Top
ETERNUS SF Storage Cruiser V16.9 Operation Guide
FUJITSU Storage

4.2.1 Brocade Fibre Channel Switch

This software support the Brocade Fibre Channel switch and PRIMERGY Fibre Channel switch blade.

Before starting the operations in "4.2.1.1 Setting", make sure to understand the following descriptions.

4.2.1.1 Setting

This section explains the items that must be configured directly to the device side in advance to use this product to manage the Brocade Fibre Channel switch and PRIMERGY Fibre Channel switch blade. Refer to the manuals of each device for details on these items.

IP Address, Subnet Mask, and Gateway Address (Required)

Define the IP address, subnet mask, and gateway address for a LAN. If the Fibre Channel switch is equipped with an operation panel, these settings can be defined from the operation panel. If the Fibre Channel switch is equipped with a serial port, define them by issuing the ipAddrSet command via the serial port.

User Name and Password for Fibre Channel Switch Control

For Fibre Channel switch control, this software is used to log in using SSH to the target device. Enable the SSH connection of the target device.
Set users with security levels according to the requirements of the system administrator. The user name "admin" is set with the system administrator security level in the factory shipped configuration. Refer to the manuals of the device or contact a Fujitsu customer engineer for the default password of this user.

If the password has been changed on the device side, when perform the Reload Conf. operation for the relevant device with Web Console, this software recognizes the change and the device status becomes a Warning display.

In order for the setting to match the changed device setting, perform a change to the account information for device management using Web Console.

For some types of devices, the change of the password on the device side cannot be recognized automatically. Change the device management account information in Web Console for these devices.

When connected to a cascade, some types of devices cannot automatically recognize the changed password. In this case, delete the device and register it again. Refer to "5.2 Registering Device" for details on deleting and registering devices.

Domain Name

A domain name is a unique name defined for a Fibre Channel switch in a SAN. Such names are necessary for a cascade connection of multiple Fibre Channel switches. Since domain names are automatically defined by firmware built into the individual Fibre Channel switches, the name need not be considered during definition and management of access paths using this software.

However, the domain names are important elements in manual port zoning. In such cases, make sure that no identical value is set for any two Fibre Channel switches in the cascade connection. If a Fibre Channel switch is equipped with an operation panel, a domain name can be set from the operation panel. If a Fibre Channel switch is equipped with a serial port or if network settings are defined for the Fibre Channel switch, log in to the switch, and set a domain name by executing the configure command.

SysName (Recommended)

Register a switch name for Fibre Channel switch control. This software uses this switch name as SysName. SysName should be a name that is not identical to any other name registered with this software. If the Fibre Channel switch is equipped with an operation panel, a switch name can be set from the operation panel. If the Fibre Channel switch is equipped with a serial port or if the network settings are defined for the Fibre Channel switch, log in to the switch, and set a switch name by executing the switchName command.

Zoning Setting

Zoning is recommended.

No zoning may be set for Fibre Channel switches. When Fibre Channel switches that are not set the zoning are connected to server nodes or storage devices, they are placed in a state where their security levels are undefined (which makes all of the Fibre Channel switches accessible from every server node). To prevent inadvertent access from destroying data on the storage side, recommend to set the temporary zone as follows. By this setting, it is able to stop all access paths of the Fibre Channel switches. After defining this setting, connect the server node and storage device to the Fibre Channel switch, and set up an access path using this software. When setting up a cascade connection between the Fibre Channel switch and another Fibre Channel switch for which zoning is already set, you need not define this setting because zoning information is copied. The setting is also not necessary if the default of zoning mode is set to "No Access" on the Default Zone function of the Fibre Channel switch.

zoneCreate"SNM_0001","10:0B:00:00:0E:00:00:00;10:0C:00:00:0E:00:00:00"
cfgCreate"SNM_BCSI","SNM_0001"
cfgEnable"SNM_BCSI"
cfgSave

If the Fibre Channel switches are to be cascaded for operation, cascade the switches before executing the above command. Execute this command on a Fibre Channel switch where the latest firmware has been installed.

Note

  • If the temporary zone has been created, all accesses are blocked. For this reason, do not implement this measure while the target Fibre Channel switch environment is operating. Implement this measure either immediately after the Fibre Channel switch environment has been installed and before operations have started (or while operations are paused).

  • Set a temporary zoning for Fibre Channel switches that are not configured with zoning or set to "No Access" with the Default Zone function.

  • This software does not support environments whose zone name, zone config name, or Alias meets either of the following conditions.

    • Symbols other than the underscore (_) are used

    • The name starts with a number

SNMP Setting

This software handles fibre channel switches and SNMP communication. The SNMPv1 or SNMPv3 protocol can be used.

When Using SNMPv1

The name of the SNMP Community used for SNMP communication is specified when registering the switch. If the SNMP Community settings are at their defaults, this software communicates by using "public" or "private" for the SNMP Community name.

