Brocade Fabric OS Features and Standards Support Matrix, 8.1.x

Transcription

1 FEATURES AND STANDARDS SUPPORT MATRIX Brocade Fabric OS Features and Standards Support Matrix, 8.1.x Supporting Fabric OS Supporting Fabric OS June 2017

2 2017, Brocade Communications Systems, Inc. All Rights Reserved. Brocade, the B-wing symbol, and MyBrocade are registered trademarks of Brocade Communications Systems, Inc., in the United States and in other countries. Other brands, product names, or service names mentioned of Brocade Communications Systems, Inc. are listed at brocade-legal-intellectual-property/brocade-legal-trademarks.html. Other marks may belong to third parties. tice: This document is for informational purposes only and does not set forth any warranty, expressed or implied, concerning any equipment, equipment feature, or service offered or to be offered by Brocade. Brocade reserves the right to make changes to this document at any time, without notice, and assumes no responsibility for its use. This informational document describes features that may not be currently available. Contact a Brocade sales office for information on feature and product availability. Export of technical data contained in this document may require an export license from the United States government. The authors and Brocade Communications Systems, Inc. assume no liability or responsibility to any person or entity with respect to the accuracy of this document or any loss, cost, liability, or damages arising from the information contained herein or the computer programs that accompany it. The product described by this document may contain open source software covered by the GNU General Public License or other open source license agreements. To find out which open source software is included in Brocade products, view the licensing terms applicable to the open source software, and obtain a copy of the programming source code, please visit

3 Contents Introduction... 5 Document history...5 Objective...5 Product reference...6 Brocade resources...6 Contacting Brocade Technical Support... 7 Brocade customers...7 Brocade OEM customers... 7 Document feedback Security... 9 FCIP - Fibre Channel over IP FCIP Tunnel Management...12 WAN Analysis Tools...13 Management...15 Access Gateway CLI - Command Line Interface Configuration Fundamentals...16 FA-PWWN - Fabric-Assisted Port WWN Fibre Channel Addressing...18 Fibre Channel Services...18 High Availability...18 Inband Management Licensing Management Interfaces...19 Management GUI NPIV - N-Port ID Virtualization NTP - Network Time Protocol SNMP - Simple Network Management Protocol...21 Software Installation and Upgrade...21 Virtual Fabrics...22 Monitoring...23 Analytics Monitoring APM - Advanced Performance Monitoring...23 Bottleneck Detection (legacy) ClearLink Diagnostic Port (D_Port) Fabric Watch Flow Vision Hardware Monitoring...27 MAPS - Monitoring and Alerting Policy Suite...27 Port Mirroring RAS - Reliability, Availability, and Serviceability Syslog Routing

4 Fibre Channel Routing...33 Security...35 AAA - Authentication, Authorization, and Accounting ACLs - Access Control Lists AD - Admin Domains Encryption...36 Fabric Authentication...37 FIPS - Federal Information Processing Standards...37 HTTP/HTTPS LDAP - Lightweight Directory Access Protocol RADIUS SSH - Secure Shell TACACS and TACACS User Accounts and Passwords Zoning...39 Switching...41 FCoE - Fibre Channel over Ethernet Traffic Management Buffer Credit Management Forward Error Correction (FEC)...43 FICON FSPF - Fabric Shortest Path First ISL - Inter-Switch Linking...46 QoS - Quality of Service...46 Rate Limiting and Shaping...46 TIZ - Traffic Isolation Zoning...47 Fabric OS Standards Compliance

5 Introduction Document history... 5 Objective...5 Product reference...6 Brocade resources... 6 Contacting Brocade Technical Support...7 Document feedback... 7 Document history This table records the significant changes made for each revision. Document title Release Summary of changes Publication date Document number Fabric OS Feature Support Matrix Initial release 31 March Fabric OS Feature Support Matrix Added new feature information for the Fabric OS release. Fabric OS Feature Support Matrix Added new features and updated deprecated features information. Fabric OS Features and Standards Support Matrix Fabric OS Features and Standards Support Matrix Fabric OS Features and Standards Support Matrix Fabric OS Features and Standards Support Matrix Changed document title, added information for devices, included new features, and updated deprecated features information Added new features and updated deprecated features information Management GUI on page 20 table added Corrections to the following tables: Buffer Credit Management on page 43 ISL - Inter-Switch Linking on page 46 Licensing on page 19 Two corrections to the following tables: MAPS - Monitoring and Alerting Policy Suite on page 27 Flow Vision on page 26 Changed I/O latency monitoring to IO Insight metrics monitoring. Added footnote stating that IO Insight metrics monitoring is not Brocade G June March September March April June Objective The Brocade Fabric OS Features and Standards Support Matrix provides a consolidated view of all features Brocade Fibre Channel platforms. Use the tables to determine if a feature is your product. For each feature listed, the support tables specify in which Fabric OS version the feature was introduced for the different platforms. If appears in a column of a table, then the feature is not supported for the platforms specified for that column

