Table of Contents
Brocade command line
SAN switch first setup
Set an IP address:
- you can connect to the switch with ssh to the IP: 10.77.77.77/255.255.255.0
- or use the serial connection with the following parameters: speed 9600, data bits 8, stop bits 1, parity None, and flow control None
Once connected to the switch with admin/password, set the password for all users, then set the right IP address:
IBM_2498_R06:admin> ipaddrshow SWITCH Ethernet IP Address: 10.77.77.77 Ethernet Subnetmask: 255.255.255.0 Gateway IP Address: DHCP: Off IPv6 Autoconfiguration Enabled: Yes Local IPv6 Addresses: IPv6 Gateways: IBM_2498_R06:admin> ipaddrset Ethernet IP Address [10.77.77.77]:10.18.228.31 Ethernet Subnetmask [255.255.255.0]:255.255.255.0 Gateway IP Address [0.0.0.0]:10.18.228.1 DHCP [Off]: IP address is being changed...Done.
Set the hostname
SWSAN1:admin> switchName "SWSANNEW1" SWSANNEW1 SWSANNEW1:admin>
Set the timeone / time server
Time zone:
S-SRV2FAS-107:admin> tstimezone --interactive Please identify a location so that time zone rules can be set correctly. Please select a continent or ocean. 1) Africa 2) Americas 3) Antarctica 4) Arctic Ocean 5) Asia 6) Atlantic Ocean 7) Australia 8) Europe 9) Indian Ocean 10) Pacific Ocean 11) none - I want to specify the time zone using the POSIX TZ format. Enter number or control-D to quit ? 8 Please select a country. 1) Aaland Islands 24) Lithuania 2) Albania 25) Luxembourg 3) Andorra 26) Macedonia 4) Austria 27) Malta 5) Belarus 28) Moldova 6) Belgium 29) Monaco 7) Bosnia & Herzegovina 30) Netherlands 8) Britain (UK) 31) Norway 9) Bulgaria 32) Poland 10) Croatia 33) Portugal 11) Czech Republic 34) Romania 12) Denmark 35) Russia 13) Estonia 36) San Marino 14) Finland 37) Serbia and Montenegro 15) France 38) Slovakia 16) Germany 39) Slovenia 17) Gibraltar 40) Spain 18) Greece 41) Sweden 19) Hungary 42) Switzerland 20) Ireland 43) Turkey 21) Italy 44) Ukraine 22) Latvia 45) Vatican City 23) Liechtenstein Enter number or control-D to quit ? 25 The following information has been given: Luxembourg Therefore TZ='Europe/Luxembourg' will be used. Local time is now: Fri Nov 16 15:20:56 CET 2007. Universal Time is now: Fri Nov 16 14:20:56 UTC 2007. Is the above information OK? 1) Yes 2) No Enter number or control-D to quit ? 1 System Time Zone change will take effect at next reboot S-SRV2FAS-107:admin> tstimezone Europe/Luxembourg S-SRV2FAS-107:admin> date Fri Nov 16 15:21:28 CET 2007
Time server, it needs an ethernet connection to connect to time server, else it will failed:
S-SRV2FAS-107:admin> tsclockserver "192.168.20.99" Updating Clock Server configuration...done. S-SRV2FAS-107:admin> tsclockserver 192.168.20.99
Set the Switch Domain ID
Very important : The switch Domain ID have to be unique for each switch into a fabric, change it on each switch.
This is an offline operation.
SWSAN1:admin> switchshow switchName: SWSAN1 switchType: 26.2 switchState: Online switchMode: Native switchRole: Principal switchDomain: 1 ....
switch_8:FID8:admin> switchdisable switch_8:FID8:admin> configure Configure... Fabric parameters (yes, y, no, n): [no] y Domain: (1..239) [1] 4 ... switch_8:FID8:admin>switchenable
Set the DNS servers
SWSAN1:admin> dnsconfig Enter option 1 Display Domain Name Service (DNS) configuration 2 Set DNS configuration 3 Remove DNS configuration 4 Quit Select an item: (1..4) [4] 1 Domain Name Server Configuration Information ____________________________________________ Please set domain name and name server IP address Enter option 1 Display Domain Name Service (DNS) configuration 2 Set DNS configuration 3 Remove DNS configuration 4 Quit Select an item: (1..4) [4] 2 Enter Domain Name: [] mydomain.com Enter Name Server IP address in dot notation: [] 10.10.3.2 Enter Name Server IP address in dot notation: [] 10.10.3.1 DNS Configuration has changed Enter option 1 Display Domain Name Service (DNS) configuration 2 Set DNS configuration 3 Remove DNS configuration 4 Quit Select an item: (1..4) [4] 4 SWSAN1:admin>
Firmware Download
Before starting a firmware upgrade, save the current configuration on a secure place on a ftp or scp server:
SWSAN1:admin> configUpload -p scp 10.10.5.152,root,/backup/swsan1.bkp root@10.10.5.152's password: Upload complete
Check the firmware version and determine the latest firmware for this kind of switch. In certain conditions, you have to do multiples upgrade
to reach the latest level. Check into the readme file the prerequisites.
IBM_2498_R06:admin> version Kernel: 2.6.14.2 Fabric OS: v6.4.1 Made on: Thu Oct 7 00:35:44 2010 Flash: Sat Oct 30 00:02:37 2010 BootProm: 1.0.9 IBM_2498_R06:admin>
Set the timeout to 0:
IBM_2498_R06:admin> timeout Current IDLE Timeout is 10 minutes IBM_2498_R06:admin> timeout 0 IDLE Timeout Changed to 0 minutes The modified IDLE Timeout will be in effect after NEXT login IBM_2498_R06:admin> ................................ Logout then re-login ............................ IBM_2498_R06:admin> timeout Current IDLE Timeout is 0 minutes
Put the latest firmware on an FTP server and uncompress it. For most releases, you have to specify the directory path with release.plist: Ex /v4.3.0/release.plist
(do not check if this file exists, it is present into subdirectory, but the switch will check which is his firmware directory).
