background image

53-1000605-01 
19 Oct 2007

Access Gateway 

Administrator’s Guide

Supporting Fabric OS v6.0.0

Summary of Contents for Brocade BladeSystem 4/24

Page 1: ...53 1000605 01 19 Oct 2007 Access Gateway Administrator s Guide Supporting Fabric OS v6 0 0 ...

Page 2: ...ing from the information contained in this book or the computer programs that accompany it The product described by this document may contain open source software covered by the GNU General Public License or other open source license agreements To find out which open source software is included in Brocade products view the licensing terms applicable to the open source software and obtain a copy of...

Page 3: ...al help ix Document feedback x Chapter 1 Introduction to the Brocade Access Gateway In this chapter 1 Overview of Brocade Access Gateway 1 Brocade features in Access Gateway mode 2 Access Gateway port types 3 Comparing FC port configurations 3 Port mapping 4 Preferred Secondary N_Port mapping 5 Failover and Failback policies 6 Cold Failover 6 Port initialization 6 Access Gateway policies 7 Path Fa...

Page 4: ...aging Ports in Access Gateway mode In this chapter 25 Determining the mapping and port status 25 Displaying the port mapping 25 Displaying the port status 27 Configuring port maps 27 Adding F_Ports 28 Removing F_Ports 29 Specifying Preferred Secondary N_Ports 29 Configuring additional F_Ports 30 Unlocking N_Port mode 31 Managing policies 32 Path Failover and Failback policies 32 Port Group policy ...

Page 5: ... requirement to deploy an Access Gateway solution Chapter 3 Disabling Access Gateway Mode provides instructions on disabling Access Gateway mode so that the switch can be used as a fabric switch Chapter 4 Managing Ports in Access Gateway mode provides instructions on changing N_Ports to F_Ports mapping F_Ports to N_Ports and changing various Access Gateway policies Appendix A Default Port Mapping ...

Page 6: ...de 200E switch Brocade 4012 switch Brocade 4016 switch Brocade 4018 switch Brocade 4020 switch Brocade 4024 switch What s new in this document The following changes have been made since this document was last released Information that was added Support for the 4018 embedded switch N_Port grouping policy Automatic Port Configuration APC Preferred Secondary N_Port mapping is an optional secondary fa...

Page 7: ...erwise this manual specifically notes those cases in which a command is case sensitive The ficonCupSet and ficonCupShow commands are an exception to this convention Notes cautions and warnings The following notices appear in this document NOTE A note provides a tip emphasizes important information or provides a reference to related information ATTENTION An Attention statement indicates potential d...

Page 8: ...t connection On Brocade Access Gateway the N_Port connects to the edge switch NPIV N_Port ID virtualization Allows a single Fibre Channel port to appear as multiple distinct ports providing separate port identification and security zoning within the fabric for each operating system image as if each operating system image had its own unique physical port Preferred Secondary N_Port On the Brocade Ac...

Page 9: ...l Industry Association Web site http www fibrechannel org Optional Brocade features For a list of optional Brocade features and descriptions see the Fabric OS Administrator s Guide Getting technical help Contact your switch support supplier for hardware firmware and software support including product repairs and part ordering To expedite your call have the following information available 1 General...

Page 10: ...is 3 World Wide Name WWN Use the wwn command to display the switch WWN If you cannot use the wwn command because the switch is inoperable you can get the WWN from the same place as the serial number Document feedback Quality is our first concern at Brocade and we have made every effort to ensure the accuracy and completeness of this document However if you find an error or an omission or you think...

Page 11: ... tool which is compatible with different types of fabrics including Brocade Brocade Enterprise OS EOS and Cisco based fabrics For more information on compatibility refer to the matrix in Appendix B Compatibility When a switch is in Access Gateway mode it is logically transparent to the host and the fabric Brocade Access Gateway mode allows hosts to access the fabric without increasing the number o...

