background image

59183-03  A

SANbox 5600 Series

Fibre Channel Switch

Command Line Interface Guide

Firmware Version 7.4

Summary of Contents for SANbox 5600 Series

Page 1: ...59183 03 A SANbox 5600 Series Fibre Channel Switch Command Line Interface Guide Firmware Version 7 4...

Page 2: ...ations described in this document for any of these products are for illustrative purposes only QLogic Corporation makes no representation nor warranty that such applications are suitable for the speci...

Page 3: ...2 4 Setting Page Breaks 2 5 Creating a Support File 2 6 Downloading and Uploading Files 2 7 3 User Account Configuration Displaying User Account Information 3 2 Creating User Accounts 3 3 Modifying U...

Page 4: ...ciation 4 17 Renaming a User Defined Association 4 18 Copying an Association 4 18 Resetting the IP Security Configuration 4 18 5 Switch Configuration Displaying Switch Information 5 1 Name Server Info...

Page 5: ...h 5 25 Online Tests for Switches 5 25 Offline Tests for Switches 5 26 Connectivity Tests for Switches 5 27 Displaying Switch Test Status 5 28 Canceling a Switch Test 5 28 Verifying and Tracing Fibre C...

Page 6: ...tory 7 8 Zoning Database Limits 7 9 Configuring the Zoning Database 7 10 Modifying the Zoning Database 7 12 Saving the Active and Merged Zone Sets 7 13 Resetting the Zoning Database 7 13 Removing Inac...

Page 7: ...ity Database Modification History 9 6 Security Database Limits 9 6 Configuring the Security Database 9 7 Modifying the Security Database 9 9 Resetting the Security Database 9 10 Managing Security Sets...

Page 8: ...ome Messages 12 3 Technical Support Interface 12 4 Configuring the Call Home Service 12 5 Managing the Call Home Database 12 6 Displaying Call Home Database Information 12 7 Creating a Profile 12 9 De...

Page 9: ...ords 14 2 Notes and Examples 14 2 Command Listing 14 2 Admin 14 3 Alias 14 4 Callhome 14 6 Capture 14 10 Config 14 13 Create 14 17 Date 14 20 Exit 14 21 Fcping 14 22 Fctrace 14 23 Feature 14 25 Firmwa...

Page 10: ...108 Set Setup Radius 14 111 Set Setup Services 14 115 Set Setup SNMP 14 118 Set Setup System 14 122 Set Switch State 14 130 Set Timezone 14 131 Show About 14 132 Show Alarm 14 134 Show Broadcast 14 1...

Page 11: ...78 Show Switch 14 179 Show System 14 181 Show Testlog 14 182 Show Timezone 14 183 Show Topology 14 184 Show Users 14 185 Show Version 14 186 Shutdown 14 188 Snmpv3user 14 189 Test Cancel 14 191 Test P...

Page 12: ...14 72 14 12 Port Threshold Alarm Configuration Defaults 14 73 14 13 Zoning Configuration Defaults 14 74 14 14 SNMP Configuration Defaults 14 74 14 15 RADIUS Configuration Defaults 14 75 14 16 Switch S...

Page 13: ...14 124 14 36 Timer Configuration Parameters 14 125 14 37 Show About Display Entries 14 132 14 38 Log Monitoring Components 14 149 14 39 Transceiver Information 14 154 14 40 Show Port Parameters 14 16...

Page 14: ...Page xiv 59183 03 A SANbox 5600 Series Fibre Channel Switch Command Line Interface Guide S Notes...

Page 15: ...figuration setting the date and time backing up and restoring the switch configuration resetting the switch installing firmware and installing feature licenses Section 6 describes port configurations...

Page 16: ...de 59097 06 QLogic Fibre Channel Switch Event Message Guide publication number 59060 05 SANbox Simple Network Management Protocol Reference Guide publication number 59047 09 CIM Agent Reference Guide...

Page 17: ...arranty is available during local standard working hours excluding QLogic Observed Holidays Training QLogic offers certification training for the technical professional for both the SANblade HBAs and...

Page 18: ...Phone 1 952 932 4040 Europe Middle East and Africa Region Email emeasupport qlogic com Phone Numbers by Language 353 1 6924960 English 353 1 6924961 Fran ais 353 1 6924962 Deutsch 353 1 6924963 Espa...

Page 19: ...Opening and Closing an Admin Session Entering Commands Getting Help Setting Page Breaks Creating a Support File Downloading and Uploading Files NOTE Throughout this document references in text to com...

Page 20: ...telnet ip_address 2 Enter an account name and password The default account name is admin and its password is password switch login admin password xxxxxxxx The following warning appears when you log i...

Page 21: ...an Admin session A user account must have Admin authority to enter the Admin Start command The following is an example of how to open and close an Admin session SANbox admin start SANbox admin SANbox...

Page 22: ...e If CONFIG_NAME is given and it exists it gets edited otherwise it gets created If it is not given the currently active configuration is edited Admin mode is required for this command Usage config ed...

Page 23: ...o quickly to read it You can limit the display to 20 lines by turning on page breaks By default page breaks are turned off The following is an example of how to turn page breaks on and how it affects...

Page 24: ...chine y n y Enter IPv4 IPv6 Address or hostname of remote computer 10 20 33 130 Login name johndoe Enter remote directory name bin support Would you like to continue downloading support file y n n y C...

Page 25: ...ame and password images images user images password images 4 Set binary mode and use the Get command to download the file dump_support tgz ftp bin ftp get dump_support tgz xxxxx bytes sent in xx secs...

Page 26: ...sword images 3 Set binary mode and use the Put command to upload the file config_switch_169 ftp put config_switch_169 configdata xxxxx bytes sent in xx secs ftp quit For more information about reinsta...

Page 27: ...tion Creating User Accounts Modifying User Accounts and Passwords Table 3 1 Factory User Accounts User Account Name Password Purpose admin password Provides access to the Telnet server for managing th...

Page 28: ...list of user accounts images admin authority False never expires admin admin authority True never expires chuckca admin authority False expires in 50 days gregj admin authority True expires in 100 day...

Page 29: ...ation date sets the date when the user account expires Only the Admin user account can create user accounts You add user accounts with the User Add command The following example creates a new user acc...

Page 30: ...q and the ENTER key to abort this command account name 1 15 chars user1 set account expiration in days 0 2000 0 never 0 should this account have admin authority y n n OK to modify user account user1 w...

Page 31: ...Network Configuration Configuring the Ethernet Port Verifying a Switch in the Network Managing IP Security Displaying the Network Configuration The Show Fabric command displays IP addresses for all s...

Page 32: ...p System command in an Admin session to configure the Ethernet port and other network parameters You can configure all of the following parameters in one session or you can configure specific paramete...

Page 33: ...ist press q or Q and the ENTER key to do so Current Values EthIPv4NetworkEnable True EthIPv4NetworkDiscovery Static EthIPv4NetworkAddress 10 20 116 133 EthIPv4NetworkMask 255 255 255 0 EthIPv4GatewayA...

Page 34: ...System Ipv6 command SANbox admin set setup system ipv6 A list of attributes with formatting and current values will follow Enter a new value or simply press the ENTER key to accept the current value...

Page 35: ...urrent Values DNSClientEnabled False DNSLocalHostname undefined DNSServerDiscovery Static DNSServer1Address undefined DNSServer2Address undefined DNSServer3Address undefined DNSSearchListDiscovery Sta...

Page 36: ...om making changes at the same time through Telnet QuickTools Enterprise Fabric Suite 2007 or another management application You must also open an Ipsec Edit session with the Ipsec Edit command The Ips...

Page 37: ...lating Security Payload ESP Level of protection IP Security discard or none Policies can define security for host to host host to gateway and gateway to gateway connections one policy for each directi...

Page 38: ...t using maintenance mode and connecting through the serial port Displaying IP Security Information You can display the security policy and security association databases in the following ways Active p...

Page 39: ...ory enter the Ipsec History command to display a record of policy and association modifications as shown in the following example SANbox ipsec history IPsec Database History ConfigurationLastEditedBy...

Page 40: ...dSPs 128 0 In an Ipsec Edit session Ipsec Limits command displays the number of both configured associations and policies plus those created in the edit session but not yet saved Managing the Security...

Page 41: ...g value 0 127 bytes Host to host switch host SourceAddress hostname IPv4 or IPv6 Address PrefixLength fe80 2c0 ddff fe03 d4c1 SourcePort decimal value 1 65535 DestinationAddress hostname IPv4 or IPv6...

Page 42: ...he Ipsec Policy Delete command as shown in the following example SANbox admin start SANbox admin ipsec edit SANbox admin ipsec ipsec policy delete policy_1 The security policy will be deleted Please c...

Page 43: ...press ENTER to not specify value q to quit n for none Description string value 0 127 bytes SourceAddress IPv4 IPv6 or hostname PrefixLength SourcePort decimal value 1 65535 DestinationAddress IPv4 IPv...

Page 44: ...olicy_1 enter the Ipsec Policy Copy command as shown in the following example SANbox admin start SANbox admin ipsec edit SANbox admin ipsec ipsec policy copy policy_1 policy_a SANbox admin ipsec ipsec...

Page 45: ...ddress fe80 2c0 ddff fe03 d4c1 DestinationAddress hostname IPv4 or IPv6 Address fe80 250 daff feb7 9d02 Protocol 1 esp 2 esp old 3 ah 4 ah old 1 SPI decimal value 256 4294967295 333 Authentication sel...

Page 46: ...psec Association Delete command as shown in the following example SANbox admin start SANbox admin ipsec edit SANbox admin ipsec ipsec association delete association_1 The security association will be...

Page 47: ...ue q to quit n for none Description string value 0 127 bytes SourceAddress IPv4 IPv6 or hostname DestinationAddress IPv4 IPv6 or hostname Protocol 1 esp 2 esp old 3 ah 4 ah old ah SPI decimal value 25...

Page 48: ...To copy an association association_1 enter the Ipsec Association Copy command as shown in the following example SANbox admin start SANbox admin ipsec edit SANbox admin ipsec ipsec association copy as...

Page 49: ...c command deletes all polices and associations from the switch but does not require an Ipsec Edit session SANbox admin start SANbox admin reset ipsec The IPsec configuration will be reset and the defa...

Page 50: ...4 Network Configuration Managing IP Security 4 20 59183 03 A S Notes...