6 Product reference NOTE For this document, Fabric OS is considered the baseline version, meaning that features listed as being introduced in version were actually introduced in or earlier. When a feature is listed as being introduced in a particular version, the feature continues to be all of the later versions unless specified. Product reference The following table lists Brocade product names by product type and platform. You can use this table to determine if a specific product supports a feature or if a feature is your product. For each feature, this document lists the minimum Fabric OS version required. Specific products within the product family might require a higher minimum version than what is noted in the tables. TABLE 1 Minimum supported Fabric OS version for the Brocade platforms by category Product type platform platform 16-Gbps device Earliest supported OS 32-Gbps device Earliest supported OS Brocade Brocade G Brocade Brocade Brocade G Backbones/ Brocade DCX Brocade X Brocade DCX Brocade X Brocade M N/A Brocade Brocade Brocade Brocade Brocade Brocade Brocade Brocade Brocade Brocade Brocade N/A Brocade resources Visit the Brocade website to locate related documentation for your product and additional Brocade resources. White papers, data sheets, and the most recent versions of Brocade software and hardware manuals are available at Product documentation for all supported releases is available to registered users at MyBrocade. Click the Support tab and select Document Library to access product documentation on MyBrocade or You can locate documentation by product or by operating system. Release notes are bundled with software downloads on MyBrocade. Links to software downloads are available on the MyBrocade landing page and in the Document Library

7 Document feedback Contacting Brocade Technical Support As a Brocade customer, you can contact Brocade Technical Support 24x7 online or by telephone. Brocade OEM customers should contact their OEM/solution provider. Brocade customers For product support information and the latest information on contacting the Technical Assistance Center, go to and select Support. If you have purchased Brocade product support directly from Brocade, use one of the following methods to contact the Brocade Technical Assistance Center 24x7. Online Preferred method of contact for non-urgent issues: Case management through the MyBrocade portal. Quick Access links to Knowledge Base, Community, Document Library, Software Downloads and Licensing tools Telephone Required for Sev 1-Critical and Sev 2-High issues: Continental US: Europe, Middle East, Africa, and Asia Pacific: +800-AT FIBREE ( ) Toll-free numbers are available in many countries. For areas unable to access a toll-free number: Brocade OEM customers If you have purchased Brocade product support from a Brocade OEM/solution provider, contact your OEM/solution provider for all of your product support needs. OEM/solution providers are trained and certified by Brocade to support Brocade products. Brocade provides backline support for issues that cannot be resolved by the OEM/solution provider. Brocade Supplemental Support augments your existing OEM support contract, providing direct access to Brocade expertise. For more information, contact Brocade or your OEM. For questions regarding service levels and response times, contact your OEM/solution provider. Document feedback Quality is our first concern at Brocade, and we have made every effort to ensure the accuracy and completeness of this document. However, if you find an error or an omission, or you think that a topic needs further development, we want to hear from you. You can provide feedback in two ways: Through the online feedback form in the HTML documents posted on By sending your feedback to documentation@brocade.com Provide the publication title, part number, and as much detail as possible, including the topic heading and page number if applicable, as well as your suggestions for improvement

8

9 Security...9 FCIP - Fibre Channel over IP...10 FCIP Tunnel Management WAN Analysis Tools Security NOTE Some of the features listed below are not supported for versions later than Fabric OS Feature Support on VE_Ports 22 through 31 ( FX8-24 devices only) Performance increases with near line-rate throughput IPsec configuration through a policy applied to an FCIP tunnel FCIP/IP encryption Thin provisioning of the disk LUN (Deprecated after 7.4.x) Encrypted data throughput performance monitoring (Deprecated after 7.4.x) Increased path commit limit for CTC configuration (Deprecated after 7.4.x) Expanded device decommissioning of disk LUNs (Deprecated after 7.4.x) Native KMIP client support for Safenet KeySecure key vault server when running KMIP (Deprecated after 7.4.x) KMIP support for Thales e-security Key Authority (TEKA) (Deprecated after 7.4.x) Thin provisioning support for IBM XIV and EMC VMAX (Deprecated after 7.4.x) Support for FIPS-140 level 2 certification (not supported in FIPS mode) (see (see (see (see (see (see (see (see (see (see (see (see (see (see (see (see (see (see (see (see (see (see (see (see (see (see (see (see (FIPS is not supported in for ) Support for VE_Port encryption (IPSec)