Download and install the new firmware (disruptive for most kind of switches):
SAN32B_3_146:admin> firmwaredownload -p sftp 10.64.210.103,ibm,/export/software/v4.3.0,password Server IP: 10.64.210.103, Protocol IPv4 Checking system settings for firmwaredownload... System settings check passed. You can run firmwaredownloadstatus to get the status of this command. This command will cause a warm/non-disruptive boot on the switch, but will require that existing telnet, secure telnet or SSH sessions be restarted. Do you want to continue [Y]: y Firmware is being downloaded to the switch. This step may take up to 30 minutes. Preparing for firmwaredownload... Start to install packages... dir ########################################## ldconfig ########################################## glibc ########################################## ....
After the reboot, check the new firmware version:
SAN32B_3_146:admin> firmwareshow Appl Primary/Secondary Versions ------------------------------------------ FOS v6.2.0e v6.2.0e SAN32B_3_146:admin> version Kernel: 2.6.14.2 Fabric OS: v6.2.0e Made on: Tue Apr 14 21:26:47 2009 Flash: Wed Jul 15 17:02:37 2009 BootProm: 4.6.6
FPGA upgrade
The firmware download does not automatically update the FPGA firmware into the FPGA flash memory of the system. If an updated FPGA version is included in a Fabric OS firmware update, after the firmware download is completed, you must enter the fpgaupgrade command to update the FPGA firmware
switch:admin> fpgaupgrade --latest Current Latest ------------------------- 0x05.05 0x06.06
Upgrade FGPA to latest level
switch:admin> fpgaupgrade This is a disruptive operation and will require a power-cycle after the completion of the operation. Do you want to continue (y/n) ? y Programming new FPGA, this may take a few minutes ... Device #1 IDCODE is 0310A0DD full-chip erasing Max 10 FPGA device(s) ... programming Max 10 FPGA CFM0 block at sector 5 ... ... Exit code = 0... Success Programmed new FPGA successfully. Please power-cycle for it to take effect.
If not success, do not reboot the SAN switch, correct first the error
switch:admin> reboot
SSH keys import
If you want to connect automatically to a switch using ssh, you have to import ssh public key for the user. Copy one or more public keys in a file and put it on a ftp or ssh server.
[root@nim] # ssh admin@switchsan1 switchsan1:admin> sshutil importpubkey Enter user name for whom key is imported:admin Enter IP address:172.10.10.165 Enter remote directory:/root/.ssh Enter public key name(must have .pub suffix):id_rsa.pub Enter login name:root root@172.10.10.165's password: public key is imported successfully. switchsan1:admin> logout
Add a user with admin rights
switchsan1:admin> userconfig --add lpardeploy -l 1-128 -h 128 -r admin -c admin Setting initial password for lpardeploy Enter new password: Re-type new password: Account lpardeploy has been successfully added.
Access to Virtual Fabrics 1 through 128 Default home logical switch to 128 Admin role permissions Admin chassis role permissions
Backup SAN config
Automatic backup of san config:
ssh admin@switchsan1 "configupload -all -scp nimsrv,scpuser,/backup/switchsan1.config"
Step by Step Procedure of Zoning via Cli
1.Create an Alias using “AliCreate” SW0:admin> alicreate "SUNX4150_HBA0" SW0:admin> alicreate "V7000_ctl1_p0","50:00:00:1b:38:13:a8:08" SW0:admin> aliadd "AIXNPIV_HBA0","c5:00:00:1b:32:13:a8:01;c5:00:00:1b:32:13:a8:02" In particular situations an alias have more than 1 member. SW0:admin> alicreate "SUNX4150_HBA1", "1,3" This is a bad sample, please do not use anymore port zoning. 2.Add member to Alias using “Aliadd” SW0:admin> aliadd "SUNX4150_HBA0","21:00:00:1b:32:13:a8:9f" 3.Create a Zone using “ZoneCreate” SW0:admin> zonecreate "CX_424_SPB4_SUNX4150_HBA0" SW0:admin> zonecreate "Z_AIXNPIV_HBA0_V7000_ctl1_p0","V7000_ctl1_p0;AIXNPIV_HBA0" 4. Add member to Zone using “ZoneAdd” SW0:admin> zoneadd "CX_424_SPB4_SUNX4150_HBA0","CX_424_SPB4" 5.Add a Zone to Zone configuration “CfgAdd”. SW0:admin> cfgadd "SAN_U2_SW0_Config","CX_424_SPB4_SUNX4150_HBA0;Z_AIXNPIV_HBA0_V7000_ctl1_p0" 6.Save the Configuration using “CfgSave”. SW0:admin> cfgsave 7.Enable the Configuration using “CfgEnable”. SW0:admin> cfgenable "SAN_U2_SW0_Config"
Rename an oject (alias, zone) use the following command:
switch:admin> zoneobjectrename "alias1","aliasold"
Command to compare active zoning and defined
Compare active and defined config
san01:FID128:admin> cfgshow --transdiffsonly No change in configuration defined
If you have specific zone you wish to check you can go with the command zone –validate {zone_name}, example output:
switch> zone --validate Z_linux002_storage001_FA8fB Defined configuration: zone: Z_linux002_storage001_FA8fB A_storage001_FA8fb; a_linux002_hba_a Effective configuration: zone: Z_linux002_storage001_FA8fB 50:00:09:72:08:28:55:3d 21:00:00:1b:32:8c:71:c6
Count if a zone is available in active and defined config:
- 1 means, only available in one config
$ ssh -l admin switch cfgshow | grep "zone" | sort | uniq -c admin@switch's password: 1 zone: zone_storage3257_FA7bA_RTPUS 2 zone: zone_storage3791_10aA_fdsa 2 zone: zone_storage3791_10agfda 2 zone: zone_storage3791_efs 2 zone: zone_storage3791_vfda 2 zone: zone_storage3791_grw 2 zone: zone_storage3791_fdsbaa 2 zone: zone_storage3791_vfaf
Command to test
Check if source and target are in a zone
switch:admin> fcping 10:00:00:00:c9:29:0e:c4 21:00:00:20:37:25:ad:05 Source: 10:00:00:00:c9:29:0e:c4 Destination: 21:00:00:20:37:25:ad:05 Zone Check: Not Zoned
Check if the WWN, PID or alias is still connected or not into the whole fabric
DCX01:FID128:admin> nodefind 50:06:04:8a:d5:4f:23:10 Remote: Type Pid COS PortName NodeName N 40a500; 3;50:06:04:8a:d5:4f:23:10;50:06:04:8a:d5:4f:23:10; FC4s: FCP PortSymb: [38] "EMC SYMMETRIX 000000000001 " NodeSymb: [38] "EMC SYMMETRIX 000000000001 " Fabric Port Name: 20:02:00:05:1e:32:12:01 Permanent Port Name: 50:06:04:8a:d5:4f:23:10 Device type: Physical Initiator+Target Port Index: 165 Share Area: No Device Shared in Other AD: No Redirect: No Partial: No Aliases: Symm0001_alias1 DCX01:FID128:admin> nodefind V7K3_C2_4 No device found
Let’s analyze the output.
