Fibre Channel Specialist Lab

Transcription

1 Fibre Channel Specialist Lab Enterprise Fabric Suite Operation Objective: This lab will familiarize the learner with the Enterprise Fabric Suite Graphical User Interface for SANbox switches. Lab Time Allocated: 60 minutes. Copyright 2009 QLogic Corporation All Rights Reserved

2 Table of Contents 1.0 Enterprise Fabric Suite 2007 (EFS) Installing EFS Starting EFS Similarities with QuickTools EFS-Only Features Move Port License Topology View Stack View View Files Nicknames Port Features I/O Stream Guard Port Threshold Alarms Port Binding Port Upgrades Using Performance View Auto Trunking Setup Failover Operation System Services...16 Appendix A: Tech Tips...17 March Copyright 2009 QLogic Corporation

3 1.0 Enterprise Fabric Suite 2007 (EFS) 1.1 Installing EFS The installation file is already on your lab workstation at c:\qlogic\efs\ 1. Open the installation file. InstallAnywhere will load. 2. Click Next on the installation screen. 3. The default install folder for Windows will be the C:\Porgram Files\QLogic_Corporation\Enterprise_Fabric_Suite_2007 Click Next Note: The HBA applications are installed in c:\program Files\QLogic Corporation\ 4. Enter the Serial number from the CD. For training purposes enter 0640A We will not be using a License Key, as a 30-day trial will be sufficient for training purposes. Click Next 6. In the Choose Shortcut Folder dialog box, select On the Desktop and Click Next. 7. Click Install. When the installation is complete, Click Done. 8. Two new icons are on your lab desktop (Shown at right). a. Enterprise_Fabric_Suite_2007 b. Performance_View 1.2 Starting EFS 9. Double-click the EFS icon on the lab desktop 10. Click OK on the License Key expiration. a. If this is the initial start of EFS, you will see an Initial Start Dialog. If this appears, select Open existing fabric and click Proceed. b. If a default view file is saved, you will have a choice of loading the view file. If you choose, Continue Without Loading, you will have to click the Add button on the Toolbar. 11. Add the following information: a. Fabric Name: Name of your choosing b. Entry Switch: IPv4 Address of Switch_A in your assigned lab area c. Login Name: admin d. Password: password Note: If a Fabric Name is not used, the Name will default to the IP Address. March Copyright 2009 QLogic Corporation

4 12. Click Add Fabric 13. In the Non secure connection check, check the Don t ask me again box and click Yes. Tech Tip 1 : This is letting you know that SSL is NOT enabled on this switch. SSL is a feature that is part of the security license for the SANbox stackable switches. 14. Click OK on the Password change required message. 1.3 Similarities with QuickTools 15. In the Fabric Tree, the cloud icon should be selected by default. This is the Topology View, we will show these features shortly. Expand the tree and select the Switch. 16. Take a quick tour (1-2 minutes) around the menu and tabs. You should find few differences between the Faceplate Display and QuickTools. To verify the operations are similar, perform the following tasks: a. Change the Port Type on Port 2 to FL b. Open up the Network Properties dialog box c. Open the Switch Properties dialog box d. Go into User Accounts and remove the account created with QuickTools. The few differences you may have noticed on the Faceplate Display are due to the features available through EFS. We will be exploring these options throughout the class. March Copyright 2009 QLogic Corporation

5 2.0 EFS-Only Features 2.1 Move Port License This feature is only available with EFS. You will be moving a single port license from Port 7 to Port 19. This will activate the 10-Gbps port that is connected to Switch_B in the training SAN. 1. If not there, navigate to the Switch_A Faceplate Display 2. From the menu, select View View Port States 3. What ports are not licensed? These would be the ports with an X in them. 4. From the menu, select Port Move Port License (This is also available by right-clicking the faceplate) 5. In the Move Port License dialog box select the following: a. Source Port: Port 7 b. Destination Port: Port Click Move. Then OK. Then Close. 7. What change did you see on the Faceplate? After a short time, Port 19 will be green. 8. What change do you see in the Fabric Tree? Another switch is in the tree, along with a Stack. If you are not seeing these changes, notify your instructor. Tech Tip 2 : Reminder: On the SANbox 580x switches, the stacking ports are always on. 2.2 Topology View The default view in EFS is the Topology view, which is not available in QuickTools. This will show the physical layout of all the switches in the fabric. 9. Click on the Cloud in the Fabric Tree. 10. You should see the switches stacked in the Topology Display. (You may have to use the scroll to locate the stack. March Copyright 2009 QLogic Corporation