10 FCIP - Fibre Channel over IP Feature Setting accepted cryptographic algorithms for the SSH and HTTPS protocols on a FCIP - Fibre Channel over IP NOTE In Fabric OS and later, FCIP is chassis when a Brocade FX8-24 Blade has been installed. In Fabric OS and later, FCIP is chassis when a Brocade SX6 Blade has been installed. Feature (see note before table) (see note before table) Open systems tape pipelining (OSTP) IPv6 support for FCIP ports VEX_Port (virtual EX_Port) support DSCP markings support GigE lossless failover Multi-gigabit circuits Auto-mode option for compression Relaxed sub-net restrictions ESCON tape using Optica Prizm ESCON-to- FICON converter. FCIP enforcement of error detection time-out value (ED_TOV) for FC frames Maximum 40G WAN throughput 20G max with FX8-24 blade Maximum 20G bandwidth on a VE_Port 10G bandwidth on VE_Port with FX8-24 blade Ethernet Jumbo Frame User-specified increase of compression performance on FC data frames before sending through FCIP channels Stream-based flow control to isolate slow devices from affecting performance for emulated devices sharing the same VE_Port (not FX8-24 blade)

11 FCIP - Fibre Channel over IP Feature (see note before table) Out-of-order TCP delivery (not FX8-24 blade) Hot Code Load (HCL) (non-disruptive firmware download) (not FX8-24 blade) FastWrite Traffic Control List (TCL) to manage and route IP flows (not FX8-24 blade) Adaptive Rate Limiting (ARL) LAN-side jumbo frames (not FX8-24 blade) IPv4 support for LAN side (not FX8-24 blade) IPv6 support for LAN side (not FX8-24 blade) DSCP/VLAN L2CoS marking Segment preservation (not FX8-24 blade) Support for untagged and single-tagged packets Multiple LAN ports assigned to the same LAG group (not FX8-24 blade) XISL support Ability to use VE_Ports as XISLs Automatic discovery of IP MTU settings over the WAN (not FX8-24 blade) Hybrid mode with IPExt tunnels Flow Monitor support for VE_Port n-disruptive firmware download for IP extension (see note before table)

12 FCIP Tunnel Management Feature Support for an IKE profile for 192-bit security with algorithms for key generation, encryption, and integrity under IPSec for Suite-B compliance IPSec configuration for preshared or PKI authentication methods, including restarting any IKE sessions that are in an inactive state Support for 16 logical (LS) per X6 Director, including support for SX6 extension blades in a X6 Director to share Ethernet ports in default by VEs from other LSs and to share VE over XISL Support for VM Insight frame header with all emulated FCP I/O sequences on 7840 or SX6 VE ports Support for a 31-bit subnet mask (/31) to be assigned to a point-to-point IP network (see note before table) Monitoring performance on Ethernet ports Defining a compound set of CLI filters for use with extension commands CLI filters for VLAN ID, OperStatus of an extension runnel/circuit, and IP address prefix or mask User-defined app types for TCL definitions, perflow statistics and filtering (see note before table) FCIP Tunnel Management Feature Configuring tunnels for either IPv4 or IPv Configuring tunnels to support VLAN tagging Increase in committed rate of tunnel utilization IPsec support for FCIP tunnels Configurable QoS for FCIP tunnels tperf diagnostic CLI User-defined failover group that includes a subset of the circuits in the FCIP tunnel Failover configuration that allows a mixture of metric 0 and metric 1 circuits for use during metric 0 circuit failure Tunnel configuration for IP extension Spillover circuits

13 WAN Analysis Tools WAN Analysis Tools Feature Tool for testing traffic over a pair of IP addresses to test a WAN path DSCP/VLAN tagging of user-defined WAN tool sessions Automated WAN tool / Service Level Agreement Connecting as initiator or listener Show statistics of both local and remote peers Show configured and negotiated SLA configuration for the session in the detailed command output Show the packet drop percentage of the last 3- second sample period in the detailed command output

