Fabric Security, User Account Security | Q-Logic SB2A-16B, QLA2342

Image 49

Q-Logic SB2A-16B, QLA2342 manual Fabric Security, User Account Security, Fabric Services

Contents

SANbox2-16 Fibre Channel Switch Installation Guide Firmware VersionS i m p l i f y Document Revision History Introduction SectionGeneral Description Table of Contents Fibre Channel Ports Planning Diagnostics/Troubleshooting InstallationSwitch Power Requirements Connect the Workstation to the Switch Appendix A Specifications Removal/ReplacementAppendix B Command Line Interface Glossary Index Page Figures Port Threshold Alarm Configuration Defaults TablesZoning Configuration Defaults Set Config Switch Parameters Installation Guide Introduction „ SANbox2-8c/16 Switch Management User’s Guide, publication numberIntended Audience Related Materials New in this Release Sicherheitshinweise Safety NoticesNotes informatives relatives à la sécurité 4-3, 4-14 Federal Communications Commission FCC Class A Statement Communications StatementsCanadian Department of Communications Class A Compliance Statement CE Statement BSMI Class A Statement VCCI Class A Statement Electrostatic Discharge Sensitivity ESDS Precautions Laser Safety Information Pièces Accessibles Accessible PartsZugängliche Teile Preamble General Public License Terms And Conditions For Copying, Distribution And Modification modifications or work under the terms of Section 1 above, provided that you also meet all of these conditions b. Accompany it with a written offer, valid for at least three years, to give any third party, for a charge no more than your cost of physically performing source distribution, a complete machine-readable copy of the corresponding source code, to be distributed under the terms of Sections 1 and 2 above on a medium customarily used for software interchange or rights granted herein. You are not responsible for enforcing compliance by third parties to this License NO WARRANTY How to Apply These Terms to Your New ProgramsEND OF TERMS AND CONDITIONS signature of Ty Coon, 1 April Copyright C yyyy name of authorone line to give the programs name and an idea of what it does Availability Technical SupportTraining Contact Information General Description Figure 2-1. SANbox2-16 Fibre Channel Switch Maintenance Button Power SwitchesChassis Controls and LEDs Figure 2-2. Chassis Controls and LEDS Over Temperature LED Amber Chassis LEDsFan Fail LED Amber Figure 2-3. Chassis LEDs Heartbeat LED Amber Input Power LED GreenFibre Channel Ports Figure 2-4. Fibre Channel Ports Port Logged-In LED Port LEDsPort Activity LED Figure 2-5. Port LEDs Port Types Small Form-Factor Pluggable SFP TransceiversFigure 2-6. SFP Transceiver Figure 2-7. Ethernet Port Ethernet Port Figure 2-8. Serial Port and Pin Identification Serial PortTable 2-1. Serial Port Pin Identification Figure 2-9. Power Supply Components Power Supplies SANsurfer Switch Manager Switch ManagementFans Figure 2-10. Fans Command Line Interface SANsurfer Switch Manager Web AppletSANsurfer Switch Manager Application Programming Interface Simple Network Management Protocol 2.7.6 File Transfer Protocol Devices Planning Table 3-1. Zoning Database Limits Device Access Soft Zones Access Control List Hard Zones Distance Performance Latency BandwidthTable 3-2. Port-to-Port Transmission Combinations Table 3-3. Port-to-Port Latency Optimizing Device Performance Multiple Chassis Fabrics Domain ID, Principal Priority, and Domain ID Lock Cascade Topology Common TopologiesFigure 3-1. Cascade-with-a-Loop Topology Figure 3-2. Mesh Topology Mesh Topology Figure 3-3. Multistage Topology Multistage Topology Fabric Security Fabric ServicesUser Account Security Fabric Management Switch Power Requirements InstallationSite Requirements Fabric Management Workstation Figure 4-1. SANbox2-16 Fibre Channel Switch Installing a SwitchEnvironmental Conditions AVERTISSEMENT Mount the SwitchWARNUNG page A-3 temperature. Refer to ”Environmental” on page A-4„ If the switch is mounted in a closed or multi-unit rack Figure 4-2. Installing Rack Mount Brackets Install SFP Transceivers Figure 4-3. Ethernet and Serial Cable Connections Connect the Workstation to the Switch Setting the Workstation IP Address for Ethernet Connections Configure the WorkstationConfiguring the Workstation Serial Port 2. Choose Make New Connection Enter the following COM Port settings in the COM Properties 3. Proceed to ”Connect the Switch to AC Power” on page SANsurfer Management Suite Disk - Windows Installation Install SANsurfer Switch Manager„ 4.2.5.1 SANsurfer Management Suite Disk - Windows Installation „ 4.2.5.2 SANsurfer Management Suite Disk - Linux Installation mount /mnt/cdrom SANsurfer Management