Brocade Network Advisor SAN User Manual v12.1.0 User Manual

Brocade network advisor, San user manual

Advertising

Table of contents

Document Outline

Contents
About This Document
Getting Started
- User interface components
- Management server and client
- Accessibility features for the Management application
  - Keyboard shortcuts
  - Look and feel customization
- PostgreSQL database
- Supported open source software products
- SAN feature-to-firmware requirements
Licenses
- Licenses overview
- Managed count
  - Managed SAN port count calculation
- Entering the license key
- Upgrading the Management application
- License downgrade
Patches
- Installing a patch
- Uninstalling a patch
Discovery
- SAN discovery overview
- Viewing the fabric discovery state
- Troubleshooting fabric discovery
  - Managed count exceeded troubleshooting
  - Virtual Fabric discovery troubleshooting
- SAN Fabric monitoring
- SAN Seed switch
- Host discovery
- VM Manager discovery
Application Configuration
- Configurable preferences
- Server Data backup
- Server Data restore
  - Restoring data
  - Restoring data to a new server
- SAN display settings
  - Setting your FICON display
  - Resetting your display
- SAN End node display
  - Displaying end nodes
- SAN Ethernet loss events
  - Enabling SAN Ethernet loss events
  - Disabling SAN Ethernet loss events
- Event storage settings
  - Configuring event storage
  - Storing historical events purged from repository
- Flyover settings
- Name settings
- Miscellaneous security settings
- Syslog Registration settings
  - Registering a server as a Syslog recipient automatically
  - Configuring the Syslog listing port number
- SNMP Trap Registration settings
  - Registering a server as a SNMP trap recipient automatically
  - Configuring the SNMP trap listing port number
- SNMP Trap forwarding credential settings
  - Configuring SNMP v1 and v2c credentials
  - Configuring SNMP v3 credentials
- Software Configuration
- FIPS Support
- Fabric tracking
User Account Management
- Users overview
  - Configuration requirements
  - Viewing configured users
- User accounts
- Roles
- Areas of responsibility
- Password policies
  - Configuring a password policy
  - Viewing password policy violators
- Authentication Server Groups authorization on the Management server
- User profiles
Dashboard Management
- Dashboard overview
- Default dashboards
  - Product Status and Traffic dashboard
  - SAN Ports Health
- Status widgets
- Monitoring and Alerting Policy Suite widgets
  - Out of Range Violations widget
    - Customizing the Out of Range Violations widget
    - Accessing additional data from the widget
  - Port Health Violations widget
    - Customizing the Port Health Violations widget
    - Accessing additional data from the widget
- Performance monitors
- User-defined performance monitors
- Traffic flow dashboard monitors
View Management
- SAN tab overview
- Icon legend
- Customizing the main window
- Product List customization
- Search
- SAN view management overview
- SAN topology layout
- Grouping on the topology
Call Home
- Call Home overview
  - System requirements
- Viewing Call Home configurations
- Showing a Call Home center
- Hiding a Call Home center
- Editing a Call Home center
  - Editing the IBM Call Home center
  - Editing an e-mail Call Home center
  - Editing the EMC Call Home center
  - Editing the HP LAN Call Home center
- Enabling a Call Home center
- Enabling supportSave
- Testing the Call Home center connection
- Disabling a Call Home center
- Viewing Call Home status
- Assigning a device to the Call Home center
- Removing a device from a Call Home center
- Removing all devices and filters from a Call Home center
- Defining an event filter
  - Call Home for virtual switches
- Assigning an event filter to a Call Home center
- Assigning an event filter to a device
- Overwriting an assigned event filter
- Removing all event filter from a Call Home center
- Removing an event filter from a device