14

15 Management Access Gateway...15 CLI - Command Line Interface...16 Configuration Fundamentals FA-PWWN - Fabric-Assisted Port WWN...17 Fibre Channel Addressing Fibre Channel Services High Availability Inband Management...19 Licensing...19 Management Interfaces Management GUI...20 NPIV - N-Port ID Virtualization...20 NTP - Network Time Protocol...20 SNMP - Simple Network Management Protocol Software Installation and Upgrade...21 Virtual Fabrics Access Gateway Feature Automatic port configuration policy Port grouping and preferred N_Port failover policy Multiple fabric support AG trunking Advanced Device Security Policy bit routing Access Gateway Cascading Mapping of individual NPIV WWN to N_Port (device-based mappint) Balancing WWN logins from a single NPIV-port across multiple N_Ports Configuring NPIV login limit for individual ports Detection of unreliable N_Port links APM end-to-end monitoring support (not supported in Fabric OS 7.4 and later) APM frame monitoring support (not supported in Fabric OS 7.4 and later) RADIUS/LDAP support D_Port support between 16G AG and 16G or between two 16G AGs

16 CLI - Command Line Interface Feature FEC support for 16G FC platforms configured in AG Buffer credit loss recovery on AG Authentication between an AG and a or HBA Assessment of SFP and cable health Detection and prevention of duplicate PWWNs at login Dynamic D_Port on links connecting to HBAs Fabric Device Management Interface (FDMI) data access on AG Remote execution of commands on an AG from a domain in the attached fabric Flow Mirror on AG: LFM and CFM CLI - Command Line Interface Feature Director Director [introduced] Starting name with a number Configuration Fundamentals Feature Port bring up Port beaconing Telnet Longer port-name support portautodisable E_Port authentication Boot PROM password Ethernet interface Dynamic definition of user roles Assign names to logical fabrics F_Port static mapping

17 FA-PWWN - Fabric-Assisted Port WWN Feature 10G FC Capability Support for DCX 8510 chassis in full mesh configuration using optical ICLs Support for ICL connectivity with DCX 8510 chassis in a core-edge topology Assign individual ports of an optical ICL to logical Replace a zone member (WWN/D,I) with another member Specify a collection of zone aliases as input instead of a single alias member List details and/or differences between the transaction buffer and the committed/saved zone database Alert users during configuration edits to reduce risk of having mismatched effective zone configurations in the same fabric when merging a into a fabric Alert users when multiple users attempt to simultaneously configure or reconfigure zone sets in more than one of a fabric Display accurate path information concerning FCR configurations Port numbers in hexidecimal format Set a to disable state and not actually disable the until it is subsequently disabled or it reboots (persistent disable) Fabric alias names for edge fabric IDs Extended range for front domain IDs and translate domain IDs Dynamic port names Support de-bouncing of loss of signal for fixedspeed and auto-negotiate ports Port peer beaconing Persistent configuration of slots Support for QSFP connections to ICL ports FA-PWWN - Fabric-Assisted Port WWN Feature Dynamic Fabric Provision - Fabric-Assigned WWN a

18 Fibre Channel Addressing Feature Detection and resolution of duplicate WWNs a Fibre Channel Addressing Feature [introduced] Fibre Channel Services Feature Management Server Name Server Topology discovery Management server support of Get Fabric Object (GFO) command of the FC-GS-7s standand Name server device display output includes the FC-4 type of Application Services, NVMe, and various FICON (FC-SB) values High Availability Feature [introduced] Disruptive upgrade of DCX to DCX

19 Management Interfaces Inband Management Feature [introduced] Licensing Feature Fabric (E_Port) license Extended Fabric license Trunking license GbE FCIP license Fabric Vision license Enterprise ICL license support on DCX Advanced license Advanced FICON Acceleration license WAN Rate Upgrade 1 license WAN Rate Upgrade 2 license Fabric Watch license Performance Monitor license FICON_CUP license (not 6520) (G620 only) First Ports on Demand license Second Ports on Demand license Inter Chassis Link (ICL) license Integrated Routing license (not G610) Integrated Routing Ports on Demand license Ports on Demand license Management Interfaces Feature Management interface ARP

20 Management GUI Feature Management interface DCHPv Management interface DCHPv Management interface DNS Management interface IP addressing Management interface IP6 addressing Management interface IPSec Management GUI Feature Backbones Web Tools NPIV - N-Port ID Virtualization Feature [introduced] NTP - Network Time Protocol Feature (Backbones [introduced] Server configuration distribution to Access Gateway

