Managing Fabrics Securing a Fabric | Q-Logic 5600 manual

3 – Managing Fabrics Securing a Fabric

S

The conventions for Port security group members are listed below:

You can enter member world-wide name (WWN), which must be 16 hex characters, or 23 characters with valid WWN format xx:xx:xx:xx:xx:xx:xx:xx.

The authentication choices are None and Chap.

The Secret field is disabled if authentication is set to None. If authentication is Chap, the Secret field is enabled.

The Generate button is only enabled when authentication is set to Chap.

The conventions for MS security group members are listed below:

You can enter member world-wide name (WWN), which must be 16 hex characters, or 23 characters with valid WWN format xx:xx:xx:xx:xx:xx:xx:xx.

The CT (common transport) authentication choices are None, MD5, and SHA-1.

The Secret field is disabled if authentication is set to None, otherwise the Secret field enabled.

The Generate button is only enabled when authentication is Chap.

Secret is 16 byte length for MD5 authentication, and 20 bytes if authentication is SHA-1.

3-14	59097-02 B

Image 60

Q-Logic 5600 manual Managing Fabrics Securing a Fabric

Contents

SANbox 5600 Series Switch Managment User’s Guide SANbox 5600 Series Switch Management User’s Guide Document Revision History Table of Contents Section Managing Fabrics SANbox 5600 Series Switch Management User’s Guide Managing Switches Section SANbox 5600 Series Switch Management User’s Guide Section Managing Ports Appendix a Command Line Interface Glossary Index List of Figures List of Tables SANbox 5600 Series Switch Management User’s Guide Intended Audience Related MaterialsJdom License Introduction Jdom License Technical Support AvailabilityTraining Contact Information Support Headquarters Using SANsurfer Switch Manager Installing the Management Application Workstation RequirementsWorkstation Requirements SANsurfer Switch Manager SMS Installation for Windows SANsurfer Management Suite Chglax.bat SMS Installation for Linux SMS Installation for Solaris Install the new SANsurfer Switch Manager package Change directories to the package locationLocate and execute the file sbmoversms.sh Starting SANsurfer Switch Manager ‰ For Linux or Solaris enter the SANsurfer command Initial Startup Dialog SANsurfer Switch Manager Window Exiting SANsurfer Switch Manager Save Default Fabric View File Dialog Uninstalling SANsurfer Switch Manager Load Default Fabric File Dialog SMS Uninstall Standalone Uninstall Changing the Encryption Key for the Default Fabric View File Saving and Opening Fabric View Files Setting SANsurfer Switch Manager Preferences Using Online Help Viewing Software Version and Copyright Information SANsurfer Switch Manager User Interface Faceplate Display Menu Bars Topology Display Menu Faceplate Display Menu Shortcut Keys Tool Bar Tool Bar Buttons Fabric Tree Fabric Tree Working Status Indicator Graphic WindowData Window and Tabs Using the Topology Display Switch and Link Status Working with Switches and Links Selecting Switches and LinksArranging Switches in the Display Opening the Faceplate and Topology Display Popup Menus Topology Data Windows Using the Faceplate Display 11. Faceplate Display Port Views and Status Working with PortsSelecting Ports Opening the Faceplate Popup Menu Faceplate Data WindowsPage Managing Fabrics Radius Servers Adding a Radius Server Add Server Managing Fabrics Radius Servers Removing a Radius Server Remove Server Editing Radius Server Information Edit Server Information Modifying Authentication Order Radius Server Information Modify Authentication Order Radius Server Information Securing a Fabric Connection SecurityFabric security consists of the following Security Consistency Checklist User Account Security Device Security Edit Security Dialog Edit Security Dialog Creating a Security Set Create Security Group Dialog Creating a Security Group Create Security Group Member Dialog Create a Security Group Member Dialog Managing Fabrics Securing a Fabric Creating a Security Group Member Editing the Security Configuration on a Switch Using the Security Config Dialog Viewing Properties of a Security Set, Group, or Member Archiving a Security Configuration to a File Activating a Security SetDeactivating a Security Set Configured Security Data Window Fabric ServicesActive Security Data Window Enabling Snmp Configuration Click the In-band Management Enable buttonEnabling In-band Management Tracking Fabric Firmware and Software Versions Saving a Version Snapshot Viewing and Comparing Version Snapshots Exporting Version Snapshots to a File Fabric Version Snapshot Analysis Dialog Managing the Fabric Database Adding a Fabric Removing a Fabric Opening a Fabric View File Deleting Switches and Links Saving a Fabric View FileRediscovering a Fabric Adding a New Switch to a Fabric Replacing