP frames that acquire a valid Arbitrated Loop Physical Address AL_PA LIP_F8_F7 Number of LIP frames indicating that a loop failure has been detected at the receiver Login Number of device logins that have occurred on the port LoginStatus Device login status for t...

Page 263: ...rames that are less than the minimum size were received SymbolicName Symbolic name of the port SyncStatus Synchronization status SyncAcquired SyncLost TestFaultCode Fault code from the most recent port test TestStatus Status from the most recent port test Passed Failed NeverRun TotalErrors Total number of errors detected on the port since the last port or switch reset TotalLinkResets Total number ...

Page 264: ...otLoggedIn TestStatus NeverRun MaxCredit 16 UpstreamISL False MediaSpeeds 2Gb s 4Gb s 8Gb s XmitterEnabled True ALInit 1 LIP_F8_F7 0 ALInitError 0 LinkFailures 0 BadFrames 0 Login 0 BBCR_FrameFailures 0 Logout 0 BBCR_RRDYFailures 0 LongFramesIn 0 Class2FramesIn 0 LoopTimeouts 0 Class2FramesOut 0 LossOfSync 0 Class2WordsIn 0 LostFrames 0 Class2WordsOut 0 LostRRDYs 0 Class3FramesIn 0 PrimSeqErrors 0...

Page 265: ...s an example of the show postlog command SN6000 FC Switch show postlog Queue POST Sequence Count 467 Success Count 452 Failed Count 42 Records 53 Record 1 of 53 Time day mmm dd hh mm ss yyyy Sequence Number 5 Consecutive Passes 5 Record 2 of 53 Time day mmm dd hh mm ss yyyy Sequence Number 6 Test TEST_SUITE_POST 0x13 Subtest TEST_STATIC_PORTADDR 0x72 Fault Code DIAGS_ERR_CPORT_VERIFY 0x34 Loops 0 ...

Page 266: ...s an example of the show setup callhome command SN6000 FC Switch admin show setup callhome Callhome Information PrimarySMTPServerAddr 0 0 0 0 PrimarySMTPServerPort 25 PrimarySMTPServerEnabled False SecondarySMTPServerAddr 0 0 0 0 SecondarySMTPServerPort 25 SecondarySMTPServerEnabled False ContactEmailAddress nobody localhost localdomain PhoneNumber undefined StreetAddress undefined FromEmailAddres...

Page 267: ...FC Switch show setup mfg Manufacturing Information BrandName HP BuildDate Tuesday September 25 2007 11 23 ChassisPartNumber HSTNM N015 ChassisSerialNumber 0729C00137 CPUBoardSerialNumber 0729c00137 LicensedPorts 24 MACAddress 00 c0 dd 0d 53 e7 PlanarPartNumber 31894 00 A SwitchSymbolicName SN6000 FC Switch SwitchWWN 10 00 00 c0 dd 0d 53 e7 SystemDescription HP StorageWorks SN6000 Stackable Dual Po...

Page 268: ...ng to a configured server To display common and server specific information omit the operand Refer to Table 48 for a description of the server specific configuration parameters Examples The following is an example of the show setup radius common command SN6000 FC Switch show setup radius common Radius Information DeviceAuthOrder Local UserAuthOrder Local TotalServers 2 The following is an example ...

Page 269: ...etup services Examples The following is an example of the show setup services command SN6000 FC Switch show setup services System Services TelnetEnabled True SSHEnabled False GUIMgmtEnabled True SSLEnabled False EmbeddedGUIEnabled True SNMPEnabled True NTPEnabled True CIMEnabled True FTPEnabled True MgmtServerEnabled True CallHomeEnabled True See also set setup services page 216 ...

Page 270: ...perand See Table 51 for descriptions of the trap specific configuration parameters Examples The following is an example of the show setup snmp common command SN6000 FC Switch show setup snmp common SNMP Information SNMPEnabled True Contact sysContact undefined Location sysLocation undefined Description HP StorageWorks SN6000 Stackable Dual Power Supply Fibre Channel Switch ObjectID 1 3 6 1 4 1 387...