21 Software Installation and Upgrade SNMP - Simple Network Management Protocol Feature SNMPv SNMPv MIBs Log messages for SNMPv3 authentication SNMPv3 individual inform tag Disable SNMP write access Online/offline status of port reported independently from the value of ifadminstatus SCP/SFTP protocol for MIB objects used to initiate firmware download through SNMP (ly in 6547, 5430, and 5431 ) Encryption for SNMPv3 user authentication and privacy passwords Software Installation and Upgrade Feature SFTP support SFTP support for downloading firmware and uploading and downloading configurations Hot Code Load (HCL) (non-disruptive firmware download) History tracking of firmware versions installed on each Multiple sites for FCIP Hot Code Load (HCL) Staged firmware download Firmware clean installation Firmware auto-sync on a standby CP with a different version than active CP Firmware integrity check Preservation of port2area and area2port mappings during configuration upload and download

22 Virtual Fabrics Virtual Fabrics Feature Dynamic Area Addressing support for the default Use of name to set the logical context when ing context between logical within a physical Create a new logical with LISL disabled

23 Monitoring Analytics Monitoring...23 APM - Advanced Performance Monitoring Bottleneck Detection (legacy)...24 ClearLink Diagnostic Port (D_Port)...24 Fabric Watch...25 Flow Vision...26 Hardware Monitoring...27 MAPS - Monitoring and Alerting Policy Suite...27 Port Mirroring...29 RAS - Reliability, Availability, and Serviceability...29 Syslog...31 Analytics Monitoring Feature Monitoring by Brocade Analytics Monitoring Platform APM - Advanced Performance Monitoring NOTE Advanced Performance Monitoring (APM) is not supported for Fabric OS and later versions. Feature Top Talkers monitoring Trunk monitoring Enhanced SFP monitoring with configurable thresholds Coexistence of Top Talkers and APM E_Port end-to-end monitor support E_Port Top Talkers support

24 Bottleneck Detection (legacy) Bottleneck Detection (legacy) NOTE Bottleneck detection (legacy) technology is not supported in Fabric OS and later versions. Feature (See (See Support for congestion detection on E_Ports, EX_Ports, and F_Ports Support for bottleneck detection alerts through SNMP traps and RASlogs Support for -wide enablement of both latency and congestion bottleneck monitoring Monitoring of credit lost condition on 4G and 8G E_Ports Decoupling of latency and congestion alerts Options/policies to fault the core blade or edge blade when the link reset threshold of a backend port is exceeded ClearLink Diagnostic Port (D_Port) NOTE ClearLink Diagnostic Port (D_Port) is ISLs between 16G Fibre Channel platforms using Brocade-branded 16G SFP+ devices. Feature Gen6 [introduced] ClearLink Diagnostic Port (D_Port) on ISLs Support between Brocade 16G Fabric Adapter and Brocade 16G FC D_Port link saturation capability D_Port on optical ICLs User-specified number of frames, frame size, test duration, and other test options Support on 16G platforms configured as Access Gateways (AGs) D-Port between AG enabled on a 16G FC platform and a 16G FC Dynamic D_Port support between Brocade 16G HBA and Brocade 16G Clearlink Diagnostic Port (D_Port) capability with 8G Long Wave Length (LWL) and Extended Long Wave Length (ELWL) SFPs

25 Fabric Watch Feature D_Port integration with MAPS Dynamic D_Port and On-demand D_port on ISLs D_Port provision list configured by CLI command D_Port test results identify loopback connection type or remote port index D_Port test on the FC-compliant QSFPs ClearLink Diagnostic Port (D_Port) on all FC ports connected to AG Link power (db) loss calculation Dynamic D_Port and On-demand D_Port with DWDM CLI command hierarchical help display Gen6 Fabric Watch NOTE The Fabric Watch technology is not supported for Fabric OS and later versions. Feature Port Fencing support (see Switch Status Policy enhanced to monitor ports that are segmented or disabled (see Multiple recipients of alerts (see Advanced SFP monitoring based on SFP type: 16G SFP+, 10G SFP+, 4 x 16G QSFP (see SFP monitored as a field-replaceable unit (FRU) (see Ability to pause and continue monitoring (see Packet loss area of VE port class is configurable to a real number up to two decimal places (see Voltage, temperature, and power-on hours parameters of SFPs are monitored on offline ports (see