Remote means that this WWN is connected to another switch in the Fabric.
40a500 – is a 24bit (Core PID format) FC Address. I mentioned FC Addressing in Fibre Channel addressing entry if you wish to refresh the knowledge. But in few words – First 8 bits are Domain ID, another 8 bits are Area ID, and last 8 bits are Node ID – 00 or AP_PA, so:
40 – this is the Domain ID
a5 – this is the Area ID – a5 hex = 165 dec. As you can see this is exactly – our Port Index.
00 – this is the Node ID – 00, because to this port only one Node is connected directly / No NPIV. If this switch required shared area addressing (basically more than 255), the first 8 bit of Node ID would be "borrowed" as Area ID as well.
Port Index: 165 – is already given (as hex) in Core PID Address.
switch01> fabricshow Switch ID Worldwide Name Enet IP Addr FC IP Addr Name ------------------------------------------------------------------------- 23: fffc17 10:00:00:05:1e:13:1c:22 192.168.100.3 0.0.0.0 >"switch01" 24: fffc18 10:00:00:05:1e:13:6e:f2 192.168.100.3 0.0.0.0 "switch04" 62: fffc3e 10:00:00:05:1e:13:0a:13 192.168.75.1 0.0.0.0 "switch02" 64: fffc40 10:00:00:05:1e:55:63:3d 192.168.100.3 0.0.0.0 "switch05" 101: fffc65 10:00:00:05:1e:55:33:11 192.168.75.2 0.0.0.0 "switch06" 105: fffc69 10:00:00:05:1e:32:64:01 192.168.117.1 0.0.0.0 "switch07"
Above we see the output of our Fabric. What interests us is the ID of the Switch. FFFCxx is the Address of the Domain Controller – xx represents the Domain ID. This is considered as the name/ID of the switch. And there it is – our Switch with Domain_ID=40 is switch05.
IBM_SAN18BR_137:admin> switchshow switchName: IBM_SAN18BR_137 . 15 15 -- N4 No_Module 16 16 -- -- Offline 17 17 -- -- Offline Disabled (Persistent) . 31 31 -- -- Offline Disabled (Persistent) ge0 id 1G Online FCIP ge1 -- 1G No_Module FCIP Disabled (Persistent)
Command to check if an alias is present, and port characteristics:
SWSAN02:admin> nsaliasshow { Type Pid COS PortName NodeName TTL(sec) N 2a0000; 3;20:34:00:80:e5:2e:c7:02;20:04:00:80:e5:2e:c7:02; na FC4s: FCP [IBM 1746 FAStT 1070] Fabric Port Name: 20:00:00:05:1e:34:c5:ef Permanent Port Name: 20:34:00:80:e5:2e:c7:02 Port Index: 0 Share Area: No Device Shared in Other AD: No Redirect: No Aliases: ds3524_a_p1 N 2a0100; 2,3;20:00:00:c0:dd:28:7e:d6;10:00:00:c0:dd:28:7e:d6; na Fabric Port Name: 20:01:00:05:1e:34:c5:ef Permanent Port Name: 20:00:00:c0:dd:28:7e:d6 Port Index: 1 Share Area: No Device Shared in Other AD: No Redirect: No Aliases: N 2a0101; 2,3;21:00:00:24:ff:49:a2:bd;20:00:00:24:ff:49:a2:bd; na FC4s: FCP NodeSymb: [38] "QMI2592 FW:v5.06.05 DVR:v902.k1.1-9vmw" Fabric Port Name: 20:01:00:05:1e:34:c5:ef Permanent Port Name: 20:00:00:c0:dd:28:7e:d6 Port Index: 1 Share Area: No Device Shared in Other AD: No Redirect: No Aliases: N 2a0200; 2,3;10:00:00:00:c9:83:90:89;20:00:00:00:c9:83:90:89; na FC4s: FCP PortSymb: [34] "Emulex PPN-10:00:00:00:c9:83:90:89" NodeSymb: [41] "Emulex LPe11000 FV2.71A2 DV8.2.3.1-127vmw" Fabric Port Name: 20:02:00:05:1e:34:c5:ef Permanent Port Name: 10:00:00:00:c9:83:90:89 Port Index: 2 Share Area: No Device Shared in Other AD: No Redirect: No Aliases: esx03_p1 N 2a0300; 3;21:00:00:1b:32:10:1a:00;20:00:00:1b:32:10:1a:00; na FC4s: FCP NodeSymb: [38] "QLE2460 FW:v5.06.05 DVR:v902.k1.1-9vmw" Fabric Port Name: 20:03:00:05:1e:34:c5:ef Permanent Port Name: 21:00:00:1b:32:10:1a:00 Port Index: 3 Share Area: No Device Shared in Other AD: No Redirect: No Aliases: esx01_p1 N 2a0400; 3;20:35:00:80:e5:2e:c7:02;20:04:00:80:e5:2e:c7:02; na FC4s: FCP [IBM 1746 FAStT 1070] Fabric Port Name: 20:04:00:05:1e:34:c5:ef Permanent Port Name: 20:35:00:80:e5:2e:c7:02 Port Index: 4 Share Area: No Device Shared in Other AD: No Redirect: No Aliases: ds3524_b_p1 N 2a0500; 2,3;20:0f:00:c0:dd:28:7e:d6;10:00:00:c0:dd:28:7e:d6; na Fabric Port Name: 20:05:00:05:1e:34:c5:ef Permanent Port Name: 20:0f:00:c0:dd:28:7e:d6 Port Index: 5 Share Area: No Device Shared in Other AD: No Redirect: No Aliases: N 2a0501; 2,3;21:00:00:24:ff:3f:a9:df;20:00:00:24:ff:3f:a9:df; na Fabric Port Name: 20:05:00:05:1e:34:c5:ef Permanent Port Name: 20:0f:00:c0:dd:28:7e:d6 Port Index: 5 Share Area: No Device Shared in Other AD: No Redirect: No Aliases: p7vios1_fcs1 N 2a0f00; 3;50:03:08:c3:a1:78:a0:01;50:03:08:c3:a1:78:a0:00; na FC4s: FCP [IBM ULT3580-TD6 D2D2] Fabric Port Name: 20:0f:00:05:1e:34:c5:ef Permanent Port Name: 50:03:08:c3:a1:78:a0:01 Port Index: 15 Share Area: No Device Shared in Other AD: No Redirect: No Aliases: drive_1 ........... The Local Name Server has 15 entries }
Brocade commands
aaaconfig Configure RADIUS for AAA services ad Specifies all administration domain (AD)-level operations ag Configure the Access Gateway feature agshow Displays the Access Gateway information registered with the fabric agtcfgdefault Reset SNMP agent to factory default aliadd Add a member to a zone alias alicreate Create a zone alias alidelete Delete a zone alias aliremove Remove a member from a zone alias alishow Print zone alias information aptpolicy Get and set Advanced Performance Tuning policy auditcfg Modifies and displays audit log filter configuration. auditdump Display audit log authutil Get and set authentication configuration backplanetest Backplane connection test for multi-blade systems. backport Test for back-end ASIC pair to ASIC pair links. bannerset Set security banner bannershow Display security banner bcastshow Display broadcast routing information bladebeacon Enables or disables blade beaconing or displays the current mode. bladedisable Disables all user ports on a blade. bladeenable Enables all User Ports on a blade. bpportloopbacktest Functional test of port via blade processor path. bpturboramtest MBIST test for AP blade BP ASICs burninerrclear Clear errors that are stored in the non-volatile storage burninerrshow Display errors that are stored in the non-volatile storage burninstatus Display the diagnostics burnin status. camtest Verify QuickLoop's Content Addressable Memory (CAM).SID translation centralmemorytest Test ASIC central memory operation. cfgactvshow Display Effective zone configuration information cfgadd Add a member to a configuration cfgclear Clear all zone configurations cfgcreate Create a zone configuration cfgdelete Delete a zone configuration cfgdisable Disable a