Page 12: ...ocade switch in Access Gateway mode most features are no longer applicable These features include Admin Domains Advanced Performance Monitoring direct connection to SAN target devices Fibre Channel Arbitrated Loop support Fabric Manager FICON IP over FC ISL trunking extended fabrics management platform services name services SNS port mirroring SMI S and zoning These switch features are available i...

Page 13: ...ID virtualization NPIV Brocade Access Gateway allows multiple FC initiators to access the SAN on the same physical port This reduces the hardware requirements and management overhead of hosts to the SAN connections A fabric switch presents F_Ports or FL_Ports to the host and storage devices and presents E_Ports TE_Ports or EX_Ports to other switches in the fabric A fabric switch consumes SAN resou...

Page 14: ...y mode the F_Ports are mapped to a set of predefined N_Ports see Appendix A Default Port Mapping After the initial setup you can manually change the mapping if required TABLE 1 Port Configurations Port Type Access Gateway Fabric switch F_Port Yes Connects hosts to Brocade Access Gateway Yes Connects devices such as hosts HBAs and storage to the fabric N_Port Yes Connects Access Gateway to a fabric...

Page 15: ... Each F_Port can be mapped to only one N_Port as its primary N_Port When an F_Port is not mapped to any N_Port that port is disabled Optionally you can specify a Preferred Secondary N_Port for each F_Port The Preferred Secondary N_Port if specified is used when the primary mapped N_Port fails TABLE 2 Example port mapping Access Gateway Fabric F_Port N_Port Edge switch F_Port F_1 F_2 N_1 Switch_A F...

Page 16: ...es online it triggers cold failover of its F_Ports If any of these F_Ports have the Preferred Secondary N_Port set and if the Preferred Secondary N_Port is online those F_Ports fail over to the Preferred Secondary N_Port during cold failover If a Preferred Secondary N_Port is set for any of these F_Ports and the Preferred N Port is not online then those F_Ports are disabled If the Preferred Second...

Page 17: ...to automatically remap to an online N_Port within a port group if the N_Port they are connected to goes offline Failback policy automatically reroutes the F_Ports back to the originally mapped N_Ports if within a port group as those N_Ports come back online Port Grouping PG policy allows you to restrict Failover and Failback to a set of related N_Ports Automatic Port Configuration APC policy enabl...

Page 18: ...these F_Ports will fail over to other available N_Ports belonging to the same N_Port Group and then re enables 4 The host establishes a new connection with the fabric The Path Failover policy is enabled or enforced during power up Example Path Failover Policy This example shows the failover behavior in a scenario where two fabric ports go offline one after the other Note that in this example we as...

Page 19: ...h failBack enabled the F_Ports that were originally mapped to it are disabled 2 The F_Port is reenabled on the primary mapped N_Port 3 The host establishes a new connection with the fabric Example Failback Policy In Example 3 the Brocade Access Gateway N_1 remains disabled because the corresponding F_A1 port is offline However N_2 comes back online See Figure 5 on page 9 for the original failover ...

Page 20: ...y N_Port can only specify the N_Ports from the same group This is why it is recommended to form groups before defining the preferred secondary path In FOS v6 0 0 by default the Port group policy is enabled When upgrading to FOS v6 0 0 all the ports on the switch module belong to a default port group zero identified as pg0 If needed additional port groups can be defined For example Figure 7 on page...

Page 21: ...N_Ports are available the F_Ports will be disabled The F_Ports belonging to a port group will not failover to N_Ports belonging to another port group FIGURE 8 Port grouping behavior In Fabric OS 6 0 0 the PG policy is enabled by default All N_Ports will be part of a default port group with a special identifier 0 This port group is known as pg0 When a dual redundant fabric configuration is used F_P...

Page 22: ...ade the firmware from v5 3 x to v6 0 0 then the PG policy is enabled with the default port group pg0 containing all the N_Ports A firmware downgrade from v6 0 0 to v5 3 x is not allowed if the PG policy is enabled You must disable the PG policy before downgrading the firmware NOTE During a downgrade to v5 3 x all preferred settings are lost Automatic port configuration APC APC is an optional polic...