Page 271: ...nfiguration parameters logging Displays event logging configuration parameters To display all system configuration parameters omit the operand See Table 55 for descriptions of the event logging configuration parameters ntp Displays NTP server configuration parameters To display all system configuration parameters omit the operand See Table 56 for descriptions of the NTP server configuration parame...

Page 272: ...iscovery Static EthIPv6NetworkAddress 2001 1 64 EthIPv6GatewayAddress fe80 1 The following example of the show setup system logging command SN6000 FC Switch show setup system logging System Information LocalLogEnabled True RemoteLogEnabled False RemoteLogHostAddress 10 0 0 254 The following is an example of the show setup system ntp command SN6000 FC Switch show setup system ntp System Information...

Page 273: ...eering domain_id Operands domain_id The domain ID for which to display route information If you omit domain_id the system displays routes for all switches in the fabric Examples The following is an example of the show steering command SN6000 FC Switch show steering 35 DomainID DefaultOutPort InPort OutPort 35 18 3 16 18 16 18 5 18 16 18 16 6 16 18 16 18 7 16 18 16 18 15 18 16 18 16 ...

Page 274: ...e ReasonForLastReset Action that caused the last reset ActiveImageVersion build date Active firmware image version and build date PendingImageVersion build date Firmware image version and build date that is pending This image will become active at the next reset or power cycle ActiveConfiguration Name of the switch configuration that is in use AdminState Switch administrative state AdminModeActive...

Page 275: ... MBytes 128 LogFilterLevel Critical MaxPorts 20 NumberOfResets 15 ReasonForLastReset PowerUp ActiveImageVersion build date Vx x x 0 day month date time year PendingImageVersion build date Vx x x 0 day month date time year ActiveConfiguration default AdminState Online AdminModeActive False BeaconOnStatus Off OperationalState Online PrincipalSwitchRole False POSTFaultCode 00000000 POSTStatus Passed ...

Page 276: ...ollowing is an example of the show system command SN6000 FC Switch show system Assigned System Network Information Hostname undefined EthIPv4NetworkAddress 10 20 116 133 EthIPv6NetworkAddress undefined DNSServer1 undefined DNSSearchList1 undefined IPv4GatewayList1 10 20 116 1 IPv6GatewayList1 undefined NTPServer 10 20 10 10 See also set setup system page 222 show setup system page 271 ...

Page 277: ...erature information Authority None Syntax show temp Examples SN6000 FC Switch show temp Temperature C Sensors Sensor Description Status Current High Warn High Alarm 0 BOARD Normal 24 65 70 1 DS1780 Normal 28 n a n a 2 MAX1617 Normal 31 65 70 3 ASIC Normal 49 95 100 See also show env page 245 show voltage page 284 ...

Page 278: ... UID Sequence Count 676 Success Count 420 Failed Count 2023 Records 127 Record 1 of 127 Time day mon dd hh mm ss yyyy Sequence Number 211 Test TEST_SUITE_BLADE_OFFLINE 0x12 Subtest TEST_FLOW_TC 0x97 Fault Code DIAGS_ERR_DATA_VERIFY 0x1e Loops 1 Blade Asic Port 0 0 0 Record 2 of 127 Time day mon dd hh mm ss yyyy Sequence Number 211 Test TEST_SUITE_BLADE_OFFLINE 0x12 Subtest TEST_FLOW_TC 0x97 Fault ...

Page 279: ...erface Guide 279 show timezone Description Displays the current time zone setting Authority None Syntax show timezone Examples The following is an example of the show timezone command SN6000 FC Switch show timezone America Chicago See also set timezone page 230 ...

