You are on page 1of 332

5HY$

-XO\

0'LUHFWRU
(OHPHQW0DQDJHU8VHU0DQXDO
Copyright © 2007 Brocade Communications Systems, Inc. All Rights Reserved.
Brocade, the Brocade B weave logo, Fabric OS, File Lifecycle Manager, MyView, Secure Fabric OS, SilkWorm, and
StorageX are registered trademarks and the Brocade B wing logo and Tapestry are trademarks of Brocade
Communications Systems, Inc., in the United States and/or in other countries. FICON is a registered trademark of IBM
Corporation in the U.S. and other countries. All other brands, products, or service names are or may be trademarks or
service marks of, and are used to identify, products or services of their respective owners.
Notice: This document is for informational purposes only and does not set forth any warranty, expressed or implied,
concerning any equipment, equipment feature, or service offered or to be offered by Brocade. Brocade reserves the right to
make changes to this document at any time, without notice, and assumes no responsibility for its use. This informational
document describes features that may not be currently available. Contact a Brocade sales office for information on feature
and product availability. Export of technical data contained in this document may require an export license from the United
States government.
The authors and Brocade Communications Systems, Inc. shall have no liability or responsibility to any person or entity with
respect to any loss, cost, liability, or damages arising from the information contained in this book or the computer programs
that accompany it.
The product described by this document may contain “open source” software covered by the GNU General Public License
or other open source license agreements. To find-out which open source software is included in Brocade products, view the
licensing terms applicable to the open source software, and obtain a copy of the programming source code, please visit
http://www.brocade.com/support/oscd.

Brocade Communications Systems, Incorporated


Corporate Headquarters Asia-Pacific Headquarters
Brocade Communications Systems, Inc. Brocade Communications Singapore Pte. Ltd.
1745 Technology Drive 9 Raffles Place
San Jose, CA 95110 #59-02 Republic Plaza 1
Tel: 1-408-333-8000 Singapore 048619
Fax: 1-408-333-8101 Tel: +65-6538-4700
Email: info@brocade.com Fax: +65-6538-0302
Email: apac-info@brocade.com
European and Latin American Headquarters
Brocade Communications Switzerland Sàrl
Centre Swissair
Tour A - 2ème étage
29, Route de l'Aéroport
Case Postale 105
CH-1215 Genève 15
Switzerland
Tel: +41 22 799 56 40
Fax: +41 22 799 56 41
Email: emea-info@brocade.com
Document History

7LWOH 3XEOLFDWLRQ1XPEHU 6XPPDU\RI&KDQJHV 'DWH

Intrepid 6140 and 6064 Directors 620-000172-000 Initial Release of Manual to 01 July 2003
Element Manager User Manual support SANavigator 4.0
and EFCM 8.0
Intrepid 6140 and 6064 Directors 620-000172-010 Update to support EFCM 01 October 2003
Element Manager User Manual 8.0

Intrepid 6140 and 6064 Directors 620-000172-020 Update to support EFCM 01 January 2004
Element Manager User Manual 8.1

Intrepid 6140 and 6064 Directors 620-000172-030 Update to support 01 May 2004
Element Manager User Manual SANavigator 4.1

Intrepid 6140 and 6064 Directors 620-000172-040 Update to support EFCM 01 December
Element Manager User Manual 8.5 and SANavigator 4.2 2004
Intrepid 6140 and 6064 Directors 620-000172-050 Update to support EFCM 01 February
Element Manager User Manual 8.6 2005

Intrepid 6140 and 6064 Directors 620-000172-060 Update to support 01 April 2005
Element Manager User Manual SANavigator 4.2.1

Intrepid 6140 and 6064 Directors 620-000172-070 Update to support EFCM 01 June 2005
Element Manager User Manual 8.7

Intrepid 6140 and 6064 Directors 620-000172-080 Update to support EFCM 01 September
Element Manager User Manual 8.7.1 2005
Intrepid 6140 and 6064 Directors 620-000172-090 Update to support EFCM 01 January 2006
Element Manager User Manual 8.9

Intrepid 6140 and 6064 Directors 620-000172-100 Update to support EFCM 01 September
Element Manager User Manual 9.0 2006

Intrepid 6140 and 6064 Directors 620-000172-110 Update to support EFCM 01 November
Element Manager User Manual 9.1 2006

M6140 Director Element Manager User 53-1000661-01 Rev. A Revisions to support 31 July 2007
Manual EFCM 9.5. Revised to
update company
information.

M6140 Director Element Manager User Manual


53-1000661-01 Rev. A
M6140 Director Element Manager User Manual
53-1000661-01 Rev. A
Contents

Preface ............................................................................................................................ xv

Chapter 1 Element Manager Overview


Element Manager Description........................................................ 1-2
Managing the Director .................................................................... 1-4
Your SAN Management Application ............................................ 1-5
Using the Element Manager ........................................................... 1-5
Using Dialog Boxes................................................................... 1-5
Keyboard Navigation ............................................................... 1-6
Title Bar....................................................................................... 1-6
Menu Bar.................................................................................... 1-6
Closing the Element Manager................................................. 1-7
Overview of the View Panel ........................................................... 1-7
Hardware Tab ............................................................................ 1-8
Port List Tab ............................................................................... 1-9
Node List Tab............................................................................. 1-9
Performance Tab ....................................................................... 1-9
Status Box and Message Area ............................................... 1-10
Feature Permissions ....................................................................... 1-10

Chapter 2 Monitoring and Managing the Director


Hardware Tab ................................................................................... 2-2
Identifying FRUs ....................................................................... 2-2
Monitoring Director Operation .............................................. 2-4
Monitoring Hardware Operation ........................................... 2-8
Port List Tab .....................................................................................2-11
FRU List Columns.......................................................................... 2-14
Node List Tab.................................................................................. 2-16
Open Systems Management Style ........................................ 2-16
Defining Nicknames............................................................... 2-19
Performance Tab............................................................................. 2-19
Port Statistics ........................................................................... 2-19
Using Statistics for Troubleshooting .................................... 2-25
Port Operational States.................................................................. 2-25
Link Incident Alerts ....................................................................... 2-28
Clear Link Incident Alerts ..................................................... 2-29
Threshold Alerts............................................................................. 2-29
Critical Warning ............................................................................. 2-30
Using the Critical Warning Dialog Box ............................... 2-30

Contents v
Contents

Chapter 3 Using Product Menus


Management Style ............................................................................3-2
Name Display....................................................................................3-2
Port......................................................................................................3-2
FRU .....................................................................................................3-6
Clear System Error Light ............................................................... 3-11
Enable Unit Beaconing................................................................... 3-11
Properties .........................................................................................3-12
Close .................................................................................................3-12

Chapter 4 Using the Configure Menu


Operating Parameters ................................................................4-1
Fabric Tab....................................................................................4-2
Domain Tab ...............................................................................4-5
Identification Tab .......................................................................4-9
SNMP Tab ............................................................................. 4-11
Date and Time Tab...................................................................4-14
Interfaces Tab ..........................................................................4-15
Preferred Path .................................................................................4-17
Adding a Preferred Path.........................................................4-20
Removing a Preferred Path ....................................................4-22
Ports ..............................................................................................4-22
Port Parameter Descriptions ..................................................4-23
Configuring Ports Open Systems..........................................4-30
Configuring Ports FICON ......................................................4-32
Allow/Prohibit Matrix ..................................................................4-33
Managing Stored Address Configurations .................................4-38
FICON Management Server..........................................................4-40
Installing the FICON Management Server ..........................4-41
Configuring the FICON Management Server ....................4-41
Open Systems Management Server .............................................4-44
Installing and Configuring the Open Systems Management Server4-45
Features ............................................................................................4-46
Configuring Feature Keys ......................................................4-46
Threshold Alerts ............................................................................4-48
Creating New Alerts ...............................................................4-48
Editing Alerts ...........................................................................4-51
Activate or Deactivate Alerts.................................................4-51
Delete Alerts.............................................................................4-52
View Alerts ...............................................................................4-52
Clear Threshold Alerts............................................................4-53
Open Trunking ................................................................................4-53
Configuring Open Trunking..................................................4-54
Export Configuration Report ........................................................4-57
Report Data ..............................................................................4-58

Chapter 5 Using Security Features


Port Binding.......................................................................................5-2
Switch Binding ..................................................................................5-3
Enterprise Fabric Mode....................................................................5-8
Enabling and Disabling Enterprise Fabric Mode..................5-9
Features and Parameters Enabled with Enterprise Fabric Mode5-9

vi M6140 Director Element Manager User Manual


Contents

Authentication .............................................................................5-11
Accessing Authentication ...................................................... 5-11
Users Tab Description ............................................................ 5-15
Setting User Interface Security Options............................... 5-17
Adding a User to a Switch or Director ................................ 5-19
Removing a User from a Switch or Director....................... 5-20
Editing a User Definition ....................................................... 5-21
Accessing the Software Tab................................................... 5-23
Software Tab Description ...................................................... 5-24
Enabling API Authentication ................................................ 5-26
Disabling API Authentication............................................... 5-28
Disabling OSMS Authentication........................................... 5-31
Adding Current Server Access to a Switch or Director .... 5-32
Removing Current Server Access to a Switch or Director 5-33
Adding Software Access to a Switch or Director ............... 5-34
Removing Software Access to a Switch or Director .......... 5-36
Defining a CHAP Secret for a Server ................................... 5-37
Editing a CHAP Secret for the Current Server ................... 5-40
Editing a CHAP Secret for Another API User .................... 5-42
Accessing the Devices Tab..................................................... 5-44
Devices Tab Description ........................................................ 5-45
Defining a CHAP Secret for a Device .................................. 5-49
Editing a CHAP Secret for a Device..................................... 5-50
Setting Default Authentication Values ................................ 5-52
Setting Authentication Methods........................................... 5-53
Enabling Port Authentication ............................................... 5-54
Disabling Port Authentication .............................................. 5-56
Adding Connected Device Access to a Switch or Director5-57
Adding Detached Device Access to a Switch or Director. 5-59
Removing Device Access from a Switch or Director ......... 5-61
Accessing the IP Access Control Tab ................................... 5-62
IP Access Control Tab Description....................................... 5-63
Enabling or Disabling the IP/ACL Feature ........................ 5-64
Adding Permitted IP Addresses........................................... 5-65
Editing Permitted IP Addresses ........................................... 5-67
Removing Permitted IP Addresses ...................................... 5-68
Accessing the Radius Servers Tab ........................................ 5-70
Radius Servers Tab Description............................................ 5-71
Adding a Radius Server......................................................... 5-73
Removing a Radius Server .................................................... 5-75
Editing a RADIUS Server Definition.................................... 5-76
Editing an Entry in the Table ................................................ 5-77
Changing the RADIUS Server Sequence ............................. 5-78
Changing the Dead Time....................................................... 5-79
Accessing Security Authentication from the Element Manager and
from Your SAN Management Application ......................... 5-80
Using the Security Log .................................................................. 5-81
SSL ................................................................................................... 5-82
Encryption....................................................................................... 5-82

Chapter 6 Using Logs


Using Logs ................................................................................... 6-1
Accessing Logs .......................................................................... 6-1

Contents vii
Contents

......................................................................................................6-2
Clearing Logs .............................................................................6-2
Refreshing Logs .........................................................................6-2
......................................................................................................6-3
Exporting Logs...........................................................................6-3
Accessing Advanced Logs .......................................................6-3
Audit Log ..........................................................................................6-3
Event Log ......................................................................................6-5
Hardware Log ..................................................................................6-6
Link Incident Log .............................................................................6-6
Port Performance Threshold Alert Log ........................................6-7
Security Log.......................................................................................6-8
Open Trunking Log ........................................................................ 6-11
Embedded Port Log .......................................................................6-12
Change ... Button .....................................................................6-13
Switch Fabric Log ...........................................................................6-15
Syslog Configuration .....................................................................6-16

Chapter 7 Using Maintenance Features


Port Diagnostics ...............................................................................7-1
Port Swapping ..................................................................................7-3
Data Collection ...............................................................................7-6
IPL ......................................................................................................7-7
Set Online State .................................................................................7-8
Firmware Library .............................................................................7-9
Enable E-Mail Notification ............................................................7-10
Enable Call-Home Notification .................................................... 7-11
Back Up and Restore Configuration ............................................7-12
Element Manager Configuration Data .................................7-12
Backing Up Element Manager Configuration Data ...........7-13
Backing Up SAN Management Application Data .....................7-14
Reset Configuration .......................................................................7-15

Appendix A Element Manager Messages


A ........................................................................................................A-2
C ........................................................................................................A-4
D ......................................................................................................A-13
E .......................................................................................................A-15
F .......................................................................................................A-17
I ........................................................................................................A-19
L .......................................................................................................A-24
M .....................................................................................................A-25
N ......................................................................................................A-25
O ......................................................................................................A-26
P .......................................................................................................A-27
R ......................................................................................................A-29
S .......................................................................................................A-29
T .......................................................................................................A-31
U ......................................................................................................A-35
Y ......................................................................................................A-36

Glossary ........................................................................................................................g-1

viii M6140 Director Element Manager User Manual


Contents

Index ............................................................................................................................... i-1

Contents ix
Contents

x M6140 Director Element Manager User Manual


Figures

1-1 Server Platform and Remote Client Computer Configuration .............. 1-3
2-1 Hardware Components ............................................................................... 2-3
4-1 Specifying Preferred Path for Switch 1 .................................................... 4-18
4-2 Specifying Preferred Path for Switch 2 .................................................... 4-19
4-3 Configure Allow/Prohibit Dialog Box .................................................... 4-34
4-4 Prohibited Port Connection Symbol ........................................................ 4-35
4-5 Configure Allow/Prohibit Matrix Configuration Library Dialog Box 4-36
4-6 Address Configuration Library Dialog Box ........................................... 4-39
4-7 Configure FICON Management Server Zoning Dialog Box ................ 4-44
4-8 Configure Threshold Alerts Dialog Box .................................................. 4-49
4-9 Configure Open Trunking Dialog Box .................................................... 4-55
5-1 Switch Binding State Change Dialog Box ................................................. 5-4
5-2 Switch Binding Membership List Dialog Box .......................................... 5-6
5-3 Security Authentication, Users Tab ......................................................... 5-14
5-4 Users Tab ..................................................................................................... 5-15
5-5 Add/Edit User Dialog Box on Users Tab ............................................... 5-19
5-6 Security Authentication, Software Tab ................................................... 5-23
5-7 Software Tab ................................................................................................ 5-24
5-8 Add or Edit Software ID and CHAP Secret Dialog Box ....................... 5-35
5-9 Server Properties Dialog Box .................................................................... 5-38
5-10 Security Authentication, Devices Tab ..................................................... 5-43
5-11 Devices Tab ................................................................................................. 5-45
5-12 Add Device Dialog Box ............................................................................. 5-49
5-13 Change Secret Dialog Box ......................................................................... 5-58
5-14 Security Authentication, IP Access Control Tab .................................... 5-62
5-15 IP Access Control Tab ................................................................................ 5-63
5-16 Add/Edit IP Address or Range Dialog Box ........................................... 5-66
5-17 Security Authentication, Radius Servers Tab ......................................... 5-70
5-18 Radius Servers Tab ..................................................................................... 5-71
5-19 Add/Edit RADIUS Server Dialog Box .................................................... 5-74
6-1 Log Setting Dialog Box - 256 Port Director ............................................. 6-14
6-2 Dialog Box Options - All Products Except 256-Port Director .............. 6-14
7-1 Swap Ports Dialog Box ................................................................................ 7-4
7-2 Swap Ports Dialog Box ................................................................................ 7-5
7-3 Swap Ports Dialog Box -- Step 3 ................................................................. 7-5

Figures xi
Figures

xii M6140 Director Element Manager User Manual


Tables

1 Brocade Names for Legacy McDATA Products ....................................... xv


1-1 Privileges Required for Feature Functions Table ................................... 1-12
2-1 Hardware Components ............................................................................... 2-3
2-2 Operating Status Symbols in the ID/Status Bar and Status Box ........... 2-7
2-3 Port States and Indicators .......................................................................... 2-25
4-1 QPM Port Speed and Port Type Configurations ................................... 4-23
4-2 Available Code Pages ................................................................................ 4-42
5-1 Differences - SAN Management Security Center and Element
Manager Authentication ............................................................................ 5-80
6-1 Security Log Codes ....................................................................................... 6-9

Tables xiii
Tables

xiv M6140 Director Element Manager User Manual


Preface

This publication provides details for using the 64-Port and 140-Port
Director models Element Manager application to monitor, control,
and configure operation for a specific Director. You access the
Element Manager application for the Director through your SAN
Management application.
Functions and options included in the Element Manager application
for each product are nearly identical. When there are differences, this
manual will contain notes such as 64-Port only or 140-Port only.

NOTE: For your convenience, we have retained the legacy McDATA names
to avoid any confusion. Please refer to Table 1 for the equivalent Brocade
names for the legacy McDATA products.

Table 1 Brocade Names for Legacy McDATA Products

Brocade Names Legacy McDATA Names

Brocade EFCM EFCM

Brocade M-EOS E/OS

Brocade M-EOSn E/OSn

Brocade M6140 Director Intrepid 6140 (ED-6140)

Brocade M4400 Switch Sphereon 4400

Preface xv
Preface

Table 1 Brocade Names for Legacy McDATA Products

Brocade Names Legacy McDATA Names

Brocade M4500 Switch Sphereon 4500

Brocade M4700 Switch Sphereon 4700

Brocade Mi10K Director Intrepid 10000 Director (i10k)

Who Should Use this This publication is intended for data center administrators, LAN
Manual administrators, operations personnel, and customer support
personnel who must monitor and manage product operation.

Organization of this This publication is organized as follows:


Manual
Chapter 1, Element Manager Overviewprovides an introduction
and overview of the Element Manager. It is intended as a quick
reference for features available through the main Element
Manager window.
Chapter 2, Monitoring and Managing the Director,describes how to
monitor and manage Director operation using the Element
Manager. This includes using status indicators, dialog boxes, and
performance and error data available through the +DUGZDUHWDE,
3RUW/LVWWDE, 1RGH/LVWWDE, and 3HUIRUPDQFH WDE.
Chapter 3, Using Product Menusdescribes how to use the options
available through the 3URGXFWmenu on the Element Manager
menu bar.
Chapter 4, Using the Configure Menudescribes features that you
can configure through the Element Manager.
Chapter 5, Using Security Featuresdescribes how to use the
options available through the 6HFXULW\menu on the Element
Manager menu bar.
Chapter 6, Using Logs, describes the log options that are available
through the /RJV menu on the Element Manager menu bar.
Chapter 7, Using Maintenance Featuresdescribes how to use the
options available through the 0DLQWHQDQFHmenu on the Element
Manager menu bar.
Appendix A, Element Manager Messages, lists and explains error
messages that may appear while using the Element Manager.

xvi M6140 Director Element Manager User Manual


Preface

The Glossarydefines terms, abbreviations, and acronyms used in


this manual.
AnIndex is also provided.

Opening the Online 1. Open the Element Manager for the Director from your SAN
Help Management application’s desktop.
2. Select Help > Contents or press F1.

Opening the User The user manuals and other documentation are provided in PDF
Manual(s) format and are available on the documentation CD-ROM.
If you run the documentation installer from the documentation CD,
you can access the PDF files in the location where you installed them.
The default location is <Install_Home>\docs\.
TIP: On Windows systems, you can also access documentation through the Windows
Start menu. Browse to the application’s submenu and select Documentation.

NOTE: You must have Adobe Reader to view the user documentation. To get
a free copy of Reader, visit http://www.adobe.com.

Additional Information This section lists additional Brocade and industry-specific


documentation that you might find helpful.

Brocade Resources

The most recent version of documentation is provided on the Brocade


Web site, through Brocade Connect.

NOTE: Go to http://www.brocade.com and click Brocade Connect to


register at no cost for a user ID and password.

Other publications that provide additional information about the


64-Port 140-Port Directors are:
• Your SAN Management application’s 6RIWZDUH8VHU0DQXDO
‡ 3RUW'LUHFWRU,QVWDOODWLRQDQG6HUYLFH0DQXDO
‡ 3RUW'LUHFWRU,QVWDOODWLRQDQG6HUYLFH0DQXDO

Preface xvii
Preface

‡ )&)DEULFHQWHU(TXLSPHQW&DELQHW,QVWDOODWLRQDQG6HUYLFH
0DQXDO
‡ (2661036XSSRUW0DQXDO
‡ (26&RPPDQG/LQH,QWHUIDFH8VHU0DQXDO

Manual Conventions The following notational conventions are used in this document:

NOTE: A note presents important information that is not hazard-related.

CAUTION
$FDXWLRQFRQWDLQVLQIRUPDWLRQHVVHQWLDOWRDYRLGGDPDJHWRWKH
V\VWHPRUHTXLSPHQW7KHFDXWLRQPD\DSSO\WRKDUGZDUHRU
VRIWZDUH

DANGER
$GDQJHUFRQWDLQVLQIRUPDWLRQHVVHQWLDOWRDYRLGDKD]DUGWKDWFDQ
FDXVHVHYHUHSHUVRQDOLQMXU\GHDWKRUVXEVWDQWLDOSURSHUW\GDPDJH
LI\RXLJQRUHWKHZDUQLQJ

Convention Meaning

Italic Outside book references, names of user interface


windows, panels, buttons, and dialog boxes

Bold Keyboard keys

Click. As in “click the icon on Click with the left mouse button on the object to activate a
the navigation control panel.” function.

Right-click. As in “right-click Click with the right mouse button on the object to activate
the product icon.” a function.

Select. As in “select the log Click once on the object to highlight it.
entry.”

Illustrations Used in this Manual

xviii M6140 Director Element Manager User Manual


Preface

Figures containing Element Manager screens are included for


illustration purposes only. These illustrations may not match exactly
what you see through your Server platform or remote computer
running client software. Title bars have been removed from the
illustrations and the illustrations may contain different data than the
screens that display on your system.

Where to Get Help Brocade’s “Best in Class” Solution Center provides a single point of
contact for customers seeking help. The Solution Center will research,
explore, and resolve inquiries or service requests regarding Brocade
products and services. The Solution Center is staffed 24 hours a day,
7 days a week, including holidays.

NOTE: To expedite warranty entitlement, please have your product serial


number available.

Brocade Communications Systems, Inc.


1745 Technology Drive
San Jose, CA 95110

US and Canada: 800-752-4572 option 1


International: 720-558-3910 option 1
E-mail: support@mcdata.com

Forwarding We sincerely appreciate any comments about this publication. Did


Publication you find this manual easy or difficult to use? Did it lack necessary
Comments information? Were there any errors? Could its organization be
improved?
Please send your comments via e-mail, our home page, or FAX.
Identify the manual, and provide page numbers and details. Thank
you.

E-mail: documentation@brocade.com
Home Page: www.brocade.com
FAX: Technical Communications Manager
(720) 558-8999

Preface xix
Preface

xx M6140 Director Element Manager User Manual


1
Element Manager
Overview

This section provides an introduction to and overview of the 64-Port


and 140-Port Director Element Managers. It is intended as a quick
reference for using features available through the main Element
Manager window.
• Element Manager Description ............................................................. 1-2
• Managing the Director ......................................................................... 1-4
• Your SAN Management Application ................................................... 1-5
• Using the Element Manager................................................................. 1-5
• Overview of the View Panel.................................................................. 1-7
• Feature Permissions............................................................................ 1-10

Element Manager Overview 1-1


Element Manager Overview
1

Element Manager Description


The Element Manager is a Java-based graphical user interface (GUI)
that provides in-depth management, configuration, and monitoring
functions for products and their field-replaceable units (FRUs). There
is one Element Manager application for each Switch and Director in
the network and it can be accessed from your SAN Management
application.
The Element Manager provides graphical views of Director hardware
components and displays component status. Using the Element
Manager interface, you can quickly manage and monitor the Director
on your network.

Open an Element Manager using one of the following methods:


• Double-click a product icon in the SAN Management application
Physical Map (topology).
• Right-click the product icon and select Element Manager from the
shortcut menu.
The Element Manager window displays.

NOTE: The SAN Management application window is still available as a


separate window. You can drag the Element Manager window away from the
SAN Management application window and view both windows on your
desktop or minimize one or both of them to icons if desired. You can have a
maximum of four different Element Manager windows open concurrently.

1-2 M6140 Director Element Manager User Manual


Element Manager Overview
1

Figure 1-1 Server Platform and Remote Client Computer Configuration

Element Manager Description 1-3


Element Manager Overview
1

Managing the Director


The following options are available for managing the Director
through a user interface:
• The Element Manager and your SAN Management application
are installed on a Server platform shipped from the factory or
supplied by you. You can only access the Element Manager
through the SAN Management application.
• The command line interface (CLI). The CLI allows you to access
many SAN Management application and Element Manager
functions while entering commands during a Telnet session with
the Switch and Director. The primary purpose of the CLI is to
automate management of many Switches and Directors using
scripts. The CLI is not an interactive interface; no checking is
done for pre-existing conditions and no prompts display to guide
users through tasks. For more information, refer to the Command
Line Interface User Manual for your Switch or Director product.
• Management using Simple Network Management Protocol
(SNMP). An SNMP agent on the Director is configured through
the Element Manager. The agent allows administrators on SNMP
management workstations to access product management
information using any standard network management tool.
Through the Element Manager, administrators can assign Internet
Protocol (IP) addresses and corresponding community names for
up to six workstations functioning as SNMP trap message
recipients. For more information, refer to the SNMP Support
Manual for your Switch or Director product.

NOTE: Management through SNMP is optional and depends on your


purchased software package.

1-4 M6140 Director Element Manager User Manual


Element Manager Overview
1

Your SAN Management Application


You may configure some features through both your SAN
Management application and the Element Manager. Keep in mind
that you must enable Element Manager feature permissions for
various user levels through your SAN Management application.
When SAN Management application tasks are mentioned, refer to
that application’s online help or Software User Manual for detailed
instructions.
You can install the SAN Management and Element Manager client
applications on remote computer systems. For instructions, refer to
the section in your SAN Management application’s Software User
Manual that pertains to the operating system of your computer.

Using the Element Manager


This section provides a general overview of the Element Manager
and its functions. Use the Element Manager to monitor and manage
your Director. The following sections provide an overview of the
Element Manager user interface.
• Using Dialog Boxes on page 1-5
• Keyboard Navigation on page 1-6
• Title Bar on page 1-6
• Menu Bar on page 1-6
• ID and Status Bar on page 1-6
• Closing the Element Manager on page 1-7

Using Dialog Boxes Buttons such as OK, Activate and Close or Cancel initiate functions in a
dialog box. Generally, these buttons have the following functions:
• The OK button saves the entered information and closes the
dialog box.
• The Activate button saves the entered information or activates the
indicated changes on the attached Director.
• The Close button closes the dialog box.
• The Cancel button cancels the operation and closes the dialog box
without saving the information you entered.

Your SAN Management Application 1-5


Element Manager Overview
1

Keyboard Use standard keyboard navigation in dialog boxes. For example, use
Navigation the Tab, Arrow, and Backspace keys to move through dialog box
fields and the Enter key to perform default button functions.

Title Bar The title bar at the top of the Element Manager window reflects the
product label selected for display through the View > Product Label
option selected in your SAN Management application. The product
name displays to the right of this label.

Menu Bar The menu bar on the Element Manager window displays the
following menus:
• Product
• Configure
• Security
• Logs
• Maintenance
• Help
The Element Manager menu bar enables you to perform the
following tasks.
• Select one of the tabs to display a list of menus.
• Select an option to open a dialog box that allows you to perform
configuration and maintenance tasks and logs.
• If a menu option contains a check box, select the box to add a
check mark and enable a function.
• Select a check box containing a check mark to remove the check
mark and disable the function.
ID and Status Bar
The ID/status bar is located below the Element Manager menu bar at
the top of the Element Manager window. The ID/status bar contains
the following information:
• Product Name and Icon. Displayed in the Physical Map of your
SAN Management application.

1-6 M6140 Director Element Manager User Manual


Element Manager Overview
1

• IP Address. Internet Protocol (IP) address of the Director.


• Domain ID. Domain Identification (ID) for the Director. Display
is different depending on the type of fabric where the Director is
located, compatible domain ID mode of the fabric, and Director
vendor. Either the absolute domain ID, the legacy domain ID, or
both, display as absolute domain ID (legacy domain ID). You can
configure the legacy domain ID through the Operating Parameters
dialog box (Domain tab). The absolute domain ID is the legacy
domain ID plus an offset.
• Status. Operating status of the Director and colored status
symbol. For details, refer to Monitoring Director Operation in
Chapter 2.
• State. Current online or offline state of the Director. For details,
refer to Monitoring Director Operation in Chapter 2 and Set Online
State in Chapter 7.

Closing the Element To close the Element Manager, do one of the following tasks:
Manager • Select Product > Close.
• Click the X button at the top right corner of the Element Manager
window.
• Double-click the icon at the top left corner of the Element
Manager window, or right-click the icon and select Close from the
shortcut menu that displays.

Overview of the View Panel


The following sections provide details about the tabs available
through the Element Manager:
• Hardware Tab on page 1-8
• Port List Tab on page 1-9
• Node List Tab on page 1-9
• Performance Tab on page 1-9
• Status Box and Message Area on page 1-10

Overview of the View Panel 1-7


Element Manager Overview
1

NOTE: The status bar displays from all views. For more information, refer to
Status Box and Message Area on page 1-10.

Select a tab at the top of the window to see specific information about
the product. For detailed information on using these views, refer to
Chapter 2, Monitoring and Managing the Director.

NOTE: If an XPM port is installed, unaddressable ports are not displayed in


any of the tabs.

Hardware Tab The Hardware tab displays the hardware and FRU components
installed in the Director. Colored indicators reflect the status of LEDs
on the FRUs. The symbol in the ID/status bar above the view and in
the status box in the bottom left of the window represent overall
status of the Director. A FRU can have failed, but the Switch might
simply report overall status as degraded. For example, for a port
failure, which is indicated by a blinking red diamond on a port, a
yellow triangle displays to indicate a degraded condition. However,
if a blinking red diamond displays over a FRU, the Status area
displays a red diamond, which indicates a failure requiring
immediate attention.
Columns that appear in the left pane display status and identifying
information about each installed FRU. Columns include Field
Replaceable Units (FRU), Status, Part Number, and Serial Number. All
data is dynamic and updates automatically.
To see a FRU’s properties, do one of the following:
1. Double-click on a FRU’s row.
2. Select the row and select Product > FRU > FRU Properties.
3. Double-click the image of the FRU to view more information.
If the image is on a port card, the Port Card window displays.
Otherwise, the FRU Properties dialog box opens and displays
detailed information on the hardware component.
4. To view information about the Director, double-click the image of
the Director, making sure the cursor is not placed on a FRU
component.
The Director’s Properties dialog box displays.

1-8 M6140 Director Element Manager User Manual


Element Manager Overview
1

For more information on the Hardware tab, refer to Hardware Tab on


page 2-2.

Port List Tab The Port List tab displays information about the ports installed on the
Director.
1. To display port information, click the Port List tab on the Element
Manager window. All data is dynamic and updates
automatically.
2. To view a port’s properties, double-click a port’s row.
The Port Properties dialog box displays.

For more information about this view, refer to Port List Tab on
page 2-11
.

Node List Tab The Node List tab displays information about all node attachments to
any F_Ports on the Director. If FICON Management style is selected,
the Node List also displays E_Ports.
1. To open this tab, select the Node List tab on the Element Manager
window. All data is dynamic and updates automatically as
devices log in and log out.
2. Double-click a row to display the Node Properties dialog box.
For more information about this view, refer to Node List Tab on
page 2-16.

Performance Tab The Performance tab provides a graphical display of performance for
all ports. The top portion of the window displays bar graphs that
show the level of transmit/receive activity for each port. This
information updates every five seconds. Each bar graph also shows
the percentage link utilization for the port. A red arrow marks the
highest utilization level reached since the Performance tab was
opened. If the system detects activity on a port, it represents minimal
activity with at least one bar.
When an end device (node) is logged in to a port, moving the cursor
over the port’s bar graph highlights the graph and displays a
message with the connected node’s WWN. If the connected node has

Overview of the View Panel 1-9


Element Manager Overview
1

more than one port, the WWN of the specific port on the node
displays. When a port is functioning as an expansion port (E_Port),
the message is “E_Port.” When a port is not logged into an
end-device (not functioning as an F_Port) or to another Director (not
functioning as an E_Port), the message is the port’s current online
state.

The bottom portion of the window displays cumulative statistical


information for the selected port. Values include transmit and receive
traffic, class 2 and 3 statistics, operational statistics, and error
categories.
• Click a category in the left frame of the statistics area to display
only statistics in that category or click All to display values for all
categories.
• Click Refresh to update the data with current data from the port.
• Click Clear to return all counters to zero and display the Clear Port
Statistics dialog box.

NOTE: Clearing the counters clears the statistics for all users.

For more information about this view, refer to Performance Tab on


page 2-19.

Status Box and The status box located in the bottom left corner of the Element
Message Area Manager window displays a symbol indicating the Director’s
operating status. The same symbol also displays in the Status area of
the ID/status bar at the top of the Element Manager window. Help text
displays in the area next to the status box as you move your cursor
across portions of the Hardware tab.

NOTE: Refer to Operating Status Symbols in the ID/Status Bar and Status Box on
page 2-6 for the meaning of status symbols and Port States and Indicators on
page 2-25 for details on the status table text.

Feature Permissions
The system administrator can allow users to access specific functions
of Element Manager features through the SAN Management

1-10 M6140 Director Element Manager User Manual


Element Manager Overview
1

application. Detailed instructions for assigning permissions appear in


your SAN Management application’s 6RIWZDUH8VHU0DQXDO.
The following four permission levels can be assigned to users:
• Product Administrator. Allows you to perform most functions.
• Product Operator. Allows you to perform operator functions.
• Product Maintenance. Allows you to perform maintenance
functions.
• Security Administrator. Allows you to enable and configure
authentication features.
By default, all users have read-only rights, which allows viewing but
not modifying data or configurations. You can enable each of the
permission levels as either read-only or read/write for specific users.
Users that are assigned a permission level that is required for a
specific feature must also be given read/write access to modify any
data through the feature. For example, to clear the Audit Log, a user
must be assigned Product Administrator permission, as well as
read/write access. If a user is assigned Product Administrator
permission, but read-only access, that user can only view the Audit
Log.

The Privileges Required for Feature Functions Table itemizes specific


functions available to Element Manager users who have been
assigned Product Administrator, Operator, Maintenance, and
Security Administrator privileges. Privileges are not directly assigned
to users; users get privileges when they are assigned to specific
groups through your SAN Management application. For details on
managing users and assigning privileges, refer to the Setting Up the
Application chapter and User Privileges appendix in your SAN
Management application software user manual.

NOTE: If a user does not have permission to perform a specific operation, a


not-authorized error box appears when the operation is attempted.

Feature Permissions 1-11


Element Manager Overview
1

Table 1-1 Privileges Required for Feature Functions Table

Product Product Product Security


Element Manager Rights Administrator Operator Maintenance Administrator

Backup and Restore X X X


Configuration

Clear Audit Log X

Clear Embedded Port Log X X

Clear Event Log X

Clear Hardware Log X X

Clear LIN Alert X X X

Clear LIN Log X

Clear Port Threshold Alert Log X

Clear Statistics Counters X X

Clear Switch Fabric Log X X

Clear System Error Light X

Clear Threshold Alerts X

Clear Threshold Event Log X

Clear Zoning Alerts X

Configure Allow/Prohibit Matrix - X X


Active (FICON management
style)

Configure Allow/Prohibit Matrix - X X


Stored (FICON management
style)

Configure Date/Time X X X

Configure Fabric Parameters X

Configure Feature Key X

Configure FMS X X

Configure X
Identification/WWN/Nickname

1-12 M6140 Director Element Manager User Manual


Element Manager Overview
1

Table 1-1 Privileges Required for Feature Functions Table (continued)

Product Product Product Security


Element Manager Rights Administrator Operator Maintenance Administrator

Configure Management Style X

Configure Open Trunking X

Configure OSMS X

Configure Port Binding X

Configure Ports

Blocked X X X
(only available
from right-click
menu)

LIN Alerts X X

Name X X

Port Binding X X

RX BB Credit X X

Speed X X

NPIV Login Limit X X

Type X X

Configure Preferred Path X

Configure SNMP X

Configure Switch Binding

Connection Policy X X

Enable X X

Membership List X X

Configure Operating Parameters

Fabric Parameters: B_B Credit, X


R_A_TOV, E_D_TOV, Priority,
Interop Mode, ISL Cost.

Domain RSCNs X

Feature Permissions 1-13


Element Manager Overview
1

Table 1-1 Privileges Required for Feature Functions Table (continued)

Product Product Product Security


Element Manager Rights Administrator Operator Maintenance Administrator

Insistent Domain IDs X

Switch/Director Speed X

Zoning RSCNs X

Configure Threshold Alerts X

Data Collection X

Enable Alternate Control Prohibit X

Enable Call Home Notification X X

Enable Date/Time X X X
Synchronization

Enable E-Mail Notification X X

Enable FMS X

Enable FRU Beaconing X

Enable On Port Channel Wrap X X


(FICON only)

Enable OSMS X

Enable Port Beaconing X X X

Enable Telnet X X X

Enable Unit Beaconing X X X

Enable Web Server X X X

Export Configuration X X X

FICON CUP Zoning X X

FRU Switchover X

IPL X X X

Manage Firmware Library X

Modify Embedded Port Log X X

Modify Port Binding X

1-14 M6140 Director Element Manager User Manual


Element Manager Overview
1

Table 1-1 Privileges Required for Feature Functions Table (continued)

Product Product Product Security


Element Manager Rights Administrator Operator Maintenance Administrator

Port Diagnostics X

Reset Configuration X

Clear Port Statistics Counters X X


(Performance tab)

Reset Port X X

Set Online State X X X

SANtegrity Authentication (in X X


Element Manager and Security
Center)

Swap Ports (FICON X X


management style only)

Event Log X X X X

Hardware Log X X X

LIN Log X X X

Security Log X X

SNMP X

Threshold Alert Log X X X

View Firmware Library X

View Open Trunking Log (This X X X


log cannot be cleared.)

Feature Permissions 1-15


Element Manager Overview
1

1-16 M6140 Director Element Manager User Manual


2
Monitoring and
Managing the Director

This section describes how to use the features available through the
Element Manager to monitor and manage Director operation. These
features include status indicators, menu options, and dialog boxes
available through the +DUGZDUH tab, 3RUW/LVW tab, 1RGH/LVW tab, and
3HUIRUPDQFH tab.
‡ +DUGZDUH7DE 
‡ 3RUW/LVW7DE 
‡ )58/LVW&ROXPQV 
‡ 1RGH/LVW7DE  
‡ 3HUIRUPDQFH7DE  
‡ 3RUW2SHUDWLRQDO6WDWHV  
‡ /LQN,QFLGHQW$OHUWV 
‡ &OHDU/LQN,QFLGHQW$OHUWV  
‡ &ULWLFDO:DUQLQJ 

Monitoring and Managing the Director 2-1


Monitoring and Managing the Director
2

Hardware Tab
Using this graphical view of the Director, you can view status
symbols and simulated LED indicators, display data, and use mouse
functions to monitor status and obtain vital product information for
the Director and its hardware components.
To display this information, select the Hardware tab on the Element
Manager window.
The following topics describe +DUGZDUH tab functions.
• Identifying FRUs on page 2-2
• Monitoring Director Operation on page 2-4
• Monitoring Hardware Operation on page 2-8
• Using Menus on page 2-10
• Director Menu on page 2-10

Identifying FRUs Figure 2-1 on page 2-3 illustrates the +DUGZDUH tab. Refer to Table 2-1
on page 2-3 for the names of components corresponding to the
numbered callouts in the figure.

2-2 M6140 Director Element Manager User Manual


Monitoring and Managing the Director
2

Figure 2-1 Hardware Components

Table 2-1 Hardware Components

Callout Component

1 FRU List

2 Line Module and Ports

3 Fan

4 Unit Beaconing LEDs

5 CTP Cards

6 Power Supplies

Move the cursor over parts of the graphic in the Hardware tab to
display labels identifying each hardware component and its slot
position in the chassis relative to identical components installed in
the Director.

The following components include:


• Port cards.
— The 64-Port Director can contain up to 16 port cards, slot
positions 15 through 0 (left to right).
— The 140-Port Director can contain up to 32 port cards in the
front of the unit (slot positions 0-31) and up to three additional
port cards in the rear (slot positions 33-35). Note that the blank
slot position (32) relates to ports 128-131, which are internal
ports.
As you move the cursor over each card, labels appear, identifying
the card's slot number and port technology. Acronyms that may
display to identify port technology, such as FPM, GLSL, GLSR,
GSML, GSMR, GXXL, and GXXR, QPM, and UPM, also display in
the FRU column.
• Control processor (CTP) cards. Two CTP cards are installed, slot
positions 1 and 0 (left to right).
• Power supply modules.

Hardware Tab 2-3


Monitoring and Managing the Director
2

— 64-Port Director and 140-Port Director - Two modules are


installed, slot positions 1 and 0 (left to right).
• Cooling fan modules.
— 64-Port Director - Two modules are installed, slot positions 1
and 0 (left to right).
— 140-Port Director - Three modules are installed, slot positions
2, 1, and 0 (left to right).
• Serial Crossbars (SBAR).
— 64-Port Director - Two SBARs are installed, slot positions 1
(bottom) and 0 (top).
— 140-Port Director - Two SBARs are installed, slot positions 0
(bottom) and 1 (top).

Monitoring Director Operation


You can monitor the operating status of the Director using one of the
following methods:
• The Status column of the FRU table
• The Status area in the ID/status bar at the top of the window
• The status box in the lower left corner of the window.

Status and State Areas The Status and State areas in the ID/status bar at the top of the
window display the Director’s operational status and online or
offline state.
• Status. The status of the Switch. The status icon matches the icon
in the status box in the lower left corner of the window. For
details, refer to Status Indicator.
• State. The State field displays one of the following values:
• OFFLINE. When the Director is Offline, all ports are offline.
The ports cannot accept a login from an attached device or
cannot connect to other devices. An amber attention triangle
displays.

2-4 M6140 Director Element Manager User Manual


Monitoring and Managing the Director
2

• Online. All unblocked ports are able to connect with devices.


Note that the Director automatically goes online after a
power-up, an initial machine load (IML), or an initial program
load (IPL).
• Coming online. This is a transitional state that occurs just
before the Director goes online. This state normally only
happens briefly, unless there is a problem reaching the online
state.
• Going offline. This is a transitional state that occurs just
before the Director goes offline. This state normally only
happens briefly, unless there is a problem reaching the offline
state.
• No Link Status. If the Ethernet network connection between
the Server platform and the Director is down, the Hardware tab
displays the front and rear of the unit without FRUs. The
Status area at the top right of the window displays the reason
for “No Link” status with an a “No Link” icon (box with black
and yellow stripes). The icon also displays in the status box at
the lower left corner of the view. No Link status can also occur
when the IP address of an open Element Manager is removed
from the discovery list.
With a No Link Status, the State field displays one of the following
messages:
• Never Connected. A network connection was never
established between the Director and the Server platform.
Verify the IP addresses, the Ethernet local area network (LAN)
physical connection between the Director and Server platform,
and other network connections.
• Link Timeout. The network connection that was established
between the Director and Server platform has been lost. Verify
the IP addresses, the Ethernet LAN physical connection
between the Director and Server platform, IP addresses, and
the function of other network components.
• Protocol Mismatch. The Director and the Server platform are
not at compatible software release levels. Update either your
SAN Management application or your firmware version.

Hardware Tab 2-5


Monitoring and Managing the Director
2

• Too Many Sessions. A link is already established between the


Director and another instance of the Server platform. Connect
to the previously established Server platform from your SAN
Management application’s Login dialog box.
• Link Disabled. The IP address of an open Element Manager
was removed from the discovery list.

Status Bar Status Indicator


The Status area in the ID/status bar displays a colored status symbol
that indicates the overall operating status of the Director unit. This
symbol also displays in the status box in the lower left corner of the
window. The operating status is determined by hardware component
failures, which are indicated by status symbols that display over
component graphics in the Hardware tab. For example, for a single
port failure, a red diamond displays on the port connector image in
the Hardware tab. At the same time, a Yellow triangle displays in the
status area to indicate a degraded Director. However, if a blinking red
diamond displays over a non-redundant FRU or all redundant FRUs,
the status bar displays a red diamond, indicating a failure that
requires immediate attention.

Operating Status Symbols in the ID/Status Bar and Status Box


The following table provides meanings for the status symbols that
display in the Status area of the ID/Status Bar at the top of the view
and in the status box at the lower left corner of the view.

2-6 M6140 Director Element Manager User Manual


Monitoring and Managing the Director
2

Table 2-2 Operating Status Symbols in the ID/Status Bar and Status Box

Symbol Status Bar Status Table Text Meaning

Green Circle Fully Operational Indicates that all components and installed
ports are operational; no failures.

Yellow Redundant Failure Indicates that a redundant component has


Triangle failed, such as a power supply, and the
backup component has taken over
operation.

Minor Failure Indicates that a failure occurred that has


decreased operational ability. Normal
operations are not affected.
• One or more Port cards have failed, but
at least one Port card is still
operational.
• A fan has failed or is not rotating
sufficiently.
• All fans have failed.
• One of two CTP cards have failed.
• One of two SBAR cards have failed.
(Director only)

Red Not Operational Indicates that a critical failure prevents the


Diamond Director from performing fundamental
operations.
• Both SBAR cards have failed. (Director
only)
• All installed Port cards have failed.

Square with Never Connected Indicates that product status is unknown.


Black and Link Timeout This occurs if the Ethernet network
Yellow Lines Protocol Mismatch connection between the Server platform
and the Director cannot be established or
Too Many Sessions if the CTP has failed
Unknown Network Address
Incorrect Product Type

For the meanings of status symbols on the status bar, refer to Status
Box and Message Area on page 1-10.

Hardware Tab 2-7


Monitoring and Managing the Director
2

Monitoring Hardware Operation


You can monitor the operating status of the Director using one of the
following methods:
• The Status column of the FRU table
• The Status area in the ID/status bar at the top of the window
• The status box in the lower left corner of the window.
• Green and amber indicators illuminate on each FRU to indicate
either an operational or degraded state. LEDs for individual ports
do not illuminate on port cards in the Hardware tab, but do
illuminate in the Port Card window for each port.
• Status symbols, such as red diamonds and yellow triangles,
appear on FRUs to reflect the overall state of the hardware as
changes occur.
Corresponding or additional descriptions of hardware status and
states also display when you click components to display Properties
dialog boxes.

Monitoring Component Status


This section describes how to determine status of hardware
components through display of status symbols in the Hardware tab.
• Port card attention indicator. The yellow triangle status symbol
containing an exclamation mark ( ) indicates that a state or
condition exists that requires attention. The following problems
might occur with the port card.
— Beaconing for the port was enabled through the Enable
Beaconing option.
— The port is receiving the Not Operational sequence from the
attached device.
— The port has an invalid attachment.
— The Director and attached device are performing a link reset
operation.
— LIN status symbols have been enabled for a port and a link
incident occurs.
— A threshold status has occurred for the port.
— Diagnostics are running on the port.

2-8 M6140 Director Element Manager User Manual


Monitoring and Managing the Director
2

— The Port card may be powered off.

NOTE: For the 64-Port Director only, if a Powered off status displays
for a QPM port module, check to see if this module is installed in slot
0. If so, install this module in another slot since this module is not
supported in slot 0.

Open the Port Card window by double-clicking the port card to


examine individual port status.
• Port card degraded indicator. The yellow triangle status symbol
( ) indicates that the port card is in a degraded state. This could
indicate a problem with an individual port hardware. Open the
Port Card window by double-clicking the port card to examine
individual status. Note that this symbol indicates a more serious
condition exists than when the attention indicator displays.
• Port card failure indicator. The blinking red diamond displayed
on the port card with the amber port card LED illuminated may
indicate that the card has failed. This may also indicate that an
individual port has failed on the card. Open the Port Card
window by double-clicking the port card to examine individual
port status. If an individual port has not failed, the card is at fault.
• CTP card failure indicator. The red diamond ( ) on the CTP
card with the amber LED illuminated indicates that the card has
failed.
• Active CTP card indicator. The green LED on a CTP card
illuminates to indicate that the card is active. Since the redundant
CTP card on the left has failed, this CTP card has become the
active card. If both CTP cards are operational, no LEDs illuminate
on the backup card, while the green LED illuminates on the active
CTP card.
• Power, system error, and unit beaconing indicators. The green
and amber indicators on the far right of the front bezel graphic
simulate the power and system error LEDs on the Director’s
bezel.
— Power Indicator. The green indicator simulates the power
LED on the Director. When the indicator illuminates, the
Director is connected to facility AC power and is operational.
The indicator is on if either power supply is operating.

Hardware Tab 2-9


Monitoring and Managing the Director
2

— System Error Indicator. The amber system error light


indicator simulates the system error light on the Director.
When this indicator illuminates, an event has occurred
requiring immediate attention, such as a system, fan, power
supply, or port failure. View details of system errors by
selecting Logs > Event Log. The indicator in the Hardware tab
and the LED on the unit remain illuminated until you clear the
event by right-clicking the Director graphic, away from a FRU,
and selecting Clear System Error Light from the menu that
displays.

NOTE: If the amber LED flashes, this indicates that unit beaconing
has been enabled for the Director. Enable or disable unit beaconing
by right-clicking on the Director graphic, away from a FRU, and
selecting Enable Unit Beaconing from the menu.

• Power supply failure indicator. When a red diamond displays on


a power supply with the amber Fault indicator illuminated, the
power supply has failed. The backup power supply has taken
over to supply DC voltage to the Director.

NOTE: A green indicator displays and no status symbols appear if the


power supply is working, as shown on the left (position 1) in the
illustration.

• Cooling fan module failure indicator. When a red diamond ( )


displays on a fan module with the amber LED indicator
illuminated, the fan has failed or is rotating insufficiently.
• SBAR card beaconing indicator. The yellow triangle status
symbol ( ) displaying on the SBAR card, with the amber LED
illuminated, indicates that beaconing has been enabled.
• SBAR failure indicator. The red diamond ( ) displaying on the
SBAR card with the amber LED illuminated indicates a card
failure.
Using Menus
Right-click on various parts of the +DUGZDUHtab to display menu
options for displaying status and information and for controlling the
Director and various hardware components.

Director Menu Right-click on any area of the Director illustration where a hardware
component is not installed to display the following menu options.

2-10 M6140 Director Element Manager User Manual


Monitoring and Managing the Director
2

Director Properties

Select this option to display the 'LUHFWRU3URSHUWLHV dialog box. This


dialog box contains the Director name, description, location, and
contact person configured through the &RQILJXUH,GHQWLILFDWLRQ
dialog box. You can also display this dialog box by double-clicking an
area on the screen away from a hardware component.

Set Director Online State

Select this option to display the 6HW2QOLQH6WDWH dialog box. The


dialog box displays the current state (offline or online) and provides a
button for changing the state.

$77(17,21%HIRUHVHWWLQJWKH'LUHFWRURIIOLQHZDUQDGPLQLVWUDWRUVDQG
XVHUVFXUUHQWO\RSHUDWLQJDWWDFKHGGHYLFHVWKDWWKH'LUHFWRULVJRLQJRIIOLQH
DQGWKDWWKHUHZLOOEHDGLVUXSWLRQRISRUWRSHUDWLRQ$OVRUHTXHVWWKDWWKH
GHYLFHVDIIHFWHGE\DQLQWHUUXSWLRQRIGDWDIORZEHVHWRIIOLQH

1. Click the 6HW2IIOLQH or 6HW2QOLQH button to toggle between the


states.
2. When the 6HW2QOLQH or 6HW2IIOLQH warning dialog box displays,
click 2. to set the 64-Port Director online or offline.
As the Director goes offline, the word, “OFFLINE,” displays in the
6WDWH field in the left corner of the +DUGZDUHtab. As the Director goes
online, the word, “ONLINE,” displays in the 6WDWH field in the top
right part of the +DUGZDUHtab. When going offline, LED indicators
on all ports with attached devices stay green, but the Director sends
offline sequences (OLS) to these devices.

Port List Tab


You can see a list of ports in the Director on the Port List window. To
open the Port List window, click the Port List tab.
The Port List tab displays the following information on all ports that
can be installed in the Director. All information is updated
automatically.

NOTE: If an XPM port is installed, unaddressable ports are not displayed in


this tab.

Port List Tab 2-11


Monitoring and Managing the Director
2

• 3RUW#. The physical port number.


• FC Address. The full Fibre Channel address of the port in
hexadecimal format. For example, the address for port 31 may be
_1F_. The underscore character (_) indicates bytes that are not
available until the port logs in. If port addresses have been
swapped, those addresses are followed by an asterisk (*).
• Name. The port name as configured through the Configure Ports
dialog box.
• Block Config. Possible values are:
— Blocked by user or by port fencing trigger. Devices
communicating with the port are prevented from logging into
the Director or communicating with other devices attached to
Director ports. A blocked port continuously transmits OLS
signals.
— Blocked by hardware type change. Displays if an existing
port card, such as an FPM or UPM card, is replaced by a QPM
card (140-Port Director only). The change in cards causes all
existing port configuration parameters to reset to default QPM
values, and the reset occurs as soon as the QPM card is
inserted in the Director chassis.
— Consequently, the QPM ports are set to a blocked state until
port parameter values can be reconfigured and the ports are
unblocked.
— This state also displays if a QPM card is replaced by a UPM or
FPM card.
— Unblocked: Devices communicating with the port can log into
the Director and communicate with devices attached to any
other unblocked port in the same zone.
• State. The following port operational states may display in this
table. For more information about these states, refer to the
Symbols and Indicators section.
— No Light
— Online
— Offline
— Beaconing
— Link Reset

2-12 M6140 Director Element Manager User Manual


Monitoring and Managing the Director
2

— Not Operational
— Invalid Attachment
— Port Failure
— Segmented E_Port
— Link Incident
— Testing
— Inactive
• Type. The type of port.
— G indicates for G_Port. This displays if nothing is logged into
the port.
— F indicates for F_Port. This displays if a device is logged into
the port.
— E indicates for E_Port. This displays if the port is connected to
another Director’s E_Port through an ISL.
— Unknown. Port type cannot be determined.
If a port is configured to be a specific port, that configured
type displays regardless of whether the port is connected to
anything.
• Operating Speed (Gb/s). This column indicates the speed at
which the port is operating. Possible values are 1, 2, 4 Sustained, 4
Burst, and Not Established. If the port is logged in to a device, the
operating speed displays the actual connected speed. If the port is
not connected, the operating speed displays the configured
speed. If the port is configured for Negotiate, but the port is not
logged in, then Not Established displays.
If a QPM card (Director only) is installed and configured for
sustained 4 Gb/s operation, two of the card's ports are disabled
for general use and support the two sustained ports.
Consequently, this column may display the message Supports port
xx where xx is the port number of the sustained 4 Gb/s port. This
message, combined with a value of Inactive in the State column,
identifies which ports are unavailable for general use.

