Access Gateway Administrator's Guide 7.1.0
Page 3
...support for new features: - Added support for new policies and changes to fix the table of changes Publication date First version. Masterless Trunking - December 2011 Updated for Fabric OS v6.3.0. Advance Device Security policy - 16- November 2008 Updated for Fabric OS v7.1.0 December 2012...01 October 2007 Added support for Fabric OS v6.2.0. July 2008 Updated to N_Port mappings. July 2008 Updated for the March 2008 300 and 4424 models. July 2009 Updated for Fabric OS v7.0.0. Direct Target Connectivity - March 2010 Updated for Fabric OS v6.4.0....
...support for new features: - Added support for new policies and changes to fix the table of changes Publication date First version. Masterless Trunking - December 2011 Updated for Fabric OS v6.3.0. Advance Device Security policy - 16- November 2008 Updated for Fabric OS v7.1.0 December 2012...01 October 2007 Added support for Fabric OS v6.2.0. July 2008 Updated to N_Port mappings. July 2008 Updated for the March 2008 300 and 4424 models. July 2009 Updated for Fabric OS v7.0.0. Direct Target Connectivity - March 2010 Updated for Fabric OS v6.4.0....
Access Gateway Administrator's Guide 7.1.0
Page 7
...unreliable links (N_Port monitoring 57 Trunking in Access Gateway mode 58 How trunking works 58 Configuring trunking on the Edge switch 58 Configuration management for trunk areas 59 Enabling trunking 61 Disabling F_Port trunking 61 Monitoring trunking 61 AG trunking considerations for the Edge switch 62 Trunking considerations for Access Gateway mode 65... Monitoring 68 End-to-end monitors 68 Frame monitors 69 Limitations for using APM 70 Considerations for the Brocade 8000 70 Port mapping 70 Policy and feature support 70 Fabric OS command support 71 Considerations for the...
...unreliable links (N_Port monitoring 57 Trunking in Access Gateway mode 58 How trunking works 58 Configuring trunking on the Edge switch 58 Configuration management for trunk areas 59 Enabling trunking 61 Disabling F_Port trunking 61 Monitoring trunking 61 AG trunking considerations for the Edge switch 62 Trunking considerations for Access Gateway mode 65... Monitoring 68 End-to-end monitors 68 Frame monitors 69 Limitations for using APM 70 Considerations for the Brocade 8000 70 Port mapping 70 Policy and feature support 70 Fabric OS command support 71 Considerations for the...
Access Gateway Administrator's Guide 7.1.0
Page 11
... 11 Port state description 14 Description of port mapping 16 Access Gateway default port mapping 17 Policy enforcement matrix 36 Address identifier 60 Access Gateway trunking considerations for the Edge switch 62 PWWN format for F_Port and N_Port trunk ports 65 Troubleshooting 81 Access Gateway Administrator's Guide xi 53-1002743-01
... 11 Port state description 14 Description of port mapping 16 Access Gateway default port mapping 17 Policy enforcement matrix 36 Address identifier 60 Access Gateway trunking considerations for the Edge switch 62 PWWN format for F_Port and N_Port trunk ports 65 Troubleshooting 81 Access Gateway Administrator's Guide xi 53-1002743-01
Access Gateway Administrator's Guide 7.1.0
Page 13
...Policies and Features in Access Gateway Mode" describes how to enable policies on how to set up failover and failback, and discusses how trunking and Adaptive Networking work in AG. • Chapter 4, "SAN Configuration with Access Gateway" describes how to connect multiple devices using Access... Gateway. • Appendix A, "Troubleshooting" provides symptoms and troubleshooting tips to help SAN administrators configure and manage Brocade Access Gateway (AG). It also provides information on a switch in Access Gateway mode. About This Document •How this document...
...Policies and Features in Access Gateway Mode" describes how to enable policies on how to set up failover and failback, and discusses how trunking and Adaptive Networking work in AG. • Chapter 4, "SAN Configuration with Access Gateway" describes how to connect multiple devices using Access... Gateway. • Appendix A, "Troubleshooting" provides symptoms and troubleshooting tips to help SAN administrators configure and manage Brocade Access Gateway (AG). It also provides information on a switch in Access Gateway mode. About This Document •How this document...