6 There are 4 tabs at the bottom of the Topology View. 11. The Devices tab in the Topology View will display all the devices in the fabric. 12. The Active Zoneset tab will display any Active Zoneset information for the Fabric. Note: This tab is on the Faceplate display of QuickTools. 13. The Switch tab shows the information for all of the switches in the fabric 14. The Link tab will display ISL (Inter-Switch Link) information. 2.3 Stack View The Stack View is also not available in QuickTools. The Stack is created automatically when 2 QLogic stackable switches are connected together with a 10 Gig link. The Stack allows you to configure and manage many parameters as if the stack were a single switch. Sticky Stack Feature When the switches auto-stack, EFS may not display the switches the way they are physically located. In our lab SAN, Switch_A should be on top. 15. In the Fabric Tree, click on the Stack. 16. The Stack Display shows both switches. Click on the bottom switch of the stack. 17. From the menu, select Stack Move Switch Up 18. Did the Stack Name change in the Fabric Tree? The stack name is taken from the top switch. 19. Move the switches so that Switch_A is at the top of the stack. Stack Menu 20. With the Stack selected in the Fabric Tree, click on the Stack menu 21. See if you can figure out how to accomplish the following tasks using the stack. You do not need to perform the tasks. a. Load Firmware: Do not actually load new firmware. b. User Accounts c. Set Date/Time d. Syslog configuration If you have questions about the Stack Menu, ask the instructor. March Copyright 2009 QLogic Corporation

7 2.4 View Files 22. From any view menu, select File Save View As 23. Enter a file name with today s date in it. You may optionally enter a file password. 24. Click Browse 25. Where is this file being saved? This should be the same location you set in the QuickTools preferences. 26. Entering a File Password is optional. Click Ok. 27. Close EFS. On the Save Default Fabric View File, Select Save View File. What did you just do? You just saved 2 different View Files with the same information. 28. Open EFS. During the process you will see this dialog box: 29. Click Load View File. This will load the Default Fabric View File, fc_view.dft that was created when you closed the application. 30. Did you have to Add a Fabric? The View File will automatically connect to the entry switch and the rest of the connections will be discovered. 31. From the menu, select Fabric Remove Fabric. 32. Do you have a fabric shown in EFS? The fabric has been removed from EFS. 33. From the menu, select File Open View File 34. Click Browse and select the file that you created with today s date in the filename. Enter the filename password if used. Click Open. 35. Verify the correct file is shown and click Ok. 36. Did the fabric appear? March Copyright 2009 QLogic Corporation

8 Tech Tip 3 : View Files can be used by administrators to easily to connect to the fabrics they are managing. Multiple fabrics can be managed with EFS and the View Files. 2.5 Nicknames Nicknames are used to replace the WWN in EFS and QuickTools. The nicknames are stored on the switch and can be utilized by any management tool that recognizes them. 1. In the Fabric Tree, click on the cloud. 2. From the menu, select Fabric Nicknames 3. Locate the WWN for the HBA connected to Switch_A, Port Double-click the Nicknames field for this WWN. 5. Enter a name for the HBA. Suggested: HBA_A0 6. Enter Nicknames for some (but not all) of the other devices shown. See sample below: Tech Tip 4 : When entering Nicknames, the Close button will close the dialog box immediately. It does not save the changes. 7. Click Apply, then Save to save the changes. 8. Click Close, then Close again to return to EFS. March Copyright 2009 QLogic Corporation

9 3.0 Port Features 3.1 I/O Stream Guard No License Key required. Available in QuickTools SANbox 1000, 5000, 9000 I/O Stream Guard suppresses RSCN (Request for State Change Notification) messages from being propagated to the fabric. This feature should set on Initiator ports in a streaming data application such as Tape Backup or Video Editing. 1. Navigate to the Faceplate Display of Switch_A using EFS and click Port 0 2. Click on the Port Info tab at the bottom of the screen. 3. Click on the Advanced icon. 4. What is the Configured I/O Stream Guard setting? I/O Stream Guard defaults to Auto on the SANbox switches. 5. What is the Oper I/O Stream Guard setting? On initiator ports, I/O Stream Guard is Enabled. 6. To verify, press the <ctrl> button and click Port 6. Compare the settings between the Initiator and Target ports. 7. What is the Oper I/O Stream Guard setting on Port 6? On target ports, I/O Stream Guard is Disabled automatically. 8. To change this setting, select from the menu, Port Port Properties 9. In the I/O Stream Guard column, select Auto, Enable, or Disable. NEVER use Enable on Target ports!!! March Copyright 2009 QLogic Corporation