Suite Disk - Linux Installationmozilla file/mnt/cdrom/StartHere.htm or netscape file/mnt/cdrom/StartHere.htm chmod +x sansurferlinuxinstall.bin SANsurfer Management Suite Disk - Solaris Installationsansurferlinuxinstall.bin chmod +x sansurfersolarisinstall.bin SANsurfer Switch Manager Installation Disk - Linux Installation SANsurfer Switch Manager Installation Disk - Windows Installation Start SANsurfer Switch Manager SANsurfer Switch Manager Installation Disk - Solaris Installation Connect the Switch to AC Power „ Für 125 Volt-Netze 10 Ampere Kabel mit UL- und CSA-Zulassung To energize the switch, do the following Appendix A Specifications telnet SANbox Login admin Password Configure the Switch Cable Devices to the Switch Install Firmware Using the CLI to Install Firmware Using SANsurfer Switch Manager to Install Firmware Using FTP and the CLI to Install Firmware telnet telnet switchname Powering Down a Switch 4-24 POST Diagnostics Diagnostics/Troubleshooting „ 3 blinks - System Error Blink Pattern System Error Blink Pattern„ 4 blinks - Configuration File System Error Blink Pattern Heartbeat LED Blink Patterns Configuration File System Error Blink Pattern 3 Reset User Accounts to Default 4 Copy Log Files 0 Exit 1 Image Unpack 2 Reset Network Config5 Remove Switch Config 6 Remake Filesystem 7 Reset Switch passwordimages telnet xxx.xxx.xxx.xxx or telnet switchname Logged-In LED Indications Logging In ErrorFigure 5-1. Logged-In LED Figure 5-2. Logged-In LED Indications EPort Isolation Excessive Port Errors „ Yes - Continue Figure 5-3. Chassis and Power Supply LEDs Chassis Diagnostics „ No - Refer to ”Output Power LED Is Extinguished” on page Input Power LED Is ExtinguishedChassis Over Temperature LED is Illuminated Fan Fail LED is Illuminated Output Power LED Is Extinguished Recovering a Switch Power Supply Over Temperature LED is Illuminated Maintenance - Exit Maintenance - Reset Network Config Maintenance - Image UnpackMaintenance - Reset User Accounts to Default Maintenance - Copy Log Files Maintenance - Reset Switch Maintenance - Remake FilesystemMaintenance - Show Firmware Versions Maintenance - Set Active Image Removal/Replacement SFP Transceivers Figure 6-1. SFP Transceiver Installation Figure 6-2. Power Supply Removal Figure 6-3. Fan Removal Figure 6-4. Fan Installation for Switch Model SB2A-16B Fans Fabric Specifications SpecificationsAppendix A Maintainability Electrical Dimensions Environmental Regulatory Certifications Regulatory Certifications Logging On to a Switch Command Line InterfaceUser Accounts Appendix B Modifying a Configuration Working with Switch ConfigurationsSANbox2 # config list Current list of configurations default config10132003 Backing up and Restoring Switch Configurations userimages password images ftp bin ftp ipaddress userimages password images ftpbin ftpget configdataftp put configswitch16910112003 configdata ftpquit SANbox2 # admin start SANbox2 admin # config restore Table B-1. Command-Line Completion Commands Table B-2. Commands Listed by Authority Level Authority Admin CommandSyntax Keywords Syntax alias Alias Command remove alias memberlist members aliasrename aliasold aliasnew Syntax config Config Commandactivate configname backup edit configname list save configname Setup Command” on page B-49restore SANbox2 # admin start SANbox2 admin # config backup Syntax date Date CommandMMDDhhmmCCYY Keywords MMDDhhmmCCYY fallback Fallback Command Admin session Hardreset Commandpage B-25 page B-18 Keywords command Help CommandSyntax help command keyword Authority None Authority None Syntax history History Command hotreset Hotreset Command Image Command SANbox2 admin # lip Lip Command Syntax passwd accountname Keywords accountname Passwd Command Keywords ipaddress Ping Command Ps Command Syntax quit, exit, or logout Quit Command config configname Reset Commandconfig configname Refer to Table B-3 through Table B-8 system Table B-3. Switch Configuration Defaultszoning Table B-4. Port Configuration Defaults Table B-6. Zoning Configuration Defaults Table B-5. Port Threshold Alarm Configuration Defaults Table B-7. SNMP Configuration Defaults Table B-8. System Configuration Defaults Syntax set Set Command switch state setup optionpagebreak state port option Table B-9. Set Config Port Parameters Set Config Commandport portnumber ports portnumber Table B-9. Set Config Port Parameters Continued Parameter Table B-10. Set Config Switch Parameters threshold Table B-10. Set Config Switch Parameters Continued Table B-11. Set Config Threshold Parameters memory. Refer to ”FC-SW-2 Compliant” on page B-37 . The Table B-12. Set Config Zoning Parameters B-40 Examples The following is an example of the Set Config