Page 280: ...5 F 20 05 00 c0 dd 00 bd ec N 20 00 00 00 c9 22 1e 93 010500 P 10 E 20 0a 00 c0 dd 00 bd ec E 10 00 00 c0 dd 00 80 21 4 0x4 D The following is an example of the show topology command for port 1 SN6000 FC Switch show topology 1 Local Link Information PortNumber 1 PortID 650100 PortWWN 20 01 00 c0 dd 00 91 11 PortType F Remote Link Information Device 0 NodeWWN 50 80 02 00 00 06 d5 38 PortType NL Des...

Page 281: ...tch show users User cim OB session1 Client cim Logged in Since Tue Apr 8 05 22 47 2008 User snmp IB session2 Client Unknown Logged in Since Tue Apr 8 05 22 55 2008 User snmp OB session3 Client Unknown Logged in Since Tue Apr 8 05 22 55 2008 User admin OB session5 Client 10 33 21 27 Logged in Since Thu Apr 10 04 14 11 2008 The following is an example of the show users brief command SN6000 FC Switch...

Page 282: ...HostName DNS host name EthIPv4NetworkAddress Switch IP address version 4 EthIPv6NetworkAddress Switch IP address version 6 MacAddress Media Access Control MAC address of the switch WorldWideName Worldwide name of the switch ChassisSerialNumber Serial number of the switch SymbolicName Symbolic name of the switch ActiveSWVersion Firmware version ActiveTimestamp Date and time that the firmware was ac...

Page 283: ...orageWorks SN6000 Stackable Dual Supply Power Fibre Channel Switch HostName undefined EthIPv4NetworkAddress 10 20 11 192 EthIPv6NetworkAddress MACAddress 00 c0 dd 00 71 ee WorldWideName 10 00 00 c0 dd 00 71 ed ChassisSerialNumber FAM033100024 SymbolicName SN6000 FC Switch ActiveSWVersion V8 0 x x xx xx ActiveTimestamp day month date time year POSTStatus Passed LicensedPorts 24 SwitchMode Full Fabr...

Page 284: ...ors Sensor Description Status Current Low Alarm High Alarm 0 2 5V Good 2 50 2 20 2 80 1 1 25V Good 1 24 1 00 1 50 2 3 3V Good 3 32 3 02 3 58 3 12V Good 12 00 10 00 13 31 4 1 2V Good 1 26 1 04 1 38 5 1 5V Good 1 50 1 31 1 68 6 1 8V_ANALOG Good 1 78 1 58 2 02 7 1 8V Good 1 79 1 60 1 99 8 2 5V_ANALOG Good 2 40 2 08 2 84 See also show env page 245 show temp page 277 ...

Page 285: ...down Description Terminates all data transfers on the switch at convenient points and closes the switch connection Always power cycle the switch after entering this command Authority Admin session Syntax shutdown Notes When the shutdown is complete the Heartbeat LED is extinguished ...

Page 286: ...is False AuthType Authentication type can be MD5 or SHA AuthPhrase Authentication phrase Confirm AuthPhrase Authentication phrase confirmation Re enter the phrase Privacy Enables True or disables False privacy The default is False PrivType Privacy type The default is DES PrivPhrase Privacy phrase Confirm PrivPhrase Privacy phrase confirmation Re enter the phrase Operands delete account Deletes the...

Page 287: ...hrase Do you want to save and activate this snmpv3user setup y n n y SNMPV3 user added and activated The following is an example of the snmpv3user delete command SN6000 FC Switch admin start SN6000 FC Switch admin snmpv3user delete snmpuser1 The user account will be deleted Please confirm y n n y SNMPV3 user deleted The following is an example of the snmpv3user edit command SN6000 FC Switch admin ...

Page 288: ...erence The following is an example of the snmpv3user list command SN6000 FC Switch snmpv3user list Username Group AuthType PrivType snmpuser1 ReadWrite MD5 DES See also set setup snmp page 219 show setup snmp page 270 ...