Page 51: ...g a Switch Installing Firmware Testing a Switch Verifying and Tracing Fibre Channel Connections Managing Switch Feature Upgrades Managing Idle Session Timers Displaying Switch Information You can disp...

Page 52: ...c6 NL 3 22 00 00 20 37 2b 07 b4 20 00 00 20 37 2b 07 b4 5 8 0x8 0824c9 NL 3 22 00 00 20 37 2b 08 57 20 00 00 20 37 2b 08 57 6 8 0x8 0824cb NL 3 22 00 00 20 37 1b cf f6 20 00 00 20 37 1b cf f6 7 8 0x8...

Page 53: ...x SwitchWWN 10 00 00 c0 dd 00 bc 56 BootVersion Vx x x x 0 day month date time year CreditPool 0 DomainID 19 0x13 FirstPortAddress 130000 FlashSize MBytes 128 LogFilterLevel Critical MaxPorts 20 Numbe...

Page 54: ...pp 255 224 0 0 0 5 00 00 09 2 03 02 30 mserver 256 224 0 0 0 7 00 00 06 2 03 02 30 eport 257 224 0 0 0 6 00 00 13 2 03 02 30 zoning 282 254 0 0 0 5 00 00 00 2 03 02 26 qfsApp 284 224 0 0 0 6 00 00 08...

Page 55: ...in s 44 sec s Reason last reset NormalReset Configuration Information The Show Config command displays a variety of configuration information at the port and switch levels In addition to the basic swi...

Page 56: ...ue FDMIEnabled False FDMIEntries 10 DefaultDomainID 19 0x13 DomainIDLock True SymbolicName sw108 R_A_TOV 10000 E_D_TOV 2000 PrincipalPriority 254 ConfigDescription Default Config ConfigLastSavedBy adm...

Page 57: ...70 80 2 False No port binding entries found 3 True 10 20 30 40 50 60 70 80 4 True 10 20 30 40 50 60 70 80 5 False No port binding entries found 6 True 10 20 30 40 50 60 70 81 7 False No port binding e...

Page 58: ...elf Test POST results revealed by the Heartbeat LED blink patterns The result is normal operation or a blink pattern indicating a critical error as described in Table 5 1 Refer to the SANbox 5600 Seri...

Page 59: ...Show Version command SANbox show version Command Line Interface SHell CLISH SystemDescription SANbox 5600 FC Switch HostName undefined EthIPv4NetworkAddress 10 20 11 192 EthIPv6NetworkAddress MACAddr...

Page 60: ...ands Refer to Table 14 28 for a description of the switch services Enter the Show Setup Services command to display the current switch service status as shown in the following example SANbox show setu...

Page 61: ...may be required after enabling a service If services are disabled the connection to the switch may be lost When enabling SSL please verify that the date time settings on this switch and the workstatio...

Page 62: ...ration Copying a Switch Configuration Deleting a Switch Configuration Modifying a Switch Configuration Backing Up and Restoring a Switch Configuration Displaying a List of Switch Configurations Enter...

Page 63: ...ation is assumed The Config Edit session provides access to the Set Config commands with which you make modifications to the port switch port threshold alarm or zoning configuration components as show...

Page 64: ...rue False True FDMIEntries decimal value 0 1000 1000 DefaultDomainID decimal value 1 239 2 DomainIDLock True False False SymbolicName string max 32 chars SANbox R_A_TOV decimal value 100 100000 msec 1...

Page 65: ...ses The security database except the group primary and secondary secrets The Call Home database and Call Home service configuration Downloading the Configuration File You use FTP to download the confi...

Page 66: ...replaces all configuration information on the switch and afterwards the switch is automatically reset If the restore process changes the IP address all management sessions are terminated Use the Set S...

Page 67: ...tion which is required for Secure Socket Layer SSL connections If you are using the date command you can set the time zone using the Set Timezone command The default time zone is Universal Time UTC al...

Page 68: ...merica Guatemala America Guayaquil America Guyana America Halifax America Havana America Hermosillo America Indiana America Indianapolis America Monterrey America Montevideo America Montreal America M...

Page 69: ...p A list of attributes with formatting and current values will follow Enter a new value or simply press the ENTER key to accept the current value If you wish to terminate this process before reaching...

Page 70: ...on about the conditions for a non disruptive activation The Firmware Install and the Image Install commands automate the firmware installation process and perform a disruptive activation as described...

Page 71: ...is in the diagnostic state No Zoning Edit sessions are open on the switch No changes are being made to attached devices including powering up powering down disconnecting connecting and HBA configurati...

Page 72: ...te the firmware SANbox admin start SANbox firmware install The switch will be reset This process will cause a disruption to I O traffic Continuing with this action will terminate all management sessio...

Page 73: ...pportunity to cancel About to install image Do you want to continue y n y Connected to 10 20 20 200 10 20 20 200 220 localhost localdomain FTP server Version wu 2 6 1 18 ready 5 Enter the password for...

Page 74: ...can enter the Image Fetch command SANbox admin start SANbox admin image fetch account_name ip_address filename If your workstation has a TFTP server you can enter the Image TFTP command to download th...

Page 75: ...Connectivity Tests for Switches Displaying Switch Test Status Canceling a Switch Test Online Tests for Switches An online test is a non disruptive test that exercises port to device connections for al...

Page 76: ...g example performs an offline internal loopback test on a switch SANbox admin start SANbox admin set switch state diagnostics SANbox admin test switch offline internal A list of attributes with format...

Page 77: ...l ports The following example performs a connectivity internal test on a switch SANbox admin start SANbox admin set switch state diagnostics SANbox admin test switch connectivity internal A list of at...

Page 78: ...itch Test To cancel a switch test that is in progress enter the Test Cancel Switch command Verifying and Tracing Fibre Channel Connections You can verify Fibre Channel connections between the switch a...

Page 79: ...phs port performance Fabric Security provides for Secure Socket Layer SSL and Secure Shell SSH connection security device security using Challenge Handshake Authentication Protocol CHAP and remote aut...

Page 80: ...can limit the duration of idle login sessions and idle Admin sessions Admin Start command You can specify limits up to 1 440 minutes specifying 0 means unlimited Idle login sessions that exceed the l...

Page 81: ...rrent values will follow Enter a new value or simply press the ENTER key to accept the current value If you wish to terminate this process before reaching the end of the list press q or Q and the ENTE...

Page 82: ...5 Switch Configuration Managing Idle Session Timers 5 32 59183 03 A S Notes...

Page 83: ...fying Port Operating Characteristics Port Binding Resetting a Port Configuring Port Threshold Alarms Testing a Port Displaying Port Information You can display the following port information Port Conf...

Page 84: ...er to Table 14 19 for a description of these parameters SANbox show config port 3 Configuration Name default Port Number 3 AdminState Offline LinkSpeed Auto PortType GL SymbolicName Port3 ALFairness F...

Page 85: ...e Inactive TestFaultCode 00000000 LoginStatus NotLoggedIn TestStatus NeverRun MaxCredit 16 UpstreamISL False MediaSpeeds 1Gb s 2Gb s 4Gb s XmitterEnabled True ALInit 1 LIP_F8_F7 0 ALInitError 0 LinkFa...

Page 86: ...Configuration Name default Threshold Configuration Information ThresholdMonitoringEnabled False CRCErrorsMonitoringEnabled True RisingTrigger 25 FallingTrigger 1 SampleWindow 10 DecodeErrorsMonitoring...

Page 87: ...rames Values are expressed in thousands K and millions M of bytes or frames per second SANbox show perf Port Bytes s Bytes s Bytes s Frames s Frames s Frames s Number in out total in out total 0 7K 13...

Page 88: ...m 95 00 3 90 17 00 0 637 1 264 HighWarning 90 00 3 70 14 00 0 637 0 791 LowWarning 20 00 2 90 2 00 0 082 0 028 LowAlarm 25 00 2 70 1 00 0 073 0 019 Modifying Port Operating Characteristics You can mak...

Page 89: ...b s 2 2Gb s 4 4Gb s A Auto Auto PortType GL G F FL Donor GL SymPortName string max 32 chars Port1 ALFairness True False False DeviceScanEnable True False True ForceOfflineRSCN True False False ARB_FF...

Page 90: ...command The following example configures ports 0 19 based on port 3 SANbox admin start SANbox admin config edit SANbox admin set config ports 3 SANbox admin config config save SANbox admin config acti...

Page 91: ...60 70 80 1 True 10 20 30 40 50 60 70 80 2 False No port binding entries found 3 True 10 20 30 40 50 60 70 80 4 True 10 20 30 40 50 60 70 80 5 False No port binding entries found 6 True 10 20 30 40 50...

Page 92: ...urrent value If you wish to terminate this process before reaching the end of the list press q or Q and the ENTER key to do so PortBindingEnabled True False False true WWN N None WWN None 10 00 00 c0...

Page 93: ...s Device logout errors Loss of signal errors You make changes to the port threshold alarms by modifying the switch configuration as described in Modifying a Switch Configuration on page 5 13 Refer to...

Page 94: ...e 1 1000 25 FallingTrigger decimal value 0 1000 0 SampleWindow decimal value 1 1000 sec 10 ISLMonitoringEnabled True False True RisingTrigger decimal value 1 1000 2 FallingTrigger decimal value 0 1000...

Page 95: ...s an example of an online test SANbox admin start SANbox admin test port 1 online A list of attributes with formatting and current values will follow Enter a new value or simply press the ENTER key to...

Page 96: ...rt 1 state diagnostics SANbox admin test port 1 offline internal A list of attributes with formatting and current values will follow Enter a new value or simply press the ENTER key to accept the defau...

Page 97: ...enter the Test Cancel Port command SANbox show donor Port Config Ext Credit Max Credit Donated Member of Valid Groups to Number Type Requested Available to Port Donor Group Extend Credit 0 GL 0 16 Non...

Page 98: ...6 Port Configuration Testing a Port 6 16 59183 03 A S Notes...

Page 99: ...onal group Reserve a path and its bandwidth from one port to another A zone is a named group of ports or devices Members of the same zone can communicate with each other and transmit outside the zone...

Page 100: ...d from another switch In the latter case this is also known as the merged zone set Active This zoning database is the active zone set You can display the following information about the zoning databas...