If you use the beacon function, before operating the beacon, execute the snmpConfig command of the fibre channel switch and check that SNMP SET Security Level is "No security". If SNMP SET Security Level is not "No security", re-execute the snmpConfig command and set SNMP SET Security Level to "No security". Refer to the manuals of the target fibre channel switch for details.

When Using SNMPv3

The SNMP user information for using SNMP communication with this product is specified when registering the switch.

To change the SNMP settings, change the device side settings and then change the SNMP settings in this software. The settings of this product can be changed from Web Console.

SNMP-MIB Setting

For the SNMP-MIB setting of the Fibre Channel switch, set the following by specifying the "snmpConfig --set mibCapability" command or the "snmpMibCapSet" command. Specify "yes" for the "FE-MIB", "SW-MIB", "FA-MIB", "HA-MIB" and "SW-TRAP" items. Leave the other items unspecified. Simply press ENTER for these unspecified items.

switch:admin> snmpConfig --set mibCapability
  The SNMP Mib/Trap Capability has been set to support
(omitted)
FE-MIB (yes, y, no, n): [yes] yes
SW-MIB (yes, y, no, n): [yes] yes
FA-MIB (yes, y, no, n): [yes] yes
FICON-MIB (yes, y, no, n): [yes]
HA-MIB (yes, y, no, n): [yes] yes
FCIP-MIB (yes, y, no, n): [no]
ISCSI-MIB (yes, y, no, n): [no]
SW-TRAP (yes, y, no, n): [yes] yes
   swFCPortScn (yes, y, no, n): [yes]
   swEventTrap (yes, y, no, n): [yes]
   swFabricWatchTrap (yes, y, no, n): [yes]
   swTrackChangesTrap (yes, y, no, n): [yes]
(omitted)
switch:admin>

The output of the above command may depend on the firmware version of the Fibre Channel switch. Change the settings of only the "FE-MIB", "SW-MIB", "FA-MIB", "HA-MIB" and "SW-TRAP" items.

Note that if HA-MIB items are not displayed, HA-MIB settings are not required.

If "FE-MIB" and "SW-MIB" are not set to "yes", searching and registering devices fail.

If "FA-MIB" is not "yes", physical connection information, port zoning information, and port speed (transfer rate) information on each port of the Fibre Channel switch is erroneously recognized.
The fault monitoring function only runs if "SW-TRAP" is set to "yes".
The director performance management function only runs if HA-MIB is set to "yes".

4.2.1.2 Zoning

This software uses the one-to-one WWPN zoning of the Fibre Channel switch as the basis for setting up and removing access paths (logical paths). However, it also supports other types of zoning settings at their respective levels. The functions that it supports for the different types of zoning are as follows:

No Zoning Setting (with This Software, This Is Called "no security state".)

This is a state that has no zoning setting. In this state, the Fibre Channel switch permits access between all ports. It is the factory default setting. However, if a Fibre Channel switch is connected in cascade to another Fibre Channel switch with a zoning setting, the zoning setting information is copied when cascade connection communication is established.

This software can perform management normally for the Fibre Channel switches without a zoning setting. Also, when registering a Fibre Channel switch with this software, you can specify whether to set zoning in response to a subsequent software attempt to set up an access path.

With no zoning setting, the Fibre Channel switch operates with security management delegated to the binding and affinity capabilities of server nodes and storage devices.

WWPN Zoning Setting

The WWPN zoning setting is a method by which zoning is defined based on the WWPN of a Fibre Channel port. A WWPN value that is unique throughout the world is defined for each port. As a result, no wrong access path is created even if the port connection place of the Fibre Channel switch is changed.

All access path control functions of this software are effective for access paths defined in the one-to-one WWPN zoning setting. For other defined access paths, this software can read access and display path information, but it cannot delete and inherit the access paths. However, it is possible to delete only zoning setup.

Port Zoning Setting

The port zoning setting is a method by which zoning is defined based on the specification of the port connection place of the Fibre Channel switch. A new port zoning setting must be defined if the port connection place of the Fibre Channel switch is changed.

As for the access path control functions, this software can read information about access paths for which port zoning is set, display the paths, and manage their status, but it cannot delete and inherit the access paths. However, it is possible to delete only zoning setup.

WWNN Zoning Setting

The WWNN zoning setting is a method by which zoning is defined based on the WWNN of a Fibre Channel port. Though a WWNN can be shared by several Fibre Channel ports, its definition differs from company to company.

As for the access path control functions, this software cannot display or delete access paths for which WWNN zoning is set. However, it can perform fault management of the Fibre Channel switch.

Different types of zoning settings can be defined for the Fibre Channel switch. To allow this software to provide complete zoning security, however, changing the existing zoning setting to the one-to-one WWPN zoning setting is recommended.

The zoning setting can be defined in the Zone Administration window of WEBTOOLS of the Fibre Channel switch. Note that settings in WEBTOOLS are dependent on the device and firmware.