a Failed Switch Displaying Fabric Information Topology Display Switch and Status Icons Fabric Status Displaying the Event Browser 11. Events Browser Discarded when you close a SANsurfer Switch Manager session Severity LevelsEditor or browser Filtering the Event Browser 12. Filter Events Dialog Sorting the Event Browser Saving the Event Browser to a File Devices Data Window Devices Data Window Entries Active Zone Set Data Window 13. Active Zone Set Data Window Link Data Window Working with Device Information and NicknamesDisplaying Detailed Device Information Exporting Device Information to a File Managing Device Port NicknamesCreating a Nickname Editing a Nickname Deleting a NicknameExporting Nicknames to a File Importing a Nicknames File Zoning a FabricZoning Concepts Zones Soft Zones Access Control List Hard Zones AliasesZone Sets Zoning Database Viewing Zoning Limits and Properties Using the Zoning Wizard Managing the Zoning Database Editing the Zoning DatabaseManaging the zoning database consists of the following Edit Zoning Dialog Tool Bar Buttons and Icons Edit Zoning Dialog Tool Bar Buttons and Icons Configuring the Zoning Database Interop Auto Save Default Visibility Discard InactiveSaving the Zoning Database to a File Restoring the Zoning Database from a File Restoring the Default Zoning Database Removing All Zoning Definitions Managing Zone Sets Creating a Zone Set Activating and Deactivating a Zone Set Copying a Zone to a Zone SetRemoving a Zone from a Zone Set or from All Zone Sets Removing a Zone Set Managing ZonesManaging zones involves the following Creating a Zone in a Zone Set Adding Zone Members Renaming a Zone or a Zone Set Removing a Zone MemberRemoving a Zone from a Zone Set Removing a Zone from All Zone Sets Changing Zone Types Managing AliasesCreating an Alias Adding a Member to an Alias Removing an Alias from All Zones Merging Fabrics and Zoning Zone Merge Failure Zone Merge Failure Recovery Managing Fabrics Zoning a Fabric 59097-02 B Managing Switches Managing User Accounts Factory User Accounts User Account Administration Dialog Add Account Creating User Accounts User Account Administration Dialog Remove Account Removing a User Account Changing a User Account Password User Account Administration Dialog Change Password User Account Administration Dialog Modify Account Modifying a User Account Displaying Switch Information Faceplate Display Switch Information Switch Data Window Switch Data Window Entries Ratov Switch Data Window Entries Ing Detailed Device Information on page 3-36for infor Port Statistics Data Window Port Information Data Window Configured Zonesets Data Windows Configured Zonesets Data Window Configuring Port Threshold Alarms Port Threshold Alarm Configuration Dialog Paging a Switch Port Threshold Alarm Example Setting the Date/Time and Enabling NTP Client Resetting a Switch Switch Resets Type Description Configuring a Switch Using the Configuration Wizard Switch Properties Symbolic Name Switch Administrative States Switch Administrative States Domain ID and Domain ID Lock Fabric Device Management Interface Broadcast Support In-band Management Advanced Switch Properties 10. Advanced Switch Properties Dialog Interop Mode for Zoning Legacy Port Address Format Timeout Values Timeout Values System Services Dialog 11. System Services Dialog Security Consistency Checklist Dialog Network Properties 12. Network Properties Dialog IP Configuration IP Configuration Parameters Remote Logging NTP Client Snmp Properties 13. Snmp Properties Dialog Snmp Configuration Snmp Configuration Parameters Snmp Trap Configuration Snmp Trap Configuration Parameters Managing Switch Stacks 14. Switch Stacks Syslog 15. Syslog Dialog Archiving a Switch Select Source Dialog Restoring a Switch 16. Restore Dialogs Full and Selective Managing Switches Restoring a Switch Restoring the Factory Default Configuration Factory Default Configuration Settings Factory Default Configuration Settings Upgrading the Switch Using License Keys Downloading a Support File 17. Features License Key Dialog Installing Firmware Displaying Hardware Status 19. Hardware Status LEDs Managing Switches Displaying Hardware Status 59097-02 B Managing Ports Displaying Port Information Monitoring Port Status Displaying Port TypesPort Types Displaying Port Operational States Displaying Port SpeedsPort Operational States Port Speeds Displaying Transceiver Media Status Port Transceiver Media View Port Statistics Data Window Entries LIP ALPD,ALPS Port Statistics Data Window Entries Port Information Data Window Entries Port Information Data Window Entries Configuring Ports Port Properties Dialog Changing Port Administrative States Port Administrative States Changing Port Speeds Changing Port Types Changing Port Symbolic Name Stream GuardDevice Scan Using the Extended Credits Wizard Resetting a Port