Page 23: ...e the APC refer to Chapter 4 Managing Ports in Access Gateway mode Rebalancing of F_Ports When the APC is enabled there will be no static mappings between F_Ports and N_Ports and no F_Ports will be tied to a specific N_Port When an F_Port comes online after the initial mapping is done the F_Ports are automatically routed through one of the available N_Ports such that the F_Ports are evenly balance...

Page 24: ...14 Access Gateway Administrator s Guide 53 1000605 01 Access Gateway policies 1 ...

Page 25: ...ocedures Verify that the interop mode parameter is set to 0 Brocade Native mode or the switch mode is in Native mode Configure the F_Ports on the edge switch to which Access Gateway is connected as follows Enable NPIV Disable long distance mode Allow multiple logins The recommended fabric login setting is set to the maximum allowed per port and per switch Use only WWN zoning throughout the fabric ...

Page 26: ...inuing with enabling Access Gateway mode ATTENTION When you enable Access Gateway mode some fabric information is erased such as the zone and security databases To recover the information save the switch configuration before enabling Access Gateway mode Table 3 describes the commands used to enable Access Gateway mode To enable Access Gateway mode from the CLI You must perform the switchShow comma...

Page 27: ...ent 13 13 cu AN No_Sync Disabled Persistent 14 14 cu AN No_Sync Disabled Persistent 15 15 cu AN No_Sync Disabled Persistent 16 16 cu AN No_Sync Disabled Persistent 17 17 N4 No_Module 18 18 N4 No_Module 19 19 N4 No_Module 20 20 N4 No_Module 21 21 id N4 Online E Port segmented zone conflict Trunk master 22 22 id N4 Online E Port Trunk port master is Port 21 23 23 id N4 Online E Port Trunk port maste...

Page 28: ...ws a reconfigured mapping three N_Ports 17 19 and 20 have no mappings and are not connected to the fabric switch admin ag mapshow N_Port Configured_F_Ports Current_F_Ports Failover Failback PG_ID PG_Name 0 9 10 None 1 1 N A N A 17 None None 1 1 N A N A 18 3 4 None 1 1 N A N A 19 None None 1 1 N A N A 20 None None 1 1 N A N A 21 1 2 11 12 1 2 1 1 N A N A 22 5 13 14 5 1 1 N A N A 23 6 15 16 6 1 1 N ...

Page 29: ...43 9b 0x5a0002 5 5 cu N4 Online F Port 50 06 0b 00 00 3c b4 3e 0x5a0201 6 6 cu N4 Online F Port 10 00 00 00 c9 35 43 f3 0x5a0202 7 7 cu AN No_Sync Disabled Persistent 8 8 cu N4 Online F Port 10 00 00 00 c9 35 43 a1 0x5a0001 9 9 cu AN No_Sync Disabled Persistent 10 10 cu AN No_Sync Disabled Persistent 11 11 cu AN No_Sync Disabled Persistent 12 12 cu AN No_Sync Disabled Persistent 13 13 cu AN No_Syn...

Page 30: ...20 Access Gateway Administrator s Guide 53 1000605 01 Enabling Access Gateway mode 2 ...

Page 31: ... switch in Access Gateway mode If you want more information on backing up and restoring the configuration file refer to the Fabric OS Administrator s Guide To upload a configuration file using CLI 1 Verify that the FTP service is running on the host computer 2 Connect to the switch and log in as admin 3 Enter the configUpload command The command becomes interactive and you are prompted for the req...

Page 32: ...eway mode switch admin ag modedisable The switch automatically reboots and comes back online using the fabric switch configuration the Access Gateway parameters such as F_Port to N_Port mapping failover and failback policies are automatically removed 5 Enter the ag modeshow command to verify that Access Gateway mode is disabled switch admin ag modeshow Access Gateway mode is NOT enabled NOTE Use t...

Page 33: ...switch back online The switch automatically joins the fabric To allow the switch to merge with the fabric NOTE Only connect the switch to the fabrics which you want it to join 1 Enter the switchDisable command to disable the switch 2 Enter the defZone allAccess command to allow the switch to merge with the fabric 3 Enter the cfgSave command to commit the defzone changes 4 Enter the switchEnable co...