Port List Tab 2-13


Monitoring and Managing the Director
2

• Alert. This column displays a yellow triangle with exclamation


mark ( ) if any alert occurs or if the port’s LED is beaconing.
Blinking red diamonds display for port failures or for ports
requiring service. Double-click the row to display the reason for
the alert in the Port Properties dialog box.

FRU List Columns


Using these columns, you can determine information for all installed
FRUs. To view the FRU List columns,select the Hardware tab on the
Element Manager window.

NOTE: When the FRU List column is minimized, a small column with the
title FRU LIST displays vertically.

The FRU List displays the following on the left side of the window:
• )58 The FRU type and its components. The meanings of FRU
acronyms are:
— BKPLNE. Backplane. (Director only).
— CTP. Control processor card.
— SBAR. SBAR card. (Director only)
— Port card.
For the fiber port card, the following acronyms may display to
indicate the card’s port technology:
• FPM. G_Port, small form factor optics (SFO) pluggable,
FICON port module, 1Gb/s.
• GLSL. G_Port, long wave, single mode LC connector, 1
Gb/s.
• GLSR. G_Port, short wave, single mode, MT-RJ connector,
1 Gb/s.
• GSFM. G_Port, short wave, small form factor, multimode, 1
Gb/s.
• GSML. G_Port, short wave, multimode, LC connector, 1
Gb/s.
• GXXL. G_Port, mixed mode, LC connector, 1 Gb/s.
• GXXL. G_Port, mixed mode, LC connector, 1 Gb/s.

2-14 M6140 Director Element Manager User Manual


Monitoring and Managing the Director
2

• GXXR. G_Port, mixed mode, MT-RJ connector, 1Gb/s.


• QPM. 1, 2, 4 Gb/s Port Module.
• UPM. G_Port, small form factor pluggable (SFP) optics,
universal port module, 2 Gb/s.
• XPM. 10 Gb/s Port Module.
— FAN. Fan module.
— PWR. Power supply.
• Position. Number representing the FRU chassis position. The
chassis (slot) position for a nonredundant FRU is 0. The chassis
positions for redundant FRUs are 0 and 1.
• Status. The FRU status (for example, Active, Backup, Powered off,
Degraded, and Failed).

NOTE: For the 64-Port Director only, if a Powered off status displays for a
QPM port module, check to see if this module is installed in slot 0. If so,
install this module in another slot since this module is not supported in slot 0.

• Part Number. The FRU part number.


• Serial Number. The FRU serial number.

FRU List Columns 2-15


Monitoring and Managing the Director
2

Node List Tab


The 1RGH/LVW tab displays all node ports attached to a Director.
There is a version of 1RGH/LVW for Open Systems management and
one for FICON management.

Open Systems Management Style


In Open Systems management, all virtual node ports logged into an
F_Port display, even though the only differentiating information is
the WWN.
In FICON management style, E_Port connections show in the Node
List, but not in Open Systems management style.
To open this tab, select the Node List tab on the Element Manager
window. All data is dynamic and updates automatically as devices
log in and log out. Double-click a row to display the Node Properties
dialog box.
Information that displays for each node includes the following:
• Port #. The port’s number.
• FC Address. The full Fibre Channel address of the port in
hexadecimal format. For example, the address for port 31 may be
_1F_. This format also displays for E-port connections in FICON
management style. The underscore (_) indicates bytes that are not
available until the port logs in. If the port is not logged in, then
there is no entry in the Node List. If port addresses have been
swapped, those addresses are followed by an asterisk (*).
• Port WWN. The port WWN of the attached node (N_Port). The
8-byte WWN is a set of unique numbers assigned to the device
attached to the port. The WWN is prefixed by the manufacturer’s
name of the host bus adapter that attaches to the device. If there is
a nickname assigned the nickname displays instead of the WWN.
• Nickname. The node’s alternate name.
• Unit Type. The following information, if supported, is supplied
by the attached device:
— Channel path ##, where ## is replaced with the Channel Path
Identifier (2 hex digits)
— Communications controller

2-16 M6140 Director Element Manager User Manual


Monitoring and Managing the Director
2

— Converter
— Direct access storage
— Gateway
— HBA
— Host
— Hub
— Integrated CTC adapter
— Magnetic tape
— Module
— Other
— Printer
— Proxy-agent
— Software driver
— Stand-alone CTC adapter
— Storage subsystem
— Storage device
— Domain ID displays as absolute domain ID (legacy domain ID).
Either absolute domain ID, legacy domain ID or both may
display.
— Terminal (full screen)
— Terminal (line mode)
— Unit record (input)
— Unit record (output)
— Unknown
— Unspecified

NOTE: The unit type comes directly from the device’s sense ID when the
device attaches to the port during login. If the connection is lost, the type
displays as “unspecified” since the device is no longer logged into the port.
When the device logs back in, the unit type is updated.

Node List Tab 2-17


Monitoring and Managing the Director
2

• BB_Credit. The buffer-to-buffer credit that the attached node has


available.

FICON Management Style


Information that displays for each node includes the following:
• Port #. The port’s number. An asterisk following the port number
indicates that the port address has been swapped using the Swap
Ports option.
• Address. The logical port address (hexadecimal of port number).
An asterisk following the address indicates that the port address
has been swapped using the Swap Ports option.
• Port WWN. The port WWN of the attached node (N_Port). The
16-digit WWN is a set of unique numbers assigned to the device
attached to the port. The WWN is prefixed by the manufacturer’s
name of the host bus adapter that attaches to the device. If there is
a nickname assigned, the nickname displays instead of the WWN.
• Nickname. The node’s alternate name.
• Node Type. The port type, such as G_Port or F_Port.
• Serial #. The serial number of the node, if known.
• TAG. An interface ID that uniquely identifies the physical
location of the attached device.
• Type. The attached device type, such as F_Port or E_Port.
• Model. The attached device’s model number.
• Class. The class to which the attached device belongs. For a
Switch, Domain ID displays as absolute domain ID (legacy
domain ID). Either absolute domain ID, legacy domain ID or both
may display.
• Protocol. The protocol supported by the attached device, such as
FC-SB-2, FC-SB-3, and so on.
• BB_Credit. The buffer-to-buffer credit that the attached node has
available.

2-18 M6140 Director Element Manager User Manual


Monitoring and Managing the Director
2

Defining Nicknames
You can assign a nickname to an attached node that has more
meaning for your environment than the node’s WWN.
To assign a nickname:
1. Right-click a row in the Node List tab and select Define Nicknames.
2. Enter a name of up to 128 characters in the Nickname field.
3. Click OK.
The nickname displays in the Nickname column.

Performance Tab
Using the Performance tab, you can see performance information for
all ports. To open this window, select the Performance tab on the
Element Manager window.

NOTE: When the check box labeled Port Addresses (hex) is checked, port
numbers in the graphs and the header of the Statistics panel are displayed by
hex addresses instead of port numbers. Hex display format is two-character
upper-case hex bytes.

The Performance tab provides a graphical display of performance for


all ports. Each bar graph in the upper portion of the tab displays the
percentage of link utilization for the port. This information updates
every five seconds. A red arrow marks the highest utilization since
the opening of the Performance tab. If the system detects activity on a
port, it represents minimal activity with one bar.
The following topics describe 3HUIRUPDQFH tab functions. For
information about port operational states, refer to Port Operational
States on page 2-25.
• Port Statistics on page 2-19
• Clearing Port Statistics on page 2-24
• Using Statistics for Troubleshooting on page 2-25

Port Statistics To select and display more detailed performance information for a
port, click the port’s bar graph. The bar graph for that port highlights

Performance Tab 2-19


Monitoring and Managing the Director
2

with a darker background and the lower portion of the Performance


tab displays the statistics values for the port’s number and the WWN
decoding.
The Statistics Values tables contain cumulative port statistics and error
statistics for transmit and receive traffic, class 2 and 3 statistics,
operational statistics, and error categories. Click a category in the left
frame of the statistics area to display only statistics for that category
or click All to display values for all categories.

NOTE: There are not thresholds for these values. You may determine that a
problem exists by the rate that the value changes. For example, low
BB_Credit can occur if data is sent to a device faster than it can consume the
frames. This can back up into ISLs and cause degraded performance.

An asterisk following port addresses or port numbers in the


Performance tab indicates that the port address has been swapped
using the Swap Ports option

Statistics Description The Statistics Values selections display statistics in the following
groups.To refresh tables with the latest data, click the Refresh button
on the upper right portion of the Statistics Values panel or click the
port’s bar graph. Clear all counters for all users by clicking the Clear
button.

Class 2 Statistics

The following Class 2 Statistics display:


• 5HFHLYHG)UDPHV The number of Class 2 frames received by this
F_Port from its attached N_Port.
• 7UDQVPLWWHG)UDPHV The number of Class 2 frames transmitted
by this F_Port to its attached N_Port.
• %XVLHG)UDPHV The number of F_BSY frames generated by this
F_Port against Class 2 frames. This can occur if frames are
received before the Director completes initialization or if the
Director is servicing so many requests that it cannot process a
new request. The port generates frames if the Director is not
ready to accept commands. This may indicate temporary
congestion.

2-20 M6140 Director Element Manager User Manual


Monitoring and Managing the Director
2

• 5HMHFWHG)UDPHV The number of F_RJT frames generated by this


F_Port against Class 2 frames. These frames usually occur
because of attached device errors. The device is expected to
correct the error based on the reject code, then retry its request. If
the device is able to recover, there is no cause for concern. If not,
further troubleshooting may be necessary. There are no
thresholds for this value. Typically, this occurs because the
destination is not available due to the device’s action.
• )RXU%\WH:RUGV5[ The number of four-byte words received.
• )RXU%\WH:RUGV7[ The number of four-byte words transmitted.

Class 3 Statistics

The following Class 3 Statistics display:


• 5HFHLYHG )UDPHV The number of Class 3 frames received by this
F_Port from its attached N_Port.
• 7UDQVPLWWHG)UDPHV The number of Class 3 frames transmitted
by this F_Port to the attached N_Port.
• 'LVFDUGHG)UDPHV The number of Class 3 frames discarded,
including multicast frames with bad D_IDs. The Director
increments this count when it discards a frame that cannot be
routed. This occurs most frequently when a destination becomes
unavailable without the source realizing the destination is
unavailable. There are no thresholds for this value. Typically, this
occurs when the destination is not available due to the
destination device’s action.
• )RXU%\WH:RUGV5[ The number of four-byte words received.
• )RXU%\WH:RUGV7[ The number of four-byte words transmitted.

Error Statistics

Port errors indicate that a port is not operating correctly. Use this data
to isolate problems with port and link operations. Error statistics
include the following:
• /LQNIDLOXUHV A link failure was recorded in response to a not
operational sequence (NOS), protocol timeout, or port failure. On
the LIM Card window, a yellow triangle appears to indicate a link
incident, or a blinking red diamond appears to indicate a port
failure.

Performance Tab 2-21


Monitoring and Managing the Director
2

• 6\QFORVVHV A loss of synchronization was detected because the


attached device was reset or disconnected from the port. On the
LIM Card window, a yellow triangle appears to indicate a link
incident.
• 6LJQDOORVVHV A loss of signal was detected because the attached
device was reset or disconnected from the port. On the /,0&DUG
window, a yellow triangle appears to indicate a link incident.
• 3ULPLWLYHVHTXHQFHHUURUV An incorrect primitive sequence was
received from the attached device, indicating a Fibre Channel
link-level protocol violation. On the /,0&DUG window, a yellow
triangle appears to indicate a link incident.
• 'LVFDUGHGIUDPHV A received frame could not be routed and was
discarded because the frame timed out (insufficient
buffer-to-buffer credit) or the destination device was not logged
into the Director.
• ,QYDOLGWUDQVPLVVLRQZRUGV The number of times that the
Director detected invalid transmission words from the attached
device. This indicates that a frame or primitive sequence arrived
at the Director’s port corrupted. This corruption can be due to the
attached device performing a reset, plugging or unplugging the
link, bad optics at either end of the cable, a bad cable, or a dirty or
poor connection. Moving the connection around or replacing
cables can isolate the problem.
Some number of invalid transmission words are expected and
acceptable. Invalid transmission words within a frame are used to
produce the bit-error threshold link incident. If one or more
invalid transmission words are detected in 12 separate 1.5-second
samples within five minutes, a bit-error threshold link incident is
generated.
• &5&HUURUV A received frame failed a cyclic redundancy check
(CRC) validation, indicating the frame arrived at the Director’s
port corrupted. Frame corruption may be caused by device
disconnection, an optical transceiver failure at the device, a bad
fiber optic cable, or a poor cable connection.
• 'HOLPLWHUHUURUV The number of times that the Director detected
an unrecognized start-of-frame (SOF) delimiter, an unrecognized
end-of-frame (EOF) delimiter, or an invalid class of service. This
indicates that the frame arrived at the Director’s port corrupted.
This corruption can be due to plugging/unplugging the link, bad

2-22 M6140 Director Element Manager User Manual


Monitoring and Managing the Director
2

optics at either end of the cable, a bad cable, or dirty or poor


connections. Moving the connection around or replacing cables
can isolate the problem.
• $GGUHVV,'HUURUV A received frame had an unavailable or
invalid Fibre Channel destination address, or an invalid Fibre
Channel source address. This typically indicates the destination
device is unavailable.
• )UDPHVWRRVKRUW A received frame exceeded the Fibre Channel
frame maximum size or was less than the Fibre Channel
minimum size, indicating the frame arrived at the Director’s port
corrupted. Frame corruption may be caused by device
disconnection, an optical transceiver failure at the device, a bad
fiber optic cable, or a poor cable connection.

Operational Statistics

The following Operational Statistics display for a selected port:


• 2IIOLQHVHTXHQFHV5[ The number of offline sequences that the
port has received.
• 2IIOLQHVHTXHQFHV7[ The number of offline sequences that the
port has transmitted.
• /LQNUHVHWV 5[DQG7[  The number of link reset protocol frames
received/transmitted by this port from/to the attached device.
The Director transmits a link reset to initiate the link reset
protocol or recover from a link timeout. This occurs normally to
establish BB_Credit or on any port in order to recover lost
BB_Credit. The Director receives a link reset from an attached
device if the device wishes to initiate the link reset or recover
from a link timeout.

Traffic Statistics with Receive and Transmit Values

The following Traffic Statistics display for a selected port:


• /LQNXWLOL]DWLRQ There are separate values for transmit (Tx) and
receive link utilization (Rx). The larger of these two values
displays on the bar graph.
The current link utilization for the port is expressed as a
percentage. Each port can transmit or receive data at 100 Mb/s if
the port is set to 1 Gb/s. If the port is set to 2 Gb/s, the port can
transmit or receive data at 200 Mb/s.This statistic shows the

Performance Tab 2-23


Monitoring and Managing the Director
2

percentage of the maximum link utilization currently being used.


Link utilization is calculated over one-second intervals. The
maximum link utilization is 100%.
• )UDPHV5[ The number of frames that the port has received.
• )UDPHV7[ The number of frames that the port has transmitted.
• )RXUE\WHZRUGV5[ The number of words that the port has
received.
• )RXUE\WHZRUGV7[ The number of words that the port has
transmitted.
• )ORZVUHURXWHGWR,6/ This displays whether or not the optional
Open Trunking feature is installed. A value only displays if Open
Trunking is installed, the port is connected to an ISL, and flows
were being rerouted. This is the number of Fibre Channel traffic
flows that were rerouted to this ISL from another ISL due to
congestion.
• )ORZVUHURXWHGIURP,6/ This displays whether or not the
optional Open Trunking feature is installed. A value only
displays if Open Trunking is installed, the port is connected to an
ISL, and flows were being rerouted. This is the number of Fibre
Channel traffic flows that were rerouted from this ISL to another
ISL due to congestion.

Clearing Port Statistics Use these steps to clear statistics counters on the Performance tab for a
selected port or all ports on the Director.
1. Select a port’s bar graph in the Performance tab.
2. Select the Clear button to display the Clear Port Statistics dialog
box.
3. Select one of the following options:
• This port xx only (xx is port number)
• All ports on director (or switch)
4. Click OK.

2-24 M6140 Director Element Manager User Manual


Monitoring and Managing the Director
2

Using Statistics for Troubleshooting


As a general rule, you should clear all counts after the system is
stabilized. When looking at the Performance tab, consider the
following points:
• Roughly keep track of the time interval when errors accumulate
to judge the presence and severity of a problem.
• Recognize that there is a link recovery hierarchy implemented in
Fibre Channel to handle some level of “expected anomalies.”
• In general, only be concerned with error counts that increment
very quickly.

Port Operational States


The following table describes the port operational states and the LED
and attention indicators in the Hardware tab and Port List tab.

NOTE: When a port is actively exchanging frames, the port’s LED does not
blink on the Hardware or Line Module views

Table 2-3 Port States and Indicators

Port Indicators Port Indicators


Port State Green Amber Alert Indicatora Description

Active Blinking Off Indicates that the port is actively exchanging frames.

Beaconing Off or On Blink Yellow triangle Indicates that the port is beaconing. The amber port
with Exclamation LED blinks once every two seconds to enable you to
Point find a specific port.

Beaconing Blinking Blinking Yellow triangle Indicates that the port is set to beacon mode using a
and Active with Exclamation management interface request and is actively
Point exchanging frames.

Beaconing or Off Blinking Yellow triangle Indicates that the port is set to beacon mode using a
Diagnostics with Exclamation management interface request or is running
Point diagnostics.

On Blinking Yellow triangle Indicates that the port is set to beacon mode using a
with Exclamation management interface request and is active with the
Point attached node (exchanging idles, but not necessarily
logged into the Director) or is running loop back
diagnostics.

Port Operational States 2-25


Monitoring and Managing the Director
2

Table 2-3 Port States and Indicators (continued)

Port Indicators Port Indicators


Port State Green Amber Alert Indicatora Description

Degraded Blinking On Indicates that the port is operating in a degraded


and Active mode and is actively exchanging frames.

Degraded On On Indicates that the port is operating in a degraded


and Idle mode but is still active with the attached node
(exchanging idles, but not necessarily logged into the
Director).

Degraded Off On Yellow Triangle Indicates that the port is operating in a degraded
mode or has failed and requires service.

When a QPM card is configured for sustained 4 Gb/s


operation, a supported port may become degraded
because of a backplane path failure. When the
supporting backplane path fails, constant 4 Gb/s
throughput is not possible. If this situation occurs, the
Port List tab entry for the supported port indicates a
state of Degraded and a Yellow Triangle displays in
the Alert column. The port is operational, but is
performing at only half the desired speed.

Idle On Off Indicates that the port is operational and is active


with the attached node (exchanging idles, but not
necessarily logged in to the Director).

Inactive Off Off Yellow triangle Indicates that the Director port is inactive. Reasons
with Exclamation for this state appear in the Reason field of the Port
Point Properties dialog box.
Note that if port optics have also failed, the amber
LED illuminates.

Invalid On Off Yellow triangle Indicates that the Director port is in an invalid
Attachment with Exclamation attachment state. The reasons for this state appear
Point in the Reason field of the Port Properties dialog box.

Link Incident On or Off Off Yellow triangle Indicates that a link incident occurred on the port.
with Exclamation The status symbol displays in the Port List tab, Port
Point Card window (if available), and Hardware tab.
The green port indicator can be on or off when there
is a link incident; for example, if the ISL is moved
from one port to another on the Director to which the
port is attached, the green light indicator is On.

2-26 M6140 Director Element Manager User Manual


Monitoring and Managing the Director
2

Table 2-3 Port States and Indicators (continued)

Port Indicators Port Indicators


Port State Green Amber Alert Indicatora Description

Link Reset Off Off Yellow triangle Indicates that the Director and the attached device
with Exclamation are performing a link reset operation to recover the
Point link connection. Ordinarily, this is a transient state
that should not persist.

No Light Off Off None Indicates that no signal is being received on the
Director port. This is a normal condition when there
is no cable plugged into the port or when the
attached device’s power is off.

Not Installed Off Off None Indicates the port optics are not installed or the
feature that provides additional port function is not
enabled.

Not Off Off Yellow triangle Indicates that the Director port is receiving the Fibre
Operational with Exclamation Channel not operational sequence (NOS), indicating
Point that the attached device is not operational.

Online On Off None Indicates that the attached device has successfully
connected to the Director and is ready to
communicate or is in the process of communicating
with other attached devices. As long as the port
remains online, the green port LED remains
illuminated. Note that on the port in the unit, the
green LED blinks when there is active Fibre Channel
traffic through the port.

Offline Off Off None Indicates that the Director port was configured as
“blocked” and is transmitting the Fibre Channel OLS
to the attached device.

Off Off Yellow triangle Indicates that the Director port was configured as
with Exclamation “unblocked” and is receiving the Fibre Channel OLS,
Point indicating that the attached device is offline.

Operational Off Off Indicates that the port is operational, but not
communicating with the attached node (offline, no
cable, no light, loss of sync, and so on).

Port Failure Off On Red Blinking Indicates that the Director port has failed and
Diamond requires service. The amber LED for the port
remains illuminated.

Segmented On Off Yellow triangle Indicates that the E_Port is segmented, preventing
E_Port with Exclamation the two fabrics from joining (this only occurs when a
Point Director is connected to another Director).

Port Operational States 2-27


Monitoring and Managing the Director
2

Table 2-3 Port States and Indicators (continued)

Port Indicators Port Indicators


Port State Green Amber Alert Indicatora Description

Testing Off Blink Yellow triangle Indicates that the port is executing an internal
with Exclamation loopback test.
Point

Off Blink Yellow triangle Indicates that the port is executing an external
with Exclamation loopback test.
Point Note: For any loopback test, the amber LED blinks
(beacons) to help users locate the port under test.
The green port indicator is off because ports must be
blocked in order to run diagnostics.

Not Installed Off Off None Indicates the port optics are not installed or the
feature that provides additional port function is not
enabled.
a. The alert indicator displays on the port in the Hardware tab and Port List tab It indicates that a corrective action is
required to return the port to a normal operating state.

Link Incident Alerts


A link incident is a problem detected on a fiber optic link, including
the loss of light, invalid sequences, and other problems. When a
problem occurs, a LIN alert is sent to the Link Incident Log in the
Element Manager. LIN alerts warn you that there is a link incident
being detected through a port connection that may require operator
intervention.
If LIN alerts are enabled for a port in the Configure Ports dialog box,
an yellow triangle with an exclamation mark (attention indicator)
displays by the port connector in the Hardware tab and Line Module
window, Port Card window (if available) and in the Alert column in
the Port List tab.
If LIN alerts have been enabled for a port, the Port Properties dialog
box contains a short description of the latest incident in the Link
Incident field. Or, if there are no active incidents, None displays. The
system writes all link incidents to the Link Incident Log.
If you enable LIN alerts for a port in the Element Manager Configure
Ports dialog box, configure e-mail notification through your SAN

2-28 M6140 Director Element Manager User Manual


Monitoring and Managing the Director
2

Management application, and enable E-Mail Notification through the


Element Manager Maintenance menu, you can receive e-mail
notification of LIN alerts.
The e-mail notification of LIN alerts is available to all users; no
feature permissions are imposed.

Clear Link Incident Complete the following steps to clear the attention indicator in the
Alerts Hardware and Port List tab and the alert description in the Port
Properties dialog box for link incident alerts.
1. Right-click the port with the attention indicator in the Hardware or
the Port List tab and select Clear Link Incident Alert(s) from the
shortcut menu.
The Clear Link Incident Alert(s) dialog box displays.
2. Select one of the following options:
• This port only.
• All ports on Director.
3. Click OK.

NOTE: These alerts may also be cleared by actions outside of your control,
such as rebooting the server platform.

Threshold Alerts
This section provides general information on threshold alerts, such as
descriptions, types of alerts, how you are notified of alerts, and how
alerts are recorded or logged. For detailed procedures to configure
threshold alerts, refer to Threshold Alerts on page 4-48.
A port threshold alert notifies users when the transmit (Tx) or receive
(Rx) throughput reaches specified values for specific Director ports or
port types, (E_Ports or F_Ports).
Select Configure > Threshold Alerts to display the Configure Threshold
Alerts dialog box. Use this dialog box to view, activate, deactivate,
delete, create new, and modify existing alerts. Select New or Modify to

Threshold Alerts 2-29


Monitoring and Managing the Director
2

display a dialog box where you can configure criteria for generating a
threshold alert. One criteria that you must configure is a throughput
value that equals a specific percentage of the total throughput
capacity for a port. You also provide a time interval during which
throughput is measured and a time interval during which that
throughput value must remain constant. When throughput reaches
the threshold value and remains constant for the specified time, an
alert is generated.
You are notified of a threshold alert in the following ways:
• An attention indicator (yellow triangle with exclamation mark)
that displays on the port in the Port Card.
• An attention indicator (yellow triangle with exclamation mark)
that displays on the port card in the Hardware tab.
• An attention indicator (yellow triangle with exclamation mark)
that displays in the Alert column of the Port List tab.
• An attention indicator (yellow triangle with exclamation mark)
that displays by the Threshold Alerts field in the Port Properties
dialog box.
• Detailed threshold alert data recorded in the Threshold Alert Log.

Critical Warning
The critical warning dialog box displays when you perform an
operation that may affect multiple parts of a SAN fabric. For example,
setting a Director offline or activating a new zone set could affect
many parts of the fabric when the fabric re-builds. This dialog box
provides a stopping point so that you can consider the operation
effect and take appropriate action, such as notifying device users.

Using the Critical Warning Dialog Box


To use the dialog box, follow these steps:
1. If the 6HW'LUHFWRUEDFNRQOLQHDIWHUFRPSOHWLRQcheck box displays
in the dialog box, select the check box to place a check mark if you
want the unit to go back online automatically after the
configuration operation that required the offline state completes.

2-30 M6140 Director Element Manager User Manual


Monitoring and Managing the Director
2

For example, the unit goes back online only after the reset
operation completes. Note that this check box does not display if
you are setting the unit offline using the 6HW2QOLQH6WDWH option.
2. When the 2. button becomes available, click it to continue and
perform the operation.
3. Select &DQFHO to abort the operation.

Critical Warning 2-31


Monitoring and Managing the Director
2

2-32 M6140 Director Element Manager User Manual


3
Using Product Menus

This section describes how to use the options that display on the
Product menu.
‡ 0DQDJHPHQW6W\OH  
‡ 1DPH'LVSOD\ 
‡ 3RUW  
‡ )58  
‡ &OHDU6\VWHP(UURU/LJKW  
‡ (QDEOH8QLW%HDFRQLQJ  
‡ 3URSHUWLHV  
‡ &ORVH 

Using Product Menus 3-1


Using Product Menus
3

Management Style
This option provides a secondary menu with radio buttons for Open
Systems and FICON management styles. These options change some
Element Manager dialog boxes and options to allow management of
the Director in open systems or FICON environments.

Open Systems
Click this button for (non-FICON) Fibre Channel environments.

FICON
Typically, click this button when attaching an IBM S/390 Parallel
Enterprise or zSeries server to the Director and implementing inband
Director management through a Fibre Connection (FICON) channel.
If Director firmware level is below 6.0 and the FICON Management
Server feature is enabled, the default management style is FICON.
The management style can be changed to Open Systems with the
FICON Management Server feature enabled.
If firmware versions below 6.0 are installed on the Director, you need
to take the Director offline before changing the management style.

Name Display
This option provides a secondary menu with buttons for NickName
and World Wide Name.

NickName
Click this button to display the NickName in Element Manager
windows.

World Wide Name


Click this button to display the World Wide Name in Element
Manager windows.

Port
This option provides a secondary port menu only when the Hardware
tab, Port List tab, or Performancetab displays in the panel. To use this
menu for a specific port, right-click a port on the Hardwaretab, a port
row in the Port Listtab, or a port bar graph in the Performancetab. The

3-2 M6140 Director Element Manager User Manual


Using Product Menus
3

menu contains the following options which are identical to those that
display when you right-click the port, port row, or port bar graph in
those tabs.

Port Properties
Select this option to display thePort Properties dialog box. This dialog
box displays technical information about the port.
For more information, click the Help button on the Port Properties
dialog box.

Node Properties
Select this option to display theNode Properties dialog box. Note that
if a node is not logged into the port, a message appears indicating
that node information is not available.
For more information, click the Help button on the Node Properties
dialog box.

Port Optics
This dialog box displays port technology and extended identification
data for selected ports.

Opening the Dialog 1. Right click a port in the Port Card view
Box
2. Select Port Optics to display the Port Optics Information dialog box.

Fields and Information is divided into Port Technology and Extended Information
Components sections.

Port Technology

Field Description

Port # The port number.

Connector Type Always LC.

Transceiver Type Longwave laser LC or shortwave laser LC.

Port 3-3
Using Product Menus
3

Field Description

Distance The general distance range for port transmission. This can be
either short to long distances for the longwave laser LC
transceiver, or short distances for the shortwave laser LC
transceivers. Distances can be short, intermediate, medium,
long, and very long.

Media The Fibre Channel mode and optic size. For the longwave
laser LC transceiver, this would be singlemode 9-um. For the
shortwave laser LC transceiver, this would be Multi-mode
50-um, 62.5-um, or 50/62.5 um.

Speed Depending on the Switch or Director model, this displays as


either 1 Gb/s, 2 Gb/s, 4 Gb/s, or 10 Gb/s. Multiple speed
support could display as 1, 2, 4 Gb/s. Note that only 1 Gb/s
ports operate in a 1 Gb/s Switch or Director.

Extended Information

Extended Information

Extended ID The extended ID.

Vendor Name The vendor name.

Vendor Part #. The vendor part number.

Revision The revision number.

Serial # The serial number.

Date Code The manufacture date.

Fiber Used - Max Length This displays possible link lengths based on the fiber type
table installed. Fields are blank if data is not available.

Using the Dialog Box Review the technology and extended information for the port, then
click &ORVH to close the dialog box.

Block Port
Click this check box to display a check mark and block port
transmission. If blocked, a node attached to the port is prevented
from logging into the Director or communicating with other devices
attached to change ports. A blocked port continuously transmits

3-4 M6140 Director Element Manager User Manual


Using Product Menus
3

offline sequences (OLS). Click to remove the check mark and unblock
the port. If unblocked, a node attached to the port can communicate
with the Director and communicate with other nodes attached to the
Director.

Enable Beaconing
Click this check box to make the amber LED by the port blink on the
Director and the amber indicator blink for the port in the +DUGZDUH
tab. This enables users to locate the unit where the port is located.
When a blinking amber LED indicator displays by a port, an attention
indicator ( ) displays below the port’s connector in the +DUGZDUH
tab and on the port row in the 3RUW/LVWtab.

Port Diagnostics
Select this option to display the 3RUW'LDJQRVWLFV dialog box. The 3RUW
'LDJQRVWLFV option enables you to run internal and external loopback
tests on any port. To use this option, follow the detailed steps in your
Director 6HUYLFH0DQXDO.

Port Swapping
Select this option to display the6ZDS3RUWV dialog box. Use this
dialog box to swap addresses between ports.

Reset Port
Select this option to display a confirmation dialog box. Click OK on
that dialog box to reset the port. If a switch is attached to the port and
online, this operation sends a link reset to the attached switch,
otherwise this action disables port beaconing for the port. If the port
is in a failed state, such as after failing a loopback test, the reset
restores the port to an operational state, clearing the service required
(amber) LED. The reset does not affect other ports in the switch.

Clear Link Incident Alert(s)


Select this option to display the &OHDU/LQN,QFLGHQW$OHUW V dialog
box. Select the 7KLVSRUWRQO\ button to clear the attention indicator
for the selected port on the +DUGZDUH tab, the 3RUW/LVW tab, and the
3HUIRUPDQFHtab. Select the $OOSRUWVRQVZLWFK button to clear all
ports. In addition, the procedure clears the alert description in port
3URSHUWLHV dialog boxes. If there are no link incident alerts set for a
port, no actions occur. Although you can manually clear link
incidents, they may also be cleared by actions outside of the user
interface, such as when rebooting the Server platform.

Port 3-5
Using Product Menus
3

Clear Threshold Alert(s)


Select this option to display the &OHDU7KUHVKROG$OHUW V dialog box.
Select the 7KLVSRUWRQO\ button to clear the attention indicator for the
selected port on the +DUGZDUHtab, the 3RUW/LVWtab, and the
3HUIRUPDQFHtab. Select the $OOSRUWVRQVZLWFK button to clear all
ports. In addition, the procedure clears the alert description in port
3URSHUWLHV dialog boxes. If there are no threshold alerts set for a port,
no actions occur. Although you can manually clear thresholds, they
may also be cleared by actions outside of the user interface, such as
when rebooting the Server platform. This action also restarts the
notification interval and the cumulative minutes for utilization %
interval.

FRU
This option provides a secondary menu of options for the FRU. The
options available depend on the FRU selected.

Port Card
Click this option to display the port card window.
You can also access the port card window from the +DUGZDUHtab by
double-clicking a port card or right-clicking and selecting the
appropriate 2SHQmenu option. In the 3RUW&DUGwindow, colored
indicators reflect functions of the LEDs on the port card. The table in
the window displays the port operating state and vital product
information.

Symbols and Indicators

The following information describes the status symbols and LED


indicators that can display on a Director port card in the 3RUW&DUG
window. This includes FPM, UPM, QPM, and XPM port cards.

FPM, UPM, and QPM Port Cards

Refer to the following information for the meaning of the status


symbols and LED indicators that can display on FPM, UPM, and
QPM Port Cards.

3-6 M6140 Director Element Manager User Manual


Using Product Menus
3

• )LUVW/(' The amber indicator at the top of a port card


illuminates when the port card fails. A port card fails when one or
more individual ports fail.
Four sets of green and amber LEDs beneath the amber card status
indicator correspond to the four port connectors installed
vertically down the port card.
• 6HFRQG/(' When the amber LED is blinking (while the green
LED is on) for the first port on the card, and a yellow triangle
displays by the port’s connector, this indicates that beaconing is
enabled for the port and the port is in an online state. Note that if
the amber port indicator flashes and the green indicator is off, the
port is running diagnostics.
The green indicator illuminates when the port is online with an
attached device and fully operational. The green port LED
remains on as long as the port remains in the online state. The
green LED on the physical card flashes when there is active Fibre
Channel traffic through the port. It does not flash in the Port Card
window.
• 7KLUG/(' When the port is operational but not communicating
with an attached device, the green indicator remains off. In this
case, there may not be a fiber cable attached, the device may be
powered off so there is no light from the device, the port may be
blocked, or the link may be recovering.
• )RXUWK/(' If the port fails, the amber indicator for the port
illuminates and a blinking red diamond displays next to the port
connector.
• Yellow 7ULDQJOHZLWK([FODPDWLRQ3RLQW ( ), $WWHQWLRQ
,QGLFDWRU 
A yellow triangle with exclamation point displays next to a port
connector for a variety of reasons:
— Beaconing for the port was enabled through the (QDEOH
%HDFRQLQJ option.
— The port is receiving the Not Operational sequence from the
attached device.
— The port has an invalid attachment.
— The Director and attached device are performing a link reset
operation.

FRU 3-7
Using Product Menus
3

— LIN status symbols have been enabled for a port and a link
incident occurs.
— A threshold status has occurred for the port.
— Diagnostics are running on the port.
— The port card may be powered off.
For the 64-Port Director only, if a Powered off status displays for
a QPM port module, check to see if this module is installed in
slot 0. If so, install this module in another slot since this
module is not supported in slot 0.
‡ <HOORZ7ULDQJOH 'HJUDGHG6\PERO 

NOTE: The degraded symbol, yellow triangle, is not the same as the
attention indicator, yellow triangle with exclamation point.

The degraded symbol ( ), displays in the same location as the


attention indicator ( ), but it supersedes the attention indicator.
For example, a port card with any degraded port displays the
degraded symbol, overriding any attention indicator if
applicable. On the Port Card, the degraded symbol displays at the
appropriate physical port connector, and again can override any
attention indicator for that port. In all cases, the failure indicator
supersedes either the degraded or attention indicator.
When a sustained 4 Gb/s port or a 10 Gb/s port becomes
degraded, the port is marked with a yellow triangle, ( ), which is
the degraded symbol.
3. 5HG'LDPRQG The 3RUW&DUGindicates a failed port by a blinking
red diamond status symbol by the port’s connector. The amber
LED for the port also illuminates.

QPM Port Card View

The QPM card contains four ports that can be configured to run at 1
Gb/s, 2 Gb/s, 4 Gb/s, or to negotiate speed. To obtain sustained 4
Gb/s throughput, the card's physical ports require the adjacent ports'
backplane paths. Consequently, only ports 0 and/or 2 are capable of
sustained mode operation. When ports 0 and/or 2 are configured for
sustained 4 Gb/s, ports 1 and 3 are disabled for general use. The Port
Card for the QPM card contains vertical black bars beside the port 0
and 2 images to identify them as the ports used for 4 Gb/s operation.

3-8 M6140 Director Element Manager User Manual


Using Product Menus
3

Note that when a QPM card is configured for sustained 4 Gb/s


operation, the 6WDWH field displays the value Inactive for ports 1 and 3.
If a backplane path fails, 4 Gb/s throughput cannot be sustained and
the supported port is degraded. This state and the yellow triangle
indicator displays to alert you to this condition.

XPM Port Card

The XPM port card consists of a single 10 Gb/s port that is accessible
to the user. Since this port card uses a slot normally reserved for four
ports, three port numbers are missing from the port card. These
unaddressable ports cannot be accessed for use and cannot
participate in other port interactions. When an XPM port card is
installed, these ports do not display in the following locations:
• Configure Ports dialog box
• Open Trunking dialog box
• Performance tab
• Port List tab
• Preferred Path port selection lists for source and exit ports.
• Threshold Alerts, port selection list
Refer to the following information for the meaning of the status
symbols and LED indicators that can display on the ;303RUW&DUG
window.
• )LUVW/(' The amber indicator at the top of a port card
illuminates when the port card fails or is in a degraded mode. An
XPM port card fails when all of the backplane paths of an XPM
module are unavailable. An XPM port card is degraded if one or
more, but not all, backplane paths are unavailable. You can clear
degraded mode using the 5HVHW3RUWfunction.
One set of green and amber LEDs beneath the amber card status
indicator correspond to the four port connectors installed
vertically down the port card.
‡ <HOORZ7ULDQJOHZLWK([FODPDWLRQ3RLQW( ), $WWHQWLRQ
,QGLFDWRU 
A yellow triangle with exclamation point displays next to a port
connector for a variety of reasons:

FRU 3-9
Using Product Menus
3

— Beaconing for the port was enabled through the (QDEOH


%HDFRQLQJ option.
— The port is receiving the Not Operational sequence from the
attached device.
— The port has an invalid attachment.
— The Director and attached device are performing a link reset
operation.
— LIN status symbols have been enabled for a port and a link
incident occurs.
— A threshold status has occurred for the port.
— Diagnostics are running on the port.
• <HOORZ7ULDQJOH 'HJUDGHG6\PERO 

The degraded symbol ( ), displays in the same location as the


attention indicator ( ), but it supersedes the attention indicator.
For example, a port card with any degraded port displays the
degraded symbol, overriding any attention indicator if
applicable. On the Port Card, the degraded symbol displays at the
appropriate physical port connector, and again can override any
attention indicator for that port. In all cases, the failure indicator
supersedes either the degraded or attention indicator.
When a sustained 4 Gb/s port or a 10 Gb/s port becomes
degraded, the port is marked with a yellow triangle, which is the
degraded symbol.
4. 5HG'LDPRQG The 3RUW&DUGwindow indicates a failed port by a
blinking red diamond status symbol by the port’s connector. The
amber LED for the port also illuminates.

NOTE: The XPM card can operate in a less than optimum mode when one,
but not all backplane data paths are unavailable.

FRU Properties
Select this option to display the )583URSHUWLHVdialog box. The )58
3URSHUWLHV dialog box can also be displayed when you double-click
the FRU in the +DUGZDUHtab.
For more information, click the +HOS button on the )583URSHUWLHV
dialog box.

3-10 M6140 Director Element Manager User Manual


Using Product Menus
3

Enable Card Beaconing


Select this option to enable beaconing. An amber LED on the card
flashes so you can locate it in the chassis.

Block All Ports


Select this option to display a dialog where you can block ports. Click
<HV to block communication between all ports on the FRU Ports that
are blocked continuously transmit offline sequences (OLS).

Unblock All Ports


Select this option to display a dialog box where you can block ports.
Click <HV to unblock all port addresses that are currently blocked.
This allows communication from all port addresses in the Director.

Diagnostics
Select this option to display the 3RUW'LDJQRVWLFV dialog box. Use this
dialog box to run internal and external loopback tests on any or all
ports. This dialog box can also be accessed from the 0DLQWHQDQFH
menu.

Switchover
Changes the backup field-replaceable unit (FRU) to the active state,
and the active FRU to the backup state.

Clear System Error Light


Select this option to turn off the amber system error LED, located
below the green power LED on the Director front bezel.

Enable Unit Beaconing


Click the check box to toggle unit beaconing on or off. When the
check box has a check mark, unit beaconing is on, and the amber
system error light on the Director front bezel blinks to help users
locate the unit in an equipment room. When you click the check box
to remove the check mark, unit beaconing is disabled and the amber
LED goes off. You can only enable beaconing if there are no system
errors (the system error light is off).

Clear System Error Light 3-11


Using Product Menus
3

NOTE: You cannot enable beaconing if the FRU has failed.

Properties
Select this option to display the 3URSHUWLHV dialog box for the Director.
This dialog box contains the Director name, description, location, and
contact person configured through the &RQILJXUH!2SHUDWLQJ
3DUDPHWHUV!,GHQWLILFDWLRQ tab. You can also display this dialog box
by double-clicking an area on the illustration in the +DUGZDUHtab,
away from a hardware component.

Close
Select this option to close the Element Manager window.

3-12 M6140 Director Element Manager User Manual


4
Using the Configure Menu

This section describes how to use the options that display on the
Configure menu.
‡ 2SHUDWLQJ3DUDPHWHUV  
‡ 3UHIHUUHG3DWK 
‡ 3RUWV  
‡ $OORZ3URKLELW0DWUL[ 
‡ 0DQDJLQJ6WRUHG$GGUHVV&RQILJXUDWLRQV  
‡ ),&210DQDJHPHQW6HUYHU 
‡ 2SHQ6\VWHPV0DQDJHPHQW6HUYHU  
‡ )HDWXUHV  
‡ 7KUHVKROG$OHUWV 
‡ 2SHQ7UXQNLQJ  
‡ ([SRUW&RQILJXUDWLRQ5HSRUW  

Operating Parameters
Configure Director operating parameters by selecting Configure >
Operating Parameters to display the Operating Parameters dialog box.
The following sections provide more details about operating
parameters:
• Fabric Tab on page 4-2
• Domain Tab on page 4-5
• Identification Tab on page 4-9
• SNMP Tab on page 4-11

Using the Configure Menu 4-1


Using the Configure Menu
4

• Date and Time Tab on page 4-14


• Interfaces Tab on page 4-15

Fabric Tab The Fabric tab provides access to setting the parameters for fabric
operation. These operating parameters are saved in nonvolatile
random access memory (NVRAM) on the Director. The name is
stored in your SAN Management application.
The following parameters display on the tab.
• R_A_TOV. Configure resource allocation time-out value
(R_A_TOV) in tenth-of-a-second increments. This variable works
with the error detect time-out value (E_D_TOV) to control the
Director behavior when an error condition occurs. Resources are
allocated to a circuit when errors are detected and are not released
for reuse until the time set by the R_A_TOV value expires.
Configure this value in tenths of a second (100 millisecond)
increments in a range of 40 tenths of a second to 100 (10 seconds).

NOTE: Set the same value for R_A_TOV on all Directors and Switches in
a multiswitch fabric. If the value is not the same on all units, the fabric
segments. Also, the value for R_A_TOV must be greater than the value
configured for E_D_TOV.

• E_D_TOV. Error-detect time-out value, which defines the time


that the Switch waits for an expected response before declaring an
error condition. Configure this value in tenths of a second (100
millisecond) increments in a range of 10 tenths of a second to 50
tenths (5 seconds).

NOTE: Set the same value for E_D_TOV on all Switches and Directors in
a multiswitch fabric. If the value is not the same, the fabric segments.

• Priority. Setting this value determines the principal Switch for the
multiswitch fabric. Select Principal (highest priority), Default, or
Never Principal (lowest priority) from the Switch Priority list.
Setting these priority values determines the principal Switch
selected for the multiswitch fabric. For example, if you have three
Directors in the fabric and set one as Principal, one as Default, and
one as Never Principal, the unit set to Principal becomes the
principal Switch in the fabric.

4-2 M6140 Director Element Manager User Manual


Using the Configure Menu
4

If each Switch or Director is set to Principal or Default, the Switch


with the highest priority and the lowest WWN becomes the
principal Switch. Following are some examples of principal
Switch selection when Directors have these settings:
— If three Directors are all set to Default, the Director with the
lowest WWN becomes the principal Switch.
— If you have three Directors and set two to Principal and one to
Default, the Director with the Principal setting and the lowest
WWN becomes the principal Switch.
— If you have three Directors and set two to Default and one to
Never Principal, the Director with the Default setting and the
lowest WWN becomes the principal Switch.
Note that at least one Switch or Director in a multiswitch fabric
needs to be set as Principal or Default. If each Switch or Director is
set to Never Principal, all of the interswitch links (ISLs) segment. If
all but one Switch is set to Never Principal and the Switch or
Director that was principal goes offline, then all of the other ISLs
segment.
In the audit log, you may notice that the Principal setting maps to
a number code of 1, Default maps to a number code of 254, and
Never Principal maps to a number code of 255. The number codes
of 2 - 253 are not currently in use.

NOTE: We recommend you leave the Switch priority setting as Default.

• Interop Mode. Select one of the following options:


— Open Fabric 1.0. This is the default mode. Select this mode if
the fabric contains Brocade or IBM Switches and Directors, as
well as other open fabric-compliant Switches. Select this mode
for managing heterogeneous fabrics.
— McDATA Fabric 1.0. Select this mode if the fabric contains
only Brocade or IBM Switches and Directors that are operating
in McDATA Homogeneous Fabric 1.0 mode.
• ISL Cost. The ISL cost configuration lets you assign equal ISL cost
to all ISLs regardless of their speed. Fabric shortest path first
(FSPF) uses a cost metric to determine inter paths used in a fabric
to route traffic. By default, the firmware assigns a cost of 1000 to 1
Gb/s and 2 Gb/s ISLs (interswitch links) and 100 to 10 Gb/s ISLs.
The formula for determining the cost is based on the speed of the

Operating Parameters 4-3


Using the Configure Menu
4

ISL, as specified by FC-SW-2. Since FSPF uses only minimum cost


paths to route inter traffic, these default costs mean that if a user
adds a 10 Gb/s ISL in parallel with an existing 2 Gb/s ISL, the
Switch uses only the 10 Gb/s ISL because the 10 Gb/s ISL is the
minimum cost path between the Switches. To allow users to
incrementally upgrade to higher speed ISLs, all ISLs can be
assigned an equal cost so both ISLs are used, but more traffic goes
to the 10 Gb/s ISL.
4 Gb/s ISLs by default have a cost of 250. When in equal ISL cost
mode, the 4 Gb/s link would be assigned more traffic than a 1
Gb/s or 2 Gb/s but less than a 10 Gb/s ISL.
The ISL cost configuration is applied on a per Switch basis (not
per port or per ISL). The cost configuration mode is applied to all
ISLs on a Switch.

NOTE: Set the Switch offline to change the ISL cost.

Select an option from the list menu.


— By Port Speed. Select if you want FSFP routing selection to
account for port speed when assigning traffic to ISLs.
— Ignore Port Speed. Select if you want FSFP routing selection
to not account for port speed when assigning traffic to ISLs.
All ISLs have equal cost.

NOTE: We recommend you leave the Switch priority setting as 'HIDXOW. If


you are considering setting this value to something other than default, refer
to the section on principal Switch selection for multiswitch fabrics in the your
6$1(QYLURQPHQW3ODQQLQJ0DQXDOfor details.

Configuring Fabric Operating Parameters


To configure fabric operating parameters, perform the following
steps. Ordinarily, you do not need to change values in this tab from
their defaults.

NOTE: To configure these parameters, the Director must be taken offline.


After entering parameter values and selecting OK in the Operating Parameters
dialog box, a dialog box prompts you to set the Director offline immediately.
You can select an option in this dialog box to set the Director back online after
the configuration changes are made. Setting the Director offline terminates all
Fibre Channel connections.

4-4 M6140 Director Element Manager User Manual


Using the Configure Menu
4

1. Select Configure > Operating Parameters > Fabric tab.


The Fabric tab displays.
2. Change parameter settings as required for this tab.

NOTE: The Enable Remote Fabric option is available through the 256-Port
Director Fabric Tab only.

3. To save changes and close the Fabric tab, click OK.


4. If the Director is online, a Set Switch Offline dialog box displays
informing you that you must be offline to change parameter
values.
To set the Director offline, click Yes. To discard your changes, click
No or Cancel.
After you finish configuring the Director, you can back up the
configuration data.

For more information on backing up configuration data, refer to Back


Up and Restore Configuration on page 7-12.

Domain Tab The Domain tab provides access to setting parameters on the Director
for fabric operation. These domain parameters are saved in NVRAM
on the switch. The name is stored in your SAN Management
application.
• Domain ID Range. The domain identification (Domain ID)
number is a unique identification for the Switch or Director in a
fabric. A distinct ID is automatically allocated to each Director in
the fabric by the principal Switch. A fabric Switch or Director
cannot contain the same domain ID as another Director or their
E_Ports will segment when they try to join as a fabric. The Domain
ID Range options allow you to configure or expand the range of
possible domain IDs in a fabric from the legacy range of 96-127
IDs.
You can configure one of the following modes:
— 239 Domain ID Range - Selecting 239 Domain ID Range, allows
a Domain ID range from 1 to 239. This mode has no offset. If
the Switch or Director does not support 239 domain IDs, this

Operating Parameters 4-5


Using the Configure Menu
4

option does not display. This setting may not be compatible


with Switches or Directors that do not support this range or
are not configured for 239 Domain ID.
— Domain Offset - Selecting the Domain Offset option and value
from the list allows you to configure the domain offset values.
Domain IDs minus the offset are still in the 1-31 range. Values
available in the list are 0, 32, 64, 96 (default), 128, 160, and 192.
This option is not compatible with Switches or Directors using
239 Domain ID or Legacy Domain ID modes.
— Legacy Domain ID - Selecting the default value (96) from the
Domain Offset list sets the Domain ID range at 96-127. This
makes the Switch or Director compatible with switches using
earlier firmware versions.
Note the following important points about the domain ID:
— All Switches in a fabric must be have the same setting for the
domain ID range.
— Display of domain ID in the Element Manager is different
depending on the type of fabric where the Director is located,
compatible domain ID mode of fabric, and Director vendor.
Either the absolute domain ID, the legacy domain ID, or both
display as absolute domain ID (legacy domain ID). The absolute
domain ID is the Switch or Director domain ID plus an offset.
• Preferred Domain ID. Use this field to set a unique domain ID
for the Switch or Director. The default value is 1. Set a value
between 1 and 31. When a Director comes online with a preferred
ID, it requests an ID from the fabric’s principal Switch (indicating
its preferred value as part of the request). If the requested domain
ID is not allocated to the fabric, the domain ID is assigned to the
requesting Director or Switch. If the requested domain ID is
already allocated, an unused domain ID is assigned.
The preferred domain ID must be unique for each Switch or
Director in a fabric. If two Switches or Directors have the same
preferred domain ID and Insistent Domain ID is enabled, the
E_Ports segment, causing the fabric to segment.
• Insistent. When a checkmark displays, the domain ID configured
in the Preferred Domain ID field becomes the active domain
identification when the fabric initializes.
This option is required if Enterprise Fabric Mode (optional
SANtegrity Binding feature) is enabled.

4-6 M6140 Director Element Manager User Manual


Using the Configure Menu
4

If you enable Insistent Domain while the Director is online, the


Preferred Domain ID changes to the current active domain ID if
the IDs are different.

NOTE: If a Switch or Director with a duplicate domain ID exists in the


fabric, both E_Ports will segment when they try to join.

• Rerouting delay. This option is only applicable if the configured


Director is in a multiswitch fabric. Enabling rerouting delay
ensures that frames are delivered in order through the fabric to
their destination. If there is a change to the fabric topology that
creates a new path (for example, a new Switch is added to the
fabric), frames may be routed over this new path if its hop count
is less than a previous path with a minimum hop count. This may
result in frames being delivered to a destination out of order since
frames sent over the new, shorter path may arrive ahead of older
frames still in route over the older path.
If this option is enabled, traffic ceases in the fabric for the time
specified in the E_D_TOV field of the Configure Fabric Parameters
dialog box. This delay allows frames sent on the old path to exit
to their destination before new frames begin traversing the new
path.

NOTE: This option is disabled if Enterprise Fabric Mode (optional


SANtegrity Binding feature) is enabled.

• Domain RSCNs. Domain register for state change notifications


(domain RSCNs) are sent between end devices in a fabric to
provide additional connection information to host bus adapters
(HBA) and storage devices. As an example, this information may
be that a logical path has been broken because of a physical event,
such as a fiber optic cable being disconnected from a port.
Consult with your HBA and storage device vendor to determine
if enabling Domain RSCNs will cause problems with your HBA
or storage products. For example, some host bus adapters (HBAs)
may log out, then log back into the fabric when they receive an
RSCN, thereby disrupting Fibre Channel traffic.

NOTE: This option is required if Enterprise Fabric Mode (optional


SANtegrity Binding feature) is enabled.

