Access Control Groups | Emulex LP1150-F4 instruction

a.The SSC utility runs.

b.SA_ID is selected.

c.SA files are created for systems 2 through 5.

d.SA files are sent to each system and system 1 becomes an ACG and an MSC, the only sys- tem which can run the HBAnyware client to remotely access all other system.

Figure 48: Systems 2 through 6 can access and control their local HBAs

Access Control Groups

Introduction

The Access Control Group tab shows the systems that are part of a client's Access Control Group (ACG) and, from an MSC, allows you to select the systems that belong to the ACG.

Access Control Group Tab on the MSC

On an MSC, you select or deselect the systems that are to be part of the security installation in the Access Control Group tab. When you select unsecure systems and move them to the Access Control Group Servers list, these systems are updated to secure them and bring them into the MSC's ACG.

Solaris SFS Driver User Manual

Page 84

Image 91

Emulex LP1150-F4 user manual Access Control Groups, Access Control Group Tab on the MSC

Contents

Solaris SFS Driver Last Updated June 14 Using the HBAnyware Utility Command-Line Interface Downloading and Installing the Driver for Solaris 8 orRemoving the Utilities Using the emlxuremove Script Starting the HBAnyware Utility from the Command LinePage 104 Introduction 131 Situations That Involve HBAnyware Using the emlxdrv Utility 124 Introduction 161 Console and Log Messages 139Use Cases 161 HBA Compatibility Compatibility Procedure Known Issues To obtain and install individual patches Downloading and Installing the Driver for Solaris 8 orMethod 1 Using the Installit Script recommended Method 2 Using Individual PatchesPage Unpacking the Utility Files Installing the FCA Utilities Enter y. The following message is displayed To install the utilities kit using the emlxuinstall scriptEmlxuinstall script is available Prerequisites Unzip the HBAnyware package file. Type Installing the HBAnyware UtilityKnown Issues JRE and instructions for installation can be found at To install HBAnyware with Web Launch Log on as ‘root’ Installing the HBAnyware Utility with Web LaunchRun the install script. Type Unzip the HBAnywareSSC package file Installing the HBAnyware Utility Security ConfiguratorInstalling or Updating the Utilities Package Manually Compatibility Removing the Utilities Using the emlxuremove Script To remove the emlxu utilities package Removing the Utilities Package Manually Configuration Driver Parameters Solaris SFS and lpfc Driver Parameter Cross-Reference Solaris SFS and lpfc Driver Parameter Cross-Reference Table Solaris SFS and lpfc Driver Parameter Cross-Reference Solaris SFS and lpfc Driver Parameter Cross-Reference Solaris SFS and lpfc Driver Parameter Cross-Reference Starting HBAnyware with Web Launch Starting the HBAnyware Security ConfiguratorProcedure Starting the HBAnyware Utility Examples of Modifications Changing Management ModeStarting the HBAnyware Utility from the Command Line Enter desired management mode Press Enter Click OK Menu Bar HBAnyware Utility Window Element DefinitionsToolbar Discovery-Tree Toolbar ButtonsSort Toolbar Buttons Discovery-Tree Icons Using the HBAnyware Utility Command-Line InterfaceProperty Tabs Status Bar Out-of-Band Access Using the CLI ClientSyntax Rules Sample response CLI Client Command Reference VersionSaveConfig ListHBAs PortAttrib HBAAttrib ServerAttrib PortStatParameters TargetMapping Reset Sample response for a successful download DriverConfigDownload AllNodeInfo DriverParamsGlobal DriverParamsSample abbreviated response SetDriverParam PciData SetBootBios Below is a sample response WakeupLoopMap GetBeacon PostTest SetBeaconEchoTest Dump LoopbackDeleteDumpFiles SetPersistentBinding PersistentBinding RemovePersistentBinding RemoveAllPersistentBindingSample response would be BindingSupport BindingCapabilitiesSetBindingSupport HBAnyware Utility, Discovery Information Discovering HBAs HBAnyware Utility, HBA Discovery Settings Dialog Box Configuring Discovery Settings