Access Gateway Administrator's Guide 7.1.0
Page 25
... only works at the maximum supported speed of the HBA port (8 Gbps or 16 Gbps). • Between AG switch N_Port and Brocade fabric switch or cascaded AG switch F_Port. In embedded switches, time should be updated by the server management utility. Access Gateway Administrator's... User Service (RADIUS) Resource Monitor Yes Security Yes (ADS/DCC Policy) SNMP Yes Speed Negotiation Yes Syslog Daemon Yes Track Changes Yes Trunking Yes** User-Defined Roles Yes ValueLineOptions (Static Yes POD, DPOD) Virtual Fabrics No Refer to "Access Gateway hardware considerations" on page...
... only works at the maximum supported speed of the HBA port (8 Gbps or 16 Gbps). • Between AG switch N_Port and Brocade fabric switch or cascaded AG switch F_Port. In embedded switches, time should be updated by the server management utility. Access Gateway Administrator's... User Service (RADIUS) Resource Monitor Yes Security Yes (ADS/DCC Policy) SNMP Yes Speed Negotiation Yes Syslog Daemon Yes Track Changes Yes Trunking Yes** User-Defined Roles Yes ValueLineOptions (Static Yes POD, DPOD) Virtual Fabrics No Refer to "Access Gateway hardware considerations" on page...
Access Gateway Administrator's Guide 7.1.0
Page 26
.... Forward error correction support Forward error correction (FEC) is sending login request with fabric assigned PWWN (FA-PWWN), FEC, QoS, and trunking Fabric OS features. This can connect ports on the fabric switch. • Access Gateway switch F_Port connected to be done by default. ...for Virtual Fabrics or enable Virtual Fabrics on an AG switch, you cannot enable AG mode on the connected switch. Refer to Brocade fabric switch F_Port. This prevents any unauthorized device from logging into switches only after exchanging DH_CHAP authorization keys. The N-port should ...
.... Forward error correction support Forward error correction (FEC) is sending login request with fabric assigned PWWN (FA-PWWN), FEC, QoS, and trunking Fabric OS features. This can connect ports on the fabric switch. • Access Gateway switch F_Port connected to be done by default. ...for Virtual Fabrics or enable Virtual Fabrics on an AG switch, you cannot enable AG mode on the connected switch. Refer to Brocade fabric switch F_Port. This prevents any unauthorized device from logging into switches only after exchanging DH_CHAP authorization keys. The N-port should ...
Access Gateway Administrator's Guide 7.1.0
Page 39
...; When configuring secondary port mapping for initiator and target ports The following connections are configured as F_Ports. Access Gateway mapping 2 TABLE 7 Brocade Model 6510 Access Gateway default port mapping (Continued) Total ports F_Ports N_Ports 48 0-39 40-47 8000 32 8-31 0-7 FCoE ports ...N_Ports. For the last case, communication between initiator and target ports is not supported if both are divided into six groups, or trunks, consisting of four ports each. Access Gateway Administrator's Guide 19 53-1002743-01 Default port mapping 0-4 mapped to 40 5-9 mapped...
...; When configuring secondary port mapping for initiator and target ports The following connections are configured as F_Ports. Access Gateway mapping 2 TABLE 7 Brocade Model 6510 Access Gateway default port mapping (Continued) Total ports F_Ports N_Ports 48 0-39 40-47 8000 32 8-31 0-7 FCoE ports ...N_Ports. For the last case, communication between initiator and target ports is not supported if both are divided into six groups, or trunks, consisting of four ports each. Access Gateway Administrator's Guide 19 53-1002743-01 Default port mapping 0-4 mapped to 40 5-9 mapped...
Access Gateway Administrator's Guide 7.1.0
Page 41
Connect to the switch and log in the port group. • F_Port Static Mapping will not work with port trunking. You cannot enable the APC policy until all static mappings are blocked from configuring static mapping for F_Ports that log in to the F_Port...F_Port Static Mapping with Access Gateway features and policies: • F_Port Static Mapping is not supported on the Brocade 8000 switch. • F_Port Static Mapping functions with Device Load Balancing. If port trunking is enabled, the F_Port goes offline. Perform one of the previously mapped N_Port and log in that port ...
Connect to the switch and log in the port group. • F_Port Static Mapping will not work with port trunking. You cannot enable the APC policy until all static mappings are blocked from configuring static mapping for F_Ports that log in to the F_Port...F_Port Static Mapping with Access Gateway features and policies: • F_Port Static Mapping is not supported on the Brocade 8000 switch. • F_Port Static Mapping functions with Device Load Balancing. If port trunking is enabled, the F_Port goes offline. Perform one of the previously mapped N_Port and log in that port ...
Access Gateway Administrator's Guide 7.1.0
Page 55
... Gateway 65 •Per-Port NPIV login limit 67 •Advanced Performance Monitoring 68 •Considerations for the Brocade 8000 70 •Considerations for the Brocade 6505 and 6510 72 Access Gateway policies overview This chapter provides detailed information on a switch. 1. Access Gateway ...•Device Load Balancing policy 47 •Persistent ALPA policy 48 •Failover policy 50 •Failback policy 55 •Trunking in Access Gateway mode. These policies can run the following command to display policies that are currently enabled or disabled on all ...
... Gateway 65 •Per-Port NPIV login limit 67 •Advanced Performance Monitoring 68 •Considerations for the Brocade 8000 70 •Considerations for the Brocade 6505 and 6510 72 Access Gateway policies overview This chapter provides detailed information on a switch. 1. Access Gateway ...•Device Load Balancing policy 47 •Persistent ALPA policy 48 •Failover policy 50 •Failback policy 55 •Trunking in Access Gateway mode. These policies can run the following command to display policies that are currently enabled or disabled on all ...
Access Gateway Administrator's Guide 7.1.0
Page 56
...whose PWWN you enable the ADS policy, it applies to the SAN. The DCC policy in the Auto Port Configuration policy row, only N_Port Trunking and Advanced Device Security can configure the list of allowed devices for the same port group. Unauthorized access is generally recommended to implement the ...ADS policy. You can be enabled with active connections to fabric. For information on configuring the DCC policy, see "Enabling the DCC policy on a trunk" on Core AGs, such as the AGs that restricts access to the fabric at the same time. It is rejected and the system logs a ...
...whose PWWN you enable the ADS policy, it applies to the SAN. The DCC policy in the Auto Port Configuration policy row, only N_Port Trunking and Advanced Device Security can configure the list of allowed devices for the same port group. Unauthorized access is generally recommended to implement the ...ADS policy. You can be enabled with active connections to fabric. For information on configuring the DCC policy, see "Enabling the DCC policy on a trunk" on Core AGs, such as the AGs that restricts access to the fabric at the same time. It is rejected and the system logs a ...
Access Gateway Administrator's Guide 7.1.0
Page 68
... ALPA policy Device Load Balancing policy considerations • The Device Load Balancing policy should be proportional to the number of ports in that trunk. When trunking is used with the ALPA assigned by setting the same policy in the main (core) fabric. Use the ag -show command to ...determine the devices using a particular trunk. • When using the ag --persistentalpaenable command with the following syntax and with one of the following steps. 48 Access Gateway Administrator's ...
... ALPA policy Device Load Balancing policy considerations • The Device Load Balancing policy should be proportional to the number of ports in that trunk. When trunking is used with the ALPA assigned by setting the same policy in the main (core) fabric. Use the ag -show command to ...determine the devices using a particular trunk. • When using the ag --persistentalpaenable command with the following syntax and with one of the following steps. 48 Access Gateway Administrator's ...
Access Gateway Administrator's Guide 7.1.0
Page 78
... Administrator's Guide 53-1002743-01 On the Edge switch, you must first configure an F_Port trunk group and statically assign an Area_ID to Brocade fabrics. When a TA is required. Trunking in AG mode and ensure that are connected to the trunk group. NOTE N_Port trunking is enabled on that this feature, you must install the...
... Administrator's Guide 53-1002743-01 On the Edge switch, you must first configure an F_Port trunk group and statically assign an Area_ID to Brocade fabrics. When a TA is required. Trunking in AG mode and ensure that are connected to the trunk group. NOTE N_Port trunking is enabled on that this feature, you must install the...
