Send documenta t ion comments to mdsfeedback -doc@c i sco .comAmericas HeadquartersCisco Systems, Inc.170 West Tasman DriveSan Jose, CA 95134-1706 USAhttp://www.cisco.comTel: 408 526-4000

800 553-NETS (6387)Fax: 408 527-0883

Cisco MDS 9000 Family Fabric Manager Configuration Guide, Release 4.xCisco MDS NX-OS Release 4.1(1b) Through 4.1(3a) Cisco MDS 9000 FabricWare Release 4.x March 2009

Text Part Number: OL-17256-03

Send documenta t ion comments to mdsfeedback -doc@c i sco .comTHE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.

THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.

The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCBs public domain version of the UNIX operating system. All rights reserved. Copyright 1981, Regents of the University of California.

NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED AS IS WITH ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.

IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

CCDE, CCENT, Cisco Eos, Cisco HealthPresence, the Cisco logo, Cisco Lumin, Cisco Nexus, Cisco StadiumVision, Cisco TelePresence, Cisco WebEx, DCE, and Welcome to the Human Network are trademarks; Changing the Way We Work, Live, Play, and Learn and Cisco Store are service marks; and Access Registrar, Aironet, AsyncOS, Bringing the Meeting To You, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, CCSP, CCVP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Collaboration Without Limitation, EtherFast, EtherSwitch, Event Center, Fast Step, Follow Me Browsing, FormShare, GigaDrive, HomeLink, Internet Quotient, IOS, iPhone, iQuick Study, IronPort, the IronPort logo, LightStream, Linksys, MediaTone, MeetingPlace, MeetingPlace Chime Sound, MGX, Networkers, Networking Academy, Network Registrar, PCNow, PIX, PowerPanels, ProConnect, ScriptShare, SenderBase, SMARTnet, Spectrum Expert, StackWise, The Fastest Way to Increase Your Internet Quotient, TransPath, WebEx, and the WebEx logo are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries.

All other trademarks mentioned in this document or website are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (0812R)

Any Internet Protocol (IP) addresses used in this document are not intended to be actual addresses. Any examples, command display output, and figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses in illustrative content is unintentional and coincidental.

Cisco MDS 9000 Family Fabric Manager Configuration Guide 2009 Cisco Systems, Inc. All rights reserved.

OL-17256-03, Cisco MDS NX-OS Release 4.x

CLI 1-5Cisco MDS 900

Software ConfiguratBasic ConfiguraAdvanced Confi0 Fabric Manager 1-5Send documenta t ion comments to mdsfeedback -doc@c i sco .com

C O N T E N T S

New and Changed Information lvii

Preface lxi

Audience lxi

Organization lxi

Document Conventions lxvi

Related Documentation lxviiRelease Notes lxviiRegulatory Compliance and Safety Information lxviiCompatibility Information lxviiHardware Installation lxviiiSoftware Installation and Upgrade lxviiiCisco Fabric Manager lxviiiCommand-Line Interface lxviiiIntelligent Storage Networking Services Configuration Guides lxviiiTroubleshooting and Reference lxviii

Obtaining Documentation and Submitting a Service Request lxix

P A R T 1 Getting Started

C H A P T E R 1 Product Overview 1-1

Hardware Overview 1-1Cisco MDS 9500 Series Multilayer Directors 1-2Cisco MDS 9200 Series Fabric Switches 1-3

Cisco MDS 9216i Multiprotocol Fabric Switch 1-3Cisco MDS 9222i Multilayer Fabric Switch 1-3

Cisco MDS 9100 Series Fixed Configuration Fabric Switches 1-4

Cisco NX-OS Software Configuration 1-4Tools for Software Configuration 1-5iiiCisco MDS 9000 Family Fabric Manager Configuration Guide

ion Overview 1-6tion 1-6guration 1-7

ContentsSend documenta t ion comments to mdsfeedback -doc@c i sco .com

C H A P T E R 2 Installing Cisco MDS NX-OS and Fabric Manager 2-1

Starting a Switch in the Cisco MDS 9000 Family 2-1

Initial Setup Routine 2-2Preparing to Configure the Switch 2-2Default Login 2-3Setup Options 2-3Assigning Setup Information 2-4

Configuring Out-of-Band Management 2-4Configuring In-Band Management 2-9Using the setup Command 2-12

Accessing the Switch 2-12

Where Do You Go Next? 2-13

About Cisco Fabric Manager 2-13Fabric Manager Server 2-14Fabric Manager Client 2-14Fabric Manager Server Proxy Services 2-14Device Manager 2-15Performance Manager 2-15Fabric Manager Web Server 2-15

Cisco MDS 9000 Switch Management 2-15Storage Management Solutions Architecture 2-16In-Band Management and Out-of-Band Management 2-17

mgmt0 2-17IPFC 2-17

Installing the Management Software 2-18Before You Install 2-18

Supported Software 2-19Java Database Connectivity 2-19Minimum Hardware Requirements 2-20Upgrading Fabric Manager in Cisco SAN-OS Releases Prior to 3.1(2b) 2-20Upgrading Fabric Manager in Cisco SAN-OS Releases 3.1(2b) and Later to 3.2(1) 2-20

Installing the Database 2-20Directory Structure 2-21 2-21Installing Oracle 2-22

Increasing UDP Buffer Size 2-23Database Backup and Restore-PostgresSQL 2-23

Backup 2-23ivCisco MDS 9000 Family Fabric Manager Configuration Guide

OL-17256-03, Cisco MDS NX-OS Release 4.x

Restore 2-24

ContentsSend documenta t ion comments to mdsfeedback -doc@c i sco .com

Importing PM Statitics Data to Fabric Manager 2-24Installing Fabric Manager 2-24Installing Device Manager 2-34Creating FM/DM Shortcut Manually 2-36

Upgrading the Management Software 2-38

Upgrading Fabric Manager Server and Fabric Manager Standalone Version Using the Fabric Manager Update Installer 2-39

Integrating Cisco Fabric Manager with Other Management Tools 2-40

Running Fabric Manager Behind a Firewall 2-40

Uninstalling the Management Software 2-43

C H A P T E R 3 Fabric Manager Server 3-1

Fabric Manager Server Overview 3-1

Fabric Manager Server Features 3-1

Installing and Configuring Fabric Manager Server 3-2Installing Fabric Manager Server 3-2

Unlicensed Versus Licensed Fabric Manager Server 3-3Verifying Performance Manager Collections 3-3

Managing a Fabric Manager Server Fabric 3-3Selecting a Fabric to Manage Continuously 3-3

Fabric Manager Server Properties File 3-4

Modifying Fabric Manager Server 3-5Adding or Removing Fabric Manager Server Users 3-6Changing the Fabric Manager Server User Name and Password 3-7Changing the Polling Period and Fabric Rediscovery Time 3-7Using Device Aliases or FC Aliases 3-7

C H A P T E R 4 Authentication in Fabric Manager 4-1

Fabric Manager Authentication Overview 4-1

Best Practices for Discovering a Fabric 4-3Setting Up Discovery for a Fabric 4-3

Performance Manager Authentication 4-4

Fabric Manager Web Server Authentication 4-4

C H A P T E R 5 Fabric Manager Client 5-1

About Fabric Manager Client 5-1Fabric Manager Advanced Mode 5-2vCisco MDS 9000 Family Fabric Manager Configuration Guide

OL-17256-03, Cisco MDS NX-OS Release 4.x

Launching Fabric Manager Client in Cisco SAN-OS Release 3.2(1) and Later 5-2

ContentsSend documenta t ion comments to mdsfeedback -doc@c i sco .com

Fabric Manager Client Quick Tour: Server Admin Perspective 5-7Fabric Manager Main Window 5-7Menu Bar 5-9Tool Bar 5-9Logical Domains Pane 5-9Physical Attributes Pane 5-9Information Pane 5-10Fabric Pane 5-11

Fabric Manager Client Quick Tour: Admin Perspective 5-12Menu Bar 5-13

File 5-13View 5-14Zone 5-14Tools 5-15Performance 5-17Server 5-17Help 5-17

Toolbar 5-17Logical Domains Pane 5-19

Filtering 5-19Physical Attributes Pane 5-20

Context Menu for Tables 5-20Information Pane 5-22

Detachable Tables 5-24Fabric Pane 5-24

Context Menus 5-26Saving the Map 5-26Purging Down Elements 5-27Multiple Fabric Display 5-27Filtering by Groups 5-28

Status Bar 5-29

Setting Fabric Manager Preferences 5-30

Network Fabric Discovery 5-31

Modifying the Device Grouping 5-32Using Alias Names as Enclosures 5-32

Controlling Administrator Access with Users and Roles 5-34

Using Fabric Manager Wizards 5-34

Fabric Manager Troubleshooting Tools 5-35viCisco MDS 9000 Family Fabric Manager Configuration Guide

OL-17256-03, Cisco MDS NX-OS Release 4.x

ContentsSend documenta t ion comments to mdsfeedback -doc@c i sco .com

C H A P T E R 6 Device Manager 6-1

About Device Manager 6-1

Launching Device Manager 6-2

Using Device Manager 6-2Menu Bar 6-3Toolbar Icons 6-4Dialog Boxes 6-5Tabs 6-5Legend 6-5Supervisor and Switching Modules 6-7Context Menus 6-7

Setting Device Manager Preferences 6-8

C H A P T E R 7 Fabric Manager Web Client 7-1

About Fabric Manager Web Client 7-1

Navigating Fabric Manager Web Client 7-2

Installing Fabric Manager Web Client 7-3Using Fabric Manager Web Client with SSL 7-5

Launching Fabric Manager Web Client 7-7

Health 7-9Viewing Summary Information 7-9Viewing Fabric Information 7-10Viewing Syslog Information 7-11Viewing Analysis Reports 7-12

Performance 7-13Viewing Performance Summary Information 7-14Performance Detail Summary Report 7-15 7-15Viewing Performance Information for End Devices 7-16Viewing Performance Information for ISLs 7-17Viewing Performance Information for NPV Links 7-21Viewing Performance Information for Flows 7-22Viewing Performance Information for Gigabit Ethernet and Ethernet Ports 7-23Viewing Other Statistics 7-23Viewing Detailed Traffic Information 7-24Viewing Predicted Future Performance 7-25

Using the Default Values 7-25viiCisco MDS 9000 Family Fabric Manager Configuration Guide

OL-17256-03, Cisco MDS NX-OS Release 4.x

Using Your Own Values 7-26

ContentsSend documenta t ion comments to mdsfeedback -doc@c i sco .com

Viewing Switch Bandwidth 7-27

Inventory 7-28Viewing Summary Inventory Information 7-28Viewing Detailed Summary Inventory Information 7-29Viewing Detailed Information for VSANs 7-29Viewing Detailed Information for Switches 7-30Viewing License Information 7-31Viewing Detailed Information for Modules 7-32Viewing Detailed Information for End Devices 7-33Viewing Detailed Information for ISLs 7-34Viewing Detailed Information for NPV Links 7-35Viewing Detailed Information for Zones 7-36