Operating Parameters 4-7


Using the Configure Menu
4

• Zoning RSCNs. Fabric format domain RSCNs are sent to Switch


ports following any change to the fabric’s active zone set. These
changes include activating and deactivating the zone set, or
enabling and disabling the default zone. When a device receives
an RSCN, this can disrupt normal activity because the device
must then determine status of other devices. RSCNs can also
cause some devices to write messages to error logs.
• There are two settings possible for this parameter, Suppress on
zone set activations or Isolate on zone set activations.
— Suppress on zone activation changes. Some HBAs may log
out, then log back into the fabric when they receive an RSCN,
thereby disrupting Fibre Channel traffic. When this option is
enabled, fabric format RSCNs are not sent for zone changes to
the attached devices. Consult with your HBA and storage
device vendor to determine if disabling this option (and
thereby enabling RSCN transmission) will cause problems
with your HBA (will an RSCN cause a logout/login) or
storage products.
— Isolate on zone activation changes. When enabled, only
devices that require RSCN notification due to a zoning
configuration change receive RSCNs. Note that this option
does not need to be enabled if Suppress on zone set activations
is enabled, since RSCNs will not be sent to attached devices.
• Node Port Virtualization. Node port virtualization is a method
for assigning multiple Fibre Channel addresses to a single N_Port
port. This feature is mainly used for systems that support
multiple images behind a single node port.

NOTE: Node Port Virtualization does not display for a Director that is not
at the correct firmware level. If a user activates the node port
virtualization feature and the Director is at the correct firmware level,
then an error message displays.

• Director Speed. If the 64-Port Director has a backplane capable of


2 Gb/s speed, then this option displays and lets the user to
choose between 1 and 2 Gb/s. Some of the 64-Port Directors have
backplanes that are only capable of 1 Gb/s. For the 64-Port
Director capable of only 1 Gb/s, the option does not display. This
option does not display for the 140-Port Director.

4-8 M6140 Director Element Manager User Manual


Using the Configure Menu
4

Configuring Domain Operating Parameters


To configure domain parameters, perform the following steps.
Ordinarily, you do not need to change values in this tab from their
defaults. The only exception is the Preferred Domain ID. You may
want to change this value if the Director participates in a multiswitch
fabric.

NOTE: To configure these parameters, including Switch Speed (available on


64-port Director only), the Director must be taken offline. After entering
parameter values and selecting OK in the Operating Parameters dialog box, a
dialog box prompts you to set the Director offline immediately. You can select
an option in this dialog box to set the Director back online after the
configuration changes are made. Setting the Director offline terminates all
Fibre Channel connections.

1. Select Configure > Operating Parameters > Domain tab.


The Domain tab displays.
2. Change parameter settings as required for this tab.
3. To save changes and close the Domain tab, click OK.
4. If the Director is online, a Set Switch Offline dialog box displays
informing you that you must be offline to change parameter
values.
To set the Director offline, click Yes. To discard your changes, click
No or Cancel.
After you finish configuring the Director, you can back up the
configuration data.

For more information on backing up configuration data, refer to Back


Up and Restore Configuration on page 7-12.

Identification Tab The Identification tab provides access to parameters that specify a
Director’s properties. Information, such as product name,
description, and contact, displays in the following Element Manager
locations:
• Element Manager window title panel.
• Director Properties dialog box.

Operating Parameters 4-9


Using the Configure Menu
4

NOTE: The product name set in this dialog box displays in the Element
Manager and the Director icon label in your SAN Management application’s
Physical Map only if it is selected through the product label list on your SAN
Management application tool bar.

Data entered through the following procedure is saved in NVRAM


on the Director. The name is stored in your SAN Management
application.
The following parameters display on the tab.
• Name. The name for the Director (24 characters maximum).
• Nickname. The nickname for the Director.
• Description. The description for the Director (255 characters
maximum).
• Location. The location for the Director (255 characters maximum).
• Contact. The information about a contact person, such as a phone
number, title, or e-mail address (255 characters maximum).

Configuring Identification Operating Parameters


To configure identification for the Director, perform the following
steps.
1. Select Configure > Operating Parameters > Identification tab.
The Identification tab displays.
2. In the Name field, enter a name for the Director.
The name could reflect the Director Ethernet network domain
name service (DNS) host name, if assigned.
3. If you want to use the name in the Name field as a nickname for
the Director WWN, click the Copy button.
The nickname displays instead of the WWN in Element
Managers.
4. In the Description field, enter a description for the Director.
5. In the Location field, enter the location of the Director.
6. In the Contact field, enter appropriate information about a contact
person, such as a phone number, title, or e-mail address.
7. To save changes and close the Identification tab, click OK.

4-10 M6140 Director Element Manager User Manual


Using the Configure Menu
4

After you finish configuring the Director, you can back up the
configuration data.

For more information on backing up configuration data, refer to Back


Up and Restore Configuration on page 7-12.

SNMP Tab

NOTE: Management through SNMP may be optional, depending on your


purchased software package.

The SNMP tab provides access to parameters that allow you to


perform the following tasks.
• Configure the SNMP agent that runs on the Switch or Director
and implements MIBs such as the following:
— MIB-II.
— Fibre Channel Fabric Element MIB.
— Director private MIB.
— Fibre Alliance MIB.
— Enterprise-specific MIB supporting a specific Switch or
Director.
For complete information on objects defined in MIBs and steps to
download MIB variables to your SNMP workstation, refer to the
SNMP Support Manual that supports your Switch or Director
firmware version.
• Configure network addresses and community names for up to six
SNMP trap recipients.
An SNMP trap recipient is a network management station that
receives messages through SNMP for specific events that occur on
the Director.
• Define SNMP community names that SNMP managers use for
reading variables.
• Authorize write permissions for writable MIB variables.

Operating Parameters 4-11


Using the Configure Menu
4

NOTE: SNMP managers may request, but do not receive, traps and SNMP
data through SNMP management stations that are not configured with
community names.

The following parameters display on the tab:


• Enable SNMP Agent. You can enable the SNMP Agent which
allows administrators on SNMP management workstations to
access product management information using any standard
network management tool.
• Enable Authorization Traps. You can enable authorization trap
messages to be sent to SNMP management stations when
unauthorized stations try to access SNMP information from the
Director.
• Fibre Alliance MIB. You can select the version supported on the
Director by clicking on the list in the top right corner of the dialog
box. Selections are 3.0 and 3.1.
• Community Name. You can enter the SNMP community name
for the trap recipient. Enter up to 32 characters. This also defines
community names from which SNMP managers can read MIB
variables from or write MIB variables to the Director.
• Write Authorization. You can enable write authorization for the
community name. A check mark displays in the box to indicate
that write authorization is enabled.
• Trap Recipient. You can enter the IP address for a trap recipient
(SNMP management station) by clicking in the Trap Recipient
column and entering an IP address. The maximum number of
trap recipients is six.
• UDP Port Number. You can enter user datagram protocol (UDP)
port numbers in the UDP Port Number column. You can override
the default UDP port number of 162 with any legal UDP port
number (1 to 65535).

SNMP v3 Operation
When SNMP v3 is enabled through the Command Line Interface
(CLI), the SNMP tab displays Trap Recipients not available here for
SNMP v3 instead of the Trap Recipients table. To use the Trap Recipients
table, you must disable SNMP v3 through the appropriate CLI
command or configure Trap Recipients through CLI commands.

4-12 M6140 Director Element Manager User Manual


Using the Configure Menu
4

Configuring SNMP Operating Parameters


To configure SNMP traps and assign community names, perform the
following steps.
1. Select Configure > Operating Parameters > SNMP tab.
The SNMP tab displays.
2. To enable the SNMP Agent, select the Enable SNMP Agent check
box.
3. To enable authorization trap messages to be sent to SNMP
management stations when unauthorized stations try to access
SNMP information from the Director, select the Enable
Authorization Traps check box.
4. Select the Fibre Alliance MIB version supported on the Director
by clicking on the list in the top right corner of the dialog box.
5. Select a field in the Community Name column to select the row.
Enter the SNMP community name for the trap recipient.
6. Select the Write Authorization check box to enable write
authorization for the community name.
A check mark displays in the box to indicate that write
authorization is enabled.
7. Enter the IP address for a trap recipient (SNMP management
station) by clicking in the Trap Recipient column and entering an
IP address.

NOTE: This step is usually not necessary. If you do not wish to override
the default UDP number, skip to the next step.

8. Enter user datagram protocol (UDP) port numbers in the UDP


Port Number column.
You can override the default UDP port number of 162 with any
legal UDP port number (1 to 65535).
9. Click OK to activate the data on the tab.
The SNMP configuration is stored on the Director.
After you finish configuring the Director, you can back up the
configuration data.

Operating Parameters 4-13


Using the Configure Menu
4

For more information on backing up configuration data, refer to


Backing Up Element Manager Configuration Data on page 7-13.

Date and Time Tab The Date/Time tab provides access to parameters for displaying and
changing the date and time set on the Director. You must set the
current date and time on the Director to record the correct time
stamps in the logs.

NOTE: FICON management style only. If both periodic synchronization and


clock alert mode are enabled, an error results. Disable one of them to fix the
error. To disable periodic synchronization, refer to the following procedure.

The following parameters display on the tab.


• Periodic Date/Time Synchronization. If this check box is
selected, the Server platform periodically synchronizes the
Director time to the Server platforms, and daylight savings time
automatically updates. When the Periodic Date/Time
Synchronization option is selected (check mark in check box), the
Date and Time fields are unavailable.
If the Periodic Date/Time Synchronization check box is not selected,
you can set the Server platforms date and time manually.
• Date. The date uses MM/DD/YYYY format.
• Time. When entering the hours, use the range of 0 to 23, for
minutes and seconds, use the range of 0 to 59.
• Sync Now. Synchronizes the Director date and time with the
Server platform.

NOTE: To disable Switch clock alert mode, refer to Features on page 4-46.

Configuring Date/Time Operating Parameters


To configure the Director date and time, perform the following steps.
1. Select Configure > Operating Parameters > Date/Time tab.
The Date and Time tab displays.
2. Perform one of the following options:
• Option 1: Place a check mark in the Periodic Date/Time
Synchronization check box and click OK. The date and time
synchronizes at the next update period.

4-14 M6140 Director Element Manager User Manual


Using the Configure Menu
4

• Option 2: To immediately synchronize the Director date and


time with the Server platform, click Sync Now.
• Option 3: To synchronize the Director date and time with a
specific date and time that you enter:
• Make sure that Periodic Date/Time Synchronization is
disabled (no check mark in box).
• In the Date or Time field, enter the information that you
want to change.
• To set the date and time on the Director, click OK.
After you finish configuring the Director, you can back up the
configuration data. Note that the Periodic Date/Time Synchronization
setting will not back up.

For more information on backing up configuration data, refer to


Backing Up Element Manager Configuration Data on page 7-13.

Interfaces Tab The Interfaces tab provides access to the following parameters.
• Web. You can enable or disable the Web interface.
• Telnet. You can enable or disable the Telnet access interface.
• Alternate Control Prohibited. You can enable or disable
Alternate Control prohibited.

NOTE: The Alternate Control Prohibited checkbox is only visible for


switches and directors that support alternate control prohibited. Prior
to sending the alternate control prohibited set to the Director, confirm the
warning dialog box that displays that states you are about to disable
alternate configuration control. Also note that the Web Server interface
does not support the 256-Port Director model.

The connectivity parameters include all configuration changes


including, but not limited to blocking ports, beaconing ports,
clearing, LINs, CTP switch over and so on. The alternate
managers include Telnet, the Web Server interface, SNMP, but do
not include the host via inband management. The alternate
control prohibited setting is only controlled by the SAN
Management application and cannot be changed by host
programming.

Operating Parameters 4-15


Using the Configure Menu
4

Configuring Interfaces Operating Parameters


To configure the Director Interfaces parameters, perform the following
steps.
1. Select Configure > Operating Parameters > Interfaces tab.
Web, Telnet, and Alternate Control Prohibited options display.
• When Web or Telnet are enabled, users at remote computers
running client software can access the Director using EFCM
Basic and the Command Line Interface (CLI) or perform other
tasks.
• When the Alternate Control Prohibited is enabled, alternate
control prohibited is on and alternate managers cannot change
FICON Director connectivity parameters.
2. To enable the Web Server interface, select the Enabled check box
next to the Web option.
When this option is selected, the Web Server interface is enabled
on the Director.
3. To disable the Web Server interface, select the option again to
remove the check mark.
When disabled, users at remote computers running client
software cannot access the Web Server interface.
4. To enable Web or Telnet access to the Director, select the Enabled
check box next to the Telnet option.
5. To disable the Telnet access, select the option again to remove the
check mark.
When disabled, Telnet prohibits access through the CLI.
6. To enable the Alternate Control Prohibited interface, select the
Prohibited check box next to the Alternate Control option.
7. To disable the Alternate Control Prohibited interface, select the
option again to remove the check mark.
After you finish configuring the Director, you can back up the
configuration data.

For more information on backing up configuration data, refer to


Backing Up Element Manager Configuration Data on page 7-13.

4-16 M6140 Director Element Manager User Manual


Using the Configure Menu
4

Preferred Path
The Preferred Path feature enables you to influence the route of data
traffic when traversing more than one Director in a fabric. If more
than one ISL connects Switches in your SAN, this feature is useful for
specifying an ISL preference for a particular flow. The data path
consists of the source port of the Switch or Director being configured,
the exit port of that Switch or Director, and the domain ID of the
destination Switch or Director. Each Switch or Director must be
configured for its part of the desired path in order to achieve optimal
performance. You may need to configure Preferred Paths for all
Switches or Directors along the desired path for proper multi-hop
Preferred Path operation.
Specifying Preferred Path for Switch 1 on page 4-18 displays a portion of
a more complex SAN. In this example, let’s specify a path between
the Source Device and the Destination Device A, going through
Switch 1, 2, and 3 (the desired data flow is shown as Data Flow 1). To
configure the path on Switch 1, open the Add Preferred Path dialog box
in Switch 1’s Element Manager. We want data to enter through port
14, so select 14 in the Source Port field. We want data to exit through
port 45, so select 45 in the Exit Port field. We want the destination
device to be Switch 3, so enter Switch 3’s domain ID, which is 3. This
only specifies that data enters and exits Switch 1 through specific
ports on its way to Switch 3. This process does not specify a Preferred
Path for data moving through Switch 2.
To specify paths through Switch 2 (Specifying Preferred Path for Switch
2 on page 4-19), open Switch 2’s Element Manager and enter Switch
2’s source port (11), exit port (21), and destination domain ID (3). The
primary choice for data movement is from Source Device into port 14
and out port 45 on Switch 1, in port 11 and out port 21 on Switch 2,
and through Switch 3 to either Destination Device A or B.

ATTENTION! Activation of a new Preferred Path causes a reroute to occur if


the Preferred Path is different from the current path. In congested
environments, with traffic on the current path, a reroute can cause an out of
order frame (OOOF) at the destination device. Reroutes are a natural activity
in any Fibre Channel fabric when the network is modified. For example,
reroutes occur when ISLs are added or lost or when new Switches are added
to the fabric. Fibre Channel devices are designed to handle errors like
OOOFs, but some send error messages when they occur. In FICON

Preferred Path 4-17


Using the Configure Menu
4

environments, an IFCC error can result from an OOOF. To avoid these error
messages, devices should be varied offline before a Preferred Path is
activated, and returned to online status after the activation.

Specifying Preferred Path for Switch 1

Figure 4-1 Specifying Preferred Path for Switch 1

4-18 M6140 Director Element Manager User Manual


Using the Configure Menu
4

Specifying Preferred Path for Switch 2

Figure 4-2 Specifying Preferred Path for Switch 2

The following rules apply when configuring Preferred Paths:


• The Switch’s or Director’s domain ID must be set to insistent.
• Selection of Destination Domain ID is different, depending on the
type of fabric where the Switch or Director is located, compatible
domain ID mode of fabric, and Switch or Director vendor. Either
the absolute domain ID, the legacy domain ID, or both, display as
absolute domain ID value (legacy domain ID value). You can
configure the legacy domain ID and offsets through the Operating
Parameters dialog box (Domain tab). The absolute domain ID is the
legacy domain ID plus an offset.
• The specified numbers for Source Ports and Exit Ports must be in
the range equal to the number of ports for the Switch or Director
being configured.
• For any source port, only one path may be defined to each
destination domain ID.

Preferred Path 4-19


Using the Configure Menu
4

The Configure Preferred Paths dialog box provides the configuration


for a single Director’s preferred path and provides access to the
following parameters:
• Source Port. The source port of the Preferred Path.
• Source Addr. (Only displays when using FICON Management
Style.) The source address of the Preferred Path.
• Exit Port. The exit port of the Preferred Path.
• Exit Addr. (Only displays when using FICON Management
Style.) The exit address of the Preferred Path.
• Destination Domain ID. The domain ID of the destination
Director. The range of the destination domain ID number is 1
through 31.
The Configure Preferred Paths dialog box displays. The Configure
Preferred Paths dialog box provides the configuration for a single
Director’s preferred path.

NOTE: Some columns may only display when the FICON Management
Style feature has been installed.

NOTE: If an XPM port is installed, unaddressable ports are not displayed


in the port selection lists for source and exit ports.

TIP: You may need to configure Preferred Paths on more than one Director to optimize
load balancing for an entire path between devices.

• Adding a Preferred Path on page 4-20


• Changing a Preferred Path on page 4-21
• Removing a Preferred Path on page 4-22

Adding a Preferred Path


To add a new preferred path, perform the following steps.
1. Select Configure > Preferred Path.
The Configure Preferred Paths dialog box displays.

4-20 M6140 Director Element Manager User Manual


Using the Configure Menu
4

If the Director has not been configured for insistent domain ID, a
warning message displays. If this is the case, close the dialog box
and select Configure > Operating Parameters > Domain tab. On the
Domain dialog box, select the Insistent check box, and click OK.
Return to the Configure Preferred Paths dialog box and continue to
step 2.
2. Click Add.
The Add Preferred Path dialog box displays.
3. Select the source and exit ports, and Destination Domain ID.
TIP: You can also type in an exit port number for future or offline environments.

4. Select the Enable Preferred Paths check box to enable the


configured preferred paths.
When this option is not selected, the preferred path
configurations are not enforced, but the configured paths are
retained for future use.
5. Click OK.
The new route is added to the table on the Configure Preferred
Paths dialog box. The configuration is validated.
6. Click Activate to close the Configure Preferred Paths dialog box.

NOTE: For more information, refer to Preferred Path on page 4-17.

Changing a Preferred Path


To change a preferred path, perform the following steps.
1. Select Configure > Preferred Path.
The Configure Preferred Paths dialog box displays.
2. Select the path you want to change and click Change.
The Change Preferred Path dialog box displays.
3. Change the data as required.
4. Select the Enable Preferred Paths check box to enable the
configured preferred paths.
When this option is not selected, the preferred path
configurations are not enforced, but the configured paths are
retained for future use.

Preferred Path 4-21


Using the Configure Menu
4

5. Click OK.
The data is changed in the table on the Configure Preferred Paths
dialog box.

Removing a Preferred Path


To remove a new preferred path, perform the following steps.
1. Select Configure > Preferred Path.
The Configure Preferred Paths dialog box displays.
2. Select the path you want to remove and click Remove.
3. Click OK on the confirmation message window.

Ports
Use the Configure Ports dialog box to configure names, blocked and
unblocked state, 10-100 km extended distance buffering or RX
BB_Credits, enable or disable link incident (LIN) alerts for ports, port
type, port speed, port binding, and the port binding name.

NOTE: If a Director supports BB credits by port, the 10-100Km column is


replaced by an RX BB Credit column.

NOTE: An asterisk next to the port number indicates port numbers that have
been swapped using the “Port Swapping” configuration option.

When a QPM card’s ports 0 and 2 are configured for sustained 4 Gb/s
operation, ports 1 and 3 are disabled so they can support ports 0 and
2. However, nothing prevents you from configuring ports 1 and 3
with values of your choosing. Then, if ports 0 and 2 are reconfigured
with one of the burst speeds, ports 1 and 3 are set to Active and begin
operating at the values you configured.

4-22 M6140 Director Element Manager User Manual


Using the Configure Menu
4

Table 4-1 QPM Port Speed and Port Type Configurations

1 Gb\s 1 Gb\s 2 Gb\s 2 Gb\s 4 Gb\s 4 Gb\s


attached attached attached attached attached attached
device device device device device device
QPM Port
Configuration Port Type Count Limitation F_Port E_Port F_Port E_Port F_Port E_Port

1 Gb/s G-Port 4 None X X

2 Gb/s G-Port 4 None X X

Negotiate - G-Port 4 Negotiate X X X X


2 Gb/s Max 1 Gb/s and
2 Gb/s only

4 Gb/s Burst F-Port 4 F_Port only, X


no E_Port or
G_Port

4 Gb/s G-Port 2 (0 and 2) 2 Ports per X X


Sustained Card

4 Gb/s Burst F-Port 4 F_Port only X X X


Negotiate

4 Gb/s G-Port 2 (0 and 2) 2 Ports per X X X X X X


Sustained Card
Negotiate

For more information about configuring ports, select from the


following topics.
• Port Parameter Descriptions on page 4-23
• Configuring Ports Open Systems on page 4-30
• Configuring Ports FICON on page 4-32

Port Parameter Descriptions

NOTE: The Configure Ports dialog box contains additional parameters that
you can configure when Open Systems Management Style is enabled. The
following parameter descriptions are labeled as Open Systems Management
style when applicable.

Ports 4-23
Using the Configure Menu
4

Port configuration data for the following parameters is stored in


NVRAM on the Switch. Following are descriptions of parameters that
you can configure in the Configure Ports dialog box.
• Port #. You cannot edit this field. This column identifies the port
number.
— 64-Port Director. The port numbers range from 0-63.
— 140-Port Director. The port numbers range from 0-127 and
132-143. Note that ports 128-131 are internal ports and are not
available for external connections.
• FC Address. The logical port address (hexadecimal of port
number). An asterisk following the address indicates that the port
address has been swapped using the Swap Ports option.
• Name (Open Systems management style only). Enter a name for
the port. The port names display in the Port Properties dialog box
and elsewhere in the Element Manager to identify the port.
Right-clicking in the Name field displays the Clear All Port Names
menu item. Click this option to clear all port names.

NOTE: To identify port numbers for which you want to provide names,
place the cursor over the ports in the Hardware tab. As you move over a
port, a message displays that identifies the slot number where the port is
installed.

To name ports in FICON management style, use the Configure


Addresses dialog box.
• Blocked (Open Systems management style only). Placing a
check mark in the check boxes of this column blocks the operation
of the port. To block ports in FICON management style, use the
Configure Addresses dialog box.
• 10-100Km: This column is for extended distance buffering. You
can enable extended distance for a port even if it is not an
extended distance port. However, enabling extended distance
buffering on a port disables the ability for the port to send
broadcast traffic. When you select this option, the port can
support up to 60 BB_Credits to handle link distances up to 100
km. This enables the port to process 2K frames from attached
devices.

4-24 M6140 Director Element Manager User Manual


Using the Configure Menu
4

If a device is connected and logged in to the fabric when extended


distance is enabled or disabled on the corresponding port, the
Switch sends OLS for five milliseconds to force the device to log
in again and obtain the new BB_Credit value set for the port.
Click Activate and a 10-100Km Confirmation dialog box displays.

NOTE: If a Director supports BB credits by port, the 10-100 Km column is


replaced by an RX BB Credit column.

• RX BB Credit
If a Director supports BB credits by port, the RX BB Credit column
displays instead of the 10-100 Km column. Minimum and
maximum allowable port BB credit values vary by Director. If an
invalid value is entered, An Invalid RX BB Credit error message
displays. The BB Credit value is validated as entered.
Enter a value and click Activate to display a RX-BB Credit
Confirmation box. In addition to the maximum BB credit limit per
port, the total BB credits allocated to all ports cannot exceed the
buffer pool size for a Director that has buffer pools. There are also
maximum BB credit limits per port.

NOTE: For Switches with wide buffer pools, the Configure Ports dialog
box displays the total and available buffers at the bottom of the dialog
box. When information is changed in the RX BB Credit column, this
information also updates.

— If the total exceeds the available, the available buffer count is


shown in red italic bold font.
— If information is entered that exceeds the buffer pool and
Activate is clicked, an error message displays.
For Switches without buffer pools, right-clicking in the RX-BB
Credit column displays a menu with either Set All or Set All to
Maximum choices. Selecting Set All displays a RX BB Credits
dialog box, which allows you to set all ports to a single value. If
an invalid value is entered, a message dialog box displays.
Clicking OK changes the values in the Configure Ports dialog box.
In either case, the values on the Switch are not changed until you
click Activate in the Configure Ports dialog box.

Ports 4-25
Using the Configure Menu
4

For Switches with buffer pools, this menu allows you to Set all...
which sets all ports to a single value or to Distribute which evenly
distributes the pool buffers among all ports. Clicking OK changes
the values in the Configure Port dialog box. Clicking Activate
changes the values on the Director.
If the BB_Credit value that is entered for a port exceeds that port’s
limit, an error message displays the limits. The limits are different
for different Switch and Director models and for different port
types.

NOTE: BB_Credit limits can change with different firmware releases, so


they are not published in a separate document. The error message that
displays always states the correct limits for the affected port.

• LIN Alerts.
A link incident is a problem detected on a fiber optic link, including
the loss of light, invalid sequences, and other problems. When a
problem occurs, a LIN alert is sent to the Link Incident Log in the
Element Manager. LIN alerts warn you that there is a link incident
being detected through a port connection that may require operator
intervention.
If LIN alerts are enabled for a port in the Configure Ports dialog box,
an yellow triangle with an exclamation mark (attention indicator)
displays by the port connector in the Hardware tab and Line Module
window, Port Card window (if available) and in the Alert column in
the Port List tab.
If LIN alerts have been enabled for a port, the Port Properties dialog
box contains a short description of the latest incident in the Link
Incident field. Or, if there are no active incidents, None displays. The
system writes all link incidents to the Link Incident Log.
If you enable LIN alerts for a port in the Element Manager Configure
Ports dialog box, configure e-mail notification through your SAN
Management application, and enable E-Mail Notification through the
Element Manager Maintenance menu, you can receive e-mail
notification of LIN alerts.
The e-mail notification of LIN alerts is available to all users; no
feature permissions are imposed.

• Type. Select each port’s type in this column from the list. As you
select the port type, the port is momentarily set offline.

4-26 M6140 Director Element Manager User Manual


Using the Configure Menu
4

NOTE: If Director firmware level is below 6.0 and FICON management


style is enabled, you cannot change port types unless the optional
SANtegrity Binding feature is installed. If ports are configured as E_Ports
in Open Systems management style, and you install SANtegrity Binding
before changing to FICON management style, the ports remain as
E_Ports when you change to FICON management style. If SANtegrity
Binding is not installed, setting a Director to FICON management style
changes all E_ports to G_Ports.

• Speed (Gb/s). Click the Speed column for a specific port and select
an option. As you select the port speed, which sets the data rate
for the port, the port is momentarily set offline. The following
options can display on the list, in various arrangements
depending on the port card type:
— 1
— 2
— 4 Burst (Type F only) (for QPM card, Directors only)
— 4 Sustained (Module ports 1 and 3 inactive) (for QPM card,
Directors only)
— Negotiate
— Negotiate 2 Max (for QPM card, Directors only)
— Negotiate Burst 4 Max (Type F only) (for QPM card, Directors
only)
— Negotiate Sustained (Module ports 1 and 3 inactive) (for QPM
card, Directors only)
Specific options are available for certain port types.
• For FPM port cards, options 1 and Negotiate display.
• For UPM port cards, options 1, 2, and Negotiate display.
• For QPM ports, all options display and you can set the
speed to 4 Gb/s. Note that only ports 0 and 2 of QPM cards
can be configured for sustained 4 Gb/s operation.
Burst allows the port to connect with 4 Gb/s devices, but
throughput through the port is oversubscribed at this rate.
Sustained allows a full 4 Gb/s rate to be sustained, but
requires an adjacent physical port to be set inactive
(unusable for connection) in order to support the full 4

Ports 4-27
Using the Configure Menu
4

Gb/s throughput on the main port set configured as


Sustained. Only port indexes of 0 and 2 on each QPM
module can be configured to Sustained. If port index 0 is set
to Sustained, port index 1 is automatically set to an Inactive
state. Setting port index 2 to Sustained sets port index 3 to
inactive.
This sets the data rate for the port. Selecting Negotiate allows the
port to negotiate the data speed with an attached device.
When you configure sustained 4 Gb/s for ports 0 or 2, a
confirmation box displays informing you that this setting sets
port xx to inactive, where xx is port 1 or 3. Click OK to continue or
Cancel to stop.
For the Director with firmware 9.0 and above with QPM cards,
right-clicking the Speed column displays a cascading menu with
several options:
— Set All to Defaults lets you set all ports to their default speed
settings, depending on the port card type for each port.
— Set All 2 Gb/s Module Ports lets you set all ports on 2 Gb/s
modules (UPM) to Negotiate, 1, or 2.
— Set All 4 Gb/s Module Ports 0 and 2 lets you set all 4 Gb/s
module (QPM) ports at index 0 and 2 to an appropriate speed
option that is listed in the cascaded menu that displays. Only
ports applicable to the selection are set; for example, Negotiate
Burst 4 Max is set only on QPM ports that are already
configured as Type F, and Sustained is set only on port indexes
of 0 and 2.
— Set All 4 Gb/s Module Ports 1 and 3 lets you set all 4 Gb/s
module (QPM) ports at index 1 and 3 to an appropriate speed
option that is listed in the cascaded menu that displays.
For ports configured as type E or G, the Speed column list displays
Negotiate Burst 4 Max (Type F only) and 4 Burst (Type F only) as
unavailable (grayed out), with a flyover message displaying:
Select a port type of ‘F’ to use this option.

NOTE: These options cannot be selected until the port type is configured
to a type of F.

4-28 M6140 Director Element Manager User Manual


Using the Configure Menu
4

If any of the Burst options are selected for the Speed column, type
E and G options are unavailable (grayed out) leaving only the F
option. These unavailable items have a flyover message
displaying:
Select a Speed choice other than Burst to use this option.
Follow this rule when setting the data speed:
— You cannot configure the speed for 10 Gb/s ports. This field is
read only for those ports.
— You can only select from the available options for each port
type.
— Do not set the port speed greater than the Director speed
(64-Port Director model only). For example, if you set the port
speed to 2 Gb/s and the Director data speed is set to 1 Gb/s,
an error displays stating that port speeds cannot be configured
at higher data rates than the Director speed. An exception to
this example, is QPM ports (140-Port Director only) that use
multiple backplane paths to achieve the 4 Gb/s speed. The
Director speed is set through the Configure Switch Parameters
dialog box for the 64-Port Director model only.
When you change a port’s speed and click Activate on the dialog
box, a confirmation message displays stating that this setting
temporarily disrupts port data transfers.

NOTE: Your Director model, firmware, and port cards may not allow 2 Gb/s
data speeds.

• NPIV Login Limit. The NPIV Login Limit column displays for all
port types. If the NPIV feature is installed, this column displays
whether the feature is enabled or disabled. The NPIV login limit
for the port must be a number between one and 256. If a user
enters a number that is not within that ranges, an error message
displays.
Right-click to access a menu that lets you set all ports to a single
user-specified value. From the right-click menu, select Set all...
and the Set All NPIV Login Limits dialog box displays.

Ports 4-29
Using the Configure Menu
4

NOTE: If you reduce the NPIV login limit on a port, the port must be
offline. In this case, the Element Manager temporarily blocks the port,
and displays a confirmation message stating that one or more ports will
be temporarily blocked. The user can click OK or Cancel to that message.

• Port Binding. Placing a check mark in the check boxes of this


column enables the binding state of the port.
• Bound WWN. Enter the WWN or nickname of the device that is
attached to the port.
— If the check box in the Port Binding column is checked and a
WWN is entered in the Bound WWN field, only the specified
device can attach to the port.
— If the check box in the Port Binding column is checked but no
WWN is entered in the Bound WWN field, no device can
connect to the port.
— If the check box in the Port Binding column is not checked, any
device can connect to the port (provided that the port type
matches and the check box in the Blocked column is not
checked). Any WWN or nickname entered in the Bound WWN
field is stored.
— If you click Activate when the check box in the Port Binding
column is checked and the WWN or nickname in the Port
Binding column does not match the device actually connected
to the port, a Warning! dialog box displays. If you click the
Continue button, the currently attached devices are logged off.
For configuring ports procedures, select from the following topics.
• Configuring Ports Open Systems on page 4-30
• Configuring Ports FICON on page 4-32

Configuring Ports Open Systems


To configure ports in open systems management style, use the
following steps:
1. Select Configure > Ports.
The Configure Ports dialog box displays.

4-30 M6140 Director Element Manager User Manual


Using the Configure Menu
4

2. Type a name that reflects the end device connected through the
port in the Name field. For example, use “XYZ Server,” where
XYZ is the brand name of the Server.
3. Block or unblock operation for a port by clicking the check box in
the Blocked column.
When a check mark displays, the port is blocked.
4. Enable or disable extended distance buffering for the port by
clicking the check box in the 10-100 km column.
When a check mark displays, extended distance buffering is
enabled.
5. If the RX BB Credit column displays, you can enter a value,
especially to adjust BB Credit for ports that use particularly long
physical paths.
Minimum and maximum allowable port BB credit values vary by
Director. If you enter an invalid value, an Invalid RX BB Credit
error message displays. Click Activate and a RX-BB Credit
Confirmation box displays.
6. Enable or disable LIN alerts for the port by clicking the check box
in the LIN Alerts column.
When a check mark displays, LIN alerts are enabled.

NOTE: The factory default for LIN alerts is “enabled.”

7. Select a port type by clicking in the Type field and selecting from
the list.
8. Prevent an unspecified device from being connected to the port
by clicking the check box in the Port Binding column.
9. Set the data speed for the port, by clicking in the Speed column for
the port, and selecting from the list. Selecting Negotiate allows the
port and attached device to negotiate the data rate.

NOTE: Note that your Director model, firmware, and port card may not
allow 2 or 4 Gb/s data speeds.

10. Click the Bound WWN field, and type the WWN or nickname of
the specific device to be connected to the port.

Ports 4-31
Using the Configure Menu
4

11. Use the scroll bar on the right side of the Configure Ports dialog
box table to display additional ports that you want to configure.
12. Activate changes and close the dialog box by clicking Activate.
After you finish configuring the Director, you can back up the
configuration data.
For more information on backing up configuration data, refer to
Backing Up Element Manager Configuration Data on page 7-13.

Configuring Ports FICON

To configure ports in FICON management style, use the following


steps.

NOTE: You cannot configure port names in the Configure Ports dialog box in
FICON management style. Use the Configure Allow/Prohibit Matrix - “Active”
dialog box.

1. Select Configure > Ports.


The Configure Ports dialog box displays.
2. Enable or disable extended distance buffering for the port by
clicking the check box in the 10-100 km column.
When a check mark displays, extended distance buffering is
enabled.
3. If the RX BB Credit column displays, you can enter a value,
especially to adjust BB Credit for ports that use particularly long
physical paths.
Minimum and maximum allowable port BB credit values vary by
Director. If you enter an invalid value, an Invalid RX BB Credit
error message displays. Click Activate and a RX-BB Credit
Confirmation box displays.
4. Enable or disable LIN alerts for the port by clicking the check box
in the LIN Alerts column.
When a check mark displays, LIN alerts are enabled.

NOTE: The factory default for LIN alerts is “enabled.”

4-32 M6140 Director Element Manager User Manual


Using the Configure Menu
4

5. Prevent an unspecified device from being connected to the port


by clicking the check box in the Port Binding column.
6. Set the data speed for the port, by clicking in the Speed column for
the port, and selecting from the list. Selecting Negotiate allows the
port and attached device to negotiate the data rate.

NOTE: Your Director model and firmware may not allow 2 Gb/s data
speeds.

7. Click the Bound WWN field, and type the WWN or nickname of
the specific device to be connected to the port.
8. Use the scroll bar on the right side of the Configure Ports dialog
box table to display additional ports that you want to configure.
9. Activate changes and close the dialog box by clicking Activate.
After you finish configuring the Director, you can back up the
configuration data.
For more information on backing up configuration data, refer to
Backing Up Element Manager Configuration Data on page 7-13.

Allow/Prohibit Matrix
The Allow/Prohibit list displays two options, Active and Stored that
both display a Configure Allow/Prohibit Matrix window that lets you
interact with the Element Manager while the window is open. You
can also minimize, maximize, and close the window from the title
bar. This window can be open continuously and updates
automatically.

NOTE: If FICON CUP Zoning is enabled, zones will affect visibility. See the
Zoning User Manual for more information.

NOTE: Unaddressable or physically absent XPM ports are not displayed in


the matrix.

Allow/Prohibit Matrix 4-33


Using the Configure Menu
4

Figure 4-3 Configure Allow/Prohibit Dialog Box

Field Descriptions • Addr. This read-only field lists the port’s address. Each port in the
Switch has a corresponding port address which is the physical
port number in hexadecimal format.
• Port Name. This user-defined name is assigned to the address.
Up to 24 alphanumeric characters are allowed, including spaces,
hyphens and underscores.
• Blocked. If the box is checked, the port is blocked. Blocked ports
continuously transmit offline sequences (OLS), but cannot
communicate to an attached device. If the box is not checked, the
port is unblocked.
• Port connection array. This area of the dialog box is a matrix of
port addresses that is used to configure connections between port
addresses.
All port addresses for the Switch are listed along the top and left
side of the matrix. The intersection between a vertical and
horizontal row of cells (squares) is where you can either allow or
prohibit connections between two addresses by clicking the cell to
prohibit connection or right-clicking the cell and displaying a
menu of attributes.

4-34 M6140 Director Element Manager User Manual


Using the Configure Menu
4

NOTE: For the 140-Port Director, port addresses 84-87 contain X’s. These
refer to the internal ports 128-131, which cannot have external fiber cable
connections.

The default state of a cell is an empty cell (square), which


represents an allowed connection. The symbol for a prohibited
connection is shown below. Click a cell to add the prohibited
symbol and prohibit connection to that cell. To remove the
prohibit symbol, click the cell again.

Figure 4-4 Prohibited Port Connection Symbol

Move your cursor over the squares in the array to display the
corresponding address. Right-click the array to display the
following menu options:
— Prohibit row. Prohibits connection between all addresses in a
row. In effect, this prohibits connection between a specific
address and all other port addresses.
— Allow row. Allows connection for all port addresses on a row
that are currently prohibited. This allows connection between
a port with a specific address and other allowed ports.
— Prohibit all. Prohibits connection between all port addresses. In
this state, ports in the Switch cannot connect with any other
port address.
— Allow all. Allows a dynamic connection through all port
addresses from which connection is currently prohibited. The
allowed attribute has the lowest precedence and does not
override any other attribute.
— Block all ports. Blocks communication between all ports. Ports
that are blocked continuously transmit offline sequences
(OLS).
— Unblock all ports. Unblocks all port addresses that are currently
blocked. This allows communication from all port addresses
in the Switch.
— Clear all. Clears the prohibit and blocked status of all port
addresses in the Switch.

Allow/Prohibit Matrix 4-35


Using the Configure Menu
4

• CUP Name. This user-defined name is assigned to the control


unit port (CUP). Up to 24 alphanumeric characters allowed,
including spaces, hyphens and underscores. A space is not
allowed as the first character, and the characters are
case-sensitive. This is not a required field.
• Active = Saved. If the Active=Saved option is checked, then the
IPL file cannot be edited and saved if Active=Saved. When the IPL
is opened, the file dynamically updates if the active configuration
changes while the Active=Saved option was enabled.
• Activate. Click to activate the current configuration. A warning
displays before the action occurs.
• Save As. Click to save the current configuration with a name and
description. The saved configuration is stored on Server
platforms and in the Address Configuration Library.
• Cancel. Click to cancel the configuration settings and close the
dialog box without saving. If you click this button after clicking
Save As, your changes are saved and the dialog box closes.

Accessing Active Click Activate and the Allow/Prohibit Matrix Configuration Library
Configurations dialog box displays.

Figure 4-5 Configure Allow/Prohibit Matrix Configuration Library Dialog Box

This dialog box lets you open multiple saved configurations


concurrently. Single or multiple configurations can be opened, edited,
and saved.

4-36 M6140 Director Element Manager User Manual


Using the Configure Menu
4

NOTE: Create a saved version of the configuration and edit the saved version
to minimize the risk of losing current edits. After the edits are completed and
saved, then activate the configuration.

Accessing Stored When editing saved configurations, the matrix displays depressed
Configurations and shaded cells when the matrix cell does not match the saved
configuration.
The IPL file is a special saved configuration file. This configuration is
used if the Director is in the IPL process. If the Active=Saved option is
checked, then the IPL file cannot be edited and saved if Active=Saved.
When the IPL is opened, the file dynamically updates if the active
configuration changes while the Active=Saved option was enabled.

Configuring Port To configure, save, and activate port addresses, use the following
Addresses steps.

NOTE: An asterisk next to the port number indicates port numbers that have
been swapped using the “Port Swapping” configuration option.

1. Select Configure > Allow/Prohibit.


The Configure Allow/Prohibit Matrix - “Active” dialog box displays.
2. Enter information into the appropriate fields.
3. Select the squares to either prohibit or allow connections.
In the previous illustration, port address 07 is prohibited from
communicating with port address 05. Also, Port OC is prohibited
from communicating with all other port addresses.

ATTENTION! Take extreme care when configuring PDCMs for E_Ports as


mistakes can render paths unusable and cause complex routing problems.
These problems can be difficult to detect and sometimes manifest as
end-device issues.

4. Click Save As.


The Save Address Configuration As dialog box displays.
5. Select the Port Name field and enter a name.

Allow/Prohibit Matrix 4-37


Using the Configure Menu
4

Names must be between 1 and 8 characters in length. Valid


characters are uppercase A-Z, 0-9, hyphen (-), and underscore (_).
The name may not be CON, AUX, COMn (where n=1-9), LPTn
(where n=1-9), NUL, or PRN.
6. Select in the CUP Name field and enter a name.
Names must be between 1 and 24 characters. All characters in the
ISO Latin - 1 character set are allowed, except for control
characters. The space character is not allowed in the first
character and characters are case-sensitive. A CUP name is
optional.
7. Click OK to save changes and to close the Save Address
Configuration As dialog box.
8. In the Configure Allow/Prohibit Matrix - “Active”, click Activate to
activate the configuration or click Cancel to close without
activating.

NOTE: If you click Cancel after saving, your configuration is still added
to the library without being activated.

Managing Stored Address Configurations


FICON management style only.
Once address configurations are created through the Configure
>Allow/Prohibit Matrix - “Stored” dialog box they are saved to the
Allow/Prohibit Matrix Configuration Library. Use the Allow/Prohibit
Matrix Configuration Library dialog box to manage address
configurations.

NOTE: This dialog box is only available when FICON management style is
enabled.

To manage saved library entries, complete the following steps.


1. Select Configure >Allow/Prohibit Matrix > Stored.
The Allow/Prohibit Matrix Configuration Library dialog box
displays.

4-38 M6140 Director Element Manager User Manual


Using the Configure Menu
4

Figure 4-6 Address Configuration Library Dialog Box

2. Select a configuration entry by clicking on the row. Then use one


of the procedures below.
To modify a stored configuration
Click Modify. The Configure Allow/Prohibit dialog box displays for
the configuration.
To delete a stored configuration
Click Delete. A warning displays before deletion.
To copy a stored configuration
Click Copy to copy the configuration and rename/describe the
configuration.
When the Copy Address Configuration dialog box displays, provide
a name and description for the configuration. Names must be
between 1 and 8 characters in length. Valid characters are
uppercase A-Z, 0-9, hyphen (-), and underscore (_). The name
may not be CON, AUX, COMn (where n=1-9), LPTn (where
n=1-9), NUL, or PRN. Descriptions must be between 0 and 24
characters in length. Up to 24 alphanumeric characters are
allowed, including spaces, hyphens and underscores. Click OK
and the configuration is added to the library.
To activate a stored configuration
Click the Activate button to activate the configuration and send it
to the Switch for immediate use. A warning displays before the
action occurs.

Managing Stored Address Configurations 4-39


Using the Configure Menu
4

NOTE: If Active=Saved is enabled in by choosing Configure > Configure


FICON Management Server, this overwrites the current IPL address
configuration.

3. Click Close to close the dialog box.

NOTE: During single-CTP firmware upgrades, the Director does not


preserve the Active Allow/Prohibit Matrix configuration after the
upgrade because a POR-type reset is performed, thus loading the IPL
configuration file (the current Active configuration could be lost). This is
an issue only when you are in FICON management Style and have
created an Active configuration file that is different from the last one
stored in the IPL file. Therefore, if you are performing a firmware
upgrade on a single-CTP system and have configured the Allow/Prohibit
Matrix, it is recommended that you set the Active = Saved configuration
check box option in the Allow/Prohibit Matrix dialog box before
performing the upgrade.

FICON Management Server


FICON management style only.
The FICON Management Server is a keyed feature that allows host
control and inband management of the Director through an IBM
System/390® or zSeries 900™ Parallel Enterprise Server™ Server
attached to a port. The Server communicates with the Director
through a FICON channel. Control of connectivity and statistical
product monitoring are provided through a host-attached console.

NOTE: If E/OS 6.0 is installed on the Director, you can install FICON
Management Server and Open Systems Management Server features
simultaneously. Previously, you could only install one of these features at a
time.

For installing and configuring FICON Management Server


procedures, select from the following topics.
• Installing the FICON Management Server on page 4-41
• Configuring the FICON Management Server on page 4-41

4-40 M6140 Director Element Manager User Manual


Using the Configure Menu
4

Installing the FICON Management Server


To install and enable this option, select &RQILJXUH!)HDWXUHV. For
information, refer to Features on page 4-46.

Configuring the FICON Management Server

NOTE: The optional FICON Management Server feature must be installed in


order to perform this procedure.

To configure whether the host is the controlling manager, select


Configure > FICON Management Server. The following options display:
• Enable Management Server. Select this option to enable the
management Server. Select again to disable.
• Parameters. Select this option to display the Configure FICON
Management Server dialog box.
— Director Clock Alert Mode. Select this option to enable the
clock alert mode. If this is enabled, the following occurs when
users set the date and time through the Configure Date and Time
dialog box (Configure menu).
• If you enable Periodic Date/Time Synchronization, an error
message displays indicating that Clock Alert Mode must
be cleared to enable automatic synchronization of the date
and time.
• If you manually set the date and time (Periodic Date/Time
Synchronization is not enabled), a confirmation dialog box
displays. You must click OK on that dialog box to continue
manual configuration.
— Host Control Prohibited. Select this option to prohibit a host
management program from changing configuration and
connectivity parameters on the Director. In this case, the host
program has read authorization only and cannot make
changes. When this option is not selected, a host program can
change configuration and connectivity parameters on the
Director.
— Programmed offline state control. Select this option to enable
a host management program to control the Director’s offline
and online state.

FICON Management Server 4-41


Using the Configure Menu
4

— Code Page. Consider the language required for the port name
display that appears on the Management Server. Language
support is provided through character set 697 for all Extended
Binary-Coded Decimal Interchange Code (EBCDIC) pages.
When planning the installation, select the EBCDIC code page
for displaying host-assigned port names or the CUP name. As
an example, if the code page for Italy is selected and a port
name is assigned in Italian by the host management program,
then the Italian language port name displays in the Element
Manager.
The list displays the code pages that are available for
configuration. The default code page is United States/Canada
00037. For other code pages, refer to the following table.

Table 4-2 Available Code Pages

Code Page Name Code Page Hexadecimal CPGID

United States/Canada 00037 0025

Germany/Austria 00273 0111

Brazil 00275 0113

Italy 00280 0118

Japan 00281 0119

Spain/Latin America 00284 011C

United Kingdom 00285 011D

France 00297 0129

International #5 00500 01F4

To configure the FICON management server, use the following steps.

1. Select Configure > FICON Management Server.


2. To enable the management Server, select the Enable FICON
option.
3. Select the Parameters option to open the Configure FICON
Management Server Parameters dialog box.

4-42 M6140 Director Element Manager User Manual


Using the Configure Menu
4

4. Enable or disable Director clock alert mode by selecting the


Director Clock Alert Mode check box.
When a check mark displays, the alert mode is enabled.
5. Allow or prohibit host control by selecting the Host Control
Prohibited check box.
When a check mark displays, host control is prohibited.
6. Allow or prohibit offline state control by selecting the Programmed
offline state control check box.
When a check mark displays, programmed control of the offline
state is allowed.
7. If necessary, select a code page from the Code Page list.
8. Activate changes and close the dialog box by clicking Activate.
9. Select the Zoning option to open the Configure FICON Management
Server Zoning dialog box.
10. Select the check box to Enable Zoning.
11. Activate changes and close the dialog box by clicking Activate.
After you finish configuring the Director, you can back up the
configuration data.

For more information on backing up configuration data, refer to


Backing Up Element Manager Configuration Data on page 7-13.

Configuring FICON Management Server Zoning

NOTE: The optional FICON Management Server Zoning feature must be


installed to perform this procedure.

Use the following procedure to enable and disable the FICON


Management Server Zoning feature and establish and maintain the
Exempt Hosts list.
1. Select Configure > FICON Management Server > Zoning.
The FICON Management Server Zoning dialog box displays
(Figure 4-7).

FICON Management Server 4-43


Using the Configure Menu
4

Figure 4-7 Configure FICON Management Server Zoning Dialog Box

2. Enable or disable FICON Management Server Zoning by


selecting the Enable Zoning check box.
When a check mark displays, zoning is enabled.
3. Enter or edit up to eight hosts in the Exempt Hosts table. Enter
WWNs in standard format (XX:XX:XX:XX:XX:XX:XX:XX), or by
using a nickname.
4. Activate changes and close the dialog box by clicking Activate.
After you finish configuring the Director, you can back up the
configuration data.

For more information on backing up configuration data, refer to


Backing Up Element Manager Configuration Data on page 7-13.

Open Systems Management Server


The Open System Management Server (OSMS) is a keyed feature that
allows host control and in-band management of the Director through
a management application that resides on an open-systems
interconnection (OSI) device. This device is attached to a port. The
device communicates with the Director through Fibre Channel
common transport (FC-CT) protocol.

NOTE: If E/OS 6.0 is installed on the Switch or Director, you can install
FICON Management Server and Open Systems Management Server features
simultaneously. Previously, you could only install one of these features at a
time.

4-44 M6140 Director Element Manager User Manual


Using the Configure Menu
4

For installing and configuring Open Systems Management Server


procedures, refer to Installing and Configuring the Open Systems
Management Server on page 4-45.

Installing and Configuring the Open Systems Management Server

To install and enable this option, select Configure > Features.


Use this procedure to configure the open systems in-band
management program to function with the Director.

NOTE: The optional Open Systems Management Server feature must be


installed in order to perform this procedure.

To configure the open systems management Server, use the following


steps.
1. To enable the Open System Managment Server, select Configure >
Open System Management Server.
2. Slide your cursor to the submenu and select the Enable OSMS
check box to display a check mark.
3. To prohibit the host management program from changing
configuration and connectivity parameters on the Director, select
Configure > Open System Management Server.
4. Slide your cursor to the submenu and select the Host Control
Prohibited check box to display a check mark.
When control is prohibited, the host program has read-only
access to configuration and connectivity parameters.
After you finish configuring the Director, you can back up the
configuration data.

For more information on backing up configuration data, refer to


Backing Up Element Manager Configuration Data on page 7-13.

Open Systems Management Server 4-45


Using the Configure Menu
4

Features
A feature key is a string of alphanumeric characters consisting of both
uppercase and lowercase characters. The following is an example of a
feature key format: XxXx-XXxX-xxXX-xX.

NOTE: The total number of characters may vary. The key is case-sensitive
and it must be entered exactly, including the dashes.

The feature key, which is encoded with a Director’s serial number,


can only be configured on the Director to which it is assigned.
You can enable the feature key with the Switch or Director online.
However, if a current feature is disabled by activating a new feature
key, you must take the Switch or Director offline before enabling the
new feature key.
In general, adding a feature will not require you to take the Switch or
Director offline. Removing a feature may require that the switch be
taken offline. If a feature is enabled and then removed when you
update with a new feature key, the new feature key may not be sent to
the firmware until the feature is disabled. Warning messages may
display in the following sistuations:
• When you must set the switch or director offline to remove a
feature key.
• When installing a feature causes an IPL operation and
momentary loss of LAN connection.

NOTE: You only need to set the Director offline when a feature functionality
is being removed. If you are adding features or ports, you do not need to take
the Director offline.

NOTE: To set the Switch offline, refer to IPL on page 7-7.

Configuring Feature Keys


To configure a feature key, use the following steps.
1. Select Configure > Features.
The Configure Feature Keys dialog box displays.

4-46 M6140 Director Element Manager User Manual


Using the Configure Menu
4

2. Enter or paste the feature key into the New Feature Key field. The
feature key is a string of alphanumeric characters with dashes.
The key is case-sensitive, so enter the key exactly as printed in the
documentation that you received for the feature.
Feature keys are only valid for a Director with a specific serial
number. They cannot be interchanged between the Director. If an
error stating “Invalid serial number” displays, verify that you
have entered the feature key that was assigned to the Director. To
verify, check the serial number of the Director through the
Director Properties dialog box and compare it to the serial number
listed in the documentation provided with your feature key.
3. Click Update
The new feature set contained in the feature that you just installed
displays in the Features panel. All of the features that are active
are included in the new feature list. If an error stating “Invalid
feature key” displays, verify that you have entered the feature
key correctly.
Icons and format in the Features panel refers to feature status and
feature type.
• A plus (+) icon indicates features have been added from the
update or support has increased for number of ports, sessions,
or devices. Click the icon to display new features.
• A minus (-) icon indicates removed features or decreased
support from the update. Click the icon to display removed
features.
• An hour glass icon indicates that a trial feature is installed.
The expiration date displays after the trial feature name.
• Check marks indicate bundled features. The bundled feature
name displays, followed by an indented list of features in the
bundle.
4. Click on a feature in the Features panel to display a feature
description in the Details panel.
5. Verify that all features will install that you require.
6. Click OK to confirm and enable features displayed.
Warning messages may display:
• To set the Director offline when removing a feature key.

Features 4-47
Using the Configure Menu
4

• When installing a feature causes an IPL operation and


momentary loss of LAN connection.
When you are finished configuring the Director, you can back up the
configuration data.

For more information on backing up configuration data, refer to


Backing Up Element Manager Configuration Data on page 7-13.

Threshold Alerts
Use procedures in this section to perform the following tasks:
• Creating New Alerts on page 4-48
• Editing Alerts on page 4-51
• Activate or Deactivate Alerts on page 4-51
• View Alerts on page 4-52
• Clear Threshold Alerts on page 4-53
For general information on threshold alerts, such as how you are
notified of alerts, how alerts are logged, and types of alerts, refer to
Clear Link Incident Alerts on page 2-29.

Creating New Alerts


Use the following procedure to create a new threshold alert.

