Access Gateway Administrator's Guide 7.1.0
Page 5
... terms for Access Gateway xvii Additional information xviii Brocade resources xviii Other industry resources xviii Optional Brocade features xviii Getting technical help xviii Document feedback xix Chapter 1 Access Gateway Basic Concepts Brocade Access Gateway overview 1 Comparing Native Fabric and ... Comparison of Access Gateway ports to standard switch ports 9 Access Gateway hardware considerations 11 Chapter 2 Configuring Ports in Access Gateway Mode Enabling and disabling Access Gateway mode 13 Port state description 14 Access Gateway Administrator's Guide v 53-1002743-01
... terms for Access Gateway xvii Additional information xviii Brocade resources xviii Other industry resources xviii Optional Brocade features xviii Getting technical help xviii Document feedback xix Chapter 1 Access Gateway Basic Concepts Brocade Access Gateway overview 1 Comparing Native Fabric and ... Comparison of Access Gateway ports to standard switch ports 9 Access Gateway hardware considerations 11 Chapter 2 Configuring Ports in Access Gateway Mode Enabling and disabling Access Gateway mode 13 Port state description 14 Access Gateway Administrator's Guide v 53-1002743-01
Access Gateway Administrator's Guide 7.1.0
Page 6
...mapping 16 F_Port Static Mapping 20 Device mapping 21 Considerations for Access Gateway mapping 28 N_Port configurations 30 Displaying N_Port configurations 31 Unlocking N_Ports 31 Persisting port online state 31 D_Port support 32 Limitations and considerations ...37 ADS policy considerations 39 Upgrade and downgrade considerations for the ADS policy. . . 39 Automatic Port Configuration policy 39 How the APC policy works 39 Enabling and disabling the APC policy 40 APC policy considerations... Balancing policy considerations 48 vi Access Gateway Administrator's Guide 53-1002743-01
...mapping 16 F_Port Static Mapping 20 Device mapping 21 Considerations for Access Gateway mapping 28 N_Port configurations 30 Displaying N_Port configurations 31 Unlocking N_Ports 31 Persisting port online state 31 D_Port support 32 Limitations and considerations ...37 ADS policy considerations 39 Upgrade and downgrade considerations for the ADS policy. . . 39 Automatic Port Configuration policy 39 How the APC policy works 39 Enabling and disabling the APC policy 40 APC policy considerations... Balancing policy considerations 48 vi Access Gateway Administrator's Guide 53-1002743-01
Access Gateway Administrator's Guide 7.1.0
Page 7
Access Gateway Administrator's Guide 53-1002743-01 Persistent ALPA policy 48 Enabling the... the Failover policy for a port group . . . 54 Upgrade and downgrade considerations for the Failover policy 55 Failback policy 55 Failback policy configurations in Access Gateway 55 Enabling and disabling the Failback policy on an N_Port . . . . 56 Enabling and disabling the Failback policy for ... 69 Limitations for using APM 70 Considerations for the Brocade 8000 70 Port mapping 70 Policy and feature support 70 Fabric OS command support 71 Considerations for the Brocade 6505 and 6510 72 vii
Access Gateway Administrator's Guide 53-1002743-01 Persistent ALPA policy 48 Enabling the... the Failover policy for a port group . . . 54 Upgrade and downgrade considerations for the Failover policy 55 Failback policy 55 Failback policy configurations in Access Gateway 55 Enabling and disabling the Failback policy on an N_Port . . . . 56 Enabling and disabling the Failback policy for ... 69 Limitations for using APM 70 Considerations for the Brocade 8000 70 Port mapping 70 Policy and feature support 70 Fabric OS command support 71 Considerations for the Brocade 6505 and 6510 72 vii
Access Gateway Administrator's Guide 7.1.0
Page 8
... target attachment 74 Considerations for direct target attachment 74 Target aggregation 75 Access Gateway cascading 76 Access Gateway cascading considerations 76 Fabric and Edge switch configuration 77 Verifying the switch mode 77 Enabling NPIV on M-EOS switches 78 Connectivity to Cisco fabrics 78 Enabling NPIV on a Cisco switch 78 Rejoining Fabric...