Page 34: ...24 Access Gateway Administrator s Guide 53 1000605 01 Notes on joining the switch to a fabric 3 ...

Page 35: ...Configuring port maps 27 Configuring additional F_Ports 30 Managing policies 32 Determining the mapping and port status This section explains how to display the current mapping and port status Displaying the port mapping This section explains how to display the mapped routes of the host connections to the fabric on Brocade Access Gateway F_Ports are mapped to N_Ports See the Fabric OS Command Refe...

Page 36: ...g mapshow 0 N_Port 0 Failover 1 enabled 0 disabled 1 Failback 1 enabled 0 disabled 1 Current F_Ports 2 8 Configured F_Ports 2 PG_ID 0 PG_Name pg0 N_Port Port numbers of ports locked in N_Port mode Configured F_Ports List of F_Ports that are mapped to the corresponding N_Port For example in the following sample output F_Ports 9 and 10 are mapped to N_Port 0 Current F_Ports Shows the F_Ports that ar...

Page 37: ...nt 8 8 cu N4 Online F Port 10 00 00 00 c9 35 43 a1 0x5a0001 9 9 cu AN No_Sync Disabled Persistent 10 10 cu AN No_Sync Disabled Persistent 11 11 cu AN No_Sync Disabled Persistent 12 12 cu AN No_Sync Disabled Persistent 13 13 cu AN No_Sync Disabled Persistent 14 14 cu AN No_Sync Disabled Persistent 15 15 cu AN No_Sync Disabled Persistent 16 16 cu AN No_Sync Disabled Persistent 17 17 N4 No_Module 18 ...

Page 38: ... f_portlist can contain multiple F_Port numbers separated by semicolons for example 17 18 switch admin ag mapdel 10 6 F Port to N Port mapping has been updated successfully 3 Enter the switchshow command to verify that the F_Port is free unassigned Unassigned F_Port status is Disabled No mapping for F Port See port 6 in the following example switch admin switchshow switchName fsw534_4016 switchTyp...

Page 39: ...changes to Disabled No mapping for F Port To remove an F_Port from an N_Port 1 Connect and log in to the switch 2 Enter the ag mapdel command with the n_portnumber f_port1 f_port2 operands to remove the list of F_Ports from the N_Port switch admin ag mapdel 13 5 6 F Port to N Port mapping has been updated successfully 3 Enter the ag mapshow command with the n_portnumber operand to display a list o...

Page 40: ...rt s To remove the Preferred Secondary F_Ports 3 and 9 from N_Port 4 1 Connect and log in to the switch 2 Enter the ag prefdel command with the F_Port1 F_Port2 N_Port operands to delete the preferred F_Port mapping from the specified N_Port switch admin ag prefdel 3 9 4 Preferred N_Port is deleted successfully for the F_Port s Configuring additional F_Ports By default on embedded switches only the...

Page 41: ... It does not support other types of ports such as ISL interswitch link ports The port types on a fabric switch are not locked Fabric OS Native mode switch dynamically assigns the port type based on the connected device F_Ports and FL_Ports for hosts HBAs and storage devices and E_Ports EX_Ports and VE_Ports for connections to other switches Unlocking the N_Port configuration automatically changes ...

Page 42: ...the policy settings The Path Failover and Failback processes are disruptive When a host connection fails over and fails back to another online N_Port the F_Port connection disables and then re enables on the new N_Port Each time the host changes N_Ports it receives a new PID The host must establish a new session to the fabric ATTENTION If the Failback policy is enabled and autofailback occurs this...

Page 43: ...online By default the failback policy is enabled When an N_Port with an enabled failback policy comes back online the F_Ports that were originally mapped to it automatically reroutes back to the N_Port To enable failback 1 Connect and log in to the switch 2 Enter the ag failbackshow command with the n_portnumber operand to display the failover setting switch admin ag failbackshow 13 Failback on N_...