NOTE: If virtual switches are configured, you must create new alerts in the
Element Manager launched from the core Switch icon.

1. Select Configure > Threshold Alerts.


The Configure Threshold Alerts dialog box displays.

4-48 M6140 Director Element Manager User Manual


Using the Configure Menu
4

Figure 4-8 Configure Threshold Alerts Dialog Box

If alerts are configured, they display in table format showing the


name of the alert, type of alert (Receive, Transmit, or Receive and
Transmit), and alert state (inactive or active).
2. Click New.
The New Threshold Alert dialog box displays.

NOTE: Edit an existing alert by selecting the alert on the Configure


Threshold Alerts dialog box and clicking Edit to display the Modify
Threshold Alert box. This dialog box is the same as the New Threshold Alert
dialog box except that you cannot modify the alert name.

3. Enter a name from one to 64 characters in length in the Threshold


Alert Name field. All characters in the ISO Latin-1 character set,
excluding control characters, are allowed.
4. Select one of the following from the Threshold Type list:
• Transmit. An alert occurs if the threshold set for transmit
throughput is reached.
• Receive. An alert occurs if the threshold set for receive
throughput is reached.
• Receive And Transmit. An alert occurs if the threshold set for
either receive or transmit throughput is reached. Note that
when you select Switch Performance as the Alert Type, Receive
And Transmit displays and other options are disabled.
5. Enter a percentage from 1 through 100 in the Threshold field or use
the arrow buttons to increase and decrease values.

Threshold Alerts 4-49


Using the Configure Menu
4

When throughput reaches this percentage of port capacity, a


threshold alert occurs.
6. Enter the Notification Interval in minutes. This is teh time in which
throughput is measured and threshold notifications can occur.
The valid range is 5 minutes to 70,560 minutes.
7. Select one of the following for the alert Rule:
• Select If the threshold is ever exceeded if you want the alert to
occur whenever the threshold limit is exceeded.
• Select If the Threshold is exceeded for if you want to specify
cumulative minutes that the % utilization should exist during
the notification interval before an alert occurs. Enter a value in
the field to the right of the selection. The valid range is 1 to the
value set for the Notification interval.
8. For Port Performance, a Port List section displays where you can
select a Port Type or specific, Selected ports. Select the port(s) for
which you want to configure threshold alerts.
• If you select a Port Type, the alert generates for all ports
configured as the port type you selected.
• If you select Selected ports, you can select individual ports by
selecting the check box by each port number or set all ports.
Selecting Set All places a check mark by each port number.
Selecting Clear All clears the check marks by each port number.
9. Click OK. The Configure Threshold Alerts dialog box displays the
name, type, and state of the alert that you just configured.
10. At this point, the alert is not active. To activate the alert, select the
alert information that displays in the Configure Threshold Alerts
table and click Activate.
11. To deactivate an existing alert, select the alert information that
displays in the Configure Threshold Alerts table and click Deactivate.

4-50 M6140 Director Element Manager User Manual


Using the Configure Menu
4

Editing Alerts
Use the following steps to edit an existing threshold alert
configuration.

NOTE: Alerts cannot be edited if they are active. You must deactivate the
alert before deleting it.

NOTE: You may not be able to modify threshold alerts depending on your
firmware version or product model.

1. Select Configure > Threshold Alerts.


The Configure Threshold Alerts dialog box displays.
2. Select the alert in the table that you want to modify.
3. If the Edit button is inactive for the alert, you need to deactivate
the alert.
Select the alert information in the table and click Deactivate.
4. Click Edit.
The Modify Threshold Alert dialog box displays.
5. Make appropriate changes as necessary in the dialog box.
6. Click OK.

Activate or Deactivate Alerts


When you create a threshold alert, it is active. Use the following steps
to deactivate or reactivate an existing threshold alert. In the active
state, notifications are generated for the alert. In the inactive state,
notifications do not occur.
1. Select Configure > Threshold Alerts.
The Configure Threshold Alerts dialog box displays. The port’s
current state, inactive or active, is listed under the State column.
2. To change the state, select the alert by the alert information in the
table.
3. If the alert is active, select Deactivate to change to the inactive
state. If the alert is inactive, select Activate to change to the active
state.

Threshold Alerts 4-51


Using the Configure Menu
4

Delete Alerts
Use the following steps to delete existing threshold alerts.

NOTE: Alerts cannot be deleted if they are active. You must deactivate the
alert before deleting it.

1. Select Configure > Threshold Alerts.


The Configure Threshold Alerts dialog box displays.
2. Select the alert that you want to delete.
3. If the Delete button is inactive for the alert, you need to deactivate
the alert.
Select the alert information in the table and click Deactivate.
4. Click Delete.
A message displays asking you to confirm the deletion.
5. Click Yes.
The alert is removed from the dialog box.

View Alerts
Use the following steps to view existing threshold alerts.
1. Select Configure > Threshold Alerts.
The Configure Threshold Alerts dialog box displays.
2. Select the alert that you want to view.
3. Click Edit.
The Modify Threshold Alert dialog box displays the threshold alert
configuration.
4. Click OK to close the dialog box.
5. Click OK to close the Configure Threshold Alerts dialog box.

4-52 M6140 Director Element Manager User Manual


Using the Configure Menu
4

Clear Threshold Alerts


Use the following steps to clear threshold alerts.
1. Open the Clear Threshold Alerts dialog box:
• For switches, right-click a port in the Hardware, Port List, or
Performance tab and select Clear Threshold Alert(s). For
directors, open the Port Card view, Line Module view (Mi10K
Director), or Performance tab. Right-click a port and select Clear
Threshold Alert(s) from the shortcut menu.
2. Select one of the following options:
• This port only
• All ports on switch (or director)
3. Click OK.

Open Trunking
Open Trunking is only available if the optional Open Trunking
feature is installed. Select Configure > Configure Open Trunking. The
Configure Open Trunking dialog box displays.
Interswitch links (ISLs) connect ports between E_Ports of Fibre
Channel Switches or Directors, creating a multi fabric. Multiple ISLs
may be connected between the Switches or Directors in the fabric.
Data from an attached end-device (Server or storage) flows through
these ISLs to a target end-device connected somewhere in the fabric.
A data flow is data received from a specified receive port that is
destined for a port in a specified target domain (Director). The list of
ISLs that are candidates for being rerouted (to or from) is derived
from the fibre shortest path first (FSPF) algorithm.
The Open Trunking feature monitors the average data rates of all
traffic flows on ISLs (from a receive port to a target domain), and
periodically adjusts routing tables to reroute data flows from
congested links to lightly loaded links and optimize bandwidth use.
The objective of Open Trunking is to make the most efficient possible
use of redundant ISLs between neighboring Switches, even if these
ISLs have different bandwidths.

Open Trunking 4-53


Using the Configure Menu
4

Load-balancing among the ISLs does not require user configuration,


other than enabling Open Trunking. You can modify or “tweak”
default settings for congestion thresholds (per port) and low
BB_credit threshold if desired, however.
In particular, you do not need to manually configure ISLs into “trunk
groups” of redundant links where data can be “off-loaded.”
Candidate links for rerouting flow are identified and maintained
automatically. This means that flow may be rerouted onto a link that
goes to a different adjacent Switch, as long as that link is on the least
cost/shortest path to the destination domain ID.
To install and enable this option, enter the feature key into the
Configure Feature Keys dialog box. Select Configure > Configure Feature
Key to display this dialog box.

NOTE:

NOTE: For more information, refer to Features on page 4-46.

Configuring Open Trunking

To enable Open Trunking for a specific Director and configure


threshold values and event notification options, use the following
steps.
1. Select Configure > Open Trunking.
The Configure Open Trunking dialog box displays.

4-54 M6140 Director Element Manager User Manual


Using the Configure Menu
4

Figure 4-9 Configure Open Trunking Dialog Box

NOTE: Earlier versions of this dialog box may display Credit Starvation
Threshold instead of Low BB Credit Threshold.

NOTE: If an XPM port is installed, unaddressable ports are not displayed


in this dialog box.

2. Enable Open Trunking by clicking Enable Open Trunking option.


A check mark displays in the check box.
3. Set the Congestion Threshold for ports.
Congestion thresholds are used only when a port becomes an ISL.
When the link’s traffic load becomes greater than this percentage,
the link is seen as “congested” and traffic is rerouted (if possible)
to an uncongested link. Note that rerouting may not be possible if
there are no alternate links available or if alternate links are
congested or have no available BB_Credit.
Values in the Threshold % column for ports are percentages of link
bandwidths. Using the default values should work well in most
cases, so this step is not required. However, you can change this
percentage to values in the range of 1% through 99. When the
check mark displays in the Use Algorithmic Threshold check box for
a port, values are computed by the feature’s rerouting algorithm.

Open Trunking 4-55


Using the Configure Menu
4

If you click the check box to remove the check mark, any value
that was previously set in the Threshold % column for the port
displays.
To set the Congestion Threshold use one of these methods:
a. Right-click the Use Algorithmic Threshold column and select
from the following options.
• Set all to Default. Select this option to set all cells in the
Threshold % column to default values.
• Clear All. Select this option to clear all check boxes and
restore values in the Threshold % column to those that were
previously set in the column.
b. Right-click in the Threshold % column and choose from the
following options:
• Set All To xx. Sets all cells in this column to the value (xx)
that you clicked.
— Restore All. Sets all cells in the column to the previous values.
c. Click the check box for a port in the Use Algorithmic Threshold
column to remove the check mark. Then, click in the Threshold
% column and manually enter a value in the range of 1
through 99.

NOTE: If no threshold is entered for a port, a default value is used that is


based on port type (1 Gbps or 2 Gbps) and channel bandwidth. This field
cannot be left blank.

4. Set Event Notification options.


Note that, if enabled, these notifications occur the first time the
events occur. Notifications are not present while the problem
persists.
• Unresolved Congestion. Select this option to enable notification.
If enabled, an “unresolved congestion” entry is made to the
Event Log and an SNMP trap is generated, if trap recipients
are configured through the Configure SNMP dialog box.
An unresolved congestion event occurs when the rerouting
algorithm cannot find a path for rerouting data flow and
relieving congestion on an ISL.

4-56 M6140 Director Element Manager User Manual


Using the Configure Menu
4

• Back Pressure. Select this option to create a back pressure entry


in the Event Log. An SNMP trap is generated if trap recipients
are configured through the Configure SNMP dialog box.

NOTE: Management through SNMP may be optional, depending on


your purchased software package

A back pressure event occurs when the percentage of time the


ISL has no available BB_Credit exceeds the Low BB Credit
threshold. A separate event also occurs when the back
pressure condition ends.
5. Set the Low BB Credit Threshold.

NOTE: Earlier versions of this dialog box may display Credit Starvation
Threshold instead of Low BB Credit Threshold.

NOTE: Using default settings for Low BB_Credit Threshold should work
well in most cases. This step is not required.

This is the percentage of time that the transmitting link has no


BB_Credit. This value is also used when determining routes for a
transmit link. An ISL that has no BB_Credit for longer than this
time percentage cannot be the recipient of traffic rerouted from
other ISLs. Traffic on this ISL may be rerouted by Open Trunking,
even if the ISL is not congested.
Use either of these options:
• Click Default Threshold and a default value (1 to 99%) appears
in the threshold field. If the default is enabled, you cannot
enter values into the field.
• Click in the Threshold field and enter a value from 1 to 99.
6. Click Activate to enable these values on the Director and close the
dialog box.

Export Configuration Report


To save an ASCII file of configuration data currently saved on the
hard drive or a diskette, use the Export Configuration option. Use any

Export Configuration Report 4-57


Using the Configure Menu
4

desktop publishing application to import this ASCII file for viewing


or printing.

NOTE: This file cannot be used to set configuration parameters through the
ElementManager.

For information on using the Export Configuration Report, see the


following topics.
• Report Data on page 4-58
• Exporting a Configuration Report Procedure on page 4-58

Report Data Data in the file includes the following items:


• Product identification. Product data collected in the Configure
Identification dialog box.
• Operating parameters. Operating parameter data collected in the
Operating Parameters dialog box.
• Port parameters. Port data collected in the Configure Ports dialog
box.
• SNMP parameters. SNMP data collected in the Configure SNMP
dialog box.
• Active zoning configuration. The active zone and zone members,
if set, and whether the default zone is enabled or disabled.
• Alternate Control Prohibited. Alternate Control Prohibited
setting that was selected from the Configure menu.

Exporting a Configuration Report Procedure


To export a configuration report, complete the following steps:
1. Select Configure > Export Configuration Report.
The Export Configuration Report dialog box displays.
2. Select the folder where you want to save the file.
3. Type in a file name and extension in the File name field.
4. Click Save.
The file saves to the specified folder as an ASCII text file.

4-58 M6140 Director Element Manager User Manual


5
Using Security Features

This section describes how to use the Security features under the
Security menu.

‡ 3RUW%LQGLQJ 
‡ 6ZLWFK%LQGLQJ  
‡ (QWHUSULVH)DEULF0RGH 
‡ $XWKHQWLFDWLRQ 
‡ 8VLQJWKH6HFXULW\/RJ  
‡ 66/ 
‡ (QFU\SWLRQ 

Using Security Features 5-1


Using Security Features
5

Port Binding
Select this option to display the Port Binding dialog box. Use this
dialog box to allow a device with a specific WWN or nickname to
have exclusive connection to a port. To use this dialog box, refer to
the following paragraphs.
Port Binding dialog box parameters:
• Port Binding. Click this check box to place a check mark in the
box and enable WWN binding for the port. When enabled, only a
specific device can communicate through the port. This device is
specified by the WWN or nickname entered into the Bound WWN
field (either the Attached WWN or Detached WWN options). With
the check box cleared, any device can communicate through the
port even if a WWN or nickname is specified in the Bound WWN
field.
• Port Number. Select a port in the Port List tab, Performance tab, or
Port Card view, to display the port number in the Port Number
field. If you do not select a port, the lowest numbered port on the
product displays. You can also enter a valid port number for the
Switch.
• Attached WWN. Click the button and, if a device is logged into
the port, the device's WWN displays in the field. The device with
this WWN or nickname has exclusive communication privileges
to the port if Port Binding is enabled.
If you click this button to bind the port to a logged-in device and
there are no devices logged in, the port is essentially bound to a
WWN of “0.” This prevents any device from logging in until this
button is re-enabled to bind the WWN of a logged-in device or
until you explicitly bind the WWN of a device by clicking the
WWN button and entering a WWN or nickname (see the
following). Changes only take effect when you click the Activate
button.
• Detached WWN. Click the button and enter a World Wide Name
(WWN) in the proper format (xx:xx:xx:xx:xx:xx:xx:xx) or a
nickname configured through the Product or your SAN
Management applications. The device with this WWN or
nickname has exclusive communication privileges through the
port if Port Binding is enabled.
Note the following:

5-2 M6140 Director Element Manager User Manual


Using Security Features
5

• If you do not enter a valid WWN or nickname in this field, but the
Port Binding check box is checked (enabled), then no devices can
communicate through the port.
• If you enter a WWN or nickname in this field and do not place a
check in the Port Binding check box, the WWN or nickname is
stored, and all devices can communicate through the port.
• Activate. Click this button to activate settings in this dialog box.
If a nickname is associated with multiple WWNs in your SAN
Management application, the 6HOHFW::1 dialog box displays.
This dialog box allows you to associate a non-unique nickname
with the WWN. In the dialog box, select the nickname to associate
with the WWN, then click 2..

Switch Binding
This feature is managed through the Switch Binding submenu options
available on the Element Manager Security menu. Using Switch
Binding, you can specify WWNs for devices and Switches that can
attach to Director ports. When an unauthorized WWN attempts to
log in, an event is posted to the event log. This provides security in
environments that include a large number of devices by ensuring that
only the intended set of devices attach to a Switch or Director.
To configure Switch binding, you must first enable the feature using
the State Change dialog box while selecting the type of port where you
want to restrict connection (connection policy). Possible selections are
E_Ports, F_Ports, or all types. If the Director is online, after activating
the changes in the dialog box, you must then set the unit offline, then
online using the Set Online State dialog box (Maintenance >Set Online
State).

NOTE: Before setting the Director offline, warn administrators and users
currently operating devices that are attached to the Director that it is going
offline and that there will be a disruption of communications. Make sure
administrators of devices are attached to ports acquiesce Fibre Channel traffic
through the Director.

Activating Switch binding populates the Membership List in the


Switch Binding - Membership List dialog box (Element Manager) with

Switch Binding 5-3


Using Security Features
5

the following WWNs currently connected to the Director, depending


on the connection policy set in the State Change dialog box:
• WWNs of devices connected to F_Ports (F_Port connection
policy). The WWN is the WWN of the attached device’s port.
• WWNs of the Director connected to E_Ports (E_Port connection
policy). The WWN is the WWN of the attached Director.
• WWNs of devices connected to F_Ports and Switches connected
to E_Ports (all-ports connection policy).
Be aware of the following:
• When the Switch Binding feature is first installed and has not
been enabled, the Switch Membership List is empty. When you
enable Switch Binding, the Membership List is populated with
WWNs of devices, Switches, or both that are currently connected
to the Director.
• If the Director is offline and you activate Switch binding, the
Membership List is not automatically populated.
• Edits to the Switch Binding Membership list are maintained when
you enable or disable Switch Binding.
After enabling Switch Binding, you prohibit devices or Switches from
connecting with Director ports by removing them from the
Membership List in the Switch Binding Membership List dialog box.
You allow connections by adding them to the Membership List. You
can also add detached nodes and Switches as well.

Enabling and Disabling Switch Binding


1. Select Security > Switch Binding > Change State. The Switch Binding
State Change dialog box displays.

Figure 5-1 Switch Binding State Change Dialog Box

5-4 M6140 Director Element Manager User Manual


Using Security Features
5

2. Perform one of the following steps to change the switch binding


state:
• Click the Enable Switch Binding check box to remove the
checkmark and disable switch binding. Skip to step 4.
• Click the Enable Switch Binding check box to add a checkmark
and enable Switch binding. Continue to step 3 to set the
Connection Policy.
3. Select from one of the following:
• Click Restrict E_Ports. Select this option to restrict connections
from specific Director E_Ports. Add Director WWNs to the
Membership List to allow connections; remove the WWNs
from the Membership List to prohibit connections. Devices are
allowed to connect to any F_Port.
• Click Restrict F_Ports. Select this option if you want to restrict
connections from specific devices to Director F_Ports. Add
device WWNs to the Membership List to allow connections;
remove the WWNs from the Membership List to prohibit
connections. Switches are allowed to connect to any E_Port.
• Click Restrict All. Select if you want to restrict connections
from specific devices to Director F_Ports and Switches to
Director E_Ports. Add Director or device WWNs to the
Membership List to allow connections; remove the WWNs
from the Membership List to prohibit connections.
4. Click Activate to enable the changes and close the dialog box.
5. If the Director is online, set the unit offline, then online using the
Set Online State dialog box (Maintenance> Set Online State).

NOTE: Before setting the Switch or Director offline, warn administrators


and users currently operating devices that are attached to the Switch or
Director that it is going offline and that there will be a disruption of
communications. Make sure administrators of devices attached to ports
acquiesce Fibre Channel traffic through the Switch or Director.

6. Edit the Membership List through the Switch Binding Membership


List dialog box to add or remove Switches and devices that are
allowed to connect with the Director.

NOTE: For the procedures, refer to Editing the Switch Membership List on
page 5-6.

Switch Binding 5-5


Using Security Features
5

Editing the Switch Membership List

1. Select Security > Switch Binding > Membership List.


The Switch Binding Membership List dialog box displays. The
World Wide Names (WWNs) of devices or Switches that can
currently connect to Director ports are listed in the Switch
Membership List panel.

NOTE: Click Display Options to toggle the display for the port between
World Wide Name and Nickname. To change the display, select the
appropriate option in the Display Options dialog box, then click OK. Note
that nicknames only display if configured for WWNs through your SAN
Management application.

Figure 5-2 Switch Binding Membership List Dialog Box

2. To prohibit connection to a Director port from a WWN currently


in the Membership List, click the WWN or nickname in the
Membership List, then click Remove. The WWN or nickname
moves to the Node List panel. WWNs can only be removed from
the fabric if any of the following are true:
• The Director is offline.
• Switch Binding is disabled.
• The Switch or device with the WWN is not connected to the
Director.

5-6 M6140 Director Element Manager User Manual


Using Security Features
5

• Switch Binding is not enabled for the same port type as


enabled for the Connection Policy in the Switch Binding State
Change dialog box. For example, a WWN for a Switch attached
to an E_Port can be removed if the Switch Binding Connection
Policy was enabled to Restrict F_Ports.
• The Switch or device with the WWN is connected to a port
that is blocked.
• The Switch or device with the WWN is not currently
connected to the Director (detached node).
3. Allow connection to a Switch or Director port from a WWN in the
Attached Nodes panel by selecting the WWN or nickname in the
Node List panel and clicking Add.

NOTE: WWNs can be added to the Switch Membership List when


Switch Binding is either enabled or disabled.

4. To add a WWN for a device or Switch not currently connected to


the Director, click Detached Node. When the Add Detached Node
dialog box appears, enter the appropriate WWN or nickname (if
configured through your SAN Management application) and
click OK. The WWN or nickname appears in the Switch
Membership List.
5. Click Activate to enable the changes and close the dialog box.

NOTE: For information on how the Switch Membership List is populated


with WWNs according to options set in the 6ZLWFK%LQGLQJ6WDWH&KDQJH
dialog box, refer to Enabling and Disabling Switch Binding on page 5-4.

Enabling and Disabling Switch Binding and Online State Functions


For Switch Binding to function, specific operating parameters and
optional features must be enabled. Also, there are specific
requirements for disabling these parameters and features when the
Director is offline or online. Be aware of the following:
• Switch Binding can be enabled or disabled whether the Director is
offline or online. However, if the Director is online, you must set
it offline, then online to activate this function.
• Enabling Enterprise Fabric Mode automatically enables Switch
Binding.

Switch Binding 5-7


Using Security Features
5

• If Enterprise Fabric Mode is enabled and the Director is online,


you cannot disable Switch Binding. However, if the Director is
offline or Enterprise Fabric Mode is disabled, you can disable
Fabric Binding, Switch Binding, or both.
• WWNs can be added to the Switch Membership List when Switch
Binding is enabled or disabled.
• WWNs can only be removed from the Switch Membership List if
any of the following are true:
— The Director is offline.
— Switch Binding is disabled.
— Switch Binding is not enabled for the same port type as
enabled for the Connection Policy in the Switch Binding State
Change dialog box. For example, a WWN for a Switch attached
to an E_Port can be removed if Switch Binding Connection
Policy was enabled to Restrict F_Ports.
— The Director or device with the WWN is connected to a port
that is blocked.
— The Director or device with the WWN is not currently
connected to the Director or Switch (detached node).
• If the Director or Switch is online and Switch Binding is not
enabled, all nodes and Switches attached to the Director or Switch
are automatically added to the Switch Membership List.

Zoning with Switch Binding Enabled


SANtegrity Binding has no effect on existing zoning configurations.
However, note that if a device WWN is in a specific zone, but the
WWN is not in the Switch Membership List, the device cannot log in
to the Director or Switch port and cannot connect to other devices in
the zone with Switch Binding enabled.

Enterprise Fabric Mode


Enterprise Fabric Mode is an option available in your SAN
Management application if the SANtegrity Binding feature key is
installed. This option automatically enables the following features
and operating parameters that are necessary in multi Enterprise
Fabric environments. Note that there are specific requirements for

5-8 M6140 Director Element Manager User Manual


Using Security Features
5

disabling these parameters and features when the Director is offline


or online.

• Enabling and Disabling Enterprise Fabric Mode on page 5-9


• Features and Parameters Enabled with Enterprise Fabric Mode on
page 5-9

Enabling and Disabling Enterprise Fabric Mode


To enable and disable Enterprise Fabric Mode, refer to your SAN
Management application’s 6RIWZDUH8VHU0DQXDO. Refer to Enabling
and Disabling Switch Binding and Online State Functions on page 5-7 for
Fabric Binding and for Switch Binding.

Features and Parameters Enabled with Enterprise Fabric Mode


Fabric Binding
This is a SANtegrity Binding feature enabled through your SAN
Management application. It allows or prohibits a Director from
merging with a selected fabric. To enable, disable, and configure this
option, refer to the Fabric Binding section of your SAN Management
application’s Software User Manual.

Switch Binding
This is a SANtegrity Binding feature enabled through the Configure
menu in the Element Manager that allows or prohibits a Director
from connecting to E_Ports, and devices from connecting to F_Ports.

Domain RSCNs
This is a parameter in the Configure Switch Parameters dialog box,
available from Configure menu in the Element Manager application.
Domain register for state change notifications (domain RSCNs) are
sent between end devices in a fabric to provide additional connection
information to host bus adapters (HBA) and storage devices. As an
example, this information might be that a logical path has been
broken because of a physical event, such as a fiber optic cable being
disconnected from a port.
If Enterprise Fabric Mode is enabled, this parameter is automatically
enabled and cannot be disabled unless the Director is offline. In this
case, disabling Domain RSCNs also disables Enterprise Fabric Mode.

Enterprise Fabric Mode 5-9


Using Security Features
5

Insistent Domain Identification (ID)


This is a parameter in the Configure Switch Parameters dialog box,
available from Configure menu in the Element Manager application.
Enabling this option sets the domain ID configured in the Preferred
Domain ID field in the Configure Switch Parameters dialog box as the
active domain identification when the fabric initializes. A static and
unique domain identification is required by the Fabric Binding
feature because the feature’s Fabric Membership list identifies
Switches by WWN and Domain ID. If a duplicate preferred domain
ID is used and then insisted, warnings occur when Directors and
Switches are added to a Fabric Membership List.
If Fabric Binding or Enterprise Fabric Mode is enabled, this option is
automatically enabled and cannot be disabled unless these options
are disabled or the Switch is offline. If the Director is offline, disabling
Insistent Domain ID disables Enterprise Fabric Mode and Fabric
Binding.
For details on enabling/disabling Switch Binding with Enterprise
Fabric Mode enabled, refer to Enabling and Disabling Switch Binding
and Online State Functions on page 5-7.
Switch Binding is an optional feature. Select the &RQILJXUH6ZLWFK
%LQGLQJ option from the &RQILJXUHmenu.

NOTE: For details on Switch Binding, refer to Switch Binding on


page 5-3.

5-10 M6140 Director Element Manager User Manual


Using Security Features
5

Authentication
The Security feature is accessed from the Configure Authentication
dialog box in the individual element manager applications. The
Element Manager lets you manage one device at a time.
Access the Configure Authentication dialog box by selecting Security >
Authentication.
To access the Configure Authentication dialog box, one user must have
the security administrator privilege. By default, the security
administrator user group displays when installing this feature.

Accessing Authentication
The Product Configuration table at the top of the SAN Management
application’s Switch Authentication tab contains a summary of
security-related values configured through the Login Banner tab and
the Users, Software, Devices, IP Access Control, and Radius Servers sub
tabs. This table automatically refreshes to reflect the latest changes to
the products listed.
The following five tabs are included on the Switch Configuration tab.
Note that these same tabs are available in the Switch or Director
Element Manager’s Configure Authentication window accessed from
Security >Authentication.
• Users - Allows the security administrator to configure the user
management interfaces to the Switch or Director. With this tab,
the security administrator specifies whether the Telnet and EFCM
Basic interfaces are enabled, what method the Switch or Director
uses to authenticate users, and which users are authorized to use
these interfaces.
• Software - Allows the security administrator to set up software
applications that can communicate with the Switch or Director
through APIs. The most common use of this tab is to define the
security settings for this Server so the Switch or Director can
authenticate Server requests to manage the Switch or Director.
This tab is also used to configure security settings for OSMS
(in-band) management.

Authentication 5-11
Using Security Features
5

• Devices - Allows the security administrator to configure how the


Switch or Director authenticates connection requests from other
devices. The tab is PFE key-enabled. If a proper PFE key is not
provided, the Devices tab is not accessible.
• IP Access Control - Allows the security administrator to define
the IP addresses from which management requests can originate,
and whether the Switch or Director limits management requests
based on the originating IP address.
• Radius Servers - Allows the security administrator to define
which RADIUS servers the switch or director uses to obtain
authentication data.

Setting Authentication Methods


Using the Software tab on the SAN Management application’s Switch
Authentication tab or the Software tab in the Element Manager security
Configure Authentication window, you can specify the method the
switch or director uses to authenticate the user’s credentials. In this
context, a user can be a user, a software ID, or another device. The
following three methods are available in the system; however, if there
are no RADIUS servers defined, Local Only is the only option in the
authentication list:
• Local Only - Causes each switch or director to use its local user
database for authentication.
Some RADIUS servers store passwords unencrypted in plain text
files. If Local Only is used, there is no unencrypted central
repository of the password information because your SAN
Management application encrypts this information.
• RADIUS Only - Causes the switch or director to use the RADIUS
server to authenticate users.
If the RADIUS server is not available, then users cannot connect.
RADIUS is an industry standard and is convenient to use because
all passwords can be managed from a central location. However,
if the RADIUS Only method is used, the ability to authenticate is
directly related to the quality of the IP network being used to
communicate with the RADIUS server. If you are authenticating
E_Ports, the stability of the fabric is dependent on the stability of
the IP network. The risk is smaller if you use RADIUS then Local
or Local Only.

5-12 M6140 Director Element Manager User Manual


Using Security Features
5

• RADIUS then Local - Causes the switch or director to first


attempt to use the RADIUS server, if available, to authenticate
users. If the RADIUS server is not available, then the local
database is used.
If you want to specify RADIUS authentication, you must first define
at least one RADIUS server. If no RADIUS servers have been
configured, Local only is the only option.

CHAP Secrets
Support is provided for the Challenge Handshake Authentication
Protocol (CHAP). A Switch uses CHAP to authenticate all users
except Telnet and EFCM Basic interface users.
In the CHAP authentication process, a service (switch or director)
sends the client requestor a random challenge value. The client must
reply with a response that was generated using a cryptographic hash
calculation that includes a shared secret. Both the authenticator
(Switch or Director) and the client must know the same client secret.
Bi-directional or single-direction authentication is supported, and
unique secrets exist for each entity.
When you add or edit a device from the Devices tab, you enter or
generate the CHAP secret.
Use these guidelines when entering or generating CHAP secrets:
• Each CHAP secret must consist of a 32-digit hexadecimal or
16-digit ASCII character value. To specify ASCII characters,
precede the value with a dollar sign ($), such as $abcdefghijklmnop.
• Some RADIUS servers require secrets to be entered in ASCII. If
you are using a RADIUS server, you can either type in the
hexadecimal equivalent of the ASCII value or precede the ASCII
value with a dollar sign ($). For example, you can type either
61616161616161616161616161616161 or #$aaaaaaaaaaaaaaaa.
• The Generate button generates a random 32-digit hexadecimal
value. You may not be able to specify this value to RADIUS.

Authentication 5-13
Using Security Features
5

Using the Users Tab

Figure 5-3 Security Authentication, Users Tab

The Users tab lets the security administrator set up role-based user
access to the selected Switch or Director through the EFCM Basic or
Telnet management interfaces.

Accessing the Users To access the Users tab, complete the following steps.
Tab
1. From the SAN Management application:
a. Select a fabric from the Fabrics and Server list.
b. Select the Security tab.
c. Select the Switch Authentication tab.
d. Select a switch or director from the Product Configuration table.
OR
From the switch or director’s Element Manager, select Security >
Authentication.
2. Click the Users tab.

5-14 M6140 Director Element Manager User Manual


Using Security Features
5

Figure 5-4 Users Tab

Users Tab The following table describes all the elements of the Users tab.
Description
Element Description

Apply button Click to update the Switch or Director.

Apply To button Click to update multiple Switches or Directors with


the same security settings. A dialog box displays
(This field is not available on listing the qualified Switches and Directors.
element manager To be listed in this dialog the Switch or Director
Authentication tabs.) must be manageable and use EO/S 7.0 or later.
• 16-Port, 1 or 2 Gb/s switch
• 24-Port, 1 or 2 Gb/s switch
• 32-Port, 1 or 2 Gb/s switch
• 64-Port director

Help button Click to display the Help content related to the


current tab.

Reset button Click to restore the original Switch or Director


security settings. All user-modified data is cleared.

Interface area

Enable Web Server check box Click to enable the EFCM Basic interface. If not
enabled, the Switch or Director cannot be
(This option is not available on managed using the this interface. If enabled, there
the Mi10K.) must be at least one user established as
administrator and authorized for the this interface.

Authentication 5-15
Using Security Features
5

Element Description

Enable Telnet check box Click to enable the Telnet CLI interface. If not
enabled, the Switch or Director cannot be
managed using the Telnet interface. If enabled,
there must be at least one user established as the
administrator and authorized for Telnet.

Enable Web Server - Method list Select the method that the Switch or Director uses
to authenticate EFCM Basic interface users. The
options are Local Only, Radius Only, and Radius
then Local. If you have not defined any Radius
servers, only the Local Only option is available.
Radius servers are defined on the Radius Servers
tab.

Enable Telnet - Method list Select the method that the Switch or Director uses
to authenticate Telnet users. The options are Local
Only, Radius Only, and Radius then Local. If you
have not defined any Radius servers, only the
Local Only option is available. Radius servers are
defined on the Radius Servers tab.

SSH check box Click to use Telnet Secure Shell (SSH), which
encrypts transmitted data.

Permitted Users table

User ID column Displays the user label for each permitted user.

Role column Displays the role for each permitted user,


administrator, or operator. The default user for the
i10K is APIUser, and the default user cannot be
removed.

Web Server column Displays whether the permitted user is authorized


for the EFCM Basic interface.

Telnet column Displays whether the permitted user is authorized


for Telnet.

Add button Click to display the Add/Edit User dialog box,


which allows a user to be added to the Permitted
Users table.

Edit button Click to display the Add/Edit User dialog box,


which allows users to change the password of the
selected user.

Remove button Click to remove the selected user from the


Permitted Users table.

5-16 M6140 Director Element Manager User Manual


Using Security Features
5

Setting User Interface Security Options


Users manage a Switch or Director with the Web Server interface or
Telnet. If the Web Server interface is enabled, the Switch or Director
authenticates EFCM Basic users, and the same is true if Telnet is
enabled.
To set the user interface security options, complete the following
steps.
1. From the SAN Management application, click the Security tab. In
the Fabrics and Server list, select a Director and click the Switch
Authentication tab.
OR
From the Element Manager, select Security > Authentication.
2. Click the Users tab.
3. Enable or disable the Web Server interface by clicking or clearing
the Enable Web Server check box.
If the Web Server interface is disabled, no user can manage the
Switch or Director using EFCM Basic, and the Permitted Users
table is ignored.
4. If you enabled the Web Server interface, select an authentication
method from the Enable Web Server Method list.
When the Web Server interface is enabled, the Web Server can
authenticate a local database on the Switch or Director, a RADIUS
Server, or a RADIUS Server and a local database.
If you are using RADIUS authentication, be sure to first define
your RADIUS servers on the Radius Servers tab.

NOTE: The SAN Management application cannot automatically update


the RADIUS Server with Web Server or Telnet information.

5. Enable or disable the Telnet interface by clicking or clearing the


Enable Telnet check box.
If the Telnet interface is disabled, no user can manage the Switch
or Director using Telnet, and the Permitted Users table is ignored.

Authentication 5-17
Using Security Features
5

NOTE: If the Web Server or Telnet check box is not selected, no user can
log in to the Switch or Director through that interface.

6. If you enabled the Telnet interface, select an authentication


method from the Enable Telnet Method list.
When the Telnet interface is enabled, Telnet can authenticate a
local database on the Switch or Director, a RADIUS Server, or a
RADIUS Server and a local database.
If you are using RADIUS authentication, first define your
RADIUS servers on the Radius Servers tab.
7. Select the SSH check box to encrypt all Telnet-transmitted
management data between the workstation and the Switch or
Director with the SSH protocol.
8. Perform one of the following actions.
• To apply the change(s) to a single Switch or Director, click
Apply and go to step 11.
• To apply the change(s) to multiple Switches or Directors, click
Apply To and go to step 9 (if the button appears dimmed, it is
unavailable).

NOTE: The Apply To button is not available from the Element


Managers.

9. On the Apply to Other Products dialog box, click the Select check
box for each Switch and/or Director you want to add to the
change list.
You may also click Select All or Unselect All to create your change
list.
10. Click OK.
11. On the Security Change Confirmation and Status dialog box, verify
the changes in the Detailed Changes list.
12. Click Start to send the changes to the Switches and Directors.
13. Click Close on the Security Change Confirmation and Status dialog
box.
14. For the Element Manager, click Close on the Configure
Authentication dialog box.

5-18 M6140 Director Element Manager User Manual


Using Security Features
5

Adding a User to a Switch or Director


1. From the SAN Management application, click the Security tab. In
the Fabrics and Server list, select a fabric and click the Switch
Authentication tab.
2. Select a Director from the Product Configuration table.
3. Click the Users tab.

NOTE: You can perform these same steps through a specific Switch or
Director Element Manager by selecting select Security > Authentication,
then the Users tab.

4. Click Add.
The Add/Edit User dialog box displays.

Figure 5-5 Add/Edit User Dialog Box on Users Tab

5. Enter a value in the User ID field.


The User ID must be an ASCII value between 1-23 characters,
with no double or single quotes, and no white spaces.
6. Enter a value in the Password field.
The Password value must be an ASCII value between 1-24
characters.
7. Enter the Password again in the Retype field.
8. Click OK.
The new user is added to the Permitted Users table, with a default
role of AdministratorRole.
9. To change the user’s role, click the user’s cell in the Role column
of the Permitted Users table and select OperatorRole.

Authentication 5-19
Using Security Features
5

10. Select the Web Server and/or Telnet check boxes in the user’s row
in the Permitted Users table.
A user must be authorized for at least one of the interfaces.

NOTE: There must be at least one user in the Permitted Users table with
the Administrator role and Web server authority, and one user with the
Administrator role and Telnet authority, even if these interfaces are not
enabled. This can be a single user. This does not apply to the i10K.

11. Perform one of the following actions.


• To apply the change(s) to a single Switch or Director, click
Apply and go to step 14.
• To apply the change(s) to multiple Switches or Directors, click
Apply To and go to step 12 (if the button appears dimmed, it is
unavailable).

NOTE: The Apply To button is not available from the Element


Managers.

12. On the Apply to Other Products dialog box, click the Select check
box for each Switch and/or Director you want to add to the
change list.
You may also click Select All or Unselect All to create your change
list.
13. Click OK.
14. On the Security Change Confirmation and Status dialog box, verify
the changes in the Detailed Changes list.
15. Click Start to send the changes to the Switches and Directors.
16. Click Close on the Security Change Confirmation and Status dialog
box.

Removing a User from a Switch or Director

1. From the SAN Management application, click the Security tab. In


the Fabrics and Server list, select a Director.
OR

5-20 M6140 Director Element Manager User Manual


Using Security Features
5

From the Element Manager, select Security > Authentication.


2. Click the Users tab.
3. Select one or multiple users in the Permitted Users table and click
Remove.
4. Perform one of the following actions.
• To apply the change(s) to a single Switch or Director, click
Apply and go to step 7.
• To apply the change(s) to multiple Switches or Directors, click
Apply To and go to step 5 (if the button appears dimmed, it is
unavailable).

NOTE: The Apply To button is not available from the Element


Managers.

5. On the Apply to Other Products dialog box, click the Select check
box for each Switch and/or Director you want to add to the
change list.
You may also click Select All or Unselect All to create your change
list.
6. Click OK.
7. On the Security Change Confirmation and Status dialog box, verify
the changes in the Detailed Changes list.
8. Click Start to send the changes to the Switches and Directors.
9. Click Close on the Security Change Confirmation and Status dialog
box.

Editing a User Definition

1. From the SAN Management application, click the Security tab. In


the Fabrics and Server list, select a Director and click the Switch
Authentication tab.
OR
From the Element Manager, select Security > Authentication.
2. Click the Users tab.

Authentication 5-21
Using Security Features
5

3. To change the interface authorization for a user, click or clear the


Web Server and/or Telnet check boxes in the user’s row in the
Permitted Users table.
4. To change the user’s role, click the user’s cell in the Role column
of the Permitted Users table and select a different role.
5. To edit the user’s password, perform the following steps.
a. Select the user in the Permitted Users table and click Edit.
The Add/Edit User dialog box displays.
b. Enter a new password in the Password and Retype fields.
c. Click OK.
6. Perform one of the following actions.
• To apply the change(s) to a single Switch or Director, click
Apply and go to step 11.
• To apply the change(s) to multiple Switches or Directors, click
Apply To and go to step 9 (if the button appears dimmed, it is
unavailable).

NOTE: The Apply To button is not available from the Element


Managers.

7. On the Apply to Other Products dialog box, click the Select check
box for each Switch and/or Director you want to add to the
change list.
You may also click Select All or Unselect All to create your change
list.
8. Click OK.
9. On the Security Change Confirmation and Status dialog box, verify
the changes in the Detailed Changes list.
10. Click Start to send the changes to the Switches and Directors.
11. Click Close on the Security Change Confirmation and Status dialog
box.
12. For the Element Manager, click Close on the Configure
Authentication dialog box.

5-22 M6140 Director Element Manager User Manual


Using Security Features
5

Using the Software Tab

Figure 5-6 Security Authentication, Software Tab

The Software tab allows the security administrator to define software


access to the Switch or Director through API and OSMS interfaces.
Unlike the EFCM Basic and Telnet interfaces, API and OSMS
authentication requires a CHAP secret as the password. The OSMS
interface is used to manage the Switch or Director in-band over Fibre
Channel. The only information needed by the OSMS interface is the
OSMS secret.
API users are identified by their designated software ID. Typically,
the API user is the current SAN Management server, and its name is
the server name defined at installation. Whenever the current server
is present in the Permitted Software list, an asterisk displays next to the
current server ID.

Accessing the Software Tab


To access the Software tab, complete the following steps.
1. From the SAN Management application:
a. Select a fabric from the Fabrics and Server list.
b. Select the Security tab.
c. Select the Switch Authentication tab.
d. Select a switch or director from the Product Configuration table.

Authentication 5-23
Using Security Features
5

OR
From the switch or director’s Element Manager, select Security >
Authentication.
2. Click the Software tab.

Figure 5-7 Software Tab

Software Tab Description


The following table describes all the elements of the Software tab.

5-24 M6140 Director Element Manager User Manual


Using Security Features
5

Field Description

Apply button Click to update the Switch or Director.

Apply To button Click to update multiple Switches or Directors with


the same security settings. A dialog box displays
(This field is not available on listing the qualified Switches and Directors.
element manager To be listed in this dialog the Switch or Director
Authentication tabs.) must be manageable and use E/OSn 9.01 or later
(for an i10K), or EO/S 7.0 or later.
• 16-Port, 1 or 2 Gb/s switch
• 24-Port, 1 or 2 Gb/s switch
• 32-Port, 1 or 2 Gb/s switch
• 64-Port director

Help button Click to display the Help content related to the


current tab.

Reset button Click to restore the original Switch or Director


security settings. All user-modified data is cleared.

Enable Authentication - API Enable or disable authentication of attempts by


check box software program, such as this Server, to manage
the Switch or Director using an Application
Interface (API). Authentication cannot be enabled
unless the current Server is included in the
Permitted Software list.

Enable Authentication - OSMS Enable or disable OSMS authentication. OSMS


check box authentication cannot be enabled unless the
OSMS secret is defined.

Generate button Generates an OSMS Secret. The Server


generates a random 32-digit hexadecimal value.

Include current server check Choose whether to include the current Server in
box the Permitted Software list.

Include current server - Display Server Properties dialog box, so the


Properties button settings for the current Server can be ed or
changed.

Method - API list This field is the method that the Switch or Director
uses to authenticate software programs. Select
Local Only, RADIUS Only, or RADIUS then Local.
If you have not defined any RADIUS servers, only
the Local Only option is available. To define
RADIUS servers, access the Radius Servers tab.

Authentication 5-25
Using Security Features
5

Field Description

OSMS Key field Type the OSMS secret. This must be entered as a
32-digit hexadecimal value, or as a $ followed by
16 ASCII digits. For example, $abcdefghijklmnop.

Add button Add a software ID to the permitted software list.

Edit button Edit the selected entry in the permitted software


list.

Remove button Delete selected entries from the permitted


software list.

Retype Key field Retype the same value that was typed in OSMS
Secret.

Enabling API Authentication


You must have API authentication enabled to complete any tasks
involving CHAP secret management. The SAN management
application will only be able to read the stored CHAP secrets if
authentication is turned on.
If you enable API authentication, only the defined software IDs can
manage the Switch or Director.

NOTE: The current Server ID cannot be removed when API authentication is


enabled.

1. From the SAN Management application, click the Security tab. In


the Fabrics and Server list, select a Director and click the Switch
Authentication tab.
OR
From the Element Manager, select Security > Authentication.
2. Click the Software tab.
3. Add the current Server’s ID to the Permitted Software list. Refer to
“Adding Current Server Access to a Switch or Director.”

5-26 M6140 Director Element Manager User Manual


Using Security Features
5

4. Define the current server’s CHAP secret. Refer to “Defining a


CHAP Secret for a Server.”
5. Decide if other software IDs should be authorized to originate
management requests, and add them to the Permitted Software list.
Refer to “Adding Software Access to a Switch or Director.”
6. Set the authentication method by clicking the Method list and
selecting Local Only, Radius Only, or Radius then Local. The default
is Local Only.
If a RADIUS server has not been defined on the Radius Servers tab,
the Radius Only and Radius then Local options are not available.
The SAN Management application cannot automatically send
API information to the RADIUS server.
7. Click the API Enable Authentication check box.
There must be a minimum of one entry in the Permitted Software
list.
You must include the current server in the Permitted Software list
before enabling API authentication. If it is not included, it
becomes unmanageable, and you will be forced to use an
alternate management interface to disable API authentication.
8. Perform one of the following actions.
• To apply the change(s) to a single Switch or Director, click
Apply and go to step 11.
• To apply the change(s) to multiple Switches or Directors, click
Apply To and go to step 9 (if the button appears dimmed, it is
unavailable).

NOTE: The Apply To button is not available from the Element


Managers.

9. On the Apply to Other Products dialog box, click the Select check
box for each Switch and/or Director you want to add to the
change list.
You may also click Select All or Unselect All to create your change
list.
10. Click OK.
11. On the Security Change Confirmation and Status dialog box, verify
the changes in the Detailed Changes list.

Authentication 5-27
Using Security Features
5

12. Click Start to send the changes to the Switches and Directors.
13. Click Close on the Security Change Confirmation and Status dialog
box.
14. For the Element Manager, click Close on the Configure
Authentication dialog box.

For more information on this topic please refer to Adding Current


Server Access to a Switch or Director on page 5-32, Defining a CHAP
Secret for a Server on page 5-37, and Adding Software Access to a Switch
or Director on page 5-34.

Disabling API Authentication


You must have API authentication enabled to complete any tasks
involving CHAP secret management. The SAN management
application will only be able to read the stored CHAP secrets if
authentication is turned on.
If a user attempts edits while API authentication is disabled, a
warning message will be displayed: “The CHAP secrets of the selected
record cannot be viewed because API authentication is disabled.” When a
user clicks the OK button, the window disappears. After a security
administrator clicks the OK button, the CHAP Secret editing dialog
box will be displayed and the administrator can type the secret. The
field for the existing CHAP secret will be blank.
1. From the SAN Management application, click the Security tab. In
the Fabrics and Server list, select a Director and click the Switch
Authentication tab.
OR
From the Element Manager, select Security > Authentication.
2. Click the Software tab.
3. Clear the API Enable Authentication check box. The Permitted
Software list is ignored if API authentication is disabled.
4. Perform one of the following actions.
• To apply the change(s) to a single Switch or Director, click
Apply and go to step 7.

5-28 M6140 Director Element Manager User Manual


Using Security Features
5

• To apply the change(s) to multiple Switches or Directors, click


Apply To and go to step 5 (if the button appears dimmed, it is
unavailable).

NOTE: The Apply To button is not available from the Element


Managers.

5. On the Apply to Other Products dialog box, click the Select check
box for each Switch and/or Director you want to add to the
change list.
You may also click Select All or Unselect All to create your change
list.
6. Click OK.
7. On the Security Change Confirmation and Status dialog box, verify
the changes in the Detailed Changes list.
8. Click Start to send the changes to the Switches and Directors.
9. Click Close on the Security Change Confirmation and Status dialog
box.
10. For the Element Manager, click Close on the Configure
Authentication dialog box.

Enabling OSMS Authentication

OSMS authentication can only be enabled if OSMS support has been


enabled in the Element Manager.
OSMS is a PFE key-dependent feature in E/OS through version 6.2. If
the license key is not installed, then OSMS authentication is not
available.
OSMS is not PFE key-dependent after E/OS 6.2; however, it is still
required to enable authorization.
1. From the SAN Management application, click the Security tab. In
the Fabrics and Server list, select a Director and click the Switch
Authentication tab.
OR
From the Element Manager, select Security > Authentication.

Authentication 5-29
Using Security Features
5

2. Click the Software tab.


3. Define the OSMS CHAP Secret (if you have not already done so)
by using one of the following procedures.
a. Click Generate to create a 32-digit hexadecimal random value.
OR
a. Enter the CHAP secret in the OSMS Key and Retype Key fields.
A confirmation dialog box displays.
The CHAP secret must be entered as a 32-digit hexadecimal
value, or as a 16-digit ASCII value preceded by a dollar sign
($), such as $abcedfghijklmnop.
b. Click OK.
4. Click the OSMS Enable Authentication check box.
5. Perform one of the following actions.
• To apply the change(s) to a single Switch or Director, click
Apply and go to step 8.
• To apply the change(s) to multiple Switches or Directors, click
Apply To and go to step 6 (if the button appears dimmed, it is
unavailable).

NOTE: The Apply To button is not available from the Element


Managers.

6. On the Apply to Other Products dialog box, click the Select check
box for each Switch and/or Director you want to add to the
change list.
You may also click Select All or Unselect All to create your change
list.
7. Click OK.
8. On the Security Change Confirmation and Status dialog box, verify
the changes in the Detailed Changes list.
9. Click Start to send the changes to the Switches and Directors.
10. Click Close on the Security Change Confirmation and Status dialog
box.
11. For the Element Manager, click Close on the Configure
Authentication dialog box.

5-30 M6140 Director Element Manager User Manual


Using Security Features
5

Disabling OSMS Authentication


1. From the SAN Management application, click the Security tab. In
the Fabrics and Server list, select a Director and click the Switch
Authentication tab.
OR
From the Element Manager, select Security > Authentication.
2. Click the Software tab.
3. Clear the OSMS Enable Authentication check box.
4. Perform one of the following actions.
• To apply the change(s) to a single Switch or Director, click
Apply and go to step 7.
• To apply the change(s) to multiple Switches or Directors, click
Apply To and go to step 5 (if the button appears dimmed, it is
unavailable).

NOTE: The Apply To button is not available from the Element


Managers.

5. On the Apply to Other Products dialog box, click the Select check
box for each Switch and/or Director you want to add to the
change list.
You may also click Select All or Unselect All to create your change
list.
6. Click OK.
7. On the Security Change Confirmation and Status dialog box, verify
the changes in the Detailed Changes list.
8. Click Start to send the changes to the Switches and Directors.
9. Click Close on the Security Change Confirmation and Status dialog
box.
10. For the Element Manager, click Close on the Configure
Authentication dialog box.

Authentication 5-31
Using Security Features
5

Adding Current Server Access to a Switch or Director


The Permitted Software list displays software IDs that are allowed to
access the Switch or Director through an API.
1. From the SAN Management application, click the Security tab. In
the Fabrics and Server list, select a Director and click the Switch
Authentication tab.
OR
From the Element Manager, select Security > Authentication.
2. Click the Software tab.
3. Click the Include Current Server check box to add the current
server to the Permitted Software list and allow the server to
manage the Switch or Director.
The current server must be in the list before enabling API
authentication.
4. Define the CHAP secret. Refer to “Defining a CHAP Secret for a
Server.”
5. Ensure that each server has a unique ID, if multiple SAN
Management servers can manage the same Switch or Director at
different times in your installation. Otherwise, if the servers have
different secrets, one of the servers cannot manage the Switch or
Director.
After the current server ID is stored in the Switch or Director and
the changes are applied, the Include Current Server check box is
disabled, but still selected. The check box is enabled if the current
server is removed from the Permitted Software list.
6. Perform one of the following actions.
• To apply the change(s) to a single Switch or Director, click
Apply and go to step 9.
• To apply the change(s) to multiple Switches or Directors, click
Apply To and go to step 7 (if the button appears dimmed, it is
unavailable).

NOTE: The Apply To button is not available from the Element


Managers.

5-32 M6140 Director Element Manager User Manual


Using Security Features
5

7. On the Apply to Other Products dialog box, click the Select check
box for each Switch and/or Director you want to add to the
change list.
You may also click Select All or Unselect All to create your change
list.
8. Click OK.
9. On the Security Change Confirmation and Status dialog box, verify
the changes in the Detailed Changes list.
10. Click Start to send the changes to the Switches and Directors.
11. Click Close on the Security Change Confirmation and Status dialog
box.
12. For the Element Manager, click Close on the Configure
Authentication dialog box.

For more information on this topic, please refer to Defining a CHAP


Secret for a Server on page 5-37

Removing Current Server Access to a Switch or Director


You cannot remove the current server if API authentication is
enabled.
1. From the SAN Management application, click the Security tab. In
the Fabrics and Server list, select a Director and click the Switch
Authentication tab.
OR
From the Element Manager, select Security > Authentication.
2. Click the Software tab.
3. Perform one of the following actions based on whether the server
ID has been added to a Switch or Director.
• Before the Server ID has been added, remove the current
server by clearing the Include Current Server check box.
OR

Authentication 5-33
Using Security Features
5

• After the Server ID has been added, remove the current server
by highlighting its entry in the Permitted Software list and
clicking Remove.
If the current Server is not included in the Permitted Software
list, the Include Current Server check box is enabled.
4. Perform one of the following actions.
• To apply the change(s) to a single Switch or Director, click
Apply and go to step 7.
• To apply the change(s) to multiple Switches or Directors, click
Apply To and go to step 5 (if the button appears dimmed, it is
unavailable).

NOTE: The Apply To button is not available from the Element


Managers.

5. On the Apply to Other Products dialog box, click the Select check
box for each Switch and/or Director you want to add to the
change list.
You may also click Select All or Unselect All to create your change
list.
6. Click OK.
7. On the Security Change Confirmation and Status dialog box, verify
the changes in the Detailed Changes list.
8. Click Start to send the changes to the Switches and Directors.
9. Click Close on the Security Change Confirmation and Status dialog
box.
10. For the Element Manager, click Close on the Configure
Authentication dialog box.