- Removing an event filter from the Call Home Event Filters list
- Searching for an assigned event filter
Third-party tools
- About third-party tools
- Starting third-party tools from the application
- Launching a Telnet session
  - Launching an Telnet session from the SAN tab
- Launching an Element Manager
- Launching Web Tools
- Launching FCR configuration
- Launching Name Server
- Launching HCM Agent
- Launching Fabric Watch
- Adding a tool
- Entering the server IP address of a tool
- Adding an option to the Tools menu
- Changing an option on the Tools menu
- Removing an option from the Tools menu
- Adding an option to a device’s shortcut menu
- Changing an option on a device’s shortcut menu
- Removing an option from a device’s shortcut menu
- Microsoft System Center Operations Manager (SCOM) plug-in
Server Management Console
- Server Management Console overview
  - Launching the SMC on Windows
  - Launching the SMC on Linux
- Services tab
- Ports tab
  - Viewing server port numbers
- AAA Settings tab
- Restore tab
  - Restoring the database
- Technical Support Information tab
  - Capturing technical support information
- HCM Upgrade tab
  - Upgrading HCM on the Management server
- SMI Agent Configuration Tool
SAN Device Configuration
- Configuration repository management
- Enhanced group management
- Firmware management
- Frame viewer
- Ports
- Port commissioning overview
- Administrative Domain-enabled fabric support
- Port Auto Disable
Host Port Mapping
- Host port mapping overview
- Creating a new Host
- Renaming an HBA Host
- Deleting an HBA Host
- Viewing Host properties
- Associating an HBA with a Host
- Importing HBA-to-Host mapping
- Removing an HBA from a Host
- Exporting Host port mapping
Storage Port Mapping
- In this chapter
- Storage port mapping overview
- Creating a storage array
- Adding storage ports to a storage array
- Unassigning a storage port from a storage array
- Reassigning mapped storage ports
- Editing storage array properties
- Deleting a storage array
- Viewing storage port properties
- Viewing storage array properties
- Importing storage port mapping
- Exporting storage port mapping
Host Management
- Host management
- Brocade adapters
- HCM software
  - HCM features
- Host adapter discovery
- VM Manager
- HCM and Management application support on ESXi systems
  - ESXi CIM listener ports
- Connectivity map
- View management
- Host port mapping
- Adapter software
  - Driver repository
    - Importing a driver into the repository
  - Boot image repository
    - Importing a boot image into the repository
- Bulk port configuration
  - Configuring host adapter ports
- Adapter port WWN virtualization
  - Configuring FAWWNs on switch ports
  - FAWWNs on attached AG ports
- Role-based access control
  - Host adapter management privileges
  - Host adapter administrator privileges
- Host performance management
- Host security authentication
  - Configuring security authentication using the Management application
- supportSave on adapters
- Host fault management
- Backup support
Fibre Channel over Ethernet
- In this chapter
- FCoE overview
  - DCBX protocol
- Enhanced Ethernet features
- FCoE protocols supported
  - Ethernet link layer protocols supported
  - FCoE protocols
- FCoE licensing
- Saving running configurations
  - Copying switch configurations to selected switches
- DCB configuration management
- Switch policies
- DCB configuration
- QoS configuration
- FCoE provisioning
  - Changing the VLAN ID on the default FCoE map
  - Enabling or disabling the FCoE map on the port
- VLAN classifier configuration
- LLDP-DCBX configuration
- 802.1x authentication
- Switch, port, and LAG deployment
  - Deploying DCB product, port, and LAG configurations
  - Source to target switch Fabric OS version compatibility for deployment
- DCB performance
- FCoE login groups
- Virtual FCoE port configuration
  - Viewing virtual FCoE ports
  - Clearing a stale entry
Security Management
- Layer 2 access control list management
- Security configuration deployment
