User Account Security, Virtual Private Fabric Zone | Q-Logic 64

SANbox2-64 Fibre Channel Switch

Installation Guide

User Account Security

A component of fabric security that provides for the administration and authentication of account names, passwords, expiration dates, and authority level.

VCCI

Voluntary Control Council for Interference

Virtual Private Fabric Zone

Virtual Private Fabric zoning divides the fabric for purposes of controlling discovery and both inbound and outbound traffic.

Worldwide Name (WWN)

Aunique 64-bit address assigned to a device by the device manufacturer.

WWN

Worldwide Name

Zone

A set of ports or devices grouped together to control the exchange of information.

Zone Set

A set of zones grouped together. The active zone set defines the zoning for a fabric.

Zoning Database

The set of zone sets, zones, and aliases stored on a switch.

D

59043-03 A

Glossary-5

Image 235

Q-Logic 64 manual User Account Security, Virtual Private Fabric Zone, Worldwide Name WWN, Zone Set, Zoning Database

Contents

SANbox2-64 Fibre Channel Switch Installation Guide Document Revision History SANbox2-64 Fibre Channel Switch Installation Guide Table of Contents Site Requirements Fabric Management Workstation Section InstallationSection Planning Devices Multiple Chassis Fabrics Section Diagnostics/Troubleshooting Appendix a Specifications Section Removal/Replacement Command Syntax Appendix B Command Line Interface Glossary Index Zone Command Zoneset Command 101 Zoning Command 104 Serial Port Pin Identification TablesPage Intended Audience Introduction Related Materials Sicherheitshinweise Safety Notices Federal Communications Commission FCC Class a Statement Communications Statements CE Statement Bsmi Class a Statement Vcci Class a Statement Electrostatic Discharge Sensitivity Esds Precautions Laser Safety Information Pièces Accessibles Accessible PartsZugängliche Teile Preamble General Public License 12.2 Introduction General Public License Introduction General Public License Introduction General Public License No Warranty How to Apply These Terms to Your New Programs Copyright C yyyy name of author Contact Information Technical SupportAvailability Training General Description Chassis Hardware SANbox2-64 64-Port Fibre Channel Switch Slot and Fibre Channel Port Numbering Chassis Controls and LEDs Maintenance Button Placing the Switch in Maintenance Mode Resetting a Switch Chassis LEDs Over Temperature LED AmberFan Fail LED Amber Heartbeat LED Amber Input Power LED GreenFibre Channel Ports Small Form-Factor Pluggable SFP Transceivers Port Status LED Ethernet Port Port ModesFabric Ports Expansion Port Ethernet Port Serial Port Pin Number Description Serial Port Pin Identification Power Supply Components Power Supply Modules 10. Fans Fans Switch Management Devices Planning Single Switch Fabric with Initiators and Targets Dual Switch Fabric with Initiators and Targets Domain ID, Principal Priority, and Domain ID Lock Multiple Chassis Fabrics Common Topologies Distance Performance Port-to-Port Latency BandwidthLatency Port-to-Port Transmission Combinations Device Access Soft Zones Access Control List Hard Zones Virtual Private Fabric Hard Zones User Account Security Fabric Security Device Security Security Example Switches and HBAs Secret fedcba9876543210fedcba9876543210fedcba Node WWN 100000c0dd07c34d Node WWN 100000c0dd 07e34e Create a security set SecuritySet2 on Switch2 Security Example Host Authentication MS Group Group1 Fabric Management Fabric Services Planning Fabric Management 59043-03 a Management Workstation Requirements Switch Power RequirementsSite Requirements Fabric Management Workstation Environmental Conditions Installing a Switch Avertissement Mount the Switch Rack for service access and ventilation Locked prior to applying power to the switch„ If the switch is mounted in a closed or multi-unit rack Assembly, make sure that the operating temperature inside SANbox2-64 Rail Kit Connect the Switch to AC Power Install SFP Transceivers Avertissement Appendix a Specifications Ethernet and Serial Cable Connections Connect the Management Workstation to the Switch Serial Connection Ethernet Connection Enter the following command at the Solaris prompt Install SANbox Manager SANsurfer Management Suite Disk Linux Installation SANsurfer Management Suite Disk Windows Installation Enter the following command SANsurfer Management Suite Disk Solaris Installation SANbox2 Installation Disk Windows Installation SANbox2 Installation Disk Solaris Installation SANbox2 Installation Disk Linux InstallationConfigure the Switch