Access Gateway Administrator's Guide 7.1.0
Page 26
...switch before connecting to Virtual Fabrics. In R_RDY mode, this feature either in R_RDY or VC_RDY mode. By default, Brocade switches use authentication as a mechanism to Brocade fabric switch F_Port. Enable and disable CR using the portcfgcreditrecovery command. Following are used since the HBA only ... the buffer credit recovery is supported with authentication enabled. The N-port should enable authentication when the connected device is sending login request with fabric assigned PWWN (FA-PWWN), FEC, QoS, and trunking Fabric OS features. This can connect ports on...
...switch before connecting to Virtual Fabrics. In R_RDY mode, this feature either in R_RDY or VC_RDY mode. By default, Brocade switches use authentication as a mechanism to Brocade fabric switch F_Port. Enable and disable CR using the portcfgcreditrecovery command. Following are used since the HBA only ... the buffer credit recovery is supported with authentication enabled. The N-port should enable authentication when the connected device is sending login request with fabric assigned PWWN (FA-PWWN), FEC, QoS, and trunking Fabric OS features. This can connect ports on...
Access Gateway Administrator's Guide 7.1.0
Page 56
... It is not supported when using the ag --show command only displays F_Ports on page 60. Device Load Balancing and Automatic Login Balancing cannot be established in the main fabric, especially if the Failover and Failback policies are directly connected to a set of...NOTE The ag --show command. Advanced Device Security policy Advanced Device Security (ADS) is rejected and the system logs a RASLOG message. By default, all devices have access to a particular set of authorized devices. 3 Advanced Device Security policy Access Gateway policy enforcement matrix Table 8 shows which...
... It is not supported when using the ag --show command only displays F_Ports on page 60. Device Load Balancing and Automatic Login Balancing cannot be established in the main fabric, especially if the Failover and Failback policies are directly connected to a set of...NOTE The ag --show command. Advanced Device Security policy Advanced Device Security (ADS) is rejected and the system logs a RASLOG message. By default, all devices have access to a particular set of authorized devices. 3 Advanced Device Security policy Access Gateway policy enforcement matrix Table 8 shows which...
Access Gateway Administrator's Guide 7.1.0
Page 57
... Allow lists You can be enabled for more than one F_Port. ag --adsset "F_Port [;F_Port2;...]" "WWN [;WWN2;...]" Lists must be separated by default, every port is disabled. NOTE Use an asterisk enclosed in quotation marks. Enter the ag --adsset command with the appropriate options to set the ... the following example, ports 1, 10, and, 13 are allowed to log in on a per -port maximum login count. Advanced Device Security policy 3 Enabling and disabling the ADS policy By default, the ADS policy is configured to allow all devices to log in case you need this command to succeed....
... Allow lists You can be enabled for more than one F_Port. ag --adsset "F_Port [;F_Port2;...]" "WWN [;WWN2;...]" Lists must be separated by default, every port is disabled. NOTE Use an asterisk enclosed in quotation marks. Enter the ag --adsset command with the appropriate options to set the ... the following example, ports 1, 10, and, 13 are allowed to log in on a per -port maximum login count. Advanced Device Security policy 3 Enabling and disabling the ADS policy By default, the ADS policy is configured to allow all devices to log in case you need this command to succeed....
Access Gateway Administrator's Guide 7.1.0
Page 63
... command. However, you create port groups using an account assigned to -F_Port ratio. Alternately, you delete an N_Port from the port group. Automatic Login Balancing mode If Automatic Login Balancing mode is renamed to disable the Port Grouping policy. Consider the following steps. 1. To disable this policy, use the following notes about... are enabled for Access Gateway. Port Grouping policy 3 Renaming a port group 1. Enter the ag --policydisable pg command to MyEvenFabric. When you can minimize disruption by default for Automatic Login Balancing mode.
... command. However, you create port groups using an account assigned to -F_Port ratio. Alternately, you delete an N_Port from the port group. Automatic Login Balancing mode If Automatic Login Balancing mode is renamed to disable the Port Grouping policy. Consider the following steps. 1. To disable this policy, use the following notes about... are enabled for Access Gateway. Port Grouping policy 3 Renaming a port group 1. Enter the ag --policydisable pg command to MyEvenFabric. When you can minimize disruption by default for Automatic Login Balancing mode.