Designate Donor Ports Testing Ports Port Loopback Test Dialog Managing Ports Testing Ports Graphing Port Performance Fabric View Graphs This section describes how to do the following Starting SANsurfer Performance Viewer Save Default Performance View File Dialog Exiting SANsurfer Performance Viewer Load Default View File Dialog Saving and Opening Performance View Files Changing the Default Performance View File Encryption Key Setting SANsurfer Performance Viewer Preferences Setting the Polling Frequency Displaying Graphs for a Switch Displaying Graphs for a Stack Arranging Graphs in the Display Default Graph Options Dialog Customizing Graphs Managing Ports Graphing Port Performance Setting Global Graph Type Rescaling a Selected GraphPrinting Graphs Saving Graph Statistics to a File Command Line Interface Logging On to a Switch Working with Switch Configurations User Accounts Modifying a Configuration Backing up and Restoring Switch Configurations Ftp ipaddress userimages password images ftp bin Commands Table A-1. Command-Line Completion Table A-2. Commands Listed by Authority Level Admin Session Commands Admin Command AuthoritySyntax Keywords Alias Command Syntax aliasKeywords add alias memberlist Copy aliassource aliasdestination Delete alias ListMembers alias Remove alias memberlist CIM Command Following is an example of the CIM Limits command CIMListener Command Table A-3. CIM Listener Configuration Parameters Edit listenername URL CIMSubscription Command Table A-4. CIM Subscription Configuration ParametersSyntax cimsubscription Keywords create subscriptionname Edit subscriptionname Config Command Syntax configKeywords activate configname Edit configname RestoreSave configname #ftp symbolicname or ipaddress user images Create Command Syntax create certificate supportKeywords certificate Support Local directory now /itasca/conf/images bin Following is an example of the Create Certificate command SANbox xxxx admin # create support Date Command Syntax dateKeywords MMDDhhmmCCYY Feature Command Syntax featureKeywords add licensekey Log Firmware Install Command Authority AdminSyntax firmware install Group Command Syntax group Keywords add group Table A-5. ISL Group Member Attributes Table A-6. Port Group Member Attributes Configures security for attachments to other switches Table A-7. MS Group Member AttributesCopy groupsource groupdestination Create group type Edit group member Table A-8. Group Member Attributes Members group Remove group memberlistRename groupold groupnew Securitysets group Following is an example of the Group Edit command ISL Following is an example of the Group List command Following is an example of the Group Members command Hardreset Command Syntax Help Command Help command keywordCommand Keyword History Command Following is an example of the History commandHistory Hotreset Command Hotreset Image Command Keywords cleanupSyntax image Ftp Ftp switchname Wait for the unpack to complete Lip Command Admin sessionFollowing is an example of the Lip command Lip portnumber Passwd Command Syntax passwd accountname Keywords accountname Ping Command Following is an example of a successful Ping commandPing ipaddress Ipaddress Ps Command Examples The following is an example of the Ps commandAuthority None Syntax ps Displays current system process information Quit Command Authority NoneCloses the Telnet session Syntax quit, exit, or logout Reset Command Syntax resetKeywords config configname Factory Services SwitchRadius Security Table A-9. Switch Configuration Defaults Values Table A-10. Port Configuration Defaults Parameter 4-Gbps Port Defaults Table A-11. Port Threshold Alarm Configuration Defaults Table A-12. Zoning Configuration Defaults Table A-13. Snmp Configuration Defaults Table A-14. Radius Configuration Defaults Table A-15. Services Configuration Defaults Table A-16. System Configuration Defaults Table A-17. Security Configuration Defaults Security Command Keywords active Edit Following is an example of the Security History command MD5 Following is an example of the Security Limits command Following is an example of the Security List command Securityset Command Create securityset DeactivateDelete securityset Groups securityset Following is an example of the Securityset Groups command Following is an example of the Securityset List command Set Command Keywords alarm optionConfig option Syntax set Setup option Switch stateLog option Pagebreak state Timezone Set Config Command Set configTable A-18. Set Config Port Parameters Port portnumber Send Arbff True instead of IDLEs False on the loop Table A-18. Set Config Port Parameters Table A-19. Security Configuration Parameters Table A-20. Set Config Switch Parameters Resource Allocation Timeout Value. The number Table A-21. Set Config Threshold Parameters Threshold Table A-22. Set Config Zoning Parameters