Page 101: ...wwn wwn_23bd31 50 06 04 82 bf d2 18 c2 50 06 04 82 bf d2 18 d2 10 00 00 00 c9 23 bd 31 wwn_221416 50 06 04 82 bf d2 18 c2 50 06 04 82 bf d2 18 d2 10 00 00 00 c9 22 14 16 wwn_2215c3 50 06 04 82 bf d2 1...

Page 102: ...50 06 04 82 bf d2 18 c2 50 06 04 82 bf d2 18 d2 21 00 00 e0 8b 02 41 2f wwn_23bd31 50 06 04 82 bf d2 18 c2 50 06 04 82 bf d2 18 d2 10 00 00 00 c9 23 bd 31 wwn_221416 50 06 04 82 bf d2 18 c2 50 06 04...

Page 103: ...ve the merged database locally execute the zoning merged capture command To edit the merged database use the zoning edit merged command To remove the merged database use the zoning restore command Mer...

Page 104: ...zones ssss Current List of Zones for ZoneSet ssss zone1 zone2 zone3 Enter the Zone List command to display the zones and the zone sets to which they belong as shown in the following example SANbox zo...

Page 105: ...not members of any zone set as shown in the following example SANbox zone orphans Current list of orphan zones zone3 zone4 Alias and Alias Membership Information The Alias List and Alias Members comma...

Page 106: ...eSetLastActivated DeactivatedOn day mon date hh mm ss yyyy Database Checksum 00000000 Inactive Database Information ConfigurationLastEditedBy admin OB session17 ConfigurationLastEditedOn day mon date...

Page 107: ...Current Zoning Name MaxZoneSets 256 6 MaxZones 2000 17 MaxAliases 2500 1 MaxTotalMembers 10000 166 MaxZonesInZoneSets 2000 19 MaxMembersPerZone 2000 10 D_1_JBOD_1 23 D_1_Photons 9 D_2_JBOD1 16 D_2_Ne...

Page 108: ...s the discarding of all zone sets except the active zone set If MergeAutoSave is False on a switch and a new zone set is activated elsewhere in the fabric or a fabric merge occurs you can choose how t...

Page 109: ...as shown in the following example SANbox admin start SANbox admin config edit The config named default is being edited SANbox admin config set config zoning A list of attributes with formatting and c...

Page 110: ...min zoning zoneset SANbox admin zoning zone SANbox admin zoning alias SANbox admin zoning zoning When you are finished making changes enter the Zoning Save command to save the changes and close the Zo...

Page 111: ...set as shown in the following example SANbox admin zoning merged capture This command will overwrite the configured zoning database in NVRAM Please confirm y n n y The merged zoning database has been...

Page 112: ...y SANbox admin zoning save Managing Zone Sets Managing zone sets consists of the following tasks Create a Zone Set Delete a Zone Set Rename a Zone Set Copy a Zone Set Add Zones to a Zone Set Remove Z...

Page 113: ...dmin zoning edit SANbox admin zoning zoneset rename zoneset_old zoneset_new SANbox admin zoning zoning save Copy a Zone Set Enter the Zoneset Copy command to copy a zone set and its contents to a new...

Page 114: ...et Activate command to apply zoning to the fabric as shown in the following example SANbox admin start SANbox admin zoneset activate zoneset_1 Deactivate a Zone Set Enter the Zoneset Deactivate comman...

Page 115: ...admin start SANbox admin zoning edit SANbox admin zoning zone delete zone_1 SANbox admin zoning zoning save Rename a Zone Enter the Zone Rename command to rename zone_1 to zone_a as shown in the follo...

Page 116: ...dmin start SANbox admin zoning edit SANbox admin zoning zone add zone_1 alias_1 1 4 1 5 SANbox admin zoning zoning save Remove Members from a Zone Enter the Zone Remove command to remove ports devices...

Page 117: ...g example SANbox admin start SANbox admin zoning edit SANbox admin zoning alias create alias_1 SANbox admin zoning zoning save Delete an Alias Enter the Alias Delete command to delete alias_1 from the...

Page 118: ...ve Add Members to an Alias Enter the Alias Add command to add ports devices to alias_1 as shown in the following example SANbox admin start SANbox admin zoning edit SANbox admin zoning alias add alias...

Page 119: ...ons The Secure SHell protocol SSH secures Telnet connections to the switch The Secure Sockets Layer SSL protocol secures switch connections to the following management applications Enterprise Fabric S...

Page 120: ...dmin start SANbox admin set setup services A list of attributes with formatting and current values will follow Enter a new value or simply press the ENTER key to accept the current value If you wish t...

Page 121: ...switch The security certificate is required to establish an SSL connection with a management application such as Enterprise Fabric Suite 2007 or QuickTools The certificate is valid 24 hours before the...

Page 122: ...8 Connection Security Configuration Creating an SSL Security Certificate 8 4 59183 03 A S Notes...

Page 123: ...of device worldwide names that are authorized to attach to a switch There are three types of groups one for other switches ISL another for devices port and a third for devices issuing management serve...

Page 124: ...ion Security Set Membership Information Group Membership Information Security Database Modification History Security Database Limits Configured Security Set Information The Securityset List and the Se...

Page 125: ...SANbox security list Active Security Information SecuritySet Group GroupMember No active securityset defined Configured Security Information SecuritySet Group GroupMember alpha group1 ISL 10 00 00 00...

Page 126: ...n SecuritySet Group GroupMember alpha group1 ISL 10 00 00 00 00 10 21 16 Authentication Chap Primary Hash MD5 Primary Secret Secondary Hash SHA 1 Secondary Secret Binding 0 10 00 00 00 00 10 21 17 Aut...

Page 127: ...tySet alpha group1 ISL group2 Port Enter the Group Securitysets command to display the security sets for which a specified group is a member as shown in the following example SANbox group securitysets...

Page 128: ...ssion11 ConfigurationLastEditedOn day month date time year Database Checksum 00007558 History information includes the following Time of the most recent security set activation or deactivation and the...

Page 129: ...This parameter enables or disables the configuration and enforcement of fabric binding on all switches in the fabric Fabric binding associates switch worldwide names with a domain ID in the creation...

Page 130: ...e Set Config Security command as shown in the following example SANbox admin start SANbox admin config edit SANbox admin config set config security A list of attributes with formatting and current val...

Page 131: ...fications to the security database SANbox admin start SANbox admin security edit SANbox admin security securityset SANbox admin security group SANbox admin security security When you are finished maki...

Page 132: ...min reset security Managing Security Sets Managing Security Sets consists of the following tasks Create a Security Set Delete a Security Set Rename a Security Set Copy a Security Set Add Groups to a S...

Page 133: ...yset Add command to add a group to a security set as shown in the following example SANbox admin security securityset add securityset_1 group_isl group_port Remove Groups from a Security Set Enter the...

Page 134: ...group secures management server commands Enter the Group Create command to create a new port group as shown in the following example SANbox admin security group create group_port port Delete a Group E...

Page 135: ...in security group add Group_1 A list of attributes with formatting and default values will follow Enter a new value or simply press the ENTER key to accept the current value with exception of the Grou...

Page 136: ...d current values will follow Enter a new value or simply press the ENTER key to accept the current value If you wish to terminate this process before reaching the end of the list press q or Q and the...

Page 137: ...both the switch and the initiator device if the device supports authentication When using a RADIUS server every switch in the fabric must have a network connection A RADIUS server can also be configur...

Page 138: ...onfiguration parameters SANbox show setup radius Radius Information DeviceAuthOrder Local UserAuthOrder Local TotalServers 2 Server 1 ServerIPAddress 10 0 0 13 ServerUDPPort 1812 DeviceAuthServer Fals...

Page 139: ...parameters SANbox admin set setup radius common A list of attributes with formatting and current values will follow Enter a new value or simply press the ENTER key to accept the current value If you...

Page 140: ...Q and the ENTER key to so do PLEASE NOTE SSL must be enabled in order to configure RADIUS User Authentication SSL can be enabled using the set setup services command Server 1 Current Values ServerIPAd...

Page 141: ...g severity levels Alarm The alarm level describes events that are disruptive to the administration or operation of a fabric and require administrator intervention Alarms are always logged and always d...

Page 142: ...the message format components Table 11 1 Event Log Message Format Component Description ordinal A number assigned to each message in sequence since the last time the alarm history was cleared time_sta...

Page 143: ...end Zone Merge Request 335 day month date time year I Eport Port 0 8 LSDB Xchg timer set You can also filter the event log display with the Show Log Display command and customize the messages that dis...

Page 144: ...ration Configure the Event Log You can customize what events are recorded in the switch event log according to component severity level and port Enter the Set Log Component Set Log Level and Set Log P...

Page 145: ...g Switch Blade Port Eport Snmp CLI QFS FilterLevel Info DisplayLevel Critical FilterPort 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 Restore the Event Log Configuration Enter the Set Log Restore...

Page 146: ...key to accept the current value If you wish to terminate this process before reaching the end of the list press q or Q and the ENTER key to do so Current Values LocalLogEnabled True RemoteLogEnabled...

Page 147: ...h to your workstation as follows 1 Log into the switch through Telnet and create an archive of the event log Enter the Set Log Archive command in an Admin session to create a file on the switch named...

Page 148: ...11 Event Log Configuration Creating and Downloading a Log File 11 8 59183 03 A S Notes...

Page 149: ...Call Home Database Call Home Concepts The Call Home service improves fabric availability by notifying administrators by email of events that affect switch operation The Call Home service is active by...

Page 150: ...database consists of up to 25 Call Home profiles Each profile defines the following Event severity levels Alarm Critical Warn that will initiate an email message Email message format and subject Email...

Page 151: ...three email message formats full text short text and Tsc1 The full text format contains the switch and event information plus the contact information from the Call Home profile and SNMP configurations...

Page 152: ...me Wed Jul 25 17 02 40 343 CDT 2007 Switch Location Room 123 Rack 9 Bay 3 Contact Information George Smith 12345 4th Street City State 952 999 9999 george smith work com Technical Support Interface Th...

Page 153: ...Current Values PrimarySMTPServerAddr 0 0 0 0 PrimarySMTPServerPort 25 PrimarySMTPServerEnable False SecondarySMTPServerAddr 0 0 0 0 SecondarySMTPServerPort 25 SecondarySMTPServerEnable False ContactEm...

Page 154: ...me database you must open an Admin session with the Admin Start command An Admin session prevents other accounts from making changes at the same time through Telnet QuickTools Enterprise Fabric Suite...