FC-FC Routing Service Management
- Devices that support Fibre Channel routing
- Fibre Channel routing overview
- Guidelines for setting up Fibre Channel routing
- Connecting edge fabrics to a backbone fabric
- Configuring routing domain IDs
Virtual Fabrics
- Virtual Fabrics overview
  - Terminology for Virtual Fabrics
- Virtual Fabrics requirements
- FICON best practices for Virtual Fabrics
- Configuring Virtual Fabrics
SAN Encryption Configuration
- Encryption Center features
- Encryption user privileges
- Smart card usage
  - Using authentication cards with a card reader
  - Registering authentication cards from a card reader
  - Registering authentication cards from the database
  - Deregistering an authentication card
  - Setting a quorum for authentication cards
  - Using system cards
  - Enabling or disabling the system card requirement
  - Registering system cards from a card reader
  - Deregistering system cards
  - Using smart cards
  - Tracking smart cards
  - Editing smart cards
- Network connections
- Blade processor links
  - Configuring blade processor links
- Encryption node initialization and certificate generation
  - Setting encryption node initialization
- Key Management Interoperability Protocol
  - Configuration parameters
  - Key vault type and vendor
- Supported encryption key manager appliances
- Steps for connecting to a DPM appliance
  - Exporting the KAC certificate signing request (CSR)
  - Submitting the CSR to a certificate authority
  - KAC certificate registration expiry
  - Importing the signed KAC certificate
  - Uploading the CA certificate onto the DPM appliance (and first-time configurations)
  - Uploading the KAC certificate onto the DPM appliance (manual identity enrollment)
  - DPM key vault high availability deployment
  - Loading the CA certificate onto the encryption group leader
- Steps for connecting to an LKM/SSKM appliance
  - Launching the NetApp DataFort Management Console
  - Establishing the trusted link
  - Obtaining and importing the LKM/SSKM certificate
  - Exporting and registering the switch KAC certificates on LKM/SSKM
  - LKM/SSKM key vault high availability deployment
  - Data Encryption Keys
- Steps for connecting to an ESKM/SKM appliance
  - Configuring a Brocade group on ESKM/SKM
  - Registering the ESKM/SKM Brocade group user name and password
  - Setting up the local Certificate Authority (CA) on ESKM/SKM
  - Downloading the local CA certificate from ESKM/SKM
  - Creating and installing the ESKM/SKM server certificate
  - Enabling SSL on the Key Management System (KMS) Server
  - Creating an ESKM/SKM High Availability cluster
  - Copying the local CA certificate for a clustered ESKM/SKM appliance
  - Adding ESKM/SKM appliances to the cluster
  - Signing the encryption node KAC certificates
  - Importing a signed KAC certificate into a switch
  - ESKM/SKM key vault high availability deployment
  - Data Encryption Keys
  - ESKM/SKM key vault deregistration
- Steps for connecting to a TEKA appliance
  - Setting up TEKA network connections
  - Creating a client on TEKA
  - Establishing TEKA key vault credentials on the switch
  - Signing the encryption node KAC CSR on the TEKA appliance
  - Importing a signed KAC certificate into a switch
- Steps for connecting to a TKLM appliance
  - Exporting the Fabric OS node self-signed KAC certificates
  - Converting the KAC certificate format
  - Establishing a default key store and device group on TKLM
  - Adding a device to the device group
  - Creating a self-signed certificate for TKLM
  - Importing the Fabric OS encryption node KAC certificates to TKLM
  - Exporting the TKLM self-signed server certificate
  - Importing the TKLM certificate into the group leader
- Steps for connecting to a KMIP-compliant SafeNet KeySecure
  - Setting FIPS compliance
  - Creating a local CA
  - Creating a server certificate
  - Creating a cluster
  - Configuring a Brocade group on the KeySecure
  - Registering the KeySecure Brocade group user name and password