Sorting by Fabric Address Sorting HBAsSorting Local HBAs Only Sorting by Host Name Viewing Discovery Information Viewing HBA InformationDiscovery Information Field Definitions Host Information Tab Viewing Host InformationHost Information Field Definitions Driver Parameter Tab Field Definitions Host Driver Parameters TabDriver Parameter Tab Buttons Adapter Summary Field Definitions Viewing General HBA Attributes Adapter Status Area Field Definitions Adapter Details Field Definitions Viewing Detailed HBA InformationPort Attributes Field Definitions Loop Map Table Definitions Viewing Fabric Information Discovery Information Field Definitions Viewing Target InformationTarget Information Field Definitions LUN Information Field Definitions Viewing LUN Information HBAnyware Utility, Statistics Tab Viewing Port Statistics Port Statistics Field Definitions Firmware Area Enable/Disable Click to enable or disable the boot codeViewing Firmware Information Firmware Field Definitions Target Mapping Field Definitions Viewing Target Mapping Resetting HBAs Following warning screen appears Updating Firmware HBAnyware Utility, Firmware Download Dialog Box Click Start Download Click Browse. The Firmware File Selection dialog box appears HBAnyware Utility, Batch Firmware Download Dialog Box Updating Firmware Batch Mode Solaris SFS driver is installed properly Enabling or Disabling the Bios HBAnyware Utility, Firmware Tab with Bios Disabled Setting Driver Parameters HBAnyware Utility, HBA Selected Driver Parameters Tab Setting Driver Parameters for an HBA Resetting All Default Values Setting Driver Parameters for a HostRestoring All Parameters to Their Earlier Values Restoring All Parameters to Their Earlier Values Assigning Batch Mode Parameters to HBAs Creating the Batch Mode Driver Parameters File HBAnyware Utility, Batch Driver Parameters Update Dialog Box Setting Up Persistent Binding Click the Target Mapping tab. All targets are displayed HBAnyware Utility, Add Persistent Binding Dialog Box Changing Parameters or Bindings for Solaris 8, 9 Adding New Targets Using sd.conf for Solaris 8, 9Save the file and exit No-Reboot Firmware Updates Setting Up Target/LUN Blocking Using sd.confLoading or Unloading the Driver Without Rebooting Running a Quick Test Performing Diagnostic Tests Running a Post Test Using BeaconingClick OK. a Post Test window shows Post test information Displaying PCI Registers and Wakeup Information Creating Diagnostic DumpsClick Start Dump HBAnyware Utility, Advanced Diagnostics Dialog Box Running Advanced Diagnostic Tests Running Loopback Tests HBAnyware Utility, Advanced Diagnostic Tests Warning Running End-to-End Echo Tests Click Start. The following warning window appears Saving the Log File An example of a saved log file appears below Out-of-Band SAN Management HBAnyware Utility, Add Remote Host Dialog Box Adding a Single Host HBAnyware Utility, Add Remote Hosts Window Adding a Range of Hosts Removing Hosts HBAnyware SecurityIntroduction Page Unsecure System message is displayed Security Configurator, Unsecure System MessagePage Access Control Group Tab on the MSC Access Control Groups ACG Icons Access Control Group Tab on a Non-MSC Adding a Server to the ACG Deleting a Server from the ACG Click Yes. Security is removed from all servers in the ACG Removing Security from all Servers in the ACG Generating New Security Keys Restoring the ACG to Its Last Saved Configuration Accessing a Switch ASG Icons Access Sub-Groups Creating an ASG Click New. The New Access Sub-Group dialog box is displayed ASG Creation Example Reserved Indices Examples Deleting an ASG Adding a Server to an ASG Restoring an ASG to Its Last Saved Configuration Editing an ASG Security Configurator, Edit Access Sub Group Dialog Box About Offline ASGs Backup Master Eligible Systems Backup Masters Backup Master Tab and Controls Creating a Backup Master System16 as Backup Master Reassigning a Backup Master as the New MSC from the Old MSC Click the Backup Master tab Security Configurator, Backup Master Warning