Page 155: ...Modifying a Profile Renaming a Profile Copying a Profile Adding a Data Capture Configuration Modifying a Data Capture Configuration Deleting a Data Capture Configuration Displaying Call Home Database...

Page 156: ...mailSubject CallHome Warn RecipientEmail admin1 company com RecipientEmail admin2 company com RecipientEmail admin3 company com RecipientEmail admin7 company com RecipientEmail admin8 company com Reci...

Page 157: ...ER key to do so Default Values Level Alarm Format FullText MaxSize 100000 EmailSubject undefined RecipientEmail up to 10 entries allowed New Value press ENTER to accept default value q to quit Level A...

Page 158: ...d to delete a Call Home profile as shown in the following example SANbox admin start SANbox admin callhome edit SANbox admin callhome profile delete profile_1 The profile will be deleted Please confir...

Page 159: ...ey to do so Current Values Level Alarm Format ShortText MaxSize 1000 EmailSubject Switch Problem RecipientEmail up to 10 entries allowed 1 john smith domain com New Value press ENTER to accept current...

Page 160: ...he profile will be renamed Please confirm y n n y SANbox admin callhome callhome save The CallHome database profiles will be saved and activated Please confirm y n n y Copying a Profile Enter the Prof...

Page 161: ...add A list of attributes with formatting and default values will follow Enter a value or simply press the ENTER key to accept the default value If you wish to terminate this process before reaching t...

Page 162: ...y from the list above q to quit 1 A list of attributes with formatting and current values will follow Enter a value or simply press the ENTER key to accept the current value If you wish to terminate t...

Page 163: ...e selected capture entry has been removed from profile Tech_Support_Center This configuration must be saved with the callhome save command before it can take effect or to discard this configuration us...

Page 164: ...P server remains the primary and the secondary SMTP server remains the secondary Clearing the Call Home Message Queue Enter the Callhome Queue Clear command to clear email messages from the Call Home...

Page 165: ...Home profiles and resets the Tech_Support_Center profile and Call Home service configuration to the factory defaults as shown in the following example SANbox admin start SANbox admin reset callhome T...

Page 166: ...12 Call Home Configuration Resetting the Call Home Database 12 18 59183 03 A S Notes...

Page 167: ...ation The Simple Network Management Protocol SNMP provides for the management of the switch through third party applications that use SNMP Security consists of a read community string and a write comm...

Page 168: ...ER key to do so PLEASE NOTE Further configuration may be required after enabling a service If services are disabled the connection to the switch may be lost When enabling SSL please verify that the da...

Page 169: ...tion N_107 System Test Lab Description SANbox 5600 FC Switch ObjectID 1 3 6 1 4 1 1663 1 1 1 1 17 AuthFailureTrap True ProxyEnabled True SNMPv3Enabled False Trap1Address 10 0 0 254 Trap1Port 162 Trap1...

Page 170: ...ameters SANbox admin set setup snmp common A list of attributes with formatting and current values will follow Enter a new value or simply press the ENTER key to accept the current value If you wish t...

Page 171: ...everity info Trap1Version 2 Trap1Community northdakota New Value press ENTER to not specify value q to quit Trap1Enabled True False Trap1Address hostname IPv4 or IPv6 Address Trap1Port decimal value 1...

Page 172: ...o enable SNMP version 3 enter the Set Setup SNMP Common command and set the SNMPv3Enabled parameter to True SANbox admin start SANbox admin set setup snmp common A list of attributes with formatting a...

Page 173: ...wish to terminate this process before reaching the end of the list press q or Q and the ENTER OR Ctrl C key to do so Username 8 32 chars snmpuser1 Group 0 ReadOnly 1 ReadWrite ReadOnly 1 Authenticatio...

Page 174: ...V3 user attributes with formatting and current attribute values for the specified SNMPV3 user will follow Enter a new value OR simply press the ENTER key where ever allowed to accept the current value...

Page 175: ...an Admin session Some commands require that you open additional editing sessions within an Admin session such as the following Commands that modify zoning require a Zoning Edit session which is opene...

Page 176: ...and conventions Commands and keywords are case insensitive Required keyword values appear in standard font value Optional values are shown in italics value Underlined portions of the keyword in the c...

Page 177: ...r begin Opens the Admin session end or stop Closes the Admin session The Hardreset Hotreset Quit Shutdown and Reset Switch commands will also end an Admin session cancel Terminates an Admin session op...

Page 178: ...alias can have a maximum of 2000 members A port device in member_list can have any of the following formats Domain ID and port number pair Domain ID Port Number Domain IDs can be 1 239 port numbers c...

Page 179: ...t ports devices in member_list A port device in member_list can have any of the following formats Domain ID and port number pair Domain ID Port Number Domain IDs can be 1 239 port numbers can be 0 255...

Page 180: ...ctivation between the primary SMTP server and the secondary SMTP server Though the active server status changes the primary SMTP server remains the primary and the secondary SMTP server remains the se...

Page 181: ...you omit profile the command lists all profiles and their configurations If you omit the profile keyword the command lists the profile names queue option Clears the Call Home e mail queue or displays...

Page 182: ...min OB session2 ConfigurationLastEditedOn day mmm dd hh mm ss yyyy DatabaseChecksum 000014a3 ProfileName group4 ProfileLevel Warn ProcessedCount 286 ProcessedLast day mmm dd hh mm ss yyyy ProfileName...

Page 183: ...to max of 40000 EmailSubject CallHome Alarm RecipientEmail me1 company com RecipientEmail me10 company com The following is an example of the Callhome Test Profile command SANbox admin start SANbox ad...

Page 184: ...rameters edit Opens an edit session in which to modify the data capture configuration of the Tech_Support_Center profile Refer to Table 14 1 for a description of the data capture configuration paramet...

Page 185: ...ration use the callhome cancel command The following is an example of the Capture Edit command SANbox admin start SANbox admin callhome edit SANbox admin callhome capture edit Capture Entries for Prof...

Page 186: ...ure Entries for Profile Tech_Support_Center Index TimeOfDay DayOfWeek Interval 1 02 00 Sat 1 weeks Please select a capture entry from the list above q to quit 1 The selected capture entry has been rem...

Page 187: ...onfiguration is used Only one configuration can be active at a time backup export Creates a file named configdata which contains the system configuration information This keyword does not require an A...

Page 188: ...account are given by ip_address and account_name respectively ip_address can be an IP address version 4 or 6 or a DNS host name The file name on the remote server is given by file_name The system wil...

Page 189: ...amed default is being edited SANbox admin config config cancel Configuration mode will be canceled Please confirm y n n y SANbox admin admin end NOTE If the restore process changes the IP address use...

Page 190: ...on to the switch and then restore the configuration ftp symbolic_name or ip_address user images password images ftp bin ftp put configdata ftp quit SANbox admin start SANbox admin config restore The s...

Page 191: ...FTP server you can proceed with the command prompts to send the file from the switch to a remote host Otherwise you can use FTP to download the support file from the switch to your workstation The su...

Page 192: ...localdomain FTP server Version wu 2 6 1 18 ready 331 Password required for johndoe Password xxxxxxx 230 User johndoe logged in cd bin support 250 CWD command successful lcd itasca conf images Local di...

Page 193: ...t tgz file in binary mode SANbox create support SANbox admin create support Log Msg Creating the support file this will take several seconds FTP the dump support file to another machine y n n SANbox a...

Page 194: ...equires an Admin session If you omit MMDDhhmmCCYY the current date is displayed which does not require an Admin session Notes Network Time Protocol NTP must be disabled to set the time with the Date c...

Page 195: ...14 Command Reference Exit 59183 03 A 14 21 A Exit Closes the Telnet session Authority None Syntax exit Notes You can also press Control D to close the Telnet session...

Page 196: ...xx xx xx xx xx xx or xxxxxxxxxxxxxxxx count number Number of times given by number to repeat the command If you omit this keyword the command is repeated once timeout seconds Number of seconds given...

Page 197: ...ts 6 character hexadecimal device Fibre Channel address hex Enter addresses with or without the 0x prefix 16 character hexadecimal worldwide port name WWPN with the format xx xx xx xx xx xx xx xx or x...

Page 198: ...example of the Fctrace command SANbox fctrace 970400 970e00 hops 5 36 bytes from 0x970400 to 0x970e00 5 hops max Domain Ingress Port WWN Port Egress Port WWN Port 97 20 04 00 c0 dd 02 cc 2e 4 20 0e 0...

Page 199: ...rface for fabric management This includes Performance View which graphs port performance Fabric Security provides for Secure Socket Layer SSL and Secure Shell SSH connection security device security u...

Page 200: ...26 59183 03 A S The following is an example of the Feature Log command SANbox feature log Mfg Feature Log Switch Licensed for 8 ports Customer Feature Log 1 day month date 19 39 24 year Switch Licens...

Page 201: ...mware install The switch will be reset This process will cause a disruption to I O traffic Continuing with this action will terminate all management sessions including any Telnet sessions When the fir...

Page 202: ...any Telnet sessions When the firmware activation is complete you may log in to the switch again Do you want to continue y n y Press q and the ENTER key to abort this command FTP or TFTP tftp IP Addres...

Page 203: ...sion The List Members Securitysets and Type keywords are available without an Admin session Syntax group add group copy group_source group_destination create group type delete group edit group member...

Page 204: ...1 If the ISL member does not support the Primary Hash the switch will use the Secondary Hash Primary Secret Hexadecimal string that is encrypted by the Primary Hash for authentication with the ISL gro...

Page 205: ...ctions are MD5 or SHA 1 If the Port group member does not support the Pri mary Hash the switch will use the Secondary Hash Primary Secret Hexadecimal string that is encrypted by the Primary Hash for a...

Page 206: ...itches Port Configures security for attachments to N_Port devices ms Configures security for attachments to N_Port devices that are issuing management server commands Table 14 4 MS Group Member Attrib...

Page 207: ...o decipher the encrypted Secret sent by the MS group member Hash values are MD5 or SHA 1 Primary Secret ISL and Port Groups Hexadecimal string that is encrypted by the Primary Hash for authentication...

Page 208: ...roup is a member This keyword is available without an Admin session type group Displays the group type for the group given by group This keyword is available without an Admin session Notes Primary and...

Page 209: ...20 ASCII char value Binding domain ID 1 239 0 None 0 Finished configuring attributes To discard this configuration use the security cancel command The following is an example of the Group Edit command...

