Document Outline

• Contents
• Preface
  • Document conventions
    • Text formatting conventions
    • Command syntax conventions
    • Notes, cautions, and warnings
  • Brocade resources
  • Contacting Brocade Technical Support
  • Document feedback
• About This Document
  • Supported hardware and software
  • What’s new in this document
  • Related documents
• Section I: Network OS Administration
• Introduction to Network OS and Brocade VCS Fabric Technology
  • Introduction to Brocade Network OS
    • Brocade VCS Fabric terminology
  • Introduction to Brocade VCS Fabric technology
    • Automation
    • Distributed intelligence
    • Logical chassis
    • Ethernet fabric formation
      • Automatic neighbor node discovery
      • Automatic ISL formation and hardware-based trunking
      • Principal RBridge election
  • Brocade VCS Fabric technology use cases
    • Classic Ethernet access and aggregation use case
    • Large-scale server virtualization use case
    • Brocade VCS Fabric connectivity with Fibre Channel SAN
  • Topology and scaling
    • Core-edge topology
    • Ring topology
    • Full mesh topology
• Using the Network OS CLI
  • Network OS CLI overview
    • Understanding roles
      • RBAC permissions
      • Default roles
  • Accessing the Network OS CLI through Telnet
  • Saving your configuration changes
  • Network OS CLI command modes
  • Network OS CLI keyboard shortcuts
  • Using the do command as a shortcut
  • Completing Network OS CLI commands
  • Displaying Network OS CLI commands and command syntax
  • Using Network OS CLI command output modifiers
  • Considerations for show command output
• Basic Switch Management
  • Switch management overview
    • Connecting to a switch
    • Telnet and SSH overview
    • SSH server key exchange and authentication
    • Feature support for Telnet
    • Feature support for SSH
    • Firmware upgrade and downgrade considerations with Telnet or SSH
    • Using DHCP Automatic Deployment (DAD)
      • Configuring the DHCP Automatic Deployment process for replacing logical chassis cluster switches
      • Configuring the DAD process for standalone and fabric cluster switches
    • Telnet and SSH considerations and limitations
  • Ethernet management interfaces
    • Brocade VDX Ethernet interfaces
    • Lights-out management
  • Stateless IPv6 autoconfiguration
  • Switch attributes
  • Switch types
  • Operational modes
    • Logical chassis cluster mode
      • Logical chassis cluster mode support for platforms
      • Logical chassis cluster mode characteristics
      • Command blocking in logical chassis cluster mode
      • Logical chassis cluster mode configuration
    • Fabric cluster mode
    • Standalone mode
  • Modular platform basics
    • Management modules
      • HA failover
      • Support for In-service software upgrades
    • Switch fabric modules
    • Line cards
  • Supported interface modes
  • Slot numbering and configuration
    • Slot numbering
    • Slot configuration
  • Connecting to a switch
    • Establishing a physical connection for a Telnet or SSH session
    • Telnet services
      • Establishing a Telnet connection
      • Shutting down the Telnet service
      • Re-enabling the Telnet service
    • Connecting with SSH
      • Establishing a SSH connection
      • Importing an SSH public key
      • Deleting an SSH public key
      • Shutting down the SSH service
      • Re-enabling the SSH service
  • Using the management VRF
  • Configuring and managing switches
    • Configuring Ethernet management interfaces
      • Configuring static IP addresses
      • Configuring a static IPv4 Ethernet address
      • Configuring a static IPv6 Ethernet address
      • Configuring an IPv4 address with DHCP
      • Configuring IPv6 autoconfiguration
      • Displaying the network interface
      • Configuring the management interface speed
      • Configuring a switch banner
      • Configuring switch attributes
        • Setting and displaying the host name
        • Setting and displaying the chassis name
        • Viewing switch types
    • Configuring a switch in logical chassis cluster mode
      • Creating a logical chassis cluster
      • Taking precautions for mode transitions
        • Node 1 global configuration
        • Node 2 global configuration
        • Combined global configuration
        • Node 2 local configuration before matching the combined global configuration
        • Node 2 local configuration after matching the combined global configuration
      • Converting a fabric cluster to a logical chassis cluster
      • Converting a fabric cluster while preserving configuration
      • Selecting a principal node for the cluster
      • Converting a logical chassis cluster to a fabric cluster
      • Converting to a fabric cluster while preserving configuration
      • Adding a node to a logical chassis cluster
      • Removing a node from a logical chassis cluster
      • Rejoining a node to the cluster
      • Replacing a node in a logical chassis cluster
      • Merging two logical chassis clusters
      • Changing an RBridge ID on a switch within a fabric
      • Examples of global and local configurations
    • Configuring a switch in fabric cluster mode
    • Configuring a switch in standalone mode
    • Displaying switch interfaces
    • Displaying slots and module status information
    • Replacing a line card
    • Configuring high availability
      • Using HA commands
      • Understanding expected behaviors for reload and failover
    • Disabling and enabling a chassis
    • Rebooting a switch
      • Rebooting a compact switch
      • Rebooting a modular chassis
    • Troubleshooting switches
      • Capturing and managing supportSave data
        • Uploading supportSave data to an external host
        • Saving supportSave data to an attached USB device
        • Displaying the status of a supportSave operation
        • Configuring automatic uploading of supportSave data
        • Displaying the autoupload configuration
        • Using additional supportSave commands
      • Logging error messages
  • Configuring policy-based resource management
    • Configuring hardware profiles
    • Guidelines for changing hardware profiles
    • Using hardware profile show commands
  • Brocade support for Openstack
    • Configuring Openstack to access Network OS
• Using Network Time Protocol
  • Network Time Protocol overview
    • Date and time settings
    • Time zone settings
  • Configuring NTP
    • Configuration considerations for NTP
    • Setting the date and time
    • Setting the time zone
    • Displaying the current local clock and time zone
    • Removing the time zone setting
    • Synchronizing the local time with an external source
    • Displaying the active NTP server
    • Removing an NTP server IP address
• Configuration Management