Page 289: ...in progress Authority Admin session Syntax test cancel port port_number Operands port port_number Cancel the test for the port given by port_number port_number can be 0 23 Examples The following example cancels the test running on port 15 SN6000 FC Switch admin test cancel port 15 See also test port page 290 test status page 292 ...

Page 290: ...ort NOTE An external test on an XPAK port verifies that a complete path exists but does not send a test frame online Exercises the port transceiver and device connections while the port is online Online testing of TR_Ports is not allowed This test does not disrupt communication on the port Notes To cancel a port test that is in progress enter the test cancel port command To display the status of t...

Page 291: ...ish to terminate this process before reaching the end of the list press q or Q and the ENTER key to do so LoopCount decimal value 1 4294967295 429496729 FrameSize decimal value 40 2148 256 DataPattern 32 bit hex value or Default Default StopOnError True False True LoopForever True False False Do you want to start the test y n n y The test has been started A notification with the test result s will...

Page 292: ...s switch Test Test Test Loop Test Level Type Status Count Failures Switch Offline internal Passed 4 0 Port Test Test Loop Test Num Type Status Count Failures 0 Offline internal Passed 4 0 1 Offline internal Passed 4 0 2 Offline internal Passed 4 0 3 Offline internal Passed 4 0 4 Offline internal Passed 4 0 5 Offline internal Passed 4 0 6 Offline internal Passed 4 0 7 Offline internal Passed 4 0 8 ...

Page 293: ...HP StorageWorks SN6000 Fibre Channel Switch Command Line Interface Guide 293 See also test cancel page 289 test port page 290 test switch page 294 ...

Page 294: ...ype on all switch ports You must place the switch in the diagnostics state using the Set Switch State command before starting the test Table 71 describes the offline loopback types Table 71 Offline loopback types Parameter Description internal Exercises the internal port connections external Exercises the port and its transceiver A transceiver with a loopback plug is required for the port online E...

Page 295: ...h admin start SN6000 FC Switch admin set switch state diagnostics SN6000 FC Switch admin test switch offline internal A list of attributes with formatting and current values will follow Enter a new value or simply press the ENTER key to accept the default value If you wish to terminate this process before reaching the end of the list press q or Q and the ENTER key to do so LoopCount decimal value ...

Page 296: ...set method A hot reset or non disruptive firmware activation does not reset the elapsed up time reported by this command Authority None Syntax uptime Examples The following is an example of the uptime command SN6000 FC Switch uptime Elapsed up time 0 day s 2 hour s 28 min s 44 sec s Reason last reset NormalReset ...

Page 297: ...piration date is expressed in the number of days until the account expires 2 000 maximum The switch will issue an expiration alarm every day for seven days prior to expiration 0 zero specifies that the account has no expiration date delete account_name Deletes the account name given by account_name from the switch edit Initiates an edit session that prompts you for the account name for which to ch...

Page 298: ...he following is an example of the user edit command SN6000 FC Switch admin user edit Press q and the ENTER key to abort this command account name 1 15 chars user1 set account expiration in days 0 2000 0 never 0 should this account have admin authority y n n OK to modify user account user1 with no admin authority and to expire in 0 days Please confirm y n n The following is an example of the user l...

Page 299: ...escription Displays the account name session number and switch domain ID for the Telnet session Authority None Syntax whoami Examples The following is an example of the whoami command SN6000 FC Switch whoami User name admin session2 Switch name SN6000 FC Switch Switch domain ID 21 0x15 ...

Page 300: ...hat such a member exists You must enter the zoning save command to save your changes copy zone_source zone_destination Creates a new zone named zone_destination and copies the membership into it from the zone given by zone_source You must enter the zoning save command to save your changes create zone Creates a zone with the name given by zone A zone name must begin with a letter and be no longer t...

Page 301: ..._new Renames the zone given by zone_old to the zone given by zone_new You must enter the zoning save command to save your changes zonesets zone Displays all zone sets of which the zone given by zone is a component This operand does not require an Admin session Examples The following is an example of the zone list command SN6000 FC Switch zone list Zone ZoneSet wwn_b0241f zone_set_1 wwn_23bd31 zone...