... target attachment 74 Considerations for direct target attachment 74 Target aggregation 75 Access Gateway cascading 76 Access Gateway cascading considerations 76 Fabric and Edge switch configuration 77 Verifying the switch mode 77 Enabling NPIV on M-EOS switches 78 Connectivity to Cisco fabrics 78 Enabling NPIV on a Cisco switch 78 Rejoining Fabric...
Access Gateway Administrator's Guide 7.1.0
Page 9
... Figure 13 Figure 14 Figure 15 Figure 16 Switch function in Native mode 2 Switch function in Access Gateway mode 3 Port usage comparison 10 Diagnostic port configurations 10 Port mapping example 16 Example of device mapping to N_Port groups 23 Example device mapping to an N_Port 24 Example of adding an external... Starting point for QoS 66 Direct target attachment to switch operating in AG mode 74 Target aggregation 75 Access Gateway cascading 76 Access Gateway Administrator's Guide ix 53-1002743-01
... Figure 13 Figure 14 Figure 15 Figure 16 Switch function in Native mode 2 Switch function in Access Gateway mode 3 Port usage comparison 10 Diagnostic port configurations 10 Port mapping example 16 Example of device mapping to N_Port groups 23 Example device mapping to an N_Port 24 Example of adding an external... Starting point for QoS 66 Direct target attachment to switch operating in AG mode 74 Target aggregation 75 Access Gateway cascading 76 Access Gateway Administrator's Guide ix 53-1002743-01
Access Gateway Administrator's Guide 7.1.0
Page 11
... switch and receiving fabric switch with different policies configured 8 Behavior of sending device (HBA) and receiving AG switch with different policies configured 8 Port configurations 11 Port state description 14 Description of port ...mapping 16 Access Gateway default port mapping 17 Policy enforcement matrix 36 Address identifier 60 Access Gateway trunking considerations for the Edge switch 62 PWWN format for F_Port and N_Port trunk ports 65 Troubleshooting 81 Access Gateway Administrator's Guide...
... switch and receiving fabric switch with different policies configured 8 Behavior of sending device (HBA) and receiving AG switch with different policies configured 8 Port configurations 11 Port state description 14 Description of port ...mapping 16 Access Gateway default port mapping 17 Policy enforcement matrix 36 Address identifier 60 Access Gateway trunking considerations for the Edge switch 62 PWWN format for F_Port and N_Port trunk ports 65 Troubleshooting 81 Access Gateway Administrator's Guide...
Access Gateway Administrator's Guide 7.1.0
Page 13
...components: • Chapter 1, "Access Gateway Basic Concepts" describes the Brocade Access Gateway and provides an overview of its key features. • Chapter 2, "Configuring Ports in Access Gateway Mode" describes how to configure ports in Access Gateway mode. • Chapter 3, "Managing Policies ... technical help xviii •Document feedback xix How this document is a procedural guide to help SAN administrators configure and manage Brocade Access Gateway (AG). Access Gateway Administrator's Guide xiii 53-1002743-01 About This Document •How this document is organized This...
...components: • Chapter 1, "Access Gateway Basic Concepts" describes the Brocade Access Gateway and provides an overview of its key features. • Chapter 2, "Configuring Ports in Access Gateway Mode" describes how to configure ports in Access Gateway mode. • Chapter 3, "Managing Policies ... technical help xviii •Document feedback xix How this document is a procedural guide to help SAN administrators configure and manage Brocade Access Gateway (AG). Access Gateway Administrator's Guide xiii 53-1002743-01 About This Document •How this document is organized This...
Access Gateway Administrator's Guide 7.1.0
Page 14
... running 3.0 (1) and 3.1 (1) or later. xiv Access Gateway Administrator's Guide 53-1002743-01 Described support for Access Gateway: • Brocade 300 • Brocade 5100 • Brocade M5424 • Brocade 5430 • Brocade 5450 • Brocade 5460 • Brocade 5470 • Brocade 5480 • Brocade 6505 • Brocade 6510 • Brocade 8000 • NC-4380 • Brocade VA-40FC What's new in Access Gateway mode" on...
... running 3.0 (1) and 3.1 (1) or later. xiv Access Gateway Administrator's Guide 53-1002743-01 Described support for Access Gateway: • Brocade 300 • Brocade 5100 • Brocade M5424 • Brocade 5430 • Brocade 5450 • Brocade 5460 • Brocade 5470 • Brocade 5480 • Brocade 6505 • Brocade 6510 • Brocade 8000 • NC-4380 • Brocade VA-40FC What's new in Access Gateway mode" on...