10 3.2 Port Threshold Alarms EFS License Required. Not available with QuickTools. SANbox 5000, 9000 Port Threshold Alarms can be set to monitor 6 different alarm types. For our example, we will set the alarms for CRC Errors. 10. Verify that only Port 0 is selected. 11. On the Faceplate Display menu, select Switch Port Threshold Alarm Configuration 12. This dialog box (below) appears. 13. If you want all 6 alarms to be configured, check the top box. 14. You can enable individual alarms and set parameters for each using the Rising Trigger, Falling Trigger and Sample Window. Explanation: In this example, the CRC Errors Monitoring is Enabled. If 25 or more errors (rising trigger) are detected on any port within a 10 second (sample) window, an alarm will be generated. If in the next 10 second window, there are 1 or less CRC errors, then the alarm will be cleared. If an alarm is generated for 3 consecutive sample periods, then the switch will Down the port and manual intervention will be required. Tech Tip 5 : Down vs. Offline -- A port in the Down state is not offline. An offline port will still utilize the SFP laser (or LED). A port in the Down state will not allow the SFP to utilize the light source. March Copyright 2009 QLogic Corporation

11 3.3 Port Binding EFS License Required Not available with QuickTools. SANbox 5000, 9000 Port Binding allows you to configure which devices (by WWN) can connect to a specific port. This can be configured either before or after the device is connected to the port. 15. On the Faceplate Display, select Port From the menu, select Port Port Binding 17. Click the Port Binding checkbox to enable this feature for this port. 18. Use the WWN: drop-down box to answer the next question. 19. How many devices are currently connected to Port 6? You should see either 3 or 4 devices listed in the drop-down. 20. Select 1 of the devices and click Add. You now have at least 1 device that is NOT bound to Port What do you think will happen when you click OK? 22. Click OK and clear the confirmation dialog box. 23. Did you receive a Port(s) Isolated message? 24. Click on the Switch tab at the bottom of the screen. Make sure the Summary icon is selected. 25. What is the Reason for Status? 26. In the Toolbar, click Events. This shortcut is only available in EFS. 27. In the Event Browser, look for the Alarm messages. You can sort them by clicking in the upper left box. 28. Did you find messages from Port 6? 29. Click on the Devices tab. 30. How many target devices are shown?. 31. Disable Port Binding on Port 6. Select Port 6 From the menu, select Port Port Binding Uncheck the Port Binding entry at the top of the dialog box. Click OK and OK again March Copyright 2009 QLogic Corporation

12 Did the targets return to the Devices tab? You should have noticed that all targets are now shown with the Devices tab checked and the Port(s) Isolated message is not displayed. 32. Tech Tip 6 : Port Binding can be used to create more security in the data center. It will only allow the WWN configured on that port to log in to the fabric. Before continuing We will now reset our assigned lab area so that our SAN has a single switch. Later in the lab, we will perform a port upgrade to regain the stack. 1. Add your assigned fabric to EFS, either by using the Add a Fabric dialog or a View File. Moving the Port License 2. On Switch_A, take port 19 offline. Licenses for Online ports cannot be moved. a. Right-click on Port 19 b. Select Port Properties c. In the Port States drop-down, select Offline d. Click OK e. Click OK again to continue f. Click OK on the confirmation 3. Move the Port License from Port 19 to Port 7 a. From the Faceplate Display menu, select Port Move Port License b. Enter the Source Port: Port 19 c. Enter the Destination Port: Port 7 d. Click Move. Then OK. Then Close 4. Rediscover the Fabric a. Click on the cloud in the Fabric Tree b. From the Topology View menu, select Fabric Rediscover Fabric 5. Return to the Faceplate and configure Port 19, online EFS should now show a single switch in your Fabric March Copyright 2009 QLogic Corporation

13 3.4 Port Upgrades Feature Key Required License to 20 ports. Available with QuickTools. SANbox 5000 In this part of the lab, you will license your switch for additional ports. This is not disruptive to the fabric. You may want to run IOmeter and Performance View (next section) during this lab operation to prove this. There should be a text file on your workstation that contains the key needed for this lab. If you are unable to locate it, inform your instructor. 33. From the Faceplate Display of the switch, select the Switch tab, at the bottom of the window. Verify the Summary icon is selected. 34. What is the Serial Number of Switch_A? 35. From the menu, select Switch Features In the Features licenses window, click the Add button. 37. Using the licensekeys.txt file, find the key for your switch. 38. In the Add License Key window, type in (or cut and paste) the License Key. 39. To verify the key you entered is valid, click the Get Description button. This should display the type of key in the Description box. 40. Verify that it is, indeed, the type of key that you wanted to add. (Upgrade to 20 ports). 41. If correct, click the Add Key button. 42. Once finished, are there now 20 ports available on this switch? This may best be seen using the View Port States. 43. Has Switch_B been added to the Fabric Tree? March Copyright 2009 QLogic Corporation

14 3.5 Using Performance View 1. There are two methods of starting Performance View a. From the Desktop, double-click the shortcut b. From EFS, click the cloud in the Fabric Tree and select from the menu, Fabric Start Performance View 2. Expand the tree and click on Ports 9, 10 & 19 on both Switch_A & Switch_B. Port graphs will appear. 3. Take a few moments to discover what all can be done with Performance View 4. When you are ready, continue to the next section. March Copyright 2009 QLogic Corporation