Reports 7-37Creating a Custom Report Template 7-37Viewing Custom Reports by Template 7-39Viewing Custom Reports by Users 7-39Generating Custom Reports by Template 7-40Modifying a Custom Report Template 7-41Deleting Custom Reports 7-42Viewing Scheduled Jobs by Report Template 7-43Modifying Scheduled Jobs 7-43

Admin 7-44Recovering a Web Server Password 7-45Starting, Restarting, and Stopping Services 7-45Adding, Editing, and Removing Managed Fabrics 7-46Viewing Trap and Syslog Registration Information 7-48Configuring Forwarding of Notifications for Events 7-49Viewing and Disconnecting Clients 7-50Configuring Fabric Manager Server Preferences 7-51Adding and Removing Communities 7-51Configuring AAA Information 7-53Adding and Removing Users 7-53Adding and Removing Roles 7-54Creating Performance Collections 7-56Configuring Other Statistics 7-57Configuring Collection Thresholds 7-59Importing the RRD Statistics Index 7-60Configuring the RRD Database 7-60viiiCisco MDS 9000 Family Fabric Manager Configuration Guide

OL-17256-03, Cisco MDS NX-OS Release 4.x

Viewing Log Information 7-62

ContentsSend documenta t ion comments to mdsfeedback -doc@c i sco .com

Downloading Fabric Manager Client 7-62

C H A P T E R 8 Performance Manager 8-1

Performance Manager Architecture 8-1Data Interpolation 8-2Data Collection 8-2Using Performance Thresholds 8-2Flow Setup Wizards 8-3Creating a Flow Using Flow Configuration Wizard 8-3

Flow Statistics Configuration 8-6About Flow Statistics 8-6

C H A P T E R 9 Cisco Traffic Analyzer 9-1

Understanding SPAN 9-1

Using Cisco Traffic Analyzer with Performance Manager 9-2Understanding the PAA-2 9-2Understanding Cisco Traffic Analyzer 9-3

Installing Cisco Traffic Analyzer 9-3

Accessing Traffic Analyzer from Fabric Manager Web Server 9-5

P A R T 2 Installation and Switch Management

C H A P T E R 10 Obtaining and Installing Licenses 10-1

Licensing Terminology 10-1

Licensing Model 10-2

Licensing High Availability 10-8

Options to Install a License 10-8

Obtaining a Factory-Installed License 10-9

Performing a Manual Installation 10-9

Obtaining the License Key File 10-9

Installing the License Key File 10-10

Installing Licenses Using Fabric Manager License Wizard 10-11

Installing or Updating Licenses Using Device Manager 10-12

Identifying License Features in Use 10-13

Uninstalling Licenses 10-14

Updating Licenses 10-14ixCisco MDS 9000 Family Fabric Manager Configuration Guide

OL-17256-03, Cisco MDS NX-OS Release 4.x

Grace Period Alerts 10-15

ContentsSend documenta t ion comments to mdsfeedback -doc@c i sco .com

License Transfers Between Switches 10-16

Displaying License Information 10-16Viewing License Information in Fabric Manager 10-16Viewing License Information in Device Manager 10-16Viewing Licenses Using Fabric Manager Web Server 10-17

Fabric Manager Server Licensing 10-17

C H A P T E R 11 On-Demand Port Activation Licensing 11-1

About On-Demand Port Activation Licensing 11-1Port-Naming Conventions 11-2Port Licensing 11-2License Status Definitions 11-3

Configuring Port Activation Licenses 11-4Checking the Status of Licenses 11-4Making a Port Eligible for a License 11-5Acquiring a License for a Port 11-6

C H A P T E R 12 Initial Configuration 12-1

Assigning a Switch Name 12-1

Verifying the Module Status 12-2

Configuring Date, Time, and Time Zone 12-3

NTP Configuration 12-4About NTP 12-4NTP Configuration Guidelines 12-5Configuring NTP 12-6Editing an NTP Server or Peer Configuration 12-6Deleting an NTP Server or Peer 12-7NTP CFS Distribution 12-8

Configuring NTP with CFS 12-8Committing NTP Configuration Changes 12-9Discarding NTP Configuration Changes 12-9Releasing Fabric Session Lock 12-9Database Merge Guidelines 12-10

Management Interface Configuration 12-10

Default Gateway Configuration 12-10

Telnet Server Connection 12-11Disabling a Telnet Connection 12-11xCisco MDS 9000 Family Fabric Manager Configuration Guide

OL-17256-03, Cisco MDS NX-OS Release 4.x

Configuring CDP 12-12

ContentsSend documenta t ion comments to mdsfeedback -doc@c i sco .com

C H A P T E R 13 Using the CFS Infrastructure 13-1

About CFS 13-1Cisco MDS NX-OS Features Using CFS 13-2CFS Features 13-2CFS Protocol 13-3CFS Distribution Scopes 13-3CFS Distribution Modes 13-4

Uncoordinated Distribution 13-4Coordinated Distribution 13-4Unrestricted Uncoordinated Distributions 13-4

Disabling CFS Distribution on a Switch 13-4

CFS Application Requirements 13-5

Enabling CFS for an Application 13-5

Locking the Fabric 13-6

Committing Changes 13-7

Discarding Changes 13-8

Saving the Configuration 13-8

Clearing a Locked Session 13-8

CFS Merge Support 13-9

Displaying CFS Configuration Information 13-9

CFS Distribution over IP 13-10Configuring Static IP Peers for CFS over IP 13-11

Adding Peers to List 13-12Removing an NPV Device from the Peer List 13-14

CFS Regions 13-16About CFS Regions 13-16Managing CFS Regions Using Fabric Manager 13-17

Creating CFS Regions 13-17Assigning Features to CFS Regions 13-17Moving a Feature to a Different Region 13-18Removing a Feature from a Region 13-19Deleting CFS Regions 13-19

CFS Example Using Fabric Manager 13-20

CFS Example Using Device Manager 13-23

Default Settings 13-23xiCisco MDS 9000 Family Fabric Manager Configuration Guide

OL-17256-03, Cisco MDS NX-OS Release 4.x

ContentsSend documenta t ion comments to mdsfeedback -doc@c i sco .com

C H A P T E R 14 Configuring FlexAttach Virtual pWWN 14-1

About FlexAttach Virtual pWWN 14-1

FlexAttach Virtual pWWN Guidelines and Requirements 14-2

Configuring FlexAttach Virtual pWWN 14-2Enabling FlexAttach Virtual pWWN 14-2

Automatically Enabling FlexAttach Virtual pWWN 14-2Launching FlexAttach in Fabric Manager 14-3

Manually Enabling FlexAttach Virtual pWWN 14-4Mapping pWWN to Virtual pWWN 14-6

Debugging FlexAttach Virtual pWWN 14-8Security Settings for FlexAttach Virtual pWWN 14-8FlexAttach Virtual pWWN CFS Distribution 14-9

Using the Server Admin FlexAttach Wizards 14-9Pre-Configuring FlexAttach for a New Server 14-9

Pre-Configuring FlexAttach for All the Ports 14-10Pre-Configuring FlexAttach for Each Port Individually 14-12

Moving a Server to Another Port or Switch 14-15Replacing a Server with Another Server 14-18

Replacing a Server on the Same Port 14-19Replacing the Server to a Different Port on the Same Switch 14-21Replacing with a Server on a Different Switch 14-22

Difference Between San Device Virtualization and FlexAttach Port Virtualization 14-23

C H A P T E R 15 Software Images 15-1

About Software Images 15-1Dependent Factors for Software Installation 15-1Selecting the Correct Software Images for Cisco MDS 9100 Series Switches 15-2Selecting the Correct Software Images for Cisco MDS 9200 Series Switches 15-2Selecting the Correct Software Images for Cisco MDS 9500 Family Switches 15-2

Essential Upgrade Prerequisites 15-3

Software Upgrade Methods 15-5Determining Software Compatibility 15-5

Automated Upgrades 15-6Benefits of Using the Software Install Wizard 15-6Recognizing Failure Cases 15-7

Using the Software Install Wizard 15-8Upgrading Services Modules 15-12xiiCisco MDS 9000 Family Fabric Manager Configuration Guide

OL-17256-03, Cisco MDS NX-OS Release 4.x

Nondisruptive Upgrades on Fabric and Modular Switches 15-13

ContentsSend documenta t ion comments to mdsfeedback -doc@c i sco .com

Preparing for a Nondisruptive Upgrade on Fabric and Modular Switches 15-13Performing a Nondisruptive Upgrade on a Fabric Switch 15-14

Maintaining Supervisor Modules 15-14Replacing Supervisor Modules 15-15Migrating from Supervisor-1 Modules to Supervisor-2 Modules 15-15Standby Supervisor Module Boot Variable Version 15-15Standby Supervisor Module Bootflash Memory 15-16Standby Supervisor Module Boot Alert 15-16

Installing Generation 2 Modules in Generation 1 Chassis 15-16

Replacing Modules 15-17

Default Settings 15-17

C H A P T E R 16 Managing Configuration Files 16-1

About Flash Devices 16-1Internal bootflash: 16-2

Formatting Flash Devices and File Systems 16-2

Using the File System 16-2Flash Files 16-3Creating a Directory 16-3Deleting an Existing File or Directory 16-4Copying Files 16-5Performing Other File Manipulation Tasks 16-7

Working with Configuration Files 16-7 Downloading Configuration Files to the Switch 16-7Saving the Configuration 16-8Saving the Running Configuration 16-8Saving Startup Configurations in the Fabric 16-9 Backing Up the Current Configuration 16-9

C H A P T E R 17 Configuring High Availability 17-1

About High Availability 17-1

Switchover Mechanisms 17-2HA Switchover Characteristics 17-2Initiating a Switchover 17-2

Switchover Guidelines 17-3

Process Restartability 17-3

Synchronizing Supervisor Modules 17-3xiiiCisco MDS 9000 Family Fabric Manager Configuration Guide

OL-17256-03, Cisco MDS NX-OS Release 4.x

ContentsSend documenta t ion comments to mdsfeedback -doc@c i sco .com

C H A P T E R 18 Managing System Hardware 18-1

Displaying Switch Hardware Inventory 18-1

Running the CompactFlash Report 18-2

Displaying the Switch Serial Number 18-3

Displaying Power Usage Information 18-3

Power Supply Configuration Modes 18-4Power Supply Configuration Guidelines 18-5

About Crossbar Management 18-7Operational Considerations When Removing Crossbars 18-9

Gracefully Shutting Down a Crossbar 18-9Backward Compatibility for Generation 1 Modules in Cisco MDS 9513 Directors 18-10

About Module Temperature 18-11Displaying Module Temperature 18-11

About Fan Modules 18-12

Default Settings 18-13

C H A P T E R 19 Managing Modules 19-1

About Modules 19-1Supervisor Modules 19-2Switching Modules 19-3Services Modules 19-3

Verifying the Status of a Module 19-3

Obtaining Supervisor Module Statistics 19-4

Checking the State of a Module 19-4

Reloading Modules 19-5Reloading a Switch 19-6Power Cycling Modules 19-6

Preserving the Module Configuration 19-7

Powering Off Switching Modules 19-8

Identifying Module LEDs 19-9

Managing SSMs and Supervisor Modules 19-13Considerations for Replacing SSMs and Supervisor Modules 19-13