Access Gateway Administrator's Guide 7.1.0
Page 17
...Device Any host or target device with a distinct WWN. D_Port A port configured as Brocade Access Gateway, to describe Access Gateway mode and its components. E_Port An interswitch link (ISL) port. On Brocade Access Gateway, the N_Port connects to occupy a single physical port, easing ...hardware requirements in this manual to the fabric. This allows multiple Fibre Channel initiators to the Edge switch. Access Gateway Administrator's Guide xvii 53-1002743-01 Devices...
...Device Any host or target device with a distinct WWN. D_Port A port configured as Brocade Access Gateway, to describe Access Gateway mode and its components. E_Port An interswitch link (ISL) port. On Brocade Access Gateway, the N_Port connects to occupy a single physical port, easing ...hardware requirements in this manual to the fabric. This allows multiple Fibre Channel initiators to the Edge switch. Access Gateway Administrator's Guide xvii 53-1002743-01 Devices...
Access Gateway Administrator's Guide 7.1.0
Page 21
...reducing the number of switch domains. After you can use the command line interface (CLI), Web Tools, or Brocade Network Advisor (BNA) to enable and disable AG mode and configure AG features on a switch. Therefore, you set a Fabric OS switch to AG mode, the F_Ports connect ... of the fabric; Refer to the Fabric OS Command Reference Manual, the Web Tools Administrator's Guide, or the Brocade Network Advisor User Guide for more information about AG support in Native mode is outside of a configuration that you can connect an AG switch to a Fabric OS, M-EOS, or Cisco-based fabric...
...reducing the number of switch domains. After you can use the command line interface (CLI), Web Tools, or Brocade Network Advisor (BNA) to enable and disable AG mode and configure AG features on a switch. Therefore, you set a Fabric OS switch to AG mode, the F_Ports connect ... of the fabric; Refer to the Fabric OS Command Reference Manual, the Web Tools Administrator's Guide, or the Brocade Network Advisor User Guide for more information about AG support in Native mode is outside of a configuration that you can connect an AG switch to a Fabric OS, M-EOS, or Cisco-based fabric...
Access Gateway Administrator's Guide 7.1.0
Page 24
... correction support" on page 32. DHCP Yes Diagnostic Port (D_Port) Yes Refer to "D_Port support" on page 6. Encryption Configuration No and Management Environmental Monitor Yes Error Event Management Yes Extended Fabrics No Fabric Assigned PWWN Yes (FA-PWWN) Fabric Device ... (LDAP) Log Tracking Yes Management Server NA Manufacturing Diagnostics Yes N_Port ID Virtualization Yes (NPIV) 4 Access Gateway Administrator's Guide 53-1002743-01 Config Download/Upload Yes Device Authentication Yes Refer to "Device authentication support" on page 5. 1 Fabric OS...
... correction support" on page 32. DHCP Yes Diagnostic Port (D_Port) Yes Refer to "D_Port support" on page 6. Encryption Configuration No and Management Environmental Monitor Yes Error Event Management Yes Extended Fabrics No Fabric Assigned PWWN Yes (FA-PWWN) Fabric Device ... (LDAP) Log Tracking Yes Management Server NA Manufacturing Diagnostics Yes N_Port ID Virtualization Yes (NPIV) 4 Access Gateway Administrator's Guide 53-1002743-01 Config Download/Upload Yes Device Authentication Yes Refer to "Device authentication support" on page 5. 1 Fabric OS...
Access Gateway Administrator's Guide 7.1.0
Page 25
... Gateway Administrator's Guide 5 53-1002743-01 For more information on the limitations, refer to "Virtual Fabrics support" on page 6. In embedded switches, time should be updated by the server management utility. When a switch is supported on 8 Gbps and 16 Gbps platforms in following configurations: • Between AG switch F_Port and Brocade HBA port...
... Gateway Administrator's Guide 5 53-1002743-01 For more information on the limitations, refer to "Virtual Fabrics support" on page 6. In embedded switches, time should be updated by the server management utility. When a switch is supported on 8 Gbps and 16 Gbps platforms in following configurations: • Between AG switch F_Port and Brocade HBA port...