Page 302: ...mmand Reference The following is an example of the zone zonesets command SN6000 FC Switch zone zonesets zone1 Current List of ZoneSets for Zone zone1 zone_set_1 See also zoneset page 303 zoning edit page 310 ...

Page 303: ...ng save command to save your changes copy zone_set_source zone_set_destination Creates a new zone set named zone_set_destination and copies into it the zones from the zone set given by zone_set_source You must enter the zoning save command to save your changes create zone_set Creates the zone set with the name given by zone_set A zone set name must begin with a letter and be no longer than 64 char...

Page 304: ...ic Only one zone set can be active at one time A zone can be a component of more than one zone set Examples The following is an example of the zoneset active command SN6000 FC Switch zoneset active Active ZoneSet Information ActiveZoneSet Bets LastActivatedBy admin OB session6 LastActivatedOn day month date time year The following is an example of the zoneset list command SN6000 FC Switch zoneset ...

Page 305: ...e enforced ZoneSet Information ZoneSet Zone ZoneMember wwn wwn_b0241f 50 06 04 82 bf d2 18 c2 50 06 04 82 bf d2 18 d2 21 00 00 e0 8b 02 41 2f wwn_23bd31 50 06 04 82 bf d2 18 c2 50 06 04 82 bf d2 18 d2 10 00 00 00 c9 23 bd 31 wwn_221416 50 06 04 82 bf d2 18 c2 50 06 04 82 bf d2 18 d2 10 00 00 00 c9 22 14 16 wwn_2215c3 50 06 04 82 bf d2 18 c2 50 06 04 82 bf d2 18 d2 10 00 00 00 c9 22 15 c3 The follo...

Page 306: ...ty Admin session and a Zoning Edit session Syntax zoning cancel Examples The following is an example of the zoning cancel command SN6000 FC Switch admin start SN6000 FC Switch admin zoning edit SN6000 FC Switch admin zoning zoning cancel Zoning edit mode will be canceled Please confirm y n n y See also zoning edit page 310 ...

Page 307: ...r command followed by the zoning save command the non volatile zoning database will be cleared from the switch TIP The preferred method for clearing the zoning database from the switch is the reset zoning command Authority Admin session and a Zoning Edit session Syntax zoning clear Examples The following is an example of the zoning clear command SN6000 FC Switch admin start SN6000 FC Switch admin ...

Page 308: ...nd SN6000 FC Switch zoning configured Configured saved in NVRAM Zoning Information ZoneSet Zone ZoneMember wwn wwn_b0241f 50 06 04 82 bf d2 18 c2 50 06 04 82 bf d2 18 d2 wwn_23bd31 50 06 04 82 bf d2 18 c2 50 06 04 82 bf d2 18 d2 10 00 00 00 c9 23 bd 31 wwn_221416 50 06 04 82 bf d2 18 c2 50 06 04 82 bf d2 18 d2 10 00 00 00 c9 22 14 16 wwn_2215c3 50 06 04 82 bf d2 18 c2 50 06 04 82 bf d2 18 d2 10 00...

Page 309: ...uding zone sets zones and aliases Authority Admin session Syntax zoning delete orphans Examples The following is an example of the zoning delete orphans command SN6000 FC Switch admin start SN6000 FC Switch admin zoning delete orphans This command will remove all zonesets zones and aliases that are not currently active Please confirm y n n y SN6000 FC Switch admin zoning save ...

Page 310: ...database parameters Table 73 Zoning database parameters Parameter Description configured Opens a zoning edit session for the non volatile zoning database merged Opens a zoning edit session for the temporary merged zone set received from another switch Examples The following is an example of the zoning edit command SN6000 FC Switch admin start SN6000 FC Switch admin zoning edit SN6000 FC Switch adm...