Adding Software Access to a Switch or Director

1. From the SAN Management application, click the Security tab. In


the Fabrics and Server list, select a Director and click the Switch
Authentication tab.
OR

5-34 M6140 Director Element Manager User Manual


Using Security Features
5

From the Element Manager, select Security > Authentication.


2. Click the Software tab.
3. Click Add to add another server or API user to the Permitted
Software list.
The Add or Edit Software ID and CHAP Secret dialog box displays.

Figure 5-8 Add or Edit Software ID and CHAP Secret Dialog Box

4. Enter a unique Software ID.


The software ID cannot contain double or single quotes, or white
spaces.
5. Enter a secret in the CHAP Secret and Retype Secret fields, or click
Generate.
The CHAP Secret can be entered as a 32-digit hexadecimal value,
or as a 16-digit ASCII value preceded by a dollar sign ($) such as
$abcdefghijklmnop.
Alternatively, you can click the Generate button to create a random
32-digit hexadecimal value. Some RADIUS servers accept only
ASCII values, so if your installation is using a RADIUS server you
should always use the ASCII form.
6. Click OK.
The new software is added to the Permitted Software list.
7. Perform one of the following actions.
• To apply the change(s) to a single Switch or Director, click
Apply and go to step 10.
• To apply the change(s) to multiple Switches or Directors, click
Apply To and go to step 8 (if the button appears dimmed, it is
unavailable).

Authentication 5-35
Using Security Features
5

NOTE: The Apply To button is not available from the Element


Managers.

8. On the Apply to Other Products dialog box, click the Select check
box for each Switch and/or Director you want to add to the
change list.
You may also click Select All or Unselect All to create your change
list.
9. Click OK.
10. On the Security Change Confirmation and Status dialog box, verify
the changes in the Detailed Changes list.
11. Click Start to send the changes to the Switches and Directors.
12. Click Close on the Security Change Confirmation and Status dialog
box.
13. For the Element Manager, click Close on the Configure
Authentication dialog box.

Removing Software Access to a Switch or Director

Although you can remove software IDs from the Permitted Software
list, you cannot remove the last entry in the list while API
authentication is enabled.
1. From the SAN Management application, click the Security tab. In
the Fabrics and Server list, select a Director.
OR
From the Element Manager, select Security > Authentication.
2. Click the Software tab.
3. Select one or more users and click Remove.
4. Perform one of the following actions.
• To apply the change(s) to a single Switch or Director, click
Apply and go to step 7.

5-36 M6140 Director Element Manager User Manual


Using Security Features
5

• To apply the change(s) to multiple Switches or Directors, click


Apply To and go to step 5 (if the button appears dimmed, it is
unavailable).

NOTE: The Apply To button is not available from the Element


Managers.

5. On the Apply to Other Products dialog box, click the Select check
box for each Switch and/or Director you want to add to the
change list.
You may also click Select All or Unselect All to create your change
list.
6. Click OK.
7. On the Security Change Confirmation and Status dialog box, verify
the changes in the Detailed Changes list.
8. Click Start to send the changes to the Switches and Directors.
9. Click Close on the Security Change Confirmation and Status dialog
box.
10. For the Element Manager, click Close on the Configure
Authentication dialog box.

Defining a CHAP Secret for a Server


A server cannot be added unless the CHAP secret is defined.
Whenever you change either the server name or the CHAP secret in
the Server Properties dialog box, make sure to apply the change to all
Switches or Directors that this server manages. Otherwise, some of
the Switches or Directors can become unmanageable.
Never change the server name or secret using the Telnet or EFCM
Basic interfaces without making the corresponding change in your
SAN Management Server. Otherwise, the Server cannot manage the
Switch or Director.
1. From the SAN Management application, click the Security tab. In
the Fabrics and Server list, select a Director and click the Switch
Authentication tab.
OR
From the Element Manager, select Security > Authentication.

Authentication 5-37
Using Security Features
5

2. Click the Software tab.


3. Click Properties.
The Server Properties dialog box appears.

Figure 5-9 Server Properties Dialog Box

4. Type a secret in the CHAP Secret and Retype Secret fields.

NOTE: Some RADIUS servers accept only ASCII values, so if your


installation is using a RADIUS server, then you should use the ASCII
form.

5-38 M6140 Director Element Manager User Manual


Using Security Features
5

The server CHAP secret must be a 32-digit hexadecimal value, or


a 16-digit ASCII value preceded by a dollar sign ($), such as
$abcdefghijlkmnop.
The server name is used by default on the Server Properties dialog
box, and is the name that was specified during installation of
your SAN Management application.
The server name must be locally unique, and should be unique
across the installation. A Switch or Director does not allow
duplicate user names.
5. Click OK.
6. Perform one of the following actions.
• To apply the change(s) to a single Switch or Director, click
Apply and go to step 9.
• To apply the change(s) to multiple Switches or Directors, click
Apply To and go to step 7 (if the button appears dimmed, it is
unavailable).

NOTE: The Apply To button is not available from the Element


Managers.

7. On the Apply to Other Products dialog box, click the Select check
box for each Switch and/or Director you want to add to the
change list.
You may also click Select All or Unselect All to create your change
list.
8. Click OK.
9. On the Security Change Confirmation and Status dialog box, verify
the changes in the Detailed Changes list.
10. Click Start to send the changes to the Switches and Directors.
11. Click Close on the Security Change Confirmation and Status dialog
box.
12. For the Element Manager, click Close on the Configure
Authentication dialog box.

Authentication 5-39
Using Security Features
5

Editing a CHAP Secret for the Current Server


You must have API authentication enabled to complete any tasks
involving CHAP secret management. The SAN management
application will only be able to read the stored CHAP secrets if
authentication is turned on.
If a user attempts edits while API authentication is disabled, a
warning message will be displayed: “The CHAP secrets of the selected
record cannot be viewed because API authentication is disabled.” When a
user clicks the OK button, the window disappears. After a security
administrator clicks the OK button, the CHAP Secret editing dialog
box will be displayed and the administrator can type the secret. The
field for the existing CHAP secret will be blank.

NOTE: Be sure to apply the new secret before leaving the Software tab for that
Switch or Director.

1. From the SAN Management application, click the Security tab. In


the Fabrics and Server list, select a Director and click the Switch
Authentication tab.
OR
From the Element Manager, select Security > Authentication.
2. Click the Software tab.
3. Select the current server and click Edit.
A Message dialog box displays.
4. Click Yes on the dialog box.
The Server Properties dialog box displays.
5. Enter a new secret in the CHAP Secret and Retype Secret fields.
6. Click OK.
7. Perform one of the following actions.
• To apply the change(s) to a single Switch or Director, click
Apply and go to step 10.
• To apply the change(s) to multiple Switches or Directors, click
Apply To and go to step 8 (if the button appears dimmed, it is
unavailable).

5-40 M6140 Director Element Manager User Manual


Using Security Features
5

NOTE: The Apply To button is not available from the Element


Managers.

8. On the Apply to Other Products dialog box, click the Select check
box for each Switch and/or Director you want to add to the
change list.
You may also click Select All or Unselect All to create your change
list.
9. Click OK.
10. On the Security Change Confirmation and Status dialog box, verify
the changes in the Detailed Changes list.
11. Click Start to send the changes to the Switches and Directors.
12. Click Close on the Security Change Confirmation and Status dialog
box.
13. For the Element Manager, click Close on the Configure
Authentication dialog box.

Authentication 5-41
Using Security Features
5

Editing a CHAP Secret for Another API User


You must have API authentication enabled to complete any tasks
involving CHAP secret management. The SAN management
application will only be able to read the stored CHAP secrets if
authentication is turned on.
If a user attempts edits while API authentication is disabled, a
warning message will be displayed: “The CHAP secrets of the selected
record cannot be viewed because API authentication is disabled.” When a
user clicks the OK button, the window disappears. After a security
administrator clicks the OK button, the CHAP Secret editing dialog
box will be displayed and the administrator can type the secret. The
field for the existing CHAP secret will be blank.
1. From the SAN Management application, click the Security tab. In
the Fabrics and Server list, select a Director and click the Switch
Authentication tab.
OR
From the Element Manager, select Security > Authentication.
2. Click the Software tab.
3. Select a single entry (besides the current server) in the Permitted
Software list and click Edit.
The Add or Edit Software ID and CHAP Secret dialog box displays.
4. Enter a new value in the CHAP Secret and Retype Secret fields, or
click Generate.
The CHAP secret must be a 32-digit hexadecimal value, or a
16-digit ASCII value preceded by a dollar sign ($), such as
$abcdefghijklmnop.
5. Click OK.
6. Perform one of the following actions.
• To apply the change(s) to a single Switch or Director, click
Apply and go to step 9.
• To apply the change(s) to multiple Switches or Directors, click
Apply To and go to step 7 (if the button appears dimmed, it is
unavailable).

5-42 M6140 Director Element Manager User Manual


Using Security Features
5

NOTE: The Apply To button is not available from the Element


Managers.

7. On the Apply to Other Products dialog box, click the Select check
box for each Switch and/or Director you want to add to the
change list.
You may also click Select All or Unselect All to create your change
list.
8. Click OK.
9. On the Security Change Confirmation and Status dialog box, verify
the changes in the Detailed Changes list.
10. Click Start to send the changes to the Switches and Directors.
11. Click Close on the Security Change Confirmation and Status dialog
box.
12. For the Element Manager, click Close on the Configure
Authentication dialog box.

Using the Devices Tab

Figure 5-10 Security Authentication, Devices Tab

The Devices tab defines whether the Switch or Director authenticates


requests by other devices to connect to this Switch or Director. Device

Authentication 5-43
Using Security Features
5

authentication is configured on a port-by-port basis. You can specify


default authentication settings for the Switch or Director, and you can
also configure individual Switch and Director ports to always or
never authenticate.

NOTE: Port authentication settings override switch authentication settings.

You can also use the Devices tab to define the devices that are allowed
to connect to authenticating ports. The features in the Devices tab can
only be configured if the Switch has the proper PFE key installed. If
not, the Devices tab is disabled.

Accessing the Devices Tab


NOTE: Before you begin, you must have an Authentication Feature key.

To access the Devices tab, complete the following steps.


1. From the SAN Management application:
a. Select a fabric from the Fabrics and Server list.
b. Select the Security tab.
c. Select the Switch Authentication tab.
d. Select a switch or director from the Product Configuration table.
OR
From the switch or director’s Element Manager, select Security >
Authentication.
2. Click the Devices tab.

5-44 M6140 Director Element Manager User Manual


Using Security Features
5

Figure 5-11 Devices Tab

Devices Tab Description


The following table describes all the elements of the Devices tab.

Element Description

Node Name field Displays the World Wide Node Name (WWNN) for
this Switch or Director.

Edit Secret button Click to edit the Switch or Director’s CHAP secret.

Enable E_Port Authentication Click to enable E_Port authentication. If this option


check box is enabled, the Switch or Director authenticates
any E_Port connection requests to a Switch or
Director port with Authentication State set to
Switch Default.

Enable E_Port Authentication Select the method that the Switch or Director uses
list for E_Port authentication. The choices are Local
Only, Radius Only, or Radius then Local. If you did
not define any Radius servers, only the Local Only
option is available. To define Radius servers, click
the Radius Servers tab.

Authentication 5-45
Using Security Features
5

Element Description

Enable N_Port Authentication Click to enable N_Port authentication. If this option


check box is enabled, the Switch or Director authenticates
any N_Port connection requests to a Switch or
Director port with Authentication State set to
Switch Default.

Enable N_Port Authentication Select the method that the Switch or Director uses
list for N_Port authentication. The choices are Local
Only, Radius Only, or Radius then Local. If you did
not define any Radius servers, only the Local Only
option is available. To define Radius servers, click
the Radius Servers tab.

Apply button Click to accept new additions or changes to the


device information.

Help button Click to display the Help content related to the


current tab.

Reset button Click to restore the original Switch or Director


security settings. All user-modified data is cleared.

5-46 M6140 Director Element Manager User Manual


Using Security Features
5

Element Description

Port Authentication list Displays all of the Switches, Directors, and end
nodes connected to this Switch or Director. This
list tracks the security settings for each Switch or
Director port and the devices connected to the
ports. Connected devices can include the
following:
• Managed, Authentication-compatible Switches
and Directors
• Non-Authentication-compatible Switches and
Directors
• Non-manageable Switches and Directors
• Non-Brocade or non-IBM Switches and
Directors
• JBOD
• HBA
• Other storage devices
If a connected device is Security
Center-compatible, your SAN Management
application can discover its current security
settings and display them on the table. If not, your
SAN Management application only displays
limited information about that device. Each column
can be sorted and the column position can be
adjusted. By default, the ports with attached
devices are displayed at the top of the list, in
attached-node order (the device with the smallest
WWN is listed first).

Authentication State column Displays the authentication state for the Switch or
Director port. Turns into a list when selected. The
options are Switch Default, Forced Enabled, and
Force Disabled.
If the authentication is enabled for the port, either
by default or because the string setting is Force
Enabled, the Switch or Director knows how to
authenticate the connected device. There must be
an entry for the connected device in the
Authenticated Devices table.

Port # column Displays the port number of each individual Switch


or Director port.

Attached PortName column Displays the WWN of each individual port on this
Switch or Director.

Authentication 5-47
Using Security Features
5

Element Description

Secret column Displays whether a secret is defined for the


device. The options are Set, Needed, or blank.
The value is Set if the attached device is in the
Authenticated Devices table. If the attached
device is not in that table and authentication is
enabled for the port, the value is Needed.

Nickname (Attached) column Displays the nickname of the attached device.

Type column Displays the port type of the connected device.

PortName column Displays the WWN of each individual port.

Authenticated Devices table Lists the devices for which the Switch or Director
knows the CHAP secret and therefore can
authenticate. Devices in this table must have a
CHAP secret defined.
An entry in this list does not mean that the Switch
or Director is currently authenticating this device.
Whether the Switch or Director is authenticating
this device depends on the Authentication State
setting for the connectedport in the Port
Authentication list.

NodeName column Displays the device’s node name.

Nickname column Displays the nickname for the device.

E_Port column Indicates the device connects using E_Port and


the Switch or Director uses E_Port authentication
on this device.

N_Port column Indicates the device connects using N_Port and


the Switch or Director uses N_Port authentication
on this device.

Add button Click to add detached devices or add managed


Switches and Directors in this fabric that are not
already connected to this Switch or Director.
In the Element Manager, you can only add
detached devices.

Edit button Click to edit a selected authenticated device. You


can add indirectly-connected but managed
Switches and Directors to the Authenticated
Devices table.

Remove button Click to remove a selected device from the list.

5-48 M6140 Director Element Manager User Manual


Using Security Features
5

Defining a CHAP Secret for a Device


1. From the SAN Management application, click the Security tab. In
the Fabrics and Server list, select a Director and click the Switch
Authentication tab.
OR
From the Element Manager, select Security > Authentication.
2. Click the Devices tab.
3. Click Edit Secret to define, change, or check the value of this
device’s CHAP secret.
The Add Device dialog box displays.

Figure 5-12 Add Device Dialog Box

4. Enter a secret in the CHAP Secret and Retype Secret fields, or click
Generate.
The secret must be entered as a 32-digit hexadecimal value, or as
a 16-digit ASCII value preceded by a dollar sign ($), such as
$abcdefghijklmnop.
You can also click Generate to create a 32-digit hexadecimal secret.
When changing the existing CHAP secret of a device, all other
devices that authenticate this device need to have their local
databases refreshed, or the connection will break.
5. Click OK.
6. Perform one of the following actions.
• To apply the change(s) to a single Switch or Director, click
Apply and go to step 11.

Authentication 5-49
Using Security Features
5

• To apply the change(s) to multiple Switches or Directors, click


Apply To and go to step 9 (if the button appears dimmed, it is
unavailable).

NOTE: The Apply To button is not available from the Element


Managers.

7. On the Apply to Other Products dialog box, click the Select check
box for each Switch and/or Director you want to add to the
change list.
You may also click Select All or Unselect All to create your change
list.
8. Click OK.
9. On the Security Change Confirmation and Status dialog box, verify
the changes in the Detailed Changes list.
10. Click Start to send the changes to the Switches and Directors.
11. Click Close on the Security Change Confirmation and Status dialog
box.
12. For the Element Manager, click Close on the Configure
Authentication dialog box.

Editing a CHAP Secret for a Device


You must have API authentication enabled to complete any tasks
involving CHAP secret management. The SAN management
application will only be able to read the stored CHAP secrets if
authentication is turned on.
If a user attempts edits while API authentication is disabled, a
warning message will be displayed: “The CHAP secrets of the selected
record cannot be viewed because API authentication is disabled.” When a
user clicks the OK button, the window disappears. After a security
administrator clicks the OK button, the CHAP Secret editing dialog
box will be displayed and the administrator can type the secret. The
field for the existing CHAP secret will be blank.
1. From the SAN Management application, click the Security tab. In
the Fabrics and Server list, select a Director and click the Switch
Authentication tab.
OR

5-50 M6140 Director Element Manager User Manual


Using Security Features
5

From the Element Manager, select Security > Authentication.


2. Click the Devices tab.
3. Select a device in the Authenticated Devices table and click Edit.
If it is a managed device, a message displays stating that you
must edit the target device’s secret from its own Devices tab.
4. If it is not a managed device, the Change Secret dialog box displays
the WWN of the connected device. Enter a secret in the CHAP
Secret and Retype Secret fields, or click Generate.
Clicking Generate creates a 32-digit hexadecimal random value.
A secret must be entered as a 32-digit hexadecimal value or as a
16-digit ASCII value preceded by a dollar sign ($), such as
$abcdefghijklmnop.

NOTE: Your SAN Management application cannot send secrets to


non-managed devices. You must use whatever interface is provided by a
non-managed device to manually enter its new secret.

5. Click OK.
6. Perform one of the following actions.
• To apply the change(s) to a single Switch or Director, click
Apply and go to step 9.
• To apply the change(s) to multiple Switches or Directors, click
Apply To and go to step 7 (if the button appears dimmed, it is
unavailable).

NOTE: The Apply To button is not available from the Element


Managers.

7. On the Apply to Other Products dialog box, click the Select check
box for each Switch and/or Director you want to add to the
change list.
You may also click Select All or Unselect All to create your change
list.
8. Click OK.
9. On the Security Change Confirmation and Status dialog box, verify
the changes in the Detailed Changes list.
10. Click Start to send the changes to the Switches and Directors.

Authentication 5-51
Using Security Features
5

11. Click Close on the Security Change Confirmation and Status dialog
box.
12. For the Element Manager, click Close on the Configure
Authentication dialog box.

Setting Default Authentication Values


1. From the SAN Management application, click the Security tab. In
the Fabrics and Server list, select a Director and click the Switch
Authentication tab.
OR
From the Element Manager, select Security > Authentication.
2. Click the Devices tab.
3. To set the default value for E_Port authentication, click or clear
the Enable E_Port Authentication check box. The authentication
state for the individual ports can override the default.
4. To set the default value for N_Port authentication, click or clear
the Enable N_Port Authentication check box. The authentication
state for the individual ports can override the default.
5. Perform one of the following actions.
• To apply the change(s) to a single Switch or Director, click
Apply and go to step 8.
• To apply the change(s) to multiple Switches or Directors, click
Apply To and go to step 6 (if the button appears dimmed, it is
unavailable).

NOTE: The Apply To button is not available from the Element


Managers.

6. On the Apply to Other Products dialog box, click the Select check
box for each Switch and/or Director you want to add to the
change list.
You may also click Select All or Unselect All to create your change
list.
7. Click OK.

5-52 M6140 Director Element Manager User Manual


Using Security Features
5

8. On the Security Change Confirmation and Status dialog box, verify


the changes in the Detailed Changes list.
9. Click Start to send the changes to the Switches and Directors.
10. Click Close on the Security Change Confirmation and Status dialog
box.
11. For the Element Manager, click Close on the Configure
Authentication dialog box.

Setting Authentication Methods


The application checks whether any Radius Servers have been
defined on the Radius Servers tab. If not, the Radius Only and Radius
then Local options are not available.
The Local Only option causes the Switch or Director to check only its
local database to verify if the Switch or Director on the other end is
allowed to communicate.
The SAN Management application cannot automatically send E_Port
authentication information to the Radius Server.
If you want to use Radius authentication, first define your Radius
Servers on the Radius Servers tab.
If a device is not going to authenticate, make sure that the default
authentication values for E_Port and N_Port are disabled, and that all
ports are set to Switch Default.
1. From the SAN Management application, click the Security tab. In
the Fabrics and Server list, select a Director and click the Switch
Authentication tab.
OR
From the Element Manager, select Security > Authentication.
2. Click the Devices tab.
3. To specify the E_Port authentication method, select the
appropriate method from the E_Port authentication list.
4. Perform one of the following actions.
• To apply the change(s) to a single Switch or Director, click
Apply and go to step 7.

Authentication 5-53
Using Security Features
5

• To apply the change(s) to multiple Switches or Directors, click


Apply To and go to step 5 (if the button appears dimmed, it is
unavailable).

NOTE: The Apply To button is not available from the Element


Managers.

5. On the Apply to Other Products dialog box, click the Select check
box for each Switch and/or Director you want to add to the
change list.
You may also click Select All or Unselect All to create your change
list.
6. Click OK.
7. On the Security Change Confirmation and Status dialog box, verify
the changes in the Detailed Changes list.
8. Click Start to send the changes to the Switches and Directors.
9. Click Close on the Security Change Confirmation and Status dialog
box.
10. For the Element Manager, click Close on the Configure
Authentication dialog box.

Enabling Port Authentication


NOTE: You can choose to authenticate only N_Port or only E_Port
connections.

1. From the SAN Management application, click the Security tab. In


the Fabrics and Server list, select a Director and click the Switch
Authentication tab.
OR
From the Element Manager, select Security > Authentication.
2. Click the Devices tab.
3. To change the authentication state for a Switch or Director port,
click the port’s cell in the Authentication State column of the Port
Authentication List, and select a state value.

5-54 M6140 Director Element Manager User Manual


Using Security Features
5

If a port value is Force Enabled, the port always authenticates the


other end of the link regardless of the default authentication state
set at the Switch level.
If a port value is Force Disabled, the port does not authenticate
connection attempts at any time.
If a port value is Switch Default, the port abides by all
authentication settings configured for this Switch or Director. All
ports are set to this state when the product is initialized.
4. If you select Force Enabled, or select Switch Default and enable the
default, but the Switch or Director does not have the secret for the
attached device in this database, the port secret value changes to
Needed. Add the connected device to the Authenticated Devices
table.
5. Perform one of the following actions.
• To apply the change(s) to a single Switch or Director, click
Apply and go to step 8.
• To apply the change(s) to multiple Switches or Directors, click
Apply To and go to step 6 (if the button appears dimmed, it is
unavailable).

NOTE: The Apply To button is not available from the Element


Managers.

6. On the Apply to Other Products dialog box, click the Select check
box for each Switch and/or Director you want to add to the
change list.
You may also click Select All or Unselect All to create your change
list.
7. Click OK.
8. On the Security Change Confirmation and Status dialog box, verify
the changes in the Detailed Changes list.
9. Click Start to send the changes to the Switches and Directors.
10. Click Close on the Security Change Confirmation and Status dialog
box.
11. For the Element Manager, click Close on the Configure
Authentication dialog box.

Authentication 5-55
Using Security Features
5

Disabling Port Authentication


1. From the SAN Management application, click the Security tab. In
the Fabrics and Server list, select a Director and click the Switch
Authentication tab.
OR
From the Element Manager, select Security > Authentication.
2. Click the Devices tab.
3. Click the port’s cell in the Authentication State column of the Port
Authentication List, and select Force Disabled.
4. Perform one of the following actions.
• To apply the change(s) to a single Switch or Director, click
Apply and go to step 7.
• To apply the change(s) to multiple Switches or Directors, click
Apply To and go to step 5 (if the button appears dimmed, it is
unavailable).

NOTE: The Apply To button is not available from the Element


Managers.

5. On the Apply to Other Products dialog box, click the Select check
box for each Switch and/or Director you want to add to the
change list.
You may also click Select All or Unselect All to create your change
list.
6. Click OK.
7. On the Security Change Confirmation and Status dialog box, verify
the changes in the Detailed Changes list.
8. Click Start to send the changes to the Switches and Directors.
9. Click Close on the Security Change Confirmation and Status dialog
box.
10. For the Element Manager, click Close on the Configure
Authentication dialog box.

5-56 M6140 Director Element Manager User Manual


Using Security Features
5

Adding Connected Device Access to a Switch or Director


You must have API authentication enabled to complete any tasks
involving CHAP secret management. The SAN management
application will only be able to read the stored CHAP secrets if
authentication is turned on.
If a user attempts edits while API authentication is disabled, a
warning message will be displayed: “The CHAP secrets of the selected
record cannot be viewed because API authentication is disabled.” When a
user clicks the OK button, the window disappears. After a security
administrator clicks the OK button, the CHAP Secret editing dialog
box will be displayed and the administrator can type the secret. The
field for the existing CHAP secret will be blank.
1. From the SAN Management application, click the Security tab. In
the Fabrics and Server list, select a Director and click the Switch
Authentication tab.
OR
From the Element Manager, select Security > Authentication.
2. Click the Devices tab.
3. To add a connected device to the Authenticated Devices table,
double-click the device’s row in the Port Authentication list or
select the device’s row and click the right arrow.
If the device is connected using E_Port and is managed, one of the
following messages will display:
E_Port Device has CHAP Secret - If the connected device already
has a secret, the server automatically adds the secret to this
Switch or Director’s database.
E_Port Device has no CHAP Secret - If the connected device does
not have a secret, the Change Secret dialog box displays the WWN
of the connected device.

Authentication 5-57
Using Security Features
5

Figure 5-13 Change Secret Dialog Box

• Click Generate to create a 32-digit hexadecimal random


value, or type a specific CHAP secret in the CHAP Secret
and Retype Secret fields. The new secret is sent to the
connected, managed device as its own CHAP secret.
• Click OK.
4. If the device is connected using an N_Port or is not a managed
Switch or Director, a warning message displays that states you
must manually enter and validate the device’s secret. Click OK.
The Add Device dialog box displays.
5. Click Generate to create a 32-digit hexadecimal random value, or
type a specific CHAP secret in the CHAP Secret and Retype Secret
fields.
The CHAP secret must be entered as a 32-digit hexadecimal value
or as a 16-digit ASCII value preceded by a dollar sign ($), such as
$abcdefghijklmnop. The new secret is sent to the connected,
managed device as its own CHAP secret.

NOTE: Your SAN Management application cannot send secrets to


non-managed devices. You must use whatever interface is provided by a
non-managed device to manually enter its new secret.

6. Click OK.
7. Perform one of the following actions.
• To apply the change(s) to a single Switch or Director, click
Apply and go to step 10.
• To apply the change(s) to multiple Switches or Directors, click
Apply To and go to step 8 (if the button appears dimmed, it is
unavailable).

5-58 M6140 Director Element Manager User Manual


Using Security Features
5

NOTE: The Apply To button is not available from the Element


Managers.

8. On the Apply to Other Products dialog box, click the Select check
box for each Switch and/or Director you want to add to the
change list.
You may also click Select All or Unselect All to create your change
list.
9. Click OK.
10. On the Security Change Confirmation and Status dialog box, verify
the changes in the Detailed Changes list.
11. Click Start to send the changes to the Switches and Directors.
12. Click Close on the Security Change Confirmation and Status dialog
box.
13. For the Element Manager, click Close on the Configure
Authentication dialog box.

Adding Detached Device Access to a Switch or Director


You must have API authentication enabled to complete any tasks
involving CHAP secret management. The SAN management
application will only be able to read the stored CHAP secrets if
authentication is turned on.
If a user attempts edits while API authentication is disabled, a
warning message will be displayed: “The CHAP secrets of the selected
record cannot be viewed because API authentication is disabled.” When a
user clicks the OK button, the window disappears. After a security
administrator clicks the OK button, the CHAP Secret editing dialog
box will be displayed and the administrator can type the secret. The
field for the existing CHAP secret will be blank.
1. From the SAN Management application, click the Security tab. In
the Fabrics and Server list, select a Director and click the Switch
Authentication tab.
OR
From the Element Manager, select Security > Authentication.
2. Click the Devices tab.

Authentication 5-59
Using Security Features
5

3. Click Add.
The Add Device dialog box displays.
4. Click either the E_Port or N_Port check box to specify the desired
authentication type for the device.
5. Enter a Node Name (WWN) of the attached device.

NOTE: If the Node Name is already in the Authenticated Devices list or it


is not valid, the new entry is rejected.

6. Enter a specific CHAP secret in the CHAP Secret and Retype Secret
fields, or click Generate to create a 32-digit hexadecimal random
value.
The CHAP secret must be entered as a 32-digit hexadecimal value
or as a 16-digit ASCII value preceded by a dollar sign ($), such as
$abcdefghijklmnop. The new secret is sent to the connected,
managed device as its own CHAP secret.
7. Click OK.
8. Perform one of the following actions.
• To apply the change(s) to a single Switch or Director, click
Apply and go to step 11.
• To apply the change(s) to multiple Switches or Directors, click
Apply To and go to step 9 (if the button appears dimmed, it is
unavailable).

NOTE: The Apply To button is not available from the Element


Managers.

9. On the Apply to Other Products dialog box, click the Select check
box for each Switch and/or Director you want to add to the
change list.
You may also click Select All or Unselect All to create your change
list.
10. Click OK.
11. On the Security Change Confirmation and Status dialog box, verify
the changes in the Detailed Changes list.
12. Click Start to send the changes to the Switches and Directors.

5-60 M6140 Director Element Manager User Manual


Using Security Features
5

13. Click Close on the Security Change Confirmation and Status dialog
box.
14. For the Element Manager, click Close on the Configure
Authentication dialog box.

Removing Device Access from a Switch or Director


1. From the SAN Management application, click the Security tab. In
the Fabrics and Server list, select a Director and click the Switch
Authentication tab.
OR
From the Element Manager, select Security > Authentication.
2. Click the Devices tab.
3. Select a device in the Authenticated Devices table and click Remove.
4. If the device is connected to a port that has authentication
enabled, a message displays stating that the device you have
selected to remove is set to be authenticated, and removing the
device causes the authenticated link to fail. Click OK to remove
the device; otherwise, click Cancel.
5. Perform one of the following actions.
• To apply the change(s) to a single Switch or Director, click
Apply and go to step 8.
• To apply the change(s) to multiple Switches or Directors, click
Apply To and go to step 6 (if the button appears dimmed, it is
unavailable).

NOTE: The Apply To button is not available from the Element


Managers.

6. On the Apply to Other Products dialog box, click the Select check
box for each Switch and/or Director you want to add to the
change list.
You may also click Select All or Unselect All to create your change
list.
7. Click OK.

Authentication 5-61
Using Security Features
5

8. On the Security Change Confirmation and Status dialog box, verify


the changes in the Detailed Changes list.
9. Click Start to send the changes to the Switches and Directors.
10. Click Close on the Security Change Confirmation and Status dialog
box.
11. For the Element Manager, click Close on the Configure
Authentication dialog box.

Using the IP Access


Control List Tab

Figure 5-14 Security Authentication, IP Access Control Tab

The IP Access Control tab lets you restrict the IP addresses that are
allowed to manage the switch. If the IP Access Control (IP ACL)
feature is enabled, IP addresses that are not on this list cannot
manage the switch or director.

Accessing the IP Access Control Tab


To access the IP Access Control tab, complete the following steps.
1. From the SAN Management application:
a. Select a fabric from the Fabrics and Server list.
b. Select the Security tab.
c. Select the Switch Authentication tab.
d. Select a switch or director from the Product Configuration table.

5-62 M6140 Director Element Manager User Manual


Using Security Features
5

OR
From the switch or director’s Element Manager, select Security >
Authentication.
2. Click the IP Access Control tab.

Figure 5-15 IP Access Control Tab

IP Access Control Tab Description


The following table describes all the elements of the IP Access Control
tab.

Element Description

Apply button Click to update the Switch or Director.

Apply To button Click to update multiple Switches or Directors with


the same security settings. A dialog box displays
the qualified Switches and Directors.
(This field is not available on To be listed in this dialog box, the Switch and
element manager Director must be manageable and use E/OSn 9.01
Authentication tabs.) (for i10K), or EO/S 7.0 or later:
• 16-Port, 1 or 2 Gb/s switch
• 24-Port, 1 or 2 Gb/s switch
• 32-Port, 1 or 2 Gb/s switch
• 64-Port director

Help button Click to display the Help content related to the


current tab.

Authentication 5-63
Using Security Features
5

Element Description

Reset button Click to restore the original Switch or Director


security settings. All user-modified data is cleared.

Enable IP Access Control check Click to enable or disable IP Access Control. If IP


box Access Control is enabled, the current Server’s IP
address is automatically added. If this option is
disabled, the Switch or Director only accepts
management requests originating from an IP
address in the list.

Permitted IP Addresses table

Start column Displays the starting IP address of an entry listed


in the Permitted IP Addresses table.

End column Displays the ending IP address of an entry listed in


the Permitted IP Addresses table.

Add button Click to add a permitted IP address range or single


IP address to the list.

Edit button Click to edit a permitted IP address range or single


IP address in the list.

Remove button Click to remove a permitted IP address range or


single IP address from the list.

Enabling or Disabling the IP/ACL Feature


When this option is enabled, the Switch or Director only accepts
management requests originating from an IP address in the list. The
server automatically adds its own IP address to the list when IP
Access Control is enabled.
If the Enable IP Access Control check box is selected, restricted access to
the IP addresses in the Permitted IP Addresses list is enforced. If the
check box is not selected, management interfaces can access the
Switch or Director from any IP address. The check box is enabled
only if there is at least one IP address in the list.
1. From the SAN Management application, click the Security tab. In
the Fabrics and Server list, select a Director and click the Switch
Authentication tab.
OR

5-64 M6140 Director Element Manager User Manual


Using Security Features
5

From the Element Manager, select Security > Authentication.


2. Click the IP Access Control tab.
3. To enable or disable IP Access Control, click or clear the Enable IP
Access Control check box.
4. Perform one of the following actions.
• To apply the change(s) to a single Switch or Director, click
Apply and go to step 11.
• To apply the change(s) to multiple Switches or Directors, click
Apply To and go to step 9 (if the button appears dimmed, it is
unavailable).

NOTE: The Apply To button is not available from the Element


Managers.

5. On the Apply to Other Products dialog box, click the Select check
box for each Switch and/or Director you want to add to the
change list.
You may also click Select All or Unselect All to create your change
list.
6. Click OK.
7. On the Security Change Confirmation and Status dialog box, verify
the changes in the Detailed Changes list.
8. Click Start to send the changes to the Switches and Directors.
9. Click Close on the Security Change Confirmation and Status dialog
box.
10. For the Element Manager, click Close on the Configure
Authentication dialog box.

Adding Permitted IP Addresses


NOTE: The maximum number of entries in the Permitted Access Control list is
32.

1. From the SAN Management application, click the Security tab. In


the Fabrics and Server list, select a Director and click the Switch
Authentication tab.

Authentication 5-65
Using Security Features
5

OR
From the Element Manager, select Security > Authentication.
2. Click the IP Access Control tab.
3. To add a permitted IP address or an IP address range, click Add.
The Add/Edit IP Address or Range dialog box displays.
4. Click the IP Address or IP Address Range check box.
5. Enter an IP address in the appropriate field(s).
An IP address range is defined by starting and ending IP
addresses. The ending address must be greater than the starting
address. Exact duplicate ranges are not allowed, but ranges can
overlap or be included in other ranges in the list.
6. Click OK.

Figure 5-16 Add/Edit IP Address or Range Dialog Box

7. Perform one of the following actions.


• To apply the change(s) to a single Switch or Director, click
Apply and go to step 10.
• To apply the change(s) to multiple Switches or Directors, click
Apply To and go to step 8 (if the button appears dimmed, it is
unavailable).

NOTE: The Apply To button is not available from the Element


Managers.

8. On the Apply to Other Products dialog box, click the Select check
box for each Switch and/or Director you want to add to the
change list.

5-66 M6140 Director Element Manager User Manual


Using Security Features
5

You may also click Select All or Unselect All to create your change
list.
9. Click OK.
10. On the Security Change Confirmation and Status dialog box, verify
the changes in the Detailed Changes list.
11. Click Start to send the changes to the Switches and Directors.
12. Click Close on the Security Change Confirmation and Status dialog
box.
13. For the Element Manager, click Close on the Configure
Authentication dialog box.

Editing Permitted IP Addresses


NOTE: If multiple IP addresses or ranges are selected, Edit is disabled.

To edit a permitted IP address or IP address range, use the following


procedure.
1. From the SAN Management application, click the Security tab. In
the Fabrics and Server list, select a Director and click the Switch
Authentication tab.
OR
From the Element Manager, select Security > Authentication.
2. Click the IP Access Control tab.
3. Select the IP address entry in the Permitted IP Addresses list and
click Edit.
The Add/Edit IP Address or Range dialog box displays.
4. Click the IP Address or IP Address Range check box. You may
change an address to an address range, or change an address
range to a single address.
5. Enter an IP address in the appropriate field(s).
For ranges, the ending address must be greater than the starting
address. Exact duplicate ranges are not allowed, but ranges can
overlap or be included in other ranges in the list.
6. Click OK.

Authentication 5-67
Using Security Features
5

7. Perform one of the following actions.


• To apply the change(s) to a single Switch or Director, click
Apply and go to step 10.
• To apply the change(s) to multiple Switches or Directors, click
Apply To and go to step 8 (if the button appears dimmed, it is
unavailable).

NOTE: The Apply To button is not available from the Element


Managers.

8. On the Apply to Other Products dialog box, click the Select check
box for each Switch and/or Director you want to add to the
change list.
You may also click Select All or Unselect All to create your change
list.
9. Click OK.
10. On the Security Change Confirmation and Status dialog box, verify
the changes in the Detailed Changes list.
11. Click Start to send the changes to the Switches and Directors.
12. Click Close on the Security Change Confirmation and Status dialog
box.
13. For the Element Manager, click Close on the Configure
Authentication dialog box.

Removing Permitted IP Addresses


NOTE: You cannot remove your server’s IP address from the list while the
Enable IP Access Control check box is selected.

1. From the SAN Management application, click the Security tab. In


the Fabrics and Server list, select a Director and click the Switch
Authentication tab.
OR
From the Element Manager, select Security > Authentication.
2. Click the IP Access Control tab.

5-68 M6140 Director Element Manager User Manual


Using Security Features
5

3. To remove your server’s IP address from the list, clear the Enable
IP Access Control check box.
4. To delete one or more entries from the Permitted IP Addresses list,
select the entry or entries and click Remove.
5. Perform one of the following actions.
• To apply the change(s) to a single Switch or Director, click
Apply and go to step 8.
• To apply the change(s) to multiple Switches or Directors, click
Apply To and go to step 6 (if the button appears dimmed, it is
unavailable).

NOTE: The Apply To button is not available from the Element


Managers.

6. On the Apply to Other Products dialog box, click the Select check
box for each Switch and/or Director you want to add to the
change list.
You may also click Select All or Unselect All to create your change
list.
7. Click OK.
8. On the Security Change Confirmation and Status dialog box, verify
the changes in the Detailed Changes list.
9. Click Start to send the changes to the Switches and Directors.
10. Click Close on the Security Change Confirmation and Status dialog
box.
11. For the Element Manager, click Close on the Configure
Authentication dialog box.

Authentication 5-69
Using Security Features
5

Using the Radius


Servers Tab

Figure 5-17 Security Authentication, Radius Servers Tab

The tab displays the RADIUS servers that have been defined on this
Switch or Director. Up to three RADIUS servers can be defined.
Use this tab to specify the RADIUS servers from which a switch or
director obtains authentication information. This tab is optional—it is
only necessary if the Switch or Director is using RADIUS
authentication.
If you do not want to use RADIUS authentication for one or more
user types, then no changes to this tab are necessary, even if RADIUS
servers are already defined. Defining RADIUS servers has no effect
unless the Users, Software, or Devices tab has RADIUS Only or
RADIUS then Local set. This is true whether or not authentication is
enabled on that tab.
If you want to use RADIUS authentication for one or more user types,
set the Authentication Method to RADIUS Only or RADIUS then Local
in the User, Software, or Devices tab, as needed.

Accessing the Radius Servers Tab


To access the Radius Servers tab, complete the following steps.
1. From the SAN Management application:
a. Select a fabric from the Fabrics and Server list.
b. Select the Security tab.

5-70 M6140 Director Element Manager User Manual


Using Security Features
5

c. Select the Switch Authentication tab.


d. Select a switch or director from the Product Configuration table.
OR
From the switch or director’s Element Manager, select Security >
Authentication.
2. Click the Radius Servers tab.

Figure 5-18 Radius Servers Tab

NOTE: The Enable column is only available in the i10K Director Element
Manager).

Radius Servers Tab Description


The following table describes all the elements of the Radius Servers
tab.

Authentication 5-71
Using Security Features
5

Element Description

Apply button Click to update the Switch or Director.

Apply To button Click to update multiple Switches or Directors with


the same security settings. A dialog box displays
(This field is not available on the qualified Switches and Directors.
element manager To be listed in this dialog box, the Switch or
Authentication tabs.) Director must be manageable and use E/OSn 9.01
or later (for i10K), or EO/S 7.0 or later:
• 16-Port, 1 or 2 Gb/s switch
• 24-Port, 1 or 2 Gb/s switch
• 32-Port, 1 or 2 Gb/s switch
• 64-Port director

Help button Click to display the Help content related to the


current tab.

Reset button Click to restore the original Switch security


settings. All user-modified data is cleared.

Dead Time field Enter the dead time for a RADIUS server. The
value applies to all available RADIUS servers. If a
RADIUS server does not respond to an
authentication request, it can be marked as dead
for a specified time interval. The dead time interval
can be in the range 0-1440 seconds. The default
value is 0.

RADIUS Servers and Sequence table

IP Address column Displays the host name of a RADIUS server. This


must be a valid IP address. The Switch or Director
cannot resolve host names using DNS.

UDP Port column Displays the port number that the Switch or
Director uses to contact the RADIUS server. The
value can be in the range 1-65535. The default
value is 1812.

Timeout (sec) column Displays the amount of time to wait for a response
from the RADIUS server before retransmitting the
packet. The value can be in the range 1-1000
seconds. The default value is 4 seconds.

Attempts column Displays the number of times a packet is sent to a


RADIUS server if a response is not received
before the timeout. The values can be in the range
1-100. The default is 3 attempts.

5-72 M6140 Director Element Manager User Manual


Using Security Features
5

Element Description

Enable check box Check mark indicates the RADIUS server is


enabled in the Add/Edit Radius Server dialog box.
(Available in i10K Director Element Manager only.)

Move Up button Click to move a selected server up the list.

Move Down button Click to move a selected server down the list.

Edit button Click to edit the selected RADIUS server’s table


entry.

Clear button Click to clear the selected RADIUS server’s table


entry.

Adding a Radius Server


If you want to use RADIUS authentication for one or more user types
(Telnet or EFCM Basic users, software users, and devices), ensure
there is at least one entry in the RADIUS Servers and Sequence table.
To add a RADIUS server, use the following procedure.
1. From the SAN Management application, click the Security tab. In
the Fabrics and Server list, select a Director and click the Switch
Authentication tab.
OR
From the Element Manager, select Security > Authentication.
2. Click the Radius Servers tab.
3. Select a blank line in the RADIUS Servers and Sequence table and
click Edit.
The Add/Edit RADIUS Server dialog box displays.

Authentication 5-73
Using Security Features
5

Figure 5-19 Add/Edit RADIUS Server Dialog Box

4. The dialog box displays default values for the UDP Port, Timeout
(sec), and Attempts fields. You can use these default values, or
enter different values.
5. Click the Enable Radius Server check box to enable the server
(available on Mi10K Director only).
6. Enter the IP address of the RADIUS server.
7. Enter a key value. The key is the Switch or Director password that
was specified when adding the Switch or Director as a client to
the RADIUS server configuration.
8. Click OK.
9. Perform one of the following actions.
• To apply the change(s) to a single Switch or Director, click
Apply and go to step 11.
• To apply the change(s) to multiple Switches or Directors, click
Apply To and go to step 9 (if the button appears dimmed, it is
unavailable).

NOTE: The Apply To button is only available in your SAN


Management application and is not available in the Element Manager
application.

10. On the Apply to Other Products dialog box, click the Select check
box for each Switch and/or Director you want to add to the
change list.
You may also click Select All or Unselect All to create your change
list.

5-74 M6140 Director Element Manager User Manual


Using Security Features
5

11. Click OK.


12. On the Security Change Confirmation and Status dialog box, verify
the changes in the Detailed Changes list.
13. Click Start to send the changes to the Switches and Directors.
14. Click Close on the Security Change Confirmation and Status dialog
box.
15. For the Element Manager, click Close on the Configure
Authentication dialog box.

Removing a Radius Server


If you try to remove the last server in the table, and at least one
Security tab specifies RADIUS authentication, an error message will
display. You must set all authentication methods to Local Only before
removing the last RADIUS server.
1. From the SAN Management application, click the Security tab. In
the Fabrics and Server list, select a Director and click the Switch
Authentication tab.
OR
From the Element Manager, select Security > Authentication.
2. Click the Radius Servers tab.
3. Select the RADIUS server from the RADIUS Servers and Sequence
table and click Clear.
4. Perform one of the following actions.
• To apply the change(s) to a single Switch or Director, click
Apply and go to step 7.
• To apply the change(s) to multiple Switches or Directors, click
Apply To and go to step 5 (if the button appears dimmed, it is
unavailable).

NOTE: The Apply To button is not available from the Element


Managers.

5. On the Apply to Other Products dialog box, click the Select check
box for each Switch and/or Director you want to add to the
change list.

Authentication 5-75
Using Security Features
5

You may also click Select All or Unselect All to create your change
list.
6. Click OK.
7. On the Security Change Confirmation and Status dialog box, verify
the changes in the Detailed Changes list.
8. Click Start to send the changes to the Switches and Directors.
9. Click Close on the Security Change Confirmation and Status dialog
box.
10. For the Element Manager, click Close on the Configure
Authentication dialog box.

Editing a RADIUS Server Definition


The RADIUS Servers and Sequence table has up to three entries. The
order of the entries determines the order the Switch or Director uses
to request authentication information from the RADIUS server. If the
first device does not respond after a certain amount of time because
of connection or other configuration problems, then the next RADIUS
server is used, and so on.
The table contains the following information for each RADIUS server
listed:
• IP Addresses - The IP Address of the RADIUS server.
• UDP Port - The number that the device uses to contact the
RADIUS server. The default value is 1812.
• Timeout (sec) - The amount of time to wait for a response from
the RADIUS server before retransmitting the packet. It can be in
the range 1-1000, and the default is four seconds.
• Retries - The number of times a packet is sent to a RADIUS server
if a response is not received before the timeout. After the
retransmit limit is reached, the Switch or Director tries to use the
next server in the list. The value may be in the range 1-100. The
default value is three attempts. If all three servers are attempted
and there is no response from any of them, the authentication
attempt fails and the Switch or Director will not allow the
connection.

5-76 M6140 Director Element Manager User Manual


Using Security Features
5

Editing an Entry in the Table


To edit a RADIUS server entry, use the following procedure.
1. From the SAN Management application, click the Security tab. In
the Fabrics and Server list, select a Director and click the Switch
Authentication tab.
OR
From the Element Manager, select Security > Authentication.
2. Click the Radius Servers tab.
3. Select the entry in the RADIUS Servers and Sequence table and click
Edit.
The Add/Edit RADIUS Server dialog box displays.
4. Change any of the field values, but every field must have a value.
The IP Address field must contain the IP address of the RADIUS
server.
You can edit the UDS Port, Timeout, and Attempts values.
The Switch or Director cannot use DNS to resolve host names.
The RADIUS server key is the Switch or Director password that
was specified when adding the Switch or Director as a client to
the RADIUS server configuration.
5. Click OK.
6. Perform one of the following actions.
• To apply the change(s) to a single Switch or Director, click
Apply and go to step 9.
• To apply the change(s) to multiple Switches or Directors, click
Apply To and go to step 7 (if the button appears dimmed, it is
unavailable).

NOTE: The Apply To button is not available from the Element


Managers.

7. On the Apply to Other Products dialog box, click the Select check
box for each Switch and/or Director you want to add to the
change list.

Authentication 5-77
Using Security Features
5

You may also click Select All or Unselect All to create your change
list.
8. Click OK.
9. On the Security Change Confirmation and Status dialog box, verify
the changes in the Detailed Changes list.
10. Click Start to send the changes to the Switches and Directors.
11. Click Close on the Security Change Confirmation and Status dialog
box.
12. For the Element Manager, click Close on the Configure
Authentication dialog box.

Changing the RADIUS Server Sequence


To change the sequence in which RADIUS servers will be tried, use
the following procedure.
1. From the SAN Management application, click the Security tab. In
the Fabrics and Server list, select a Director and click the Switch
Authentication tab.
OR
From the Element Manager, select Security > Authentication.
2. Click the Radius Servers tab.
3. Select a table entry and click Move Up or Move Down as necessary,
until the desired order is achieved.
4. Perform one of the following actions.
• To apply the change(s) to a single Switch or Director, click
Apply and go to step 7.
• To apply the change(s) to multiple Switches or Directors, click
Apply To and go to step 5 (if the button appears dimmed, it is
unavailable).

NOTE: The Apply To button is not available from the Element


Managers.

5. On the Apply to Other Products dialog box, click the Select check
box for each Switch and/or Director you want to add to the
change list.

5-78 M6140 Director Element Manager User Manual


Using Security Features
5

You may also click Select All or Unselect All to create your change
list.
6. Click OK.
7. On the Security Change Confirmation and Status dialog box, verify
the changes in the Detailed Changes list.
8. Click Start to send the changes to the Switches and Directors.
9. Click Close on the Security Change Confirmation and Status dialog
box.
10. For the Element Manager, click Close on the Configure
Authentication dialog box.

Changing the Dead Time


The Dead Time field applies to all available RADIUS servers. If a
RADIUS server does not respond to an authentication request, it can
be marked as dead for a specified time interval. This can speed up
authentication by eliminating timeouts and retransmissions. If no
alternate RADIUS servers are available (which means that only one
server is configured or that all servers are marked as dead), then the
dead time is ignored. The dead time can be in the range 0-1440
minutes and the default is 0 (zero).
To change the Dead Time value, use the following procedure.
1. From the SAN Management application, click the Security tab. In
the Fabrics and Server list, select a Director and click the Switch
Authentication tab.
OR
From the Element Manager, select Security > Authentication.
2. Click the Radius Servers tab.
3. Type a new value in the Dead Time field.
4. Perform one of the following actions.
• To apply the change(s) to a single Switch or Director, click
Apply and go to step 7.
• To apply the change(s) to multiple Switches or Directors, click
Apply To and go to step 5 (if the button appears dimmed, it is
unavailable).

Authentication 5-79
Using Security Features
5

NOTE: The Apply To button is not available from the Element


Managers.

5. On the Apply to Other Products dialog box, click the Select check
box for each Switch and/or Director you want to add to the
change list.
You may also click Select All or Unselect All to create your change
list.
6. Click OK.
7. On the Security Change Confirmation and Status dialog box, verify
the changes in the Detailed Changes list.
8. Click Start to send the changes to the Switches and Directors.
9. Click Close on the Security Change Confirmation and Status dialog
box.
10. For the Element Manager, click Close on the Configure
Authentication dialog box.

Accessing Security Authentication from the Element Manager and from Your SAN
Management Application
The Security Center is an option for the SAN Management
application that provides a full set of security features. Only the
Login Banner and Authentication subset of these features is included
with an Element Manager.
The following table outlines the differences between the two
applications.

Table 5-1 Differences - SAN Management Security Center and Element Manager Authentication

Feature/Function SAN Management Security Center Element Manager Authentication

Installation Need a license key for switch Included and does not require a special
authentication. key

How functionality is accessed through Accessed from a tab in the main window Accessed from the Configure menu
GUI

5-80 M6140 Director Element Manager User Manual


Using Security Features
5

Table 5-1 Differences - SAN Management Security Center and Element Manager Authentication

Feature/Function SAN Management Security Center Element Manager Authentication

Discoverable product table Displays a Product Configuration table Does not have this table
that lists all discoverable products and
their security settings

Product management Manages all fabrics Manages a single product

Displays indirectly-connected devices in Displays on the Devices tab, through the Does not have this functionality
the same fabric Add Device dialog box

Displays remote and local Switches Displays both on the Security Change The Security Change Confirmation and
Confirmation and Status tab Status tab displays only the local Switch
or Director

Displays an Apply To button Displays if supported by the device Does not have this functionality

Displays server as well as Switches and Displays server and any managed Does not have this functionality
Directors Switches or Directors

LDAP authentication User access to the server can be Does not have this functionality
authenticated locally or through an
LDAP server

Customizable login banner Login banner can be displayed for all Login banner can be displayed for all
users logging into a server or to a users logging into a director through the
director through CLI the interface. The CLI interface. The banner contents can
banner contents can be customized. be customized.

Using the Security Log


You must have security administrator privileges to use the Security
log. By default, the security administrator is in the System
Administrator user group and the Security Administrator user group.
To open the Security log from the SAN Management application,
select Monitor > Logs > Security. The Security log is also visible in the
bottom right of the Security tab.
To open the Security log from the Element Manager, select Logs >
Security Log.

Using the Security Log 5-81


Using Security Features
5

SSL
Select this option to set up and configure SSL Configuration
information for communication with EOSc-based switch and
directors. If the firmware does not support SSL, selecting this menu
item displays the standard message that the feature is not supported
in this release. If the firmware supports SSL, selecting this menu item
displays the SSL Configuration dialog box. When SSL is enabled, the
communication occurs on an SSL socket.

Opening the Dialog From the Security menu, select SSL Configuration.
Box

Fields and
Components Field Description

Enable Web SSL Select to enable.

Enable API SSL Select to enable and the link to the switch briefly disconnects.
The SAN Management application reconnects using SSL.

Current Certificate If you generate a new certificate, this field updates.

MD-5 If you generate a new certificate, this field updates.

SHA-1 If you generate a new certificate, this field updates.

New Certificate Enter the number of days before the new certificate expires.
Valid values are 30 to 3650 days. The default is 365.
Selecting this option generates a new certificate and updates
the firmware.

Renegotiate after Select to enable and enter values for the renegotiate size.
Valid values are 50-1000. If the check box is not checked, the
CLI and/or EWS can display 0 for the size.

Encryption
EFCM client-to-server authentication is done via Triple DES
encryption, not MD5. This has no impact on SSL.
• If SSL is turned on, then the EFCM user password is sent from the
EFCM client to the EFCM server in Triple DES encryption under
the SSL socket.

5-82 M6140 Director Element Manager User Manual


Using Security Features
5

• If SSL is turned off, then the password is sent in Triple DES


encryption, but not under SSL socket.
The EFCM user authentication is never done with passwords sent in
clear text across the network.

Encryption 5-83
Using Security Features
5

5-84 M6140 Director Element Manager User Manual


6
Using Logs

This section describes Element Manager logs. Logs store information


about hardware, events, link incidents, and various other data.
‡ 8VLQJ/RJV  
‡ $XGLW/RJ  
‡ (YHQW/RJ  
‡ +DUGZDUH/RJ  
‡ /LQN,QFLGHQW/RJ 
‡ 3RUW3HUIRUPDQFH7KUHVKROG$OHUW/RJ  
‡ 6HFXULW\/RJ  
‡ 2SHQ7UXQNLQJ/RJ  
‡ (PEHGGHG3RUW/RJ 
‡ 6ZLWFK)DEULF/RJ 
‡ 6\VORJ&RQILJXUDWLRQ 

Using Logs
You can use the data collected in logs to manage, maintain, and
monitor the Director. Each Log display lets you perform the
following functions.

Accessing Logs The logs store up to 1000 entries each. The most recent entry displays
at the top of the log. After 1000 entries are stored, new entries
overwrite the oldest entries.

Using Logs 6-1


Using Logs
6

To access a log, perform the following steps.


1. Click Logs on the Director top menu.
A menu displays listing all of the available logs for the Director.
2. Click the log that you want to access.
The Log window displays.
3. To expand columns, place the cursor over the line separating
column headings until a double arrow appears, then hold down
the left mouse button and widen the column as necessary.
4. To sort log entries in columns, click a column heading.
A down arrow in the header indicates sorting in descending
order. An up arrow indicates sorting in ascending order.
5. Click one time to sort. Click again to reverse the sort.
6. Click Close to exit the Log window.

Clearing Logs Clearing a log deletes all entries in the log for all users.
To clear a log, perform the following steps.
1. Click &OHDUin the log window.
A warning displays requesting confirmation that you want to
clear all entries in the log.
2. Click Yes to confirm the deletion or No to cancel the deletion.
3. Click Close to exit the log window.

Refreshing Logs Refreshing a log updates the log with the most current data.
To refresh a log, perform the following steps.
1. Click 5HIUHVK in the log window.
2. Click Close to exit the log window.

6-2 M6140 Director Element Manager User Manual


Using Logs
6

Exporting Logs Exporting a log lets to save a log in another location.


To export a log, perform the following steps.
1. Click ([SRUW in the log window
The 6DYH dialog box displays.
2. Select the folder where you want to save the log file.
3. Type a name in the )LOHQDPH field.
4. Make sure 7H[WILOH is selected in the )LOHVRIW\SH field.
5. Click 6DYH.
The file is saved in the specified folder as an ASCII text file.

Accessing To access an Advanced log, perform the following steps.


Advanced Logs 1. Click (PEHGGHG3RUW/RJ or )DEULF/RJ.
Dialog box displays for the log selected.
2. Select QRQZUDSSLQJORJ or ZUDSSLQJORJ.
Wrapping log is the default. With a wrapping log, new entries
replace old entries when the log has reached capacity. With a
nonwrapping log, new entries are not added when the log has
reached capacity.

Audit Log
The Audit log displays a history of all configuration changes applied
to the Director from any source such as Element Manager, SNMP
management stations, or host. Each log entry contains the following
information.
• Date/Time. The date and time of the change on the Director.

Audit Log 6-3


Using Logs
6

Some actions, such as backing up configuration data and enabling


automatic date/time synchronization, are performed only by the
Server platform without Director interaction. These actions are
indicated by the string, Application Interface, following the Audit
log’s stamp of the Server platform date and time. If the string is
not displayed, the time stamp is from the Director.
• Action. The user action that caused the configuration change,
such as offline status, port name change, or change of address.
• Source. The user making the change through the Director
Element Manager and the IP or the DNS host name address of the
remote computers running client software. The possible values
are as follows:
— Maintenance Port. Change was made by a user connected to
the maintenance port.
— Application Interface. Change was made by an Element
Manager user.
— SNMP. Change was made by a remote SNMP management
station or Element Manager user.
— Fabric. Change was initiated by another Director in the fabric
that is not managed by this Server platform.
— Embedded Web Server. Change was made by a user through
your web server.
— Fibre channel Host. Change was made inband by a Fibre
Channel host through the open systems or FICON
management Server.
— Telnet. Change was made through a Telnet connection by a
Command Line Interface (CLI) user.
— XML. Change was made by an Element Manager user through
the XML-RPC interface.
• Identifier. The address of the user making the change. However,
note that an address cannot be identified for all sources. The
information listed for each source type is as follows:
— Maintenance Port. Includes user@address.
— Application Interface.Includes user@address, where “user” is
the Element Manager user name and “address” is the network
address of the Server platform or the remote computer
running client software.

6-4 M6140 Director Element Manager User Manual


Using Logs
6

— SNMP. Contains the network address of the SNMP


management station.
— Fabric. No entry displays.
— Embedded Web Server. No entry displays.
— Fibre Channel Host. No entry displays.
— Telnet. Change was made through a Telnet connection.

Event Log
The Event log provides a record of significant events that have
occurred on the Director, such as hardware failures, degraded
operation, port problems, FRU failures, FRU removals and
replacements, port problems, Fibre Channel link incidents, and
communication problems between the Director and the Server
platform. The information is useful to maintenance personnel for
fault isolation and repair verification.
All detected firmware faults and hardware failures are sent to the
Server platform and recorded in the event log.
For detailed information on event data and problem resolution, refer
to your Director’s Service Manual.
Each log entry includes the following information:
• Date/Time. The date and time of the event on the Director.
• Event. A code that uniquely identifies the event.
Event codes include the following.
000 - 199 System events
200 - 299 Power supply events
300 - 399 Fan module events
400 - 499 CTP card events
500 - 599 Port card events
600-699 Events (Director only)
800-899 Thermal events

• Description. A short description of the event.

Event Log 6-5


Using Logs
6

• Severity. The severity level of the event. There are four


classifications of severity that identify the importance of the
event.
— Informational
— Minor
— Major
— Severe (not operational)
• FRU Position. An acronym representing the FRU type, followed
by a number representing the FRU chassis position.
• Event Data. Up to 32 bytes of supplementary information about
the event in hexadecimal format. For detailed information on
event data and problem resolution, refer to the event code tables
appendix in your Director’s Service Manual.

Hardware Log
The Hardware log displays information on FRUs inserted and
removed from the Director.
Each log entry includes the following information:
• Date/Time. The date and time the FRU was inserted or removed.
• FRU. The name of the inserted or removed FRU.
• Position. The slot position in the chassis relative to identical
components installed.
• Action. Whether the FRU was inserted or removed.
• Part Number. The part number of the component.
• Serial Number. The serial number of the component.

Link Incident Log


The Link Incident log displays 1,000 of the most recent link incidents.
The information is useful to maintenance personnel for isolating port
problems (particularly E_Port segmentation problems) and repair
verification.
Each log entry contains the following information.

6-6 M6140 Director Element Manager User Manual


Using Logs
6

• Date/Time. The date and time of the incident.


• Port. The number of the port on which the incident occurred.
• Link Incident. A short description of the incident. The following
events may cause a link incident to be written to the log:
— Implicit incident. The attached node detects a condition that
may cause problems on the link.
— Bit-error threshold exceeded. The number of code violation
errors has exceeded the threshold.
— Loss-of-signal or loss-of-synchronization. A condition has
persisted for longer than the resource allocation time out value
(R_A_TOV). This occurs if a cable is unplugged from an
attached node.
— Not-operational (NOS) primitive sequence received. A NOS
was recognized.
— Primitive sequence timeout. The following events may cause
this timeout:
• Link reset protocol timeout occurred.
• Timeout occurred for an appropriate response while in
NOS receive state and after NOS is no longer recognized.
— Invalid primitive sequence received for the current link state.
Either a link reset or a link reset response primitive sequence
was recognized while waiting for the offline sequence.
For corrective actions in response to these link incident messages,
refer to the Maintenance Analysis Procedures chapter in your Director’s
Service Manual.

Port Performance Threshold Alert Log


The Port Performance Threshold Alert log provides details of
threshold alert notifications. The log displays details about the alert
as configured by choosing Configure > Configure Threshold Alert(s).
Each log entry contains the following information:
• Date/Time. The date and time of when the alert occurred.
• Name. The name for the alert as configured through the Configure
Threshold Alerts dialog box.

Port Performance Threshold Alert Log 6-7


Using Logs
6

• Port. The port number where the alert occurred.


• Type. The type of alert, either transmit (Tx) or receive (Rx).
• Utilization %. The percent of the port’s throughput capacity that,
when reached or surpassed, causes an alert to be generated. This
setting constitutes the threshold value and is configured through
the Configure Threshold Alerts dialog box. For example, a value of
25 means that when throughput reaches 25 percent of the port’s
capacity, the threshold is reached and an alert is generated.
• Interval. The time interval during which the throughput is
measured and an alert can be generated. This is set through the
Configure Threshold Alerts dialog box.

Security Log
The Security log displays the following information:
• Severity. The severity level of the event (informational, change, or
error).
• User. The user associated with the event.
• Reason. The reason code for the event, or conditions that caused
the failure.
• Description. The security event category. The information also
includes the description and details of the event and the IP
address of the product.
• Date/Time - The date and time the event occurred. The format is
yyyy/mm/dd hh:mm:ss.
• Count - The number of times the same event has occurred. If a 0
displays, this indicates that the count feature is not supported.
• Category - The security category, such as successful connections,
disconnections, configuration changes, and authentication
changes.
• IP - The IP address where the event occurred.
• Role - The role of the user.
• Interface - The interface through which the event occurred, such
as Embedded Web Server (EWS) or Command Line Interface
(CLI).

6-8 M6140 Director Element Manager User Manual


Using Logs
6

Table 6-1 Security Log Codes

Security Log Category Trigger Level


Security Log Reason Code (event type) Description (severity level)

Successful Connections (10000 - 10099)

10000 Successful Connections EWS User Connected Informational

10001 Successful Connections CLI User Connected Informational

10002 Successful Connections Management Server Logged In Informational

10003 Successful Connections API Management Client Connected Informational

10004 Successful Connections Maintenance Port Logged In Informational

Disconnections (10100 - 10199)

10100 Disconnections CLI User Disconnected Informational

10101 Disconnections Management Server Informational


User Disconnected

10102 Disconnections API Management Client Disconnected Informational

10103 Disconnections SSH Client Protocol Error Informational

10104 Disconnections Maintenance Port User Logged Out Informational

Security Systems Configuration Changes (10200 - 10299)

10200 Configuration Changes Time of Day Changed Change

10201 Configuration Changes EWS and CLI Passwords have been Reset Change

10202 Configuration Changes SSH Keys have been Reset Change

10203 Configuration Changes Default Password Not Changed Change

Authorization Errors (10300 - 10399)

10300 Authorization Failures Fabric Binding Mismatch Error

10301 Authorization Failures Unauthorized Switch Binding WWN Error

10302 Authorization Failures Unauthorized Port Binding WWN Error

10303 Authorization Failures Authorization Failure: E_Port ILS Reject Error

10304 Authorization Failures Incompatible E_Port Security Attributes Error

Security Log 6-9


Using Logs
6

Security Log Category Trigger Level


Security Log Reason Code (event type) Description (severity level)

10305 Authorization Failures IP Access Control List Violation Error

10306 Authorization Failures Management Server Access Control List Error


Violation

Authentication Errors (10400 - 10499)

10400 Authentication Failures EWS Wrong User Name Error

10401 Authentication Failures CLI Wrong User Name Error

10402 Authentication Failures Maintenance Port Wrong User Password Error

10403 Authentication Failures SNMP Wrong Community Error

10404 Authentication Failures Authentication Error: API Management Error


Client

10405 Authentication Failures Authentication Error: FC N_Port Error

10406 Authentication Failures Authentication Error: FC E_Port Error

10407 Authentication Failures Authentication Error: OS Management Error


Server

10408 Authentication Failures OS Management Server Authentication Not Error


Provided

Security Log Miscellaneous (10500 - 10599)

10500 System Security Log Reset Informational

10501 System Security Log has Wrapped Informational

10502 System Audit Log Reset Informational

10540 System PLOGI/FLOGI WWPN Mismatch Informational

10541 System PLOGI/FLOGI WWNN Mismatch Informational

10550 System Nameserver: Device Deregistration Change

10551 System Nameserver: WWPN Registration Change

6-10 M6140 Director Element Manager User Manual


Using Logs
6

Security Log Category Trigger Level


Security Log Reason Code (event type) Description (severity level)

10552 System Nameserver: WWNN Registration Change

10553 System Nameserver: WWPN Registration for Error


another Device -- Invalid Operation
attempted

10553 System Nameserver: WWNN Registration for Error


another Device -- Invalid Operation
attempted

Open Trunking Log


The Open Trunking log provides details on flow rerouting that is
occurring through Director ports. Each log entry contains the
following information.
• Date and Time. The date and time the action occurred.
• Receive Port. The receive port number (in decimal) on the local
Director associated with the flow that was rerouted.
• Target Domain. The domain ID (in decimal) associated with the
flow that was rerouted.
• Old Exit Port. The exit port number (in decimal) on this Director
that the flow used to get to the target domain.
• New Exit Port. The exit port number (in decimal) on this Director
that the flow now uses to get to the target domain.

Open Trunking Log 6-11


Using Logs
6

Embedded Port Log


The Embedded Port log provides a detailed history log of all traffic
passing through the embedded port. The embedded port (EP) of the
Director is a single physical FC port within the hardware architecture
that is used to communicate FC frames between devices attached to
the external ports and the embedded firmware’s FC services
software. The communication is based on the use of well-known
Fibre Channel addresses. This is similar to the function of the Control
Unit Port (CUP) in FICON architecture. The CUP is implemented
through the EP for FICON traffic. The Embedded Port log lists all FC
frame traffic directed to the Switch (EP), including discards, frames
not routed, and traffic designated for the EP (inband traffic).
You can select a single port or multiple ports to log. Each entry
contains the following information.
• Non-wrapping Log or Wrapping Log. From the list, select
Non-wrapping log or Wrapping log. Wrapping log is the default.
The difference between log types is how entries are treated when
the log is full. In Wrapping logs, when the log is full, the oldest
entry is deleted to make room for each new entry. In
Non-wrapping logs, no new entries are logged when the log is
full.
• Log Settings. Select check boxes to configure log options on the
Director. These settings affect how log data is captured and stored
on the Director, not just what is displayed in the dialog box. For
example, if Include Class F Frames is turned off or unchecked,
Class F frames are not captured or stored in the log on the
Director and are not accessible from this log. To change these
options, click the Change... button. For information about this
button, see EOF. The string that contains the End of Frame code
abbreviation. Place the cursor over a cell in this column to display
descriptions of the abbreviation.6-13
• Date and Time. The date and time the event occurred. The format
is yyyy/mm/dd hh:mm:ss:tt.
• Port. The receive port number (in decimal) on the local Director
associated with the flow that was rerouted. When FICON mode is
on, the hexadecimal equivalent of the port number displays in
parentheses. When FICON mode is off, only the decimal value is
shown and there is no value in the parentheses.

6-12 M6140 Director Element Manager User Manual


Using Logs
6

• Direction. The direction of the frame in reference to the


embedded port. Possible values are In and Out; the value is
related to the port number. For example, if In displays, then the
frame is coming into the embedded port from the port number
specified in the Port field.
• Frame Header. The Fibre Channel Frame Header string. This
header is not interpreted by the Element Manager. The table cell
contents can be copied into a third party application for
interpretation.
• Length. The length of the payload, byte counter, decimal display
format. Since the payload can be longer than the maximum 32
bytes retained by the log, this value displays how many bytes are
actually in the frame.
• Payload. The payload portion of the data field.
• SOF. The string that contains the Start of Frame code
abbreviation. Place the cursor over a cell in this column to display
descriptions of the abbreviation.
• EOF. The string that contains the End of Frame code abbreviation.
Place the cursor over a cell in this column to display descriptions
of the abbreviation.

Change ... Button The Change ... Button dialog box provides log setting options. The
options located at the top of the dialog box are slightly different for
the 256-port Director and other Director models as illustrated. This
section only provides option details for your Director model.

Embedded Port Log 6-13


Using Logs
6

Figure 6-1 Log Setting Dialog Box - 256 Port Director

Figure 6-2 Dialog Box Options - All Products Except 256-Port Director

NOTE: If not in FICON mode, the Hex/Dialog option is not displayed and
entries are only made in decimal.

This dialog box provides the following log setting options.


• Enable. Turns logging on and off for the currently displayed log.
The default is on. Implemented on the Switch as trace filter set to
no ports (TRACE_NO_PORTS).
• Include Class F Frames. When this option is checked, which is
the default, all frames received are stored in the log, unless port
filtering logs only one port. When unchecked, no Class F frames
are logged.

6-14 M6140 Director Element Manager User Manual


Using Logs
6

• Only Port. When this option is unchecked, which is the default,


frames from all ports are logged. F frames depend on the Include
Class F Frames option. Click the Only Port check box and enter a
value in the text box to log frames from that particular port.
After selecting OK from this dialog, the selected port number or
numbers are displayed on the main log dialog next to the Selected
Port check box. Only frames from or to the selected port are
retained in the log after that point.

Switch Fabric Log


The Fabric log displays the following information about Switches in a
fabric.
• Non-wrapping Log or Wrapping Log. From the list, select
Non-wrapping log or Wrapping log. Wrapping log is the default.
The difference between log types is how entries are treated when
the log is full. In Wrapping logs, when the log is full, the oldest
entry is deleted to make room for each new entry. In
Non-wrapping logs, no new entries are logged when the log is
full.
• Date and Time. The date and time the event occurred. The format
is yyyy/mm/dd hh:mm:ss.
• Description. A description string for the event type. The string
content is displayed directly as stored in the log.
• Event Data. A string that contains details of the event, and is
variable depending on the event logged. This is provided directly
by the log content, and is displayed here exactly as received.
• Ports (RSCN only). For Port RSCN events only, a list of affected
ports is displayed in this column. This is interpreted from port
bitmap data stored in the log, and only the ports with a bit value
of 1 are listed. If there are many bits set in a large Switch, the
contents of this field can be very long.

Switch Fabric Log 6-15


Using Logs
6

Syslog Configuration
The Syslog Configuration option displays the Syslog Configuration
dialog box. This dialog box displays two tabs of information. To
enable syslog transmitting, click the Enable syslog transmitting check
box. If the firmware does not support syslog, a message displays that
says this feature is not supported in this release.

Recipients Tab The Recipients tab displays the following number of IP Address rows
that are supported by the firmware.
• IP Address. The IP Address for the devices that are to receive the
log information. Type in a new IP address or edit an existing IP
address.
• Facility. Select a facility from the list.
Click the Activate button to validate the IP address.

Logs Tab The Logs tab displays a check box for each log that the firmware
supports for generating syslog messages. Checking a log causes the
firmware to generate a syslog event each time an entry is added to the
log.
• Event. Check box to include Event log.
• Audit. Check box to include Audit log.
• Link incident. Check box to include Link Incident log.
• Threshold alert. Check box to include Threshold Alert log.
• Security. Check box to include Security log.
• Embedded port. Check box to include Embedded Port log.
• Fabric. Check box to include Fabric log.
• Open Trunking. Check box to include Open Trunking log.

6-16 M6140 Director Element Manager User Manual


7
Using Maintenance
Features

This section describes how to maintain the product using the


maintenance features in the Element Manager. You can run port
diagnostics, collect maintenance data, set online states, configure
notification settings, and perform other maintenance tasks to monitor
the Director.
‡ 3RUW'LDJQRVWLFV  
‡ 3RUW6ZDSSLQJ  
‡ 'DWD&ROOHFWLRQ  
‡ ,3/  
‡ 6HW2QOLQH6WDWH  
‡ )LUPZDUH/LEUDU\ 
‡ (QDEOH(0DLO1RWLILFDWLRQ  
‡ (QDEOH&DOO+RPH1RWLILFDWLRQ 
‡ %DFN8SDQG5HVWRUH&RQILJXUDWLRQ  
‡ %DFNLQJ8S6$10DQDJHPHQW$SSOLFDWLRQ'DWD  
‡ 5HVHW&RQILJXUDWLRQ 

Port Diagnostics
Use the Port Diagnostics option to run internal and external loopback
tests on any or all ports.
To run a loopback test, use the following steps:
1. Select Maintenance > Port Diagnostics.
The Port Diagnostics dialog box displays.

Using Maintenance Features 7-1


Using Maintenance Features
7

2. Enter a value in the Port Number box, or click the All ports on
switch option.
At the start of the loopback test, the port or port card can be
online, offline, blocked, or unblocked.
3. Select one of the following tests from the Diagnostics Test list:
Internal Loop - An internal loopback test checks port circuitry,
but does not check fiber-optic components of a port transceiver.
The test is performed with a device attached to the port, but the
test momentarily blocks the port and is disruptive to the attached
device.

NOTE: An optical transceiver (SFP or XFP) must be installed in the port


during the test. A device can remain connected during the test.

External Loop - An external loopback test checks port circuitry,


including fiber-optic components of a port transceiver. To
perform the test, traffic on the attached device must have
stopped, the device must be disconnected from the port, and a
multimode or singlemode loopback plug must be inserted in the
port receptacle.
4. Read the instructions in the text box at the bottom of the dialog
box (the Results box), and click Next as directed.
5. Click Start Test to begin the test.
While the test executes, the Completion Status progress indicator
displays the progress.
When the test is finished, the Results box displays the test results.

NOTE: For more details on using port diagnostics, refer to the Installation and
Service Manual for your Switch or Director model.

7-2 M6140 Director Element Manager User Manual


Using Maintenance Features
7

Port Swapping

Use the Port Swapping option to swap one port address for another
regardless of management style selected.
When you select the Port Swapping option, the Swap Ports dialog box
displays. Use this dialog box to swap one port address for another
regardless of management style selected. An asterisk indicates port
addresses that have been swapped using the Swap Ports dialog box.
This asterisk displays after port numbers and addresses in the
Configure Ports dialog box, Port List tab, Node List tab, and Performance
tab. In the Allow/Prohibit Matrix dialog box the asterisk displays after
the port address, since the port number does not display on this
dialog box.

NOTE: Swap Ports uses port addresses, not port numbers. Therefore, when
you swap ports, the port address is swapped, not the port number. You
cannot swap 10 Gb/s ports with non-10 Gb/s ports.

NOTE: An XPM port can only be swapped with another XPM port.

The port address displays the three-byte Fibre Channel address. The
hexadecimal port address is the middle (area) byte of the three and is
displayed in bold. In cases where the Switch or Director is offline, the
domain (first) byte and the node4 (last) byte are unknown to the
element manager. A double underscore is displayed to replace the
unknown bytes. The port address (middle) byte is always displayed.
The middle byte is displayed in bold if the FC Address is displayed.
For example, where the domain and node bytes of the FC Address are
not known and irrelevant, the address field for the physical port 00 is
displayed as __00__.

To swap ports, perform the following steps.


1. Select Maintenance > Port Swapping.
The dialog box for the Swap Ports wizard displays. This dialog
box lets you enter ports to be swapped by either port number or
port address. If FICON management style is used the default is
Port Address. If Open Systems management style is used, the
default is the Port Number.

Port Swapping 7-3


Using Maintenance Features
7

Figure 7-1 Swap Ports Dialog Box

2. Depending on the management style used, the appropriate


default is automatically selected which is select Port Number
(Decimal) for Open Management users or Port Address (Hex) for
FICON Management users.
3. Enter the port number or port address for the first and second
ports to be swapped. Open Systems Management users use ports
in decimal.
The Fibre Channel (FC) Address displays, with the corresponding
port address byte highlighted in bold. The FC Address updates
dynamically as the port number or address is entered in the field.
The Instructions box displays the message for each step in the
Swap Ports wizard.
4. Click Next.
The Instructions box displays the ports that are involved in the
swap and tells you what will happen when you click Next again.

7-4 M6140 Director Element Manager User Manual


Using Maintenance Features
7

Figure 7-2 Swap Ports Dialog Box

The message displays what ports are involved in the swap and to
ask the system administrator to stop traffic on these ports.
5. Click Next to complete the operation, block ports, and enable
beaconing.

NOTE: You have the option to cancel the operation. If you click Cancel, the
selected ports to be swapped will not be blocked and beaconing will not be
enabled.

The wizard instructions box displays the next step. The message
displays that the ports are blocked and that beaconing is enabled.
The port cables can be swapped during this step.

Figure 7-3 Swap Ports Dialog Box -- Step 3

6. Click Next to complete the operation and to stop beaconing.

Port Swapping 7-5


Using Maintenance Features
7

NOTE: You have the option to cancel the operation. If you click Cancel,
beaconing stops, but the ports remain blocked.

The wizard Instructions box displays that the port swap is


complete.
Port swap is complete and beaconing has been turned off. To
unblock one or both ports, select the desired Unblock check box
and click Finish.
7. Select the ports to unblock and click Finish.

NOTE: After the port swap is complete, the contents of either the Port
Number or Port Address fields are swapped. This depends on which field was
originally selected in the beginning. If the Port Number was selected in the
beginning, information for both the Port Address and FC Address fields are
swapped, retaining the position of the Port Number field.

8. When you are finished configuring the Director, back up the


configuration data.

NOTE: Make sure that the system administrator varies devices offline that
are attached to the ports whose addresses you are going to swap.

NOTE: Ports that you are going to swap are blocked during this procedure,
as swapping ports is disruptive to port operation.

For instructions on backing up data, refer to Back Up and Restore


Configuration on page 7-12.

Data Collection
Select the Data Collection option to collect maintenance data that can
help support personnel diagnose system problems. Save the
maintenance data and forward it to technical support personnel.

NOTE: If the Full Volatility feature has been enabled through the Director’s
maintenance port, a memory dump file will not be included with the data
collection.

7-6 M6140 Director Element Manager User Manual


Using Maintenance Features
7

To use this option, follow the detailed steps in your Director’s


Installation and Service Manual.

IPL
Select the IPL option to execute an initial program load (IPL).

NOTE: The Ethernet connection between the Server platform and Director
is interrupted momentarily during an IPL.

NOTE: Ana initial program load (IPL) is not intended for ordinary or casual
use and should only be performed if the active control processor (CTP) card
is suspected to be faulty. This operation resets the active CTP card (an IML
resets both CTP cards). Do not use this option unless directed by your
support representative or if you need to reset a failed CTP card.

If it is necessary for you to execute an IPL on the Director, use the


following steps:
1. Select Maintenance > IPL.
A dialog box displays confirming the IPL.
2. Click Yes.
Selecting Maintenance > IPL causes Ethernet connection between the
Director and Server platform to drop momentarily and the following
to occur in the Element Manager window:
• As the network connection drops, the Status table above the tabs
turns yellow.
• The Status field in the table displays No Link and the State field
displays the reason for no link.
• A square with yellow and black bars displays in the status bar.
• The FRUs illustrated in the Hardware tab do not display. They
display again as the connection is re-established.
For details on functions performed by an IPL, refer to your Director’s
Service Manual.

IPL 7-7
Using Maintenance Features
7

Set Online State


Use the procedure in this section to display the current Director
operating state (offline or online) and change the state as required.
The Director can have one of the following operational states:
Online. When the Director is in the online state, all of the unblocked
ports are allowed to log in to the fabric and begin communicating.
Devices can connect to the Director if the port is not blocked and can
communicate with another attached device if both devices are in the
same zone or if the default zone is enabled.
Offline. When the Director is in the offline state, all the installed
ports are offline. The ports transmit an OLS (offline sequence), and
they cannot accept a login for connection from an attached device. All
ports in the Director, including E_Ports, are placed offline regardless
of whether they were blocked or unblocked and the Director is
removed from a multi fabric.

NOTE: Before setting the Director offline, warn administrators and


users currently operating devices that are attached to the Director that it
is going offline and that there will be a disruption of communications.
Make sure administrators of device(s) attached to ports access Fibre
Channel traffic through the Director.

To set the Director online or offline (depending on current state), use


the following steps:
1. Right-click the Director in the Hardware tab and select Set Online
State from the shortcut menu or select Maintenance >Set Online
State.
2. Click Set Offline or Set Online, depending on the operating state
you want to set.
3. If you click Set Offline, a critical warning dialog box displays. The
OK button becomes functional after a brief time period. Click OK
to continue the operation.
As the Director goes offline, “Offline” displays in the State field of the
Status table above the tabs.

7-8 M6140 Director Element Manager User Manual


Using Maintenance Features
7

Firmware Library
Firmware refers to the internal operating code for the Director. Use
the Firmware Library dialog box to maintain up to 32 firmware
versions on the Server platform for downloading to a Director.

NOTE: When downloading a firmware version, follow all procedural


information contained in release notes or EC instructions that accompany the
firmware version. This information supplements information provided in
this general procedure.

To download firmware to a Switch or Director:


1. At the Element Manager application, select Firmware Library from
the Maintenance menu. The Firmware Library dialog box displays.
2. Click New. The New Firmware Version dialog box displays.
3. Select the desired firmware version file. Ensure the correct
filename appear in the File name field and click Save. The New
Firmware Description dialog box displays.
4. Enter a description (up to 24 characters) for the new firmware
version. The description should include the installation date and
text that uniquely identifies the firmware version. Click OK.
5. A File Transfer message box displays. A progress bar travels across
the message box to show percent completion.
6. The File Transfer message box converts to a Transfer Complete
message box, indicating the new firmware version is stored on
the management server hard drive. Click Close to close the
message box.
7. The new firmware version and associated description appear in
the Firmware Library dialog box.
8. Select the firmware version to be downloaded and click Send. The
send function verifies existence of certain Director conditions
before the download begins. If an error occurs, a message
displays indicating the problem must be fixed before firmware is
downloaded. Conditions that terminate the process include:
— A redundant CTP card failure.
— The firmware version is being installed to the Director by
another user.

Firmware Library 7-9


Using Maintenance Features
7

— The director-to-management server link is down.


If a problem occurs and a corresponding message displays, go to
the Director’s Installation and Service Manual to isolate the
problem. If no error occurs, a Warning dialog box displays.
9. Click Yes to download the firmware version. The Send Firmware
dialog box displays and the following occur during the
download:
a. As the download begins, a Writing data to FLASH message
displays at the top of the dialog box for a few moments.
b. As the download progresses, a Sending Files message
displays and remains as a progress bar shows percent
completion of the download. The bar progresses to 100%
when the last file is transmitted to the CTP card.
c. As the download finishes, a Writing data to FLASH message
displays again for a few moments.
d. The director performs an IPL, during which an IPLing
message displays at the Send Firmware dialog box. In addition,
the director-to-management server Ethernet link drops
momentarily.
10. After the IPL, a Send firmware complete message displays at the
Send Firmware dialog box. Click Close to close the dialog box.
11. Click Close to close the Firmware Library dialog box.

Enable E-Mail Notification


E-mail addresses and the simple mail transfer protocol (SMTP) Server
address for e-mail notification of Director events must be configured
through your SAN Management application. Refer to your SAN
Management application’s Software User Manual for instructions on
configuring e-mail.

NOTE: E-mail recipients are configured in your SAN Management


application through the Email Event Notification Setup dialog box. A valid
SMTP address is configured in this dialog box.

7-10 M6140 Director Element Manager User Manual


Using Maintenance Features
7

Select Maintenance > Enable E-Mail Notification to enable e-mail


notification for events that occur on a selected Director. The default
state is disabled.

• To enable e-mail notification, select Maintenance > Enable E-Mail


Notification.
• To disable e-mail notification, select the option to remove the
check mark from the check box.

Enable Call-Home Notification

NOTE: The call-home function may be optional, depending on your


purchased software package.

The call-home feature enables the Server platform to automatically


connect with a support center to report system problems. The
support center Server accepts calls from the Server platform, logs
reported events, and notifies one or more support center
representatives.
To configure telephone numbers and other information for the
call-home feature, refer to your Director’s Service Manual for details.

NOTE: You must enable call-home event notification through your SAN
Management application before enabling this function through the Element
Manager for the individual Director.

Enable or disable the call-home feature for all products managed by


the Server through your SAN Management application. In addition,
you must enable or disable notification for each individual Director
through the Element Manager Maintenance menu.
At the bottom of your SAN Management application’s desktop
window is an icon that indicates whether the call-home feature is
enabled. An X over the phone icon indicates that the call-home
feature is disabled.
Use the Enable Call Home Notification function on the Element
Manager to enable call-home notification for events that occur on the
selected Director. The default state is disabled.

Enable Call-Home Notification 7-11


Using Maintenance Features
7

To enable and disable call-home notification for system problems,


select Maintenance > Enable Call Home Notification.

NOTE: A check mark displays next to the menu option to indicate that
call-home notification is enabled.

Back Up and Restore Configuration


Backing up data is crucial to successful SAN Management and
analysis. Use the convenient backup and restore feature available
through Element Managers and your SAN Management application
to protect your configurations, settings, and SAN data.
Select Maintenance > Backup & Restore Configuration to back up the
NVRAM configuration to a file on the Management Server’s hard
drive. The restore function writes this data back to NVRAM on the
Director. Using the restore function overwrites the existing
configuration.
The following sections provide more information about backing up
and restoring the Element Manager data.
• Element Manager Configuration Data on page 7-12
• Backing Up Element Manager Configuration Data on page 7-13

Element Manager Select Maintenance > Backup and Restore Configuration to save the
Configuration Data product configuration stored on the Director to the platform hard
disk, or to restore the product configuration from the Server. Only a
single copy of the configuration is kept on the Server.
The purpose of the backup is primarily for single-CTP systems,
where a backup is needed in order to restore a replacement CTP card.
However, you can also use this feature for a special purpose
configuration or for temporary testing of a configuration. You cannot
modify the location or file name of the saved configuration.
Also, note the following when backing up or restoring data:
• You can only restore the configuration to a Director with the same
IP address.

7-12 M6140 Director Element Manager User Manual


Using Maintenance Features
7

• For the optional SANtegrity Binding feature, Backup and Restore


Configuration backs up and restores Switch Binding information,
but does not back up and restore Fabric Binding and Enterprise
Fabric Mode information.

Backing Up Element Manager Configuration Data


To back up the configuration data for the Director:
1. Select Maintenance > Backup and Restore Configuration. The Backup
and Restore Configuration dialog box displays.
The Backup and Restore dialog box consists of a short description
of the features performed when you select Backup or Restore.
2. Click Backup to save the following current data to the Server
platform:
• Identification data (Director name, description, and location).
• Port configuration data (port names, blocked states, and
extended distance settings).
• Operating parameters. These include BB_Credit, E_D_TOV,
R_A_TOV, Director priority, preferred domain ID, rerouting
delay, domain RSCNs, and Director speed (64-Port Director
only).
• SNMP configuration (trap recipients, community names, and
write authorizations).
• Zoning configuration (active zone set and default zone state).
• Alternate Control Prohibited settings.
A backup is immediately attempted when you click Backup on
this dialog box. A dialog box displays to confirm that the backup
to the Server is complete. If the backup fails, a dialog box displays
to inform you that the backup to the Server failed.
3. Set the Directorto offline before performing the restore function. If
you select Restore and the Director is online, a message dialog
displays requesting that you turn the Director offline. No action
takes place when you close the dialog box.
4. Click Restore on the Backup and Restore Configuration dialog box to
copy the backed up configuration to the nonvolatile random
access memory (NVRAM) on the Director.

Back Up and Restore Configuration 7-13


Using Maintenance Features
7

If the Director is already offline and you click Restore, a


confirmation dialog box displays with the date of the restored
backup, indicating that the restore overwrites any existing
configuration already on the Director.

NOTE: The restore operation initiates an IPL.

The Export Configuration Report function accessed through the


Configure menu is an ASCII file of the backup performed in this
section.

Backing Up SAN Management Application Data


Data stored in the following folders must be backed up and restored
through your SAN Management application:
• <Install_Home>\Server
• <Install_Home>\Client
• <Install_Home>\Call Home

NOTE: <Install_Home> refers to the directory where the SAN Management


application is installed.

The following types of data are included when you back up your
SAN Management application:
• All log files.
• Zoning library (all zone sets and zone definitions). Note that
zoning is configured through your SAN Management
application.
• Call-home configuration (including phone numbers and dialing
options). Note that the Call-Home function may be optional,
depending on your purchased software package.
• Configuration data. Note that this data can also be saved by
selecting Maintenance > Backup & Restore Configuration.
• Plans. Data is saved if the optional Planning feature is available
through your SAN Management application.
• License information.

7-14 M6140 Director Element Manager User Manual


Using Maintenance Features
7

• User launch scripts.


• User-defined sounds.
• Data exported through your SAN Management application.

Reset Configuration
Use the reset configuration feature to reset all configuration data for
the Director to factory default values. To open the Reset Configuration
dialog box, select Maintenance > Reset Configuration.

NOTE: You must have maintenance authorization rights to access this


feature.

When using this feature, keep the following considerations in mind:


• Please note that since the internet protocol (IP) address resets to
the factory default value during this procedure, you may not
recover the Ethernet connection between the Director and Server
platform if you have changed the Director IP addressing from
that default value. In this case you must re-enter LAN addressing,
such as IP and gateway addresses, through a terminal attached to
the maintenance port.
• Before using the reset configuration option, record the Director’s
current IP address, which displays as you hold the cursor over the
Director icon in your SAN Management application. IP addresses
are also displayed at the top of the Element Manager window.
You can also find the current IP address through your SAN
Management application Basic interface. Refer to your SAN
Management application Basic Help for details.
• After resetting the configuration, reset LAN addressing to the
desired values through the maintenance port or your SAN
Management application Basic interface.
• Instructions for using the maintenance port are not provided in
this manual. Refer to the installation chapter in your Director’s
Service Manual for procedures.
• If you have enabled features that add additional port function
since the Director was shipped from the factory, these features are
disabled (factory default) when the configuration is reset. Only

Reset Configuration 7-15


Using Maintenance Features
7

those ports that were enabled at the factory will function. You
must re-enable the additional port function features through the
dialog box.
• If you have enabled the Full Volatility feature through the
Director’s maintenance port since the Director was shipped from
the factory, this feature will disable (factory default) when the
configuration is reset.
• Factory-default values may vary, depending on the firmware
release installed in your Director. For a list of values, refer to the
Director’s Service Manual for your Director’s E/OS release.

NOTE: To establish the additional port functions, refer to Features on


page 4-46)

Use the following steps to reset the configuration parameters on the


Director to the default values:
1. Set the Director offline.
2. Select Maintenance > Reset Configuration. The following warning
displays:

ATTENTION! This operation resets all Director configuration data and


non-volatile settings to factory default values. All optional features are also
disabled. The Director must be offline to continue.

3. To continue the reset operation, click Reset on the Reset


Configuration dialog box. To cancel the operation, click Cancel.

NOTE: If you have changed the Director‘s IP addressing from the factory
default value, you may not recover the Ethernet connection between the
Director and the management Server platform since the internet protocol (IP)
address resets to the factory default during this procedure. For complete
steps in recovering this connection, refer to the Reset Configuration Data
procedure for the Element Manager in Chapter 4 of your Product’s Service
Manual.

NOTE: For instructions on setting the Director offline, refer to IPL on


page 7-7.

7-16 M6140 Director Element Manager User Manual


A
Element Manager
Messages

This section lists and explains messages that may display in message
boxes as you use the Element Manager. Solutions to problems implied
by each message are included when applicable. The messages are
listed alphabetically.
‡ $ $
‡ &$
‡ ' $
‡ ( $
‡ ) $
‡ , $
‡ / $
‡ 0$
‡ 1 $
‡ 2 $
‡ 3 $
‡ 5$
‡ 6 $
‡ 7 $
‡ 8 $
‡ <$

Element Manager Messages A-1


Element Manager Messages
A

Message A 10 Gb/s port can only be swapped with another 10Gb/s port.

Description Occurs when you attempt to swap an XPM port card with a port of a
different speed (1 or 2 Gb/s).

Action Only swap an XPM port with another XPM port.

Message A Preferred Path already exists between this Source Port and this
Destination Domain ID. Please re-configure the desired path.

Description For any source port, only one path may be defined to each destination
domain ID.

Action On the Add/Change Preferred Path dialog box, change the Preferred
Path.

Message Activating this configuration will overwrite the current


configuration.

Description Confirmation to activate a new address configuration.

Action Click Yes to confirm activating the new address configuration or No to


cancel the operation.

Message All configuration names must be unique.

Description All address configurations must be saved with unique names.

Action Save the configuration with a different name that is unique to all
saved configurations.

Message All FPM ports will be held inactive while the Director is
configured to 2Gb/s speed. Do you want to continue?

A-2 M6140 Director Element Manager User Manual


Element Manager Messages
A

Description 64-port Director only. Occurs when FPM cards are installed in the
Director and Switch speed to set to 2Gb/s in the Configure Switch
Parameters dialog box.

Action Replace FPM cards with UPM cards (cards operate at 1 and 2 Gb/s)
or set the speed to 1 Gb/s.

Message All port names must be unique.

Description A duplicate port name was entered. Every configured port name
must be unique.

Action Reconfigure the port with a unique name.

Message Another Element Manager is currently performing a firmware


install.

Description Only one firmware install to a specific Director can take place at a
time.

Action Wait for the current firmware install to complete and try again.

Message Are you sure you want to delete firmware version?

Description Requesting confirmation to delete the firmware version. Firmware


library can hold only eight firmware versions.

Action Click Yes to confirm the firmware deletion or No to cancel the


operation.

Message Are you sure you want to delete this address configuration?

Description Confirmation to delete the selected address configuration.

Action Click Yes to confirm the deletion of the address configuration or No to


cancel the operation.

Message Are you sure you want to send firmware version?

Element Manager Messages A-3


Element Manager Messages
A

Description Confirmation to send a firmware version to the Switch.

Action Click Yes to confirm sending the firmware version to the Switch, or no
to cancel the operation.

Message Cannot change Port Type while Management Style is FICON


without SANtegrity feature. Please contact your sales
representative.

Description Firmware level below 6.0, and user attempted to change a port type
in the Configure Ports dialog box while FICON management style is
enabled, but the optional SANtegrity Binding feature is not installed.

Action Informational message. If firmware level is at below 6.0, install


SANtegrity Binding before changing port types in the Configure Ports
dialog box while using FICON management style.

Message Cannot create partition <partition_number> while FICON


Management Server is enabled.

Description The user has moved slots into a partition while FMS Server is
enabled.

Action Disable FMS Server before moving slots into a partition.

Message Cannot disable Switch Binding while Enterprise Fabric Mode is


active and the Switch is Online.

Description User attempted to disable Switch binding through the Switch Binding
Change State dialog box, but Enterprise Fabric Mode is enabled.

Action You must either disable Enterprise Fabric Mode using the Enterprise
Fabric Mode dialog box in your SAN Management applications or set
the Switch offline before you can disable Switch Binding.

A-4 M6140 Director Element Manager User Manual


Element Manager Messages
A

Message Cannot disable Insistent Domain ID while Fabric Binding is active.

Description User attempted to disable the Insistent Domain ID parameter


through the Configure Switch Parameters dialog box, but Fabric
Binding is enabled.

Action Disable Fabric Binding through the Fabric Binding dialog box before
disabling these parameters. The Insistent Domain ID can also be
disabled while the Director is offline.

Message Cannot enable beaconing on a failed FRU.

Description Occurs when selecting Enable Beaconing option for a failed FRU.

Action Replace FRU and enable beaconing again or enable beaconing on


operating FRU.

Message Cannot enable beaconing while the system error light is on.

Description Beaconing cannot be enabled while the system error light is on.

Action Select Product > Clear System Error Light to clear error light, then
enable beaconing.

Message Cannot enable Open Trunking while Enterprise Fabric Mode is


active and the Switch is online.

Description Enterprise Fabric mode is active and the Switch or Director is online
and user is attempting to enable Open Trunking. This message only
displays if the optional Open Trunking feature is installed.

Action Disable Enterprise Fabric Mode option in your SAN Management


application.

Message Cannot have E_Ports if Management Style is FICON unless


SANtegrity (TM) feature is installed. Please contact your sales
representative.

Element Manager Messages A-5


Element Manager Messages
A

Description Firmware level is below 6.0 and user attempted to change the
management style from Open Systems to FICON with E_Ports ports
configured, but SANtegrity Binding is not installed.

Action Informational message. At firmware level is below 6.0, if you install


SANtegrity Binding before changing to FICON management style,
then E_Ports will remain as E_Ports when you change to FICON
management style. If SANtegrity Binding is not installed, setting a
Director to FICON management style will change all E_ports to
G_Ports.

Message Cannot have spaces in field.

Description Spaces are not allowed in this field.

Action Remove the spaces or retype the field without spaces.

Message Cannot install firmware to a Director with a failed CTP card.

Description Firmware cannot be installed on a Director with a defective CTP card.

Action Replace the failed CTP card and retry the firmware install to the
Director.

Message Cannot modify Director/ speed. Port speeds cannot be configured


at a higher data rate than the Director/ speed.

Description Port speeds cannot be configured at a higher data rate than the
Director speed. This displays when you set the Director speed to 1
Gb/s through the Configure Switch Parameters dialog box (64-Port
Director only) and at least one of the ports is running at 2 Gb/s.

Action Either return the Director speed to 2 Gb/s or configure all port data
speeds to 1 Gb/s through the Configure Ports dialog box.

Message Cannot perform this operation while the Director is online.

Description This operation cannot take place while the Director is online.

A-6 M6140 Director Element Manager User Manual


Element Manager Messages
A

Action Configure the Director offline through the Set Online State dialog box
then retry the operation.

Message Cannot remove all slot assignments from Partition 0.

Description The user has attempted to remove all slots from Partition 0, which
would leave the partition disabled. The Director firmware requires
that Partition 0 be enabled.

Action Do not attempt to remove slots from Partition 0.

Message Cannot retrieve current SNMP configuration.

Description The current SNMP configuration cannot be retrieved. The link is


down or busy.

Action Retry the operation later. If the condition persists, contact support
personnel.

Message Cannot retrieve diagnostics results.

Description Diagnostics results cannot be retrieved. The link is down or busy.

Action Retry the operation later. If the condition persists, contact support
personnel.

Message Cannot retrieve Director date and time.

Description Director date and time cannot be retrieved. The link is down or busy.

Action Retry the operation later. If the condition persists, contact support
personnel.

Message Cannot retrieve Director state.

Description Director state cannot be retrieved. The link is down or busy.

Action Retry the operation later. If the condition persists, contact support
personnel.

Element Manager Messages A-7


Element Manager Messages
A

Message Cannot retrieve port configuration.

Description Port configuration cannot be retrieved. The link is down or busy.

Action Retry the operation later. If the condition persists, contact support
personnel.

Message Cannot retrieve port information.

Description Port information cannot be retrieved. The link is down or busy.

Action Retry the operation later. If the condition persists, contact support
personnel.

Message Cannot retrieve port statistics.

Description Port statistics cannot be retrieved. The link is down or busy.

Action Retry the operation later. If the condition persists, contact support
personnel.

Message Cannot run diagnostics on a port that is failed.

Description Port diagnostics cannot be performed on a port that has failed.

Action Run diagnostics only on an operational port.

Message Cannot run diagnostics on an active E-port.

Description Port diagnostics cannot be performed on an active E-port.

Action Run diagnostics on an E-port only when it is not active.

Message Cannot run diagnostics while a device is logged-in to the port.

Description A device is logged in to the port where a diagnostic test is attempted.

Action Log out the device and run the diagnostic test again.

A-8 M6140 Director Element Manager User Manual


Element Manager Messages
A

Message Cannot run diagnostics. The port card is not installed.

Description Port diagnostics cannot be performed when the port card is not
installed.

Action Run diagnostics only on a port that is installed.

Message Cannot save IPL configuration file while active=saved is enabled.

Description The user cannot save the IPL file while the active=save property is
set.

Action The FICON management Server property, active=save, must be


disabled for your SAN Management application to save the IPL file.

Message Cannot save port configuration.

Description Port configuration cannot be saved. The link is down or busy.

Action Retry the operation later. If the condition persists, contact support
personnel.

Message Cannot save SNMP configuration.

Description SNMP configuration cannot be saved. The link is down or busy.

Action Retry the operation later. If the condition persists, contact support
personnel.

Message Cannot set all ports to 1 Gb/s due to port speed restriction on some
ports.

Description Displays if you try to set ports to operate at 1 Gb/s data speed
through the Configure Ports dialog box and some ports do not support
speed configuration.

Action Replace ports that do not support speed configuration with those that
do support more than one speed configuration.

Element Manager Messages A-9


Element Manager Messages
A

Message Cannot set all ports to 2Gb/s due to port speed restriction on some
ports.

Description Displays if you try to set ports to operate at 2 Gb/s data speed
through the Configure Ports dialog box and some ports do not support
speed configuration.

Action Replace ports that do not support speed configuration with those that
do support more than one speed configuration.

Message Cannot set all ports to Negotiate due to port speed restriction on
some ports.

Description Displays if you try to set all ports to Negotiate through the Configure
Ports dialog box and some ports do not support speed configuration.

Action Replace ports that do not support speed configuration with those that
do support more than one speed configuration.

Message Cannot set Director state.

Description Director state cannot be set. The link is down or busy.

Action Retry the operation later. If the condition persists, contact support
personnel.

Message Cannot set Fibre Channel parameters.

Description Fibre Channel parameters cannot be set. The link is down or busy.

Action Retry the operation later. If the condition persists, contact support
personnel.

Message Cannot set Switch date and time.

Description date and time cannot be set. The link is down or busy.

A-10 M6140 Director Element Manager User Manual


Element Manager Messages
A

Action Retry the operation later. If the condition persists, contact support
personnel.

Message Cannot set Switch state.

Description state cannot be set. The link is down or busy.

Action Retry the operation later. If the condition persists, contact support
personnel.

Message Cannot set write authorization without defining a community


name.

Description A community name was not defined in the Configure SNMP dialog
box for the write authorization selected.

Action Provide a name in the name field where write authorization is


checked.

Message Cannot start data collection.

Description Data collection cannot be started. The link is down or busy.

Action Retry the operation later. If the condition persists, contact support
personnel.

Message Cannot start firmware install while CTP synchronization is in


progress.

Description CTP synchronization is in progress while you are attempting to


install firmware.

Action Wait for the CTP synchronization to complete before starting the
firmware install.

Message Cannot start port diagnostics.

Description Port diagnostics cannot be started. The link is down or busy.

Element Manager Messages A-11


Element Manager Messages
A

Action Retry the operation later. If the condition persists, contact support
personnel.

Message Cannot swap an uninstalled port.

Description A port swap cannot be performed when the port card is not installed.

Action Perform a swap only on a port that is installed.

Message Click OK to remove all contents from log.

Description Requesting confirmation that you want all contents removed from
the log.

Action Click OK to continue or Cancel to cancel the operation.

Message Continuing may overwrite host programming. Continue?

Description Configurations sent from the host may be overwritten by your SAN
Management application.

Action Continuing will activate the current configuration, which may have
been configured by an S/390 host.

Message Could not export log to file.

Description A file I/O error occurred. The log file could not be saved to the
specified destination.

Action Ensure filename and drive are correct.

Message Could not find firmware file.

Description Firmware file selected was not found in the FTP directory.

Action Ensure file name and directory are correct.

A-12 M6140 Director Element Manager User Manual


Element Manager Messages
A

Message Could not remove dump files from server.

Description Dump files could not be removed from Server. Link may be down or
Director may be busy.

Action Retry the operation later. If the condition persists, contact support
personnel.

Message Could not stop port diagnostics.

Description Port diagnostics could not be stopped. Link may be down or Director
may be busy.

Action Retry the operation later. If the condition persists, contact support
personnel.

Message Could not write firmware to flash.

Description Firmware could not be written to flash memory.

Action Try again. If problem persists, contact support personnel.

Message CUP name and port name are identical.

Description Within the address configuration, one or more of the port names are
the same as the CUP name.

Action Make sure all names are unique for the ports and CUP name.

Message Date entered is invalid.

Description Date entered incorrectly.

Action Verify that the number of days in the month is valid.

Element Manager Messages A-13


Element Manager Messages
A

Message Device applications should be terminated before starting


diagnostics. Press Next to continue.

Description Device application is not terminated.

Action Terminate device application before running port diagnostics.

Message [device WWN] cannot be removed from the Switch Membership


List while participating in Switch Binding. The device must be
isolated from the Switch, or Switch Binding deactivated before it
can be removed.

Description User attempted to remove a device WWN from the Switch


Membership List (SANtegrity Binding feature) while Switch Binding
is enabled.

Action Remove the device from the Switch by blocking the port, setting the
Director offline, or disabling Switch Binding through the Switch
Binding Change State dialog box before removing devices from the
Switch Membership List.

Message Director clock alert mode must be cleared before enabling period
synchronization.

Description Clock alert mode is enabled through the Configure FICON


Management Server dialog box and user is attempting to enable
Periodic Date/Time Synchronization through the Configure Date and Time
dialog box.

Action Disable clock alert mode through the Configure FICON Management
Server dialog box.

Message Disabling Insistent Domain ID will disable Fabric Binding. Do you


want to continue?

Description You cannot disable Insistent Domain ID while Fabric Binding is


active.

A-14 M6140 Director Element Manager User Manual


Element Manager Messages
A

Message Disabling Switch Binding will disable Enterprise Fabric Mode. Do


you want to continue?

Description You cannot disable Switch Binding while Enterprise Fabric Mode is
active and the Switch is online.

Action Click Yes if you want to continue and disable Enterprise Fabric Mode.

Message Do you want to continue with IPL?

Description Requesting confirmation to proceed with an IPL.

Action Click Yes to confirm the IPL or Cancel to cancel the operation.

Message Domain IDs must be in the range of 1 to 31.

Description Domain IDs that are entered in the Configure Preferred Paths dialog
box must fall in a specific range.

Action In the Configure Preferred Paths dialog box, change the number in the
Destination Domain ID field to a number between 1 and 31, inclusive.

Message Duplicate community names require identical write authorizations.

Description Duplicate community names exist that have conflicting or different


write authorizations.

Action Verify community names and whether a community name is


duplicated with different write authorizations.

Message Exclusive management server connection to the Director required


for this command.

Description You attempted to execute a command that is not valid when more
than one management Server is connected to the Director.

Element Manager Messages A-15


Element Manager Messages
A

Action Exit the additional management Servers to that only one is connected
to the Director.

Message Element Manager error <number>.

Description The Director Element Manager encountered an internal error and


cannot continue.

Action Report the problem to support personnel.

Message Element Manager instance is currently open.

Description A Element Manager window is currently open.

Action Informational message only.

Message Enterprise Fabric Mode will be disabled if any of the following


parameters are disabled: Insistent Domain ID, Domain RSCN’s. Do
you want to continue?

Description User attempted to disable these parameters in the Configure Switch


Parameters dialog box while the Director was online, but Enterprise
Fabric Mode (SANtegrity Binding feature) is enabled.

Action Click Yes if you want to continue, and disable Enterprise Fabric
Mode.

Message Error retrieving port information.

Description An error occurred while retrieving port information. The link is down
or busy.

Action Retry the operation later. If the condition persists, contact support
personnel.

Message Error retrieving port statistics.

A-16 M6140 Director Element Manager User Manual


Element Manager Messages
A

Description An error occurred while retrieving port statistics. The link is down or
busy.

Action Retry the operation later. If the condition persists, contact support
personnel.

Message Error stopping port diagnostics.

Description An error occurred while attempting to stop the port diagnostics from
running. The link is down or busy.

Action Retry the operation later. If the condition persists, contact support
personnel.

Message Error transferring files <message>.

Description An error occurred while attempting to download files.

Action Retry the operation. If the condition persists, contact support


personnel.

Message Field cannot be blank.

Description A blank field is not allowed in this dialog.

Action Enter the required information in the blank field.

Message Feature not supported. The ’product name’ must be running version
05.00.00 or higher.

Description The enterprise operating system (E/OS) version on the hardware


product (or Director) is lower than 05.00.00. This message only
displays if the optional Open Trunking feature is installed.

Action Install E/OS version 5.00.00 or higher on the hardware product.

Element Manager Messages A-17


Element Manager Messages
A

Message Field has exceeded maximum number of characters.

Description The maximum number of data entry characters allowed in the field
was exceeded.

Action Enter the information using the prescribed number of characters.

Message File transfer aborted.

Description User has stopped the file transfer.

Action N/A. An informational message.

Message File transfer is in progress.

Description Firmware or data collection is being transferred.

Action N/A. An informational message.

Message Firmware download timed out.

Description The Director did not respond in the time allowed. The status of the
firmware install operation is unknown.

Action Retry the operation. If the problem persists, contact support


personnel.

Message Firmware file I/O error.

Description Firmware file input/output error occurred.

Action Contact support personnel.

Message Firmware file not found.

Description Firmware file deleted from the Server platform.

A-18 M6140 Director Element Manager User Manual


Element Manager Messages
A

Action Add firmware to library.

Message Incompatible configuration between management style and


management server.

Description If firmware level is below 6.0, only FICON management style is


allowed if the FICON Management Server is enabled. User has
attempted to enable Open Systems management style.

Action Disable FICON Management Server, enable the Open Systems


Management Server, or enable the Open Systems management style.

Message Installing this feature key, while online, will cause an IPL
operation on the Switch and a momentary loss of LAN connection.
This operation is non-disruptive to the Fibre Channel traffic. Do
you wish to continue installing this feature key?

Description If the Director is online, installing the new feature key will cause an
internal program load (IPL). The LAN connection to the Server
platform will be lost momentarily, but Fibre Channel traffic will not
be affected.

Action Select Yes to install the feature key or No to not install.

Message Internal file transfer error received from Director.

Description Director detected an internal file transfer error.

Action Contact support personnel.

Message Invalid character in field.

Description Invalid character in the input field.

Action Re-enter the field information.

Element Manager Messages A-19


Element Manager Messages
A

Message Invalid configuration name.

Description Attempted to save an address configuration name with an invalid


name.

Action Use up to 24 alphanumeric characters, including spaces, hyphens and


underscores.

Message Invalid feature key.

Description The feature key was not recognized.

Action Re-enter the feature key noting the key is case sensitive and to
include the dashes.

Message Invalid firmware file.

Description Selected file is not a firmware file.

Action Select the correct firmware file.

Message Invalid network address.

Description Network address specified is not known by the domain name Server.

Action Check the input address and specify the correct network address.

Message Invalid port address.

Description Invalid port address has been entered.

Action Verify port address through the Configure Addresses - “Active” dialog
box (FICON management style only) and re-enter.

Message Invalid port number.

Description Port number must be within the range of ports for the specific
Director model.

A-20 M6140 Director Element Manager User Manual


Element Manager Messages
A

Action Enter a port number within the correct range.

Description M6140 Director. Port number must be within the range of ports for
the specific Director model. For this model, the valid port numbers
are 0 - 127 and 132-143. Ports 128-131 are not valid because they are
internal ports and cannot be connected to external fiber optic cables.

Action Enter a port number within the correct range.

Message Invalid port number. Valid ports are (0 - 63).

Description Intrepid 6064 Director. Port number must be within the range of ports
for the specific Director model. For this model, the valid port
numbers are 0 - 63.

Action Enter a port number within the correct range.

Message Invalid port swap.

Description Port swap selection is not allowed.

Action Ensure that each port selected for swap has not been previously
swapped.

Message Invalid response received from Director.

Description The Director returned an invalid response.

Action Resend the firmware. If the condition persists, contact support


personnel.

Message Invalid serial number for this feature key.

Description The serial number and the feature key did not match.

Action Ensure that the feature key being installed is specifically for this
Director serial number.

Element Manager Messages A-21


Element Manager Messages
A

Message Invalid UDP port number.

Description UDP port number must be an integer from 1 through 65535.

Action Enter a port number from 1 through 65535.

Message Invalid value for BB_Credit.

Description BB_Credit integers are assigned on a port-by-port basis.

Action Enter a port number that is allowed for your port. The values allowed
are dependent on whether the Remote Fabric is enabled and whether
the port is a 1 or 2 Gb/s or a 10 Gb/s port.

Message Invalid value for Low BB Credit threshold (1-99) %.

Description Low BB Credit Threshold text field in Configure Open Trunking dialog
box must have entries in the range from 1 and 99. This message only
displays if the optional Open Trunking feature is installed. Note that
your message and the Configure Open Trunking dialog box may
display Credit Starvation Threshold instead of Low BB Credit Threshold.

Action Enter a value from 1 to 99 into the Low BB Credit Threshold of the
Configure Open Trunking dialog box.

Message Invalid value for day (1 - 31).

Description Value for day must be an integer from 1 through 31.

Action Enter a value from 1 through 31.

Message Invalid value for E_D_TOV.

Description Value for E_D_TOV must be an integer from 10 through 50, measured
in tenths of a second.

Action Enter a value from 10 through 50.

A-22 M6140 Director Element Manager User Manual


Element Manager Messages
A

Message Invalid value for hour (0 - 23).

Description Value for hour must be an integer from 0 through 23.

Action Enter a value from 0 through 23.

Message Invalid value for minute (0 - 59).

Description Value for minute must be an integer from 0 through 59.

Action Enter a value from 0 through 59.

Message Invalid value for month (1 - 12).

Description Value for month must be an integer from 1 through 12.

Action Enter a value from 1 through 12.

Message Invalid value for R_A_TOV.

Description Value for R_A_TOV must be an integer from 40 through 100m


measured in tenths of a second.

Action Enter a value from 40 to 100.

Message Invalid value for second (0 - 59).

Description Value for second must be an integer from 0 through 59.

Action Enter a value from 0 through 59.

Message Invalid value for threshold (1-99)%.

Description Value entered for each port in the Configure Open Trunking dialog box
must be in the range from 1 to 99. This message only displays if the
optional Open Trunking feature is installed.

Action Enter a number from 1 to 99 into the Threshold % column of the


Configure Open Trunking dialog box.

Element Manager Messages A-23


Element Manager Messages
A

Message Invalid value for year.

Description Value for year must be a four-digit year after 1980.

Action Enter a correct four-digit value for the year.

Message Invalid World Wide Name.

Description World wide name must have eight two-digit hexadecimal numbers
(xxxxxxxx:xxxxxxxx).

Action Enter a World Wide Name using eight two-digit hexadecimal


numbers in the format given in the message.

Message Link dropped.

Description Connection between Server platform and the Director has been lost.

Action Wait for the connection to re-establish. Link re-connects are


attempted every 30 seconds.

Message Log is currently in use.

Description Log is in use by another Element Manager.

Action Retry the operation later.

Message Loopback plug(s) must be installed on ports being diagnosed. Press


Next to continue.

Description External loopback diagnostics require an optical loopback plug to be


installed.

Action Ensure that an optical loopback plug is installed in port optical


transceiver before running external wrap diagnostic testing.

A-24 M6140 Director Element Manager User Manual


Element Manager Messages
A

Message Maximum number of versions already installed.

Description The maximum number of firmware versions has been reached.

Action Delete a firmware version before adding a new firmware version.

Message Maximum number of purchased partitions exceeded.

Description The user has attempted to create more partitions that the count of
Partition PFE features purchase.

Action Contact your sales representative or configure fewer partitions.

Message SANtegrity Feature not installed. Please contact your sales


representative.

Description The user selected Configure > Binding, but the optional SANtegrity
Binding feature is not installed.

Action Install the SANtegrity Binding key through the Configure Feature Key
dialog box before using Switch Binding features.

Message No file was selected.

Description Action requires you to select a file

Action Select a file.

Element Manager Messages A-25


Element Manager Messages
A

Message No firmware version file was selected.

Description A file was not selected in the Firmware Library dialog box before an
action, such as modify or send was performed.

Action Click a firmware version in the dialog box to select it, then perform
the action again.

Message No firmware versions to delete.

Description There are no firmware versions in the firmware library to delete.

Action N/A. An informational message.

Message Non-redundant Director must be offline to install firmware.

Description If the Director has only a single CTP card, it must be offline to initiate
a firmware installation.

Action Take Director offline and try again.

Message Not all of the optical transceivers are installed for this range of
ports.

Description Some ports in the specified range do not have optical transceivers
installed.

Action Use a port range that is valid for the ports installed.

Message Open Trunking is not installed for this product. Please contact your
sales representative.

Description The Open Trunking feature key has not been enabled. This message
only displays if the optional Open Trunking feature is installed.

A-26 M6140 Director Element Manager User Manual


Element Manager Messages
A

Action Enter the feature key into the Configure Feature Key dialog box and
enable the key. If you require a feature key, see your account
representative.

Message Performing this operation will change the current state to Offline.

Description This operation causes the Director to go offline.

Action N/A. An informational message.

Message Performing this operation will change the current state to Online.

Description This operation causes the Director to go online.

Action N/A. An informational message.

Message Performing this action will overwrite the date/time on the Director.

Description Warning that occurs when configuring the date and time through the
Configure Date and Time dialog box, that the new time or date will
overwrite the existing time or date set for the Director.

Action Verify that you want to overwrite the current date or time.

Message Periodic Date/Time synchronization must be cleared before


enabling Director clock alert.

Description Action cannot be performed because Periodic Date/Time


Synchronization option is active.

Action Click Periodic Date/Time Synchronization check box in Configure Date


and Time dialog box (Configure menu) to clear check mark and disable
periodic date/time synchronization.

Element Manager Messages A-27


Element Manager Messages
A

Message Port binding was removed from attached devices that are also
participating in Switch Binding.

Description Informational message. User has removed Port Binding from


attached devices, but one or more of these devices is still controlled
by Fabric Binding.

Action Read the Switch Binding Membership List to determine if the devices
should be members.

Message Port cannot swap to itself.

Description Port addresses entered in the Swap Ports dialog box are the same.

Action Make sure that address in the first and second port address fields are
different.

Message Port diagnostics cannot be performed on an inactive port.

Description This displays when port diagnostics is run on a port in an inactive


state.

Action Run the diagnostics on an active port.

Message Port speeds cannot be configured at a higher rate than the Director/
speed.

Description This displays when you configure a port to 2 Gb/s and the Director
speed is set to 1 Gb/s.

Action Set the Director speed to 2 Gb/s in the Configure Operating Parameter
dialog box.

Message Port numbers must be in the range of 0 to xxx.

Description When configuring Preferred Paths, source ports and exit ports must
be in the range of ports for the Switch being configured.

Action In the Configure Preferred Paths dialog box, change the numbers in the
Source Port and Exit Port fields to fall within 0 and xxx, where xxx is

A-28 M6140 Director Element Manager User Manual


Element Manager Messages
A

the maximum the port number for the Switch where you are
configuring paths.

Message Preferred Paths can not be enabled until the Domain ID is set to
Insistent. Disable Preferred Paths, then configure Switch
Parameters.

Description If the domain ID has not been set to Insistent, the user is not allowed
to activate the Preferred Path configuration with the Enable Preferred
Paths check box selected.

Action Close the Configure Preferred Paths dialog box and select Configure >
Operating Parameters > Parameters. On the Configure Switch Parameters
dialog box, select the Insistent check box.

Message R_A_TOV must be greater than E_D_TOV.

Description R_A_TOV must be greater than E_D_TOV.

Action Change one of the values so that R_A_TOV is greater than E_D_TOV.

Message Resource is unavailable.

Description The specified operation cannot be performed because the product is


unavailable.

Action Verify that the link between the Server platform and Director is up. If
the link is up, the Server platform may be busy. Try the operation
again later.

Message Send firmware failed.

Description Send firmware operation has failed.

Element Manager Messages A-29


Element Manager Messages
A

Action Retry the operation. If the condition persists, contact support


personnel.

Message SNMP trap address not defined.

Description An SNMP trap address must be defined if a community name is


defined.

Action Define an SNMP address.

Message Stop diagnostics failed. The test is already running.

Description Diagnostics for the port was not running and the Stop was selected on
the Port Diagnostics dialog box. Diagnostics quit for the port for some
reason, but the Stop button remains enabled.

Action Verify port operation. Retry diagnostics for port and select Stop from
the dialog box. If problem persists, contact your service
representative.

Message Stop diagnostics failed. The test was not running.

Description The action to stop diagnostics failed because the test was not running.

Action Informational message.

Message Switch Binding was removed from attached devices that are also
participating in Port Binding. Please re the Port Binding
Configuration.

Description The device WWNs were removed from the Director’s Membership
List (SANtegrity Switch Binding feature), but you should note that
one or more of these devices still has security control in port binding.

Action Verify that the security level for each device is as required by
reviewing the Bound WWN list in the Configure Ports dialog box.

Message System diagnostics cannot run. The Operational Status is invalid.

Description System diagnostics cannot run on Switches with failed ports.

A-30 M6140 Director Element Manager User Manual


Element Manager Messages
A

Action Replace failed ports.

Message The add firmware process has been aborted.

Description User has ended the add firmware process.

Action N/A. An informational message.

Message The CHAP secrets of the selected record cannot be viewed because
API authentication is disabled.

Description User has attempted edits while API authentication is disabled.

Action You must have API authentication enabled to complete any tasks
involving CHAP secret management. The SAN management
application will only be able to read the stored CHAP secrets if
authentication is turned on. When a user clicks the OK button, the
window disappears. After a security administrator clicks the OK
button, the CHAP Secret editing dialog box will be displayed and the
administrator can type the secret. The field for the existing CHAP
secret will be blank.

Message The data collection process failed.

Description An error occurred in the data collection process.

Action Contact support personnel.

Message The data collection process has been aborted.

Description User has ended the data collection process.

Action N/A. An informational message.

Element Manager Messages A-31


Element Manager Messages
A

Message The default zone must be disabled to configure.

Description The message displays when the user attempts to change the
interoperability mode to open fabric and the default zone is enabled.

Action Disable the default zone and repeat the operation.

Message The Director did not accept the request.

Description The Director did not handle the action.

Action Try action again. If problem persists, contact your support


representative.

Message The Director did not respond in the time allowed.

Description A time out was reached waiting for the Switch to respond to the
action.

Action Try action again.

Message The Director is busy saving maintenance information.

Description Director is busy with a maintenance operation.

Action Retry the operation later. If the condition persists, contact support
personnel.

Message The Director must be offline to change the Management Style.

Description The firmware level is below 6.0, and the user attempted to change the
Management Style.

Action Select Maintenance > Set Online State and click Set Offline. Then change
the management style. Set the Director back online when finished.

Message The Director must be offline to configure.

A-32 M6140 Director Element Manager User Manual


Element Manager Messages
A

Description A configuration change was attempted for a configuration requiring


offline changes.

Action Take the appropriate actions to set the Director offline before
attempting the configuration change.

Message The server is busy processing a request from another Element


Manager.

Description The Server platform could not process the current request because it
is busy handling a request from another Element Manager.

Action Retry the operation later. If the condition persists, contact support
personnel.

Message The firmware file is corrupted.

Description A firmware file has corrupt data.

Action Contact support personnel.

Message The firmware version already exists.

Description Firmware version already exists in the database.

Action N/A. An informational message.

Message The following parameters cannot be disabled while Enterprise


Fabric Mode is active: Insistent Domain ID, Domain RSCN’s.

Description User attempted to disable these parameters in the Configure Switch


Parameters dialog box while Enterprise Fabric Mode is enabled.

Action Disable Enterprise Fabric Mode through the Enterprise Fabric Mode
dialog box in your SAN Management application, then disable the
parameters.

Message The IPL configuration cannot be deleted.

Element Manager Messages A-33


Element Manager Messages
A

Description Deletion of the IPL address configuration was attempted and was not
allowed.

Action Cancel the operation.

Message The link to the Director is not available.

Description The link from the Server platform to the Director is not available.

Action Check Ethernet connection.

Message The maximum number of address configurations has been reached.

Description The maximum number of saved address configurations has been


reached.

Action Delete configurations no longer needed to allow new configuration to


be saved.

Message The optical transceiver is not installed.

Description No information available for a port that is not installed.

Action Ensure the optical transceiver is installed and fully seated.

Message This feature has not been installed. Please contact your sales
representative.

Description Indicator that the feature has not been installed on this Director.

Action Contact your sales representative to obtain the desired feature.

Message This feature key does not include all of the features currently
installed and cannot be activated while the Director is online.

Description The feature set currently installed for this system contains features
that are not being installed with the new feature key. To activate the
new feature key, you must set the Director offline. Activating the new

A-34 M6140 Director Element Manager User Manual


Element Manager Messages
A

feature set, however, will remove current features not in the new
feature set.

Action Set the Director offline through the Set Online State dialog box, then
activate the new feature key using the Configure Feature Key dialog
box.

Message This feature key does not include all of the features currently
installed. Do you want to continue with feature key activation?

Description The feature set currently installed for this system contains features
that are not being installed with the new feature key.

Action Click Yes to activate the feature key and remove current features not
in the new feature set or No to cancel.

Message Threshold alerts are not supported on firmware earlier than


01.03.00.

Description Threshold alerts are not supported in firmware releases before


1.03.00.

Action Informational message.

Message Unable to change to incompatible firmware release.

Description The user tried to download a firmware release that is not compatible
with the current product configuration.

Action Refer to the release notes or contact customer support.

Message Unable to save data collection file to destination.

Description Could not save data collection file to the specified drive (hard drive,
network).

Element Manager Messages A-35


Element Manager Messages
A

Action Retry the operation. If the condition persists, contact support


personnel.

Message You do not have rights to perform this action.

Description User does not have the rights to perform this action.

Action An informational message.

A-36 M6140 Director Element Manager User Manual


Glossary

This glossary includes terms and definitions from:


• $PHULFDQ1DWLRQDO6WDQGDUG'LFWLRQDU\IRU,QIRUPDWLRQ6\VWHPV (ANSI
X3.172-1990), copyright 1990 by the American National Standards Institute
(ANSI). Copies can be purchased from the American National Standards
Institute, 25 West 42nd Street, New York, NY 10036. Definitions from this
text are identified by $ 
• $16,(,$6WDQGDUG$)LEHU2SWLF7HUPLQRORJ\, copyright 1989 by
the Electronic Industries Association (EIA). Copies can be purchased from
the Electronic Industries Association, 2001 Pennsylvania Avenue N.W.,
Washington, D.C. 20006. Definitions from this text are identified by ( 
• ,%0'LFWLRQDU\RI&RPSXWLQJ (ZC20-1699). Definitions from this text are
identified by ' 
• ,QIRUPDWLRQ7HFKQRORJ\9RFDEXODU\, developed by Subcommittee 1 (SC1),
Joint Technical Committee 1 (JTC1), of the International Organization for
Standardization (ISO) and the International Electrotechnical Commission
(IEC). Definitions of published parts of this vocabulary are identified by , 
Definitions taken from draft international standards, committee drafts, and
working papers developed by ISO/IEC SC1/JTC1 are identified by 7 
indicating that final agreement has not been reached among the
participating national bodies of SC1.

A
accelerator A short-cut keystroke method to perform a menu operation. Menu options may
have accelerator keys listed to the right of the menu option. Use the listed
accelerator to perform the menu option’s function when no menu is selected
for the window ' .

access The ability and means necessary to store data in, to retrieve data from, to
transfer data into, to communicate with, or to make use of any resource of a
storage device, a system, or area such as random access memory (RAM) or a
register.

access control A list of all devices that can access other devices across the network and the
permissions associated with that access. 6HHDOVRpersistent binding; zoning.

Glossary g-1
active configuration In FICON management style, the Director or Switch configuration that is
determined by the status of the connectivity attributes.

active Active FRU. A FRU that is currently operating as the active, and not the backup
field-replaceable unit FRU. 6HHDOVR backup field-replaceable unit.

active FRU 6HH active field-replaceable unit.

active port address In FICON management style, an active port address matrix is the port address
matrix matrix that is currently active or operational on an attached Director or switch.

active zone set A single zone set that is active in a multiswitch fabric and is created when a
specific zone set is enabled. This zone set is compiled by checking for
undefined zones or aliases. 6HHDOVRzone; zone set.

address (1) To refer to a device or an item of data by its address $, . (2) The location in
a computer where data is stored. (3) In data communication, the unique code
assigned to each device or computer connected to a network. (4) The identifier
of a location, source, or destination ' 

address name 6\QRQ\PIRUport name.

address resolution ARP. The protocol by which a host computer maintains a cache of address
protocol translations, allowing the physical address of the computer to be derived from
the Internet address ' 

agent Software that processes queries on behalf of an application and returns replies.

alarm (1) A notification of an abnormal condition within a system that provides an


indication of the location or nature of the abnormality to either a local or
remote alarm indicator. (2) A simple network management protocol (SNMP)
message notifying an operator of a network or device problem.
.

allowed connection In FICON management style, in a Director or switch, the attribute that when
set, establishes dynamic connectivity capability. &RQWUDVWZLWK blocked
connection. 6HH connectivity attribute. 6HHDOVR dynamic connectivity;
unblocked connection.

allowed port In FICON management style, this attribute establishes dynamic connectivity
connection capability.

AL_PA 6HH arbitrated loop physical address.

American National ASCII. A standard character set consisting of 7-bit coded characters (8-bit
Standard Code for including parity check) used for information exchange between systems and
Information equipment ' 
Interchange

American National ANSI. A national organization consisting of producers, consumers, and general
Standards Institute interest groups that establishes procedures by which accredited organizations
create and maintain industry standards in the United States $' .

ANSI 6HH American National Standards Institute.

g-2 M6140 Director Element Manager User Manual


API 6HH application program interface.

application (1) The use to which a data processing system is put, for example, a payroll
application, an airline reservation application, or a network application. (2) A
collection of software components used to perform specific types of work on a
computer ' .

application client The source object of the small computer system interface (SCSI) commands and
destination for the command responses.

application program (1) A program that is specific to the solution of an application problem.
Synonymous with application software. (2) A program written for or by a user that
applies to the user’s work, such as a program that does inventory control or
payroll. (3) A program used to connect and communicate with stations in a
network, enabling users to perform application-oriented activities , .

application program API. A set of programming functions and routines that provides access between
interface protocol layers, such as between an application and network services.

application-specific ASIC. An asynchronous transfer mode (ATM) local area network/ wide area
integrated circuit network (LAN/WAN) circuit using cell relay transport technology. ASICs are
designed for a specific application or purpose, such as implementing the
lower-layer Fibre Channel protocol (FC-0). They are particularly suited to sending
video and audio information, as well as text. ASICs differ from general-purpose
devices such as memory chips or microprocessors.

arbitrated loop One of the three connection topologies offered by Fibre Channel protocol. Up to
126 node ports and one fabric port can communicate without the need for a
separate switched fabric. 6HHDOVR point-to-point.

arbitrated loop AL_PA. A 1-byte value used in the arbitrated loop topology that identifies loop
physical address ports (L_Ports). This value then becomes the last byte of the address identified for
each public L_Port on the loop.

arbitration Process of selecting one device from a collection of devices that request service
simultaneously.

area The second byte of the node port (N_Port) identifier.

ARP 6HH address resolution protocol.

array Two or more disk drives connected to a host, and connected and configured such
that the host perceives the disk drives to be one disk.

ASCII 6HH American National Standard Code for Information Interchange.

ASIC 6HH application-specific integrated circuit.

attribute In FICON management style, the connection status of the address on a


configuration matrix: allowed, blocked, or prohibited.

Audit Log Log summarizing actions (audit trail) made by the user.
Director or Switch $XGLW/RJ. Log displayed through the Element Manager
application that provides a history of all configuration changes made to an
individual Director or Switch from the respective Element Manager application, a

g-3
Glossary
simple network management protocol (SNMP) management workstation, a
Fibre Connection (FICON) or open systems host, or the maintenance port. This
information is useful for administrators and users.

availability The accessibility of a computer system or network resource.

B
b 6HH bit.

B 6HH byte.

backup diskette A diskette that contains duplicate information from an original diskette. The
backup diskette is used in case information on the original diskette is
unintentionally changed or destroyed ' .

backup Backup FRU. When an active FRU fails, an identical backup FRU takes over
field-replaceable unit operation automatically (failover) to maintain Director or Switch and Fibre
Channel link operation. 6HHDOVRactive field-replaceable unit

backup FRU 6HH backup field-replaceable unit.

bandwidth (1) The amount of data that can be sent over a given circuit. (2) A measure of
how fast a network can move information, usually measured in Hertz (Hz).

Basic management Software that bundles the Element Manager application for a specific Switch or
application Director and the SAN Management application on a customer-supplied server
platform. Functionally, Basic and the standard applications installed on a
shipped management server are identical, except that Basic does not support
the Call-Home feature. In addition, Basic requires installation of the remote
client application to a remote computer running client software from the Basic
CD.

baud The unit of signaling speed, expressed as the maximum number of times per
second the signal can change the state of the transmission line or other
medium. The units of baud are seconds to the negative 1 power. Note: With
Fibre Channel scheme, a signal event represents a single transmission bit.

BB_Credit 6HH buffer-to-buffer credit.

beaconing Use of light-emitting diodes (LEDs) on ports, port cards, field-replaceable units
(FRUs), and directors to aid in the fault-isolation process. When enabled, active
beaconing causes LEDs to flash that the user can locate field-replaceable units
(FRU’s), switches, or directors in cabinets or computer rooms.

ber 6HH bit error rate.

bidirectional In Fibre Channel protocol, the capability to simultaneously communicate at


maximum speeds in both directions over a link.

bit Abbreviated as b. (1) Binary digit, the smallest unit of data in computing, with
a value of zero or one ' . (2) A bit is the basic data unit of all digital
computers. It is usually part of a data byte or data word; however, a single bit

g-4 M6140 Director Element Manager User Manual


can be used to control or read logic ON/OFF functions. (3) A bit is a single digit in
a binary number. Bits are the basic unit of information capacity on a computer
storage device. Eight bits equals one byte.

bit error rate Abbreviated as ber. Ratio of received bits that contain errors to total of all bits
transmitted.

blocked connection In FICON management style, in a Director or switch, the attribute that, when set,
removes the communication capability of a specific port. A blocked address is
disabled so that no other address can be connected to it. A blocked attribute
supersedes a dedicated or prohibited attribute on the same address. &RQWUDVWZLWK
allowed connection; unblocked connection. 6HH connectivity attribute. 6HHDOVR
dynamic connection; dynamic connectivity.

blocked port In a Director or switch, the attribute that when set, removes the communication
capability of a specific port. A blocked port continuously transmits the offline
sequence.

boot (1) To start or restart a computer. (2) Loading the operating system.

B_Port 6HH bridge port.

bps Bits per second.

Bps Bytes per second.

bridge (1) An attaching device that connects two local area network (LAN) segments to
allow the transfer of information from one LAN segment to the other. A bridge can
connect the LAN segments directly by network adapters and software in a single
device, or can connect network adapters in two devices through software and use
of a telecommunication link between the two adapters ' . (2) A functional unit
that connects two LANs that use the same logical link control protocol, but may
use different media access control protocols '7 .(3) A device that connects and
passes packets between two network segments that use the same communications
protocol.

bridge port B_Port. (1) In Fibre Channel protocol, a fabric inter-element port used to connect
bridge devices with E_Ports on a switch. B_Ports provide a subset of E_Port
functionality. (2) Physical interface between the fabric (switch) and a bridge
device. The interface is identical to an expansion port (E_Port), but it does not
participate in full expansion port protocols. As such, it does not assign domain IDs
or participate in routing protocol. 6HHDOVRexpansion port; fabric loop port; fabric
port; generic port; hub port; node loop port; node port; segmented expansion port.

buffer Storage area for data in transit. Buffers compensate for differences in processing
speeds between devices.6HH buffer-to-buffer credit.

buffer-to-buffer credit BB_Credit. (1) The maximum number of receive buffers allocated to a transmitting
node port (N_Port) or fabric port (F_Port). Credit represents the maximum
number of outstanding frames that can be transmitted by that N_Port or F_Port
without causing a buffer overrun condition at the receiver. (2) The maximum
number of frames a port can transmit without receiving a receive ready signal
from the receiving device. BB_Credit can be adjustable to provide different levels
of compensation.

g-5
Glossary
bypassed port If a port is bypassed, all serial channel signals route past the port. A device
attached to the port cannot communicate with other devices in the loop.

byte Abbreviated as B. A byte generally equals eight bits, although a byte can equal
from four to ten bits.

C
cache memory A memory subsystem that stores recently used instructions and data for fast
access. The larger the cache, the more information that can be stored, and the
fewer time-consuming memory accesses a central processing unit (CPU) must
make to complete a task. Cache is very fast memory, typically static random
access memory (SRAM).

call-home Product feature which enables the server platform to automatically contact a
support center and report system problems. The support center server accepts
calls from the server platform logs reported events, and can notify one or more
support center representatives.

cascade Linking two or more Fibre Channel switches to form a larger Switch or fabric.
The switched link through fiber cables attached between one or more
expansion ports (E_Ports). 6HHDOVRexpansion port.

cell In FICON management style, in a port address matrix, a cell is the intersection
point between a horizontal port address and a vertical port address. A selected
cell is indicated by the cell cursor.

central memory CMM. In the ED-5000 Director, a circuit card that provides the storage area for
module card Fibre Channel ports to deposit and retrieve Fibre Channel frames. Each port is
allocated a portion of this memory divided into a fixed number of frame
buffers.
CMM. In the ED-1032 Director, a circuit card that provides the storage area for
Fibre Channel ports to deposit and retrieve Fibre Channel frames. Each port is
allocated a portion of this memory divided into a fixed number of frame
buffers.

central processing CPU. The heart of the computer, this is the component that actually executes
unit instructions.

chained Two directors or switches that are physically attached.

Class 2 Fibre Channel Provides a connectionless (not dedicated) service with notification of delivery
service or nondelivery between two node ports (N_Ports).

Class 3 Fibre Channel Provides a connectionless (not dedicated) service without notification of
service delivery or nondelivery between two node ports (N_Ports). 6\QRQ\PRXVZLWK
datagram.

Class F Fibre Channel Used by switches to communicate across interswitch links (ISLs) to configure,
service control, and coordinate a multiswitch fabric.

g-6 M6140 Director Element Manager User Manual


Class of Fibre Channel Defines the level of connection dedication, acknowledgment, and other
service characteristics of a connection.

client A node that requests network services from a server. Typically the node is a
personal computer (PC).

client/server Architectural model that functionally divides that execution of a unit of work
computing between activities initiated by an end user or program (client) and those
maintaining data (servers). Originally thought to make mainframes obsolete.

cluster A group of processors interconnected by a high-speed network (typically


dedicated) for increased reliability and scalability. Clusters are groupings of
multiple servers in which information is shared among systems. When a server in
a cluster fails, one of the other servers in the cluster assumes the responsibility of
the failed server, thereby ensuring server, application, and data availability.

CMM 6HH central memory module card.

CMM 6HH central memory module card.

community name A name that represents an simple network management protocol (SNMP)
(SNMP) community that the agent software recognizes as a valid source for SNMP
requests. A product recognizes a management station as a valid recipient for trap
information when the station’s community names are configured.

community profile Information that specifies which management objects are available to what
management domain or simple network management protocol (SNMP)
community name.

community (SNMP) A relationship between an simple network management protocol (SNMP) agent
and a set of SNMP managers that defines authentication, access control, and proxy
characteristics.

concurrent firmware Firmware is upgraded without disrupting Switch operation.


upgrade

configuration data The collection of data that results from configuring product and system operating
parameters. For example, configuring operating parameters, simple network
management protocol (SNMP) agent, zoning configurations, and port
configurations through the Element Manager application, results in a collection of
configuration data. Configuration data includes: identification data, port
configuration data, operating parameters, simple network management protocol
(SNMP) configuration, and zoning configuration.

connectivity The ability of devices to link together.

connectivity attribute In FICON management style, the characteristic that determines port address status
for the Director or switch. 6HHallowed connection; blocked connection;
connectivity control; dynamic connection; dynamic connectivity; unblocked
connection.

connectivity control In FICON management style, in a Director or switch, the method used to change
port address connectivity attributes and determine the communication capability
of the link attached to the port ' .6HHDOVRactive port address matrix;
connectivity attribute.

g-7
Glossary
connector 6\QRQ\PIRUoptical fiber connector.

control processor CTP card. Circuit card that contains the Director or Switch microprocessor. The
card CTP card also initializes hardware components of the system after power-on.
The card may contain an RJ-45 twisted pair connector.

control unit port CUP. An internal Director or Switch port on the control processor (CTP) card
(labelled FE) that communicates with channels to report error conditions and
link initialization ' .

CRC 6HH cyclic redundancy check.

credit 6HH buffer-to-buffer credit.

CTP card 6HH control processor card.

CUP 6HH control unit port.

cyclic redundancy CRC. System of error checking performed at both the sending and receiving
check station using the value of a particular character generated by a cyclic algorithm.
When the values generated at each station are identical, data integrity is
confirmed.

D
DASD 6HH direct access storage device.

database A collection of data with a given structure for accepting, storing, and providing
on-demand data for multiple users. 7

data center A collection of servers and data storage devices, usually in one location,
administered by an information technology/information services (IT/IS)
manager.

data directory Critical information for all managed products (including directors and
switches). Information stored here includes:
• All configuration data
• All log files
• Call-home settings
• Firmware library
• Zoning library

datagram 6\QRQ\PIRUClass 3 Fibre Channel service.

default Pertaining to an attribute, value, or option that is assumed by a system when


none is explicitly specified ', .

default zone A zone that contains all attached devices that are not members of a separate
active zone.

g-8 M6140 Director Element Manager User Manual


destination A point or location, such as a processor, Director or switch, or server, to which data
is transmitted ' .

destination address D_ID. An address identifier that indicates the targeted destination of a data frame.

device (1) Mechanical, electrical, or electronic hardware with a specific purpose ' . 6HH
DOVR managed product.
(2) 6HH node.

diagnostics (1) The process of investigating the cause or nature of a problem in a product or
system ' . (2) Procedures or tests used by computer users and service personnel
to diagnose hardware or software problems ' .

dialog box A pop-up window in the user interface with informational messages or fields to be
modified or completed with desired options.

direct access storage DASD. (1) Generic classification for a storage peripheral that can respond directly
device to random requests for information. Usually refers to a disk drive. (2) A storage
device that provides direct access to data, and in which access time is independent
of data location.

direct current director An intelligent, highly-available, Fibre Channel Switch providing any-to-any port
connectivity between nodes (end devices) on a switched fabric. The Director sends
data transmissions (data frames) between nodes in accordance with the address
information present in the frame headers of those transmissions.

DNS name Domain name system or domain name service. Host or node name for a device or
managed product that is translated to an Internet protocol (IP) address through a
domain name server.

domain A Fibre Channel term describing the most significant byte in the node port
(N_Port) identifier for the Fibre Channel device. It is not used in the Fibre Channel
small computer system interface (FC-SCSI) hardware path ID. It is required to be
the same for all SCSI targets logically connected to a Fibre Channel adapter.

domain ID Domain identifier. A number that uniquely identifies a Switch in a multiswitch


fabric. A distinct domain ID is automatically allocated to each Switch in the fabric
by the principal switch. The preferred domain ID is the domain ID value that a
Switch requests from the principal switch. If the value has not been allocated to
another Switch in the fabric, it is granted by the principal Switch and becomes the
requesting switch’s active domain ID. The active domain ID is the domain ID that
has been assigned by the principal Switch and that a Switch is currently using.

domain name server In TCP/IP, a server program that supplies name-to-address translation by
mapping domain name to internet addresses. '

drop-down menu A menu that appears when a heading in a navigation bar is clicked on with the
mouse. The objects that appear in the drop-down menus are organize by their
headings in the navigation bar.

dump The file that is created when the Director detects a software fault. It contains
various data fields that, when extracted, assist in the debugging of software.

g-9
Glossary
dynamic connection A connection between two ports, established or removed by the directors and
that, when active, appears as one continuous link. 6HH connectivity attribute.
6HHDOVRallowed connection; blocked connection; dynamic connectivity;
unblocked connection.

dynamic connectivity The capability that allows connections to be established and removed at any
time.

dynamic random DRAM. Random access memory that resides in a cell comprised of a capacitor
access memory and transistor. DRAM data deteriorates (that is, is dynamic) unless the
capacitor is periodically recharged by the controlling microprocessor. DRAM is
slow, but relatively inexpensive ' . &RQWUDVWZLWK static random access
memory.

E
EFCM Basic interface The interface provides a graphical user interface (GUI) similar to the Element
Manager application, and supports Director or Switch configuration, statistics
monitoring, and basic operations. With Director or Switch firmware installed,
administrators or operators with a browser-capable personal computer (PC)
and an Internet connection can monitor and manage the Director or Switch
through an embedded web server interface.

electronic data EDI. The electronic transfer of preformatted business documents, such as
interchange purchase orders and bills of lading, between trading partners.

Electronic Industries EIA. The governing body that publishes recommended standards for physical
Association devices and associated interfaces. For example, RS-232 is the EIA standard that
defines computer serial port connectivity ' .

electronic mail E-mail. Any communications service that permits the electronic transmission
and storage of messages and attached or enclosed files.

Element Manager Application that implements the management user interface for a Director or
application switch. (1) In your SAN Management application application, the software
component that provides a graphical user interface for managing and
monitoring Switch products. When a product instance is opened from your
SAN Management application, the corresponding Element Manager
application is invoked.

e-mail 6HH electronic mail.

enhanced availability EAF. A backup field-replaceable unit (backup FRU) that is ordered and
feature installed to provide redundancy and reduce disruption in case of failure ' .

enterprise The entire storage system. The series of computers employed largely in
high-volume and multi-user environments such as servers or networking
applications; may include single-user workstations required in demanding
design, engineering and audio/visual applications.

Enterprise Systems ESA™. A computer architecture introduced by IBM in 1988 as ESA/370. The
Architecture architecture added access registers to improve virtual memory management

g-10 M6140 Director Element Manager User Manual


and increase storage from 2 gigabyte to 6 terabytes. The architecture was enhanced
with the introduction of ESA/390 in 1990 ' .

Enterprise Systems ESCON™. An IBM architecture, technology, and set of products and services
Connection introduced in 1990 that provides a dynamically connected environment using
fiber-optic cables as the data transmission medium ' .

Enterprise Systems ESCON™ Director. A device that provides connectivity capability and control for
Connection Director attaching any two links to each other through the ESON channel. Specifically, any
of the hardware devices provided for interconnecting IBM-compatible mainframe
equipment through the proprietary ESCON channel connection. IBM’s model
numbers for ESCON directors include the 9031 and 9033.

E_Port 6HHexpansion port.

error-detect time-out E_D_TOV. The time the Switch waits for an expected response before declaring an
value error condition.

error log 6HH Event Log.

error message Indication that an error has been detected ' . 6HHDOVR information message;
warning message.

ESA™ 6HH Enterprise Systems Architecture.

ESCON™ 6HH Enterprise Systems Connection.

ESCON™ Director 6HH Enterprise Systems Connection Director.

ESD 6HH Element Manager application.

Ethernet A widely implemented local area network (LAN) protocol that uses a bus or star
topology and serves as the basis for the Institute of Electrical and Electronics
Engineers (IEEE) 802.3 standard, which specifies the physical and software layers.

Ethernet hub A device used to connect the server platform and the directors it manages.

event code A three-digit number that specifies the exact event that occurred. This code
provides information on system failures, such as hardware failures, failure
locations, or general information on normal system events.

Event Log Director or Switch (YHQW/RJ. Log displayed through the Element Manager
application that provides a history of events for an individual Director or switch,
such as system events, degraded operation, FRU failures, FRU removals and
replacements, port problems, Fibre Channel link incidents, and communication
problems between the server platform and Switch or Director product. All
detected software and hardware failures are recorded in the (YHQW/RJ. The
information is useful to maintenance personnel for fault isolation and repair
verification. 6HHDOVR Audit Log; Hardware Log; Link Incident Log; Threshold
Alert Log.

exchange A term that refers to one of the Fibre Channel protocol “building blocks,”
composed of one or more nonconcurrent sequences.

g-11
Glossary
expansion port E_Port. Physical interface on a Fibre Channel Switch within a fabric, that
attaches to an E_Port on another Fibre Channel Switch through an interswitch
link (ISL) to form a multiswitch fabric. 6HHDOVRbridge port; fabric loop port;
fabric port; generic port; hub port; node loop port; node port; segmented
expansion port.

explicit fabric login The process by which a node port (N_Port) learns the characteristics of the
fabric to which it is attached by sending a fabric login command (FLOGI) frame
to the fabric port (F_Port) address FFFFFE (hexadecimal).

extended distance XDF. A means to extend the propagation distance of a fiber-optic signal.
feature

F
fabric Entity that interconnects node ports (N_Ports) and is capable of routing
(switching) Fibre Channel frames, using the destination ID information in the
Fibre Channel frame header accompanying the frames. A Switch is the smallest
entity that can function as a complete switched fabric topology.

fabric element Any active director, switch, or node in a switched fabric.

fabric login The process by which node ports (N_Ports) establish their operating
parameters. During fabric login, the presence or absence of a fabric is
determined, and paths to other N_Ports are mapped. Specific operating
characteristics for each port, such as buffer-to-buffer credit (BB_Credit) and
data frame size, are also established.

fabric login command FLOGI. The command that establishes the initial operating parameters and
topology for a fabric. The command is accepted by a fabric port (F_Port) ' .

fabric loop port FL_Port. A fabric port (F_Port) that contains arbitrated loop (AL) functions
associated with the Fibre Channel arbitrated loop (FC-AL) topology. The access
point of the fabric for physically connecting an arbitrated loop of node loop
ports (NL_Ports).6HHDOVRbridge port; expansion port; fabric port; generic port;
hub port; node loop port; node port; segmented expansion port.

fabric mode 6HH interoperability mode.

fabric port F_Port. Physical interface within the fabric that connects to a node port
(N_Port) through a point-to-point full duplex connection. 6HHDOVRbridge port;
expansion port; fabric loop port; generic port; hub port; node loop port; node
port; segmented expansion port.

fabric services The services that implement the various Fibre Channel protocol services that
are described in the standards. These services include the fabric controller
(login server), name server, and server platform.

fabric switches A device which allows the communication between multiple devices using
Fibre Channel protocols. A fabric Switch enables the sharing bandwidth and
end-nodes using basic multiplexing techniques.

g-12 M6140 Director Element Manager User Manual


failover Automatic and nondisruptive transition of functions from an active
field-replaceable unit (FRU) that has failed to a backup FRU.

FC 6HH Fibre Channel.

FC-0 The Fibre Channel layer that describes the physical link between two ports,
including the transmission media, transmitter and receiver circuitry, and interfaces
' . This consists of a pair of either optical fiber or electrical cables (link media)
along with transceiver circuitry which work together to convert a stream of bits at
one end of the link to a stream of bits at the other end.

FC-1 Middle layer of the Fibre Channel physical and signaling interface (FC-PH)
standard, defining the 8B/10B encoding/decoding and transmission protocol.

FC-2 The Fibre Channel layer that specifies the signaling protocol, rules, and
mechanisms required to transfer data blocks. The FC-2 layer is very complex and
provides different classes of service, packetization, sequencing, error detection,
segmentation, and reassembly of transmitted data ' .

FC-3 The Fibre Channel layer that provides a set of services common across multiple
node ports (N_Ports) of a Fibre Channel node. The services are not commonly
used and are essentially reserved for Fibre Channel architecture expansion ' .

FC-4 The Fibre Channel layer that provides mapping of Fibre Channel capabilities to
upper level protocols (ULP), including Internet protocol (IP) and small computer
system interface (SCSI) ' .

FCA 6HH Fibre Channel Association.

FC-AL 6HH Fibre Channel arbitrated loop.

FC adapter Fibre Channel adapter. 6HHhost bus adapter.

FCC Federal Communications Commission.

FCC-IOC 6HH Fibre Channel I/O controller.

FCFE 6HH Fibre Channel fabric element.

FCFE-MIB 6HH Fibre Channel fabric element management information base.

FCIA 6HH Fibre Channel Industry Association.

FC IP 6HH Fibre Channel IP address.

FCMGMT 6HH Fibre Channel management framework integration.

FC-PH 6HH Fibre Channel physical and signaling interface.

feature key A unique key to enable additional product features. This key is entered into the
&RQILJXUH)HDWXUH.H\ dialog box in the Element Manager application to activate
optional hardware and software features. Upon purchasing a new feature, a
feature key is provided to the customer.

g-13
Glossary
fiber The fiber-optic cable made from thin strands of glass through which data in the
form of light pulses is transmitted. It is used for high-speed transmissions over
medium (200 m) to long (10 km) distances.

fiber-optic cable 6\QRQ\PIRUoptical cable.

fibre A generic Fibre Channel term used to cover all transmission media types
specified in the Fibre Channel Physical Layer (FC-PH) standard such as optical
fiber, copper twisted pair, and copper coaxial cable.

Fibre Channel FC. Integrated set of standards recognized by American National Standards
Institute (ANSI) which defines specific protocols for flexible information
transfer. Logically, a point-to-point serial data channel, structured for high
performance.

Fibre Channel FC adapter. 6HH host bus adapter.


adapter

Fibre Channel address A 3-byte node port (N_Port) identifier which is unique within the address
domain of a fabric. Each port may choose its own identifier, or the identifier
may be assigned automatically during fabric login.

Fibre Channel FC-AL. A high-speed (100 Mbps) connection which is a true loop technology
arbitrated loop where ports use arbitration to establish a point-to-point circuit. Data can be
transferred in both directions simultaneously, achieving a nominal transfer rate
between two devices of 200 Mbps.

Fibre Channel FCA. The FCA is a non-profit corporation consisting of over 150 members
Association throughout the world. Its mission is to nurture and help develop the broadest
market for Fibre Channel products through market development, education,
standards monitoring, and fostering interoperability among members’
products.

Fibre Channel fabric FCFE. Any device linked to a fabric.


element

Fibre Channel fabric FCFE-MIB. A table of variables available to network management stations and
element resident on a Switch or director. Through the simple network management
management protocol (SNMP) these pointers can be manipulates to monitor, control, and
information base configure the Switch or director.

Fibre Channel Industry FCIA. A corporation consisting of over 100 computer industry-related
Association companies. Its goal is to provide marketing support, exhibits, and tradeshows
for its member companies. The FCIA complements activities of the various
standards committees.

Fibre Channel I/O FCC-IOC. In a director, the integrated controller on the control processor (CTP)
controller card dedicated to the task of managing the embedded Fibre Channel port. In a
Director or switch, the FCC-IOC controls the embedded Fibre Channel port
and configures the ports’ application-specific integrated circuits (ASICs).

Fibre Channel IP FC IP. The default FC IP on a new Switch is a temporary number divided by the
address switch’s World Wide Name (WWN). The system administrator needs to enter a
valid IP address.

g-14 M6140 Director Element Manager User Manual


Fibre Channel FCMGMT. A standard defined by the Fibre Alliance to provide easy management
management for Fibre Channel-based devices such as switches, hubs, and host-bus adapters.
framework integration

Fibre Channel FC-PH. The American National Standards Institute (ANSI) document that
physical and specifies the FC-0 (physical signaling), FC-1 (data encoding), and FC-2 (frame
signaling interface construct) layers of the Fibre Channel protocol ' .

Fibre Channel American National Standards Institute (ANSI) standard that provides a common,
standard efficient data transport system that supports multiple protocols. The architecture
integrates both channel and network technologies, and provides active, intelligent
interconnection among devices. All data transmission is isolated from the control
protocol, allowing use of point-to-point, arbitrated loop, or switched fabric
topologies to meet the needs of an application.

Fibre Connection FICON. An IBM set of products and services introduced in 1999 that is based on
the Fibre Channel Standard. FICON technology uses fiber-optic cables as the data
transmission medium, and significantly improves I/O performance (including
one Gb/s bi-directional data transfer). FICON is designed to coexist with
ESCON™ channels, and FICON-to-ESCON control unit connections are
supported ' .

fibre port module FPM. A one Gb/s module that contains four generic ports (G_Ports).

FICON 6HH Fibre Connection.

FICON Management An optional feature that can be enabled on the Director or Switch or Switch
Server through the Element Manager application. When enabled, host control and
management of the Director or Switch or Switch is provided through an S/390
Parallel Enterprise or 2/Series Server attached to a Director or Switch or Switch
port.

FICON management The management style that is most useful when attaching to IBM S/390 Enterprise
style Servers.6HHDOVRopen systems management style; management style.

field-replaceable unit FRU. Assembly removed and replaced in its entirety when any one of its
components fails ' . 6HH active field-replaceable unit.

file server A computer that stores data centrally for network users and manages access to
that data.

file transfer protocol FTP. A transmission control protocol/Internet protocol (TCP/IP) -based
client/server protocol used to transfer files to and from a remote host. Does not
perform any conversion or translation.

firmware Embedded program code that resides and runs on, for example, directors,
switches, and hubs.

FLASH memory Reusable nonvolatile memory that is organized as segments for writing, and as
bytes or words for reading. FLASH memory is faster than read-only memory, but
slower than random access memory ' .

FLOGI 6HH fabric login command.

FL_Port 6HH fabric loop port.

g-15
Glossary
FPM 6HH fibre port module.

F_Port 6HHfabric port.

frame A variable-length packet of data that is transmitted in frame relay technology.

FRU 6HHfield-replaceable unit.

FTP 6HH file transfer protocol.

G
gateway address (1) In transmission control protocol/Internet protocol (TCP/IP), a device that
connects two systems that use the same or different protocols. (2) In TCP/IP,
the address of a router to which a device sends frames destined for addresses
not on the same physical network (for example, not on the same Ethernet) as
the sender. The hexadecimal format for the gateway address is
XXX.XXX.XXX.XXX.

Gb 6HH gigabit.

GB 6HH gigabyte.

GbIC 6HH gigabit interface converter.

Gbps Acronym for gigabits per second.

generic port G_Port. Physical interface on a Director or Switch that can function either as a
fabric port (F_Port) or an expansion port (E_Port), depending on the port type
to which it connects. 6HHDOVRbridge port; expansion port; fabric loop port;
fabric port; hub port; node loop port; node port; segmented expansion port.

generic port module GPM card. A port card that implements four generic ports (G_Ports) and
card provides the physical connection point for links to Fibre Channel devices.

gigabit Gb. A unit of measure for data storage, equal to approximately 134,217,728
bytes. Approximately one eighth of a gigabyte.

gigabit interface GbIC. A removable module that converts an electrical serial data stream to an
converter optical or amplified electrical serial data stream. Contains connector for
attaching fiber-optic cable.

gigabyte GB. A unit of measure for data storage, equal to 1,073,741,824 bytes. Generally
approximated as one billion bytes ' .

GLSL G_Port, long wave, single mode LC connector, 1 Gigabit.

GLSR G_Port, short wave, single mode, MT-RJ connector, 1 Gigabit.

GPM card 6HHgeneric port module card.

G_Port 6HH generic port.

g-16 M6140 Director Element Manager User Manual


graphical user GUI. A visually oriented interface where the user interacts with representations of
interface real-world objects displayed on the computer screen. Interactions with such
objects produce actions that are intuitive to the user ' .

GSM card A generic port (G_Port) module card containing shortwave laser ports for
multimode fiber-optic cables.

GSML G_Port, short wave, multimode, LC connector, 1 Gigabit.

GSMR G_Port, short wave, multimode, MT-RJ connector, 1 Gigabit.

GUI 6HH graphical user interface.

GXXL G_Port, mixed mode, LC connector, 1 Gigabit.

GXXR G_Port, mixed mode, MT-RJ connector, 1 Gigabit.

H
hard drive An electromechanical device used for information storage and retrieval,
incorporating one or more rotating disks on which data is recorded, stored, and
read magnetically.

Hardware Log Director or Switch +DUGZDUH/RJ. Log displayed through the Element Manager
application that provides a history of FRU removals and replacements (insertions)
for an individual Director or switch. The information is useful to maintenance
personnel for fault isolation and repair verification. 6HHDOVR Audit Log; Event Log;
Link Incident Log; Threshold Alert Log.

hardware The console runs the Hardware Management console application (HWMCA), and
management console is the operations and management personal computer (PC) platform for S/390 and
z/Series servers.

HBA 6HH host bus adapter.

heterogeneous fabric A fabric containing open-fabric-compliant products from various vendors.


&RQWUDVWZLWK homogeneous fabric.

hexadecimal A numbering system with base of sixteen; valid numbers use the digits 0 through 9
and characters A through F, where A represents 10 and F represents 15 ' .

homogeneous fabric A fabric consisting of only one vendor’s products. &RQWUDVWZLWK heterogeneous
fabric.

hop (1) Data transfer from one node to another node. (2) Describes the number of
switches that handle a data frame from its origination point through it’s
destination point.

hop count The number of hops a unit of information traverses in a fabric.

host The computer that other computers and peripherals connect to.

g-17
Glossary
host bus adapter HBA. Logic card that provides a link between the server and storage
subsystem, and that integrates the operating systems and I/O protocols to
ensure interoperability.

H_Port 6HH hub port.

hub (1) In Fibre Channel protocol, a device that connects nodes into a logical loop
by using a physical star topology. (2) In Ethernet, a device used to connect the
server platform and the directors it manages.

hub port H_Port. In arbitrated loop devices, a port that uses arbitrated loop protocols.
The physical interface that attaches to a loop device, either an end device or
another loop interconnect device (hub).

I
ID 6HH identifier.

identifier ID. (1) One or more characters used to identify or name a data element and
possibly to indicate certain properties of that data element '7 . (2) A
sequence of bits or characters that identifies a program, device, or system to
another program, device, or system. 6HHDOVR port name.

IEEE 6HH Institute of Electrical and Electronics Engineers.

IML 6HH initial machine load.

inband management Management of the Director or Switch through Fibre Channel. An interface
connection to a port card. &RQWUDVWZLWK out-of-band management.

industry standard ISA. Bus architecture designed for personal computers (PCs) that use an Intel
architecture 80386, 80486, or Pentium microprocessor. ISA buses are 32 bits wide and
support multiprocessing.

information message Message notifying a user that a function is performing normally or has
completed normally. 6HHDOVRerror message; warning message.

initial machine load IML. Hardware reset for all installed control processor (CTP) cards on the
Director or switch. This reset does not affect other hardware. It is initiated by
pushing the IML button on a director’s or switch’s operating panel.

initial program load IPL. The process of initializing the device and causing the operating system to
start. An IPL may be initiated through a menu option or a hardware button.

initial program load IPL configuration. In FICON management style, information stored in a
configuration Director or switch’s nonvolatile memory that contains default configurations.
The Director or Switch loads the file for operation when powered on.

Institute of Electrical IEEE. An organization of engineers and technical professionals that promotes
and Electronics the development and application of electronic technology and allied sciences.
Engineers

g-18 M6140 Director Element Manager User Manual


interface (1) A shared boundary between two functional units, defined by functional, signal,
or other characteristics. The concept includes the specification of the connection of
two devices having different functions 7 . (2) Hardware, software, or both, that
link systems, programs, or devices ' .

Internet protocol IP. Network layer for the transmission control protocol/Internet protocol
(TCP/IP) protocol used on Ethernet networks. IP provides packet routing,
fragmentation, and reassembly through the data link layer ' .

Internet protocol IP address. Unique string of numbers (in the format xxx.xxx.xxx.xxx) that
address identifies a device on a network.

interoperability Ability to communicate, execute programs, or transfer data between various


functional units over a network.

interoperability mode Interpol mode. A management style set through management software that allows
products to operate in homogeneous or heterogeneous fabrics.

interop mode 6HH interoperability mode.

interswitch link ISL. Physical expansion port (E_Port) connection between two directors in a fabric.

IP 6HH Internet protocol.

IP address 6HH Internet protocol address.

IPL 6HH initial program load.

IPL configuration 6HH initial program load configuration.

ISL 6HH interswitch link.

ISL hop Interswitch link hop. 6HH hop.

isolated E_Port Isolated expansion port.6HH segmented expansion port.

isolated expansion Isolated E_Port. 6HH segmented expansion port.


port

J
Java An object-oriented programming language derived from C++ that produces code
that is platform independent. Developed by Sun Microsystems designed for
distribution and distributable applications development. Java applications require
a program called the Java Virtual Machine (JVM) to execute. JVMs have been
developed for many of the mainstream platforms and operating systems.

L
LAN 6HH local area network.

g-19
Glossary
light-emitting diode LED. A semiconductor chip that emits visible or infrared light when electricity
passes through it. LEDs are used on Switch or Director field-replaceable units
(FRUs) and the front bezel to provide visual indications of hardware status or
malfunctions.

LIN 6HH link incident.

link Physical connection between two devices on a switched fabric. A link consists
of two conductors, one used for sending and the other for receiving, thereby
providing a duplex communication path.

link incident LIN. Interruption to link due to loss of light or other causes. 6HHDOVR link
incident alerts.

link incident alerts A user notification, such as a graphic symbol in the Element Manager
application +DUGZDUH9LHZ that indicates that a link incident has occurred. 6HH
DOVR link incident.

Link Incident Log Director or Switch /LQN,QFLGHQW/RJ. Log displayed through the Element
Manager application that provides a history of Fibre Channel link incidents
(with associated port numbers) for an individual Director or switch. The
information is useful to maintenance personnel for isolating port problems
(particularly expansion port (E_Port) segmentation problems) and repair
verification. 6HHDOVR Audit Log; Event Log; Hardware Log; Threshold Alert
Log.

LIP 6HH loop initialization primitive.

load balancing Ability to evenly distribute traffic over multiple interswitch links within a
fabric. Load balancing on directors and switches takes place automatically.

local area network LAN. A computer network in a localized geographical area (for example, a
building or campus), whose communications technology provides a
high-bandwidth medium to which many nodes are connected ' . 6HHDOVR
storage area network.

logical port address In a Director or switch, the address used to specify port connectivity
parameters and to assign link addresses for the attached channels and control
units.

logical Switch number LSN. A two-digit number used by the I/O configuration program (IOCP) to
identify a Director or Switch ' .

logical unit number LUN. In Fibre Channel addressing, a logical unit number is a number assigned
to a storage device which, in combination with the storage device’s node port’s
World Wide Name, represents a unique identifier for a logical device on a
storage area network. Peripherals use LUNs to represent addresses. A small
computer system interface (SCSI) device’s address can have up to eight LUNs.

loop A loop is a configuration of devices connected to the fabric via a fabric loop
port (FL_Port) interface card.

loop address In Fibre Channel protocol, a term indicating the unique ID of a node in Fibre
Channel loop topology, sometimes referred to as a loop ID.

g-20 M6140 Director Element Manager User Manual


loopback plug In a fiber optic environment, a type of duplex connector used to wrap the optical
output signal of a device directly to the optical input. 6\QRQ\PRXVZLWK wrap
plug.

loopback test Test that checks attachment or control unit circuitry, without checking the
mechanism itself, by returning the output of the mechanism as input.

loop initialization LIP. In an arbitrated loop device, a process by which devices connected to hub
primitive ports (H_Ports) on the arbitrated loop device notify other devices and the Switch
of the presence in the loop by sending LIP sequences and subsequent frames
through the loop. This process allows linked arbitrated loop devices to perform
fabric loop port (FL_Port) arbitration as they link through hub ports.

loop master In an arbitrated loop device, a reference to the loop master World Wide Name
(WWN) field in the /RRS9LHZ, the loop master is the arbitrated loop device that is
responsible for allocating arbitrated loop physical addresses (AL-PAs) on the loop.
An arbitrated loop device becomes the loop master through arbitration when there
are multiple arbitrated loop devices on the loop. The arbitrated loop device with
the lowest WWN becomes the loop master.

loop port L_Port. 6\QRQ\PIRU hub port.

loop switches Loop switches support node loop port (NL_Port) Fibre Channel protocols.
Switches sold as loop support but upgradeable to fabric switches recounted as
loop switches.

LSN 6HH logical Switch number.

LUN 6HHlogical unit number.

M
MAC address 6HH media access control address.

maintenance port Connector on the Director or Switch where a PC running an American National
Standard Code for Information Interchange (ASCII) terminal emulator can be
attached or dial-up connection made for specialized maintenance support.

managed product Hardware product that can be managed with the Element Manager application.
Directors and switches are managed products. 6HHDOVR device.

management MIB. Related set of software objects (variables) containing information about a
information base managed device and accessed via simple network management protocol (SNMP)
from a network management station.

management session A session that exists when a user logs on to your SAN Management application
Your SAN Management application can support multiple concurrent management
sessions. The user must specify the network address of your SAN Management
application’s server at logon time.

management style In directors or switches, in managed products, a selection between FICON and
open systems management style. 6HHDOVR open systems management style;
FICON management style.

g-21
Glossary
media access control MAC address. Hardware address of a node (device) connected to a network.
address

menu A list of items displayed on a monitor from which a user can make a selection.

menu bar The menu bar is located across the top of a monitor window. Pull-down menus
are displayed by clicking on the menu bar option with the mouse, or by
pressing $OW with the underlined letter of the name for the menu bar option ' .

MIB 6HH management information base.

N
name server (1) In TCP/IP, VHH domain name server. (2) In Fibre Channel protocol, a server
that allows node ports (N_Ports) to register information about themselves. This
information allows N_Ports to discover and learn about each other by sending
queries to the name server.

name server zoning Node port (N_Port) access management that allows N_Ports to communicate if
and only if they belong to a common name server zone.

network An arrangement of hardware, software, nodes, and connecting branches that


comprises a data communication system. The International Organization for
Standardization (ISO) seven-layer specification partitions a computer network
into independent modules from the lowest (physical) layer to the highest
(application) layer ' .

network address Name or address that identifies a device on a transmission control


protocol/Internet protocol (TCP/IP) network. The network address can be
either an IP address in dotted-decimal notation (composed of four three-digit
octets in the format xxx.xxx.xxx.xxx) or a domain name (as administered on a
customer network).

network interface NIC. An expansion board inserted into a computer so the computer can be
card connected to a network. Most NICs are designed for specific types of networks,
protocols, and medias, although some can serve multiple networks.

network management The broad subject of managing computer networks. There exists a wide variety
of software and hardware products that help network system administrators
manage a network. Network management covers a wide area, including
security, performance, and reliability.

never principal The setting that prevents the product from becoming the principal Switch for a
fabric.

NIC 6HH network interface card.

nickname Alternate name assigned to a World Wide Name for a node, Director or Switch
in the fabric.

NL_Port 6HHnode loop port.

g-22 M6140 Director Element Manager User Manual


node In Fibre Channel protocol, an end device (server or storage device) that is or can be
connected to a switched fabric. 6HHDOVR device.

node loop port NL_Port. A physical interface within an end device (node) that participates in a
loop containing one or more fabric loop ports (FL_Ports) or other NL_Ports. 6HH
DOVRbridge port; expansion port; fabric loop port; fabric port; generic port; hub
port; node port; segmented expansion port.

node port N_Port. Physical interface within an end device that can connect to an fabric port
(F_Port) on a switched fabric or directly to another N_Port (in point-to-point
communications). 6HHDOVRbridge port; expansion port; fabric loop port; fabric
port; generic port; hub port; node loop port; segmented expansion port.

node port identifier N_Port ID. In Fibre Channel protocol, a unique address identifier by which an
N_Port is uniquely known. It consists of a domain (most significant byte), an area,
and a port, each 1 byte long. The N_Port ID is used in the source identifier (S_ID)
and destination identifier (D_ID) fields of a Fibre Channel frame.

nonvolatile random NV-RAM. RAM that retains its content when the device power is turned off.
access memory

N_Port 6HH node port.

N_Port ID 6HHnode port identifier.

NV-RAM 6HH nonvolatile random access memory.

O
offline Referring to data stored on a medium, such as tape or even paper, that is not
available immediately to the user.

offline sequence OLS. (1) Sequence sent by the transmitting port to indicate that it is attempting to
initialize a link and has detected a problem in doing so. (2) Sequence sent by the
transmitting port to indicate that it is offline.

offline state When the Switch or Director is in the offline state, all the installed ports are offline.
The ports transmit an offline sequence (OLS) and they cannot accept a login got
connection from an attached device. &RQWUDVWZLWK online state.

OLS 6HH offline sequence.

online Referring to data stored on the system so it is available immediately to the user.

online diagnostics Diagnostics that can be run by the customer engineer while the operational
software is running. These diagnostics do not impact user operations.

online state When the Switch or Director is in the online state, all of the unblocked ports are
allowed to log in to the fabric and begin communicating. Devices can connect to
the Switch or Director if the port is not blocked and can communicate with another
attached device if both devices are in the same zone, or if the default zone is
enabled. &RQWUDVWZLWK offline state.

g-23
Glossary
Open Systems OSI. A model that represents a network as a hierarchical structure of functional
Architecture layers. Each layer provides a set of functions that can be accessed and used by
the layer above. Layers are independent, in that implementation of a layer can
be changed without affecting other layers ' .

open systems OSMS. An optional feature that can be enabled on the Director or Switch
management server through the Element Manager application. When enabled, host control and
management of the Director or Switch are provided through an Open System
Interconnection (OSI) device attached to a Director or Switch port.

open systems The mode that is used for open fabrics. See also management style; FICON
management style management style.

Operating System/390 OS/390™. An integrated, open-enterprise server operating system developed


by IBM that incorporates a leading-edge and open communications server,
distributed data and file services, parallel Sysplex™ support, object-oriented
programming, distributed computing environment, and open application
interfaces ' .

OS/390™ 6HH Operating System/390.

OSI 6HH Open Systems Architecture.

OSMS See open systems management server.

out-of-band Transmission of management information, using frequencies or channels other


management than those routinely used for information transfer.

P
packet In Fibre Channel protocol, Logical unit of information (usually in the form of a
data frame) transmitted on a network. It contains a header (with all relevant
addressing and timing information), the actual data, and a trailer (which
contains the error checking function, usually in the form of a cyclic redundancy
check), and frequently user data.

panel A logical component of the interface window. Typically, a heading and/or


frame marks the panel as an individual entity of the window. Size and shape of
the panel and its data depend upon the purpose of the panel and may or may
not be modified.

PC 6HH personal computer.

persistent binding A form of server-level access control that uses configuration information to
bind a server to a specific Fibre Channel storage volume (or logical device),
using a unit number. 6HHDOVR access control.

personal computer PC. A portable computer that consists of a system unit, display, keyboard,
mouse, one or more diskette drives, and internal fixed-disk storage ' .

point-to-point A Fibre Channel protocol topology that provides a single, direct connection
between two communication ports. The Director or Switch supports only
point-to-point topology ' . 6HHDOVR arbitrated loop.

g-24 M6140 Director Element Manager User Manual


port Receptacle on a device to which a cable leading to another device can be attached.
Ports provide Fibre Channel connections ' .

port address name A user-defined symbolic name of 24 characters or less that identifies a particular
port address.

port authorization Feature of the password definition function that allows an administrator to extend
operator-level passwords to specific port addresses for each Director or Switch
definition managed by a personal computer (PC). Port authorization affects only
operator-level actions for active and saved matrices ' .

port card Field-replaceable hardware component that provides the port connections for fiber
cables and performs specific device-dependent logic functions.

port card map Map showing port numbers and port card slot numbers inside a hardware cabinet.

port name Name that the user assigns to a particular port through the Element Manager
application.6HHDOVR identifier. 6\QRQ\PRXVZLWK address name.

POST 6HH power-on self-test.

power-on self-test POST. Series of diagnostic tests that are run automatically by a device when the
power is turned on

preferred domain ID Configured value that a Switch requests from the Principal Switch. If the preferred
value is already in use, the Principal Switch assigns a different value.

principal switch In a multiswitch fabric, the Switch that allocates domain IDs to itself and to all
other switches in the fabric. There is always one principal Switch in a fabric. If a
Switch is not connected to any other switches, it acts as its own principal switch.

private device A loop device that cannot transmit a fabric login command (FLOGI) command to a
Switch or director, nor communicate with fabric-attached devices. &RQWUDVWZLWK
public device.

private loop A private loop is not connected to a switched fabric, and the switch’s embedded
expansion port (E_Port) and fabric loop port (FL_Port) are inactive. All devices
attached to the loop can only communicate with each other. &RQWUDVWZLWK public
loop.

product name User-configurable identifier assigned to a managed product. Typically, this name
is stored on the product itself. A Director or Switch product name can also be
accessed by a simple network management protocol (SNMP) manager as the
system name.

prohibited port In a Director or switch, in FICON management style, an attribute that removes
connection dynamic connectivity capability.

public device A loop device that can transmit a fabric login command (FLOGI) to a switch,
receive acknowledgement from the switch’s login server, register with the switch’s
name server, and communicate with fabric-attached devices. Public devices
communicate with fabric-attached devices through the switch’s bridge port
(B_Port) connection to a Director or switch. &RQWUDVWZLWK private device.

g-25
Glossary
public loop A public loop is connected to a switched fabric (through the Switch bridge port
(B_Port)), and the Switch has an active embedded fabric loop port (FL_Port)
that is user transparent. All devices attached to the loop can communicate with
each other, and public devices attached to the loop can communicate with
fabric-attached devices. &RQWUDVWZLWKprivate loop.

pull-down menu 6HH drop-down menu.

Q
Quad Fibre Channel QPM. The QPM card has four total ports and can either run two
Port Module 4 Gb/s ports, four 2 Gb/s ports, or a combination of one
4 Gb/s and two 2 Gb/s ports.

QPM Card 6HH Quad Fibre Channel Port Module.

R
R_A_TOV 6HH resource allocation time-out value.

redundancy Performance characteristic of a system or product whose integral components


are backed up by identical components to which operations automatically
failover in the event of a component failure. Redundancy is a vital
characteristic of virtually all high-availability (24 hours/7 days per week)
computer systems and networks.

remote notification A process by which a system is able to inform remote users of certain classes of
events that occur on the system. E-mail notification and the configuration of
simple network management protocol (SNMP) trap recipients are two
examples of remote notification programs that can be implemented on
director-class switches.

remote computer Workstation, such as a personal computer (PC) or UNIX workstation, running
running client SAN Management and Element Manager client application software that can
software access the server platform over a local area network (LAN) connection.

rerouting delay An option that ensures that frames are delivered in order through the fabric to
their destination.

resource allocation R_A_TOV. R_A_TOV is a value used to time-out operations that depend on the
time-out value maximum possible time that a frame could be delayed in a fabric and still be
delivered.

g-26 M6140 Director Element Manager User Manual


S
SAN 6HH storage area network; system area network.

SAN Management (1) Software application that is the system management framework providing the
application user interface for managing Fibre Channel Switch products. (2) The software
application that implements the management user interface for all managed
hardware products. The SAN Management application can run both locally on a
server platform and on a remote computer running client software.

SA OS/390™ 6HH System Automation for Operating System/390.

SBAR 6HH serial crossbar assembly.

secure sockets layer SSL. A protocol developed by Netscape for transmitting private documents via the
Internet. SSL works by using a public key to encrypt data that is transferred over
the SSL connection. Both Netscape Navigator and Internet Explorer support SSL,
and many web sites use the protocol to obtain confidential user information, such
as credit card numbers.

segment A fabric segments when one or more switches cannot join the fabric because of
various reasons. The Switch or switches remain as separate fabrics.

segmented E_Port 6HH segmented expansion port.

segmented Segmented E_Port. E_Port that has ceased to function as an E_Port within a
expansion port multiswitch fabric due to an incompatibility between the fabrics that it joins. 6HH
DOVRbridge port; fabric loop port; fabric port; generic port; hub port; node loop
port; node port.

serial crossbar SBAR. The assembly is responsible for Fibre Channel frame transmission from any
assembly Director or Switch port to any other Director or Switch port. Connections are
established without software intervention.

serial port A full-duplex channel that sends and receives data at the same time. It consists of
three wires: two that move data one bit at a time in opposite directions, and a third
wire that is a common signal ground wire.

server A computer that provides shared resources, such as files and printers, to the
network. Used primarily to store data, providing access to shared resources.
Usually contains a network operating system.

SFP transceivers 6HHsmall form factor pluggable transceivers.

shared mode If a Director or Switch is in shared mode, all devices on the loop share the 100MB
bandwidth available on the loop. In shared mode, only one end device can
communicate with another device through the fabric loop port (FL_Port) on the
Director or switch.

Server Platform A server platform shipped with the product or supplied by the customer for the
purpose of running the SAN Management and Element Manager server
applications.

simple mail transfer SMTP. A transmission control protocol/Internet protocol (TCP/IP) protocol that
protocol allows the user to create, send, and receive text messages. SMTP protocols specify

g-27
Glossary
how messages are passed across a link from one system to another. They do not
specify how the mail application accepts, presents, or stores the mail.

simple network SNMP. A transmission control protocol/Internet protocol (TCP/IP)-derived


management protocol governing network management and monitoring of network devices.
protocol

simple network SNMP community. Also known as SNMP community string. SNMP
management community is a cluster of managed products (in SNMP terminology, hosts) to
protocol community which the server or managed product running the SNMP agent belongs.

simple network SNMP community name. The name assigned to a given SNMP community.
management Queries from an SNMP management station to a device running an SNMP
protocol community agent only elicits a response if those queries are addressed with the correct
name SNMP community name.

simple network SNMP management station. An SNMP workstation personal computer (PC)
management used to oversee the SNMP network.
protocol
management station

small form factor SFP transceivers. Laser-based optical transceivers for a wide range of
pluggable networking applications requiring high data rates. The transceivers, which are
transceivers designed for increased densities, performance, and reduced power, are
well-suited for Fibre Channel applications.

SMTP 6HH simple mail transfer protocol.

SNMP 6HH simple network management protocol.

SNMP community 6HH simple network management protocol community.

SNMP community 6HH simple network management protocol community name.


name

SNMP management 6HH simple network management protocol management station.


station

SSL 6HH secure sockets layer.

state The state of the Switch or director. Possible values include online, offline,
testing, and faulty. See offline state; online state.

static random access SRAM. SRAM is microprocessor-cache random access memory. It is built
memory internal to the microprocessor or on external chips. SRAM is fast, but relatively
expensive ' . &RQWUDVWZLWK dynamic random access memory.

storage area network SAN. A high-performance data communications environment that


interconnects computing and storage resources so that the resources can be
effectively shared and consolidated. 6HHDOVR local area network.

stored addresses In FICON management style, a method for configuring addresses.

subnet A portion of a network that shares a common address component. On


transmission control protocol/Internet protocol (TCP/IP) networks, subnets

g-28 M6140 Director Element Manager User Manual


are defined as all devices whose IP addresses have the same prefix. Dividing a
network into subnets is useful for both security and performance reasons. IP
networks are divided using a subnet mask.

subnet mask A mask used by a computer to determine whether another computer with which it
needs to communicate is located on a local or remote network. The network mask
depends upon the class of networks to which the computer is connecting. The
mask indicates which digits to look at in a longer network address and allows the
router to avoid handling the entire address. Subnet masking allows routers to
move the packets more quickly. Typically, a subnet may represent all the machines
at one geographic location, in one building, or on the same local area network.

switch A device that connects, filters and forwards packets between local area network
(LAN) segments or storage area network (SAN) nodes or devices.

switched mode If the arbitrated loop device is in switched mode, each pair of communicating
ports on the arbitrated loop device can share the 100MB bandwidth. In switched
mode, up to three pairs of loop devices can communicate with each other
simultaneously. Or, a public device on the loop can communicate with another
device on the fabric while up to two pairs of loop devices can communicate
simultaneously.

switchover Changing a backup field-replaceable unit (FRU) to the active state, and the active
FRU to the backup state.

switch priority Value configured into each Switch in a fabric that determines its relative likelihood
of becoming the fabric’s principal switch. Lower values indicate higher likelihood
of becoming the principal switch. A value of 1 indicates the highest priority; 225 is
the lowest priority. A value of 225 indicates that the Switch is not capable of acting
as the principal switch. The value 0 is illegal.

System Automation SA OS/390™. IBM licensed software that provides System/390 Parallel Sysplex™
for Operating management, automation capabilities, and integrated systems and network
System/390 management. SA OS/390 manages host, remote processor, and I/O operations. SA
OS/390 integrates the functions of Automated Operations Control for Multiple
Virtual Storage (MVS™), ESCON™ Manager, and Target System Control Facility
' .

T
telnet The Internet standard protocol for remote terminal connection over a network
connection.

‘ten Gb/sec Port XPM. The XPM card can be plugged into a 64-Port or 140-Port Element Manager.
Module The XPM card consists of a Cobra ASIC and 10 Gb/s optical transponder module
that supports short, long and extra-long wave transceivers.

Threshold Alert Log Director or Switch 7KUHVKROG$OHUW/RJ. Log displayed through the Element
Manager application that provides details of threshold alert notifications for an
individual Director or switch. The log displays the date and time an alert occurred,
and displays details about the alert as configured for the product. The information

g-29
Glossary
is useful to maintenance personnel for fault isolation and repair verification.
6HHDOVR Audit Log; Event Log; Hardware Log; Link Incident Log.

trap Unsolicited notification of an event originating from a simple network


management protocol (SNMP) managed device and directed to an SNMP
network management station.

trap host Simple network management protocol (SNMP) management workstation that
is configured to receive traps.

trap recipient In simple network management protocol (SNMP), a network management


station that receives messages through SNMP for specific events that occur on
the arbitrated loop device.

U
UDP 6HH user datagram protocol.

unblocked In a Director or switch, the absence of the blocked attribute for a specific port.
connection &RQWUDVWZLWK blocked connection. 6HH connectivity attribute. 6HHDOVR allowed
connection; dynamic connection; dynamic connectivity.

unblocked port Devices communicating with an unblocked port can login to the Director or
Switch and communicate with devices attached to any other unblocked port
(assuming that this is supported by the current zoning configuration).

uniform resource URL. A URL is the address of a document or other resource on the Internet.
locator

universal port module UPM. A flexible 1 gigabit-per-second or 2 gigabit-per-second module that


contains four generic ports (G_Ports).

UNIX A popular multi-user, multitasking operating system originally designed to be


a small, flexible system used exclusively by programmers. UNIX was one of the
first operating systems to be written in a high-level programming language,
namely C. This meant that it could be installed on virtually any computer for
which a C compiler existed. Due to its portability, flexibility, and power, UNIX
has become the leading operating system for workstations. Historically, it has
been less popular in the personal computer market, but the emergence of a new
version called Linux is revitalizing UNIX across all platforms.

UPM 6HH universal port module.

upper level protocol ULP. Protocols that map to and run on top of the Fibre Channel FC-4 layer.
ULPs include Internet protocol (IP) and small computer system interface (SCSI)
' .

URL 6HHuniform resource locator.

user datagram UDP. A connectionless protocol that runs on top of Internet protocol (IP)
protocol networks. User datagram protocol/Internet protocol (UDP/IP) offers very few
error recovery services, instead providing a direct way to send and receive

g-30 M6140 Director Element Manager User Manual


datagrams over an IP network. UDP/IP is primarily used for broadcasting
messages over an entire network.

W
warning message A message that indicates a possible error has been detected. 6HHDOVR error
message; information message.

workstation A terminal or microcomputer usually connected to a network or mainframe at


which a user can perform applications.

World Wide Names WWN. Eight-byte string that uniquely identifies a Fibre Channel entity (that is, a
port, a node, a switch, a fabric), even on global networks.

wrap plug 6\QRQ\PIRUloopback plug.

wrap test A test that checks attachment or control unit circuitry, without checking the
mechanism itself, by returning the output of the mechanism as input. A wrap test
can transmit a specific character pattern through a system and compare the
pattern received with the pattern transmitted ' .

write authorization Permission for an simple network management protocol (SNMP) management
station with the proper community name to modify writable management
information base (MIB) variables.

WWN 6HH World Wide Names.

X
XDF 6HH extended distance feature.

XPM Card 6HH ‘ten Gb/sec Port Module.

Z
zone Set of devices that can access one another. All connected devices may be
configured into one or more zones. Devices in the same zone can see each other.
Those devices that occupy different zones cannot. 6HHDOVR active zone set; zone
set; zoning.

zone member Specification of a device to be included in a zone. A zone member can be identified
by the port number of the Director or Switch to which it is attached or by its port
World Wide Name (WWN). In multiswitch fabrics, identification of end-devices or
nodes by WWN is preferable.

zone set A collection of zones that may be activated as a unit. 6HHDOVRactive zone set; zone.

g-31
Glossary
zoning Grouping of several devices by function or by location. All devices connected
to a connectivity product, such as the Director or switch, may be configured
into one or more zones. 6HHDOVR access control; zone.

g-32 M6140 Director Element Manager User Manual


Index

A authentication, enabling for ports 5-54


access control 5-64 authentication, enabling OSMS 5-29
access, radius servers tab 5-70 authentication, methods described 5-12
accessing, devices tab 5-43 authentication, radius servers tab 5-12
accessing, IP access control tab 5-62 authentication, setting default values 5-52
accessing, software tab 5-23 authentication, setting methods 5-53
accessing, users tab 5-14 authentication, users tab 5-11
active authorization traps, enabling 4-13
port state 2-25
adding, access for connected device 5-57 B
adding, access for detached device 5-59 backing up and restoring
adding, permitted IP addresses 5-65 configuration 7-12
adding, radius server 5-73 element manager data 7-12
adding, server access 5-32 product manager data 7-12
adding, software access 5-34 SAN management application data 7-14
adding, user 5-19 backup and restore configuration dialog box 7-13
additional information 5-xvii bb_credit
address configuration library 4-38 extended distance buffering 4-24
address configuration library dialog box 4-38 rx bb credit 4-25
address configurations, stored, managing 4-38, 4-40 beaconing
address ID errors 2-23 enabling for ports 3-5
addresses port state 2-25
port list view 2-12, 2-16 SBAR card indicator 2-10
stored configurations, managing 4-38 beaconing and active
advanced, logs 6-3 port state 2-25
alerts beaconing or diagnostics
clearing threshold alerts 3-6 port state 2-25
link incident (LIN) 2-28, 4-26 binding, port 5-2
configuring 4-26 bit-error threshold 6-7
threshold blocked states, port 2-12
configuring 2-29, 4-48 blocking ports 4-24
zoning enforcement alerts 3-6 FICON management style 4-34, 4-35
alternate control prohibited bound WWN, configure ports dialog box 4-30
enabling 4-15, 4-16
API authentication, disabling 5-28
API authentication, enabling 5-26 C
attachment, invalid port state 2-26 call-home
audit log 6-1, 6-3 notification, enabling 7-11
capacity 6-1 call-home feature 7-11
authenticating telnet users 5-17 challenge handshake authentication protocol (CHAP)
authentication 5-13
encryption 5-82 changing, radius server dead time 5-79
authentication, disabling API 5-28 changing, radius server sequence 5-78
authentication, disabling for ports 5-56 CHAP secret, changing for a device 5-50
authentication, disabling OSMS 5-31 CHAP secret, defining for a device 5-49
authentication, element manager features 5-80 CHAP secret, defining for a server 5-37
authentication, enabling API 5-26 CHAP secret, defining for device 5-49

Index I-1
Index

CHAP secret, editing for API user 5-42 configure threshold alert(s) 2-29, 4-48
CHAP secret, editing for device 5-50 export configuration report 4-57, 4-58
CHAP secret, editing for server 5-40 features 4-46
CHAP secret, guidelines when entering or generating ports 4-22
5-13 SANtegrity authentication 5-11
CHAP secret, used to authenticate users 5-13 SNMP 4-13
circle, green switch binding 5-6
meaning of 2-7 configure open trunking dialog box 4-54
port 3-7 configure ports
class 2 statistics table 2-20 FICON management style 4-32
class 3 statistics 2-21 FICON management style procedure 4-32
clear alerts open systems management style 4-30
threshold 3-6 open systems management style procedure 4-30
zoning enforcement 3-6 procedure
clear link incident alert(s) option 3-5 FICON mode 4-32
clear system error light open systems management style 4-30
product menu 3-11 configure ports dialog box 4-22, 4-30
clearing counts 2-25 blocking ports 2-12
clearing port counters 1-10 FICON management style 4-32
clearing, logs 6-2 mode differences 4-23
close configure SNMP 4-13
product menu 3-12 configure SNMP parameters 4-13
closing the element manager 1-7 configure switch parameters dialog box 4-10
closing, logs 6-2 configure threshold alerts, procedure 2-29, 4-48
code pages 4-42 configuring
collecting maintenance data 7-6 date and time 4-14
columns fabric parameters 4-4, 4-5
widening 6-2 feature key 4-46
columns, expanding 6-2 FICON management server 4-40
columns, sorting 6-2 identification 4-10
community name 4-12, 4-13 procedure 4-10
component status, monitoring 2-8 open systems manager server 4-44
configuration changes, audit log 6-1, 6-3 operating parameters 4-1
configuration data port speed 4-27
backing up and restoring 7-12 ports 4-22
resetting 7-15 ports, FICON management style 4-32
configuration parameters preferred paths 4-17
resetting 7-16 SNMP 4-11
configuration report 4-57 SNMP parameters 4-11
configuration, reset 7-15 connected device, adding access for 5-57
configurations connection failure, WWN binding 4-30
resetting 7-15 control unit port (CUP) name 4-36
configure cooling fan module, failure indicator 2-10
Preferred Path copy address configuration dialog box 4-39
dialog box 4-20, 4-21, 4-22 counters, port, clearing 1-10
configure addresses counts
stored option 4-38, 4-40 clearing 2-25
configure addresses - "active" 4-37 CPGID, code pages 4-42
configure addresses, stored option 4-38 CRC errors 2-22
configure date and time dialog box 4-14 critical warning 2-30, 8-1
configure fabric parameters dialog box 4-5 CTP card
configure feature key dialog box 4-46 active indicator 2-9
configure FICON management server parameters failure indicator 2-9
dialog box 4-42 IPL resets 7-7
configure managing stored addresses 4-38 CUP name 4-36
configure menu 4-22 assigning 4-36
addresses - "active" 4-37 current IP address, director 7-15
alternate control prohibited 4-15, 4-16 cyclic redundancy checks, errors 2-22

I-2 M6140 Director Element Manager User Manual


Index

D how to use 1-5


data speed IPL 7-7
negotiate 4-27 keyboard navigation 1-6
data, backing up and restoring 7-12 new feature key 4-46
datagram protocol 4-13 node properties 3-3
date and time parameters 4-14 port optics 3-3, 8-3
configuring 4-14 port properties 1-9, 3-3
date and time tab 4-14 swap ports 7-3
defaults switch binding membership list 5-6
call-home notification 7-11 switch binding state change 5-4
code page 4-42 diamond, red
configuration data 7-15 meaning of 2-7
switch priority setting 4-4 port 3-7
user datagram protocol (UDP) 4-13 director
defining, CHAP secret 5-37 audit log 6-1, 6-3
defining, CHAP secret for device 5-49 fibre channel addresses 4-6
degraded and active FRU list view 2-14
port state 2-26 identification, configuring 4-10
degraded and idle IP address
port state 2-26 current 7-15
degraded operation, event log 6-5 resetting configuration 7-15
degraded or failed IPL 7-7
port state 2-26 MIB, implementing 4-11
delimiter errors 2-22 node list view 2-16
DES encryption 5-82 NV-RAM 4-2
detached device, adding access for 5-59 NVRAM 4-5
device, removing access 5-61 operating parameters 4-1
devices tab, accessing 5-43 operating status 2-6, 2-7
devices tab, adding a connected device 5-57 operation, monitoring 2-4
devices tab, adding a detached device 5-59 operational states 7-8
devices tab, changing the CHAP secret 5-50 performance view 2-18
devices tab, defining the CHAP secret 5-49 rerouting delay 4-7
devices tab, described 5-12 status area, status indicator 2-6
devices tab, fields 5-45 status bar, status indicator 2-6
devices tab, removing a device 5-61 director properties 2-11
devices tab, setting authentication methods 5-53 director properties dialog box 2-11
devices tab, setting default authentication values 5-52 director speed
devices tab, setting port authentication methods 5-54 related to port speed 4-27
diagnostics (port) disabling, API authentication 5-28
running 3-5 disabling, IP/ACL 5-64
diagnostics (port), running 3-5 disabling, OSMS authentication 5-31
dialog box, critical warning 2-30, 8-1 disabling, port authentication 5-56
dialog boxes discarded frames 2-22
address configuration library 4-38 displaying port statistics 2-20
backup and restore configuration 7-13 documentation, related 5-xvii
configure date and time 4-14 domain
configure fabric parameters 4-5 operating parameters 4-1
configure feature key 4-46 domain ID
configure FICON management server parameters insistent 4-6
4-42 preferred 4-6
configure OpenTrunking 4-54 domain ID range 4-5
configure ports 4-22, 4-30 domain parameters 4-5
FICON management style 4-32 configuring 4-9
mode differences 4-23 domain ID range 4-5
configure Preferred Path 4-20, 4-21, 4-22 domain RSCNs 4-7, 4-8
configure switch parameters 4-10 NVRAM storage 4-5
copy address configuration 4-39 preferred domain ID 4-6
director properties 2-11 rerouting delay 4-7

Index I-3
Index

domain RSCNs 4-7 e-mail notification 7-10


enterprise fabric mode 5-9 enabling e-mail notification 7-10
domain tab 4-5 enabling, API authentication 5-26
enabling, IP/ACL 5-64
enabling, OSMS authentication 5-29
E
enabling, port authentication 5-54
e_d_tov 4-2
encryption 5-82
fabric segmentation 4-2
enterprise fabric mode 5-8, 5-9
less than r_a_tov 4-2
features and parameters enabled by 5-9
multiswitch fabrics 4-2
error statistics 2-21
rerouting delay 4-7
ethernet connection, interrupted links to execute an IPL
E_port segmentation
7-7
preferred domain ID 4-6
ethernet no-link status 2-5
E_port, segmented, port state 2-27
event codes, list of 6-5
EBCDIC code pages 4-42
event data 6-6
editing, CHAP secret for API user 5-42
event log 6-5
editing, CHAP secret for device 5-50
expanding columns, logs 6-2
editing, CHAP secret for server 5-40
export configuration report 4-57
editing, IP addresses 5-67
procedure 4-58
editing, radius server definition 5-76
export configuration report, procedure 4-57
editing, user definition 5-21
exporting, logs 6-3
Element Manager
extended distance buffering (10-110 km) 4-24
using 1-5
element manager 1-8
audit log 6-1, 6-3 F
backing up and restoring 7-12 fabric
call-home notification, enabling 7-11 operating parameters 4-1
closing 1-7 fabric binding
description 1-2 enterprise fabric mode 5-9
e-mail notification, enabling 7-11 fabric element MIB, implementing 4-11
FRU list 1-8 fabric operating parameters
FRU list view 2-14 configuring 4-4
hardware tab 1-8 fabric parameters
hardware view 2-2 e_d_tov 4-2
IPL 7-7 interop mode 4-3
node list tab 1-9 r_a_tov 4-2
node list view 2-16 switch priority 4-2
non-English language support 4-42 fabric segmentation
performance tab 1-9 e_d_tov 4-2
performance view 2-19 preferred domain ID 4-6
port list tab 1-9 fabric tab 4-2
status box 1-10 factory defaults
view panel 1-7, 1-8 configuration data 7-15
element manager, authentication features 5-80 fan module
e-mail notification failure indicator 2-10
enabling 7-10 fault isolation, event log 6-5
LIN alerts 2-29, 4-26 faults, event log 6-5
e-mail, enabling notification 7-10 feature
embedded port enterprise fabric 5-8
log 6-12 FICON management server 4-40
enable alternate control prohibited 4-15, 4-16 OpenTrunking 4-53
enable management server (FICON) 4-41 feature key, configuring 4-46
enable unit beaconing feature permissions 1-10
product menu 3-11 features
enable web server 4-58 FICON management server 4-40
enable zoning field 4-44 open systems management server 4-44
enabling features and parameters enabled by 5-9
authorization traps 4-13 fibre channel addresses 4-6
call-home notification 7-11 FICON management server 3-2, 4-40

I-4 M6140 Director Element Manager User Manual


Index

code page 4-42 component operation 2-2


configuring 4-40, 4-41, 4-42, 4-43 monitoring component operation
enable management server 4-41 defined 2-2
host control 4-41 obtaining hardware status 2-10
installing 4-41 status table 2-4
parameters 4-41 homogeneous fabric 4-3
programmed offline state control 4-41 hop counts 4-7
FICON management server feature 4-40 host control 4-41
FICON management server zoning 4-43 host control prohibited field 4-43
configuration procedure 4-42 host, audit log 6-1, 6-3
configuring 4-43
FICON management style 3-2
I
address configuration, managing 4-38
ID/Status bar 1-6
data and time, configuring 4-14
identification
FICON management server 3-2
operating parameters 4-1
port connection array 4-34
identification parameters
port list view, FC Address column 2-12, 2-16
configuring 4-10
ports
identification tab 4-9
configuring 4-32
identification, configuring 4-10
file transfer protocol 7-6
idle
firmware faults, event log 6-5
port state 2-26
firmware versions
illustrations 5-xviii, 5-xix
managing 7-9
inactive, port state 2-26
FPM card
inband switch management
LEDs 3-7, 3-9
FICON management style 3-2
frames
open systems management style 3-2
discarded 2-22
initial program load (IPL)
performance view 2-24
executing 7-6, 7-7
routing of 4-7
insistent domain ID 4-6
frames too long, error statistics 2-23
enterprise fabric mode 5-10
FRU
interfaces parameters
description 3-6
alternate control prohibited 4-16
product menu 3-6
web 4-15
FRU acronyms 2-14
interfaces tab 4-16
FRU list 1-8
interop mode 4-3
FRU list menu 1-8
invalid attachment, port state 2-26
FRU list view 2-14
invalid transmission words 2-22
defined 2-14
IP access control tab, accessing 5-62
displayed 2-14
IP access control tab, described 5-12
opening 2-14
IP access control tab, fields 5-63
FRU properties 3-10
IP address
FRUs
configuration, restoring 7-12
failures, event log 6-5
IP addresses, adding 5-65
position numbers 2-15
IP addresses, editing 5-67
FTP 7-6
IP addresses, removing 5-68
IPL
H executing 7-7
hardware failures, event log 6-5 replacing CTP 7-7
hardware log 6-6 IPL dialog box 7-7
hardware tab 1-8 ISL
status and state area 2-4 load balancing 4-54
hardware view 2-2
component operation, monitoring 2-8
K
director menu 2-10
keyboard navigation in dialog boxes 1-6
director operation, monitoring 2-4
keys
identifying FRUs 2-2
feature keys, configuring 4-46
monitoring

Index I-5
Index

L enable e-mail notification option 7-10


languages, code page 4-42 IPL 7-7
LEDs IPL option 7-7
FPM card 3-7, 3-9 port diagnostics 5-2, 7-1
port card view 3-6 reset configuration 7-15
light, signal, port state 2-27 set online state 7-8
line module maintenance port 7-15
attention indicator 2-8 manage stored addresses 4-38
link failures 2-21 management server
link incident FICON 4-40
causes, list of 6-7 configuring 4-41, 4-43
port state 2-26 configuring zoning 4-43
link incident (LIN) alerts 2-28, 4-26 installing 4-41
attention indicator 3-8, 3-10 open systems 4-44
clearing 3-5 configuring 4-45
configuring 4-26 installing 4-41, 4-45
link incident alerts, clearing 2-29 management style 3-2
link incident log 2-28, 4-26 FICON 3-2
capacity 6-6 operating 3-2
description 6-6 managing firmware versions 7-9
link reset, port state 2-27 managing stored address configurations 4-38, 4-40
link resets, performance view 2-23 procedure 4-38
link utilization percentage, performance view 2-23 managing the product 1-4
LMQ module matrix of port addresses 4-34
attention indicator 2-8 McDATA fabric 1.0 4-3
load balancing ISLs 4-54 menu bar 1-6
local only authentication method 5-12 menus
logs director 2-10
advanced 6-3 FRU list 1-8
audit 6-1, 6-3 messages A-1
clearing 6-2 MIBs, implementing 4-11
closing 6-2 mode
deleting entries 6-2 enterprise fabric 5-8
embedded port 6-12 homogeneous fabric 4-3
event 6-5 interop 4-3
expanding columns in 6-2 McDATA fabric 1.0 4-3
exporting 6-3 open fabric 1.0 4-3
hardware 6-6 monitoring director operation 2-4
link incident 6-6 multiswitch fabric
open trunking 6-11 director, removing 7-8
port performance threshold alert 6-7 e_d_tov 4-2
refreshing 6-2 principal switch 4-2
security 6-8 rerouting delay 4-7
sorting columns in 6-2
switch fabric 6-15, 6-16 N
syslog configuration 6-16 N_ports, node list tab 1-9
threshold alert 6-7 name display
using 6-1 description 3-2
loss of signal 6-7 name, configure ports dialog box 4-24
loss of synchronization 6-7 nickname
port binding 4-30
M nickname, node 2-19
maintenance data, collecting 7-6 nicknames, defining 2-19
maintenance menu no light, port state 2-27
backup and restore configuration 7-12 node list tab 1-9
collect maintenance data 7-6 node list view 2-16
enable call-home notification 7-11 node list view, port # column 2-16
enable e-mail notification 7-10 node list view, port wwn column 2-16

I-6 M6140 Director Element Manager User Manual


Index

node list view, unit type column 2-16 OSMS authentication, disabling 5-31
node nickname, assigning 2-19 OSMS authentication, enabling 5-29
node properties dialog box 3-3
no-link status 2-5
P
NOS
parameters
hardware log 6-7
configuration, resetting 7-16
port state 2-27
ports 4-23
not installed, port state 2-27, 2-28
part number, hardware log 6-6
not operational, port state 2-27
performance tab 1-9
not-operational (NOS) primitive sequence, hardware log
performance tab option 1-9
6-7
performance view 2-18, 2-19
NPIV login limit 4-29
port, statistics 2-19
NV-RAM 4-2, 4-24
permissions 1-10
configuration data, backing up and restoring 7-12
permitted IP addresses list, adding entries to 5-65
export configuration report 4-57, 4-58
permitted IP addresses list, editing entries to 5-67
NVRAM 4-5
permitted IP addresses list, removing entries from 5-68
Port 5-2, 7-1
O port
offline sequences (OLS) description 3-2
performance view 2-23 port # option 4-22
S/390 mode 4-35 port addresses
offline, port state 2-27 FICON management style 4-34
OLS 4-25 matrix of 4-34
online and offline states port authentication, disabling 5-56
operational states port authentication, enabling 5-54
online and offline 2-5 port binding 5-2
online state enabling 4-30
setting 7-8 port binding option 5-2
online state, setting 7-8 port card
online, port state 2-27 acronyms, port technology 2-14
open fabric 1.0 4-3 attention indicator 2-8, 2-9
open systems management server 3-2, 4-44 failure indicator 2-9
configuring 4-44, 4-45 port configuration data, NV-RAM storage 4-24
installing 4-41, 4-45 port connection array, FICON management style 4-34
open systems management server feature 4-44 port data transfers, disruption 4-27
open systems management style 3-2 port failure, port state 2-27
open systems management server 3-2 port list tab 1-9
port name 4-24 port list view 2-11
ports displaying 2-11
blocking 4-24 port menu
configuring, procedure 4-30 swap ports 3-5
Open Trunking feature 4-53 port name
enabling and configuring 4-54 FICON management style 4-34, 4-37
open trunking log 6-11 port number
opening element manager 1-2 configure ports dialog box 4-24
OpenTrunking feature port operating states 2-25
dialog box 4-54 port operational states 2-12
OpenTrunking log 6-11 table of 2-25
operating parameters port optics 2-26, 4-27
configuring for the director 4-1 port optics dialog box 3-3, 8-3
suppress RSCNs 4-8 port parameter descriptions 4-23
operating states for ports 2-25 port performance threshold alerts
operating status for the director 2-6, 2-7 log 6-7
operational port properties dialog box 3-3
port state 2-27 displaying 1-9
operational states 2-4 port statistics
operational states for ports 2-25 class 2 statistics 2-20
operational states, port 2-12 class 3 statistics 2-21

Index I-7
Index

error statistics table 2-21 SNMP agent 1-4


traffic statistics 2-23 product manager
port statistics, clearing 2-24 backing up and restoring 7-12
port swapping 3-5 FRU list view 2-14
port type 4-26 identification, configuring the director 4-10
port WWN 2-16 link incident log 2-28, 4-26
port wwn 2-16 messages A-1
ports performance view 2-18
bar graph 1-9 port list view 2-11
binding 5-2 product menu
blocked states 2-12 clear system error light 3-11
blocking 3-4, 4-24 close 3-12
FICON management style 4-34, 4-35 enable unit beaconing 3-11
configuring 4-22 FRU 3-6
FICON management style 4-32 management style 3-2
FICON mode 4-32 name display 3-2
open systems management style 4-30 port 3-2
connections, prohibiting 4-35 ports 3-2
counters, clearing 1-10 properties 3-12
diagnostics 3-5, 5-2, 7-1 programmed offline state control 4-41
displaying statistics 1-10 properties
event log 6-5 FRU 3-10
extended distance buffering (10-110 km) 4-24 product menu 3-12
failed, status symbol 3-8, 3-10
Fibre Channel address 2-12, 2-16
Q
maintenance 7-15
QPM card view 3-8
naming 4-24
NPIV login limit 4-29
operating states 2-25 R
operational states, table of 2-25 r_a_tov 4-2
port binding 5-2 greater than e_d_tov 4-2
product menu 3-2 synchronization, loss of 6-7
rx bb credit 4-25 RADIUS authentication, for local only 5-12
speed RADIUS authentication, RADIUS only 5-12
related to director speed 4-27 RADIUS authentication, RADIUS then local 5-13
statistics RADIUS authentication, setting 5-12
description 2-20 radius only authentication method 5-12
displaying 2-19 radius server, adding 5-73
swapping 7-3 radius server, changing the dead time 5-79
type 2-13 radius server, changing the sequence 5-78
ports list tab 1-9 radius server, editing a definition 5-76
power indicator 2-9 radius server, editing an entry 5-77
power supply, failure indicator 2-10 radius server, removing 5-75
preferred domain ID 4-6 radius servers tab, accessing 5-70
Preferred Path radius servers tab, described 5-12
adding 4-20 radius servers tab, fields 5-71
changing 4-21 radius then local authentication method 5-13
feature reason field 2-5
dialog box 4-20, 4-21, 4-22 receive values 2-23
removing 4-22 refreshing, logs 6-2
Preferred Path feature 4-17 related documentation 5-xvii
primitive sequence errors 2-22 remote user workstations 1-5
primitive sequence, hardware log 6-7 removing, device access 5-61
principal switch, determining 4-2 removing, IP addresses 5-68
problems, event log 6-5 removing, radius server 5-75
product removing, server access 5-33
status 2-4 removing, software access 5-36
product management removing, users 5-20

I-8 M6140 Director Element Manager User Manual


Index

rerouting delay 4-7 operating parameters 4-1


reset configuration 7-15 SNMP management station, audit log 6-1, 6-3
resetting SNMP parameters
configuration parameters 7-16 configuring 4-13
resetting configuration 7-15 SNMP tab 4-11
role-based user access 5-14 software tab, accessing 5-23
RSCNs software tab, defining the server’s CHAP secret 5-37
domain 4-7 software tab, described 5-11
suppress 4-8 software tab, editing the CHAP secret 5-42
zoning 4-8 software tab, fields 5-24
RU list view software tab, identifying API users 5-23
displaying 2-14 software tab, removing another server 5-36
rx bb credit 4-25 software, adding access 5-34
software, removing access 5-36
sorting columns, logs 6-2
S
speeds
SAN data
port
backing up and restoring 7-14
configuring 4-27
SAN Management application 1-5
square, gray, meaning of 2-7
SANtegrity authentication 5-11
SSH, enabling and disabling 5-18
configure menu 5-11
SSL
SANtegrity Binding features
encryption 5-82
switch binding 5-3
statistics values tables 2-20
SBAR card
statistics, ports 1-10, 2-19
beaconing indicator 2-10
status area 2-6
failure indicator 2-10
status bar 1-6, 2-6, 2-7
security center, support of CHAP 5-13
status symbols 2-6
security log 6-8
status bar symbols 2-6, 2-7
using to display security information 6-8
status box 1-10
security log handling, reference information 6-9
status field, operational states 2-4
security log, opening 5-81
status indicator 2-6
security options, setting 5-17
status symbols 2-6
segmented E_port, port state 2-27
status table 2-4
sequence errors 2-22
stored address configurations
serial number
managing 4-38
hardware log 6-6
procedure 4-38
server platform
stored address configurations, managing 4-38, 4-40
audit log 6-4
support center server 7-11
server, adding access 5-32
suppress RSCNs 4-8
server, removing access 5-33
swap ports
set online state 7-8
dialog box 7-3
setting online state 7-8
swap ports dialog box 7-3
setting, authentication methods 5-53
swap ports option 3-5
setting, default authentication values 5-52
switch binding 5-3, 5-9
setting, port authentication states 5-54
enable and disable 5-4
setting, user interface security 5-17
membership list 5-6
severity classifications 6-6
online state functions 5-7
shipped or customer-supplied management server
state change dialog box 5-4
call-home feature 7-11
zoning function 5-8
configuration, backing up and restoring 7-12
switch binding membership list dialog box 5-6
maintenance data 7-6
switch clock alert mode field 4-43
signal light, port state 2-27
switch fabric
signal losses, error statistics 2-22
log 6-15
signal, loss of 6-7
switch parameters
simple network management protocol, see SNMP
insistent domain ID 4-6
SNMP
NV-RAM storage 4-2
agent 1-4
switch priority 4-2
configuring 4-11
related number codes 4-3
SNMP agent

Index I-9
Index

switch priority setting 4-4 node list view 2-16


switch status 2-6 performance view 2-19
switches, principal, determining 4-2 port list 2-11
symbols, status bar, table of 2-6, 2-7 view panel 1-7, 1-8
sync losses 2-22 views
synchronization, loss of 6-7 FRU list 2-14
syslog configuration hardware 2-2
log 6-16 node list 2-16
system error indicator 2-10 performance 2-18
port list 2-11
T
technical support 7-6 W
telnet, authenticating users 5-17 web server, enabling 4-58
testing port 2-28 widening, columns 6-2
threshold alerts Windows dial-up networking 7-11
activate-deactivate 4-51 WWN
configuring 2-29, 4-48 node list view 2-16
creating 4-48 port binding 4-30
general information 6-6 principal switch 4-2
log 6-7
modifying 4-51
X
view 4-52
XPM card view 3-9
threshold alerts, clearing 4-53
title bar 1-6
traffic statistics 2-23 Z
transmission words, invalid 2-22 zoning configuration, backing up and restoring 7-13
transmit values 2-23 zoning RSCNs 4-8
traps, SNMP 4-12
triangle, yellow
meaning of 2-7
triangle, yellow, port connector 3-8, 3-10
Triple DES 5-82
trunking feature 4-53
dialog box 4-54
enabling and configuring 4-54

U
UDP number 4-13
unit type 2-16
United States/Canada 00037 code page 4-42
user access, role-based 5-14
user datagram protocol 4-13
user interface, security 5-17
user rights 1-10
users tab, accessing 5-14
users tab, described 5-11
users tab, fields 5-15
users, assigning to a switch or director 5-19
users, authentication of 5-13
users, editing 5-21
users, removing from switch 5-20

V
versions, firmware
managing 7-9
view menu
FRU list view 2-14

I-10 M6140 Director Element Manager User Manual

You might also like