Page 44: ...he switch 2 Enter the command ag pgadd with the PG_ID N_Port1 N_Port2 operands If you add more than one N_Port you must separate them with a semicolon switch admin ag pgadd 3 14 N_Port s are added to the port group 3 3 Enter the command ag pgshow to verify the N_Port was added to the specified port group switch admin ag pgshow PG_ID N_Ports PG_Name 0 15 pg0 3 12 13 14 Test To delete an N_Port from...

Page 45: ...dmin ag pgshow PG_ID N_Ports PG_Name 0 13 15 pg0 3 12 14 pg3 To disable the Port Group policy 1 Connect and log in to the switch 2 Enter the command ag policydisable with the pg operand switch admin ag policydisable pg 3 Enter the command ag pgshow to verify the Port Group policy has been disabled switch admin ag policyshow AG Policy Policy Name State Port Grouping pg Disabled Auto Port Configurat...

Page 46: ...ill be lost Please save the current configuration using configupload Do you want to continue yes y no n no y 6 Enable the switch To disable the APC 1 Connect and log in to the switch 2 Enter the command switchdisable to disable the switch 3 Enter the command ag policydisable auto to enable the APC 4 At the command prompt type Y to enable the policy switch admin ag policydisable auto Default factor...

Page 47: ...o 13 6 7 8 mapped to 14 9 10 11 mapped to 15 4012 12 0 7 8 11 0 1 mapped to 8 2 3 mapped to 9 4 5 mapped to 10 6 7 mapped to 11 4016 16 0 9 10 15 0 1 mapped to 10 2 3 mapped to 11 4 5 mapped to 12 6 7 mapped to 13 8 mapped to 14 9 mapped to 15 4018 18 4 11 0 3 4 5 12 mapped to 0 6 7 13 mapped to 1 8 9 14 16 mapped to 2 10 11 15 17 mapped to 3 4020 20 1 14 0 15 19 1 2 mapped to 0 3 4 mapped to 15 5...

Page 48: ...38 Access Gateway Administrator s Guide 53 1000605 01 Default Port Mapping A ...

Page 49: ...witch listed below that is running Fabric OS v5 2 1 or later Brocade Access Gateway can connect to other types of fabrics on edge switches with the following firmware versions only McDATA firmware v9 1 or higher or v9 6 or higher Cisco firmware v3 0 1 or higher or v3 1 1 or higher Port requirements Only FCP initiator ports can be connected to Access Gateway as F_Ports FCP target ports loop device ...

Page 50: ...t multiple logins are allowed for each port Enter the following command on the McDATA switch to enable NPIV on the specified ports config NPIV Your McDATA switch is now ready to connect How to configure Cisco switch 1 Log in as admin on the Cisco switch 2 Enter the following commands on the Cisco switch to enable NPIV conf t no fcdomain fcid persistent vsan vsan fcinterop fcid allocation flat vsan...

Page 51: ...isplays as NPIV is disabled Enter the portCfgNpivPort port_number command with the 1 operand to enable NPIV Repeat step for each port as required Need to reconfigure N_Port and F_Ports Default port setting not adequate for customer environment On Brocade Access Gateway enter the portCfgShow command For each port that is to be activated as an N_Port enter the portCfgNport port_number command with t...

Page 52: ...rt_number is supported If it returns Failback or Failover on N_Port port_number is not supported See Specifying Preferred Secondary N_Ports on page 29 Access Gateway is mode not wanted Access Gateway must be disabled Disable switch using the switchDisable command Enable Access Gateway mode using the ag modeDisable command Answer yes when prompted the switch reboots Log in to the switch Display the...

Page 53: ...overenable N_Port ag failovershow N_Port ag mapadd N_Port F_Ports ag mapdel N_Port F_Ports ag mapset N_Port F_Ports ag mapshow N_Port ag modedisable ag modeenable ag modeshow ag pgadd PG_ID N_Port1 N_Port2 ag pgcreate PG_ID N_Port1 N_Port2 n PG_Name ag pgdel PG_ID N_Port1 N_Port2 ag pgremove PG_ID ag pgrename pgid newname ag pgshow PG_ID ag policydisable policy ag policyenable policy ag policyshow...