zone configuration cfgenable Enable a zone configuration cfgmcdtmode Configure legacy MCDT zoning behavior cfgremove Remove a member from a configuration cfgsave Save zone configurations in flash cfgsaveactivetodefined Moves the effective configuration to the defined configuration cfgshow Print zone configuration information cfgsize Print size details of zone database cfgtransabort Abort zone configuration transaction cfgtransshow Print zone configurations in transaction buffer chassisbeacon Set chassis beacon on or off chassisconfig Display or set the chassis configuration chassisdisable Disable all ports in chassis chassisenable Enable all ports in chassis chassisname Display or set the chassis's Name chassisshow Display all Field Replaceable Units (FRU) chipregshow Displays the port registers for a given chip number. clihistory Displays a log of most recently executed CLI commands cmemretentiontest Data retention test of the central memory SRAMs. cmitest Verify CMI bus between ASICs. configdefault Reset config to factory default configdownload Load switch config from a server configlist List the stored config files configremove Remove a stored config file configshow Print switch config parameters configupload Save switch config to a server configure Set logical switch config parameters configurechassis Set chassis config parameters cryptocfg Configure encryption node functions datatypeshow Display available diagnostic data types. date Print/set the system date and time dbgshow Display debug levels of various modules defzone Activates or deactivates a default zone configuration. diagclearerror Clears diagnostics failure status. diagcommandshow Display diagnostic command descriptions. diagdisablepost Disable diagnostic POST. diagenablepost Enable diagnostic POST. diagenv Diagnostic debug parameters management package. diaghelp Display diagnostic command descriptions. diagloopid Select the diagnostics loop ID. diagmodeshow Displays diagnostic mode configuration. diagpost Displays the contents of port registers and memories. diagretry Sets diagnostic retry mode diagsetburnin Initializes the blade for a burnin run. diagsetcycle Set diagnostic script parameters. diagsetesdmode Set or display ESD mode. diagsetshowtime Set or display diagnostic show-time mode. diagshow Display diagnostic status. diagshowtime Set or display diagnostic show-time mode. diagstatus Display currently running diagnostic tests. diagstopburnin Terminate burnin run on a blade. distribute Distributes data to switches in a fabric. dlsreset Turn off the dynamic load sharing (DLS) option dlsset Turn on the dynamic load sharing (DLS) option dlsshow Display the state of the dynamic load sharing option dnsconfig Configure DNS service enclosureshow Display the switch enclosure attributes errclear Clear error log errdelimiterset Sets the error log start and end delimiter for messages sent to the console and syslog errdump Print error log (no page breaks) errfilterset Sets a filter for an error log destination errmoduleshow Displays all the defined modules in the system errshow Print error log fabportshow Display contents of a particular port's data fabretryshow Display retry count of various fabric commands fabriclog Displays or manipulates the fabric log fabricprincipal Configure Principal Switch Selection mode fabricshow Print fabric membership info fabstateclear Clears the fabric state information fabstateresize Changes the number of state entries fabstateshow Displays the fabric state information fabstatsshow Displays the fabric statistics information fabswitchshow Display fabric switch state information fandisable Disables a fan unit. fanenable Enables a fan unit. fanshow Print fan status fastboot Reboot this switch and bypass POST fastwritecfg Configure FC fastwrite feature fcipchiptest Functional Test of Components in FCIP Complex. fciphelp Print FCIP help info fcippathtest Data Path Test of the FCIP complex. fcping Sends a FC ELS ECHO request to a port fcplogclear Clear the FCP log fcplogdisable Disable logging of FCP events fcplogenable Enable logging of FCP events fcplogshow Display FCP probing log information fcpprobeshow Display FCP probing information fcprlsshow Display FCP RLS (read link state) information fcrbcastconfig Configure interfabric broadcast frame forwarding fcrchiptest Functional Test of FCR FPGA. fcrconfigure Sets FC Router configuration parameters. fcrfabricshow Displays FC Routers on a backbone fabric. fcrlsan Configure LSAN policies fcrlsancount Display maximum LSAN zone limit. fcrlsanmatrix Manage LSAN fabric matrix configuration. fcrpathtest Data Path Test on Connection between FCR FPGA and Central ASIC. fcrphydevshow Displays FC Router physical device information. fcrproxyconfig Displays or configures proxy devices presented by an FC Router. fcrproxydevshow Displays FC Router proxy device information. fcrresourceshow Displays FC Router physical resource usage. fcrrouterportcost Modify FC Router port cost configuration. fcrrouteshow Displays FC Router route information. fcrxlateconfig Displays or persistently configures a translate (xlate) domain's domain ID for both EX_Port-attached fabric and backbone fabric. fddcfg fddcfg manages the fabric data distribution configuration parameters. fdmicacheshow Display abbreviated remote FDMI device information according to remote domain ID fdmishow Display detailed FDMI device information ficonclear Clears contents of the specified FICON management database ficoncupset Sets FICON-CUP parameters for a switch ficoncupshow Displays FICON-CUP parameters for a switch ficonhelp Displays FICON commands ficonshow Displays contents of the specified FICON management database filtertest Run frame filter test for bloom ASICs. fipscfg Configure FIPS mode operation firmwarecommit Commit firmware to stable storage firmwaredownload Download firmware into switch firmwaredownloadstatus Display the progress and status of firmwareDownload firmwarekeyshow Manage the keys used to check firmware signatures firmwarekeyupdate Manage the keys used to check firmware signatures firmwarerestore Restore the old firmware in the switch firmwareshow Display firmware versions in the switch fosconfig Enable/disable FabOS services fosexec Invoke command in alternate VF context fporttest Functional