Page 210: ...nd SANbox group list Group SecuritySet group1 ISL alpha group2 Port alpha The following is an example of the Group Members command SANbox group members group_1 Current list of members for Group group_...

Page 211: ...ates the pending firmware and clears the alarm log To save the alarm log before resetting refer to the Set Log on page 14 100 Authority Admin session Syntax hardreset Notes To reset the switch without...

Page 212: ...isplays a list of all available commands including command variations Examples The following is an example of the Help Config command SANbox help config config CONFIG_OPTIONS The config command operat...

Page 213: ...nd_string Enter line number to re execute the corresponding command from the History display Enter partial command string to re execute a command that matches the command string Enter to re execute th...

Page 214: ...made to attached devices including powering up powering down disconnecting connecting and HBA configuration changes For a fabric in which one or more switches are running firmware prior to version 7 4...

Page 215: ...an IP address version 4 or 6 or a DNS host name If an account name needs a password to access the FTP server the system will prompt you for it install Downloads firmware from a remote host to the swi...

Page 216: ...ge install The switch will be reset This process will cause a disruption to I O traffic Continuing with this action will terminate all management sessions including any Telnet sessions When the firmwa...

Page 217: ...the Image Fetch and Image Unpack commands SANbox admin image fetch johndoe 10 0 0 254 7 4 00 11_mpc ftp 10 0 0 254 user johndoe password ftp bin ftp put 7 4 00 11_mpc ftp quit SANbox admin image list...

Page 218: ...clear Deletes all associations and policies from the from the volatile edit copy of the IP security configuration This keyword requires an Ipsec Edit session This keyword does not affect the non vola...

Page 219: ...on However in an Ipsec Edit session this command displays the number of both configured associations and policies plus those created in the edit session but not yet saved save Saves changes made durin...

Page 220: ...ns You must enter the Ipsec Save command afterwards to save your changes create association Creates an association with the name given by association An association name must begin with a letter and b...

Page 221: ...e used to process data The protocol can be one of the following Encapsulated Security Payload RFC 2406 esp Encapsulated Security Payload RFC 1827 esp old Authentication Header RFC 2402 ah Authenticati...

Page 222: ...association active Displays the configuration for all active associations configured Displays the configuration for all user defined associations edited Displays the configuration for all associations...

Page 223: ...4c1 DestinationAddress hostname IPv4 or IPv6 Address fe80 250 daff feb7 9d02 Protocol 1 esp 2 esp old 3 ah 4 ah old 1 SPI decimal value 256 4294967295 333 Authentication select an authentication algor...

Page 224: ...ou omit option the command displays the configuration of all active associations option can be one of the following association Displays the configuration for the association given by association acti...

Page 225: ...iven by policy active Displays the configuration for all active policies configured Displays the configuration for all user defined policies edited Displays the configuration for all policies that hav...

Page 226: ...e80 2c0 ddff fe03 d4c1 Protocol esp SPI 444 0x1bc Authentication hmac sha1 Encryption 3des cbc The following is an example of the Ipsec List Policy command SANbox ipsec list policy Active IPsec Inform...

Page 227: ...icy with the name given by policy A policy name must begin with a letter and be no longer than 32 characters Valid characters are 0 9 A Z a z _ and The Security Policy database supports a maximum of 1...

Page 228: ...83647 to 214783647 that determines priority for this policy in the security policy database The higher the number the higher the priority Action Processing to apply to data traffic Discard Uncondition...

Page 229: ...policy active Displays the configuration for all active policies configured Displays the configuration for all user defined policies edited Displays the configuration for all policies that have been m...

Page 230: ...to host switch host SourceAddress hostname IPv4 or IPv6 Address PrefixLength fe80 2c0 ddff fe03 d4c1 SourcePort decimal value 1 65535 DestinationAddress hostname IPv4 or IPv6 Address PrefixLength fe8...

Page 231: ...ializes the specified loop port Authority Admin session Syntax lip port_number Keywords port_number The number of the port to be reinitialized Ports are numbered beginning with 0 Examples The followin...

Page 232: ...14 Command Reference Logout 14 58 59183 03 A S Logout Closes the Telnet session Authority None Syntax logout Notes You can also press Control D to close the Telnet session...

Page 233: ...nt name To change the password for an account name other than your own you must open an Admin session with the account name Admin If you omit account_name you will be prompted to change the password f...

Page 234: ...mum of two alphanumeric characters Each subdomain must start and end with an alphanumeric character A host name can end with a period ipv4 host_address IP address version 4 or DNS host name of the swi...

Page 235: ...r the Callhome Save command afterwards to save your changes Neither profile_source nor profile_destination can be Tech_Support_Center create profile Creates a profile with the name given by profile A...

Page 236: ...luded in the e mail message ShortText includes switch and event information FullText includes switch information event information Call Home contact information and SNMP contact information Tsc1 inclu...

Page 237: ...arm Format FullText MaxSize 100000 EmailSubject undefined RecipientEmail up to 10 entries allowed New Value press ENTER to accept default value q to quit Level Alarm Critical Warn None Format 1 FullTe...

Page 238: ...rtText MaxSize 1000 EmailSubject Switch Problem RecipientEmail up to 10 entries allowed 1 john smith domain com New Value press ENTER to accept current value q to quit Level Alarm Critical Warn None F...

Page 239: ...53 224 0 0 0 8 00 00 08 2 03 02 30 PortApp 254 224 0 0 0 5 00 00 03 2 03 02 30 qfsApp 255 224 0 0 0 5 00 00 09 2 03 02 30 mserver 256 224 0 0 0 7 00 00 06 2 03 02 30 eport 257 224 0 0 0 6 00 00 13 2 0...

Page 240: ...14 Command Reference Quit 14 66 59183 03 A S Quit Closes the Telnet session Authority None Syntax quit Notes You can also press Control D to close the Telnet session...

Page 241: ...ywords callhome Resets the Call Home database configuration to its default values config config_name Resets the configuration given by config_name to the factory default values for switch port port th...

Page 242: ...st can be a set of port numbers and ranges delimited by spaces For example 0 2 10 15 specifies ports 0 2 10 11 12 13 14 and 15 radius Resets the RADIUS configuration to the default values as described...

Page 243: ...ommand on page 14 40 system Resets the system configuration settings to the factory default values as described in Table 14 17 zoning Clears the zoning database and deactivates the active zone set The...

Page 244: ...g configuration values Table 14 14 shows the SNMP configuration defaults Enter the Show Setup Snmp command to display SNMP configuration values Table 14 15 shows the RADIUS configuration defaults Ente...

Page 245: ...witch Configuration Defaults Parameter Default Admin State Online Broadcast Enabled True InbandEnabled True FDMIEnabled True FDMIEntries 1000 DefaultDomain ID 1 0x Hex Domain ID Lock False Symbolic Na...

Page 246: ...bolic Name Portn where n is the port number 10G n where n is the port number ALFairness False N A DeviceScanEnabled True True ForceOfflineRSCN False False ARB_FF False N A InteropCredit 0 0 ExtCredit...

Page 247: ...leWindow True 25 1 10 DecodeErrorsMonitoringEnabled RisingTrigger FallingTrigger SampleWindow True 25 0 10 ISLMonitoringEnabled RisingTrigger FallingTrigger SampleWindow True 2 0 10 LoginMonitoringEna...

Page 248: ...Default SNMPEnabled True Contact syscontact undefined Location sysLocation undefined Description SANbox 5600 Series FC Switch ObjectID 1 3 6 1 4 1 1663 1 1 1 1 23 SANbox 5600 1 3 6 1 4 1 1663 1 1 1 1...

Page 249: ...False AccountingServer False ServerIPAddress 10 0 0 1 ServerUDPPort 1812 Timeout 2 seconds Retries 0 SignPackets False Table 14 16 Switch Services Configuration Defaults Parameter Default TelnetEnabl...

Page 250: ...0 0 1 Ethernet Network IP Mask 255 0 0 0 Ethernet Gateway Address 10 0 0 254 Admin Timeout 30 minutes InactivityTimeout 0 LocalLogEnabled True RemotelogEnabled False RemoteLogHostAddress 10 0 0 254 NT...

Page 251: ...ancel Closes a Security Edit session without saving changes Use the Edit keyword to open a Security Edit session clear Clears all inactive security sets from the volatile edit copy of the security dat...

Page 252: ...mits for the number of security sets groups members per group and total members This keyword does not require an Admin session list Displays all security sets groups and group members in the security...

Page 253: ...y Secret Binding 0 The following is an example of the Security History command SANbox security history Active Database Information SecuritySetLastActivated DeactivatedBy Remote SecuritySetLastActivate...

Page 254: ...p GroupMember No active securityset defined Configured Security Information SecuritySet Group GroupMember alpha group1 ISL 10 00 00 00 00 10 21 16 Authentication Chap Primary Hash MD5 Primary Secret S...

Page 255: ...rename security_set_old security_set_new Keywords activate security_set Activates the security set given by security_set and deactivates the currently active security set Close the Security Edit sessi...

Page 256: ...letes the security set given by security_set If the specified security set is active the command is suspended until the security set is deactivated groups security_set Displays all groups that are mem...

Page 257: ...on ActiveSecuritySet alpha LastActivatedBy Remote LastActivatedOn day month date time year The following is an example of the Securityset Groups command SANbox securityset groups alpha Current list of...

Page 258: ...words option option can be one of the following clear Clears the alarm log history This value requires an Admin session on Enables the display of alarms in the session output stream off Disables the d...

Page 259: ...of the Logged In LEDs for the purpose of locating a switch Authority None Syntax set beacon state Keywords state state can be one of the following on Enables the flashing beacon off Disables the flash...

Page 260: ...on for all ports Table 14 19 describes the port configuration parameters ports port_number Initiates an editing session in which to change configuration parameters for all ports based on the configura...

Page 261: ...e the immediate transmis sion of RSCN messages when communication between a port and a device is interrupted If enabled the RSCN mes sage is delayed for 200 ms for locally attached devices and 400 ms...

Page 262: ...routing This parameter appears only if AutoPerfTuning is False Enables True or disables False VI preference routing The default is False Enabling VIEnable will disable MFSEnable MSEnable Management se...

Page 263: ...iceScanEnable True False True ForceOfflineRSCN True False False ARB_FF True False False InteropCredit decimal value 0 255 0 ExtCredit dec value increments of 15 non loop only 0 FANEnable True False Tr...

