Virtual Private Fabric Hard Zones | Q-Logic SANBOX2-64 guide

3 – Planning
Fabric Management

3.4.3

Virtual Private Fabric Hard Zones

Virtual Private Fabric (VPF) zoning divides the fabric for purposes of controlling discovery and both inbound and outbound traffic. This type of zoning is useful for providing security and reserving paths between devices to guarantee bandwidth. VPF zoning is a type of hard zoning that is hardware enforced. Members can only transmit to and receive from members of the same VPF zone. The VPF zone boundary is secure against both inbound and outbound traffic. The following rules apply to VPF zones:

■VPF zones that include members from multiple switches must include the ports of the inter-switch links.

■VPF zones cannot cross I/O blades.

■VPF zones cannot overlap; that is, a port can be a member of only one VPF zone.

■VPF zone boundaries supersede both soft and ACL zone boundaries.

■Membership can be defined only by domain ID and port ID.

■VPF zoning supports all port modes.

3.5

Fabric Management

The SANbox Manager application and CLI execute on a management workstation that provides for the configuration, control, maintenance of the fabric. Supported platforms include Windows, Windows NT, Solaris, and Linux. The SANbox Manager application can manage multiple fabrics. Consider how many fabrics will be managed, how many management workstations are needed, and whether the fabrics will be managed with the CLI or SANbox Manager.

The switch supports a combined maximum of 15 logins. This includes SANbox Manager inband and out-of-band logins, Application Programming Interface (API) inband and out-of-band logins and Telnet logins. Of this 15, there can be a combined maximum of 10 SANbox Manager and API logins. Additional logins will be refused.