  • Configuration management overview
    • Configuration file types
      • Default configuration
      • Startup configuration
      • Running configuration
  • Displaying configurations
    • Displaying the default configuration
    • Displaying the startup configuration
    • Displaying the running configuration
  • Saving configuration changes
    • Saving the running configuration
    • Saving the running configuration to a file
    • Applying previously saved configuration changes
  • Backing up configurations
    • Uploading the startup configuration to an external host
    • Backing up the startup configuration to a USB device
  • Configuration restoration
    • Restoring a previous startup configuration from backup
    • Restoring the default configuration
  • Managing configurations on a modular chassis
    • Managing configurations on line cards
    • Managing configurations across redundant management modules
  • Managing configurations in Brocade VCS Fabric mode
    • Automatic distribution of configuration parameters
    • Downloading a configuration to multiple switches
  • Managing flash files
    • Listing the contents of the flash memory
    • Deleting a file from the flash memory
    • Renaming a flash memory file
    • Viewing the contents of a file in the flash memory
• Installing and Maintaining Firmware
  • Firmware management overview
    • Obtaining and decompressing firmware
    • Upgrading firmware on a compact switch
    • Upgrading firmware on a modular chassis
      • Automatic firmware synchronization
    • Upgrading and downgrading firmware
  • Upgrading firmware on a local switch
    • Preparing for a firmware download
    • Connecting to the switch
    • Obtaining the firmware version
    • Using the firmware download command
    • Downloading firmware in the default mode
    • Downloading firmware from a USB device
    • Downloading firmware by using the noactivate option
    • Downloading firmware by using the manual option
    • Upgrading firmware by using the manual option
    • Downloading firmware by using the default-config option
    • Monitoring and verifying a firmware download session
  • Upgrading firmware in Brocade fabric cluster mode
  • Upgrading firmware in Brocade logical chassis cluster mode
    • Verifying firmware download in logical chassis cluster mode
  • Upgrading and downgrading firmware within a VCS Fabric
    • Tested topology
    • Upgrading nodes by using an odd/even approach
    • Preparing for the maintenance window
    • Optimizing reconvergence in the VCS Fabric
    • Maintaining the VCS Fabric
    • Understanding traffic outages
    • Restoring firmware in the VCS Fabric
    • Downgrading firmware in the VCS Fabric
• Configuring SNMP
  • Simple Network Management Protocol overview
    • SNMP Manager
    • SNMP Agent
    • Management Information Base (MIB)
    • Basic SNMP operation
    • Understanding MIBs
      • Brocade MIB structure
      • Access to MIB variables
      • Brocade MIBs
        • Brocade MIB files
      • Agent Capability MIBs
      • Standard MIBs
      • MIB loading order
  • SNMP configuration
    • Configuring SNMP community strings
      • Adding an SNMP community string
      • Changing the access of a read-only community string
      • Removing an SNMP community string
    • Configuring SNMP server hosts
      • Setting the SNMP server host
      • Removing the SNMP server host
      • Configuring the SNMP system group
        • Setting the SNMP server contact
        • Removing the SNMP server contact
        • Setting the SNMP server location
        • Setting the SNMP server description
    • Configuring multiple SNMP server contexts
    • Configuring password encryption for SNMPv3 users
    • Displaying SNMP configurations
• Configuring Brocade VCS Fabrics
  • Fabric overview
    • Brocade VCS Fabric formation
    • How RBridges work
    • Neighbor discovery
    • Brocade trunks
    • Fabric formation
      • Principal switch selection
      • RBridge ID allocation
    • Fabric routing protocol
  • Configuring a Brocade VCS Fabric
    • Adding a new switch into a fabric
    • Configuring fabric interfaces
      • Enabling a fabric ISL
      • Disabling a fabric ISL
      • Enabling a fabric trunk
      • Disabling a fabric trunk
    • Configuring broadcast, unknown unicast, and multicast forwarding
      • Multicast distribution tree-root selection
      • Configuring priorities
      • Changing the priority
      • Displaying the running configuration
    • Configuring VCS virtual IP addresses
      • Virtual IP address configuration scenarios
    • Configuring fabric ECMP load balancing
• Configuring Metro VCS
  • Metro VCS overview
    • Metro VCS using long-distance ISLs
      • Guidelines and restrictions for long-distance Metro VCS
    • Metro VCS using standard-distance ISLs
      • Guidelines and restrictions for standard-distance Metro VCS
    • Metro VCS and distributed Ethernet vLAGs
      • Metro VCS over a long-distance fabric
      • Supported platforms for Distributed Ethernet Fabrics using vLAG
      • Topology for Distributed Ethernet Fabrics using vLAG
      • Guidelines and restrictions for Distributed Ethernet Fabrics using vLAG
  • Configuring a Metro VCS port
  • Configuring Distributed Ethernet Fabrics using vLAG
• Administering Zones
  • Zoning overview
    • Example zoning topology
    • LSAN zones
      • LSAN zones overview
      • LSAN naming
    • Managing domain IDs
    • Approaches to zoning
    • Zone objects
      • Zones
      • Zone aliases
      • Zone configurations
      • Naming conventions
    • Zoning enforcement
    • Considerations for zoning architecture
    • Operational considerations for zoning
      • Supported modes for zoning
      • Supported firmware for zoning
      • Firmware downgrade and upgrade considerations for zoning
  • Configuring and managing zones
    • Zone configuration management overview
    • Understanding and managing default zoning access modes
      • Setting the default zoning mode
      • Understanding and managing zone database size
      • Viewing database size information
    • Managing zone aliases
      • Creating an alias
      • Adding additional members to an existing alias
      • Removing a member from an alias
      • Deleting an alias
    • Creating zones
      • Creating a zone
      • Adding a member to a zone
      • Removing a member from a zone
      • Deleting a zone
    • Managing zones
      • Viewing the defined configuration
      • Viewing the enabled configuration
      • Creating a zone configuration
      • Adding a zone to a zone configuration
      • Removing a zone from a zone configuration
      • Enabling a zone configuration
      • Disabling a zone configuration
      • Deleting a zone configuration
      • Clearing changes to a zone configuration