Access Gateway Administrator's Guide 7.1.0
Page 64
...enabled, Managed Fabric Name Monitoring (MFNM) mode queries the fabric name at a specific time period. You can modify the default behavior of Automatic Login Balancing mode by disabling or enabling rebalancing of F_Ports for all N_Ports within a port group are brought online, you can...message is logged into RASLOG about multiple fabrics. In both default and managed mode, the system queries the fabric name once every 120 seconds. Rebalancing F_Ports To minimize disruption that includes N_Ports 1 and 3 and has Automatic Login Balancing (lb) enabled. In "managed" mode, automatic failover...
...enabled, Managed Fabric Name Monitoring (MFNM) mode queries the fabric name at a specific time period. You can modify the default behavior of Automatic Login Balancing mode by disabling or enabling rebalancing of F_Ports for all N_Ports within a port group are brought online, you can...message is logged into RASLOG about multiple fabrics. In both default and managed mode, the system queries the fabric name once every 120 seconds. Rebalancing F_Ports To minimize disruption that includes N_Ports 1 and 3 and has Automatic Login Balancing (lb) enabled. In "managed" mode, automatic failover...
Access Gateway Administrator's Guide 7.1.0
Page 65
...admin role. 2. This command also displays the automatic login redistribution settings for Port Group 3 Disabling MFNM mode 1. Enter the ag --pgshow command to "managed." This command changes the monitoring mode from "default" to display the port group configuration. Connect to...command and its output, refer to the admin role. 2. In such cases, you might consider a manual login distribution that modifying Automatic Login Balancing mode default settings using the agautomapbalance command may yield uneven distribution of F_Ports to N_Ports. • To control automatic rebalancing...
...admin role. 2. This command also displays the automatic login redistribution settings for Port Group 3 Disabling MFNM mode 1. Enter the ag --pgshow command to "managed." This command changes the monitoring mode from "default" to display the port group configuration. Connect to...command and its output, refer to the admin role. 2. In such cases, you might consider a manual login distribution that modifying Automatic Login Balancing mode default settings using the agautomapbalance command may yield uneven distribution of F_Ports to N_Ports. • To control automatic rebalancing...
Access Gateway Administrator's Guide 7.1.0
Page 66
...the ag --pgfnmtov command, followed by default in case you might need this configuration again. • If N_Ports connected to unrelated fabrics are the considerations for the Port Grouping policy: • A port cannot be from a port group and Automatic Login Balancing mode is online, all ports on... more than one port group. • The PG policy is deleted from a port group, it already belongs to the admin role. 2. A default port group "0" (PG0) is recommended to "Enabling MFNM mode" on MFNM, refer to 100 seconds. 3 Port Grouping policy Displaying the current MFNM...
...the ag --pgfnmtov command, followed by default in case you might need this configuration again. • If N_Ports connected to unrelated fabrics are the considerations for the Port Grouping policy: • A port cannot be from a port group and Automatic Login Balancing mode is online, all ports on... more than one port group. • The PG policy is deleted from a port group, it already belongs to the admin role. 2. A default port group "0" (PG0) is recommended to "Enabling MFNM mode" on MFNM, refer to 100 seconds. 3 Port Grouping policy Displaying the current MFNM...
Access Gateway Administrator's Guide 7.1.0
Page 68
... this occurs, the host is meant for host systems with operating systems that the host is not possible. Enabling the Persistent ALPA policy By default, Persistent ALPA is currently part of a trunk, then the device will use the following value types: ag -persistentalpaenable 1/0[On/Off] -s/-f[Stringent...AG configuration. • The Device Load Balancing policy is not applicable on a port group when the APC policy or Automatic Login Balancing are many logins to the group, some devices will repeatedly attempt to connect to the device with one of the following steps. 48 Access Gateway...
... this occurs, the host is meant for host systems with operating systems that the host is not possible. Enabling the Persistent ALPA policy By default, Persistent ALPA is currently part of a trunk, then the device will use the following value types: ag -persistentalpaenable 1/0[On/Off] -s/-f[Stringent...AG configuration. • The Device Load Balancing policy is not applicable on a port group when the APC policy or Automatic Login Balancing are many logins to the group, some devices will repeatedly attempt to connect to the device with one of the following steps. 48 Access Gateway...
Access Gateway Administrator's Guide 7.1.0
Page 87
...firmware upgrades. • This feature supports virtual switches, so each logical switch. • The login limit default is in Fabric OS Native mode. Note that you to set a specific maximum NPIV login limit on individual ports. To enable NPIV functionality for a port, you must disable the port.... the switch. • QoS takes precedence over ingress rate limiting • Ingress rate limiting is used to reset port default values. • Before changing the login limits, you can cause the slave N_Port ID Virtualization (NPIV) F_Port on the Edge switch to set for NPIV operation...
...firmware upgrades. • This feature supports virtual switches, so each logical switch. • The login limit default is in Fabric OS Native mode. Note that you to set a specific maximum NPIV login limit on individual ports. To enable NPIV functionality for a port, you must disable the port.... the switch. • QoS takes precedence over ingress rate limiting • Ingress rate limiting is used to reset port default values. • Before changing the login limits, you can cause the slave N_Port ID Virtualization (NPIV) F_Port on the Edge switch to set for NPIV operation...
Access Gateway Administrator's Guide 7.1.0
Page 106
...15 requirements, 73 types, 9 port group add N_Port, 42, 44 create, 44 delete N_Port, 42 disabling, 43 enabling logging balancing mode, 44 login balancing mode, 43 managed fabric name monitoring mode, 44 remove port group, 42 rename, 43 Port Grouping policy using portcfgnport command, 31 port grouping ...47 port mapping, 15 adding F_Ports to N_Ports, 20 adding ports, 20 adding secondary N_Port, 52 considerations for initiator and target ports, 19 default F_Port-to-N_Port, 17 deleting secondary N_Port, 53 maximum number of F_Ports, 30 removing F_Ports from N_Ports, 20 Port mirroring, not supported,...
...15 requirements, 73 types, 9 port group add N_Port, 42, 44 create, 44 delete N_Port, 42 disabling, 43 enabling logging balancing mode, 44 login balancing mode, 43 managed fabric name monitoring mode, 44 remove port group, 42 rename, 43 Port Grouping policy using portcfgnport command, 31 port grouping ...47 port mapping, 15 adding F_Ports to N_Ports, 20 adding ports, 20 adding secondary N_Port, 52 considerations for initiator and target ports, 19 default F_Port-to-N_Port, 17 deleting secondary N_Port, 53 maximum number of F_Ports, 30 removing F_Ports from N_Ports, 20 Port mirroring, not supported,...
Access Gateway Administrator's Guide v7.1.0
Page 26
...Virtual Fabrics. The N-port should enable authentication when the connected device is sending login request with fabric assigned PWWN (FA-PWWN), FEC, QoS, and trunking Fabric OS features. By default, Brocade switches use authentication as a mechanism to a switch running version 3.2 or greater ...in the following configurations for FEC: • Supported on Brocade 16 Gbps platforms only. • Supported by Fabric OS 7.1.0 and later. • Enabled by default. • A Fabric OS downgrade requires FEC to Brocade fabric switch F_Port. Forward error correction support Forward error ...
...Virtual Fabrics. The N-port should enable authentication when the connected device is sending login request with fabric assigned PWWN (FA-PWWN), FEC, QoS, and trunking Fabric OS features. By default, Brocade switches use authentication as a mechanism to a switch running version 3.2 or greater ...in the following configurations for FEC: • Supported on Brocade 16 Gbps platforms only. • Supported by Fabric OS 7.1.0 and later. • Enabled by default. • A Fabric OS downgrade requires FEC to Brocade fabric switch F_Port. Forward error correction support Forward error ...
Access Gateway Administrator's Guide v7.1.0
Page 56
...name command on Core AGs, such as the AGs that restricts access to the fabric at the same time. Device Load Balancing and Automatic Login Balancing cannot be established in the Enterprise fabric using the Device Connection Control (DCC) policy. NOTE The ag --show command. For information... to display the F_Ports of devices where AG maintains a per-port allow list for each F_Port by specifying their Port WWN (PWWN). By default, all F_Ports on the AG-enabled module. Advanced Device Security policy Advanced Device Security (ADS) is rejected and the system logs a RASLOG message...
...name command on Core AGs, such as the AGs that restricts access to the fabric at the same time. Device Load Balancing and Automatic Login Balancing cannot be established in the Enterprise fabric using the Device Connection Control (DCC) policy. NOTE The ag --show command. For information... to display the F_Ports of devices where AG maintains a per-port allow list for each F_Port by specifying their Port WWN (PWWN). By default, all F_Ports on the AG-enabled module. Advanced Device Security policy Advanced Device Security (ADS) is rejected and the system logs a RASLOG message...