26 Flow Vision Flow Vision Feature Flow Generator: Generating test traffic Pre-testing of the SAN infrastructure Configuring a 16G FC-capable port as a simulated device Emulating a 16G SAN Flow Mirror: Mirroring of application flows ndisruptive copying of application flows Flow Monitor: Monitoring application flows, providing statistics Monitoring of frame types at a port Integration with MAPS Flow monitoring on E_Ports and EX_Ports Flow monitoring for static and learning flows on XISL ports and backbone E_Ports Local Flow Mirror feature mirrors application flows to a mirror port on the same local where the flows are defined Pre-defined flow to generate test traffic from every SIM port in a to other SIM ports Creating without activating a duplicate flow definition Full Flow Vision capabilities on all FC ports Remote Flow Mirror feature mirrors remote flows All F_Port flow monitoring Identify all devices in a flow Fabric flow dashboard Simultaneous remote flow mirroring of VTAP frames belonging to multiple VFs IO Insight metrics monitoring Adding SRR frame used for flow monitoring Virtual E_Port monitoring t Brocade G

27 MAPS - Monitoring and Alerting Policy Suite Feature Flow Monitor support for VM Insight to identify, monitor, and troubleshoot VM flows Flow Mirror support on in Access Gateway mode Remote flow mirroring support in-flight encryption or compression when it co-exists on the same ASIC chip with vtap Exchanging SIM port parameters across FCR in edge-to-edge topology only, allowing Flow Generator to generate flow traffic in FCR edgeto-edge topologies Hardware Monitoring Feature Equipment status Power-on self-test (POST) Real-time power monitoring Back-end link failure: re-initializing link and faulting blade only if link fails Read Diagnostics parameter (RDP) RDP buffer-to-buffer credit descriptor for unsolicited request RDP optical element data descriptor for unsolicited request RDP optical product data descriptor for unsolicited request Sending requests through RLS when RDP is not supported by end devices RDP request support for E-ports in FICON environment MAPS - Monitoring and Alerting Policy Suite Feature Policy-based monitoring CLI dashboard Monitor FCIP statistics

28 MAPS - Monitoring and Alerting Policy Suite Feature Proactive flow monitoring using MAPS Automated migration of existing Fabric Watch configuration to MAPS Bottleneck detection integration with MAPS dashboard Monitor Fabric Performance Impact due to bottleneck conditions (not supported after 7.3.0) (not supported after 7.3.0) (not supported after 7.3.0) (not supported after 7.3.0) Monitor fabric scalability limits Monitor Ethernet management ports Monitor Flow Vision learning flows Dynamic groups Port group augmentation MAPS for FCIP QoS, tunnels, and circuits Basic monitoring without Fabric Vision license Monitoring of NPIV device login limits Monitoring backend ports errors Monitoring FCIP circuit QoS parameters at circuit level Monitoring FCIP circuit RTT and jitter FPI latency counter monitoring and notification when latency conditions are cleared Slow drain device quarantine action for Fabric Performance Impact monitoring Port toggle action for Fabric Performance Impact monitoring FICON notification action Alert quiet time support Backend port monitoring Quiet time support for action Quiet time support for RASLog action Fenced circuits in dashboard GE_Port monitoring Security certificate monitoring Quiet time support for SNMP action MAPS IPEXT monitoring Tunnel to tunnel QoS on all FCIP platforms IO Insight metrics monitoring Automation of MAPS policy creation t Brocade G

29 RAS - Reliability, Availability, and Serviceability Feature Monitoring of fan air-flow direction Monitoring of zoned device ratio and oversubscription of bandwidth VM Insight flow monitoring to identify, monitor, and troubleshoot VM flows Rule-on-Rule (RoR) rules that monitor base MAPS rules Configurable MAPS alert severity for alert messages in user-defined rules Ability to clone in one step all the rules associated with a logical group Port TX, RX, and UTIL statistics supported with timebase of minute Monitoring of ISL in-flight encryption feature of X SNMP traps for MAPS quiet time expiration Ability to uninstall vtap with a MAPS action FPI monitoring: Ability to automatically move a previously quarantined slow-draining device out of quarantine, based on a user-defined timeout period Port Mirroring Feature [introduced] (not supported after 7.4.1) (not supported after 7.4.1) (not supported after 7.3.0) (not supported after 7.4.1) RAS - Reliability, Availability, and Serviceability Feature Audit Log Automatic trace dump transfers Logging Port log supportshow