3-10	59043-01 A

Image 44

Q-Logic SANBOX2-64 manual Virtual Private Fabric Hard Zones, Fabric Management

Contents

SANbox2-64 Fibre Channel Switch Installation Guide SANbox2-64 Fibre Channel Switch Installation Guide Document Revision History Table of Contents Virtual Private Fabric Hard Zones Section InstallationSection Planning Section Diagnostics/Troubleshooting Appendix B Command Line Interface Section Removal/ReplacementAppendix a Specifications SANbox2-6464-Port Fibre Channel Switch Glossary Index Tables Introduction Intended Audience Related Materials Safety Notices Sicherheitshinweise Communications Statements Federal Communications Commission FCC Class a Statement CE Statement Vcci Class a Statement Bsmi Class a Statement Laser Safety Information Electrostatic Discharge Sensitivity Esds Precautions Zugä ngliche Teile Accessible PartsPiè ces Accessibles Technical Support AvailabilityTraining Contact Information Introduction Technical Support 59043-01 a General Description SANbox2-64 64-Port Fibre Channel Switch Chassis Hardware Slot and Fibre Channel Port Numbering Chassis Controls and LEDs Chassis Controls and Leds Placing the Switch in Maintenance Mode Maintenance ButtonResetting a Switch Heartbeat LED Amber Input Power LED GreenChassis LEDs Fibre Channel Ports Over Temperature LED AmberFan Fail LED Amber Small Form-Factor Pluggable SFP Transceivers Port Status LED Port Modes Fabric Ports Translated Loop Port Expansion Port Ethernet Port Ethernet Port Serial Port Serial Port Pin Identification Power Supply Modules Power Supply Components Fans 10. Fans Switch Management General Description Switch Management 59043-01 a Devices Public and Private Single Switch Fabric with Initiators and Targets Redundancy and Latency Dual Switch Fabric with Initiators and Targets Multiple Chassis Fabrics Domain ID, Principal Priority, and Domain ID Lock Common Topologies Performance Distance Bandwidth LatencyPort-to-Port Transmission Combinations Port-to-Port Latency Device Access Access Control List Hard Zone Soft Zone Virtual Private Fabric Hard Zones Fabric Management Fabric Security Planning Fabric Security 59043-01 a Switch Power Requirements Site RequirementsFabric Management Workstation Management Workstation Requirements Installing a Switch Environmental Conditions Mount the Switch SANbox2-64 Rail Kit Install SFP Transceivers Connect the Switch to AC Power Warnung Connect the Management Workstation to the Switch Ethernet and Serial Cable Connections Ethernet Connection Serial Connection Installing SANbox Manager Enter the following command at the Solaris prompt SANsurfer Management Suite Disk Windows Installation SANsurfer Management Suite Disk Linux Installation Enter the following command SANsurfer Management Suite Disk Solaris Installation Press the Enter key Enter the following command SANbox2 Installation Disk Solaris Installation SANbox2 Installation Disk Windows InstallationSANbox2 Installation Disk Linux Installation Configure the Switch Configure the Ports Cable Devices to the Switch Install Firmware Using SANbox Manager to Install Firmware Using the CLI to Install Firmware Enter the following command to install the new firmware Using FTP and the CLI to Install Firmware Close the FTP session Powering Down a Switch Installation Powering Down a Switch 59043-01 a Normal all pass Post DiagnosticsHeartbeat LED Blink Patterns Maintenance Mode Pattern Fatal Error Blink PatternConfiguration File System Error Blink Pattern Internal Firmware Failure Blink Pattern Diagnostics/Troubleshooting Restore the configuration file Logging Error Port Status LED Indications EPort Isolation Excessive Port Errors Diagnostics/Troubleshooting Post Diagnostics Chassis Diagnostics Chassis and Power Supply LEDs Fan Fail LED is Illuminated Over Temperature LED is IlluminatedInput Power LED Is Extinguished Output Power LED Is Extinguished Power Supply Fault LED is Illuminated Recovering a Switch Maintenance Exit Maintenance Image Unpack Maintenance Reset Network Config Maintenance Reset Password FileMaintenance Copy Log Files Maintenance Remove Switch Config Marginal Operating Configurations SFP Transceivers CPU Module Removing the CPU Module Removing the CPU Module Installing the CPU Module Ftp put imagefile Blades Choose the Replace task Choose the slot number 6 for example To install a new I/O blade, enter y Removing an I/O Blade Removal/Replacement Blades Cross-Connect Blades CC Blade Slots Removing a CC Blade Switch Cover Removal Installing a CC Blade Installing a CC Blade Removal/Replacement Removing a Power Supply Module Installing a Power Supply Module Removing a Power Supply Module Removing a Fan Removing a Fan Installing a Fan Removal/Replacement Fans 59043-01 a FC-GS-3 FC-TapeFC-SW-2 Fibre Channel Element MIB RFC Maintainability Dimensions Electrical Environmental Regulatory Certifications Shortwave Laser SFP 1G/2G multi-mode Longwave Laser SFP 1G/2G single-mode Command Line Interface Logging On to a Switch Command Syntax Commands Table B-1. Commands Listed by Authority Level Admin Command AuthoritySyntax Keywords Alias Command Authority Admin Syntax alias Rename aliasold aliasnew Members aliasRemove alias members Config Command Syntax configKeywords activate config Edit config Restore Save config Keywords MMDDhhmmCCYY Date CommandSyntax date Fallback Command Following is an example of the Fallback commandFallback Currently active version Help Command Help command keywordCommand Keyword History History CommandUser Hotswap Command Hotswap Command Line Interface Hotswap Command Image Command Authority Admin Syntax image cleanupKeywords cleanup Unpack file Portnumber Lip CommandLip portnumber Accountname Passwd CommandPasswd accountname Ps Command Examples The following is an example of the Ps commandAuthority User Syntax ps Displays current system process information Quit Command Authority UserCloses the Telnet session Syntax quit, exit, or logout Config configname Reset CommandAuthority Admin Syntax reset Zoning Table B-2. Switch Configuration DefaultsTable B-3. Port Configuration Defaults Table B-4. Alarm Threshold Configuration Defaults Table B-5. Snmp Configuration Defaults Table B-6. System Configuration Defaults Set Command Syntax set Setup option Switch stateLog option Pagebreak state Set Config Command Table B-7. Set Config Port ParametersKeywords blade slotnumber Port portnumber Command Line Interface Set Config Command Table B-8. Set Config Switch Parameters Table B-9. Set Config Threshold Parameters Threshold Table B-10. Set Config Zoning Parameters With formatting and current values will follow Following is an example of the Set Config Port command Mfstov Following is an example of the Set Config Switch command Following is an example of the Set Config Zoning command Following is an example of the Set Config Threshold command Set Log Command Set logArchive Clear Save Level levelPort portlist Set Log Stop command StopStops logging of events Level keyword to Info at the same time Set Port Command Authority Admin State state Set Setup Command Set setupTable B-11. Snmp Configuration Settings Snmp System Table B-12. System Configuration Settings Table B-11. Snmp Configuration Settings Values will follow Following is an example of the Set Setup System command System Show Command AlarmKeywords about Blade Log option Ns option Pagebreak PanelPerf option Table B-13. Show Port Parameters LIP Alpd Alps Post log Slot slotnumber Steering domainid Following is an example of the Show Chassis command Following is an example of the Show Fabric command Following is an example of the Show Panel command Following is an example of the Show Port command Following is an example of the Show Slot command Following is an example of the Show Switch command CPU-0 SANbox2-64 N108 # show topology Blade slotnumber Show Config CommandShow config Following is an example of the Show Config Switch command Following is an example of the Show Config Zoning command Following is an example of the Show Config Threshold command Show Log Command Keywords component Following is an example of the Show Log command Following is an example of the Show Log Options commandFollowing is an example of the Show Log Port command Show Perf Command SANbox2-64 N108 # show perf byte Mfg Show Setup CommandShow setup Following is an example of the Show Setup Snmp command Following is an example of the Show Setup System command Shutdown Command Syntax shutdown Test Command Authority Admin Syntax testKeywords port portnumber testtype Blade slotnumber Test x external Command Line Interface Test Command Authority User Syntax uptime Uptime CommandExamples The following is an example of the Uptime command User Command AccountsAdd Delete accountname Following is an example of the User List command Following is an example of the User Add commandFollowing is an example of the User Delete command Authority User Syntax whoami Whoami CommandExamples The following is an example of the Whoami command Zone Command Syntax zone Members zone Remove zone membersRename zoneold zonenew Type zone zonetype Command Line Interface Following is an example of the Zone Members command Following is an example of the Zone Zonesets command Zoneset Command Syntax zoneset Delete zoneset Remove zoneset zonelistRename zonesetold zonesetnew Zones zoneset Zoning Command Keywords activeEdit Opens a Zoning Edit session Following is an example of the Zoning List command Command Line Interface Command Line Interface Zoning Command 59043-01 a BootP Class 2 ServiceClass 3 Service Fabric Management Switch Input Power LED Output Power LEDOver Temperature LED Power On Self Test Post Small Form Factor Small Form-Factor PluggableTarget Worldwide Name WWNPage Index Index-2 59043-01 a LED Index-4 59043-01 a 59043-01 a Index-5 Index-6 59043-01 a