test of F->N N->F point to point path. framerpathtest Tests data path between ASICs frureplace Replace a Field Replacable Unit fspfshow Print FSPF global information fwalarmsfilterset Configure alarms filtering for Fabric Watch fwalarmsfiltershow Show alarms filtering for Fabric Watch fwclassinit Initialize all Fabric Watch classes fwconfigreload Reload Fabric Watch configuration fwconfigure Configure Fabric Watch fwfrucfg Configure FRU state and notification fwhelp Print Fabric Watch help info fwmailcfg Configure Fabric Watch Email Alert fwportdetailshow Create a report with detailed port information fwsamshow Show availability monitor information fwset Set port persistence time fwsettocustom Set boundary & alarm level to custom fwsettodefault Set boundary & alarm level to default fwshow Show thresholds monitored and port persistence time grep Linux grep command h Print shell history hadisable Disables the High Availability feature in the switch. hadump Displays information about the status of the High Availability feature in the switch. haenable Enables the High Availability feature in the switch hafailover Forces the failover mechanism so that the Standby Control Processor (CP)becomes the Active CP. hashow Displays control processor (CP) status hasyncstart Enables HA state synchronization. hasyncstop Disables the HA state synchronization. help Print this list historylastshow Displays last history record historymode Display or set the mode of the history log historyshow Displays entire history log httpcfgshow Used to show the version of the Java plug-in used by the Webtools i Display process summary iclcfg Configure ICL state ifmodeset Set the link operating mode for a network interface ifmodeshow Display the link operating mode for a network interface interfaceshow Display the FSPF (TM) interface information interopmode Displays/enables/disables Brocade switch interoperability with switches from other manufacturers ioddelayreset Configure in-order-delivery (IOD) delay parameter ioddelayset Configure in-order-delivery (IOD) delay parameter ioddelayshow Configure in-order-delivery (IOD) delay parameter iodreset Turn off the in-order delivery (IOD) option iodset Manage the in-order delivery (IOD) option iodshow Display the state of the in-order delivery option ipaddrset Set ethernet and FC IP addresses ipaddrshow Print ethernet and FC IP addresses ipfilter Manage/display IP filters ipsecconfig Configure IPSec feature iscsihelp Print iSCSI help info islshow Display the current connections and status killtelnet Terminate telnet/serial login sessions interactively ldapcfg Configure LDAP role mapping ledtest Cycle system LEDs. lfcfg Configure logical fabrics lfexec Invoke command in alternate VF context licenseadd Adds license keys to switch licensehelp Print license help info licenseidshow Displays the system license ID licenseport Configure per-port POD license assignments licenseremove Removes a license key from this system licenseshow Displays current license keys linkcost Set or print the FSPF cost of a link login Login as a new user logout Logout from remote session loopporttest Functional test of L-port M->M path on a loop. lscfg Configure logical switches lsdbshow Displays the FSPF link state database memshow Display memory usage in the system. minispropshow Displays ASIC pair properties. more Linux more command mscapabilityshow Display Management Server Capability. msconfigure Configure Management Server msplatshow Display the Management Server Platform Database msplatshowdbcb Display the Management Server Database Control Block msplcleardb Clear the Management Server Platform Database fabric-wide msplmgmtactivate Activate the Management Server Platform Database fabric-wide msplmgmtdeactivate Deactivate the Management Server Platform Database fabric-wide mstddisable Disables the Management Server Topology Discovery Management Service mstdenable Enables the Management Server Topology Discovery Management Service mstdreadconfig Display status of Management Server Topology Discovery Service myid Display the current login session details nbrstateshow Display FSPF (TM) neighbors' states nbrstatsclear Reset the FSPF (TM) interface counters netstat Display network connections and statistics nodefind Display all the devices' PID matching the given world wide name nsaliasshow Display local Name Server information with Aliases nsallshow Print global Name Server information nscamshow Print local Name Server Cache information nsshow Print local Name Server information information nszonemember Display the information of all the online devices which are zoned with the given device. opensource Display information on open source software utilized in FabOS passwd Set usernames and passwords passwdcfg passwdcfg manages the password policies. pathinfo Display routing information between two ports pdshow Show information from Panic Dump file perfaddeemonitor Add end-to-end monitor perfaddipmonitor Add monitor for IP trafic frame count perfaddreadmonitor Add filter-based monitor - SCSI Read perfaddrwmonitor Add monitor - SCSI Read and Write perfaddscsimonitor Add monitor for SCSI frame count perfaddusermonitor Add filter-based monitor perfaddwritemonitor Add filter-based monitor - SCSI Write perfcfgclear Clear Performance settings from FLASH perfcfgrestore Restore Performance configuration from FLASH perfcfgsave Save Performance configuration to FLASH perfclearalpacrc Clears the CRC error count associated with a port and Arbitrated Loop Physical Address (AL_PA). perfcleareemonitor Clears statistics counters of one or more end-to-end performance monitors. perfclearfiltermonitor Clears counters of one or more filter-based performance monitors. perfdeleemonitor Delete end-to-end monitor perfdelfiltermonitor Delete filter-based monitor perfhelp Print Performance Monitoring help info perfmonitorclear Clear end-to-end/filter-based/ISL monitors perfmonitorshow Show end-to-end/filter-based/ISL monitors perfsetporteemask Set overall mask for end-to-end monitors perfshowalpacrc Get ALPA CRC count by port and ALPA perfshoweemonitor Show user-defined end-to-end monitors perfshowfiltermonitor Show filter-based monitors perfshowporteemask Show the current end-to-end mask perfttmon Configure bandwidth usage monitor