      • Clearing all zone configurations
      • Backing up the zone configuration
      • Restoring a configuration from backup
    • Zone configuration scenario example
    • Merging zones
      • Preconditions for zone merging
      • Fabric segmentation and zoning
      • Zone merging scenarios
    • Configuring LSAN zones — device sharing example
• Configuring Fibre Channel Ports
  • Fibre Channel ports overview
  • Connecting to a FC Fabric through an FC Router
  • Fibre Channel port configuration
    • Using Fibre Channel commands
    • Activating and deactivating Fibre Channel ports
      • Prerequisites for activating and deactivating Fibre Channel ports
      • Enabling a Fibre Channel port
      • Disabling a Fibre Channel port
    • Configuring and viewing Fibre Channel port attributes
      • Using Fibre Channel port commands
      • Viewing Fibre Channel port attributes
      • Setting Fibre Channel port speed
    • Configuring Fibre Channel ports for long-distance operation
      • Long-distance operation overview
      • Preconditions for long-distance operation
      • Configuring a Fibre Channel port for long-distance operation
    • Configuring a Fibre Channel port for trunking
    • Monitoring Fibre Channel ports
• Using Access Gateway
  • Access Gateway basic concepts
    • Access Gateway and native VCS modes
    • Access Gateway in logical chassis cluster
    • Access Gateway ports
      • Comparison of Access Gateway, ISL, and FC switch ports
    • Access Gateway features, requirements and limitations
  • Enabling Access Gateway mode
  • Disabling Access Gateway mode
  • Display Access Gateway configuration data
  • VF_Port to N_Port mapping
    • Displaying port mapping
    • Default port mapping
    • Configuring port mapping
  • Port Grouping policy
    • Displaying port grouping information
    • Creating and removing port groups
    • Naming a port group
    • Adding and removing N_Ports in a port group
    • Port Grouping policy modes
      • Automatic Login Balancing Mode
      • Enabling and disabling Login Balancing mode
      • Modified Managed Fabric Name Monitoring mode
      • Setting and displaying the fabric name monitoring TOV
  • N_Port monitoring for unreliable links
    • Setting and displaying the reliability counter for N_Port monitoring
• Using System Monitor and Threshold Monitor
  • System Monitor overview
    • Monitored components
    • Monitored FRUs
  • Configuring System Monitor
    • Setting system thresholds
    • Setting state alerts and actions
    • Configuring e-mail alerts
    • Viewing system SFP optical monitoring defaults
    • Displaying the switch health status
  • Threshold Monitor overview
    • CPU and memory monitoring
    • SFP monitoring
      • SFP thresholds
      • Threshold values
    • Security monitoring
    • Interface monitoring
      • Interface error types
      • Port Fencing
  • Configuring Threshold Monitor
    • Viewing threshold status
    • CPU and memory threshold monitoring
      • Configuring CPU monitoring thresholds and alerts
      • Configuring memory monitoring thresholds and alerts
    • Configuring SFP monitoring thresholds and alerts
    • Security monitoring
      • Viewing security defaults
      • Configuring security monitoring
    • Configuring interface monitoring
      • Viewing interface threshold defaults
      • Configuring interface monitoring
    • Pausing and continuing threshold monitoring
• Using VMware vCenter
  • vCenter and Network OS integration overview
    • vCenter properties
    • vCenter guidelines and restrictions
  • vCenter discovery
  • vCenter configuration
    • Step 1: Enabling QoS
    • Step 2: Enabling CDP/LLDP
      • Enabling CDP/LLDP on vSwitches
      • Enabling CDP/LLDP on dvSwitches
    • Step 3: Adding and Activating the vCenter
      • Adding the vCenter
      • Activating the vCenter
    • Discovery timer interval
    • User-triggered vCenter discovery
    • Viewing the discovered virtual assets
• Configuring Remote Monitoring
  • RMON overview
  • Configuring and Managing RMON
    • Configuring RMON events
    • Configuring RMON Ethernet group statistics collection
    • Configuring RMON alarm settings
• Section II: Network OS Security Configuration
• Managing User Accounts
  • Understanding and managing user accounts
    • Default accounts in the local switch user database
    • User account attributes
    • Configuring user accounts
      • Creating a user account
      • Modifying an existing user account
      • Disabling a user account
      • Deleting a user account
      • Unlocking a user account
      • Configuring a user alias
  • Understanding and managing password policies
    • Password policies overview
      • Password strength policy
      • Password encryption policy
      • Account lockout policy
      • Denial of service implications
      • Password interaction with remote AAA servers
    • Configuring password policies
      • Configuring the account lockout threshold
      • Creating a password policy
      • Restoring the default password policy
      • Displaying password attributes
  • Understanding and managing role-based access control (RBAC)
    • Default roles
    • User-defined roles
    • Displaying a role
    • Creating or modifying a role
    • Deleting a role
    • Commonly used roles
      • Creating a VCS Fabric security administrator role and account
      • Creating a FCoE administrator role and account
  • Understanding and managing command access rules
    • Specifying rule commands with multiple options
    • Verifying rules for configuration commands
    • Configuring rules for operational commands
    • Configuring rules for interface key-based commands
    • Configuring a placeholder rule
    • Configuring rule processing
    • Adding a rule
    • Changing a rule
    • Deleting a rule
    • Displaying a rule
  • Logging and analyzing security events
• Configuring External Server Authentication
  • Understanding and configuring remote server authentication
    • Remote server authentication overview
      • Login authentication mode
      • Conditions for conformance
    • Configuring remote server authentication
      • Setting and verifying the login authentication mode
      • Resetting the login authentication mode
      • Changing the login authentication mode
  • Understanding and configuring RADIUS
    • Authentication and accounting
    • Authorization
    • Account password changes
    • RADIUS authentication through management interfaces
    • Configuring server side RADIUS support
      • Configuring a RADIUS server with Linux
      • Adding the Brocade attribute to the RADIUS server configuration
      • Configuring a Brocade user account
      • Configuring RADIUS server support with a Windows server
    • Configuring client side RADIUS support