Port command The following is an example of the Set Config Threshold command The following is an example of the Set Config Switch commandB-41 B-42 B-43 The following is an example of the Set Config Zoning command set log Set Log Commandarchive clear Port Monitors all port events Switch Stops logging of events stopand the Level keyword to Info at the same time enable Set Port CommandKeywords portnumber bypass alpa B-48 Down Disables the port by removing power from the port lasers Table B-13. SNMP Configuration Settings Set Setup CommandEntry Table B-14. System Configuration Settings Table B-13. SNMP Configuration Settings Continued Table B-14. System Configuration Settings Continued Examples The following is an example of the Set Setup SNMP command B-53 B-54 The following is an example of the Set Setup System command alarm option Show CommandKeywords about fdmi portwwn interface log option lsdb log option fdmi portwwnns option Table B-15. Show Port Parameters perf optionpagebreak Table B-15. Show Port Parameters Continued Displays the Power On Self Test POST log which contains results from the POST steering domainid Table B-16. Switch Operational Parameters Table B-16. Switch Operational Parameters Continued users topologyversion The following is an example of the Show FDMI command The following is an example of the Show Fabric command100000c0dd007781 100000c0dd006a2d The following is an example of the Show NS local domain command The following is an example of the Show FDMI WWN commandB-64 The following is an example of the Show NS portID command The following is an example of the Show NS domainID commandThe following is an example of the Show Interface command B-65 TotalLinkResets The following is an example of the Show Port commandPort Number 200100c0dd00bcb8 The following is an example of the Show Topology command The following is an example of the Show Switch commandB-67 The following is an example of the Show Topology command for port 10.20.11.192 use set setup system to update The following is an example of the Show Version commandUserAuthentication Eth0NetworkAddress Show Config Command The following is an example of the Show Config Threshold command The following is an example of the Show Config Switch command1 Appears only if FC-SW-2 Compliant is False B-72 The following is an example of the Show Config Zoning command show log Show Log Commandcomponent level Current settings for log component NameServer settingsSANbox2 # show log level Current settings for log options The following is an example of the Show Log command errors Show Perf Commandshow perf byte The following is an example of the Show Perf Byte command Examples The following is an example of the Show Perf commandB-77 SANbox2 # show setup mfg Show Setup CommandManufacturing Information B-79 The following is an example of the Show Setup Snmp command B-80 The following is an example of the Show Setup System command shutdown Shutdown Command admin start Test Commandset port x state diagnostics „ To run an internal loopback test, enter the following 3. A series of test parameters are displayed on the screen. Press the Enter key to accept each default parameter value, or type a new value for each parameter and press the Enter key. The TestLength parameter is the number of frames sent, the FrameSize 256 byte maximum in some cases parameter is the number of bytes in each frame, and the DataPattern parameter is the pattern in the payload. Before running the test, make sure that the device attached to the port can handle the test parameters Authority None Syntax uptime Uptime Command Keywords accounts User Command „ User accounts are enforced in SANsurfer Switch Manager only if the The following is an example of the User List command The following is an example of the User Delete commandB-88 whoami Whoami Command Syntax zone Zone Command remove zone memberlist members zonerename zoneold zonenew type zone zonetype The following is an example of the Zone Members command Examples The following is an example of the Zone List command SANbox2 # zone zonesets zone1 The following is an example of the Zone Zonesets commandCurrent List of ZoneSets for Zone zone1 zoneset1 Syntax zoneset Zoneset Command Removes a list of zones given by zonelist from the zone set given by Keywords active Zoning Command Table B-17. Zoning Database Limits LinkResetZone The following is an example of the Zoning Limits commandLinkResetZone2 MaxZonesInZoneSets B-99 The following is an example of the Zoning List command wwn2215c3 50060482bfd218c2 50060482bfd218d2 10000000c92215 B-100 Glossary Class 3 Service Heartbeat LED NLPort Zone Set ZoneZoning Database Glossary-6 Numerics IndexPage Page Page