Brocade FICON Administrator’s Guide (Supporting Fabric OS v7.3.0) - Manual (Page 44)

CAUTION
Configuring the switch for FICON is a disruptive process. The switch must be disabled to
configure switch parameters. This procedure must be followed prior to channels joining the
fabric.
1. Perform the following actions for each switch:
a)
Enable the IDID mode using the Fabric OS configure command. For details on enabling
the IDID mode, refer to
Enabling the insistent domain ID on page 34.
b) Set the domain ID. It is highly recommended that the switch ID used in hardware
configuration definition (HCD) and Input/Output Configuration Program (IOCP) be the
same as the switch address in hexadecimal. All switches ship from the factory with a
default domain ID of 1. The best practice is to use something other than 1 so that a new
switch can be added to the fabric without changing the domain ID.
2. Use the secPolicyCreate command to configure the SCC policies on all switches to limit
connectivity to only the switches in the selected fabric.
switch:admin> secPolicyCreate SCC_POLICY, member;...;member
In the command syntax, member indicates a switch that is permitted to join the fabric. Specify
switches by WWN, domain ID, or switch name. Enter an asterisk (*) to indicate all the switches in
the fabric. To create a policy that includes all the switches in the fabric, enter the following
command:
switch:admin> secPolicyCreate SCC_POLICY "*"
3. Save or activate the new policy by entering either the secPolicySave or the secPolicyActivate
command. If neither of these commands is entered, the changes are lost when the session is
logged out.
4. Enter the fddCfg command to enable the ACL fabric-wide consistency policy and enforce a strict
SCC policy.
switch:admin> fddcfg --fabwideset "SCC:S"
5. Enable High-Integrity Fabric mode using the Fabric OS configure command. For details on
enabling HIF mode, refer to
Enabling High-Integrity Fabric mode on page 35.
Setting HIF mode locks the IDID, fabric-wide consistency policy, and SCC policy settings to
ensure that the fabric is of high integrity to connect with the FICON channel. You cannot change
these settings without disabling HIF mode.
6. Connect and enable channel and control unit (CU) devices. The Query Security Attributes (QSA)
response to the channel indicates that the fabric binding and IDID are enabled.
FCR and FICON cascading
For Fabric OS v7.3 and later, FICON cascading is allowed in an FCR configuration when front or
translate domains are present. These domains can co-exit with a fabric-wide "strict" SCC policy.
To connect edge fabrics to high-integrity backbone fabrics that use a FCR, use the following these
general steps:
1. Define the FC Router EX_Ports.
2. Enter the portcfgexport slot/port command to obtain the front domain WWN.
FCR and FICON cascading
42 FICON Administrator's Guide
53-1003144-01