Page 311: ...ning database Authority Admin session and a Zoning Edit session Syntax zoning edited Examples The following is an example of the zoning edited command SN6000 FC Switch admin zoning zoning edited Edited unsaved Zoning Information ZoneSet Zone ZoneMember ZS1 Z1 10 00 00 c0 dd 00 b9 f9 10 00 00 c0 dd 00 b9 fa See also zoning configured page 308 ...

Page 312: ...ing database and the user who made them Checksum for the zoning database Authority None Syntax zoning history Examples The following is an example of the zoning history command SN6000 FC Switch zoning history Active Database Information ZoneSetLastActivated DeactivatedBy Remote ZoneSetLastActivated DeactivatedOn day mon date hh mm ss yyyy Database Checksum 00000000 Inactive Database Information Co...

Page 313: ...mits Table 74 Zoning database limits Limit Description MaxZoneSets Maximum number of zone sets is 256 MaxZones Maximum number of zones is 2 000 MaxAliases Maximum number of aliases is 2 500 MaxTotalMembers Maximum number of zone and alias members that can be stored in the switch s zoning database is 10 000 Each instance of a zone member or alias member counts toward this maximum MaxZonesInZoneSets...

Page 314: ...0 00 00 00 c9 23 bd 31 wwn_221416 50 06 04 82 bf d2 18 c2 50 06 04 82 bf d2 18 d2 10 00 00 00 c9 22 14 16 wwn_2215c3 50 06 04 82 bf d2 18 c2 50 06 04 82 bf d2 18 d2 10 00 00 00 c9 22 15 c3 Configured saved in NVRAM Zoning Information ZoneSet Zone ZoneMember wwn wwn_23bd31 50 06 04 82 bf d2 18 c2 50 06 04 82 bf d2 18 d2 10 00 00 00 c9 23 bd 31 wwn_221416 50 06 04 82 bf d2 18 c2 50 06 04 82 bf d2 18...

Page 315: ...e zoning merged command SN6000 FC Switch zoning merged To permanently save the merged database locally execute the zoning merged capture command To edit the merged database use the zoning edit merged command To remove the merged database use the zoning restore command Merged unsaved Zoning Information ZoneSet Zone ZoneMember ZS1 Z1 10 00 00 c0 dd 00 b9 f9 10 00 00 c0 dd 00 b9 fa Z2 10 00 00 c0 dd ...

Page 316: ...s of the non volatile zoning database If the MergeAutoSave parameter is False see Table 20 you can use this command to revert changes to the merged zone set that were propagated from another switch in the fabric through zone set activation or merging fabrics Authority Admin session Syntax zoning restore ...

Page 317: ...nt any changes Authority Admin session and a Zoning Edit session Syntax zoning save Examples The following is an example of the zoning save command SN6000 FC Switch admin start SN6000 FC Switch admin zoning edit SN6000 FC Switch admin zoning SN6000 FC Switch admin zoning zoning save The changes have been saved however they must be activated before they can take effect see zoneset activate command ...

Page 318: ...318 Command Reference ...

Page 319: ...t HP by phone call 1 800 HP INVENT 1 800 474 6836 This service is available 24 hours a day 7 days a week For continuous quality improvement calls may be recorded or monitored Table 75 Document conventions Convention Element Medium blue text Figure 1 Cross reference links and email addresses Medium blue underlined text http www hp com Website addresses Bold font Keys that are pressed Text typed int...

Page 320: ...is guide see the following documents for this product HP StorageWorks 8 20q and SN6000 Fibre Channel Switch Quick Start Installation Instructions HP StorageWorks 8Gb Simple SAN Connection Kit Quick Start Instructions HP StorageWorks 8 20q and SN6000 Fibre Channel Switch Rack Mount Kit Quick Start Installation Instructions HP StorageWorks SN6000 Fibre Channel Switch Installation and Reference Guide...