Access Gateway Administrator's Guide 7.1.0
Page 26
...Reference for Virtual Fabrics or enable Virtual Fabrics on an AG switch, you disable this feature either in the following configurations: • Between the AG switch F_Port and a Brocade 16 Gbps HBA port running Fabric OS less than 7.1. In R_RDY mode, this feature is used . Forward ...PWWN), FEC, QoS, and trunking Fabric OS features. Following are used since the HBA only supports DH-CHAP. 6 Access Gateway Administrator's Guide 53-1002743-01 This can connect ports on the AG switch and fabric switch, FCAP has precedence over DHCAP. Device authentication support Devices use...
...Reference for Virtual Fabrics or enable Virtual Fabrics on an AG switch, you disable this feature either in the following configurations: • Between the AG switch F_Port and a Brocade 16 Gbps HBA port running Fabric OS less than 7.1. In R_RDY mode, this feature is used . Forward ...PWWN), FEC, QoS, and trunking Fabric OS features. Following are used since the HBA only supports DH-CHAP. 6 Access Gateway Administrator's Guide 53-1002743-01 This can connect ports on the AG switch and fabric switch, FCAP has precedence over DHCAP. Device authentication support Devices use...
Access Gateway Administrator's Guide 7.1.0
Page 27
...on authentication, refer to the section on authentication policy for devices connected to use for fabric elements in the Configuring Security Policies chapter of the Fabric OS Administrator's Guide. Off is the safest mode to an AG switch if the devices do not support authentication. Strict authentication...when connected to off , and passive modes are supported by Access Gateway: • On - Table 2 on all ports. You must configure DH-CHAP shared secrets or install FCAP certificates on the AG and connected fabric switch before switching from the connected fabric switch or HBA. ...
...on authentication, refer to the section on authentication policy for devices connected to use for fabric elements in the Configuring Security Policies chapter of the Fabric OS Administrator's Guide. Off is the safest mode to an AG switch if the devices do not support authentication. Strict authentication...when connected to off , and passive modes are supported by Access Gateway: • On - Table 2 on all ports. You must configure DH-CHAP shared secrets or install FCAP certificates on the AG and connected fabric switch before switching from the connected fabric switch or HBA. ...
Access Gateway Administrator's Guide 7.1.0
Page 28
...mode ON policy mode PASSIVE Fabric switch with device policy mode OFF AG switch with switch policy mode on cascaded AG switch configurations. 8 Access Gateway Administrator's Guide 53-1002743-01 Authorization negotiation - policy • authutil --show • authutil --set • secauthsecret --set •...policy is supported in Access Gateway mode TABLE 2 Behavior of sending device (HBA) and receiving AG switch with different policies configured AG switch with device policy mode ON AG switch with device policy AG switch with switch policy off DH-CHAP/FCAP: Success...
...mode ON policy mode PASSIVE Fabric switch with device policy mode OFF AG switch with switch policy mode on cascaded AG switch configurations. 8 Access Gateway Administrator's Guide 53-1002743-01 Authorization negotiation - policy • authutil --show • authutil --set • secauthsecret --set •...policy is supported in Access Gateway mode TABLE 2 Behavior of sending device (HBA) and receiving AG switch with different policies configured AG switch with device policy mode ON AG switch with device policy AG switch with switch policy off DH-CHAP/FCAP: Success...
Access Gateway Administrator's Guide 7.1.0
Page 29
...Fabric OS earlier than v7.1.0. A fabric switch requires more information. After a switch is enabled on another switch across a link. Port configured in fabric management and zoning distribution. NOTE Initiate the portcfgpersisentenable command on a switch using the ag command. Comparison of hosts. A ... E_Ports. It presents an F_Port to the host and an N_Port to the Enterprise fabric using node ports (N_Ports). Access Gateway Administrator's Guide 9 53-1002743-01 Node port that you enable on all ports in AG mode. • N_Port - Figure 3 shows a comparison...
...Fabric OS earlier than v7.1.0. A fabric switch requires more information. After a switch is enabled on another switch across a link. Port configured in fabric management and zoning distribution. NOTE Initiate the portcfgpersisentenable command on a switch using the ag command. Comparison of hosts. A ... E_Ports. It presents an F_Port to the host and an N_Port to the Enterprise fabric using node ports (N_Ports). Access Gateway Administrator's Guide 9 53-1002743-01 Node port that you enable on all ports in AG mode. • N_Port - Figure 3 shows a comparison...