      • Adding a RADIUS server to the client server list
      • Modifying the client-side RADIUS server configuration
      • Configuring the client to use RADIUS for login authentication
  • Understanding and configuring TACACS+
    • TACACS+ authorization
    • TACACS+ authentication through management interfaces
    • Supported TACACS+ packages and protocols
    • TACACS+ configuration components
    • Configuring the client for TACACS+ support
      • Adding a TACACS+ server to the client server list
      • Modifying the client-side TACACS+ server configuration
      • Configuring the client to use TACACS+ for login authentication
    • Configuring TACACS+ accounting on the client side
      • Client-side TACACS+ accounting overview
        • Conditions for conformance
        • Firmware downgrade considerations
      • Configuring TACACS+ accounting on the client
        • Enabling login accounting
        • Enabling command accounting
        • Disabling accounting
        • Viewing the TACACS+ accounting logs
    • Configuring TACACS+ on the server side
      • Server-side user account administration overview
      • Establishing a server-side user account
      • Changing a server-side TACACS+ account password
      • Defining a server-side TACACS+ group
      • Setting a server-side account expiration date
      • Configuring a TACACS+ server key
    • Configuring TACACS+ for a mixed vendor environment
  • Understanding and configuring LDAP
    • User authentication
    • Server authentication
    • Server authorization
    • FIPS compliance
    • Configuring LDAP
      • Importing an LDAP CA certificate
      • Deleting LDAP CA certificates
      • Configuring an Active Directory server on the client side
        • Adding an LDAP server to the client server list
        • Changing LDAP server parameters
        • Removing an LDAP server
        • Importing an LDAP CA certificate
        • Deleting an LDAP CA certificate
        • Verifying LDAP CA certificates
        • Viewing the LDAP CA certificate
        • Importing a syslog CA certificate
        • Deleting a syslog CA certificate
        • Verifying syslog CA certificates
        • Viewing the syslog CA certificate
      • Configuring Active Directory groups on the client side
        • Mapping an Active Directory group to a switch role
        • Removing the mapping of an Active Directory to a switch role
        • Configuring the client to use LDAP/AD for login authentication
      • Clearing sessions on the client side
      • Configuring an Active Directory server on the client side
        • Creating a user account on an LDAP/AD server
        • Verifying the user account on the switch
        • Configuring LDAP users on an AD server
• Configuring Fabric Authentication
  • Fabric authentication overview
    • DH-CHAP
    • Shared secret keys
    • Switch connection control (SCC) policy
    • Port security
  • Understanding fabric authentication
    • Configuring SSH server key exchange
    • Configuring an authentication policy
    • Configuring DH-CHAP shared secrets
    • Setting up secret keys
    • Setting the authentication policy parameters
    • Activating the authentication policy
    • Configuring a Brocade VDX 6730 to access a SAN fabric
    • Configuring defined and active SCC policy sets
      • Creating a defined SCC policy
      • Modifying the SCC policy
      • Activating the SCC policy
      • Removing the SCC Policy
  • Configuring port security
    • Configuring port security on an access port
    • Configuring port security on a trunk port
    • Configuring port-security MAC address limits
    • Configuring port-security shutdown time
    • Configuring OUI-based port security
    • Configuring port security with sticky MAC addresses
• Section III: Network OS Layer 2 Switch Features
• Administering Edge-Loop Detection
  • Edge-loop detection overview
    • How ELD detects loops
  • Configuring edge-loop detection
    • Setting global ELD parameters for a Brocade VCS Fabric cluster
    • Setting interface parameters on a port
    • Troubleshooting edge-loop detection
• Configuring AMPP
  • AMPP overview
    • AMPP over vLAG
    • AMPP and Switched Port Analyzer
    • AMPP scalability
    • AMPP port-profiles
      • Life of a port-profile
  • Configuring AMPP profiles
    • Configuring a new port-profile
    • Configuring VLAN profiles
    • Configuring FCoE profiles
    • Configuring QoS profiles
    • Configuring security profiles
    • Deleting a port-profile-port
    • Deleting a port-profile
    • Deleting a sub-profile
    • Monitoring AMPP profiles
• Configuring FCoE interfaces
  • FCoE overview
    • FCoE terminology
    • End-to-end FCoE
      • FCoE operations
      • FCoE end-to-end forwarding
    • FCoE and Layer 2 Ethernet
      • Layer 2 forwarding
      • 802.1Q VLAN tagging
      • Support for Virtual Fabrics
      • Incoming frame classification
      • Congestion control and queuing
      • Access control
      • Trunking
      • Flow control
      • Support for 40-Gbps ISLs on breakout ports
    • FCoE Initialization Protocol
      • FIP discovery
      • FIP login
      • FIP logout
      • Name server operation
      • Registered State Change Notification
      • Local ENode configuration
    • FCoE queuing
    • FCoE upgrade and downgrade considerations
  • FCoE interface configuration
    • Assigning an FCoE map onto an interface
    • Assigning an FCoE map onto a LAG member
    • Configuring FCoE over LAG
      • Guidelines and restrictions for configuring FCoE over LAG
      • Configuring FCoE provisioning on LAGs
      • Configuring logical FCoE ports
  • Troubleshooting FCoE interfaces
• Configuring 802.1Q VLANs
  • 802.1Q VLAN overview
    • Ingress VLAN filtering
    • VLAN configuration guidelines and restrictions
  • Configuring and managing 802.1Q VLANs
    • Understanding the default VLAN configuration
    • Configuring interfaces to support VLANs
      • Enabling and disabling an interface port
      • Configuring the MTU on an interface port
      • Creating a VLAN
      • Enabling STP on a VLAN
      • Disabling STP on a VLAN
      • Configuring an interface port as a Layer 2 switch port
      • Configuring an interface port as an access interface
      • Configuring an interface port as a trunk interface
      • Disabling a VLAN on a trunk interface
    • Configuring protocol-based VLAN classifier rules
      • Configuring a VLAN classifier rule
      • Configuring MAC address-based VLAN classifier rules
      • Deleting a VLAN classifier rule
      • Creating a VLAN classifier group and adding rules
      • Activating a VLAN classifier group with an interface port
    • Displaying VLAN information
    • Configuring the MAC address table
      • Specifying or disabling the aging time for MAC addresses
      • Adding static addresses to the MAC address table