15 4.0 Auto Trunking No License Key required. Not configurable SANbox 5000, Setup This requires that the license keys have been added successfully from the earlier tasks. 1. If it is not already, open Performance View. Select Ports 9, 10, and 19 from Switch_A. These are the ISL ports. 2. You should see traffic running on Port 19 only. 3. Approximately how much bandwidth is being used on Port 19? 4.2 Failover Operation 4. To simulate a port issue, take Port 19 of Switch_A offline. 5. Check Performance View. 6. Is the traffic still running? 7. Is the traffic on each port about ½ of what was recorded in step 3 above? You should notice that as the traffic stopped on Port 19, it was shared by Ports 9 & Configure Port 9 offline. 9. What happened to the utilization of Port 10? You should have seen additional bandwidth utilized on Port Configure Port 9 online. 11. Did the traffic get shared between Ports 9 & 10? You should have noticed that there was traffic on both Ports 9 & Configure Port 19 online. 13. What happened to the traffic on Ports 9 & 10? What you saw: Auto Trunking works on a per-exchange basis on ISL s of equal cost. When the stack ISL is working, it is a lower cost than the 2, device-port ISLs. If we remove the stacked link, then the device links share the duty. Note: Ports 9 & 10 must be operating at the same speed to have equal cost. If you would like, take a couple of minutes to test this note, by changing the port speeds on those ports with Port 19 offline. 14. Close Performance View when you have completed your testing. March Copyright 2009 QLogic Corporation

16 5.0 System Services 1. From the Switch_A Faceplate Display menu, select Switch Services 2. Select SSL and SSH from the list. Click OK. Clear the resulting dialog box. 3. You will now need to establish a secure connection to the fabric. Close EFS. 4. Reopen EFS, you can Add a Fabric or use the View File. Tech Tip 78 : The Date / Time on the workstation needs to be close to the switch time for the Certificate to be valid. 5. Look at the Fabric Tree. Does the cloud icon look the same? You should have noticed a lock icon on the cloud and on the Ethernet icon in the Topology display. This is an indication that the connection to the fabric is secure. 6. Navigate to the Faceplate Display of Switch_A. 7. Is there a Security button on the toolbar? 8. Navigate to the Faceplate Display of Switch_B.. 9. Is there a Security button on the toolbar? Tech Tip 9 : Fabric Security features will not appear in the GUI unless you have a secure Ethernet connection to the switch. Additionally, you cannot access these features on switches that you are managing in-band (via and ISL). Therefore, if you wanted to set up Security Sets on your other switch, you would need to connect to it directly. Course Note: Configuration of Security Sets will be shown in a later lesson. 10. Just to verify operation, open QuickTools on Switch_A. 11. Did QuickTools connect using SSL? You should see a padlock icon on the cloud in the tree. 12. From the menu, select Switch Services 13. Is SSL or SSH shown in the dialog box? You have reached the end of the lab exercise. Close any open applications and notify the instructor that you are done. March Copyright 2009 QLogic Corporation

17 Appendix A: Tech Tips 1 Non-Secure Connection Warning: This warning makes the user aware that SSL is not enabled on the SANbox 5000 series switch. SSL is a feature available through the Security License. 2 Reminder: On the SANbox 580x switches, the stacking ports are always on. 3 View Files can be used by administrators to easily to connect to the fabrics they are managing. Multiple fabrics can be managed with EFS and the View Files. 4 Nicknames: Nicknames will replace the WWN shown in any of the QLogic GUIs. Always use the Apply button in the Nicknames dialog box to retain the changes made. Nicknames are used for easier identification of devices when performing configuration tasks, such as Port Binding or Zoning. 5 Down vs. Offline -- A port in the Down state is not offline. An offline port will still utilize the SFP laser (or LED). A port in the Down state will not allow the SFP to utilize the light source. 6 Port Binding can be used to create more security in the data center. It will only allow the WWN configured on that port to log in to the fabric. Differences between Port Binding and Fabric Security. Port Binding will allow FCAL devices to access a switch port, even if not all of them are on the list. Only the ones on the list will appear in the Name Server. Fabric Security will allow the entire loop, or none of the devices. Port Binding does not support DH-CHAP, where Fabric Security does support DH-CHAP. 7 Certificate: To receive a valid certificate when using a secure connection (SSL). The Date/Time of the workstation must be within 24 hours of the switch. (Time Zones differences are accounted for.) 8 The Date / Time on the workstation needs to be close to the switch time for the Certificate to be valid. 9 Fabric Security features will not appear in the GUI unless you have a secure SSL connection to the switch. Additionally, you cannot access these features on switches that you are managing in-band (via and ISL). Therefore, if you wanted to set up Security Sets on your other switch, you would need to connect to it directly. March Copyright 2009 QLogic Corporation