Following is an example of the Set Config Port command Arbff Enter key to do so Configuring Port Number AdminState Following is an example of the Set Config Security command Following is an example of the Set Config Switch command Following is an example of the Set Config Threshold command Following is an example of the Set Config Zoning command Set Log Command Set logArchive Component filterlist Display filter Level filter Port portlist Alarms are always logged and always displayed on the screen StartStop Stops logging of events Set Port Command Disables the port by removing power from the port lasers State state Set Setup Command Set setupRadius Services Snmp System Configuration fields Table A-23. Radius Service Settings Table A-24. Switch Services Settings Table A-24. Switch Services Settings Table A-25. Snmp Configuration Settings Table A-26. System Configuration Settings Table A-26. System Configuration Settings Following is an example of the Set Setup Services command Following is an example of the Set Setup Snmp command Following is an example of the Set Setup System command Show Command Keywords about Alarm option Cimlistener listenernameCimsubscription subscriptionname Fdmi portwwn InterfaceLog option Lsdb Pagebreak Perf optionTable A-27. Show Port Parameters Lipalpdalps Post log Steering domainid Table A-28. Switch Operational Parameters Displays the current time zone setting TopologyDisplays all connected devices Users Following is an example of the Show Domains command Following is an example of the Show Fabric commandFollowing is an example of the Show Fdmi command Following is an example of the Show Fdmi WWN command Following is an example of the Show NS local domain command Following is an example of the Show NS domainID command Following is an example of the Show NS portID commandFollowing is an example of the Show Interface command Following is an example of the Show Port command PL-XPL-VC-SG3-22 Following is an example of the Show Switch command Following is an example of the Show Topology command 59097-02 B 105 Following is an example of the Show Version command Show Config Command Show config Following is an example of the Show Config Port command Following is an example of the Show Config Switch command Following is an example of the Show Config Threshold command Following is an example of the Show Config Zoning command Show Log Command NoneShow log Keywords numberofevents Snmp events Displays all informative events Displays all warning eventsDisplays all critical events Displays all events related to EPorts Settings LevelOptions Port Following is an example of the Show Log command Show Perf Command Errors portnumber Outframe portnumber Following is an example of the Show Perf Byte command Show Setup Command Show setupMfg Following is an example of the Show Setup Services command Following is an example of the Show Setup Radius command Following is an example of the Show Setup Snmp command Following is an example of the Show Setup System command Shutdown Command Syntax shutdown Test Command Port portnumber testtype cancel StatusSyntax test Keywords port portnumber testtype Cancels the online test in progress Status Test port x online Uptime Command Examples The following is an example of the Uptime commandAuthority None Syntax uptime User Command Syntax userKeywords accounts Add Following is an example of the User Accounts command Following is an example of the User Add commandFollowing is an example of the User Edit command Following is an example of the User Delete command Following is an example of the User List command Whoami Command Examples The following is an example of the Whoami commandAuthority None Syntax whoami Zone Command Syntax zoneKeywords add zone memberlist Copy zonesource zonedestination Delete zone Members zoneRemove zone memberlist Rename zoneold zonenew Following is an example of the Zone Members command Following is an example of the Zone Zonesets command Zoneset Command Syntax zoneset Delete zoneset Remove zoneset zonelistRename zonesetold zonesetnew Zones zoneset Following is an example of the Zoneset Zones command Zoning Command Opens a Zoning Edit session Table A-29. Zoning Database Limits Limit Description Following is an example of the Zoning Limits command E2JBOD2 Following is an example of the Zoning List command Command Line Interface Zoning Command 142 59097-02 B Access Control List Zone Administrative StateAlarm BootP Class 3 Service Configured Zone SetsDefault Visibility Fabric Management Switch Input Power LED Inter-Switch LinkMaintenance Button Maintenance Mode Small Form-Factor Pluggable Zoning Database Soft ZoneTarget User Account Index Index-2 59097-02 B 59097-02 B Index-3 Index-4 59097-02 B 59097-02 B Index-5 Index-6 59097-02 B 59097-02 B Index-7 Index-8 59097-02 B 59097-02 B Index-9 Index-10 59097-02 B