Page 264: ...he ENTER key to do so Configuring Port Number 16 AdminState 1 Online 2 Offline 3 Diagnostics 4 Down Online LinkSpeed 10 10Gb s 10Gb s PortType G F G SymPortName string max 32 chars 10G 16 DeviceScanEn...

Page 265: ...lue or press the Enter key to accept the current value shown in brackets Enter q or Q to end the editing session Table 14 20 describes the security configuration parameters NOTE This command requires...

Page 266: ...follow Enter a new value or simply press the ENTER key to accept the current value If you wish to terminate this process before reaching the end of the list press q or Q and the ENTER key to do so Fab...

Page 267: ...admin config edit SANbox admin config set config security portbinding 1 A list of attributes with formatting and current values will follow Enter a new value or simply press the ENTER key to accept th...

Page 268: ...default Offline Prevents the ports from receiving signal and accepting a device login Diagnostics Prepares the ports for testing and prevents the ports from accepting a device login Down Disables the...

Page 269: ...e False False SymbolicName string max 32 chars SANbox R_A_TOV decimal value 100 100000 msec 10000 E_D_TOV decimal value 10 20000 msec 2000 PrincipalPriority decimal value 1 255 254 ConfigDescription s...

Page 270: ...nabled Master enable disable parameter for all events Enables True or disables False the generation of all enabled event alarms The default is False CRCErrorsMonitoringEnabled DecodeErrorsMonitoringEn...

Page 271: ...000 25 FallingTrigger decimal value 0 1000 1 SampleWindow decimal value 1 1000 sec 10 DecodeErrorsMonitoringEnabled True False True RisingTrigger decimal value 1 1000 25 FallingTrigger decimal value 0...

Page 272: ...saving of changes to active zone set in the switch s non volatile zoning database The default is True Disabling the MergeAutoSave parameter can be useful for pre venting the propagation of zoning info...

Page 273: ...ll follow Enter a new value or simply press the ENTER key to accept the current value If you wish to terminate this process before reaching the end of the list press q or Q and the ENTER key to do so...

Page 274: ...hive Collects all log entries and stores the result in new file named logfile that is maintained in switch memory where it can be downloaded using FTP To download logfile open an FTP session log in wi...

Page 275: ...log events to automatically display on the screen according to the event severity levels given by filter filter can be one of the following values Critical Critical events The critical severity level...

Page 276: ...hat are generally not disruptive to the administration or operation of the fabric but are more important than the informative level events Info Monitors informative warning and critical events The inf...

Page 277: ...to a file use the Set Log Archive command start Starts the logging of events based on the Port Component and Level keywords assigned to the current configuration The logging continues until you enter...

Page 278: ...to run without interruption Authority None Syntax pagebreak state Keywords state state can be one of the following on Limits the display of information to 20 lines at a time The page break function a...

Page 279: ...03 A 14 105 A Examples The following is an example of the Set Pagebreak command SANbox set pagebreak on SANbox zone list Zone ZoneSet Zone1 alpha beta Zone2 delta echo Zone3 sierra tango Zone4 gamma d...

Page 280: ...orts are numbered beginning with 0 clear Clears the counters on all ports or the port given by port_number speed transmission_speed Specifies the transmission speed for the specified port Choose one o...

Page 281: ...14 107 A Offline Prevents the port from receiving signal and accepting a device login Diagnostics Prepares the port for testing and prevents the port from accepting a device login Down Disables the po...

Page 282: ...SMTP server The default is False SecondarySMTPServerAddr IP address version 4 or 6 or DNS host name of the secondary SMTP server The default is 0 0 0 0 SecondarySMTPServerPort Service port number that...

Page 283: ...ofile command on page 14 61 for information about creating Call Home profiles FromEmailAddress E mail address that is defined as the sending address in the From field of the e mail message The format...

Page 284: ...se SecondarySMTPServerAddr 0 0 0 0 SecondarySMTPServerPort 25 SecondarySMTPServerEnable False ContactEmailAddress nobody localhost localdomain PhoneNumber undefined StreetAddress undefined FromEmailAd...

Page 285: ...nse key Table 14 26 Common RADIUS Configuration Parameters Parameter Description DeviceAuthOrder Authenticator priority for devices Local Authenticate devices using only the local security data base T...

Page 286: ...tion The default is False UserAuthServer Enable True or disable False this server for user account authentication A user authentication RADIUS server requires a secure management connection SSL The de...

Page 287: ...ver being processed press q or Q and the ENTER key to do so If you wish to terminate the configuration process completely press qq or QQ and the ENTER key to so do PLEASE NOTE SSL must be enabled in o...

Page 288: ...e ENTER key to so do PLEASE NOTE SSL must be enabled in order to configure RADIUS User Authentication SSL can be enabled using the set setup services command Server 1 Current Values ServerIPAddress 10...

Page 289: ...ettings Entry Description TelnetEnabled Enables True or disables False the ability to manage the switch over a Telnet connection Disabling this service is not recommended The default is True SSHEnable...

Page 290: ...he master control for the Set Setup System command parameter EmbeddedGUIEnabled The default is True SNMPEnabled Enables True or disables False the management of the switch through third party applicat...

Page 291: ...and then a new certificate may need to be created to ensure a secure connection to this switch TelnetEnabled True False True SSHEnabled True False False GUIMgmtEnabled True False True SSLEnabled True...

Page 292: ...ond to trap events The name can be up to 64 characters excluding semicolon and comma The default is undefined This value is also passed to the Call Home service configuration Location Specifies the na...

Page 293: ...f traps in response to trap authentication failures The default is False ProxyEnabled Enables True or disables False SNMP communication with other switches in the fabric The default is True SNMPv3Enab...

Page 294: ...e list press q or Q and the ENTER key to do so Current Values SnmpEnabled True Contact sysContact undefined Location sysLocation undefined ReadCommunity public WriteCommunity private AuthFailureTrap F...

Page 295: ...list press q or Q and the ENTER key to do so Current Values Trap1Enabled True Trap1Address 10 20 33 181 Trap1Port 5001 Trap1Severity info Trap1Version 2 Trap1Community northdakota New Value press ENTE...

Page 296: ...ue Table 14 31 DNS Host Name Configuration Parameters Parameter Description DNSClientEnabled Enables True or disables False the DNS client DNSLocalHostname Name of local DNS server DNSServerDiscovery...

Page 297: ...able 14 32 IP Version 4 Ethernet Configuration Parameters Entry Description EthIPv4NetworkEnable Enables True or disables False the IP version 4 inter face The default is True EthIPv4NetworkDiscovery...

Page 298: ...gateway Table 14 34 Event Logging Configuration Parameters Parameter Description LocalLogEnabled Enables True or disables False the saving of log infor mation on the switch The default is True Remote...

Page 299: ...must first set an initial time and date on the switch The synchronized time becomes effective immediately The default is False NTPServerAddress The IP address version 4 or 6 or DNS host name of the N...

Page 300: ...ined DNSServer2Address undefined DNSServer3Address undefined DNSSearchListDiscovery Static DNSSearchList1 undefined DNSSearchList2 undefined DNSSearchList3 undefined DNSSearchList4 undefined DNSSearch...

Page 301: ...workAddress dot notated IP Address EthIPv4NetworkMask dot notated IP Address EthIPv4GatewayAddress dot notated IPv4 Address Do you want to save and activate this system setup y n n The following is an...

Page 302: ...nabled True False RemoteLogHostAddress hostname IPv4 or IPv6 Address Do you want to save and activate this system setup y n n The following is an example of the Set Setup System Ntp command SANbox adm...

Page 303: ...w value or simply press the ENTER key to accept the current value If you wish to terminate this process before reaching the end of the list press q or Q and the ENTER key to do so Current Values Admin...

Page 304: ...state state Keywords state state can be one of the following online Activates and prepares the ports to send data This is the default offline Prevents the ports from receiving signal and accepting a d...

Page 305: ...in set timezone Africa America Antarctica Asia Atlantic Australia Europe Indian Pacific UTC Press ENTER for more options or q to make a selection America Grenada America Guadeloupe America Guatemala A...

Page 306: ...ription Switch system description HostName DNS host name EthIPv4NetworkAddress IP address version 4 EthIPv6NetworkAddress IP address version 6 EthMacAddress Switch MAC address WorldWideName Switch wor...

Page 307: ...SystemDescription SANbox 5600 FC Switch HostName undefined EthIPv4NetworkAddress 10 20 11 192 EthIPv6NetworkAddress MACAddress 00 c0 dd 00 71 ee WorldWideName 10 00 00 c0 dd 00 71 ed ChassisSerialNum...

Page 308: ...Examples The following is an example of the Show Alarm command SANbox show alarm 1 Fri Jan 19 13 50 26 508 UTC 2007 A 1004 000F Port 4 Eport Isolating due to Merge Zone Failure 2 Fri Jan 19 13 50 26...

Page 309: ...s the broadcast tree information and all ports that are currently transmitting and receiving broadcast frames Authority None Syntax show broadcast Examples The following is an example of the Show Broa...

Page 310: ...how chassis Examples The following is an example of the Show Chassis command for model 5602 SANbox show chassis Chassis Information BoardTemp 1 Degrees Celsius 36 FanStatus 1 Good FanStatus 2 Good Fan...

Page 311: ...rts are specified Examples The following is an example of the Show Config Port command for port 3 SANbox show config port 3 Configuration Name default Port Number 3 AdminState Offline LinkSpeed Auto P...

Page 312: ...n XPAK port SANbox show config port 16 Configuration Name default Port Number 16 AdminState Online LinkSpeed 10Gb s PortType G SymbolicName 10G 16 DeviceScanEnabled True ForceOfflineRSCN False AutoPer...

Page 313: ...70 80 2 False No port binding entries found 3 True 10 20 30 40 50 60 70 80 4 True 10 20 30 40 50 60 70 80 5 False No port binding entries found 6 True 10 20 30 40 50 60 70 81 7 False No port binding...

Page 314: ...WWN 0 True 10 20 30 40 50 60 70 80 1 True 10 20 30 40 50 60 70 80 2 False No port binding entries found 3 True 10 20 30 40 50 60 70 80 4 True 10 20 30 40 50 60 70 80 5 False No port binding entries f...

Page 315: ...ommand SANbox show config switch Configuration Name default Switch Configuration Information AdminState Online BroadcastEnabled False InbandEnabled True FDMIEnabled False FDMIEntries 10 DefaultDomainI...