ping Display the link operating mode for a network interface ping6 Display the link operating mode for a network interface pkicreate Creates public key infrastructure (PKI) objects pkiremove Removes existing public key infrastructure (PKI) objects pkishow Displays existing public key infrastructure (PKI) objects policy Configure IPSec encryption and authentication algorithms portaddress Configure low 16 bits of Fibre Channel Porrt ID portalpashow Show the ALPAs of a port portbuffershow Print the buffer allocations for the ports of a quad portcamshow Display filter utilization portcfg Create/Delete a new ip interface/route/arp entry on the GigE port portcfgalpa Set AL_PA to 0x0 (default) or 0x13 portcfgautodisable Configure auto disable portcfgcreditrecovery Configure credit recovery portcfgdefault Restore the port configuration to defaults portcfgeport Enable/Disable a port from becoming E_Port portcfgexport Sets a port to be an EX_Port and sets and displays EX_Port configuration parameters. portcfgfillword Configure a port to a particular fill word portcfgfportbuffers Configure F_Port buffers portcfggport Lock a port as a G_Port portcfgislmode Configure a port to be ISL R_RDY Mode enabled/disabled portcfglongdistance Configure a Long Distance Port portcfglosstov Configure frontend port signal debounce portcfglport Lock a port as a L_Port portcfgnpivport Enables and disables NPIV functionality on a port. portcfgnport Enable/disable N_Port capability for a port portcfgpersistentdisable Persistently disable a port portcfgpersistentenable Enable a persistently disabled port portcfgqos Configure QoS feature portcfgshow Displays port configuration settings. portcfgspeed Configure a port to a particular speed level portcfgtrunkport Configure a port for trunking portcfgvexport Sets a port to be an VEX_Port connected to FC-IP and sets and displays VEX_Port configuration parameters. portcmd Execute commands (ping etc) on the GigE port portdebug Set debug level and verbosity level of port modules portdisable Disable a specified port portenable Enable a specified port porterrshow Print port error summary portflagsshow Display the port status bitmaps of all ports in a switch portledtest Cycle user port LEDs. portlogclear Clear port activity log portlogconfigshow Display portlog configuration portlogdisable Disable portlog facility portlogdump Print port log (no page breaks) portlogdumpport Print port log (no page breaks) portlogenable Enables port log facility portlogeventshow Display information about port log events portloginshow Display port login information portlogpdisc Set or clear the debug_pdisc_flag portlogreset Enable portlog facility portlogresize Resize the port log portlogshow Print port activity log portlogshowport Print port activity log portlogtypedisable Disable port logging portlogtypeenable Enable port logging portloopbacktest Functional test of port N->N path. portmirror Set a port's configuration to be disabled or enabled portname Assign or display the name associated with a port portperfshow Print port throughput numbers portregtest Write/read test of the ASIC SRAMs portregtest. portrouteshow Display various routing tables for a port portshow Show configured ip interfaces/routes/arp entries on the GigE Port portstats64show Display the 64-bit hardware statistics for a port portstatsclear Clear the status of a specified switch port portstatsshow Print hardware statistics portswap Swaps area numbers portswapdisable Disable portswap feature portswapenable Enable portswap feature portswapshow Display port and area information porttest Functional test on a live fabric. Starts porttest. porttestshow Retreive information from porttest. porttrunkarea Configure area trunking portzoneshow Displays the enforced zone type of the F/FL-ports of a switch. powerofflistset sets slot power off list order powerofflistshow Displays slot power-off order. psshow Print power supply status quietmode Displays/enables/disables quietmode on telnet session reboot Reboot this processor routehelp Print routing help info saschiptest Functional Test of Components in SAS Complex. saspathtest Data Path Test of the SAS complex. secactivesize Displays size of the active (security) database secauthsecret Creates/Manages DHCHAP secret key details seccertutil Creates/Manages/Displays third party PKI certificates secdefinesize Displays size of the defined (security) database secglobalshow Displays current internal security state information sechelp Displays information about security commands secpolicyabort Aborts changes to defined policy secpolicyactivate Activates all policy sets secpolicyadd Adds members to an existing policy secpolicycreate Creates a new policy secpolicydelete Deletes an existing policy secpolicydump Displays all members of existing policies secpolicyfcsmove Moves a member in the FCS policy secpolicyremove Removes members from an existing policy secpolicysave Saves defined policy set and sends to all switches secpolicyshow Shows members of one or more policies secstatsreset Resets security statistics secstatsshow Displays security statistics sensorshow Display sensor readings setdbg Set debug level of the specified module setesdmode Set or display ESD mode. setmfgmode Set or display diagnostic MFG mode. setmodem Enables or disables modem login to a control processor (CP) setsplbmode Set or display SPLB mode. setverbose Set verbosity level of the specified module sfpshow Print Serial ID SFP information shellflowcontroldisable Disable xon-xoff flow control on console serial port shellflowcontrolenable Enable xon-xoff flow control on console serial port slotpoweroff Removes power from a slot. slotpoweron Restores power to a slot. slotshow Displays the status of all slots in the system. sltest Serial link test of port N->N path. snmpconfig Configure SNMP snmpmibcapset Set options for configuring SNMP Mib/Trap Capability snmpmibcapshow Show SNMP Mib/Trap Configuration spinfab Functional test of switch to switch ISL cabling and trunk group operation. spinjitter line-speed jitter measurement spinsilk Functional test of internal and external transmit and receive paths at full speed sramretentiontest Data retention test of the miscellaneous SRAMs in ASIC. sshutil Configure SSH authentication options