  • Private VLANs
    • PVLAN configuration guidelines and restrictions
    • Associating the primary and secondary VLANs
    • Configuring an interface as a PVLAN promiscuous port
    • Configuring an interface as a PVLAN host port
    • Configuring an interface as a PVLAN trunk port
    • Displaying PVLAN information
• Configuring a VXLAN Gateway
  • Introduction to VXLAN Gateway
  • VXLAN tunnel endpoints
  • High-level communication in a VXLAN environment
  • Coordination of activities
  • VXLAN Gateway configuration steps
    • Prerequisite steps
    • VXLAN gateway configuration example
  • Additional commands
• Configuring Virtual Fabrics
  • Virtual Fabrics overview
    • Virtual Fabrics features
    • Virtual Fabrics considerations and limitations
    • Virtual Fabrics upgrade and downgrade considerations
    • Virtual Fabrics operations
    • Virtual Fabrics configuration overview
      • Virtual Fabrics performance considerations
      • VLAN virtualization
      • Virtual data center deployment
      • AMPP provisioning with service VFs
      • STP with service VFs
        • STP-with-service-VFs topology
        • STP-with-service-VFs configuration rules
        • STP participation
        • STP tunneling
      • PVLANs with service VFs
      • IP over service VFs
      • Transport VFs
      • Service and transport VF classification with native VLANs
        • Default-native-VLAN trunk mode
        • No-default-native-VLAN trunk mode
  • Configuring and managing Virtual Fabrics
    • Configuring a service VF instance
      • Enabling service VF configuration
      • Creating a service VF instance
    • Configuring a transport VF instance
    • Configuring VF classification to a trunk interface
    • Configuring transport VF classification to a trunk interface
    • Creating a default VLAN with a transport VF to a trunk interface
    • Configuring a native VLAN in regular VLAN trunk mode
    • Configuring a native VLAN in no-default-native-VLAN trunk mode
    • Configuring additional Layer 2 service VF features
      • Configuring private service VFs
        • Configuring service VFs and defining and associating PVLANs
        • Configuring physical interfaces
        • Understanding PVLAN configuration failures
      • Configuring MAC groups
        • Creating a MAC group instance and assigning MAC addresses
        • Deleting a MAC group or MAC address
        • Configuring an interface for service VF MAC address access
      • Configuring Layer 3 service VF features
    • Upgrading and downgrading firmware with Virtual Fabrics
    • Troubleshooting Virtual Fabrics
• Configuring STP-Type Protocols
  • STP overview
    • STP configuration guidelines and restrictions
    • RSTP
    • MSTP
    • PVST+ and Rapid PVST+
      • PVST+ and R-PVST+ guidelines and restrictions
    • Spanning Tree Protocol and VCS mode
  • Configuring and managing STP and STP variants
    • Understanding the default STP configuration
    • Saving configuration changes
    • Configuring basic STP
    • Configuring RSTP
    • Configuring MSTP
      • Configuring additional MSTP parameters
        • Enabling and disabling Cisco interoperability (MSTP)
        • Mapping a VLAN to an MSTP instance
        • Specifying the maximum number of hops for a BPDU (MSTP)
        • Specifying a name for an MSTP region
        • Specifying a revision number for MSTP configuration
    • Configuring PVST+ or R-PVST+
    • Enabling STP, RSTP, MSTP, PVST+ or R-PVST+
    • Disabling STP, RSTP, MSTP, PVST+, or R-PVST+
    • Shutting down STP, RSTP, MSTP, PVST+, or R-PVST+ globally
    • Specifying bridge parameters
      • Specifying the bridge priority
      • Specifying the bridge forward delay
      • Specifying the bridge maximum aging time
      • Specifying the bridge hello time
    • Configuring STP timers
      • Enabling the error disable timeout timer
      • Specifying the error disable timeout interval
    • Specifying the port-channel path cost
    • Specifying the transmit hold count (RSTP, MSTP, and R-PVST+)
    • Clearing spanning tree counters
    • Clearing spanning tree-detected protocols
    • Displaying STP, RSTP, MSTP, PVST+, or R-PVST+ information
    • Configuring STP, RSTP, or MSTP on DCB interface ports
      • Enabling automatic edge detection (DCB)
      • Configuring the path cost (DCB)
      • Enabling a port (interface) as an edge port (DCB)
      • Enabling guard root (DCB)
      • Specifying the STP hello time (DCB)
      • Specifying restrictions for an MSTP instance (DCB)
      • Specifying a link type (DCB)
      • Enabling port fast (DCB)
      • Specifying the port priority (DCB)
      • Restricting the port from becoming a root port (DCB)
      • Restricting the topology change notification (DCB)
      • Enabling and disabling STP (DCB)
        • Enabling spanning tree (DCB)
        • Disabling spanning tree (DCB)
    • Configuring DiST
• Configuring UDLD
  • UDLD overview
    • UDLD requirements
    • How UDLD works
  • Configuring UDLD
  • Other UDLD-related commands
• Configuring Link Aggregation
  • Link aggregation overview
    • Link Aggregation Control Protocol
      • Dynamic link aggregation
      • Static link aggregation
      • LACP configuration guidelines and restrictions
    • Brocade-proprietary aggregation
    • LAG distribution process and conditions
    • Virtual LAGs
  • Link aggregation setup
    • vLAG configuration overview
      • Configuring vLAGs
      • Configuring vLAGs to minimize packet loss
      • Configuring the vLAG ignore-split feature
    • Configuring load balancing on a remote RBridge
    • Configuring and managing LACP
      • Understanding the default LACP configuration
      • Enabling LACP on a DCB interface
      • Configuring the LACP system priority
      • Configuring the LACP timeout period on a DCB interface
      • Clearing LACP counter statistics on a LAG
      • Clearing LACP counter statistics on all LAG groups
      • Displaying LACP information
      • Troubleshooting LACP
• Configuring LLDP
  • LLDP overview
    • Layer 2 topology mapping
    • DCBX
      • Enhanced Transmission Selection
      • Priority Flow Control
    • LLDP configuration guidelines and restrictions
  • Configuring and managing LLDP
    • Understanding the default LLDP
    • Enabling LLDP globally
    • Disabling LLDP globally
    • Resetting LLDP globally
    • Configuring LLDP global command options
      • Specifying a system name for the Brocade VDX hardware
      • Specifying an LLDP system description for the Brocade VDX hardware
      • Specifying a user description for LLDP
      • Enabling and disabling the receiving and transmitting of LLDP frames
      • Configuring the transmit frequency of LLDP frames
      • Configuring the hold time for receiving devices
      • Advertising the optional LLDP TLVs