Page 316: ...uration Information ThresholdMonitoringEnabled False CRCErrorsMonitoringEnabled True RisingTrigger 25 FallingTrigger 1 SampleWindow 10 DecodeErrorsMonitoringEnabled True RisingTrigger 25 FallingTrigge...

Page 317: ...onfiguration parameters for the switch Authority None Syntax show config zoning Examples The following is an example of the Show Config Zoning command SANbox show config zoning Configuration Name defa...

Page 318: ...ains Principal switch is remote 10 00 00 60 69 50 0b 6c Upstream Principal ISL is 1 Domain ID List Domain 97 0x61 WWN 10 00 00 c0 dd 00 71 ed Domain 98 0x62 WWN 10 00 00 60 df 22 2e 0c Domain 99 0x63...

Page 319: ...Available to Port Donor Group Extend Credit 0 GL 0 16 None 0 0 1 GL 0 16 None 0 0 2 GL 0 16 None 0 0 3 GL 0 16 None 0 0 4 GL 0 16 None 0 0 5 GL 0 16 None 0 0 6 GL 0 16 None 0 0 7 GL 0 16 None 0 0 8 G...

Page 320: ...tion for the local switch only Examples The following is an example of the Show Fabric command SANbox show fabric Domain 133 0x85 WWN 10 00 00 c0 dd 0d 53 91 SymbolicName SANbox HostName undefined Eth...

Page 321: ...urer Model Ports 21 01 00 e0 8b 27 aa bc 610000 QLogic Corporation QLA2342 2 21 00 00 00 ca 25 9b 96 180100 QLogic Corporation QL2330 2 The following is an example of the Show FDMI WWN command SANbox...

Page 322: ...Global inet6 addr fe80 2c0 ddff fe00 27 64 Scope Link UP BROADCAST RUNNING MULTICAST MTU 1500 Metric 1 RX packets 137168 errors 0 dropped 0 overruns 0 frame 0 TX packets 2194 errors 0 dropped 0 overr...

Page 323: ...events Specifies the number of the most recent events to display from the event log number_of_events must be a positive integer component Displays the components currently being monitored for events T...

Page 324: ...rt3 Displays all events related to E_Ports Mgmtserver Displays all events related to the management server Nameserver Displays all events related to the name server Port port_number Displays all event...

Page 325: ...tings for component severity level port and display level This command is equivalent to executing the following commands separately Show Log Component Show Log Level and Show Log Port Examples The fol...

Page 326: ...e time year I Eport Port 0 8 Sending init hello 330 day month date time year I Eport Port 0 8 Processing EFP oxid 0x8 331 day month date time year I Eport Port 0 8 Eport State E_A2_IDLE 332 day month...

Page 327: ...st 100 NeighborDomain 35 LocalPort 7 RemotePort 7 Cost 500 NeighborDomain 35 LocalPort 5 RemotePort 4 Cost 500 Local Domain LsID 35 Age 1166 Incarnation 0x800000cc NeighborDomain 34 LocalPort 16 Remot...

Page 328: ...rs installed Notes Table 14 39 describes the transceiver information in the Show Media display NOTE This command requires the SANdoctor license key To purchase a license key contact your authorized ma...

Page 329: ...atts The range is 0 6 55 Value Measured value Status State associated with the measured value Normal Value is in the normal operating range HighAlarm Value exceeds the high alarm threshold HighWarning...

Page 330: ...Nbox show media Note LowAlarm LowWarning HighWarning HighAlarm Port Vendor Name Temp Voltage Tx Bias Tx Pwr Rx Pwr Num C V mA mW mW 0 NotInstalled N A N A N A N A N A 1 NotApplicable N A N A N A N A N...

Page 331: ...ed Displayed memory values are in 1K block units Examples The following is an example of the Show Mem command SANbox show mem procs memory swap io system cpu r b swpd free buff cache si so bi bo in cs...

Page 332: ...WWNs for the devices connected to the port given by port_id port_id is a port Fibre Channel address Examples The following is an example of the Show Ns local domain command SANbox show ns Seq Domain P...

Page 333: ...t_ID command SANbox show ns 1301e1 Port ID 1301e1 PortType NL PortWWN 21 00 00 20 37 73 13 69 SymbolicPortName NodeWWN 20 00 00 20 37 73 13 69 SymbolicNodeName NodeIPAddress diskarray7 anycompany com...

Page 334: ...k setting Authority None Syntax show pagebreak Notes The pagebreak setting limits the display of information to 20 lines On or allows the continuous display of information without a break Off Examples...

Page 335: ...spaces For example 0 2 10 15 specifies ports 0 2 10 11 12 13 14 and 15 If you omit port_list the command displays performance data for all ports byte port_list Displays continuous performance data in...

Page 336: ...ontinuous performance data in frames second received for the ports given by port_list port_list can be a set of port numbers and ranges delimited by spaces For example 0 2 10 15 specifies ports 0 2 10...

Page 337: ...0 0 13 0 0 0 0 0 0 14 0 7K 7K 0 245 245 15 136M 58K 136M 68K 1K 70K 16 47M 23K 47M 23K 726 24K 17 0 0 0 0 0 0 18 23K 47M 47M 726 23K 24K 19 0 0 0 0 0 0 The following is an example of the Show Perf Byt...

Page 338: ...and the initial ization failed AsicNumber ASIC number AsicPort ASIC port number BadFrames Number of frames that have framing errors BBCR_FrameFailures Number of times more frames were lost during a cr...

Page 339: ...his frame Flowerrors Number of frames received there were no available credits FReject Number of frames from devices that were rejected InvalidCRC Invalid CRC detected InvalidDestAddr Invalid destinat...

Page 340: ...100 ms detected by this port A loss of synchronization is detected by the receipt of an invalid transmission word LostFrames Number of incidents of lost frames LostRRDYs Number of incidents of lost Re...

Page 341: ...s from the most recent port test TotalErrors Total number of errors detected on the port since the last port or switch reset TotalLinkResets Total number of link resets since the last port or switch r...

Page 342: ...00000000 LoginStatus NotLoggedIn TestStatus NeverRun MaxCredit 16 UpstreamISL False MediaSpeeds 1Gb s 2Gb s 4Gb s XmitterEnabled True ALInit 1 LIP_F8_F7 0 ALInitError 0 LinkFailures 0 BadFrames 0 Logi...

Page 343: ...Show Postlog command SANbox show postlog Queue POST Sequence Count 467 Success Count 452 Failed Count 42 Records 53 Record 1 of 53 Time day mmm dd hh mm ss yyyy Sequence Number 5 Consecutive Passes 5...

Page 344: ...tup callhome Callhome Information PrimarySMTPServerAddr 0 0 0 0 PrimarySMTPServerPort 25 PrimarySMTPServerEnabled False SecondarySMTPServerAddr 0 0 0 0 SecondarySMTPServerPort 25 SecondarySMTPServerEn...

Page 345: ...Setup Mfg command SANbox show setup mfg Manufacturing Information BrandName QLogic BuildDate Unknown ChassisPartNumber SANbox 5600 ChassisSerialNumber 0331000011 CPUBoardSerialNumber 0331000011 Licen...

Page 346: ...r server_number is an integer corresponding to a configured server To display common and server specific information omit the keyword Refer to Table 14 27 for a description of the server specific conf...

Page 347: ...ax show setup services Examples The following is an example of the Show Setup Services command SANbox show setup services System Services TelnetEnabled True SSHEnabled False GUIMgmtEnabled True SSLEna...

Page 348: ...d trap specific parameters omit the keyword Refer to Table 14 30 for descriptions of the trap specific configuration parameters Examples The following is an example of the Show Setup Snmp Common comma...

Page 349: ...ion parameters ipv6 Displays switch IP version 6 Ethernet configuration parameters To display all system configuration parameters omit the keyword Refer to Table 14 33 for descriptions of the IP versi...

Page 350: ...he following is an example of the Show Setup System Ipv4 command SANbox show setup system ipv4 System Information EthIPv4NetworkEnable True EthIPv4NetworkDiscovery Static EthIPv4NetworkAddress 10 20 1...

Page 351: ...Setup System Ntp command SANbox show setup system System Information NTPClientEnabled False NTPServerDiscovery Static NTPServerAddress 51 68 85 102 The following example of the Show Setup System Time...

Page 352: ..._id Keywords domain_id The domain ID for which to display route information If you omit domain_id the system displays routes for all switches in the fabric Examples The following is an example of the...

Page 353: ...flash memory in megabytes LogFilterLevel Event severity level used to record events in the event log MaxPorts Number of ports available on the switch NumberOfResets Number of times the switch has been...

Page 354: ...eVersion build date Vx x x 0 day month date time year PendingImageVersion build date Vx x x 0 day month date time year ActiveConfiguration default AdminState Online AdminModeActive False BeaconOnStatu...

Page 355: ...ority None Syntax show system Examples The following is an example of the Show System command SANbox show system Assigned System Network Information Hostname undefined EthIPv4NetworkAddress 10 20 116...

Page 356: ...ueue UID Sequence Count 676 Success Count 420 Failed Count 2023 Records 127 Record 1 of 127 Time day mon dd hh mm ss yyyy Sequence Number 211 Test TEST_SUITE_BLADE_OFFLINE 0x12 Subtest TEST_FLOW_TC 0x...

Page 357: ...ow Timezone 59183 03 A 14 183 A Show Timezone Displays the current time zone setting Authority None Syntax show timezone Examples The following is an example of the Show Timezone command SANbox show t...

Page 358: ...PortWWN Type NodeWWN ID 5 F 20 05 00 c0 dd 00 bd ec N 20 00 00 00 c9 22 1e 93 010500 P 10 E 20 0a 00 c0 dd 00 bd ec E 10 00 00 c0 dd 00 80 21 4 0x4 D The following is an example of the Show Topology c...

Page 359: ...users User cim OB session1 Client cim Logged in Since Tue Apr 8 05 22 47 2008 User snmp IB session2 Client Unknown Logged in Since Tue Apr 8 05 22 55 2008 User snmp OB session3 Client Unknown Logged...

Page 360: ...on Switch system description HostName DNS host name EthIPv4NetworkAddress Switch IP address version 4 EthIPv6NetworkAddress Switch IP address version 6 MacAddress Switch MAC address WorldWideName Swit...