Cable Devices to the Switch Configure the Ports Using SANbox Manager to Install Firmware Install Firmware To start an admin session, enter the following Using the CLI to Install FirmwareEnter the following command to install the new firmware Close the FTP session Using FTP and the CLI to Install Firmware Powering Down a Switch Heartbeat LED Blink Patterns Post DiagnosticsNormal all pass To recreate the configuration file, do the following Maintenance Mode PatternFatal Error Blink Pattern Configuration File System Error Blink Pattern Ftp Ftp switchname Restore the configuration file Enter the following account name and password userimagesReset the switch and close the Telnet session Port Status LED Indications Logging Error EPort Isolation Excessive Port Errors Diagnostics/Troubleshooting Post Diagnostics Chassis and Power Supply LEDs Chassis Diagnostics Input Power LED Is Extinguished Over Temperature LED is IlluminatedFan Fail LED is Illuminated Power Supply Fault LED is Illuminated Output Power LED Is Extinguished Recovering a Switch Maintenance Image Unpack Maintenance Exit Maintenance Remove Switch Config Maintenance Reset Network ConfigMaintenance Reset Password File Maintenance Copy Log Files Maintenance Set Active Image Maintenance Show Firmware Versions Diagnostics/Troubleshooting Recovering a Switch 59043-03 a SFP Transceivers Marginal Operating Configurations Removing the CPU Module CPU Module Removal/Replacement CPU Module Removing the CPU Module Installing the CPU Module Ftp put imagefile Removal/Replacement CPU Module Choose the Replace task Blades Disconnect all cables from the selected I/O blade Choose the slot number 6 for example Removing an I/O Blade To install a new I/O blade, enter y Removal/Replacement I/O Blades CC Blade Slots Cross-Connect Blades Removing a CC Blade Switch Cover Removal Installing a CC Blade Installing a CC Blade Avertissement Removing a Power Supply Module Removing a Power Supply Module Installing a Power Supply Module Removing a Fan Removing a Fan Installing a Fan Installing a Fan Fabric Specifications Maintainability Electrical Dimensions Environmental Regulatory Certifications Shortwave Laser SFP 1G/2G multi-mode Longwave Laser SFP 1G/2G single-mode Page Logging On to a Switch Command Line Interface Table B-1. Command-Line Completion Command Syntax Table B-2. Commands Listed by Authority Level Commands Keywords Admin CommandAuthority Syntax Syntax alias Alias Command Remove alias memberlist Members aliasRename aliasold aliasnew Edit config Config CommandSyntax config Keywords activate config Save config RestoreArchive function are not compatible with the Config Restore Command # ftp symbolicname or ipaddress Syntax date Date CommandKeywords MMDDhhmmCCYY Fallback Fallback Command Table B-3. Group Member Attributes Group CommandSyntax group Keywords add group Table B-4. Group Member Attributes Copy groupsource groupdestinationCreate group type Edit group member Remove group members Following is an example of the Group Edit commandFollowing is an example of the Group List command Members group Following is an example of the Group Members command Hardreset Hardreset CommandPending firmware and disrupts traffic Authority None Help CommandKeywords command Syntax help command keyword Following is an example of the Help Set Beacon command Authority None Syntax history History Command This command clears the event log and all counters Hotreset CommandHotreset Fabric is in the diagnostic operational state Hotswap Hotswap Command To replace? 1,2,3,4,6,7,8,9 1 Fetch accountname ipaddress filesource filedestination Image CommandCleanup Image Lip Command Accountname Passwd CommandChanges a user account’s password Passwd accountname Keywords ipaddress Ping CommandAuthority None Syntax Ping Ipaddress Displays current system process information Ps CommandFollowing is an example of the Ps command Syntax Examples Closes the Telnet session Quit CommandSyntax quit, exit, or logout Config configname Reset Command Zoning SwitchTable B-5. Switch Configuration Defaults System Mfstov Table B-6. Port Configuration Defaults Table B-8. Zoning Configuration Defaults Table B-7. Alarm Threshold Configuration Defaults Table B-9. Snmp Configuration Defaults Table B-11. Security Configuration Defaults Table B-10. System Configuration Defaults Edit Security CommandKeywords active Clear Save Following is an example of the Security History commandHistory Limits Following is an example of the Security List command Following is an example of the Security Limits command Securityset Command Rename securitysetold securitysetnew Delete securitysetGroups securityset Remove securityset group Syntax set Set Command Pagebreak state Setup optionSwitch state Log option Port portnumber Set Config CommandTable B-12. Set Config Port Parameters Keywords blade slotnumber Send Arbff True instead of IDLEs Table B-12. Set Config Port Parameters Table B-13. Security Configuration Parameters Table B-14. Set Config Switch Parameters Threshold Table B-15. Set Config Threshold Parameters Memory. Refer to FC-SW-2 Compliant Table B-16. Set Config Zoning Parameters Arbff Following is an example of the Set Config Port command Following is an example of the Set Config Switch command Following is and example of the Set Config Security command Following is an example of the Set Config Threshold command This Following is an example of the Set Config Zoning command Component list Set Log CommandSet log Archive Port portlist Level level Level keyword to Info at the same time StartStop Stops logging of events Set Port Command Table B-17. Snmp Configuration Settings Set Setup CommandSnmp configuration and one system configuration Set setup Table B-18. System Configuration Settings SANbox2 admin # set setup snmp Trap1Severity See SANbox2 admin # set setup system Following is an example of the Set Setup System command Blade Show CommandAlarm Keywords about Log option Fdmi nodewwnNs option Table B-19. Show Port Parameters PagebreakPanel Perf option LIP Alpd Alps Slot slotnumber Post log Users Steering domainidSupport Topology Following is an example of the Show Chassis command Following is an example of the Show Fabric command Following is an example of the Show Domains commandFollowing is an example of the Show Panel command Following is an example of the Show Fdmi WWN command Following is an example of the Show Fdmi commandFollowing is an example of the Show NS local domain command Following is an example of the Show NS portID command Following is an example of the Show NS domainID commandFollowing is an example of the Show Interface command LIPF8F7 Following is an example of the Show Port command Following is an example of the Show Slot command Following is an example of the Show Topology command Following is an example of the Show Switch command Command Line Interface Show Command Following is an example of the Show Version command Show config Show Config CommandBlade slotnumber Following is an example of the Show Config Threshold command Following is an example of the Show Config Switch command Following is an example of the Show Config Zoning command Keywords component Show Log Command Following is an example of the Show Log command Following is an example of the Show Log Options command Show Perf Command Following is an example of the Show Perf Byte command Errors portnumber Show setup Show Setup CommandMfg Following is an example of the Show Setup Snmp command Following is an example of the Show Setup System command Power from the switch Shutdown CommandShutdown Status Test CommandTest Port portnumber testtype Test port x internal Command Line Interface Test Command Examples The following is an example of the Uptime command Uptime CommandAuthority None Syntax uptime Delete accountname User CommandKeywords accounts Add Following is an example of the User Edit command Following is an example of the User Add command Following is an example of the User List command Following is an example of the User Delete command Following is an example of the Whoami command Whoami CommandWhoami Syntax zone Zone Command Type zone zonetype Members zoneRemove zone memberlist Rename zoneold zonenew Following is an example of the Zone Members command Following is an example of the Zone Zonesets command Syntax zoneset Zoneset Command Zones zoneset Following is an example of the Zoneset List commandRemove zoneset zonelist Rename zonesetold zonesetnew Following is an example of the Zoneset Zones command Opens a Zoning Edit session Zoning Command Following is an example of the Zoning Limits command E2JBOD2 Following is an example of the Zoning List command 59043-03 a 107 Command Line Interface Zoning Command 108 59043-03 a Class 2 Service Access Control List ZoneAdministrative State BootP Fabric Management Switch Class 3 ServiceConfigured Zone Sets Default Visibility Maintenance Mode Input Power LEDInter-Switch Link Maintenance Button Principal Switch Output Power LEDOver Temperature LED Power On Self Test Post Zone User Account SecurityVirtual Private Fabric Zone Worldwide Name WWNPage Numerics Index Index-2 59043-03 a 59043-03 a Index-3 Index-4 59043-03 a 59043-03 a Index-5 Index-6 59043-03 a 59043-03 a Index-7