      • Configuring the advertisement of LLDP DCBX-related TLVs
      • Configuring LLDP profiles
      • Configuring iSCSI priority
      • Configuring the iSCSI profile
    • Configuring LLDP interface-level command options
    • Displaying LLDP-related information
    • Clearing LLDP-related information
• Configuring ACLs
  • ACL overview
    • ACL benefits
    • IP ACLs
    • IP ACL parameters
    • Default ACLs
  • Configuring and managing ACLs
    • Understanding ACL configuration guidelines and restrictions
    • Creating a standard MAC ACL and adding rules
    • Creating an extended MAC ACL and adding rules
    • Applying a MAC ACL to a DCB interface
    • Applying a MAC ACL to a VLAN interface
    • Modifying MAC ACL rules
    • Removing a MAC ACL
    • Reordering the sequence numbers in a MAC ACL
    • Creating a standard IP ACL
    • Creating an extended IP ACL
    • Applying an IP ACL to a management interface
    • Binding an ACL in standalone mode or fabric cluster mode
    • Displaying the IP ACL configuration
• Configuring QoS
  • QoS overview
    • QoS features
      • Rewriting
      • Queueing
    • User-priority mapping
    • Congestion control
      • Tail drop
      • CoS thresholds
      • Random Early Discard
    • Ethernet Pause
      • Ethernet Pause features
      • 1-Gbps pause negotiation
      • Ethernet Priority Flow Control
    • Multicast rate limiting
    • BUM storm control
      • BUM storm control considerations and limitations
    • Scheduling
      • Strict priority scheduling
      • Weighted Round Robin scheduling
      • Traffic class scheduling policy
      • Multicast queue scheduling
    • Data Center Bridging QoS
    • Brocade VCS Fabric QoS
      • Restrictions for Layer 3 features in VCS mode
    • Port-based Policer
      • Port-based Policer features
      • Color-based priority
      • Policing parameters
        • CIR and CBS
        • EIR and EBS
        • Parameters that apply actions to conform and exceed traffic
      • Policer considerations and limitations
        • Best practices for Policer
        • Configuration rules and considerations for Policer
        • Limitations for Policer
        • Considerations for vLAGs with Policer
        • Policer behavior for control packets
        • Lossless traffic with Policer
  • Configuring QoS
    • Configuring QoS fundamentals
      • Understanding default user-priority mappings for untrusted interfaces
      • Configuring QoS mappings
        • Configuring the QoS trust mode
        • Verifying CoS trust
        • Configuring user-priority mappings
        • Creating a CoS-to-CoS mutation QoS map
        • Applying a CoS-to-CoS mutation QoS map to an interface
        • Verifying CoS-to-CoS mutation QoS mapping
      • Configuring DSCP mappings
        • Configuring the DSCP trust mode
        • Verifying DSCP trust
        • Creating a DSCP mutation map
        • Applying a DSCP mutation map to an interface
        • Verifying the DSCP mutation mapping
      • Configuring DSCP-to-CoS mappings
        • Creating a DSCP-to-CoS mutation map
        • Applying a DSCP-to-CoS map to an interface
        • Verifying a DSCP-to-CoS mutation map
      • Configuring traffic class mapping for flexibility
    • Configuring traffic class mapping
      • Understanding unicast and multicast traffic defaults
      • Configuring CoS-to-traffic-class maps
        • Mapping a CoS to a traffic class
        • Applying CoS-to-Traffic-Class mapping to an interface
        • Verifying CoS-to-Traffic-Class mapping
      • Configuring DSCP-to-traffic-class maps
        • Mapping DSCP to-traffic class
        • Applying the DSCP-to-traffic-class mapping to an interface
        • Verifying the DSCP-to-Traffic-Class mapping
    • Configuring congestion control
      • Changing the multicast tail-drop threshold
      • Configuring Random Early Discard
        • Understanding RED profiles
        • Configuring RED profiles
        • Mapping a CoS priority to an RED profile on an interface
        • Verifying RED profiles
      • Configuring FlowControl
        • Enabling Ethernet Pause
        • Enabling an Ethernet PFC
    • Configuring rate limiting
    • Configuring BUM storm control
    • Configuring scheduling
      • Scheduling the QoS queue
      • Scheduling the QoS multicast queue
    • Configuring DCB QoS
      • Creating a DCB map
      • Defining a DCB priority group table
      • Defining a DCB priority-table map
      • Applying a DCB provisioning map to an interface
      • Verifying the DCB maps
    • Configuring Brocade VCS Fabric QoS
    • Configuring policer functions
      • Configuring port-based policer functions
      • Configuring a policer class map
      • Configuring a policer priority-map
      • Configuring the policer policy-map
        • Configuring parameters for a class map (policy-class-map Policer mode)
      • Attaching the mutation to the class
      • Attaching the port-shaper to the class
      • Attaching the scheduler to the class
      • Attaching the priority mapping table to the CEE map
      • Binding the policy-map to an interface
        • Policer binding rules
      • Displaying policing settings and policy-maps
        • Displaying policy-maps
        • Displaying class maps
        • Displaying police-priority-maps
    • Auto QoS
      • Auto QoS configuration guidelines
      • Auto QoS restrictions
        • Auto QoS and CEE maps
      • Enabling Auto QoS for NAS
      • Disabling Auto QoS for NAS
      • Displaying Auto-NAS configurations
      • Specifying NAS server IP addresses for Auto QoS
      • Removing NAS server IP addresses for Auto QoS
      • Displaying NAS server IP addresses
      • Displaying NAS server statistics
      • Clearing NAS server statistics
• Configuring 802.1x Port Authentication
  • 802.1x protocol overview
  • Configuring 802.1x authentication
    • Understanding 802.1x configuration guidelines and restrictions
    • Configuring authentication
    • Configuring interface-specific administrative features for 802.1x
      • Enabling an 802.1x readiness check
      • Configuring 802.1x port authentication on specific interface ports
      • Configuring 802.1x timeouts on specific interface ports
      • Configuring 802.1x port reauthentication on specific interface ports
      • Configuring 802.1x port-control on specific interface ports
      • Reauthenticating specific interface ports
      • Disabling 802.1x on specific interface ports
      • Disabling 802.1x globally
      • Checking 802.1x configurations
• Configuring sFlow
  • sFlow protocol overview
    • Interface flow samples
    • Packet counter samples
    • Hardware support matrix for sFlow
    • Flow-based sFlow
      • Flow-based sFlow considerations and limitations
  • Configuring the sFlow protocol
