53-1000605-02 12 Mar 2008 Access Gateway Administrator's Guide Supporting Fabric OS v6.1.0 Copyright © 2007-2008 Brocade Communications Systems, Inc. All Rights Reserved. Brocade, Fabric OS, File Lifecycle Manager, MyView, and StorageX are registered trademarks and the Brocade B-wing symbol, DCX, and SAN Health are trademarks of Brocade Communications Systems, Inc., in the United States and/or in other countries. All other brands, products, or service names are or may be trademarks or service marks of, and are used to identify, products or services of their respective owners. Notice: This document is for informational purposes only and does not set forth any warranty, expressed or implied, concerning any equipment, equipment feature, or service offered or to be offered by Brocade. Brocade reserves the right to make changes to this document at any time, without notice, and assumes no responsibility for its use. This informational document describes features that may not be currently available. Contact a Brocade sales office for information on feature and product availability. Export of technical data contained in this document may require an export license from the United States government. The authors and Brocade Communications Systems, Inc. shall have no liability or responsibility to any person or entity with respect to any loss, cost, liability, or damages arising from the information contained in this book or the computer programs that accompany it. The product described by this document may contain "open source" software covered by the GNU General Public License or other open source license agreements. To find-out which open source software is included in Brocade products, view the licensing terms applicable to the open source software, and obtain a copy of the programming source code, please visit http://www.brocade.com/support/oscd. Brocade Communications Systems, Incorporated Corporate Headquarters Brocade Communications Systems, Inc. 1745 Technology Drive San Jose, CA 95110 Tel: 1-408-333-8000 Fax: 1-408-333-8101 Email: info@brocade.com European and Latin American Headquarters Brocade Communications Switzerland Sàrl Centre Swissair Tour A - 2ème étage 29, Route de l'Aéroport Case Postale 105 CH-1215 Genève 15 Switzerland Tel: +41 22 799 56 40 Fax: +41 22 799 56 41 Email: emea-info@brocade.com Asia-Pacific Headquarters Brocade Communications Singapore Pte. Ltd. 9 Raffles Place #59-02 Republic Plaza 1 Singapore 048619 Tel: +65-6538-4700 Fax: +65-6538-0302 Email: apac-info@brocade.com Document History The following table lists all versions of the Access Gateway Administrator's Guide. Document Title Access Gateway Administrator's Guide Access Gateway Administrator's Guide Access Gateway Administrator's Guide Publication Number 53-1000430-01 53-1000633-01 53-1000605-01 Summary of Changes First version Added support for the 200E Added support for new policies and changes to N_Port mappings. Publication Date January 2007 15 Jun 2007 19 Oct 2007 Access Gateway Administrator's Guide 53-1000605-02 12 Mar 2008 Added support for new platforms: 300 and the 4424. Added support for new features: - Masterless Trunking - Direct Target Connectivity - Advance Device Security policy - 16- bit routing Access Gateway Administrator's Guide 53-1000605-02 iii iv Access Gateway Administrator's Guide 53-1000605-02 Contents About This Document How this document is organized . . . . . . . . . . . . . . . . . . . . . . . . . . . . vii Supported hardware and software . . . . . . . . . . . . . . . . . . . . . . . . . . vii What's new in this document . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . viii Document conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . viii Text formatting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . viii Notes, cautions, and warnings . . . . . . . . . . . . . . . . . . . . . . . . . . . ix Key terms. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ix Additional information. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . x Brocade resources . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . x Other industry resources . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . x Optional Brocade features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xi Getting technical help . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xi Document feedback . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xii Chapter 1 Getting Started In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 Brocade Access Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 Fabric OS features in Access Gateway mode. . . . . . . . . . . . . . . . 2 Access Gateway port types . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 Comparison of Access Gateway ports to standard switch ports. 3 How Access Gateway maps ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4 Upgrade and downgrade considerations. . . . . . . . . . . . . . . . . . . . . . . 5 Considerations with policies enabled. . . . . . . . . . . . . . . . . . . . . . 5 Advance Device Security policy. . . . . . . . . . . . . . . . . . . . . . . . . . . 5 Automatic Port Configuration policy . . . . . . . . . . . . . . . . . . . . . . . 5 Port Grouping policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 Chapter 2 Enabling Policies on Switches in Access Gateway Mode In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7 Access Gateway Administrator's Guide 53-1000605-02 iii Access Gateway policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8 Showing current policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8 Advance Device Security policy. . . . . . . . . . . . . . . . . . . . . . . . . . . 8 Enabling the Advance Device Security policy. . . . . . . . . . . . . . . . 9 Disabling the Advance Device Security policy . . . . . . . . . . . . . . . 9 Setting which devices can log in if ADS policy is enabled. . . . . . 