30 RAS - Reliability, Availability, and Serviceability Feature Frame monitoring Super ping Rolling Reboot Detection (RRD) Spinfab diagnostics ability to test ISLs at higher link utilization by using all buffers available at a port Fabric OS version added to Auditlog messages DCB/CEE configuration events included in Auditlog Frame Viewer SuperPing support to traverse all possible FCIP links based on FCIP routing SuperPing support to display all possible VE and GE links in path View statistics for a specific time period for tunnels, circuits, and TCP connections SFP monitoring shows when a new SFP is plugged in SFP monitoring provides a time stamp for SFP polling Suppress a RASLog message Change RASLog message default severity View a RASLog message description on a console Filter RASLog messages based on slot, severity, and other options Persistent history across reboots and firmware downloads CLI history enhancement to save additional information during command execution on a Inclusion to Auditlog of each command executed on the from a non-root account Display the time when port statistics were last cleared Updating port counter values when ports come online Violation handling for trunk ports Automatic sync of firmware on a CP Detect and disallow rolling reboot in disabled Fabric OS state CLI command to clear statistics counters and logs Integrity checking of WWN cards Frame Viewer support for identifying, monitoring, and troubleshooting VM flows

31 Syslog Feature Additional audit log messages for operational state and configuration changes of, blades, slots, and ports when initiated by administrators. Output of portbuffershow command added to supportsave capture for troubleshooting RASLog message sent when multiple RDY/ Frame Loss is detected High-voltage AC/DC power supply support Syslog Feature [introduced] Audit log for Class 3 discard frames Importing/exporting syslog server certificate to support syslog over TLS

32

33 Routing Fibre Channel Routing...33 Fibre Channel Routing Feature M-EOS Native Fabric Mode support (interopmode 2) M-EOS Open Fabric Mode support (interopmode 3) SANtegrity Fabric Binding in both Interopmode 2 and Interopmode 3 including FCR support VCS/VDX6730 to FC SAN connectivity (interopmode 5) FC-FC routing (not supported after 7.1.0) (not supported after 7.1.0) (not supported after 7.1.0) (not supported after 7.1.0) (not supported after 7.1.0) (not supported after 7.1.0) (not supported after 7.1.0) (not supported after 7.1.0) (not supported after 7.1.0) (G620 only) (not the Brocade 6505) (G620 only) Integrated Routing (G620 only) Frame order delivery (G620 only) Frame redirection (G620 only) Option to specify In-Order Delivery(IOD) with port-based and exchange-based routing policies Display accurate path information concerning FCR configurations Routing based on lowest cost links in the FCR fabric between FCR edge fabrics through an FCR backbone fabric Display Fabric IDs for devices that exist in a fabric and devices imported to fabric (G620 only) (G620 only) (G620 only) (G620 only) E_Port balance priority option (G620 only) DLS support on embedded portchannelshow CLI Command (G620 only) Support of exchange FC-4 type and SIM port capabilities for proxy devices across FCR with Name Server (G620 only)

34

35 Security AAA - Authentication, Authorization, and Accounting ACLs - Access Control Lists...35 AD - Admin Domains...35 Encryption...36 Fabric Authentication FIPS - Federal Information Processing Standards...37 HTTP/HTTPS...37 LDAP - Lightweight Directory Access Protocol...37 RADIUS...38 SSH - Secure Shell...38 TACACS and TACACS User Accounts and Passwords...39 Zoning AAA - Authentication, Authorization, and Accounting Feature E_Port authentication FCAP authentication using Brocade-issued certificates FCAP authentication using third-party-issued certificates ACLs - Access Control Lists Feature 1 MB security database that allows for ACL security settings for large environments AD - Admin Domains NOTE Admin Domain support is deprecated in Version and later

36 Encryption Feature [introduced] (see Encryption NOTE Some of the features listed below are not supported for versions later than Fabric OS Feature Backbones () Data-at-rest encryption Concurrent disk and tape encryption support on the same encryption engine (see Disk device decommissioning support (see Key vault diagnostics support (see Redundant key ID metadata option in data replication environments (see Redirection zone creation failure without L2 zones (see (see (see (see In-flight encryption In-flight frames encryption/decryption between In-flight frames compression/ decompression between In-flight encryption/decryption with port decommissioning In-flight compression/decompression with port decommissioning In-flight encryption/decryption on EX_Ports In-flight compression/decompression on EX_Ports In-flight encryption/decryption with FCAP-generated keys (not Brocade 6505) (not Brocade 6505) (FC32-48 only) (not G610) (FC32-48 only) (not G610) (FC32-48 only) (not G610)