statsclear Clear port and diagnostic statistics. statstest Statistics counter test for the ASICs. stopporttest Terminate the running porttest. supportffdc Modifies or displays first-failure data capture (FFDC) configuration. supportftp set support Ftp parameters supportsave retrieve support data from switch to host supportshow Prints switch information for debugging purposes. supportshowcfgdisable Disables a group of commands under supportshow command. supportshowcfgenable Enables a group of commands under supportshow command. supportshowcfgshow Displays the groups of commands enabled for display. by the supportshow command. switchbeacon Set switch beacon on or off switchcfgpersistentdisable Persistently disable a switch switchcfgpersistentenable Enable a persistently disabled switch switchcfgspeed Configures all ports of the switch to a particular speed level switchcfgtrunk Configure all ports on the switch for trunking switchdisable Disable this switch switchenable Enable this switch switchname Print/set this switch's name switchshow Print switch and port status switchstatuspolicyset Set policy parameters for overall switch status switchstatuspolicyshow Print policy parameters for overall switch status switchstatusshow Print overall switch status switchuptime Display the amount of time for which the switch is up switchviolation Display policy violations recorded in RAS log syslogdfacility Change the syslog facility syslogdipadd Add syslog daemon IP address syslogdipremove Remove syslog daemon IP address syslogdipshow Print the syslog daemon targets sysshutdown Provides a graceful shutdown to protect the switch file systems. systemverification Run a suit of diagnostic tests on all switches in a system. tempshow Print temperature readings timeout Set/show the IDLE timeout value for a login session topologyshow Display the unicast fabric topology tracedump generate/remove trace dump or display trace dump status traceftp enable/disable trace auto-FTP or transfer trace dump trackchangeshelp Print Track Changes help info trackchangesset Configure alert for login/logout/config update trackchangesshow Displays status of track changes trunkdebug Debug a trunk link failure trunkshow Display trunking information tsclockserver Displays or sets the NTP server address tstimezone Displays or sets the time zone turboramtest Turbo SRAM test for bloom ASICs. txdpath Functional test of ASIC pair TXA TXD connections. uptime Print how long switch has been up urouteconfig Configure a static route urouteremove Remove a static route urouteshow Display unicast routing information usbstorage Manage USB storage device (available on Brocade Data Center Director only). userconfig Display or configure user accounts userrename Rename user login name version Print firmware version wwn Display or set the world wide name zone Configure zone objects zoneadd Add a member to a zone zonecreate Create a zone zonedelete Delete a zone zonehelp Print zoning help info zoneobjectcopy Copies a zone object zoneobjectexpunge Expunges a zone object zoneobjectrename Rename a zoning Object zoneremove Remove a member from a zone zoneshow Print zone information
http://wikibon.org/wiki/v/How_to_configure_FCIP_on_Brocade_7500%27s
Scripts to recreate zoning
If you have save the zoning from an old switch using the configupload command, you can recreate it on the new one using the following scripts:
for line in $(grep -p Zoning config.txt | grep "^alias.") do echo $line | sed 's/\./\ /1' | sed 's/alias/alicreate/1' | sed 's/\:/\,"/1' | sed 's/$/"/' done
for line in $(grep -p Zoning config.txt | grep "^zone.") do echo $line | sed 's/\./\ /1' | sed 's/zone/zonecreate/1' | sed 's/\:/\,"/1' | sed 's/$/"/' done
for line in $(grep -p Zoning config.txt | grep "^cfg.") do echo $line | sed 's/\./\ /1' | sed 's/cfg/cfgcreate/1' | sed 's/\:/\,"/1' | sed 's/$/"/' done
Now you can cfgsave and cfgenable to activate the new configuration.
Scripts to convert WWN with : format
convert_wwn.ksh
#!/bin/ksh93
#set -x
# convert a WWN aabbcc to aa:bb:cc
# or AB.AC.12 to ab:ac:12
convert_wwn ()
{
wwn=$1
wwn_nodot=$(echo $wwn | sed 's/://g;s/\.//g' | tr 'a-z' 'A-Z')
wwn_dot=$(echo $wwn_nodot | sed 's/../&:/g;s/:$//' | tr 'A-Z' 'a-z')
echo $wwn_dot
}
convert_wwn $1
List the full switch configuration, and zoning
swsan1:admin> configshow -all [Configuration upload Information] Configuration Format = 2.0 date = Thu Jan 9 17:31:06 2014 FOS version = v6.4.3.0 Number of LS = 0 [Chassis Configuration Begin] [fcRouting] [Chassis Configuration] SB_License.FTR_10G.slots:0x0 SB_License.FTR_AE.slots:0x0 SB_License.FTR_AFA.slots:0x0 cfgload.secure:0 cfgload.signed:0 diag.postDisable:0 enhancedLicensing.enabled:0 fips.mode:0 fips.promallow:1 fips.selftests:0 http.accesslog: ..... ipfilter.1.type:1 passwdcfg.adminlockout:0 passwdcfg.digits:0 passwdcfg.history:1 passwdcfg.lockoutduration:30 passwdcfg.lockoutthreshold:0 passwdcfg.lowercase:0 passwdcfg.maxpasswordage:0 passwdcfg.minlength:8 passwdcfg.minpasswordage:0 passwdcfg.punctuation:0 passwdcfg.repeat:1 passwdcfg.sequence:1 passwdcfg.status:0 passwdcfg.uppercase:0 passwdcfg.warning:0 .... [Zoning] cfg.cfg_A:z_ds3500_esxtest;z_ds3512_tsmtest2;z_luds3512_arwen_fcs1;z_luds3512_luitesxlab1_p0;z_luds3524_arwen_fcs1;z_luds3524_luitesx1_p0;z_luds3524_luitesx2_p0;z_luds3524_luitesx3_p0;z_luds3524_luitesxlab1_p0;z_luds3524_p550_vios1_fcs0;z_luds3524_p550_vios2_fcs0;z_luds3524_p7vios1_fcs0;z_luds3950_arwen_fcs1;z_luds3950_luitesxlab1_p0;z_luds3950_p7samba_fcs0;z_luds3950_p7vios1;z_ts3310_arwen_fcs1;z_ts3584_tsmtest2;z_v7000U1_esxlab1 zone.z_ds3500_esxtest:esx1_test;esx2_test;luds3512_a_p3;luds3512_b_p3;luds3524_a_p3;luds3524_b_p3;luds3950_a_p2;luds3950_b_p1 zone.z_ds3512_tsmtest2:luds3512_a_p3;luds3512_b_p3;tsmtest2 zone.z_luds3512_luitesxlab1_p0:luds3512_a_p3;luds3512_b_p3;luitesxlab1_p0 zone.z_luds3524_arwen_fcs1:arwen_fcs1;luds3524_a_p3;luds3524_b_p3 .... alias.TS3584_drive_1:50:05:07:63:0f:03:6b:01 alias.TS3584_drive_2:50:05:07:63:0f:03:6b:02 alias.V7000U1P1:50:05:07:68:02:30:c8:e9 alias.p7_samba_fcs0:c0:50:76:06:9f:15:00:04 alias.p7vios1_fcs0:21:00:00:24:ff:3f:a9:de alias.powerha1_fcs0:c0:50:76:06:9f:15:00:16;c0:50:76:06:9f:15:00:17 alias.powerha2_fcs0:c0:50:76:06:9f:15:00:1a;c0:50:76:06:9f:15:00:1b .... defzone:noaccess enable:cfg_A ...