Access Gateway Administrator's Guide 7.1.0
Page 30
...online. Results can convert a Fibre Channel port into a D_Port on AG switch and a connected fabric switch or another AG switch (cascaded configuration) to a remote device, or run data traffic. Switch in AG mode D-Port Diagnostic Ports Switch in fabric operations, login to test ...between AG and a standard fabric switch. 10 Access Gateway Administrator's Guide 53-1002743-01 Once in D_Port mode, the port does not participate in AG mode D-Port D-Port Edge Switch D-Port Fabric FIGURE 4 Diagnostic port configurations Table 4 shows a comparison of the link as D_Ports, diagnostic...
...online. Results can convert a Fibre Channel port into a D_Port on AG switch and a connected fabric switch or another AG switch (cascaded configuration) to a remote device, or run data traffic. Switch in AG mode D-Port Diagnostic Ports Switch in fabric operations, login to test ...between AG and a standard fabric switch. 10 Access Gateway Administrator's Guide 53-1002743-01 Once in D_Port mode, the port does not participate in AG mode D-Port D-Port Edge Switch D-Port Fabric FIGURE 4 Diagnostic port configurations Table 4 shows a comparison of the link as D_Ports, diagnostic...
Access Gateway Administrator's Guide 7.1.0
Page 31
Available on Access Gateway? Access Gateway Administrator's Guide 11 53-1002743-01 Yes Connects devices, such as a fabric switch. connected AG switch. 1. The switch is logically transparent to the fabric, therefore it does ... supported. Yes Allows diagnostic testing across link Yes Allows diagnostic testing across link to to Access Gateway. Access Gateway hardware considerations 1 TABLE 4 Port type Port configurations Available on Fabric switch? NA ISL is supported on page xiv. • Loop devices are not supported. • Direct connections to SAN target devices are...
Available on Access Gateway? Access Gateway Administrator's Guide 11 53-1002743-01 Yes Connects devices, such as a fabric switch. connected AG switch. 1. The switch is logically transparent to the fabric, therefore it does ... supported. Yes Allows diagnostic testing across link Yes Allows diagnostic testing across link to to Access Gateway. Access Gateway hardware considerations 1 TABLE 4 Port type Port configurations Available on Fabric switch? NA ISL is supported on page xiv. • Loop devices are not supported. • Direct connections to SAN target devices are...
Access Gateway Administrator's Guide 7.1.0
Page 33
... set to clear Zoning/Admin Domain configuration". 4. a. Issue the switchShow command to enable and disable Access Gateway mode. Enter the ag --modeenable command. Access Gateway Administrator's Guide 13 53-1002743-01 After you might need this configuration again. 3. Connect to the switch... and log in using an account assigned to AG mode, save the current configuration file using a factory default port mapping...
... set to clear Zoning/Admin Domain configuration". 4. a. Issue the switchShow command to enable and disable Access Gateway mode. Enter the ag --modeenable command. Access Gateway Administrator's Guide 13 53-1002743-01 After you might need this configuration again. 3. Connect to the switch... and log in using an account assigned to AG mode, save the current configuration file using a factory default port mapping...
Access Gateway Administrator's Guide 7.1.0
Page 34
When you disable AG mode, the switch automatically reboots and comes back online using the fabric switch configuration; Enter the switchShow command to display the status and port state of all the mapped ports. For a description of output. switch:admin> ag ... Enter the ag --mapshow command to verify that AG mode is signaling a laser fault Port marked faulty Port failed diagnostics 14 Access Gateway Administrator's Guide 53-1002743-01 The ag --mapshow command shows all enabled N_Ports, even if those N_Ports are automatically removed. switch:admin> ag --modedisable 12. the...
When you disable AG mode, the switch automatically reboots and comes back online using the fabric switch configuration; Enter the switchShow command to display the status and port state of all the mapped ports. For a description of output. switch:admin> ag ... Enter the ag --mapshow command to verify that AG mode is signaling a laser fault Port marked faulty Port failed diagnostics 14 Access Gateway Administrator's Guide 53-1002743-01 The ag --mapshow command shows all enabled N_Ports, even if those N_Ports are automatically removed. switch:admin> ag --modedisable 12. the...