Page 321: ...74 Remove example 81 Rename example 81 association 26 copy 33 create 31 delete 31 modify 32 rename 33 authentication 87 97 148 authority level 17 authorization 87 autosave security database 91 zoning database 75 B backup file 46 beacon feature 47 194 binding fabric 149 151 port 64 200 Boot Protocol 223 BootP See Bootstrap Protocol Bootstrap Protocol 22 223 broadcast tree information 234 C Call Hom...

Page 322: ...ion 114 delete configuration 115 modify configuration 114 date 47 Date command 47 141 decode errors 65 defaults switch configuration 182 device access 69 security configuration 87 DHCP See Dynamic Host Configuration Protocol discovery method 21 display control 13 disruptive activation 50 DNS See Domain Name System document conventions 319 documentation HP website 320 domain ID binding 149 151 disp...

Page 323: ...t 93 copying 93 150 creating 93 150 deleting 93 description 87 displaying 151 editing member attributes 150 ISL 93 managing 93 membership 89 modifying member 94 MS 93 150 port 93 removing from security set 93 removing members 95 151 renaming 93 151 type 150 151 Group command 148 Add example 94 Copy example 93 Create example 93 Delete example 93 Edit example 94 Members example 89 Remove example 95 ...

Page 324: ...ation 267 mask address 223 MD5 authentication 148 Media Access Control address 231 memory activity 256 message format 106 queue 111 115 MS See Management Server Multi Frame Sequence bundling 196 N name server information 36 257 network configuration 21 discovery 21 22 223 enable 223 gateway address 223 interfaces 248 IP address 223 mask 223 resetting configuration 181 Network Time Protocol client ...

Page 325: ...7 server resetting 180 remote host logging description 103 enabling 224 host address 224 Reset command 180 Callhome example 109 116 Config example 76 Factory example 76 IP Security example 25 Ipsec example 33 Port example 65 Security example 92 SNMP example 120 Zoning example 77 78 Reverse Address Resolution Protocol 22 223 routing frames 196 RSCN See Registered State Change Notification S secret ...

Page 326: ...up Radius command 213 example 98 Set Setup Services command 216 example 43 NTP service 49 SNMP service 117 SSH and SSL services 84 Set Setup SNMP command 219 Set Setup System command 222 Ethernet configuration 22 NTP configuration 49 remote logging 104 Timers example 56 Set Switch State command 229 Set Timezone command 230 severity level 101 SHA 1 authentication 148 short text format 106 Show Abou...

Page 327: ...riber s choice HP 320 support file 139 creating 13 downloading 14 15 uploading 15 switch administrative state 229 canceling a test 54 configuration 35 44 201 configuration defaults 182 configuration display 240 configuration parameters 39 45 connectivity test 53 date and time 85 displaying test status 54 hard reset 154 log 224 logging in 11 management service 216 manufacturer information 267 onlin...

Page 328: ...renaming 80 301 Zone command 300 Add example 80 Copy example 80 Create example 79 Delete example 79 Members example 73 Remove example 80 Rename example 80 Zonesets example 73 zone set activating 79 303 active 69 71 77 305 adding member zone 79 303 configured 69 copying 79 303 creating 78 303 deactivating 79 181 303 definition 69 deleting from database 78 303 deleting member zone 303 displaying 301...

Page 329: ...ing configuration parameters 75 76 205 Zoning Delete command example 78 Zoning Delete Orphans command 309 Zoning Edit command 310 example 77 Zoning Edited command 311 Zoning History command 312 example 74 Zoning Limits command 313 example 75 Zoning List command 314 example 70 Zoning Merged command 315 Capture example 77 Zoning Restore command 316 Zoning Save command 317 ...

Page 330: ...330 Index ...

Search results

Summary of Contents for StorageWorks SN6000

Reviews:

Related manuals for StorageWorks SN6000

Brands by name

Popular brands

HP StorageWorks SN6000, Command Line Interface Manual

Search results

Summary of Contents for StorageWorks SN6000

Reviews:

Related manuals for StorageWorks SN6000

Brands by name

Popular brands