37 LDAP - Lightweight Directory Access Protocol Feature Display compression ratio on a compression-enabled port Display port speed of encryption- or compression-enabled ports SHA-256 support for FCAP and DH- CHAP Backbones () (not G610) (not G610) (FC32-48 only) Fabric Authentication Feature [introduced] FIPS - Federal Information Processing Standards Feature FIPS compliant algorithms HTTP/HTTPS Feature [introduced] LDAP - Lightweight Directory Access Protocol Feature Active Directory support

38 RADIUS Feature Mapping of Active Directory server roles to roles IPv6 support for LDAP authentication OpenLDAP support Password expiration policy configurable per user LDAP configuration support to assign a list of vendor-specific attributes per LDAP server group that can be inherited by user accounts RADIUS Feature Obfuscation of RADIUS-shared secrets so they are not stored as plain text SSH - Secure Shell Feature Inbound and outbound SSH SSH public key authentication support for multiple users Challenge-response authentication TACACS and TACACS+ Feature [introduced] Log in to Fabric OS with user accounts configured in the TACACS+ server TACACS+ server configuration via CLI

39 Zoning Feature Encryption option to store the shared secret for TACACS+ configuration User Accounts and Passwords Feature RBAC - Role-based access control Configurable banner display before user login Distribution of user account and password database to Access Gateway Allow changing root password without prompting for an old password Zoning Feature Broadcast zones Allow a with default zone " no access" to merge with a fabric Replace a zone member (WWN/D,I) with another member Specify a collection of zone aliases as input instead of a single alias member List details/differences between the transaction buffer and the committed/saved zone database Alert users during configuration edits to reduce risk of having mismatched effective zone configurations in the same fabric when merging a into a fabric Alert users when multiple users attempt to simultaneously configure or reconfigure zone sets in more than one of a fabric Display zoned device data Display a remote device's details for a particular domain in the fabric Display the zone that WWNs and PIDs belong to

40 Zoning Feature Display device login details Disallow zone merge with mismatching default zone access mode Peer zoning Target-driven zoning Location-embedded LSAN zone Peer zoning in LSAN zones Alias support in peer zoning Special characters in zone object names, such as carat (^), dollar sign ($), and hyphen (-). Allow zone object names to start with numeric character Zone database chassis size enforcements for fixed-port and directors in VF mode

41 Switching FCoE - Fibre Channel over Ethernet...41 FCoE - Fibre Channel over Ethernet NOTE Fibre Channel over Ethernet (FCoE) is not supported in Fabric OS 8.0.0, Fabric OS 8.0.1, or Fabric OS Feature (see End-to-end FCoE Enhanced FCoE provisioning VCS/VDX6730 to FC SAN connectivity using FCoE

42

43 Traffic Management Buffer Credit Management...43 Forward Error Correction (FEC) FICON...44 FSPF - Fabric Shortest Path First...45 ISL - Inter-Switch Linking QoS - Quality of Service Rate Limiting and Shaping TIZ - Traffic Isolation Zoning...47 Buffer Credit Management Feature Detection and auto-recovery of buffer credits on 16G-capable ISLs Buffer-to-buffer credits Buffer credit recovery Credit loss detection Credit recovery on EX_Ports Credit recovery on F_Ports to Brocade HBA Credit recovery alert to the user-level RASLog User-specified buffer credits Display an address as user-bound when user has bound it to a port Configuring back-end link credit loss recovery options User-provided reason string when disabling a port Indications when maximum paths (16) to a remote domain are exceeded Link reset on loss of sync events BufOpMode Forward Error Correction (FEC) Feature [introduced]

44 FICON Feature Extended support for links: Between 16G and 16G Access Gateway Between 16G and Brocade 16G HBA Between a pair of Access Gateway devices Between 16G Access Gateway and Brocade 16G HBA Enable or disable FEC for a long-distance link FEC counters for admin user (On devices, only on platforms that support 16G.) FEC capability during speed negotiation in Transmitter Training Signal FICON Feature Cascaded FICON FICON CUP FICON CUP Cascading FICON emulation (t Brocade 6505 and Brocade 6520) (t Brocade 6505 and Brocade 6520) (t Brocade 6505 and Brocade 6520) (t Brocade 6505 and Brocade 6520)