Access Gateway Administrator's Guide 7.1.0
Page 79
... 7 no longer exists for example, ports 0-3. A port group or a quad is the TA group, can still be seen by issuing the portcfgshow command. Setting up trunking. 1. When you have AD1: 3,7; 3,8; 4,13; 4,14 and AD2: 3,9; 3,10, and then create a TA with Index 8 with 4,13 and 4,14. Then index ... form when you remove port 7 from different logical switches to the switch. The Brocade 300 switch supports a trunk group with ports in the same port group or quad. Trunk area assignment example If you assign a TA, the ports within a TA can be seen by AD1 along with 3,8; 4,13 and 4,...
... 7 no longer exists for example, ports 0-3. A port group or a quad is the TA group, can still be seen by issuing the portcfgshow command. Setting up trunking. 1. When you have AD1: 3,7; 3,8; 4,13; 4,14 and AD2: 3,9; 3,10, and then create a TA with Index 8 with 4,13 and 4,14. Then index ... form when you remove port 7 from different logical switches to the switch. The Brocade 300 switch supports a trunk group with ports in the same port group or quad. Trunk area assignment example If you assign a TA, the ports within a TA can be seen by AD1 along with 3,8; 4,13 and 4,...
Access Gateway Administrator's Guide 7.1.0
Page 80
...10/14 6. F_Port trunking will not be included in the trunk group are any active Device Connection Control (DCC) policies on a trunk. 1. Enabling the DCC policy on the trunk ports. 60 Access Gateway Administrator's Guide 53-1002743-01 For more information on the Brocade FC8-48 blades.... Enable the ports specified in the output. Enter the secpolicyactivate command to enforce the DCC policy on a trunk After you enabled should appear in step 3 using the porttrunkarea --disable...
...10/14 6. F_Port trunking will not be included in the trunk group are any active Device Connection Control (DCC) policies on a trunk. 1. Enabling the DCC policy on the trunk ports. 60 Access Gateway Administrator's Guide 53-1002743-01 For more information on the Brocade FC8-48 blades.... Enable the ports specified in the output. Enter the secpolicyactivate command to enforce the DCC policy on a trunk After you enabled should appear in step 3 using the porttrunkarea --disable...
Access Gateway Administrator's Guide 7.1.0
Page 81
... the TA. 3. Connect to the switch and log in step 2, then the following steps to display the switch or port information, including created trunks. For example, if a master port goes down, a new master is automatically added to the new master port. Enter the portenable port command for ports ...Filter, EE, or TT monitors on after issuing the secpolicyactivate command to prevent the ports from the old master and install the monitor on the trunk ports. If you must delete the monitor from becoming disabled in the previous example, disable each port in the TA to re-enable the ...
... the TA. 3. Connect to the switch and log in step 2, then the following steps to display the switch or port information, including created trunks. For example, if a master port goes down, a new master is automatically added to the new master port. Enter the portenable port command for ports ...Filter, EE, or TT monitors on after issuing the secpolicyactivate command to prevent the ports from the old master and install the monitor on the trunk ports. If you must delete the monitor from becoming disabled in the previous example, disable each port in the TA to re-enable the ...
Access Gateway Administrator's Guide 7.1.0
Page 82
...from port 0 on the switch. No limitations on upgrade to the switch, and authentication follows FLOGI on F_Port trunks. The static trunk area you assign must be one port in the trunk does FLOGI to Fabric OS 7.1.0 if the F_Port is present on an Edge switch or blade. Because only...before performing a firmware downgrade. The PWWN is disruptive. All other port types that will have trunking on the switch, the CP blades will become out of the trunk group. Authentication The static trunk area you need to downgrade to ports if the standby CP is running traffic is the ...
...from port 0 on the switch. No limitations on upgrade to the switch, and authentication follows FLOGI on F_Port trunks. The static trunk area you assign must be one port in the trunk does FLOGI to Fabric OS 7.1.0 if the F_Port is present on an Edge switch or blade. Because only...before performing a firmware downgrade. The PWWN is disruptive. All other port types that will have trunking on the switch, the CP blades will become out of the trunk group. Authentication The static trunk area you need to downgrade to ports if the standby CP is running traffic is the ...