Additional commands
userConfig --add <username> -r <rolename>
username Specifies the account name, which must begin with an alphabetic character. The name can be from 8 to 40 characters long. It is case-sensitive and can contain alphabetic and numeric characters,the period (.) and the underscore ( _ ). It must be different than all other account names on the logical switch. The account name cannot be the same as a role name.
- r rolename Specifies the role: User, SwitchAdmin, ZoneAdmin, FabricAdmin, BasicSwitchAdmin, Operator, or Admin in nonsecure mode; in secure mode you can also use NonfcsAdmin.
- h admindomain_ID Optional: Specifies the home Administrative Domain; if no Administrative Domain is specified, then the lowest numbered Administrative Domain in the list is assigned.
- a admindomain_ID_list Optional: Specifies which Administrative Domains the user may access; if no Administrative Domains are listed, the user is automatically assigned to AD0. Use comma-separated lists, ranges, or both for example -a 0,9,10-15,244.
- d description Optional: Adds a description to the account. The description field can be up to 40 printable ASCII characters long. The following characters are not allowed: asterisk (*), single quotation mark (‘),quotation mark (“), exclamation point (!), semicolon (:smileywink:, and colon (:smileyhappy:.
- x Specifies an expired password that must be changed the first time the user logs in.
userConfig --add toto -r admin -d "Toto Account"
Default login/password
Default password for user:
admin password root fibranne
Viewing a summary switch status report
A summary view provides health status at a high level and includes enough information for you to investigate further if necessary.
To view a summary switch status report, complete the following steps.
switch:admin> mapsdb --show 1 Dashboard Information: ======================= DB start time: Tue Mar 3 22:27:52 2015 Active policy: dflt_aggressive_policy Configured Notifications: RASLOG Fenced Ports : None Decommissioned Ports : None Quarantined Ports : None 2 Switch Health Report: ======================= Current Switch Policy Status: MARGINAL Contributing Factors: --------------------- *BAD_PWR (MARGINAL). *BAD_FAN (MARGINAL). 3.1 Summary Report: =================== Category |Today |Last 7 days | -------------------------------------------------------------------------------- Port Health |No Errors |No Errors | BE Port Health |No Errors |No Errors | Fru Health |Out of operating range |In operating range | Security Violations |No Errors |No Errors | Fabric State Changes |No Errors |No Errors | Switch Resource |In operating range |In operating range | Traffic Performance |In operating range |In operating range | FCIP Health |Not applicable |Not applicable | Fabric Performance Impact|In operating range |In operating range |
Virtual Fabric
Enable virtual fabric feature
fosconfig --enable vf
List virtual fabric FID
lscfg --show
To change context
setcontext fabricID | switchname
Create a new virtual fabric with FID
lscfg --create FID
Assign a port to a virtual fabric (port will be disabled for this operation)
lscfg --config 99 -port 5
To use fosexec, you have to allow it into configure to authorize Remote fosexec feature
Start a command under a specific fabric ID (FID)FID can be all
fosexec --fid FID -cmd "command"
Hard Zoning
While hard zoning, per port is not recommended, it can be useful in specific situation
port are identified by the switchDomain ID (switchshow) and port number Ex: zonecreate hard_zone,"3,0;3,1;3,2"
Release and Reserve a Brocade Port License from CLI
Change activation licensed ports (Port on demand)
sansw1:FID128:admin> switchshow switchName: sansw1 ... Allow XISL Use: ON LS Attributes: [FID: 128, Base Switch: No, Default Switch: Yes, Ficon Switch: No, Address Mode 0] Index Port Address Media Speed State Proto ================================================== 0 0 150000 id N32 No_Light FC (Ports on Demand license not assigned or reserved yet) 1 1 150100 id N32 No_Light FC (Ports on Demand license not assigned or reserved yet) 2 2 150200 id N32 No_Light FC (Ports on Demand license not assigned or reserved yet) 3 3 290300 id N32 No_Light FC 4 4 290400 id N32 No_Light FC
sansw1:FID128:admin> licenseshow xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx: Ports on Demand license Capacity 24
sansw1:FID128:admin> licenseport --show 48 SFP-based ports are available in this switch 16 QSFP-based ports are available in this switch Ports on Demand license is installed No Q-Flex Ports on Demand license is installed Dynamic POD method is in use 48 SFP-based port assignments are provisioned for use in this switch: 24 SFP-based port assignments are provisioned by the base switch allowance 24 SFP-based port assignments are provisioned by the Ports on Demand license 48 SFP-based ports are assigned to the base switch allowance or installed licenses: 24 ports are assigned to the Ports on Demand base switch allowance 24 SFP-based ports are assigned to the Ports on Demand license SFP-based ports assigned to the base switch allowance: 3*, 4*, 5*, 6*, 7*, 8*, 10* 32, 33, 34, 35, 36*, 37*, 38*, 39*, 40, 41 42, 43, 44, 45 SFP-based ports assigned to the Ports on Demand license: 9*, 11*, 12*, 13*, 14*, 15*, 16*, 17*, 18*, 19* 20*, 21*, 22*, 23*, 24*, 25*, 26*, 27*, 28*, 29* 30*, 31*, 46*, 47* SFP-based ports that are not assigned: None 10 license reservations are still available for use by unassigned ports 0, 1, 2 38 license assignments are held by offline ports (indicated by *)
Enable license (reserve) to a port or range 0-2
sansw1:FID128:admin> licenseport --reserve 0-2