Access Gateway Administrator's Guide 7.1.0
Page 5
... Brocade Access Gateway overview 1 Comparing Native Fabric and Access Gateway modes 1 Fabric OS features in Access Gateway mode 3 Buffer credit recovery support 5 Forward error correction support 6 Virtual Fabrics support 6 Device authentication support 6 Access Gateway port types 9 Comparison of Access Gateway ports to standard switch ports 9 Access Gateway hardware considerations 11 Chapter 2 Configuring...
... Brocade Access Gateway overview 1 Comparing Native Fabric and Access Gateway modes 1 Fabric OS features in Access Gateway mode 3 Buffer credit recovery support 5 Forward error correction support 6 Virtual Fabrics support 6 Device authentication support 6 Access Gateway port types 9 Comparison of Access Gateway ports to standard switch ports 9 Access Gateway hardware considerations 11 Chapter 2 Configuring...
Access Gateway Administrator's Guide 7.1.0
Page 6
...Gateway mapping 15 Port mapping 16 F_Port Static Mapping 20 Device mapping 21 Considerations for Access Gateway mapping 28 N_Port configurations 30 Displaying N_Port configurations 31 Unlocking N_Ports 31 Persisting port online state 31 D_Port support 32 Limitations and considerations 32 Saving port mappings ... 37 Allow lists 37 ADS policy considerations 39 Upgrade and downgrade considerations for the ADS policy. . . 39 Automatic Port Configuration policy 39 How the APC policy works 39 Enabling and disabling the APC policy 40 APC policy considerations 40 Upgrade and downgrade...
...Gateway mapping 15 Port mapping 16 F_Port Static Mapping 20 Device mapping 21 Considerations for Access Gateway mapping 28 N_Port configurations 30 Displaying N_Port configurations 31 Unlocking N_Ports 31 Persisting port online state 31 D_Port support 32 Limitations and considerations 32 Saving port mappings ... 37 Allow lists 37 ADS policy considerations 39 Upgrade and downgrade considerations for the ADS policy. . . 39 Automatic Port Configuration policy 39 How the APC policy works 39 Enabling and disabling the APC policy 40 APC policy considerations 40 Upgrade and downgrade...
Access Gateway Administrator's Guide 7.1.0
Page 7
.... 54 Enabling and disabling the Failover policy for a port group . . . 54 Upgrade and downgrade considerations for the Failover policy 55 Failback policy 55 Failback policy configurations in Access Gateway 55 Enabling and disabling the Failback policy on an N_Port . . . . 56 Enabling and disabling the Failback policy for a port group . ....Monitoring 68 End-to-end monitors 68 Frame monitors 69 Limitations for using APM 70 Considerations for the Brocade 8000 70 Port mapping 70 Policy and feature support 70 Fabric OS command support 71 Considerations for the Brocade 6505 and 6510 72 vii
.... 54 Enabling and disabling the Failover policy for a port group . . . 54 Upgrade and downgrade considerations for the Failover policy 55 Failback policy 55 Failback policy configurations in Access Gateway 55 Enabling and disabling the Failback policy on an N_Port . . . . 56 Enabling and disabling the Failback policy for a port group . ....Monitoring 68 End-to-end monitors 68 Frame monitors 69 Limitations for using APM 70 Considerations for the Brocade 8000 70 Port mapping 70 Policy and feature support 70 Fabric OS command support 71 Considerations for the Brocade 6505 and 6510 72 vii
Access Gateway Administrator's Guide 7.1.0
Page 8
... target attachment 74 Considerations for direct target attachment 74 Target aggregation 75 Access Gateway cascading 76 Access Gateway cascading considerations 76 Fabric and Edge switch configuration 77 Verifying the switch mode 77 Enabling NPIV on M-EOS switches 78 Connectivity to Cisco fabrics 78 Enabling NPIV on a Cisco switch 78 Rejoining Fabric...
... target attachment 74 Considerations for direct target attachment 74 Target aggregation 75 Access Gateway cascading 76 Access Gateway cascading considerations 76 Fabric and Edge switch configuration 77 Verifying the switch mode 77 Enabling NPIV on M-EOS switches 78 Connectivity to Cisco fabrics 78 Enabling NPIV on a Cisco switch 78 Rejoining Fabric...
Access Gateway Administrator's Guide 7.1.0
Page 9
... Figure 13 Figure 14 Figure 15 Figure 16 Switch function in Native mode 2 Switch function in Access Gateway mode 3 Port usage comparison 10 Diagnostic port configurations 10 Port mapping example 16 Example of device mapping to N_Port groups 23 Example device mapping to an N_Port 24 Example of adding an external...
... Figure 13 Figure 14 Figure 15 Figure 16 Switch function in Native mode 2 Switch function in Access Gateway mode 3 Port usage comparison 10 Diagnostic port configurations 10 Port mapping example 16 Example of device mapping to N_Port groups 23 Example device mapping to an N_Port 24 Example of adding an external...
Access Gateway Administrator's Guide 7.1.0
Page 11
... OS components supported on Access Gateway 3 Behavior of sending AG switch and receiving fabric switch with different policies configured 8 Behavior of sending device (HBA) and receiving AG switch with different policies configured 8 Port configurations 11 Port state description 14 Description of port mapping 16 Access Gateway default port mapping 17 Policy enforcement matrix...
... OS components supported on Access Gateway 3 Behavior of sending AG switch and receiving fabric switch with different policies configured 8 Behavior of sending device (HBA) and receiving AG switch with different policies configured 8 Port configurations 11 Port state description 14 Description of port mapping 16 Access Gateway default port mapping 17 Policy enforcement matrix...
Access Gateway Administrator's Guide 7.1.0
Page 13
...contains the following components: • Chapter 1, "Access Gateway Basic Concepts" describes the Brocade Access Gateway and provides an overview of its key features. • Chapter 2, "Configuring Ports in Access Gateway Mode" describes how to configure ports in Access Gateway mode. • Chapter 3, "Managing Policies and Features in Access... reader xvi •Key terms for Access Gateway xvii •Additional information xviii •Getting technical help SAN administrators configure and manage Brocade Access Gateway (AG). Access Gateway Administrator's Guide xiii 53-1002743-01
...contains the following components: • Chapter 1, "Access Gateway Basic Concepts" describes the Brocade Access Gateway and provides an overview of its key features. • Chapter 2, "Configuring Ports in Access Gateway Mode" describes how to configure ports in Access Gateway mode. • Chapter 3, "Managing Policies and Features in Access... reader xvi •Key terms for Access Gateway xvii •Additional information xviii •Getting technical help SAN administrators configure and manage Brocade Access Gateway (AG). Access Gateway Administrator's Guide xiii 53-1002743-01
Access Gateway Administrator's Guide 7.1.0
Page 14
...Brocade 300 • Brocade 5100 • Brocade M5424 • Brocade 5430 • Brocade 5450 • Brocade 5460 • Brocade 5470 • Brocade 5480 • Brocade 6505 • Brocade 6510 • Brocade 8000 • NC-4380 • Brocade VA-40FC What's new in this document The following information has been added since this document. all possible configurations.... Described support for Access Gateway. • Chapter 1 - Fabric OS v7.1.0 supports the following Brocade hardware platforms for Fabric OS v7.1.0, documenting all M-EOS switches must be running M-EOSc 9.1 or ...
...Brocade 300 • Brocade 5100 • Brocade M5424 • Brocade 5430 • Brocade 5450 • Brocade 5460 • Brocade 5470 • Brocade 5480 • Brocade 6505 • Brocade 6510 • Brocade 8000 • NC-4380 • Brocade VA-40FC What's new in this document The following information has been added since this document. all possible configurations.... Described support for Access Gateway. • Chapter 1 - Fabric OS v7.1.0 supports the following Brocade hardware platforms for Fabric OS v7.1.0, documenting all M-EOS switches must be running M-EOSc 9.1 or ...
Access Gateway Administrator's Guide 7.1.0
Page 17
...physical N_Port. N_Port A node port. This is a Fibre Channel facility allowing multiple N_Port IDs to form a fabric. D_Port A port configured as Brocade Access Gateway, to run diagnostic tests between devices or F_Ports to a host or a target. A switch port that connects host, storage...host or storage port in this manual to -point connection. This allows multiple Fibre Channel initiators to the Edge switch. On Brocade Access Gateway, the N_Port connects to occupy a single physical port, easing hardware requirements in storage area network design, especially ...
...physical N_Port. N_Port A node port. This is a Fibre Channel facility allowing multiple N_Port IDs to form a fabric. D_Port A port configured as Brocade Access Gateway, to run diagnostic tests between devices or F_Ports to a host or a target. A switch port that connects host, storage...host or storage port in this manual to -point connection. This allows multiple Fibre Channel initiators to the Edge switch. On Brocade Access Gateway, the N_Port connects to occupy a single physical port, easing hardware requirements in storage area network design, especially ...
Access Gateway Administrator's Guide 7.1.0
Page 21
...can connect to a single fabric. You do this by reducing the number of domain IDs and ports. This simplifies configuration and management in a large fabric by configuring F_Ports to connect to the fabric as many physical ports, consumes fabric resources, and can use the command line ...interface (CLI), Web Tools, or Brocade Network Advisor (BNA) to the Fabric OS Command Reference Manual, the Web Tools Administrator's Guide, or the Brocade Network ...
...can connect to a single fabric. You do this by reducing the number of domain IDs and ports. This simplifies configuration and management in a large fabric by configuring F_Ports to connect to the fabric as many physical ports, consumes fabric resources, and can use the command line ...interface (CLI), Web Tools, or Brocade Network Advisor (BNA) to the Fabric OS Command Reference Manual, the Web Tools Administrator's Guide, or the Brocade Network ...
Access Gateway Administrator's Guide 7.1.0
Page 24
Encryption Configuration No and Management Environmental Monitor Yes Error Event Management Yes Extended Fabrics No Fabric Assigned PWWN Yes (FA-PWWN) Fabric Device Management Yes* Interface (FDMI) ...
Encryption Configuration No and Management Environmental Monitor Yes Error Event Management Yes Extended Fabrics No Fabric Assigned PWWN Yes (FA-PWWN) Fabric Device Management Yes* Interface (FDMI) ...
Access Gateway Administrator's Guide 7.1.0
Page 25
...as an AG, RBAC features in Fabric OS are available, but there are some limitations. Fabric OS features in following configurations: • Between AG switch F_Port and Brocade HBA port using Adapter v3.2 or greater firmware or any device supporting credit recovery, This feature only works at the maximum... supported speed of the HBA port (8 Gbps or 16 Gbps). • Between AG switch N_Port and Brocade fabric switch or cascaded AG switch F_Port. When a switch is supported on 8 Gbps and 16 Gbps platforms in Access Gateway mode 1 TABLE 1 ...
...as an AG, RBAC features in Fabric OS are available, but there are some limitations. Fabric OS features in following configurations: • Between AG switch F_Port and Brocade HBA port using Adapter v3.2 or greater firmware or any device supporting credit recovery, This feature only works at the maximum... supported speed of the HBA port (8 Gbps or 16 Gbps). • Between AG switch N_Port and Brocade fabric switch or cascaded AG switch F_Port. When a switch is supported on 8 Gbps and 16 Gbps platforms in Access Gateway mode 1 TABLE 1 ...
Access Gateway Administrator's Guide 7.1.0
Page 26
...R_RDY or VC_RDY mode. The N-port should enable authentication when the connected device is a Fabric OS feature supported in the following configurations for more information on the AG switch before connecting to a switch running version 3.2 or greater firmware. • Between the ...and trunking Fabric OS features. The F-port also should enable authentication when authentication is supported in the following configurations: • Between the AG switch F_Port and a Brocade 16 Gbps HBA port running Fabric OS less than 7.1. Device authentication support Devices use DH-CHAP or ...
...R_RDY or VC_RDY mode. The N-port should enable authentication when the connected device is a Fabric OS feature supported in the following configurations for more information on the AG switch before connecting to a switch running version 3.2 or greater firmware. • Between the ...and trunking Fabric OS features. The F-port also should enable authentication when authentication is supported in the following configurations: • Between the AG switch F_Port and a Brocade 16 Gbps HBA port running Fabric OS less than 7.1. Device authentication support Devices use DH-CHAP or ...
Access Gateway Administrator's Guide 7.1.0
Page 27
... initiates on all ports. The AG does not initiate authentication when connected to the section on authentication policy for fabric elements in the Configuring Security Policies chapter of the Fabric OS Administrator's Guide. The AG will disable the port if any authentication negotiation request from a policy...device policy. • Passive - Supported policy modes The following switch and device policy modes are supported on the AG switch. You must configure DH-CHAP shared secrets or install FCAP certificates on the AG switch. Table 2 on mode. Passive mode is set to an AG ...
... initiates on all ports. The AG does not initiate authentication when connected to the section on authentication policy for fabric elements in the Configuring Security Policies chapter of the Fabric OS Administrator's Guide. The AG will disable the port if any authentication negotiation request from a policy...device policy. • Passive - Supported policy modes The following switch and device policy modes are supported on the AG switch. You must configure DH-CHAP shared secrets or install FCAP certificates on the AG switch. Table 2 on mode. Passive mode is set to an AG ...
Access Gateway Administrator's Guide 7.1.0
Page 28
...receiving AG switch. 1 Fabric OS features in Access Gateway mode TABLE 2 Behavior of sending device (HBA) and receiving AG switch with different policies configured AG switch with device policy mode ON AG switch with device policy AG switch with switch policy mode on cascaded AG switch... configurations. 8 Access Gateway Administrator's Guide 53-1002743-01 reject AG switch with switch policy off DH-CHAP/FCAP: Success - N_Port without authentication No ...
...receiving AG switch. 1 Fabric OS features in Access Gateway mode TABLE 2 Behavior of sending device (HBA) and receiving AG switch with different policies configured AG switch with device policy mode ON AG switch with device policy AG switch with switch policy mode on cascaded AG switch... configurations. 8 Access Gateway Administrator's Guide 53-1002743-01 reject AG switch with switch policy off DH-CHAP/FCAP: Success - N_Port without authentication No ...
Access Gateway Administrator's Guide 7.1.0
Page 29
... standard mode. Refer to "Persisting port online state" on page 31 for more physical ports than v7.1.0. Access Gateway Administrator's Guide 9 53-1002743-01 Port configured in diagnostic mode so that you enable on a switch using node ports (N_Ports). For an embedded switch, execute this command through the chassis management console...
... standard mode. Refer to "Persisting port online state" on page 31 for more physical ports than v7.1.0. Access Gateway Administrator's Guide 9 53-1002743-01 Port configured in diagnostic mode so that you enable on a switch using node ports (N_Ports). For an embedded switch, execute this command through the chassis management console...
Access Gateway Administrator's Guide 7.1.0
Page 30
...1002743-01 Results can convert a Fibre Channel port into a D_Port on AG switch and a connected fabric switch or another AG switch (cascaded configuration) to a remote device, or run data traffic. Switch in AG mode D-Port Diagnostic Ports Switch in AG mode D-Port D-Port Edge ...shows a comparison of the link as D_Ports, diagnostic tests automatically initiate on page 10 illustrates the supported D_Port configurations. When you configure the ports on each end of port configurations between the ports. Figure 4 on the link when the D_Ports go online. 1 Access Gateway port types ...
...1002743-01 Results can convert a Fibre Channel port into a D_Port on AG switch and a connected fabric switch or another AG switch (cascaded configuration) to a remote device, or run data traffic. Switch in AG mode D-Port Diagnostic Ports Switch in AG mode D-Port D-Port Edge ...shows a comparison of the link as D_Ports, diagnostic tests automatically initiate on page 10 illustrates the supported D_Port configurations. When you configure the ports on each end of port configurations between the ports. Figure 4 on the link when the D_Ports go online. 1 Access Gateway port types ...
Access Gateway Administrator's Guide 7.1.0
Page 31
The switch is not supported.1 Yes Connects the switch to other switches to form a fabric. Access Gateway hardware considerations 1 TABLE 4 Port type Port configurations Available on Fabric switch? Yes Allows diagnostic testing across link Yes Allows diagnostic testing across link to to a fabric NA N_Ports are not supported. NA ...
The switch is not supported.1 Yes Connects the switch to other switches to form a fabric. Access Gateway hardware considerations 1 TABLE 4 Port type Port configurations Available on Fabric switch? Yes Allows diagnostic testing across link Yes Allows diagnostic testing across link to to a fabric NA N_Ports are not supported. NA ...
Access Gateway Administrator's Guide 7.1.0
Page 33
...32 Enabling and disabling Access Gateway mode Use the following steps to clear Zoning/Admin Domain configuration". 4. Before enabling or disabling a switch to AG mode, save the current configuration file using the configUpload command in AG mode using an account assigned to the Fabric ...ports are active. Enter the ag --modeenable command. For more information on page 17. b. You must disable the switch before making configuration changes. 6. Access Gateway Administrator's Guide 13 53-1002743-01 Verify that no zoning or Admin Domain (AD) transaction buffers are taken...
...32 Enabling and disabling Access Gateway mode Use the following steps to clear Zoning/Admin Domain configuration". 4. Before enabling or disabling a switch to AG mode, save the current configuration file using the configUpload command in AG mode using an account assigned to the Fabric ...ports are active. Enter the ag --modeenable command. For more information on page 17. b. You must disable the switch before making configuration changes. 6. Access Gateway Administrator's Guide 13 53-1002743-01 Verify that no zoning or Admin Domain (AD) transaction buffers are taken...
Access Gateway Administrator's Guide 7.1.0
Page 34
... N_Ports, even if those N_Ports are automatically removed. When you disable AG mode, the switch automatically reboots and comes back online using the fabric switch configuration; switch:admin> ag --modeshow Access Gateway mode is NOT enabled Port state description Table 5 describes the possible port states. 2 Enabling and disabling Access Gateway mode...
... N_Ports, even if those N_Ports are automatically removed. When you disable AG mode, the switch automatically reboots and comes back online using the fabric switch configuration; switch:admin> ag --modeshow Access Gateway mode is NOT enabled Port state description Table 5 describes the possible port states. 2 Enabling and disabling Access Gateway mode...