Page 361: ...CLISH SystemDescription SANbox 5600 FC Switch HostName undefined EthIPv4NetworkAddress 10 20 11 192 EthIPv6NetworkAddress MACAddress 00 c0 dd 00 71 ee WorldWideName 10 00 00 c0 dd 00 71 ed ChassisSeri...

Page 362: ...rminates all data transfers on the switch at convenient points and closes the Telnet session Always power cycle the switch after entering this command Authority Admin session Syntax shutdown Notes Whe...

Page 363: ...edit For a description of the SNMP version 3 user account parameters refer to Table 14 43 Table 14 43 SNMP Version 3 User Account Parameters Parameter Description Username Account user name Group Grou...

Page 364: ...he list press q or Q and the ENTER OR Ctrl C key to do so Username 8 32 chars snmpuser1 Group 0 ReadOnly 1 ReadWrite ReadOnly 1 Authentication True False False t AuthType 1 MD5 2 SHA MD5 1 AuthPhrase...

Page 365: ...st that is in progress Authority Admin session Syntax test cancel port port_number Keywords port port_number Cancel the test for the port given by port_number port_number can be 0 19 Examples The foll...

Page 366: ...e the port in the diagnostics state before running the test loopback_type can have the following values internal Exercises the internal port connections external Exercises the port and its transceiver...

Page 367: ...st press q or Q and the ENTER key to do so LoopCount decimal value 1 4294967295 429496729 FrameSize decimal value 40 2148 256 DataPattern 32 bit hex value or Default Default StopOnError True False Tru...

Page 368: ...the Test Status Port command SANbox admin test status port 1 Port Test Test Loop Test Num Port Type Status Count Failures 1 1 Offline Internal Passed 12 0 The following example of the Test Status Swi...

Page 369: ...rcises all internal port and inter port connections external Exercises all internal port transceiver and inter port connections A transceiver with a loopback plug is required for all ports offline loo...

Page 370: ...to terminate this process before reaching the end of the list press q or Q and the ENTER key to do so LoopCount decimal value 1 4294967295 100 FrameSize decimal value 40 2148 256 DataPattern 32 bit he...

Page 371: ...and the reset method A hot reset or non disruptive firmware activation does not reset the elapsed up time reported by this command Authority None Syntax uptime Examples The following is an example of...

Page 372: ...can be up to 15 characters the first character must be alphanumeric the remaining characters must be ASCII characters excluding semicolon comma and period Passwords must be 8 20 characters Admin auth...

Page 373: ...n example of the User Accounts command SANbox admin user accounts Current list of user accounts images admin authority False never expires admin admin authority True never expires chuckca admin author...

Page 374: ...ire in 0 days Please confirm y n n The following is an example of the User Delete command SANbox admin user del user3 The user account will be deleted Please confirm y n n y The following is an exampl...

Page 375: ...Displays the account name session number and switch domain ID for the Telnet session Authority None Syntax whoami Examples The following is an example of the Whoami command SANbox whoami User name adm...

Page 376: ...ort number pair Domain ID Port Number Domain IDs can be 1 239 port numbers can be 0 255 6 character hexadecimal device Fibre Channel address hex 16 character hexadecimal worldwide port name WWPN with...

Page 377: ...set remove zone member_list Removes the ports devices given by member_list from the zone given by zone Use a space to delimit aliases and ports devices in member_list member_list can have any of the f...

Page 378: ...following is an example of the Zone Members command SANbox zone members wwn_b0241f Current List of Members for Zone wwn_b0241f 50 06 04 82 bf d2 18 c2 50 06 04 82 bf d2 18 d2 21 00 00 e0 8b 02 41 2f...

Page 379: ...et zone_list rename zone_set_old zone_set_new zones zone_set Keywords activate zone_set Activates the zone set given by zone_set This keyword deactivates the active zone set Close the Zoning Edit sess...

Page 380: ...one sets This keyword does not require an Admin session remove zone_set zone_list Removes a list of zones given by zone_list from the zone set given by zone_set Use a space to delimit zone names in zo...

Page 381: ...formation ActiveZoneSet Bets LastActivatedBy admin OB session6 LastActivatedOn day month date time year The following is an example of the Zoneset List command SANbox zoneset list Current List of Zone...

Page 382: ...ive enforced ZoneSet Information ZoneSet Zone ZoneMember wwn wwn_b0241f 50 06 04 82 bf d2 18 c2 50 06 04 82 bf d2 18 d2 21 00 00 e0 8b 02 41 2f wwn_23bd31 50 06 04 82 bf d2 18 c2 50 06 04 82 bf d2 18...

Page 383: ...ion Any unsaved changes are lost Authority Admin session and a Zoning Edit session Syntax zoning cancel Examples The following is an example of the Zoning Cancel command SANbox admin start SANbox admi...

Page 384: ...the Zoning Clear command followed by the Zoning Save command the non volatile zoning database will be cleared from the switch Authority Admin session and a Zoning Edit session Syntax zoning clear Exa...

Page 385: ...Configured command SANbox zoning configured Configured saved in NVRAM Zoning Information ZoneSet Zone ZoneMember wwn wwn_b0241f 50 06 04 82 bf d2 18 c2 50 06 04 82 bf d2 18 d2 wwn_23bd31 50 06 04 82...

Page 386: ...luding zone sets zones and aliases Authority Admin session Syntax zoning delete orphans Examples The following is an example of the Zoning Delete Orphans command SANbox admin start SANbox admin zoning...

Page 387: ...ase given by database If you omit database an edit session for the non volatile zoning database is opened database can have the following values configured Opens a zoning edit session for the non vola...

Page 388: ...ed zoning database Authority Admin session and a Zoning Edit session Syntax zoning edited Examples The following is an example of the Zoning Edited command SANbox admin zoning zoning edited Edited uns...

Page 389: ...ions to the zoning database and the user who made them Checksum for the zoning database Authority None Syntax zoning history Examples The following is an example of the Zoning History command SANbox z...

Page 390: ...able 14 46 Table 14 46 Zoning Database Limits Limit Description MaxZoneSets Maximum number of zone sets 256 MaxZones Maximum number of zones 2000 MaxAliases Maximum number of aliases 2500 MaxTotalMemb...

Page 391: ...2 18 c2 50 06 04 82 bf d2 18 d2 10 00 00 00 c9 23 bd 31 wwn_221416 50 06 04 82 bf d2 18 c2 50 06 04 82 bf d2 18 d2 10 00 00 00 c9 22 14 16 wwn_2215c3 50 06 04 82 bf d2 18 c2 50 06 04 82 bf d2 18 d2 10...

Page 392: ...ples The following is an example of the Zoning Merged command SANbox zoning merged To permanently save the merged database locally execute the zoning merged capture command To edit the merged database...

Page 393: ...e contents of the non volatile zoning database If the MergeAutoSave parameter is False see Table 14 13 you can use this command to revert changes to the merged zone set that were propagated from anoth...

Page 394: ...vated to implement any changes Authority Admin session and a Zoning Edit session Syntax zoning save Examples The following is an example of the Zoning Save command SANbox admin start SANbox admin zoni...

Page 395: ...6 4 14 142 description 11 1 14 103 log 14 84 14 134 alias add members 7 20 14 4 copy 7 20 14 4 create 7 19 14 4 delete 7 19 14 5 delete members 14 5 display list 14 5 display members 14 5 information...

Page 396: ...12 15 Central Processing Unit usage 5 4 certificate 8 2 8 3 14 17 Challenge Handshake Authentication Protocol 14 31 CHAP See Challenge Handshake Authentication Protocol chassis status 14 135 14 136 c...

Page 397: ...4 124 E elapsed time 5 4 Enterprise Fabric Suite 2007 license 14 25 errors 6 11 Ethernet network information 4 1 port configuration 4 2 Ethernet connection 12 2 event message format 11 2 output stream...

Page 398: ...ad file 2 8 version 14 186 Firmware Install command 14 27 example 5 20 FTP See File Transfer Protocol full text format 12 3 G gateway address 4 1 4 2 14 123 14 124 Greenwich Mean Time 5 17 group add m...

Page 399: ...History command example 4 9 Ipsec Limits command example 4 10 Ipsec List command 14 50 example 4 9 Ipsec Policy command 14 53 Copy example 4 14 Create example 4 11 Delete example 4 12 Edit example 4...

Page 400: ...25 operational information 5 3 orphan zones 7 7 output stream control 11 4 P page break 2 5 Passwd command 3 4 14 59 password change 14 59 default 2 2 File Transfer Protocol 2 7 switch 14 59 user acc...

Page 401: ...e Dial In User Service 10 1 remote host logging description 11 6 enable 14 124 host address 14 124 remote logging 4 2 Reset command 14 67 Callhome example 12 7 12 16 12 17 Config example 7 10 Factory...

Page 402: ...ty set activate 9 11 14 81 active 9 4 add group 9 11 add member group 14 81 configured 9 2 copy 9 11 14 82 create 9 10 14 82 deactivate 9 11 14 82 delete 9 10 14 82 delete member group 14 82 descripti...

Page 403: ...3 Show About command 14 132 Show Alarm command 14 134 Show Broadcast command 14 135 Show Chassis command 14 136 example 5 7 Show Config Port command 14 137 example 6 2 Show Config Security command 14...

Page 404: ...one 7 1 SSH See Secure Shell SSL See Secure Socket Layer Storage Management Initiative Specification 14 116 subnet mask 4 1 support file 14 17 create 2 6 download 2 7 upload 2 8 switch administrative...

Page 405: ...user account add 14 198 configuration 3 1 create 3 3 delete 14 198 display 14 198 edit 14 198 information 3 2 list 14 199 logged in 14 185 modify 3 4 password 3 4 user administration 14 198 User comma...

Page 406: ...6 rename 7 15 14 206 Zoneset command 14 205 Activate example 7 16 Active example 7 4 Add example 7 15 Copy example 7 15 Create example 7 14 Deactivate example 7 16 Delete example 7 15 List example 7 2...

Page 407: ...ng Delete Orphans command 14 212 Zoning Edit command 14 213 example 7 12 Zoning Edited command 14 214 Zoning History command 14 215 example 7 8 Zoning Limits command 14 216 example 7 9 Zoning List com...

Page 408: ...SANbox 5600 Series Fibre Channel Switch Command Line Interface Guide Index 14 59183 03 A S Notes...

Reviews: