Brocade Communications Systems 8 Manuel de service

53-1001760-01

30 March 2010

Access Gateway

Administrator’s Guide

Supporting Fabric OS v6.4.0

Brocade, the B-wing symbol, BigIron, DCX, Fabric OS, FastIron, IronPoint, IronShield, IronView, IronWare, JetCore, NetIron,

SecureIron, ServerIron, StorageX, and TurboIron are registered trademarks, and DCFM, Extraordinary Networks, and SAN Health

are trademarks of Brocade Communications Systems, Inc., in the United States and/or in other countries. All other brands,

products, or service names are or may be trademarks or service marks of, and are used to identify, products or services of their

respective owners.

Notice: This document is for informational purposes only and does not set forth any warranty, expressed or implied, concerning

any equipment, equipment feature, or service offered or to be offered by Brocade. Brocade reserves the right to make changes to

this document at any time, without notice, and assumes no responsibility for its use. This informational document describes

features that may not be currently available. Contact a Brocade sales office for information on feature and product availability.

Export of technical data contained in this document may require an export license from the United States government.

The authors and Brocade Communications Systems, Inc. shall have no liability or responsibility to any person or entity with

respect to any loss, cost, liability, or damages arising from the information contained in this book or the computer programs that

accompany it.

The product described by this document may contain “open source” software covered by the GNU General Public License or other

open source license agreements. To find out which open source software is included in Brocade products, view the licensing

terms applicable to the open source software, and obtain a copy of the programming source code, please visit

http://www.brocade.com/support/oscd.

Brocade Communications Systems, Incorporated

Corporate and Latin American Headquarters

Brocade Communications Systems, Inc.

1745 Technology Drive

San Jose, CA 95110

Tel: 1-408-333-8000

Fax: 1-408-333-8101

E-mail: inf[email protected]

Asia-Pacific Headquarters

Brocade Communications Systems China HK, Ltd.

No. 1 Guanghua Road

Chao Yang District

Units 2718 and 2818

Beijing 100020, China

Tel: +8610 6588 8888

Fax: +8610 6588 9999

E-mail: [email protected]

European Headquarters

Brocade Communications Switzerland Sàrl

Centre Swissair

Tour B - 4ème étage

29, Route de l'Aéroport

Case Postale 105

CH-1215 Genève 15

Switzerland

Tel: +41 22 799 5640

Fax: +41 22 799 5641

E-mail: emea-info@brocade.com

Asia-Pacific Headquarters

Brocade Communications Systems Co., Ltd. (Shenzhen WFOE)

Citic Plaza

No. 233 Tian He Road North

Unit 1308 – 13th Floor

Guangzhou, China

Tel: +8620 3891 2000

Fax: +8620 3891 2111

E-mail: [email protected]

Access Gateway Administrator’s Guide iii

53-1001760-01

Document History

The following table lists all versions of the Access Gateway Administrator’s Guide.

Document Title Publication Number Summary of Changes Publication Date

Access Gateway Administrator’s Guide 53-1000430-01 First version January 2007

Access Gateway Administrator’s Guide 53-1000633-01 Added support for the 200E June 2007

Access Gateway Administrator’s Guide 53-1000605-01 Added support for new policies

and changes to N_Port

mappings.

October 2007

Access Gateway Administrator’s Guide 53-1000605-02 Added support for new

platforms:

300 and the 4424.

Added support for new features:

- Masterless Trunking

- Direct Target Connectivity

- Advance Device Security policy

- 16- bit routing

March 2008

Access Gateway Administrator’s Guide 53-1000605-03 Added support for:

- Cascading Access Gateway.

July 2008

Access Gateway Administrator’s Guide 53-1000605-04 Updated to fix the table of

contents

July 2008

Access Gateway Administrator’s Guide 53-1001189-01 Updated for Fabric OS 6.2.0 November 2008

Access Gateway Administrator’s Guide 53-1001345-01 Updated for Fabric OS 6.3.0 July 2009

Access Gateway Administrator’s Guide 53-1001760-01 Updated for Fabric OS 6.4.0 March 2010

iv Access Gateway Administrator’s Guide

53-1001760-01

Access Gateway Administrator’s Guide v

53-1001760-01

Contents

About This Document

How this document is organized . . . . . . . . . . . . . . . . . . . . . . . . . . . . xiii

Supported hardware and software . . . . . . . . . . . . . . . . . . . . . . . . . . xiii

What’s new in this document. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xiv

Document conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xv

Text formatting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xv

Command syntax conventions . . . . . . . . . . . . . . . . . . . . . . . . . . xv

Notes, cautions, and warnings . . . . . . . . . . . . . . . . . . . . . . . . . . xv

Notice to the reader . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xvi

Key terms. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xvi

Additional information. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .xvii

Brocade resources. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xvii

Other industry resources . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xvii

Optional Brocade features . . . . . . . . . . . . . . . . . . . . . . . . . . . . xviii

Getting technical help. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xviii

Document feedback . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xix

Chapter 1 Access Gateway Basic Concepts

In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1

Brocade Access Gateway overview . . . . . . . . . . . . . . . . . . . . . . . . . . . 1

Comparing Native Fabric and Access Gateway modes . . . . . . . . 1

Fabric OS features in Access Gateway mode . . . . . . . . . . . . . . . . . . . 3

Access Gateway port types . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4

Comparison of Access Gateway ports to standard switch ports. 4

Access Gateway hardware considerations . . . . . . . . . . . . . . . . . . . . . 5

Chapter 2 Configuring Ports in Access Gateway mode

In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7

Enabling and disabling Access Gateway mode . . . . . . . . . . . . . . . . . . 7

Port state description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

Access Gateway mapping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10

Port-based mapping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10

Device-based mapping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15

Considerations for Access Gateway mapping . . . . . . . . . . . . . . 22

vi Access Gateway Administrator’s Guide

53-1001760-01

N_Port configurations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24

Displaying N_Port configurations . . . . . . . . . . . . . . . . . . . . . . . . 25

Unlocking N_Ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .25

Chapter 3 Managing Policies and Features in Access Gateway Mode

In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27

Access Gateway policies overview . . . . . . . . . . . . . . . . . . . . . . . . . . . 27

Displaying current policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27

Access Gateway policy enforcement matrix . . . . . . . . . . . . . . . .28

Advanced Device Security policy . . . . . . . . . . . . . . . . . . . . . . . . . . . .28

How the ADS policy works . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28

Enabling and disabling the Advanced Device Security policy. .29

Setting the list of devices allowed to log in . . . . . . . . . . . . . . . .29

Setting the list of devices not allowed to log in . . . . . . . . . . . . .30

Removing devices from the list of allowed devices . . . . . . . . . 30

Adding new devices to the list of allowed devices . . . . . . . . . . . 30

Displaying the list of allowed devices on the switch . . . . . . . . . 31

ADS policy considerations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31

Upgrade and downgrade considerations for the ADS policy. . . 31

Automatic Port Configuration policy. . . . . . . . . . . . . . . . . . . . . . . . . . 31

How the APC policy works . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31

Enabling and disabling the APC policy . . . . . . . . . . . . . . . . . . . . 32

Automatic Port Configuration policy considerations . . . . . . . . . 32

Upgrade and downgrade considerations for the APC policy . . . 33

Port Grouping policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33

How port groups work . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33

Adding an N_Port to a port group . . . . . . . . . . . . . . . . . . . . . . . . 34

Deleting an N_Port from a port group . . . . . . . . . . . . . . . . . . . . 35

Removing a port group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .35

Renaming a port group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35

Disabling the Port Grouping policy . . . . . . . . . . . . . . . . . . . . . . .35

Port Grouping policy modes . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36

Creating a port group and enabling Automatic Login

Balancing mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36

Rebalancing F_Ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37

Enabling Managed Fabric Name Monitoring mode . . . . . . . . . .38

Disabling Managed Fabric Name Monitoring mode . . . . . . . . .38

Displaying the current fabric name monitoring timeout value .38

Setting the current fabric name monitoring timeout value. . . . 39

Port Grouping policy considerations. . . . . . . . . . . . . . . . . . . . . . 39

Upgrade and downgrade considerations for the

Port Grouping policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .40

Device Load Balancing Policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40

Enabling WWN Load Balancing. . . . . . . . . . . . . . . . . . . . . . . . . . 40

Disabling Device Load Balancing . . . . . . . . . . . . . . . . . . . . . . . .40

Device Load Balancing considerations . . . . . . . . . . . . . . . . . . . 41

Access Gateway Administrator’s Guide vii

53-1001760-01

Persistent ALPA Policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41

Enabling Persistent ALPA. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42

Disabling Persistent ALPA . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .42

Persistent ALPA device data . . . . . . . . . . . . . . . . . . . . . . . . . . . .42

Removing device data from the database . . . . . . . . . . . . . . . . . 42

Displaying device data. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43

Clearing ALPA values . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .43

Persistent ALPA policy considerations . . . . . . . . . . . . . . . . . . . .43

Upgrade and downgrade considerations for Persistent ALPA. . 43

Failover. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .44

Failover with port-based mapping . . . . . . . . . . . . . . . . . . . . . . . 44

Failover with device-based mapping. . . . . . . . . . . . . . . . . . . . . .46

Enabling and disabling Failover on a N_Port . . . . . . . . . . . . . . . 47

Enabling and disabling Failover for a port group . . . . . . . . . . . . 47

Upgrade and downgrade considerations for Failover . . . . . . . . 48

Failback . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .48

Failback configurations in Access Gateway . . . . . . . . . . . . . . . . 48

Enabling and disabling Failback on an N_Port . . . . . . . . . . . . .49

Enabling and disabling Failback for a port group . . . . . . . . . . .50

Upgrade and downgrade considerations for Failback. . . . . . . .50

Trunking in Access Gateway mode. . . . . . . . . . . . . . . . . . . . . . . . . . .50

How Trunking works. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .50

Configuring Trunking on the Edge switch . . . . . . . . . . . . . . . . . . 51

Configuration management for trunk areas . . . . . . . . . . . . . . . 52

Enabling trunking. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .53

Disabling F_Port trunking . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .54

Trunking monitoring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54

Trunking considerations for the Edge switch . . . . . . . . . . . . . . .54

Trunking considerations for Access Gateway module . . . . . . . . 57

Upgrade and downgrade considerations for Trunking in

Access Gateway mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57

Adaptive Networking on Access Gateway . . . . . . . . . . . . . . . . . . . . . 58

Upgrade and downgrade considerations with

Adaptive Networking in AG mode enabled . . . . . . . . . . . . . . . . . 59

Adaptive Networking on Access Gateway considerations . . . . .59

Per Port NPIV login limit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .60

Setting the login limit. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60

Considerations for the Brocade 8000 . . . . . . . . . . . . . . . . . . . . . . . . 60

Chapter 4 SAN Configuration with Access Gateway

In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63

Connectivity of multiple devices overview . . . . . . . . . . . . . . . . . . . . . 63

Direct target attachment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63

Considerations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63

Target aggregation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64

Access Gateway cascading. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64

viii Access Gateway Administrator’s Guide

53-1001760-01

Fabric and Edge switch configuration . . . . . . . . . . . . . . . . . . . . . . . . 65

Verifying the switch mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .65

Enabling NPIV on M-EOS switches . . . . . . . . . . . . . . . . . . . . . . . 66

Connectivity to Cisco Fabrics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67

Enabling NPIV on a Cisco switch. . . . . . . . . . . . . . . . . . . . . . . . .67

Rejoining Fabric OS switches to a fabric . . . . . . . . . . . . . . . . . . . . . .67

Reverting to a previous configuration. . . . . . . . . . . . . . . . . . . . .67

Appendix A Troubleshooting

Index

Access Gateway Administrator’s Guide ix

53-1001760-01

Figures

Figure 1 Switch function in Native mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2

Figure 2 Switch function in Access Gateway mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2

Figure 3 Port usage comparison . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5

Figure 4 Example port-based mapping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11

Figure 5 Example of device mapping to N_Port groups. . . . . . . . . . . . . . . . . . . . . . . . . . . 17

Figure 6 Example device mapping to an N_Port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18

Figure 7 Example of adding an external F_Port (F9) on an embedded switch . . . . . . . . 24

Figure 8 Port grouping behavior . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34

Figure 9 Port group 1 (pg1) setup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34

Figure 10 Example 1 and 2 Failover behavior . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45

Figure 11 Failback behavior. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49

Figure 12 Starting point for QoS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59

Figure 13 Access Gateway cascading . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64

xAccess Gateway Administrator’s Guide

53-1001760-01

Autres manuels pour 8

Ce manuel convient aux modèles suivants

Table des matières

Autres manuels Brocade Communications Systems Changer