    • Configuring the sFlow protocol globally
    • Configuring sFlow for interfaces
      • Enabling and customizing sFlow on specific interfaces
      • Configuring an sFlow policy map and binding it to an interface
      • Disabling sFlow on specific interfaces
    • Enabling flow-based sFlow
    • Disabling flow-based sFlow on specific interfaces
• Configuring Switched Port Analyzer
  • Switched Port Analyzer protocol overview
    • SPAN in logical chassis cluster
    • RSPAN
    • SPAN guidelines and limitations
      • Standard SPAN guidelines and limitations
      • SPAN in logical chassis cluster guidelines and limitations
      • RSPAN guidelines and limitations
        • Basic considerations
        • VLAN considerations
      • Limitations for mirroring across RSPAN
  • Configuring SPAN
    • Configuring ingress SPAN
    • Configuring egress SPAN
    • Configuring bidirectional SPAN
    • Deleting a SPAN connection from a session
    • Deleting a SPAN session
    • Configuring SPAN in a logical chassis cluster
  • Configuring RSPAN
• Configuring SFP Breakout Mode
  • SFP breakout overview
    • Breakout mode properties
    • Breakout mode support
    • Breakout mode interfaces
    • Breakout mode limitations
    • Breakout mode high-availability considerations
  • Configuring breakout mode for a chassis system
  • Configuring breakout mode for a standalone switch
  • Configuring additional breakout mode scenarios
    • Setting a 40G QSFP port into breakout mode
    • Reserving a 40G QSFP port while in breakout mode
    • Releasing a 40G QSFP port while in breakout mode
• Section IV: Network OS Layer 3 Routing Features
• Configuring In-Band Management
  • In-band management overview
    • In-band management prerequisites
    • In-band management supported interfaces
  • Configuring an in-band management interface in standalone mode
  • Configuring an in-band management interface using OSPF
    • Basic configuration for a standalone in-band management
    • Configuring a management connection in VCS fabric cluster mode
• IP Route Policy
  • IP route policy overview
    • IP prefix lists
    • Route maps
  • Configuring IP route policy
• Configuring IP Route Management
  • IP route management overview
    • How IP route management determines best route
  • Configuring static routes
    • Specifying the next-hop gateway
    • Specifying the egress interface
    • Configuring the default route
  • Using additional IP routing commands
• Configuring PBR
  • Policy-Based Routing
  • Policy-Based Routing behavior
  • Policy-Based Routing with differing next hops
  • Policy-Based Routing uses of NULL0
    • Policy-Based Routing and NULL0 with match statements
    • Policy-Based Routing and NULL0 as route map default action
• Configuring PIM
  • PIM overview
    • Important notes
  • PIM Sparse Mode
  • PIM topologies
  • PIM Sparse device types
  • PIM prerequisites
  • PIM standards conformity
  • PIM limitations
  • PIM supportability
  • Configuring PIM
    • PIM configuration prerequisites
    • Configuring PIM Sparse
• Configuring OSPF
  • OSPF overview
    • Autonomous System
    • OSPF components and roles
      • Area Border Routers
      • Autonomous System Boundary Routers
      • Designated routers
    • OSPF areas
      • Backbone area
      • Area types
      • Area range
      • Totally stubby area
      • Not-so-stubby area (NSSA)
      • Link state advertisements
    • Virtual links
    • OSPF over VRF
    • OSPF in a VCS environment
    • OSPF considerations and limitations
  • Configuring OSPF
    • Performing basic OSPF configuration
      • Enabling OSPF
      • Setting up the backbone area
      • Configuring an NSSA
      • Configuring a summary-address for the NSSA
      • Disabling summary LSAs for a stub area
      • Assigning an area range (optional)
      • Assigning interfaces to an area
      • Configuring virtual links
    • Enabling OSPF over VRF
    • Enabling OSPF in a VCS environment
    • Changing default settings
    • Disabling OSPF on the router
      • Understanding the effects of disabling OSPF
      • Disabling OSPF
• Configuring VRRP
  • VRRP overview
    • Basic VRRP topology
    • VRRP multigroup clusters
    • VRRP/VRRP-E packet behavior
      • Gratuitous ARP
      • VRRP control packets
      • Source MAC in VRRP control packets
    • Track ports and track priority with VRRP and VRRP-E
    • Short-path forwarding (VRRP-E only)
      • Packet routing with short-path forwarding (VRRP-E only)
    • VRRP considerations and limitations
  • Configuring VRRP
    • Configuring basic VRRP
      • Configuring Router 1 as master for VRRP
      • Configuring Router 2 as backup for VRRP
      • Understanding VRRP-E differences for basic configuration
    • Enabling VRRP preemption
      • Track priority example
    • Configuring short-path forwarding
    • Configuring multigroup VRRP routing
      • Configuring a multi-group virtual router cluster
      • Configuring Router 1 as master for first virtual router group
      • Configuring Router 1 as backup for second virtual router group
      • Configuring Router 2 as backup for first virtual router group
      • Configuring Router 2 as master for second virtual router group
• Virtual Routing and Forwarding configuration
  • VRF overview
    • VRF topology
    • OSPF VRF-Lite for customer-edge routers
  • Configuring VRF
    • Enabling VRRP for VRF
    • Configuring OSPF VRF-Lite for customer-edge routers
  • Inter-VRF route leaking
    • Configuring Inter-VRF route leaking
      • Example of Inter-VRF leaking
    • Inter-VRF route leaking and DHCP relay
• Configuring BGP
  • BGP overview
    • BGP support
    • Deployment scenarios
    • BGP peering
      • BGP message types
        • OPEN message
        • UPDATE message
        • NOTIFICATION message
        • KEEPALIVE message
        • REFRESH message
    • BGP attributes
    • Best-path algorithm
    • BGP limitations and considerations
  • Understanding BGP configuration fundamentals
    • Configuring BGP
    • Device ID
    • Local AS number
    • IPv4 unicast address family
    • BGP global mode
    • Neighbor configuration
    • Peer groups
    • Four-byte AS numbers
    • Route redistribution
    • Advertised networks
    • Static networks
    • Route reflection
    • Route flap dampening
    • Default route origination
    • Multipath load sharing
    • Configuring the default route as a valid next-hop
    • Next-hop recursion
    • Route filtering
    • Timers
    • Using route maps
      • Specifying the match conditions
      • Setting parameters in the routes
      • Using a route-map continue statement for BGP4 routes
  • Configuring BGP
    • Adjusting defaults to improve routing performance
    • Using route maps with match and set statements
      • Matching on an AS-path ACL
      • Matching on a community ACL