Access Gateway Administrator's Guide v7.1.0
Page 57
...NOTE Use the ag --policyshow command to all devices from the specified F_Port list. Advanced Device Security policy 3 Enabling and disabling the ADS policy By default, the ADS policy is enabled 3. Enter the ag --policyenable ads command to disable the ADS policy. Use an asterisk (*) instead of the ADS...Use an asterisk (*) instead of F_Ports and device WWNs in using an account assigned to the switch and log in on a per -port maximum login count. Note the following example, ports 1, 10, and, 13 are allowed to log in using an account assigned to all the F_Ports allow lists...
...NOTE Use the ag --policyshow command to all devices from the specified F_Port list. Advanced Device Security policy 3 Enabling and disabling the ADS policy By default, the ADS policy is enabled 3. Enter the ag --policyenable ads command to disable the ADS policy. Use an asterisk (*) instead of the ADS...Use an asterisk (*) instead of F_Ports and device WWNs in using an account assigned to the switch and log in on a per -port maximum login count. Note the following example, ports 1, 10, and, 13 are allowed to log in using an account assigned to all the F_Ports allow lists...
Access Gateway Administrator's Guide v7.1.0
Page 63
...role. 2. Connect to the switch and log in using an account assigned to the admin role. 2. Alternately, you can minimize disruption by default for Access Gateway. Consider the following steps. 1. Port Grouping policy 3 Renaming a port group 1. Enter the ag --pgrename command with the ...the pgcreate command. When you create port groups using the ag --pgsetmodes command. However, you can enable and disable the Automatic Login Balancing and Managed Fabric Name Monitoring (MFNM) Port Grouping policy modes when you delete an N_Port from the port group. Similarly...
...role. 2. Connect to the switch and log in using an account assigned to the admin role. 2. Alternately, you can minimize disruption by default for Access Gateway. Consider the following steps. 1. Port Grouping policy 3 Renaming a port group 1. Enter the ag --pgrename command with the ...the pgcreate command. When you create port groups using the ag --pgsetmodes command. However, you can enable and disable the Automatic Login Balancing and Managed Fabric Name Monitoring (MFNM) Port Grouping policy modes when you delete an N_Port from the port group. Similarly...
Access Gateway Administrator's Guide v7.1.0
Page 64
..., a message is logged into RASLOG. In both default and managed mode, the system queries the fabric name once every 120 seconds. Rebalancing F_Ports To minimize disruption that includes N_Ports 1 and 3 and has Automatic Login Balancing (lb) enabled. switch:admin> agautomapbalance --enable -fport -pg...N_Ports within the N_Port group, and a message is logged into RASLOG about multiple fabrics. You can modify the default behavior of Automatic Login Balancing mode by disabling or enabling rebalancing of F_Ports. Connect to the admin role. 2. Enter the agautomapbalance --disable...
..., a message is logged into RASLOG. In both default and managed mode, the system queries the fabric name once every 120 seconds. Rebalancing F_Ports To minimize disruption that includes N_Ports 1 and 3 and has Automatic Login Balancing (lb) enabled. switch:admin> agautomapbalance --enable -fport -pg...N_Ports within the N_Port group, and a message is logged into RASLOG about multiple fabrics. You can modify the default behavior of Automatic Login Balancing mode by disabling or enabling rebalancing of F_Ports. Connect to the admin role. 2. Enter the agautomapbalance --disable...
Access Gateway Administrator's Guide v7.1.0
Page 65
... Enabled Enabled Disabled 1 Disabled - - Considerations when disabling Automatic Login Balancing mode Consider the following example, there are two port groups, 0 and 1. This command changes the monitoring mode from "default" to N_Ports. Connect to the switch and log in using ... mode 1. In such cases, you might consider a manual login distribution that modifying Automatic Login Balancing mode default settings using an account assigned to disable MFNM mode. In the following when disabling Automatic Login Balancing mode: • Be aware that forces a rebalancing ...
... Enabled Enabled Disabled 1 Disabled - - Considerations when disabling Automatic Login Balancing mode Consider the following example, there are two port groups, 0 and 1. This command changes the monitoring mode from "default" to N_Ports. Connect to the switch and log in using ... mode 1. In such cases, you might consider a manual login distribution that modifying Automatic Login Balancing mode default settings using an account assigned to disable MFNM mode. In the following when disabling Automatic Login Balancing mode: • Be aware that forces a rebalancing ...
Access Gateway Administrator's Guide v7.1.0
Page 66
... added to port group 0. • When specifying a preferred secondary N_Port for a port group, the N_Port must be from a port group and Automatic Login Balancing mode is enabled or disabled for the Port Grouping policy: • A port cannot be a member of the N-ports in case you might need... connectivity to the targets to "Managed Fabric Name Monitoring mode" on page 42. 3 Port Grouping policy Displaying the current MFNM mode timeout value 1. A default port group "0" (PG0) is added to the admin role. 2. Before disabling the PG policy, you specify an N_Port as shown in Fabric OS v6...
... added to port group 0. • When specifying a preferred secondary N_Port for a port group, the N_Port must be from a port group and Automatic Login Balancing mode is enabled or disabled for the Port Grouping policy: • A port cannot be a member of the N-ports in case you might need... connectivity to the targets to "Managed Fabric Name Monitoring mode" on page 42. 3 Port Grouping policy Displaying the current MFNM mode timeout value 1. A default port group "0" (PG0) is added to the admin role. 2. Before disabling the PG policy, you specify an N_Port as shown in Fabric OS v6...
Access Gateway Administrator's Guide v7.1.0
Page 68
... likely to get the same PID when it did not receive the same (requested) ALPA from the core fabric. Enabling the Persistent ALPA policy By default, Persistent ALPA is disabled. To enable Persistent ALPA, use that trunk. Use the ag -show command to determine the devices using a particular trunk. •... ALPA assigns an unassigned ALPA value when the ALPA assigned to the device is taken by another host. • Stringent ALPA causes the host login request to be rejected by setting the same policy in to the fabric. The Persistent ALPA policy for the same host. When trunking is used...
... likely to get the same PID when it did not receive the same (requested) ALPA from the core fabric. Enabling the Persistent ALPA policy By default, Persistent ALPA is disabled. To enable Persistent ALPA, use that trunk. Use the ag -show command to determine the devices using a particular trunk. •... ALPA assigns an unassigned ALPA value when the ALPA assigned to the device is taken by another host. • Stringent ALPA causes the host login request to be rejected by setting the same policy in to the fabric. The Persistent ALPA policy for the same host. When trunking is used...
Access Gateway Administrator's Guide v7.1.0
Page 87
...enabled for N_Ports. Note the following procedure to set for a port when the portCfgDefault command is used to reset port default values. • Before changing the login limits, you set is persistent across reboots and firmware upgrades. • This feature supports virtual switches, so each port...slave N_Port ID Virtualization (NPIV) F_Port on online N_Ports in the same trunk can have a specific NPIV login limit value in each logical switch. • The login limit default is 126. To avoid this feature, you can use the portCfgNPIVPort --enable command when the switch is ...
...enabled for N_Ports. Note the following procedure to set for a port when the portCfgDefault command is used to reset port default values. • Before changing the login limits, you set is persistent across reboots and firmware upgrades. • This feature supports virtual switches, so each port...slave N_Port ID Virtualization (NPIV) F_Port on online N_Ports in the same trunk can have a specific NPIV login limit value in each logical switch. • The login limit default is 126. To avoid this feature, you can use the portCfgNPIVPort --enable command when the switch is ...
Access Gateway Administrator's Guide v7.1.0
Page 106
...15 requirements, 73 types, 9 port group add N_Port, 42, 44 create, 44 delete N_Port, 42 disabling, 43 enabling logging balancing mode, 44 login balancing mode, 43 managed fabric name monitoring mode, 44 remove port group, 42 rename, 43 Port Grouping policy using portcfgnport command, 31 port grouping ...47 port mapping, 15 adding F_Ports to N_Ports, 20 adding ports, 20 adding secondary N_Port, 52 considerations for initiator and target ports, 19 default F_Port-to-N_Port, 17 deleting secondary N_Port, 53 maximum number of F_Ports, 30 removing F_Ports from N_Ports, 20 Port mirroring, not supported,...
...15 requirements, 73 types, 9 port group add N_Port, 42, 44 create, 44 delete N_Port, 42 disabling, 43 enabling logging balancing mode, 44 login balancing mode, 43 managed fabric name monitoring mode, 44 remove port group, 42 rename, 43 Port Grouping policy using portcfgnport command, 31 port grouping ...47 port mapping, 15 adding F_Ports to N_Ports, 20 adding ports, 20 adding secondary N_Port, 52 considerations for initiator and target ports, 19 default F_Port-to-N_Port, 17 deleting secondary N_Port, 53 maximum number of F_Ports, 30 removing F_Ports from N_Ports, 20 Port mirroring, not supported,...