Brocade Communications Systems Fabric OS v7.0.1, Справочник по командам

Страница: 222 / 1132

196 Fabric OS Command Reference
53-1001764-01
cryptoCfg
22
-newLUN
Indicates that the LUN created does not contain any user data and will be part of a
replication configuration. This operand is optional. The presence of this operand is
incompatible with the
-keyID , -key_lifespan , and -enable_rekey options. An RSA
RKM must be configured and replication must be enabled ( cryptocfg --set
replication enabled ) before invoking this command. Both primary and remote
mirror LUNs must be added to their container with the -newLUN option.
-write_early_ack disable | enable
Specifies the Tape Write pipelining mode of the LUN. This option enables or
disables early acknowledgement of commands (internal buffering) for a tape LUN.
This feature is enabled by default.
-read_ahead disable | enable
Specifies the Tape Read Ahead mode of the LUN. When Tape Read Ahead is
disabled, the tape LUN operates in unbuffered mode. When Tape Read ahead is
disabled, the tape LUN operates in buffered mode. This feature is enabled by
default.
--modify -LUN
Modifies the encryption policies of one or more LUNs in a specified CTC. This
command is valid only on the group leader. The following operands are required
when modifying a LUN:
crypto_target_container_name
Specifies the name of the CTC to which the LUNs belong.
LUN_Num | range
Specifies the LUN number either as a 16-bit (2 bytes) number in hex notation (for
example, 0x07) or as a 64-bit (8 bytes) number in WWN format (for example,
0:07:00:00:00:00:00:00). The LUN number must be zero when a tape LUN is
specified and the tape drive is a single LUN device. When specifying a range, the
LUN numbers must be entered in the 16-bit hex format.
initiator_PWWN initiator_NWWN
Specifies the initiator by its port WWN and node WWN.
You may optionally modify the following LUN policy configuration parameters.
Refer to
cryptocfg --add -LUN for descriptions of these parameters.
•
[ -encryption_format native | DF_compatible]
•
[ -encrypt | cleartext ]
•
[ -enable_encexistingdata | -disable_encexistingdata ]
•
[ -enablerekey time_period | -disable_rekey ]
•
[ -write_early_ack disable | enable]
•
[ -read_ahead disable | enable]
Make sure you understand the ramifications of modifying LUN parameters (such
as changing the LUN policy from
encrypt to cleartext ) for devices that are online
and are already being utilized. The following restrictions apply when modifying
LUN policy parameters:
•
When you change LUN policy from encrypt to cleartext the following policy
parameters are restored to default (disabled):
-enable_encexistingdata ,
-enable_rekey , and -key_lifespan .
•
When changing the LUN policy back to encrypt, these parameters need to be
reconfigured. Attempting to reconfigure these parameters while the LUN
policy is set to cleartext is not permitted and generates an error.
•
For tape LUNs the -enable_encexistingdata and the -enable_rekey
operands are not valid and return an error when executed.