      • Matching on a destination network
      • Matching on a next-hop device
      • Matching on a route source
      • Matching on routes containing a specific set of communities
      • Matching on a BGP4 static network
      • Matching on an interface
      • Setting a BGP4 route MED to equal the next-hop route IGP metric
      • Setting the next-hop of a BGP4 route
      • Deleting a community from a BGP4 route
      • Using route-map continue statements
      • Using a route map to configure dampening
    • Clearing configurations
• Configuring IGMP
  • IGMP overview
  • IGMP snooping overview
    • Multicast routing and IGMP snooping
    • vLAG and LAG primary port with IGMP snooping
    • IGMP snooping scalability
    • IGMP snooping in standalone mode
    • IGMP snooping in Brocade VCS Fabric cluster mode
  • Configuring IGMP snooping
    • Enabling IGMP snooping
    • Configuring IGMP snooping querier
    • Monitoring IGMP snooping
    • Using additional IGMP commands
• Configuring IP DHCP Relay
  • DHCP protocol
  • IP DHCP Relay function
  • Brocade IP DHCP Relay overview
    • Supported platforms
  • Configuring IP DHCP Relay
  • Displaying IP DHCP Relay addresses for an interface
  • Displaying IP DHCP Relay addresses on specific switches
  • Displaying IP DHCP Relay statistics
  • Clearing IP DHCP Relay statistics
  • VRF support
  • High availability support
• Section V: Network OS Troubleshooting
• Using the Chassis ID (CID) Recovery Tool
  • CID overview
  • Critical SEEPROM data
  • Noncritical SEEPROM data
  • Automatic auditing and verification of CID card data
  • Enabling the CID recovery tool
  • Managing data corruption or mismatches
  • Understanding CID card failure
• Troubleshooting procedures
  • Troubleshooting overview
    • Gathering troubleshooting information
      • Capturing supportSave data
      • Using information resources
    • Using a troubleshooting methodology
    • Understanding troubleshooting hotspots
      • Licensing
      • STP interoperability with Brocade MLX or other switches
      • Load balancing distribution
      • Static assignment of the routing bridge ID
      • FSPF route change
      • VCS Fabric mode and standalone mode
      • vLAG overview
        • Multicast traffic in vLAG
        • Edge-port feature requirements for vLAG
        • Failover and vLAG
      • vLAG and split-brain
        • Understanding "split-brain"
        • Traffic protection during split-brain conditions
        • When a member switch is reloaded
        • Avoiding traffic disruption during switch reload
        • Using the vLAG ignore-split option
      • Principal routing bridge availability
      • Brocade trunks
      • NIC teaming with vLAG
      • Selecting the MTU
      • Avoiding oversubscription
        • Identifying the congestion bottleneck
        • Mitigating the congestion
      • ACL limits issues
  • Troubleshooting standard issues
    • AMPP is not working
      • Verifying the port-profile configuration
      • Verifying the VM MAC address
      • Verifying the port-profile state
      • Verifying the VM kernel MAC addresses
      • Verifying a shared storage device
      • Verifying the status of a learned profiled MAC address
      • Verifying that port profiles do not conflict
      • Verifying the Ethernet Name Server
      • Verifying an ESX host
    • Panic reboots are continuous
    • CID card is corrupted
      • Verifying SEEPROM data
    • CPU use is unexpectedly high
    • ECMP not load balancing as expected
    • ENS not working correctly
      • Verifying the fabric
      • Checking for MAC address movement among ports
      • Verifying edge ports have no external loopback
    • FCoE devices unable to log in
      • Verifying CNA login
      • Verifying the default profile map
      • Verifying TLVs
    • Traffic is not being forwarded
    • ISL does not come up on some ports
      • Verifying the status of ISLs
      • Verifying VCS Fabric configuration and RBridge ID
      • Verifying LLDP
      • Checking for CPU overload
    • License is not properly installed
    • Packets are dropped in hardware
      • Verifying packets dropped because of high-latency end device
      • Verifying the data path
      • Checking for noise on an optical line
    • Recovering the root password by using the root account
    • Obtaining the Boot PROM recovery password
    • Clearing the Boot PROM password
    • Need to recover password for Brocade VDX 8770 or VDX 67xx
      • Recovering the root password for Brocade VDX 67xx platforms
        • Recovering the root password for Brocade VDX 67xx platforms: Quick reference
        • Recovering the root password for Brocade VDX 67xx platforms: Detailed procedure
      • Recovering the root password for Brocade VDX 8770 platforms
        • Recovering the root password for Brocade VDX 8770 platforms: Quick reference
        • Recovering the root password for Brocade VDX 8770 platforms: Detailed procedure
    • Ping fails
    • QoS configuration causes tail drops
    • QoS is not marking or treating packets correctly
    • RBridge ID is duplicated
    • SNMP MIBs report incorrect values
    • SNMP traps are missing
    • Telnet operation into the switch fails
      • Verifying the status of the management port
      • Checking for a deny ACL
      • Checking for overloaded CPU
    • Trunk member not used
    • Upgrade fails
    • VCS Fabric cannot be formed
      • Verifying VCS Fabric licenses
      • Verifying the VCS Fabric configuration
    • vLAG cannot be formed
      • Verifying the link between the VCS Fabric switches
      • Verifying LACPDUs
      • Verifying the vLAG configuration
      • Verifying the LACP mode of each switch
      • Explicitly setting the speed for a 1-Gbps port-channel
    • Zoning conflict needs resolution
    • Zone does not form correctly
      • Recovering an isolated switch in a mixed FCoE fabric
      • Recovering from FID oversubscription
      • Recovering from Fabric ID conflict
      • Rebalancing traffic over multiple IFLs
      • Blocking zone merge after reboot
      • Removing stale translate domains
  • Using troubleshooting and diagnostic tools
    • Using Layer 2 traceroute
      • Layer 2 traceroute packets
      • Tracing a route with the l2traceroute command
    • Using show commands
    • Using debug commands
    • Using SPAN port and traffic mirroring
    • Using hardware diagnostics
      • Using POST diagnostics
      • Using offline diagnostics
    • Viewing routing information
    • Using the packet capture utility
• TACACS+ Accounting Exceptions
  • TACACS+ command-accounting limitations
  • Unsupported Network OS command line interface commands
• Supported NTP Regions and Time Zones
  • Africa
  • America
  • Antarctica
  • Arctic
  • Asia
  • Atlantic
  • Australia
  • Europe
  • Indian
  • Pacific
• Index