Brocade Fabric OS Command Reference (Supporting Fabric OS v7.3.0) User Manual

Page 230

Advertising
background image

200

Fabric OS Command Reference

53-1003131-01

cryptoCfg

2

-

HA cluster name: user-defined label

-

Number of encryption engine entries: numeric value

-

HA cluster Status: Committed or Defined

For each encryption engine member in the HA cluster:

-

EE WWN: the encryption group world wide name

-

EE slot number: the encryption group slot number

-

EE status: online or offline

OPERANDS

The cryptoCfg HA cluster configuration function has the following operands:

--help -hacluster

Displays the synopsis for the HA cluster configuration function. This command is
valid on all nodes.

--create -hacluster

Defines an HA cluster with a specified name and optionally associates up to two
encryption engines with the HA cluster. This command is valid only on the group
leader. The EEs must be members of the same encryption group as the group
leader on which this command is issued. This command fails if the member
nodes' IP addresses for the GbE ports (I/O sync ports) are not configured. The
encryption engines must belong to different switches or chassis. This rule is
enforced by the CLI to ensure redundancy.

The following operands are supported:

HA_cluster_name

Specifies the name for the HA cluster. The name can be up to 31 characters long
and can include alphanumeric characters, hyphens, and underscores. White
space and other special characters are not permitted. This operand is required.

node_WWN

Specifies the WWN of the switch or chassis to which the encryption engine
belongs. This operand is optional; if omitted, only the HA cluster name is defined.
You may add EEs separately with the --add -haclustermember command.

slot

Specifies the encryption engine slot number on bladed systems.

--delete -hacluster

Deletes the HA cluster with the specified name. This command is valid only on the
group leader. The following operand is required:

HA_cluster_name

Specifies the name of the HA cluster to be deleted.

--delete --stale_dek

Removes stale DEK entries belong to this EE. When BES/FS-18 is replaced with
another node in EG, leaves stale DEK entries that belong to replaced node in EG.
These stale entries should be removed from each node, otherwise DEK updates
on BP takes longer time as purging of these stale DEK entries happens. This
command needs to be run before replace command if stale DEK entries are seen.
It prints the number of EE entries on which stale DEK entries are present.

node_WWN

Specifies the node WWN of the switch or chassis on which the DEK entries are to
be removed.

slot

Specifies the encryption engine slot number on bladed systems.

Advertising