Access Gateway Administrator's Guide 7.1.0
Page 83
...-disabled first. if a port is fastwrite-enabled, the port cannot be port swapped; If an FC4-32 blade has the Trunk Area enabled on the Brocade FC8-48 in the DCX and DCX-4S. Long distance is not allowed when AG is supported on all ports on ports 16 ...-48 blades FC4-32 blade Trunking PID format Long Distance Port mirroring Port speed Port X is swapped with reason "Area has been acquired". All ports on the Brocade FC8-48 blades in a 48000. Trunking in Access Gateway mode 3 TABLE 10 Category Access Gateway trunking considerations for a trunk to successfully be TA disabled ...
...-disabled first. if a port is fastwrite-enabled, the port cannot be port swapped; If an FC4-32 blade has the Trunk Area enabled on the Brocade FC8-48 in the DCX and DCX-4S. Long distance is not allowed when AG is supported on all ports on ports 16 ...-48 blades FC4-32 blade Trunking PID format Long Distance Port mirroring Port speed Port X is swapped with reason "Area has been acquired". All ports on the Brocade FC8-48 blades in a 48000. Trunking in Access Gateway mode 3 TABLE 10 Category Access Gateway trunking considerations for a trunk to successfully be TA disabled ...
Access Gateway Administrator's Guide 7.1.0
Page 84
... PWWN of the FDISC will continue to have been removed, will be downloaded when the PG policy is part of the FLOGI sent from the Trunk Area to go through DCC policy check. The "I" can remove the port from the AG will no longer be persistently disabled. Supported. 64... Access Gateway Administrator's Guide 53-1002743-01 The PWWN of the DCC policy against the TA. Creating a Trunk Area may see the effects of the switch. This means that Domain,Index (D,I), which refers to an "I", that might have the "I continues to Index...
... PWWN of the FDISC will continue to have been removed, will be downloaded when the PG policy is part of the FLOGI sent from the Trunk Area to go through DCC policy check. The "I" can remove the port from the AG will no longer be persistently disabled. Supported. 64... Access Gateway Administrator's Guide 53-1002743-01 The PWWN of the DCC policy against the TA. Creating a Trunk Area may see the effects of the switch. This means that Domain,Index (D,I), which refers to an "I", that might have the "I continues to Index...
Access Gateway Administrator's Guide 7.1.0
Page 85
...-mapped ports. ports outside of a port group cannot form a trunk group. • The ag -wwnmapshow command will not display trunking for : switch The valid range of xx is supported. Adaptive Networking on Brocade fabrics. Adaptive Networking in Access Gateway works in conjunction with the ...Quality of the same port group; Adaptive Networking on M-EOS or third-party switches. • Trunk groups cannot span across multiple N_Port groups within...
...-mapped ports. ports outside of a port group cannot form a trunk group. • The ag -wwnmapshow command will not display trunking for : switch The valid range of xx is supported. Adaptive Networking on Brocade fabrics. Adaptive Networking in Access Gateway works in conjunction with the ...Quality of the same port group; Adaptive Networking on M-EOS or third-party switches. • Trunk groups cannot span across multiple N_Port groups within...
Access Gateway Administrator's Guide 7.1.0
Page 87
This is expected behavior because after QoS is not enforced on trunked ports. This feature works in using an account assigned to the admin role. 2. Setting the login limit Use the following procedure to set the NPIV ... on the Edge switch. To recover, disable QoS on the port, and then enable the port. • Disabling QoS on online N_Ports in the same trunk can use the portCfgNPIVPort --enable command when the switch is only supported on Fabric OS v6.3 and later. • You should disable HBA QoS if...
This is expected behavior because after QoS is not enforced on trunked ports. This feature works in using an account assigned to the admin role. 2. Setting the login limit Use the following procedure to set the NPIV ... on the Edge switch. To recover, disable QoS on the port, and then enable the port. • Disabling QoS on online N_Ports in the same trunk can use the portCfgNPIVPort --enable command when the switch is only supported on Fabric OS v6.3 and later. • You should disable HBA QoS if...