  - Signing the encryption node KAC CSR on KMIP
  - Importing a signed KAC certificate into a switch
  - Backing up the certificates
  - Configuring the KMIP server
  - Adding a node to the cluster
- Steps for connecting to a KMIP-compliant keyAuthority
- Encryption preparation
- Creating a new encryption group
  - Configuring key vault settings for RSA Data Protection Manager (DPM)
  - Configuring key vault settings for NetApp Link Key Manager (LKM/SSKM)
  - Configuring key vault settings for HP Enterprise Secure Key Manager (ESKM/SKM)
  - Configuring key vault settings for Thales e_Security keyAuthority (TEKA)
  - Configuring key vault settings for IBM Tivoli Key Lifetime Manager (TKLM)
  - Configuring key vault settings for Key Management Interoperability Protocol
  - Understanding configuration status results
- Adding a switch to an encryption group
- Replacing an encryption engine in an encryption group
- High availability clusters
  - HA cluster configuration rules
  - Creating HA clusters
  - Removing engines from an HA cluster
  - Swapping engines in an HA cluster
  - Failback option
  - Invoking failback
- Configuring encryption storage targets
  - Adding an encryption target
- Configuring hosts for encryption targets
- Adding target disk LUNs for encryption
  - Configuring storage arrays
  - Remote replication LUNs
  - SRDF pairs
  - Metadata requirements and remote replication
- Adding target tape LUNs for encryption
- Moving targets
- Configuring encrypted tape storage in a multi-path environment
- Tape LUN write early and read ahead
  - Enabling and disabling tape LUN write early and read ahead
- Tape LUN statistics
  - Viewing and clearing tape container statistics
  - Viewing and clearing tape LUN statistics for specific tape LUNs
  - Viewing and clearing statistics for tape LUNs in a container
- Encryption engine rebalancing
  - Rebalancing an encryption engine
- Master keys
  - Active master key
  - Alternate master key
  - Master key actions
  - Saving the master key to a file
  - Saving a master key to a key vault
  - Saving a master key to a smart card set
  - Restoring a master key from a file
  - Restoring a master key from a key vault
  - Restoring a master key from a smart card set
  - Creating a new master key
- Security settings
- Zeroizing an encryption engine
  - Setting zeroization
- Using the Encryption Targets dialog box
- Redirection zones
- Disk device decommissioning
  - Decommissioning disk LUNs
  - Displaying and deleting decommissioned key IDs
  - Displaying Universal IDs
- Rekeying all disk LUNs manually
  - Setting disk LUN Re-key All
  - Viewing disk LUN rekeying details
  - Viewing the progress of manual rekey operations
- Thin provisioned LUNs
  - Thin Provisioning support
- Viewing time left for auto rekey
- Viewing and editing switch encryption properties
  - Exporting the public key certificate signing request from properties
  - Importing a signed public key certificate from properties
  - Enabling and disabling the encryption engine state from Properties
- Viewing and editing encryption group properties
  - General tab
  - Members tab
  - Security tab
  - HA Clusters tab
  - Link Keys tab
  - Tape Pools tab
  - Engine Operations tab
- Encryption-related acronyms in log messages
Zoning
- Zoning overview
- Zone database size
- Zoning configuration
- LSAN zones
- LSAN tagging
- Traffic Isolation zones
- Boot LUN zones
- Zoning administration
Fibre Channel over IP
- FCIP services licensing
- FCIP Concepts
- IP network considerations
- FCIP platforms and supported features
- FCIP trunking
  - Design for redundancy and fault tolerance
  - FCIP tunnel restrictions for FCP and FICON emulation features
  - FCIP Trunk configuration considerations
  - FCIP circuit failover capabilities
  - Bandwidth calculation during failover
  - Circuit Failover Grouping
- Adaptive Rate Limiting
  - FSPF link cost calculation when ARL is used
- QoS SID/DID priorities over an FCIP trunk
  - Configuring QoS Priorities
- IPsec and IKE implementation over FCIP
  - IPsec for the 4 Gbps platforms
  - IPSec for the 8 Gbps platforms
- QOS, DSCP, and VLANs
  - DSCP quality of service
  - VLANs and layer two quality of service
  - When both DSCP and L2CoS are used
- Open systems tape pipelining
  - FCIP Fastwrite and Tape Acceleration
- FICON emulation features
  - IBM z/OS Global Mirror (z Gm) emulation
  - Tape write pipelining
  - Tape read pipelining
  - Teradata pipelining
    - Write pipelining
    - Read pipelining
- Connecting cascaded FICON fabrics over FCIP
  - Planning the configuration
  - Configuring IP links and merging the fabrics
  - Configuring DWDM links to use R_RDYs
  - Extending RDR applications over FCIP
- FCIP configuration guidelines
  - Virtual Port Types
- Configuring an FCIP tunnel
  - Logical switch function on FCIP Tunnels dialog box
- Adding an FCIP circuit
  - Logical switch function in FCIP Add Circuit dialog box
  - Circuit configuration failure
- Configuring FCIP tunnel advanced settings
  - Enabling and disabling compression
  - Enabling Open Systems Tape Pipelining (OSTP)
  - Enabling Tperf test mode
  - Configuring QoS percentages
  - Configuring IPSec and IKE policies
  - Configuring FICON emulation
- Viewing FCIP connection properties
- Viewing General FCIP properties
- Viewing FCIP port properties
- Editing FCIP circuits
- Disabling FCIP tunnels
- Enabling FCIP tunnels
- Deleting FCIP tunnels
- Disabling FCIP circuits
- Enabling FCIP circuits
- Deleting FCIP Circuits
- Displaying FCIP performance graphs
  - Displaying performance graphs for FC ports
  - Displaying FCIP performance graphs for Ethernet ports
- Displaying tunnel properties from the FCIP tunnels dialog box
- Displaying FCIP circuit properties from the FCIP tunnels dialog box
- Displaying switch properties from the FCIP Tunnels dialog box
- Displaying fabric properties from the FCIP Tunnels dialog box
- Troubleshooting FCIP Ethernet connections
Fabric Binding
- Fabric Binding overview
- High integrity fabrics overview
  - Activating high integrity fabrics
  - Deactivating high integrity fabrics
Port Fencing
- In this chapter
- About port fencing
  - Viewing port fencing configurations
- Thresholds
- Adding thresholds
- Editing thresholds
- Removing thresholds
  - Removing thresholds from individual objects
  - Removing thresholds from the thresholds table
FICON Environments
- FICON configurations
- Configuring a switch for FICON operation
  - Planning the configuration
  - Configuring the switch
- Configuring FICON display
- Configuring an Allow/Prohibit Matrix
- Configuring an Allow/Prohibit Matrix manually
- Saving or copying Allow/Prohibit Matrix configurations to another device
  - Copying an Allow/Prohibit Matrix configuration
  - Saving an Allow/Prohibit Matrix configuration to another device
- Activating an Allow/Prohibit Matrix configuration
- Deleting an Allow/Prohibit Matrix configuration
- Changing the Allow/Prohibit Matrix display
  - Changing window arrangement
  - Clearing port names
- Cascaded FICON fabric
  - Configuring a cascaded FICON fabric
- Cascaded FICON fabric merge
  - Merging two cascaded FICON fabrics
  - Resolving merge conflicts
- Port groups
- Swapping blades
VLAN Management
- VLAN Manager
- Port VLANs
- Spanning Tree Protocol configuration
- VLAN routing
  - Managing IP addresses on an SVI
Deployment Manager
- Introduction to the Deployment Manager
- Editing a deployment configuration
- Duplicating a deployment configuration
- Deleting a deployment configuration
- Deploying a configuration
- Viewing deployment logs
- Generating a deployment report
- Generating a deployment configuration snapshot report
- Searching the configuration snapshots
Fibre Channel Troubleshooting
- In this chapter
- FC troubleshooting
- FCIP troubleshooting
Performance Data
- SAN performance overview
  - SAN performance measures
  - SAN performance management requirements
- SAN real-time performance data