Dialog Box Modes of Operation emlxadm Interactive Mode emlxadm Information similar to the following is displayed CLI Mode emlxadm # emlxadm SUNW,emlxs@2 getnumdevs Getnumdevs Command Descriptions emlxadmGetdevlist Getlogiparams wwpn Returns the FC login parameters of this HBA port ExampleGethostparams Getsymnname Devlogin wwpnGetsympname Setsympname string Linkstatus did Devlogout wwpnGetstate wwpn Devremove wwpn Downloads the specified FCode image file to the HBA Example Downloadfcode filenameGetfwrev Downloadfw filename Forcedump GetbootrevDownloadboot filename Getdumpsize Gettopology Resetlink wwpn or zero for local linkResethard Forces the HBA to perform a hardware reset Example Forces the HBA to perform a core firmware reset Example ResethardcoreDiag test parameters or diag code cmdcode hex Parmgetnum Returns the total number of configurable parameters Example Parmgetlist Returns a list of configurable parameters ExamplePage Parmset label value Parmget labelExample This example attempts to set a static parameter Gethostattrs Msgbuf all or number -i intervalDisplays all of the current host HBA API attributes Example = Seagate ST39103FC Getportattrs index, wwn or all Getpath index Exits the utility program Example Bootcode enable or disableDisplays a help menu of utility commands Example Getvpd Hba Repeats the last command Example Modes of Operation emlxdrv Interactive Mode emlxdrvEmlxdrv utility program can be run in two modes Interactive CLI Mode emlxdrv Setemlxsall Command Descriptions emlxdrvSetemlxs alias Setemlxssun Setlpfcnonsun Setlpfc aliasCleardev alias Clearemlxs Clearlpfc Clearnonsun Clearsun Clearall General Situations General Situations SAN Management Workstation Does Not Access Control Groups Situations Security Configurator Situations Access Control Groups ACG HBAnyware Security Configurator Access Sub-Groups Situations Security Configuration Situations Access Sub-Groups ASG HBAnyware Security Configurator Backup Masters Situations HBAnyware Security Configurator Situations Backup MastersCannot modify the Security Configurator Error Message Situations Error Message SituationsFollowing error message is displayed when Master Security Client Situations Master Security Client Situations Master Security Client Situations Log Message Types Introduction Following is an example of a message on the system console Severity LevelsMessage Log Example Severity Levels Msgid 0002 Notice Msgid 0004 ErrorMiscellaneous Events Msgid 0001 Debug Driver Events HBA Initialization Events Msgid 0210 Debug Adapter Transition Msgid 0201 Error Adapter Initialization FailedMsgid 0240 Error Adapter Reset Failed Msgid 0202 Debug Adapter Initialization Memory Management Events Service Level Interface SLI Events Msgid 0440 Debug Adapter Msg Msgid 0432 Debug Ring ResetMsgid 0450 Error Iocb Invalid Msgid 0452 Debug Iocb Error Node Events Mailbox Events Msgid 0611 Debug Node Closed Msgid 0603 Debug Node UpdatedMsgid 0602 Notice Node Create Failed Msgid 0610 Debug Node Destroy Link Events ELS Events General I/O Packet Events Msgid 0920 Debug Packet Flush Msgid 0922 Notice Packet Flush TimeoutMsgid 0931 Error Packet Transport Error Msgid 0911 Debug TXQ Watchdog IP Traffic Events FCP Traffic Events Solaris SFS Events Msgid 1313 Debug BIU Diagnostic Completed Msgid 1310 Warning Diagnostic ErrorMsgid 1311 Debug Echo Diagnostic Completed Msgid 1312 Warning Echo Diagnostic Failed Ioctl Events Firmware Download Events Common Transport Events Msgid 1621 Debug Unsolicited CT dropped Msgid 1630 Error Invalid CT command foundMsgid 1622 Debug CT reply Different use cases will drive different migration scenarios Use Cases Sample Script File Details Operational Differences Between lpfc and SFSStartemlxsmigration.sh Finishemlxsmigration.sh Limitations Migrating a Configuration without FC BootMigrating Automatically Things to Know Before You Migrate Migrating Manually Migrating Non-emlxs HBAs to emlxs HBAs Migrating a Configuration with FC Boot Shut down the server and get to the ok prompt For an Emulex boot HBA