9 Setting which devices cannot log in if ADS policy is enabled . . 10 Removing devices from the list of devices allowed at login . . . 10 Adding new devices to the list of devices allowed at login . . . . 10 Displaying the list of devices on the switch . . . . . . . . . . . . . . . . 11 Automatic Port Configuration policy . . . . . . . . . . . . . . . . . . . . . . 11 Enabling the Automatic Port Configuration policy . . . . . . . . . . . 12 Disabling the Automatic Port Configuration policy . . . . . . . . . . 12 Rebalancing F_Ports with APC policy enabled. . . . . . . . . . . . . . 12 Failover Policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13 Enabling the Failover policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14 Disabling the Failover policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15 Failback policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15 Enabling the Failback policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16 Cold Failover policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17 Port Grouping policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17 Creating a port group. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19 Adding an N_Port to a port group . . . . . . . . . . . . . . . . . . . . . . . . 20 Deleting an N_Port from a port group . . . . . . . . . . . . . . . . . . . . 20 Removing a port group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20 Renaming a port group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21 Disabling the Port Group policy. . . . . . . . . . . . . . . . . . . . . . . . . . 21 Access Gateway policy enforcement matrix . . . . . . . . . . . . . . . . 21 Access Gateway N_Port trunking . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22 Access Gateway trunking considerations. . . . . . . . . . . . . . . . . . 23 Trunk group creation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25 Setting up F_Port trunking . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26 Assigning a Trunk Area . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26 Enabling the DCC policy on trunk . . . . . . . . . . . . . . . . . . . . . . . . 27 Configuration management for trunk areas . . . . . . . . . . . . . . . 28 Enabling Access Gateway trunking . . . . . . . . . . . . . . . . . . . . . . . 28 Disabling F_Port trunking . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29 F_Port Trunking monitoring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30 Chapter 3 Connecting Devices Using Access Gateway In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31 Configuring the fabric and edge switch . . . . . . . . . . . . . . . . . . . . . . . 32 Verifying the switch mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32 Setting the Fabric OS switch to Native Mode. . . . . . . . . . . . . . . 33 Enabling NPIV on the M-EOS switch . . . . . . . . . . . . . . . . . . . . . . 33 iv Access Gateway Administrator's Guide 53-1000605-02 Connectivity to Cisco Fabrics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34 Access Gateway routing requirements with Cisco fabrics. . . . . 34 Enabling NPIV on a Cisco switch. . . . . . . . . . . . . . . . . . . . . . . . . 34 Workaround for QLogic-based devices . . . . . . . . . . . . . . . . . . . . 35 Editing Company ID List if no FC target devices on switch . . . . 35 Adding or deleting an OUI from the Company ID List . . . . . . . . 36 Enabling Flat FCID mode if no FC target devices on switch . . . 37 Editing Company ID list if target devices on switch . . . . . . . . . . 37 Access Gateway mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38 Enabling Access Gateway mode . . . . . . . . . . . . . . . . . . . . . . . . . 38 Port States . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39 Disabling Access Gateway mode . . . . . . . . . . . . . . . . . . . . . . . . 40 Re-joining switches to a fabric . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41 Reverting to a previous configuration. . . . . . . . . . . . . . . . . . . . . 41 Chapter 4 Configuring Ports in Access Gateway mode In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43 Port Initialization in Access Gateway mode. . . . . . . . . . . . . . . . . . . . 43 N_Ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44 Unlocking N_Ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45 Displaying N_Port configurations . . . . . . . . . . . . . . . . . . . . . . . . 46 Verifying port mapping and status . . . . . . . . . . . . . . . . . . . . . . . 46 Displaying N_Port mapping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47 Displaying port status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47 Port configurations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48 Adding F_Ports to an N_Port . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48 Removing F_Ports from an N_Port . . . . . . . . . . . . . . . . . . . . . . . 49 Adding a preferred secondary N_Port . . . . . . . . . . . . . . . . . . . . 50 Deleting F_Ports from a preferred secondary N_Port . . . . . . . . 50 Appendix A Index Troubleshooting Access Gateway Administrator's Guide 53-1000605-02 v vi Access Gateway Administrator's Guide 53-1000605-02 About This Document This document is a procedural guide to help SAN administrators configure and manage Brocade Access Gateway. This preface contains the following sections: ·How this document is organized . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . vii ·Supported hardware and software. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . vii ·What's new in this document . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . viii ·Document conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . viii ·Key terms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ix ·Additional information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . x ·Getting technical help . . . . . . . . . . . . . . . . . . . . . ...