- SAN historical performance data
- SAN end-to-end monitoring
- SAN Top Talker monitoring
- Bottleneck detection
- Thresholds and event notification
- SAN connection utilization
Flow Vision
- Overview
- Provisioning flows
- Monitoring Flows
- Dashboard flow performance monitor
- Flow Vision features
- Context-based flow definitions
- Flow parameter and configuration rules and limitations
- Accessing Flow Vision from other management application features
Frame Monitor
- Frame Monitor
  - Frame types
    - Pre-defined frame types
    - Custom frame types
  - Frame Monitoring requirements
- Creating a custom frame monitor
- Editing a frame monitor
- Assigning a frame monitor to a port
- Finding frame monitor assignments
- Removing a frame monitor from a port
- Removing a frame monitor from a switch
Policy Monitor
- Policy monitor overview
- Preconfigured policy monitors
- Viewing policy monitor status
- Viewing existing policy monitors
- Adding a policy monitor
- Policy monitor scheduling
- Editing a policy monitor
- Deleting a policy monitor
- Running a policy monitor
- Viewing a policy monitor report
  - Exporting a policy monitor report
- Exporting reports to e-mail recipients
- Viewing historical reports for all policy monitors
- Viewing historical reports for a policy monitor
Fault Management
- Fault management overview
  - Restrictions
- Event notification
  - Configuring e-mail notification
- Defining filters
- SNMP traps
- SNMP informs
  - Enabling or disabling SNMP informs
- Syslogs
- Event action definitions
- Pseudo events
- Event custom reports
- Event custom report schedules
  - Adding or editing an event report schedule
- Event logs
Monitoring and Alerting Policy Suite
- Monitoring and Alerting Policy Suite overview
  - MAPS role-based access control
  - Enabling MAPS on a device
- MAPS interoperability with other features
  - Fabric Watch
    - Fabric Watch behavior
- MAPS category, object, and measure hierarchy
  - MAPS categories, measures, and actions
- MAPS monitoring categories
- MAPS policies
  - User-defined policies
- MAPS rules
- MAPS conditions
- MAPS actions
- MAPS groups
- MAPS violations
- MAPS events
  - Viewing MAPS events
- MAPS integration with other features
Technical Support
- In this chapter
- Server and client support save
- Device technical support
- Upload failure data capture
Reports
- In this chapter
- Reports overview
  - Browser requirements
- SAN report types
- Generating SAN reports
- Viewing SAN reports
- Exporting SAN reports
- Printing SAN reports
- Deleting SAN reports
- Generating SAN performance reports
- Generating SAN zoning reports
Application menus
- Dashboard main menus
- SAN main menus
- SAN shortcut menus
Call Home Event Tables
Event Categories
- Link incident events
- Product status events
- Product audit events
- Security events
  - Security events for FC devices
  - Security events for IP devices
- User action events
- Management server events
- Product events
- IP Performance monitoring events
User Privileges
- About user privileges
- About Roles and Access Levels
Device Properties
- SAN device properties
- Viewing VC module properties
- Host properties
  - Viewing adapter port properties
- Properties customization
Regular Expressions
Troubleshooting
- In this chapter
- Application Configuration Wizard troubleshooting
- Browser troubleshooting
- Client browser troubleshooting
- Fabric tracking troubleshooting
- FICON troubleshooting
- Firmware download troubleshooting
- Launch Client troubleshooting
- Names troubleshooting
- Patch troubleshooting
- Performance troubleshooting
- Port Fencing troubleshooting
- Professional edition login troubleshooting
- Server troubleshooting
- Server Management Console troubleshooting
- Supportsave troubleshooting
- Technical support data collection troubleshooting
- View All list troubleshooting
- Wireless troubleshooting
- Zoning troubleshooting
Database Fields
- In this appendix
- Database tables and fields
- Views
Index

Popular Brands

Popular manuals