Default Settings 19-13

P A R T 3 Switch ConfigurationxivCisco MDS 9000 Family Fabric Manager Configuration Guide

OL-17256-03, Cisco MDS NX-OS Release 4.x

ContentsSend documenta t ion comments to mdsfeedback -doc@c i sco .com

C H A P T E R 20 Configuring Interfaces 20-1

Common Interface Configuration 20-1

Fibre Channel Interfaces 20-2Generation 1 Interfaces Configuration Guidelines 20-2About Interface Modes 20-3

E Port 20-4F Port 20-5FL Port 20-5NP Ports 20-5TL Port 20-5TE Port 20-6TF Port 20-6TNP Port 20-6SD Port 20-6ST Port 20-6Fx Port 20-7B Port 20-7Auto Mode 20-7

About Interface States 20-7Administrative States 20-7Operational States 20-8Reason Codes 20-8

Graceful Shutdown 20-11Setting the Interface Administrative State 20-11Configuring Interface Modes 20-12Configuring Administrative Speeds 20-12

Autosensing 20-13Specifying a Port Owner 20-13Configuring Port Guard 20-16About Interface Descriptions 20-18About Frame Encapsulation 20-18About Receive Data Field Size 20-19Configuring Receive Data Field Size 20-19Identifying the Beacon LEDs 20-19

About Speed LEDs 20-20About Beacon Mode 20-20Configuring Beacon Mode 20-20About Bit Error Thresholds 20-21xvCisco MDS 9000 Family Fabric Manager Configuration Guide

OL-17256-03, Cisco MDS NX-OS Release 4.x

Switch Port Attribute Default Values 20-21

ContentsSend documenta t ion comments to mdsfeedback -doc@c i sco .com

About SFP Transmitter Types 20-22Displaying SFP Transmitter Types 20-22About Gathering Interface Statistics 20-22Gathering Interface Statistics 20-23

TL Ports for Private Loops 20-23About TL Ports 20-24Configuring TL Ports 20-25About TL Port ALPA Caches 20-25

Buffer Credits 20-26About Buffer-to-Buffer Credits 20-26Configuring Buffer-to-Buffer Credits 20-26About Performance Buffers 20-27Configuring Performance Buffers 20-27About Extended BB_credits 20-28

Extended BB_credits on Generation 1 Switching Modules 20-28Extended BB_credits on Generation 2 and Generation 3 Switching Modules 20-29

Configuring Extended BB_credits 20-29

Management Interfaces 20-29About Management Interfaces 20-30Configuring Management Interfaces 20-30

VSAN Interfaces 20-30About VSAN Interfaces 20-31Creating VSAN Interfaces 20-31

Default Settings 20-32

C H A P T E R 21 Configuring N Port Virtualization 21-1

About NPV 21-1NPV Mode 21-3NP Ports 21-3NP Links 21-3

Internal FLOGI Parameters 21-3Default Port Numbers 21-5NPV CFS Distribution over IP 21-5NPV Traffic Management 21-5

Auto 21-5Traffic Map 21-5Disruptive 21-6

Multiple VSAN Support 21-6xviCisco MDS 9000 Family Fabric Manager Configuration Guide

OL-17256-03, Cisco MDS NX-OS Release 4.x

NPV Guidelines and Requirements 21-6

ContentsSend documenta t ion comments to mdsfeedback -doc@c i sco .com

NPV Traffic Management Guidelines 21-7

Configuring NPV 21-7Configuring NPV Traffic Management 21-9

Configuring List of External Interfaces per Server Interface 21-9Enabling or Disabling the Global Policy for Disruptive Load Balancing 21-11

Using the NPV Setup Wizard 21-12DPVM Configuration 21-31NPV and Port Security 21-31

C H A P T E R 22 Configuring Generation 2 and Generation 3 Switching Modules 22-1

About Generations of Modules and Switches 22-1

Port Groups and Port Rate Modes 22-3Port Groups 22-3Port Rate Modes 22-4

Dedicated Rate Mode 22-6Shared Rate Mode 22-7Dedicated Rate Mode Configurations for the 8-Gbps Modules 22-7Reserving Bandwidth Quickly for the 8-Gbps Modules 22-8

Dynamic Bandwidth Management 22-9Out-of-Service Interfaces 22-10

Buffer Credit Allocation 22-10Buffer Pools 22-10BB_Credit Buffers for Switching Modules 22-13

48-Port 8-Gbps Fibre Channel Module BB_Credit Buffers 22-1424-Port 8-Gbps Fibre Channel Module BB_Credit Buffers 22-154/44-Port 8-Gbps Host-Optimized Fibre Channel Module BB_Credit Buffers 22-1648-Port 4-Gbps Fibre Channel Module BB_Credit Buffers 22-1724-Port 4-Gbps Fibre Channel Module BB_Credit Buffers 22-1818-Port Fibre Channel/4-Port Gigabit Ethernet Multiservice Module BB_Credit Buffers 22-1912-Port 4-Gbps Switching Module BB_Credit Buffers 22-204-Port 10-Gbps Switching Module BB_Credit Buffers 22-21

BB_Credit Buffers for Fabric Switches 22-22Cisco MDS 9134 Fabric Switch BB_Credit Buffers 22-22Cisco MDS 9124 Fabric Switch BB_Credit Buffers 22-23Cisco MDS 9222i Multiservice Modular Switch BB_Credit Buffers 22-23

Extended BB_Credits 22-23

Combining Generation 1, Generation 2, and Generation 3 Modules 22-24Port Indexes 22-24xviiCisco MDS 9000 Family Fabric Manager Configuration Guide

OL-17256-03, Cisco MDS NX-OS Release 4.x

PortChannels 22-26

ContentsSend documenta t ion comments to mdsfeedback -doc@c i sco .com

Configuring Module Interface Shared Resources 22-28Configuration Guidelines for 48-Port, 24-Port, and 4/44-Port 8-Gbps Fibre Channel Switching Modules 22-28

Migrating from Shared Mode to Dedicated Mode 22-29Migrating from Dedicated Mode to Shared Mode 22-29

Configuration Guidelines for 48-Port and 24-Port 4-Gbps Fibre Channel Switching Modules 22-30Migrating from Shared Mode to Dedicated Mode 22-30Migrating from Dedicated Mode to Shared Mode 22-30

Configuration Guidelines for 12-Port 4-Gbps Switching Module Interfaces 22-31Configuration Guidelines for 4-Port 10-Gbps Switching Module Interfaces 22-31Configuring Port Speed 22-32Configuring Rate Mode 22-33Configuring Oversubscription Ratio Restrictions 22-34

Disabling Restrictions on Oversubscription Ratios 22-35Enabling Restrictions on Oversubscription Ratios 22-37

Configuring Bandwidth Fairness 22-37Enabling Bandwidth Fairness 22-38Disabling Bandwidth Fairness 22-39Upgrade or Downgrade Scenario 22-40

Taking Interfaces Out of Service 22-40Releasing Shared Resources in a Port Group 22-41

Displaying SFP Diagnostic Information 22-41

Default Settings 22-43

C H A P T E R 23 Configuring PortChannels 23-1

About PortChannels 23-1About E PortChannels 23-2About F and TF PortChannels 23-3About PortChanneling and Trunking 23-3About Load Balancing 23-4About PortChannel Modes 23-6Configuration Guidelines and Restrictions 23-7

Generation 1 PortChannel Restrictions 23-7F and TF PortChannel Restrictions 23-8

PortChannel Configuration 23-9About PortChannel Configuration 23-10Configuring PortChannels Using the Wizard 23-11Configuring the PortChannel Mode 23-16xviiiCisco MDS 9000 Family Fabric Manager Configuration Guide

OL-17256-03, Cisco MDS NX-OS Release 4.x

About PortChannel Deletion 23-16

ContentsSend documenta t ion comments to mdsfeedback -doc@c i sco .com

Deleting PortChannels 23-16

Interfaces in a PortChannel 23-17About Interface Addition to a PortChannel 23-17

Compatibility Check 23-17Suspended and Isolated States 23-18

Adding an Interface to a PortChannel 23-18Forcing an Interface Addition 23-19About Interface Deletion from a PortChannel 23-20Deleting an Interface from a PortChannel 23-20

PortChannel Protocols 23-20About Channel Group Creation 23-21About Autocreation 23-22Enabling and Configuring Autocreation 23-23About Manually Configured Channel Groups 23-23Converting to Manually Configured Channel Groups 23-23

Verifying the PortChannel Configuration 23-24

Default Settings 23-25

C H A P T E R 24 Configuring Trunking 24-1

About Trunking 24-1Trunking E Ports 24-2Trunking F Ports 24-2Key Concepts 24-3

Trunking Guidelines and Restrictions 24-3Trunking Misconfiguration Examples 24-4Upgrade and Downgrade Restrictions 24-5Difference Between TE Ports and TF-TNP Ports 24-5

Enabling the Trunking Protocols 24-6About Trunking Protocols 24-6Enabling the F Port Trunking and Channeling Protocol 24-7

Configuring Trunk Mode and VSAN List 24-7About Trunk Modes 24-7Configuring Trunk Mode 24-8About Trunk-Allowed VSAN Lists and VF_IDs 24-9Configuring an Allowed-Active List of VSANs 24-11

Default Settings 24-11xixCisco MDS 9000 Family Fabric Manager Configuration Guide

OL-17256-03, Cisco MDS NX-OS Release 4.x

ContentsSend documenta t ion comments to mdsfeedback -doc@c i sco .com

C H A P T E R 25 Configuring Domain Parameters 25-1

Fibre Channel Domains 25-2About Domain Restart 25-3Restarting a Domain 25-3About Switch Priority 25-5Configuring Switch Priority 25-5About fcdomain Initiation 25-5Enabling or Disabling fcdomains 25-6Setting Fabric Names 25-6About Incoming RCFs 25-6Rejecting Incoming RCFs 25-7About Autoreconfiguring Merged Fabrics 25-7Enabling Autoreconfiguration 25-8

Domain IDs 25-8About Domain IDs 25-8Specifying Static or Preferred Domain IDs 25-10About Allowed Domain ID Lists 25-11Configuring Allowed Domain ID Lists 25-11About CFS Distribution of Allowed Domain ID Lists 25-12Enabling Distribution 25-12Locking the Fabric 25-13Committing Changes 25-13Discarding Changes 25-13Clearing a Fabric Lock 25-14Displaying Pending Changes 25-14Displaying Session Status 25-15About Contiguous Domain ID Assignments 25-15Enabling Contiguous Domain ID Assignments 25-15

FC IDs 25-16About Persistent FC IDs 25-17Enabling the Persistent FC ID Feature 25-17About Persistent FC ID Configuration 25-17Configuring Persistent FC IDs 25-18About Unique Area FC IDs for HBAs 25-19Configuring Unique Area FC IDs for an HBA 25-19About Persistent FC ID Selective Purging 25-21Purging Persistent FC IDs 25-21

Displaying fcdomain Statistics 25-22xxCisco MDS 9000 Family Fabric Manager Configuration Guide

OL-17256-03, Cisco MDS NX-OS Release 4.x

Default Settings 25-22

ContentsSend documenta t ion comments to mdsfeedback -doc@c i sco .com

P A R T 4 Fabric Configuration

C H A P T E R 26 Configuring and Managing VSANs 26-1

About VSANs 26-1VSANs Topologies 26-1VSAN Advantages 26-3VSANs Versus Zones 26-4

VSAN Configuration 26-5About VSAN Creation 26-6Creating VSANs Statically 26-6About Port VSAN Membership 26-8Assigning Static Port VSAN Membership 26-8About the Default VSAN 26-8About the Isolated VSAN 26-8Displaying Isolated VSAN Membership 26-9Operational State of a VSAN 26-9Mapping VSANs to VLANs 26-9

Mapping VSANs to VLANs Using Fabric Manager 26-10Mapping VSANs to VLANs Using Device Manager 26-11

About Static VSAN Deletion 26-12Deleting Static VSANs 26-13About Load Balancing 26-13Configuring Load Balancing 26-13About Interop Mode 26-14About FICON VSANs 26-14

Default Settings 26-14

C H A P T E R 27 SAN Device Virtualization 27-1

About SDV 27-1Key Concepts 27-3Automatic Failover and Fallback 27-4

Configuring SDV 27-4Configuring a Virtual Device 27-4Linking a Virtual Device with a Physical Device 27-7Resolving Fabric Merge Conflicts 27-8

SDV Requirements and Guidelines 27-9

Default Settings 27-10xxiCisco MDS 9000 Family Fabric Manager Configuration Guide

OL-17256-03, Cisco MDS NX-OS Release 4.x

ContentsSend documenta t ion comments to mdsfeedback -doc@c i sco .com

C H A P T E R 28 Creating Dynamic VSANs 28-1

DPVM 28-1About DPVM Configuration 28-2Configuring DPVM with the DPVM Wizard 28-2About DPVM Databases 28-5Configuring DPVM Config and Pending Databases 28-5Activating DPVM Config Databases 28-7Viewing the Pending Database 28-8About Autolearned Entries 28-8Enabling Autolearning 28-9Clearing Learned Entries 28-9

DPVM Database Distribution 28-10About DPVM Database Distribution 28-10Disabling DPVM Database Distribution 28-11About Locking the Fabric 28-11Locking the Fabric 28-11Committing Changes 28-12Discarding Changes 28-13Clearing a Locked Session 28-13

Database Merge Guidelines 28-13About Copying DPVM Databases 28-14Copying DPVM Databases 28-14Comparing Database Differences 28-14

Default Settings 28-15

C H A P T E R 29 Configuring Inter-VSAN Routing 29-1

Inter-VSAN Routing 29-1About IVR 29-2IVR Features 29-3IVR Terminology 29-3IVR Limits Summary 29-4Fibre Channel Header Modifications 29-4IVR NAT 29-5

IVR NAT Requirements and Guidelines 29-5IVR VSAN Topology 29-6

Autonomous Fabric ID 29-7IVR Interoperability 29-7

About the IVR Zone Wizard 29-7xxiiCisco MDS 9000 Family Fabric Manager Configuration Guide

OL-17256-03, Cisco MDS NX-OS Release 4.x

Configuring IVR Using the IVR Zone Wizard 29-7

ContentsSend documenta t ion comments to mdsfeedback -doc@c i sco .com

Manual IVR Configuration 29-9About IVR NAT and Auto Topology 29-10

Transit VSAN Guidelines 29-10Border Switch Guidelines 29-10

Configuring IVR NAT and IVR Auto Topology 29-11About AFIDs 29-11Configuring Default AFIDs 29-12Configuring Individual AFIDs 29-12Configuring IVR Without IVR NAT or Auto Topology 29-13

Domain ID Guidelines 29-13Transit VSAN Guidelines 29-14Border Switch Guidelines 29-14

Configuring IVR Without NAT 29-14Manually Creating the IVR Topology 29-15Activating a Manually Configured IVR Topology 29-16Clearing the Configured IVR Topology 29-17Migrating from IVR Auto Topology Mode to Manual Mode 29-17About IVR Virtual Domains 29-18Configuring IVR Virtual Domains 29-18About Persistent FC IDs for IVR 29-19Configuring Persistent FC IDs for IVR 29-19Configuring IVR Logging Levels 29-20

IVR Zones and IVR Zone Sets 29-21About IVR Zones 29-22

Automatic IVR Zone Creation 29-22Configuring IVR Zones and IVR Zone Sets 29-23About Activating Zone Sets and Using the force Option 29-26Recovering an IVR Full Zone Database 29-28Recovering an IVR Full Topology 29-29About LUNs in IVR Zoning 29-30Configuring LUNs in IVR Zoning 29-30About QoS in IVR Zones 29-30Configuring QoS for IVR Zones 29-30Renaming IVR Zones and IVR Zone Sets 29-30Clearing the IVR Zone Database 29-31Configuring IVR Using Read-Only Zoning 29-31System Image Downgrading Considerations 29-31

Database Merge Guidelines 29-31Resolving Database Merge Failures 29-33xxiiiCisco MDS 9000 Family Fabric Manager Configuration Guide

OL-17256-03, Cisco MDS NX-OS Release 4.x

ContentsSend documenta t ion comments to mdsfeedback -doc@c i sco .com

Default Settings 29-34

C H A P T E R 30 Configuring and Managing Zones 30-1

About Zoning 30-1Zoning Example 30-2Zone Implementation 30-3Zone Member Configuration Guidelines 30-4Active and Full Zone Set Considerations 30-4

Using the Quick Config Wizard 30-7

Zone Configuration 30-10About the Edit Local Full Zone Database Tool 30-11Configuring a Zone Using the Zone Configuration Tool 30-12Adding Zone Members 30-14

Zone Sets 30-15About Zone Set Creation 30-16Activating a Zone Set 30-17Deactivating a Zoneset 30-18Displaying Zone Membership Information 30-20About the Default Zone 30-20Configuring the Default Zone 30-21About FC Alias Creation 30-21Creating FC Aliases 30-22Adding Members to Aliases 30-22Converting Zone Members to pWWN-based Members 30-24Zone Enforcement 30-26

Zone Set Distribution 30-26Enabling Full Zone Set Distribution 30-26Enabling a One-Time Distribution 30-27About Recovering from Link Isolation 30-28Importing and Exporting Zone Sets 30-28

Zone Set Duplication 30-29Copying Zone Sets 30-30About Backing Up and Restoring Zones 30-30Backing Up Zones 30-31Restoring Zones 30-32Renaming Zones, Zone Sets, and Aliases 30-34Cloning Zones, Zone Sets, FC Aliases, and Zone Attribute Groups 30-35Migrating a Non-MDS Database 30-35xxivCisco MDS 9000 Family Fabric Manager Configuration Guide

OL-17256-03, Cisco MDS NX-OS Release 4.x

Clearing the Zone Server Database 30-36

ContentsSend documenta t ion comments to mdsfeedback -doc@c i sco .com

Advanced Zone Attributes 30-36About Zone-Based Traffic Priority 30-36Configuring Zone-Based Traffic Priority 30-37Configuring Default Zone QoS Priority Attributes 30-37Configuring the Default Zone Policy 30-38About Broadcast Zoning 30-38Configuring Broadcast Zoning 30-39About LUN Zoning 30-40Configuring a LUN-Based Zone 30-40Assigning LUNs to Storage Subsystems 30-41About Read-Only Zones 30-41Configuring Read-Only Zones 30-42

Displaying Zone Information 30-42

Enhanced Zoning 30-43About Enhanced Zoning 30-43Changing from Basic Zoning to Enhanced Zoning 30-44Changing from Enhanced Zoning to Basic Zoning 30-44Enabling Enhanced Zoning 30-45Creating Attribute Groups 30-45Merging the Database 30-45Analyzing a Zone Merge 30-46Configuring Zone Merge Control Policies 30-47

Compacting the Zone Database for Downgrading 30-47

Default Settings 30-48

C H A P T E R 31 Distributing Device Alias Services 31-1

About Device Aliases 31-1

About Device Alias Modes 31-1Changing Mode Settings 31-2Device Alias Mode Distribution 31-2Merging Device Alias 31-2Resolving Merge and Device Alias Mode Mismatch 31-3Device Alias Features 31-3Device Alias Requirements 31-3Zone Aliases Versus Device Aliases 31-4

Device Alias Databases 31-4About Device Alias Distribution 31-4Distributing the Device Alias Database 31-5xxvCisco MDS 9000 Family Fabric Manager Configuration Guide

OL-17256-03, Cisco MDS NX-OS Release 4.x

About Creating a Device Alias 31-5

ContentsSend documenta t ion comments to mdsfeedback -doc@c i sco .com

Creating a Device Alias 31-6Committing Changes 31-6Discarding Changes 31-7

Legacy Zone Alias Conversion 31-7Using Device Aliases or FC Aliases 31-8Device Alias Statistics Cleanup 31-8

Database Merge Guidelines 31-8

Default Settings 31-9

C H A P T E R 32 Configuring Fibre Channel Routing Services and Protocols 32-1

About FSPF 32-2FSPF Examples 32-2

Fault Tolerant Fabric 32-2Redundant Links 32-3Fail-Over Scenarios for PortChannels and FSPF Links 32-3

FSPF Global Configuration 32-4About SPF Computational Hold Times 32-4About Link State Records 32-4Configuring FSPF on a VSAN 32-5Resetting FSPF to the Default Configuration 32-5Enabling or Disabling FSPF 32-6

FSPF Interface Configuration 32-6About FSPF Link Cost 32-6Configuring FSPF Link Cost 32-7About Hello Time Intervals 32-7Configuring Hello Time Intervals 32-8About Dead Time Intervals 32-8Configuring Dead Time Intervals 32-8About Retransmitting Intervals 32-8Configuring Retransmitting Intervals 32-9About Disabling FSPF for Specific Interfaces 32-9Disabling FSPF for Specific Interfaces 32-9Displaying the FSPF Database 32-10Viewing FSPF Statistics 32-11

FSPF Routes 32-12About Fibre Channel Routes 32-12Configuring Fibre Channel Routes 32-12About Broadcast and Multicast Routing 32-14xxviCisco MDS 9000 Family Fabric Manager Configuration Guide

OL-17256-03, Cisco MDS NX-OS Release 4.x

About Multicast Root Switch 32-14

ContentsSend documenta t ion comments to mdsfeedback -doc@c i sco .com

Setting the Multicast Root Switch 32-14

In-Order Delivery 32-15About Reordering Network Frames 32-15About Reordering PortChannel Frames 32-16About Enabling In-Order Delivery 32-17Enabling In-Order Delivery Globally 32-18Enabling In-Order Delivery for a VSAN 32-18Configuring the Drop Latency Time 32-18

Default Settings 32-19

C H A P T E R 33 Dense Wavelength Division Multiplexing 33-1

About DWDM 33-1

Viewing DWDM Links 33-1

C H A P T E R 34 Managing FLOGI, Name Server, FDMI, and RSCN Databases 34-1

FLOGI 34-1Displaying FLOGI Details 34-1

Name Server Proxy 34-2About Registering Name Server Proxies 34-2Registering Name Server Proxies 34-2About Rejecting Duplicate pWWN 34-3Rejecting Duplicate pWWNs 34-3About Name Server Database Entries 34-3Viewing Name Server Database Entries 34-3

FDMI 34-4

Displaying FDMI 34-4

RSCN 34-5About RSCN Information 34-5Displaying RSCN Information 34-5About the multi-pid Option 34-6Configuring the multi-pid Option 34-6Clearing RSCN Statistics 34-7RSCN Timer Configuration Distribution Using CFS 34-7Configuring the RSCN Timer with CFS 34-8

Default Settings 34-8

C H A P T E R 35 Discovering SCSI Targets 35-1xxviiCisco MDS 9000 Family Fabric Manager Configuration Guide

OL-17256-03, Cisco MDS NX-OS Release 4.x

About SCSI LUN Discovery 35-1

ContentsSend documenta t ion comments to mdsfeedback -doc@c i sco .com

About Starting SCSI LUN Discovery 35-1Starting SCSI LUN Discovery 35-2About Initiating Customized Discovery 35-2Initiating Customized Discovery 35-2

Displaying SCSI LUN Information 35-3

C H A P T E R 36 Configuring FICON 36-1

About FICON 36-1FICON Requirements 36-2MDS-Specific FICON Advantages 36-3

Fabric Optimization with VSANs 36-3FCIP Support 36-5PortChannel Support 36-5VSANs for FICON and FCP Mixing 36-5Cisco MDS-Supported FICON Features 36-5

FICON Cascading 36-7FICON VSAN Prerequisites 36-7

FICON Port Numbering 36-8Default FICON Port Numbering Scheme 36-8Port Addresses 36-11Implemented and Unimplemented Port Addresses 36-11About the Reserved FICON Port Numbering Scheme 36-11Installed and Uninstalled Ports 36-12FICON Port Numbering Guidelines 36-12Assigning FICON Port Numbers to Slots 36-13About Port Numbers for FCIP and PortChannel 36-13Reserving FICON Port Numbers for FCIP and PortChannel Interfaces 36-13FC ID Allocation 36-14

Configuring FICON 36-15About Enabling FICON on a VSAN 36-15Setting Up a Basic FICON Configuration 36-16Manually Enabling FICON on a VSAN 36-18Deleting FICON VSANs 36-18Suspending a FICON VSAN 36-19Configuring the code-page Option 36-19Assigning FC ID Last Byte 36-20Allowing the Host to Move the Switch Offline 36-21Allowing the Host to Change FICON Port Parameters 36-22xxviiiCisco MDS 9000 Family Fabric Manager Configuration Guide

OL-17256-03, Cisco MDS NX-OS Release 4.x

Allowing the Host to Control the Timestamp 36-22

ContentsSend documenta t ion comments to mdsfeedback -doc@c i sco .com

Configuring SNMP Control of FICON Parameters 36-22FICON Information Refresh 36-23About FICON Device Allegiance 36-23Automatically Saving the Running Configuration 36-23

Configuring FICON Ports 36-24Configuring Port Blocking 36-25Viewing ESCON Style Ports 36-26Port Prohibiting 36-26

Configuring Port Prohibiting 36-26Assigning a Port Address Name 36-27About RLIR 36-27Displaying RLIR Information 36-27

FICON Configuration Files 36-28About FICON Configuration Files 36-29Applying the Saved Configuration Files to the Running Configuration 36-29Editing FICON Configuration Files 36-30Displaying FICON Configuration Files 36-30Copying FICON Configuration Files 36-31

Port Swapping 36-31About Port Swapping 36-32Swapping Ports 36-33

FICON Tape Acceleration 36-33Configuring FICON Tape Acceleration 36-35

CUP In-Band Management 36-37

Calculating FICON Flow Load Balance 36-39

Displaying FICON Information 36-40Receiving FICON Alerts 36-41Displaying FICON Port Address Information 36-41Displaying IPL File Information 36-41Viewing the History Buffer 36-41

Default Settings 36-42

C H A P T E R 37 Advanced Features and Concepts 37-1

Common Information Model 37-1SSL Certificate Requirements and Format 37-1

Fibre Channel Time Out Values 37-2Timer Configuration Across All VSANs 37-2Timer Configuration Per-VSAN 37-3xxixCisco MDS 9000 Family Fabric Manager Configuration Guide

OL-17256-03, Cisco MDS NX-OS Release 4.x

ContentsSend documenta t ion comments to mdsfeedback -doc@c i sco .com

About fctimer Distribution 37-4Enabling or Disabling fctimer Distribution 37-4Database Merge Guidelines 37-5

World Wide Names 37-5Displaying WWN Information 37-6Link Initialization WWN Usage 37-6Configuring a Secondary MAC Address 37-6

FC ID Allocation for HBAs 37-7Default Company ID list 37-8Verifying the Company ID Configuration 37-8

Switch Interoperability 37-8About Interop Mode 37-9Configuring Interop Mode 1 37-11Verifying Interoperating Status 37-12

Default Settings 37-13

P A R T 5 Security

C H A P T E R 38 Configuring FIPS 38-1

Configuration Guidelines 38-1

Enabling FIPS Mode 38-2

FIPS Self-Tests 38-3

C H A P T E R 39 Configuring Users and Common Roles 39-1

Role-Based Authorization 39-1About Roles 39-2Configuring Roles and Profiles 39-2Deleting Common Roles 39-3About the VSAN Policy 39-3Modifying the VSAN Policy 39-4About Rules and Features for Each Role 39-4Modifying Rules 39-5Displaying Role-Based Information 39-7

Role Distributions 39-7About Role Databases 39-7Locking the Fabric 39-8Committing the Changes 39-8xxxCisco MDS 9000 Family Fabric Manager Configuration Guide

OL-17256-03, Cisco MDS NX-OS Release 4.x

Discarding the Changes 39-9

ContentsSend documenta t ion comments to mdsfeedback -doc@c i sco .com

Enabling Distribution 39-9Clearing Sessions 39-9Database Merge Guidelines 39-10Displaying Roles When Distribution is Enabled 39-10

User Accounts 39-10About Users 39-11Configuring Users 39-12Changing Administrator Password using Fabric Manager 39-13Deleting a User 39-15Displaying User Account Information 39-15

SSH Services 39-15About SSH 39-16About the SSH Server Key Pair 39-16Generating the SSH Server Key Pair 39-17Overwriting a Generated Key Pair 39-18Enabling SSH or Telnet Service 39-18SSH Authentication Using Digital Certificates 39-19Creating or Updating Users 39-19

Recovering the Administrator Password 39-20

Configuring Cisco ACS Servers 39-21

Default Settings 39-24

C H A P T E R 40 Configuring SNMP 40-1

About SNMP Security 40-1SNMP Version 1 and Version 2c 40-2SNMP Version 3 40-2Assigning SNMP Switch Contact and Location Information 40-2

SNMPv3 CLI User Management and AAA Integration 40-2CLI and SNMP User Synchronization 40-3Restricting Switch Access 40-3Group-Based SNMP Access 40-3

Creating and Modifying Users 40-4About AES Encryption-Based Privacy 40-4Enforcing SNMPv3 Message Encryption 40-5Assigning SNMPv3 Users to Multiple Roles 40-6Adding Communities 40-7Deleting a Community String 40-7

SNMP Trap and Inform Notifications 40-8xxxiCisco MDS 9000 Family Fabric Manager Configuration Guide

OL-17256-03, Cisco MDS NX-OS Release 4.x

Configuring SNMPv2c Notifications 40-8

ContentsSend documenta t ion comments to mdsfeedback -doc@c i sco .com

Configuring SNMPv3 Notifications 40-9Enabling SNMP Notifications 40-9Configuring the Notification Target User 40-11Configuring Event Security 40-11Viewing the SNMP Events Log 40-12

Default Settings 40-12

C H A P T E R 41 Configuring RADIUS and TACACS+ 41-1

Switch Management Security 41-1Fabric Manager Security Options 41-2SNMP Security Options 41-2

Switch AAA 41-2Authentication 41-3Authorization 41-3Accounting 41-3Remote AAA Services 41-4Remote Authentication Guidelines 41-4Server Groups 41-4AAA Configuration Options 41-4AAA Server Monitoring 41-5Authentication and Authorization Process 41-6

Configuring RADIUS Server Monitoring Parameters 41-7About RADIUS Server Default Configuration 41-8About the Default RADIUS Server Encryption Type and Preshared Key 41-8Configuring the Default RADIUS Server Encryption Type and Preshared Key 41-8Setting the Default RADIUS Server Timeout Interval and Retransmits 41-9 About RADIUS Servers 41-9Configuring a RADIUS Server 41-10

Configuring the Test Idle Timer 41-11Configuring Test User Name 41-11

About Validating a RADIUS Server 41-11Periodically Validating a RADIUS Server 41-11Displaying RADIUS Server Statistics 41-12About Users Specifying a RADIUS Server at Login 41-12Allowing Users to Specify a RADIUS Server at Login 41-12About Vendor-Specific Attributes 41-13

VSA Format 41-13Specifying SNMPv3 on AAA Servers 41-13xxxiiCisco MDS 9000 Family Fabric Manager Configuration Guide

OL-17256-03, Cisco MDS NX-OS Release 4.x

Configuring TACACS+ Server Monitoring Parameters 41-14

ContentsSend documenta t ion comments to mdsfeedback -doc@c i sco .com

About TACACS+ 41-14About TACACS+ Server Default Configuration 41-14About the Default TACACS+ Server Encryption Type and Preshared Key 41-15 Setting the Default TACACS+ Server Encryption Type and Preshared Key 41-15 Setting the Default TACACS+ Server Timeout Interval and Retransmits 41-15 About TACACS+ Servers 41-16Configuring a TACACS+ Server 41-16About Validating a TACACS+ Server 41-17

Periodically Validating a TACACS+ Server 41-18Displaying TACACS+ Server Statistics 41-18About Users Specifying a TACACS+ Server at Login 41-18Allowing Users to Specify a TACACS+ Server at Login 41-18About Custom Attributes for Roles 41-19Supported TACACS+ Servers 41-19

Server Groups 41-19About Configuring Server Groups 41-20Configuring Server Groups 41-20About Bypassing a Nonresponsive Server 41-21

AAA Server Distribution 41-21Enabling AAA Server Distribution 41-22Starting a Distribution Session on a Switch 41-22Displaying the Session Status 41-23Displaying the Configuration to be Distributed 41-23Committing the Distribution 41-23Discarding the Distribution Session 41-23Clearing Sessions 41-24Merge Guidelines for RADIUS and TACACS+ Configurations 41-24

MSCHAP Authentication 41-24About Enabling MSCHAP 41-25Enabling MSCHAP Authentication 41-25

Local AAA Services 41-26

Configuring Cisco Access Control Servers 41-26

Default Settings 41-30

C H A P T E R 42 Configuring IPv4 and IPv6 Access Control Lists 42-1

IPv4-ACL and IPv6-ACL Configuration Guidelines 42-2

About Filter Contents 42-2Protocol Information 42-2xxxiiiCisco MDS 9000 Family Fabric Manager Configuration Guide

OL-17256-03, Cisco MDS NX-OS Release 4.x

Address Information 42-3

ContentsSend documenta t ion comments to mdsfeedback -doc@c i sco .com

Port Information 42-3ICMP Information 42-4ToS Information 42-5

Creating IPv4-ACLs or IPv6-ACLs with the IP-ACL Wizard 42-5Creating IPv4-ACLs or IPv6-ACLs in Device Manager 42-6Removing IP Filters from an Existing IPv4-ACL or IPv6-ACL 42-8Deleting IP-ACLs 42-9

Reading the IP-ACL Log Dump 42-9

Applying an IP-ACL to an Interface 42-10

Applying an IP-ACL to mgmt0 42-11

Example IP-ACL Configuration 42-12

C H A P T E R 43 Configuring Certificate Authorities and Digital Certificates 43-1

About CAs and Digital Certificates 43-1Purpose of CAs and Digital Certificates 43-2Trust Model, Trust Points, and Identity CAs 43-2RSA Key-Pairs and Identity Certificates 43-2Multiple Trusted CA Support 43-3PKI Enrollment Support 43-4Manual Enrollment Using Cut-and-Paste Method 43-4Multiple RSA Key-Pair and Identity CA Support 43-4Peer Certificate Verification 43-5CRL Downloading, Caching, and Checking Support 43-5OCSP Support 43-5Import and Export Support for Certificates and Associated Key Pairs 43-5

Configuring CAs and Digital Certificates 43-6Configuring the Host Name and IP Domain Name 43-6Generating an RSA Key-Pair 43-6Creating a Trust Point CA Association 43-8Copying Files to Bootflash 43-9Authenticating the CA 43-10

Confirming CA Authentication 43-11Configuring Certificate Revocation Checking Methods 43-12Generating Certificate Requests 43-12Installing Identity Certificates 43-13Saving Your Configuration 43-13Ensuring Trust Point Configurations Persist Across Reboots 43-14Monitoring and Maintaining CA and Certificates Configuration 43-14xxxivCisco MDS 9000 Family Fabric Manager Configuration Guide

OL-17256-03, Cisco MDS NX-OS Release 4.x

Exporting and Importing Identity Information in PKCS#12 Format 43-14

ContentsSend documenta t ion comments to mdsfeedback -doc@c i sco .com

Configuring a CRL 43-15Deleting Certificates from the CA Configuration 43-16Deleting RSA Key-Pairs from Your Switch 43-16

Example Configurations 43-17Configuring Certificates on the MDS Switch 43-17Downloading a CA Certificate 43-19Requesting an Identity Certificate 43-24Revoking a Certificate 43-30Generating and Publishing the CRL 43-33Downloading the CRL 43-34Importingthe CRL 43-36

Maximum Limits 43-36

Default Settings 43-37

C H A P T E R 44 Configuring IPsec Network Security 44-1

About IPsec 44-2

About IKE 44-3

IPsec Prerequisites 44-3

Using IPsec 44-4IPsec Compatibility 44-4IPsec and IKE Terminology 44-5Supported IPsec Transforms and Algorithms 44-6Supported IKE Transforms and Algorithms 44-6

IPsec Digital Certificate Support 44-7Implementing IPsec Without CAs and Digital Certificates 44-7Implementing IPsec with CAs and Digital Certificates 44-8How CA Certificates Are Used by IPsec Devices 44-9

Configuring IPsec Using FCIP Wizard 44-10

Manually Configuring IPsec and IKE 44-13About IKE Initialization 44-13About the IKE Domain 44-13About IKE Tunnels 44-13About IKE Policy Negotiation 44-14Configuring an IKE Policy 44-15

Optional IKE Parameter Configuration 44-16Configuring the Keepalive Time for a Peer 44-17Configuring the Initiator Version 44-18xxxvCisco MDS 9000 Family Fabric Manager Configuration Guide

OL-17256-03, Cisco MDS NX-OS Release 4.x

Clearing IKE Tunnels or Domains 44-20

ContentsSend documenta t ion comments to mdsfeedback -doc@c i sco .com

Refreshing SAs 44-20

Crypto IPv4-ACLs 44-21About Crypto IPv4-ACLs 44-22

Crypto IPv4-ACL Guidelines 44-22Mirror Image Crypto IPv4-ACLs 44-24The any Keyword in Crypto IPv4-ACLs 44-25

Creating Crypto IPv4-ACLs 44-25About Transform Sets in IPsec 44-25Configuring Transform Sets 44-26About Crypto Map Entries 44-28

SA Establishment Between Peers 44-28Crypto Map Configuration Guidelines 44-29

Creating Crypto Map Entries 44-29About SA Lifetime Negotiation 44-30Setting the SA Lifetime 44-31About the AutoPeer Option 44-32Configuring the AutoPeer Option 44-33About Perfect Forward Secrecy 44-34Configuring Perfect Forward Secrecy 44-35About Crypto Map Set Application 44-36Applying a Crypto Map Set 44-36

IPsec Maintenance 44-37

Global Lifetime Values 44-37

Default Settings 44-39

C H A P T E R 45 Configuring FC-SP and DHCHAP 45-1

About Fabric Authentication 45-1

DHCHAP 45-2DHCHAP Compatibility with Existing Cisco MDS Features 45-3About Enabling DHCHAP 45-4Enabling DHCHAP 45-4About DHCHAP Authentication Modes 45-5Configuring the DHCHAP Mode 45-5About the DHCHAP Hash Algorithm 45-6Configuring the DHCHAP Hash Algorithm 45-6About the DHCHAP Group Settings 45-7Configuring the DHCHAP Group Settings 45-7About the DHCHAP Password 45-7xxxviCisco MDS 9000 Family Fabric Manager Configuration Guide

OL-17256-03, Cisco MDS NX-OS Release 4.x

Configuring DHCHAP Passwords for the Local Switch 45-8

ContentsSend documenta t ion comments to mdsfeedback -doc@c i sco .com

About Password Configuration for Remote Devices 45-8Configuring DHCHAP Passwords for Remote Devices 45-8About the DHCHAP Timeout Value 45-9Configuring the DHCHAP Timeout Value 45-9Configuring DHCHAP AAA Authentication 45-10Enabling FC-SP on ISLs 45-10

Default Settings 45-10

C H A P T E R 46 Configuring Port Security 46-1

About Port Security 46-1Port Security Enforcement 46-2About Auto-Learning 46-2Port Security Activation 46-3

Port Security Configuration Guidelines 46-3Configuring Port Security with Auto-Learning and CFS Distribution 46-3Configuring Port Security with Auto-Learning without CFS 46-4Configuring Port Security with Manual Database Configuration 46-4Configuring Port Security Using Wizard 46-5

Prerequisites 46-5

Enabling Port Security 46-8

Port Security Activation 46-9

Activating Port Security 46-9Database Activation Rejection 46-10Forcing Port Security Activation 46-10Database Reactivation 46-11Copying an Active Database to the Config Database 46-11Displaying Activated Port Security Settings 46-12Displaying Port Security Statistics 46-12Displaying Port Security Violations 46-12

Auto-learning 46-12About Enabling Auto-learning 46-13Enabling Auto-learning 46-13Disabling Auto-learning 46-13Auto-Learning Device Authorization 46-14Authorization Scenarios 46-14

Port Security Manual Configuration 46-15About WWN Identification 46-16Adding Authorized Port Pairs 46-16xxxviiCisco MDS 9000 Family Fabric Manager Configuration Guide

OL-17256-03, Cisco MDS NX-OS Release 4.x

Deleting Port Security Setting 46-17

ContentsSend documenta t ion comments to mdsfeedback -doc@c i sco .com

Port Security Configuration Distribution 46-17Enabling Distribution 46-18Locking the Fabric 46-18Committing the Changes 46-19Activation and Auto-learning Configuration Distribution 46-19

Database Merge Guidelines 46-20

Database Interaction 46-20Database Scenarios 46-21Port Security Database Copy 46-22Port Security Database Deletion 46-22Port Security Database Cleanup 46-23

Default Settings 46-23

C H A P T E R 47 Configuring Fabric Binding 47-1

About Fabric Binding 47-1Licensing Requirements 47-1Port Security Versus Fabric Binding 47-1Fabric Binding Enforcement 47-2

Fabric Binding Configuration 47-3Enabling Fabric Binding 47-3Configuring Switch WWN List 47-3Fabric Binding Activation 47-4

Forcing Fabric Binding Activation 47-5Saving Fabric Binding Configurations 47-5Clearing the Fabric Binding Statistics 47-6Deleting the Fabric Binding Database 47-6Verifying Fabric Binding Configurations 47-6

Default Settings 47-9

P A R T 6 IP Services

C H A P T E R 48 Configuring FCIP 48-1

About FCIP 48-1FCIP Concepts 48-2

FCIP and VE Ports 48-2FCIP Links 48-3FCIP Profiles 48-4FCIP Interfaces 48-4xxxviiiCisco MDS 9000 Family Fabric Manager Configuration Guide

OL-17256-03, Cisco MDS NX-OS Release 4.x

FCIP High-Availability Solutions 48-4

ContentsSend documenta t ion comments to mdsfeedback -doc@c i sco .com

Fibre Channel PortChannels 48-5FSPF 48-5VRRP 48-6Ethernet PortChannels 48-6

Ethernet PortChannels and Fibre Channel PortChannels 48-7

Configuring FCIP 48-7Enabling FCIP 48-8

Using the FCIP Wizard 48-8Basic FCIP Configuration 48-15

Creating FCIP Profiles 48-15Creating FCIP Links 48-16

Verifying Interfaces and Extended Link Protocol 48-16Checking Trunk Status 48-17Launching Cisco Transport Controller 48-17Launching Cisco Transport Controller 48-17Advanced FCIP Profile Configuration 48-18

Configuring TCP Parameters 48-19Advanced FCIP Interface Configuration 48-21

Configuring Peers 48-22Peer IP Address 48-22Active Connections 48-25Number of TCP Connections 48-25Time Stamp Control 48-25FCIP B Port Interoperability Mode 48-25Quality of Service 48-28

Configuring E Ports 48-28Advanced FCIP Features 48-29

FCIP Write Acceleration 48-29Configuring FCIP Write Acceleration 48-31FCIP Tape Acceleration 48-32Configuring FCIP Tape Acceleration 48-36FCIP Compression 48-37

Default Settings 48-38

C H A P T E R 49 Configuring the SAN Extension Tuner 49-1

About the SAN Extension Tuner 49-1SAN Extension Tuner Setup 49-2Data Pattern 49-3xxxixCisco MDS 9000 Family Fabric Manager Configuration Guide

OL-17256-03, Cisco MDS NX-OS Release 4.x

License Prerequisites 49-3

ContentsSend documenta t ion comments to mdsfeedback -doc@c i sco .com

Configuring the SAN Extension Tuner 49-3Tuning the FCIP Link 49-4

Using the SAN Extension Tuner Wizard 49-4

Default Settings 49-7

C H A P T E R 50 Configuring iSCSI 50-1

About iSCSI 50-1About iSCSI Configuration Limits 50-4

Configuring iSCSI 50-4Enabling iSCSI 50-4Creating iSCSI Interfaces 50-5Using the iSCSI Wizard 50-5Presenting Fibre Channel Targets as iSCSI Targets 50-7

Dynamic Mapping 50-8Static Mapping 50-10iSCSI Virtual Target Configuration Examples 50-12

Presenting iSCSI Hosts as Virtual Fibre Channel Hosts 50-14Initiator Identification 50-14Initiator Presentation Modes 50-14VSAN Membership for iSCSI 50-22Example of VSAN Membership for iSCSI Devices 50-23Advanced VSAN Membership for iSCSI Hosts 50-24

iSCSI Access Control 50-24Fibre Channel Zoning-Based Access Control 50-25iSCSI-Based Access Control 50-26Enforcing Access Control 50-27

iSCSI Session Authentication 50-28Authentication Mechanism 50-29Local Authentication 50-30Restricting iSCSI Initiator Authentication 50-30Mutual CHAP Authentication 50-30Configuring an iSCSI RADIUS Server 50-31

iSCSI Immediate Data and Unsolicited Data Features 50-31iSCSI Interface Advanced Features 50-32

iSCSI Listener Port 50-32TCP Tuning Parameters 50-32QoS 50-32iSCSI Routing Modes 50-33xlCisco MDS 9000 Family Fabric Manager Configuration Guide

OL-17256-03, Cisco MDS NX-OS Release 4.x

Configuring iSLB 50-35

ContentsSend documenta t ion comments to mdsfeedback -doc@c i sco .com

About iSLB Configuration Limits 50-36iSLB Configuration Prerequisites 50-36About iSLB Initiators 50-37Configuring iSLB Using Device Manager 50-37Configuring iSLB Initiators 50-39

Assigning WWNs to iSLB Initiators 50-39Making the Dynamic iSLB Initiator WWN Mapping Static 50-40Assigning VSAN Membership for iSLB Initiators 50-40Configuring Metric for Load Balancing 50-40Configuring iSLB Initiator Targets 50-41Configuring and Activating Zones for iSLB Initiators and Initiator Targets 50-42Configuring iSLB Session Authentication 50-43

About Load Balancing Using VRRP 50-43Changing iSCSI Interface Parameters and the Impact on Load Balancing 50-45VRRP Load Balancing Algorithm For Selecting Gigabit Ethernet Interfaces 50-45

Configuring Load Balancing Using VRRP 50-45About iSLB Configuration Distribution Using CFS 50-46Distributing the iSLB Configuration Using CFS 50-47

Enabling iSLB Configuration Distribution 50-47Locking the Fabric 50-48Committing Changes to the Fabric 50-48Discarding Pending Changes 50-48Clearing a Fabric Lock 50-49CFS Merge Process 50-49iSLB CFS Merge Status Conflicts 50-49

iSCSI High Availability 50-50Transparent Target Failover 50-50

iSCSI High Availability with Host Running Multi-Path Software 50-50iSCSI HA with Host Not Having Any Multi-Path Software 50-51LUN Trespass for Storage Port Failover 50-53

Multiple IPS Ports Connected to the Same IP Network 50-53VRRP-Based High Availability 50-54Ethernet PortChannel-Based High Availability 50-55

iSCSI Authentication Setup Guidelines and Scenarios 50-56No Authentication 50-56CHAP with Local Password Database 50-57CHAP with External RADIUS Server 50-57iSCSI Transparent Mode Initiator 50-58Target Storage Device Requiring LUN Mapping 50-62xliCisco MDS 9000 Family Fabric Manager Configuration Guide

OL-17256-03, Cisco MDS NX-OS Release 4.x

ContentsSend documenta t ion comments to mdsfeedback -doc@c i sco .com

iSNS 50-67About iSNS Client Functionality 50-67Creating an iSNS Client Profile 50-68About iSNS Server Functionality 50-69

Example Scenario 50-70Configuring iSNS Servers 50-71

Enabling the iSNS Server 50-71iSNS Configuration Distribution 50-71Configuring the ESI Retry Count 50-72Configuring the Registration Period 50-72iSNS Client Registration and Deregistration 50-72Target Discovery 50-72

iSNS Cloud Discovery 50-73About Cloud Discovery 50-73Configuring iSNS Cloud Discovery 50-74

Enabling iSNS Cloud Discovery 50-74Initiating On-Demand iSNS Cloud Discovery 50-74Configuring Automatic iSNS Cloud Discovery 50-75Configuring iSNS Cloud Discovery Distribution 50-75

Default Settings 50-75

C H A P T E R 51 Configuring IP Services 51-1

Traffic Management Services 51-2

Management Interface Configuration 51-2

Default Gateway 51-3About the Default Gateway 51-3Configuring the Default Gateway 51-3

IPv4 Default Network Configuration 51-4

IPFC 51-5IPFC Configuration Guidelines 51-5

IPv4 Static Routes 51-5

Overlay VSANs 51-6About Overlay VSANs 51-6Configuring Overlay VSANs 51-6

Multiple VSAN Configuration 51-7

Virtual Router Redundancy Protocol 51-8About VRRP 51-9xliiCisco MDS 9000 Family Fabric Manager Configuration Guide

OL-17256-03, Cisco MDS NX-OS Release 4.x

Configuring VRRP 51-10

ContentsSend documenta t ion comments to mdsfeedback -doc@c i sco .com

Adding and Deleting Virtual Router 51-10Virtual Router Initiation 51-11Adding Virtual Router IP Addresses 51-11Setting the Priority for the Virtual Router 51-11Setting the time Interval for Advertisement Packets 51-11Configuring or Enabling Priority Preemption 51-11Setting Virtual Router Authentication 51-12Tracking the Interface Priority 51-12

DNS Server Configuration 51-12

Default Settings 51-13

C H A P T E R 52 Configuring IP Storage 52-1

Services Modules 52-1Module Status Verification 52-2IPS Module Upgrade 52-3MPS-14/2 Module Upgrade 52-3

Supported Hardware 52-3

Configuring Gigabit Ethernet Interfaces for IPv4 52-4Basic Gigabit Ethernet Configuration 52-4

Configuring Interface Descriptions 52-5Configuring Beacon Mode 52-5Configuring Autonegotiation 52-5Configuring the MTU Frame Size 52-5Configuring Promiscuous Mode 52-6

About VLANs for Gigabit Ethernet 52-6Interface Subnet Requirements 52-6Verifying Gigabit Ethernet Connectivity 52-7Gigabit Ethernet IPv4-ACL Guidelines 52-7

Configuring Gigabit Ethernet High Availability 52-8VRRP for iSCSI and FCIP Services 52-8Configuring VRRP for Gigabit Ethernet Interfaces 52-9About Ethernet PortChannel Aggregation 52-9Configuring Ethernet PortChannels 52-10

Configuring CDP 52-10

Default Settings 52-10

C H A P T E R 53 Configuring IPv4 for Gigabit Ethernet Interfaces 53-1

About IPv4 53-1xliiiCisco MDS 9000 Family Fabric Manager Configuration Guide

OL-17256-03, Cisco MDS NX-OS Release 4.x

ContentsSend documenta t ion comments to mdsfeedback -doc@c i sco .com

Basic Gigabit Ethernet Configuration for IPv4 53-2Configuring Interface Descriptions 53-3Configuring Beacon Mode 53-3Configuring Autonegotiation 53-3Configuring the MTU Frame Size 53-3Configuring Promiscuous Mode 53-4

VLANs 53-4About VLANs for Gigabit Ethernet 53-4Configuring the VLAN Subinterface 53-5Interface Subnet Requirements 53-5

IPv4-ACLs 53-6Gigabit Ethernet IPv4-ACL Guidelines 53-6

Default Settings 53-6

C H A P T E R 54 Configuring IPv6 for Gigabit Ethernet Interfaces 54-1

About IPv6 54-1Extended IPv6 Address Space for Unique Addresses 54-2IPv6 Address Formats 54-2IPv6 Address Prefix Format 54-3IPv6 Address Type: Unicast 54-3

Global Addresses 54-3Link-Local Address 54-4

IPv6 Address Type: Multicast 54-5ICMP for IPv6 54-6Path MTU Discovery for IPv6 54-7IPv6 Neighbor Discovery 54-7

IPv6 Neighbor Solicitation and Advertisement Messages 54-7Router Discovery 54-9IPv6 Stateless Autoconfiguration 54-9Dual IPv4 and IPv6 Protocol Stacks 54-10

Configuring Basic Connectivity for IPv6 54-11Configuring IPv6 Addressing and Enabling IPv6 Routing 54-11Configuring IPv4 and IPv6 Protocol Addresses 54-13

Configuring IPv6 Static Routes 54-13Configuring a IPv6 Static Route 54-13

Gigabit Ethernet IPv6-ACL Guidelines 54-14

Transitioning from IPv4 to IPv6 54-15

Default Settings 54-15xlivCisco MDS 9000 Family Fabric Manager Configuration Guide

OL-17256-03, Cisco MDS NX-OS Release 4.x

ContentsSend documenta t ion comments to mdsfeedback -doc@c i sco .com

P A R T 7 Intelligent Storage Services

C H A P T E R 55 Configuring SCSI Flow Services and Statistics 55-1

SCSI Flow Services 55-1About SCSI Flow Services 55-1

SCSI Flow Manager 55-2SCSI Flow Configuration Client 55-3SCSI Flow Data Path Support 55-3

Configuring SCSI Flow Services 55-3Enabling Intelligent Storage Services 55-3Disabling Intelligent Storage Services 55-6

SCSI Flow Statistics 55-6About SCSI Flow Statistics 55-6Configuring SCSI Flow Statistics 55-7

Enabling SCSI Flow Statistics 55-7Clearing SCSI Flow Statistics 55-8

Default Settings 55-8

C H A P T E R 56 Configuring Fibre Channel Write Acceleration 56-1

Fibre Channel Write Acceleration 56-1About Fibre Channel Write Acceleration 56-1Enabling Fibre Channel Write Acceleration 56-2

Default Settings 56-3

P A R T 8 Network and Switch Monitoring

C H A P T E R 57 Network Monitoring 57-1

SAN Discovery and Topology Mapping 57-1Device Discovery 57-1Topology Mapping 57-2

Using the Topology Map 57-2Saving a Customized Topology Map Layout 57-2Using Enclosures with Fabric Manager Topology Maps 57-3Mapping Multiple Fabrics 57-3

Inventory Management 57-3Using the Inventory Tab from Fabric Manager Web Server 57-4

Viewing Logs from Device Manager 57-4xlvCisco MDS 9000 Family Fabric Manager Configuration Guide

OL-17256-03, Cisco MDS NX-OS Release 4.x

Health and Event Monitoring 57-4

ContentsSend documenta t ion comments to mdsfeedback -doc@c i sco .com

Fabric Manager Events Tab 57-5Event Information in Fabric Manager Web Server Reports 57-5Events in Device Manager 57-5

C H A P T E R 58 Performance Monitoring 58-1

Real-Time Performance Monitoring 58-1Device Manager Real-Time Performance Monitoring 58-1Fabric Manager Real-Time ISL Statistics 58-3

Historical Performance Monitoring 58-4Creating a Flow with Performance Manager 58-4Creating a Collection with Performance Manager 58-4

Using Performance Thresholds 58-4Using the Performance Manager Configuration Wizard 58-5

Viewing Performance Manager Reports 58-5Performance Summary 58-6Performance Tables and Details Graphs 58-6Viewing Performance of Host-Optimized Port Groups 58-6Viewing Performance Manager Events 58-6

Generating Top10 Reports in Performance Manager 58-7Generating Top10 Reports Using Scripts 58-7

Exporting Data Collections to XML Files 58-7Exporting Data Collections in Readable Format 58-8Configuring Performance Manager for Use with Cisco Traffic Analyzer 58-9

C H A P T E R 59 Configuring RMON 59-1

About RMON 59-1

Configuring RMON Using Threshold Manager 59-1RMON Alarm Configuration 59-2Enabling RMON Alarms by Port 59-3

Enabling 32-Bit and 64-Bit Alarms 59-4

Create RMON Alarms in Fabric Manager 59-6Enabling 32-bit RMON Alarms for VSANs 59-9Enabling 32-Bit and 64-Bit RMON Alarms for Physical Components 59-10Creating a New RMON from Device Manager Threshold Manager 59-11Enabling RMON Alarms for VSANs 59-13Managing RMON Events 59-14Managing RMON Alarms 59-15Viewing the RMON Log 59-16xlviCisco MDS 9000 Family Fabric Manager Configuration Guide

OL-17256-03, Cisco MDS NX-OS Release 4.x

Default Settings 59-16

ContentsSend documenta t ion comments to mdsfeedback -doc@c i sco .com

C H A P T E R 60 Monitoring Network Traffic Using SPAN 60-1

About SPAN 60-1

SPAN Sources 60-2IPS Source Ports 60-3Allowed Source Interface Types 60-3VSAN as a Source 60-4Guidelines to Configure VSANs as a Source 60-4

SPAN Sessions 60-5

Specifying Filters 60-5Guidelines to Specifying Filters 60-5

SD Port Characteristics 60-5Guidelines to Configure SPAN 60-6

Configuring SPAN 60-6Configuring SPAN 60-6Configuring SPAN max-queued-packets 60-7Creating SPAN Sessions 60-7Editing SPAN Sources 60-8Deleting SPAN Sessions 60-9SPAN Conversion Behavior 60-9

Monitoring Traffic Using Fibre Channel Analyzers 60-10Without SPAN 60-10With SPAN 60-11

Configuring Fibre Channel Analyzers Using SPAN 60-12Single SD Port to Monitor Traffic 60-12

Default SPAN Settings 60-13

C H A P T E R 61 Configuring System Message Logging 61-1

About System Message Logging 61-1

System Message Logging Configuration 61-3Message Logging Initiation 61-3 Console Severity Level 61-4Module Logging 61-5Log Files 61-6System Message Logging Servers 61-7Verifying Syslog Servers from Fabric Manager Web Server 61-10

Outgoing System Message Logging Server Facilities 61-10Viewing Logs from Fabric Manager Web Server 61-11xlviiCisco MDS 9000 Family Fabric Manager Configuration Guide

OL-17256-03, Cisco MDS NX-OS Release 4.x

Viewing Logs from Device Manager 61-11

ContentsSend documenta t ion comments to mdsfeedback -doc@c i sco .com

Default Settings 61-11

C H A P T E R 62 Configuring Call Home 62-1

Call Home Features 62-2

About Smart Call Home 62-2

Obtaining Smart Call Home 62-5

Configuring Call Home 62-5

Configuring Contact Information 62-6

Destination Profiles 62-7

Alert Groups 62-9

Customized Alert Group Messages 62-10Customizing Alert Group Messages Using Fabric Manager 62-10

Call Home Message Level Feature 62-11Setting the Call Home Message Levels Using Fabric Manager 62-11

Syslog-Based Alerts 62-12Configuring Syslog-Based Alerts Using Fabric Manager 62-12

RMON-Based Alerts 62-13Configuring RMON Alerts Using Fabric Manager 62-13

E-Mail Options 62-14Configuring General E-Mail Options Using Fabric Manager 62-14Configuring HTTPS Support 62-15

Periodic Inventory Notification 62-15Enabling Periodic Inventory Notifications Using Fabric Manager 62-15

Duplicate Message Throttle 62-16Enabling Message Throttling Using Fabric Manager 62-16

Call Home Enable Function 62-17Enabling Call Home Using Fabric Manager 62-17

Call Home Configuration Distribution 62-18Enabling Call Home Fabric Distribution Using Fabric Manager 62-18Fabric Lock Override 62-19Database Merge Guidelines 62-19

Call Home Communications Test 62-19Testing Call Home Using Fabric Manager 62-19

Clearing Call Home Name Server Database 62-20

Configuring EMC E-mail Home Delayed Traps 62-21Configuring Delayed Traps Using Cisco Fabric Manager 62-21xlviiiCisco MDS 9000 Family Fabric Manager Configuration Guide

OL-17256-03, Cisco MDS NX-OS Release 4.x

Enabling Delayed Traps Using Cisco Device Manager 62-23

ContentsSend documenta t ion comments to mdsfeedback -doc@c i sco .com

Sample Syslog Alert Notification in Full-txt Format 62-24

Sample Syslog Alert Notification in XML Format 62-24

Sample RMON Notification in XML Format 62-28

Event Triggers 62-30

Call Home Message Levels 62-32

Message Contents 62-33

Default Settings 62-40

C H A P T E R 63 Configuring Fabric Configuration Servers 63-1

About FCS 63-1Significance of FCS 63-2

Displaying FCS Discovery 63-3

Displaying FCS Elements 63-3

Creating an FCS Platform 63-4

Displaying FCS Fabric Ports 63-5

Default Settings 63-6

P A R T 9 Traffic Management

C H A P T E R 64 Configuring Fabric Congestion Control and QoS 64-1

FCC 64-1About FCC 64-1FCC Process 64-2Enabling FCC 64-2Assigning FCC Priority 64-3

QoS 64-3About Control Traffic 64-3Enabling or Disabling Control Traffic 64-4About Data Traffic 64-4VSAN Versus Zone-Based QoS 64-5Configuring Data Traffic 64-6About Class Map Creation 64-6Creating a Class Map 64-7About Service Policy Definition 64-8About Service Policy Enforcement 64-8About the DWRR Traffic Scheduler Queue 64-8Changing the Weight in a DWRR Queue 64-9xlixCisco MDS 9000 Family Fabric Manager Configuration Guide

OL-17256-03, Cisco MDS NX-OS Release 4.x

Example Configuration 64-10

ContentsSend documenta t ion comments to mdsfeedback -doc@c i sco .com

Ingress Port Rate Limiting 64-11

Default Settings 64-12

C H A P T E R 65 Configuring Port Tracking 65-1

About Port Tracking 65-1

Port Tracking 65-2About Port Tracking 65-2Enabling Port Tracking 65-3About Configuring Linked Ports 65-3Operationally Binding a Tracked Port 65-3About Tracking Multiple Ports 65-5Tracking Multiple Ports 65-5About Monitoring Ports in a VSAN 65-6Monitoring Ports in a VSAN 65-6About Forceful Shutdown 65-6Forcefully Shutting Down a Tracked Port 65-6

Default Port Tracking Settings 65-6

P A R T 10 Troubleshooting

C H A P T E R 66 Troubleshooting Your Fabric 66-1

Troubleshooting Tools and Techniques 66-1Cisco Traffic Analyzer 66-2Cisco Protocol Analyzer 66-3

Analyzing Switch Device Health 66-3

Analyzing Switch Fabric Configuration 66-4

Analyzing End-to-End Connectivity 66-5

Using the Ping Tool (fcping) 66-7

Using Traceroute (fctrace) and Other Troubleshooting Tools 66-7

Analyzing the Results of Merging Zones 66-8

Using the Show Tech Support Command 66-9

Running CLI Commands 66-10Adjusting for Daylight Savings Time 66-12

Locating Other Switches 66-12

Getting Oversubscription Information in Device Manager 66-14

Fibre Channel Time Out Values 66-14Timer Configuration Across All VSANs 66-15lCisco MDS 9000 Family Fabric Manager Configuration Guide

OL-17256-03, Cisco MDS NX-OS Release 4.x

ContentsSend documenta t ion comments to mdsfeedback -doc@c i sco .com

Timer Configuration Per-VSAN 66-16

Configuring a Fabric Analyzer 66-17About the Cisco Fabric Analyzer 66-17

Local Text-Based Capture 66-18Remote Capture Daemon 66-18GUI-Based Client 66-19

Configuring the Cisco Fabric Analyzer 66-19Sending Captures to Remote IP Addresses 66-20

Displaying Captured Frames 66-20Defining Display Filters 66-21Capture Filters 66-21Permitted Capture Filters 66-22

Configuring World Wide Names 66-23Link Initialization WWN Usage 66-23

Configuring a Secondary MAC Address 66-23Displaying WWN Information 66-24

FC ID Allocation for HBAs 66-24

Default Settings 66-25

C H A P T E R 67 Management Software FAQ 67-1

Installation Issues 67-3When installing Fabric Manager from windows, why does clicking install fail? 67-3Why do I have trouble launching Fabric Manager on Solaris? 67-3What do I do if my browser prompts to save JNLP files? 67-3What do I do if I see a "Java Web Start not detected" error? 67-4What do I do if my desktop shortcuts not visible? 67-4How do I upgrade to a newer version of Fabric Manager or Device Manager? 67-4How do I downgrade Fabric Manager or Device Manager? 67-4What do I do if an upgrade is not working? 67-4What do I do if Java Web Start hangs on the download dialog? 67-5How do I manually configure a browser for Java Web Start? 67-5How do I run Java Web Start from the command line? 67-5How do I clear the Java Web Start cache? 67-6What do I do if during a Fabric Manager upgrade, the installer doesnt display a prompt to create a shortcut? 67-6What do I do if my login does not work in Fabric Manager or Device Manager? 67-6What do I do if I cannot install Fabric Manager or Device Manager, or run Java, when pcAnyWhere is running? 67-6liCisco MDS 9000 Family Fabric Manager Configuration Guide

OL-17256-03, Cisco MDS NX-OS Release 4.x

ContentsSend documenta t ion comments to mdsfeedback -doc@c i sco .com

What do I do if the Fabric Manager or Performance Manager service shows up as disabled in the Services menu? 67-6What do I do if I am unable to install Fabric Manager or Device Manager, or run Java, when McAfee Internet Suite 6.0 Professional is running? 67-7

General 67-7What do I do if I see errors while monitoring Area chart graphing? 67-7What do I do if I see "gen error