Page 54: ... from the N_Port mapping Specify the N_Port number to which the F_Ports are currently mapped Specify the list of F_Port numbers to be removed from the current mapping The F_Port numbers must be separated by semicolons mapset N_Port F_Port1 F_Port2 Maps F_Ports to a specific N_Port to the fabric Any F_Port can be mapped to only one N_Port F_Ports are enabled only if the N_Port is online and NPIV is...

Page 55: ... groups and its members on the switch policyenable policy Enables the specified policy The policyenable command will fail if any of the mutually exclusive policies are enabled PG policy and APC policy are mutually exclusive The mutually exclusive policy in force will be shown as part of an error message You must disable the existing policy to enable this policy The policy can be one of the followi...

Page 56: ...F_Ports specified Specify the F_Ports Specify the N_Port The F_Port numbers must be separated by semicolons If there is a current Preferred port already set for a F_Port this command will overwrite that with the new Preferred Port for the F_Port An F_Port cannot have more than one N_Port as a secondary N_Port at the same time This check will be performed before the mapping is set prefshow Displays...

Page 57: ...2 14 5 0x019800 20 98 00 05 1e 36 1e ea 1 1 10 115 74 200 None 7 0x019a00 20 9a 00 05 1e 36 1e ea 1 1 10 115 74 200 None 8 0x030600 20 06 00 05 1e 34 27 d0 1 1 10 115 74 58 None 10 0x019900 20 99 00 05 1e 36 1e ea 1 1 10 115 74 200 None 11 0x019500 20 95 00 05 1e 36 1e ea 1 1 10 115 74 200 3 15 0x030301 20 03 00 05 1e 34 27 d0 1 1 10 115 74 58 6 F_Port information Port PortID Attached PWWN N_Port ...

Page 58: ...d_F_Ports Current_F_Ports Failover Failback PG_ID PG_Name 12 0 1 2 None 1 1 0 pg0 13 3 4 5 None 1 1 0 pg0 14 6 7 8 None 1 1 0 pg0 15 9 10 11 None 1 1 0 pg0 switch admin ag mapshow 15 N_Port 15 Failover 1 enabled 0 disabled 1 Failback 1 enabled 0 disabled 1 Current F_Ports None Configured F_Ports 9 10 11 PG_ID 0 PG_Name pg0 See Also portcfgnport portcfgnpivport ...

Page 59: ...verDisable 33 ag failoverEnable 33 ag failoverShow 32 33 42 ag mapAdd 29 ag mapDel 28 29 ag mapShow 16 18 25 26 29 ag modeDisable 22 42 ag modeEnable 16 18 41 ag modeShow 16 18 22 ag show 44 cfgSave 23 configDownload 22 23 configUpload 16 17 22 defZone allAccess 23 portCfgNpivPort 41 portCfgNport 31 32 41 portCfgShow 41 switchDisable 16 17 22 23 41 42 switchEnable 23 switchMode 41 42 switchShow 16...

Page 60: ...ins 15 Management Server Platform 15 merge switch 23 settings 15 zoning scheme 15 Fabric OS Management Server Platform Service settings 15 failback policy disable 33 enable 33 example 8 9 failover policy 7 behavior 9 enable 32 example 9 10 FLOGI 7 I inband queries 15 J join fabric 22 L long distance mode edge switch 15 M mapping configuration 27 display 25 26 example 5 ports 4 remove F_Port 29 sho...

Page 61: ...ements 39 types 3 R requirements edge switch settings 15 fabric settings 15 ports 39 S settings ACL policies 15 FLOGI 15 inband queries 15 Management Server Platform 15 zone no access 22 status port display 27 show 27 supported hardware and software vi switchMode Access Gateway mode 18 Native 17 T terms vii U unlock N_Port 31 Z zoning merge 23 schemes 15 setting 22 ...

Page 62: ...52 Access Gateway Administrator s Guide 53 1000605 01 ...

Reviews: