Q-Logic 5000 manual

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130

Go to page of

A good user manual

The rules should oblige the seller to give the purchaser an operating instrucion of Q-Logic 5000, along with an item. The lack of an instruction or false information given to customer shall constitute grounds to apply for a complaint because of nonconformity of goods with the contract. In accordance with the law, a customer can receive an instruction in non-paper form; lately graphic and electronic forms of the manuals, as well as instructional videos have been majorly used. A necessary precondition for this is the unmistakable, legible character of an instruction.

What is an instruction?

The term originates from the Latin word „instructio”, which means organizing. Therefore, in an instruction of Q-Logic 5000 one could find a process description. An instruction's purpose is to teach, to ease the start-up and an item's use or performance of certain activities. An instruction is a compilation of information about an item/a service, it is a clue.

Unfortunately, only a few customers devote their time to read an instruction of Q-Logic 5000. A good user manual introduces us to a number of additional functionalities of the purchased item, and also helps us to avoid the formation of most of the defects.

What should a perfect user manual contain?

First and foremost, an user manual of Q-Logic 5000 should contain:
- informations concerning technical data of Q-Logic 5000
- name of the manufacturer and a year of construction of the Q-Logic 5000 item
- rules of operation, control and maintenance of the Q-Logic 5000 item
- safety signs and mark certificates which confirm compatibility with appropriate standards

Why don't we read the manuals?

Usually it results from the lack of time and certainty about functionalities of purchased items. Unfortunately, networking and start-up of Q-Logic 5000 alone are not enough. An instruction contains a number of clues concerning respective functionalities, safety rules, maintenance methods (what means should be used), eventual defects of Q-Logic 5000, and methods of problem resolution. Eventually, when one still can't find the answer to his problems, he will be directed to the Q-Logic service. Lately animated manuals and instructional videos are quite popular among customers. These kinds of user manuals are effective; they assure that a customer will familiarize himself with the whole material, and won't skip complicated, technical information of Q-Logic 5000.

Why one should read the manuals?

It is mostly in the manuals where we will find the details concerning construction and possibility of the Q-Logic 5000 item, and its use of respective accessory, as well as information concerning all the functions and facilities.

After a successful purchase of an item one should find a moment and get to know with every part of an instruction. Currently the manuals are carefully prearranged and translated, so they could be fully understood by its users. The manuals will serve as an informational aid.

Table of contents for the manual

  • Page 1

    Simplify R 59096-04 A Page i SANbox 5000 Series Fibre Channel Switch Inst allation Guide Firmware V ersion 6.7[...]

  • Page 2

    Page ii 59096-04 A S SANbox 5000 Series Fibre Channel Switch Installation Guide © 2000–2007 QLogic Corporation. All Rights Reserved Worldwide. First Published: December 2005 QLogic Corporation, 26650 Aliso Viejo Parkway , Al iso Viejo, CA 92656, (800) 66 2-4471 or (949) 389-6000 Information fu rnished in this manual is belie ved to be accurate a[...]

  • Page 3

    59096-04 A Page iii T able of Content s Section 1 Introduction 1.1 Intended Audience . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-2 1.2 Related Materials . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-2 1.3 New in this Release . . . . . . . . . . . . . . . . .[...]

  • Page 4

    Page iv 59096-04 A SANbox 5000 Series Fibre Channel Switch Installation Guide S 2.1.2 Chassis LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-3 2.1.2.1 Input Power LED (Green) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-4 2.1.2.2 Heartbeat LED (Green) . . . . . . . . . . . . . . . . . .[...]

  • Page 5

    59096-04 A Page v SANbox 5000 Series Fibre Channel Switch Installation Guide A 3.7.1 Connection Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-17 3.7.2 User Account Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-17 3.7.3 Port Binding . . . . . . . . . . . . . . . . . . . [...]

  • Page 6

    Page vi 59096-04 A SANbox 5000 Series Fibre Channel Switch Installation Guide S 5.2.1 Heartbeat LED Blink Patterns . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-3 5.2.1.1 Internal Firmware Failure Blink Pattern . . . . . . . . . . . . . . . . . . . 5-4 5.2.1.2 Fatal POST Error Blink Pattern. . . . . . . . . . . . . . . . . . . . .[...]

  • Page 7

    59096-04 A Page vii SANbox 5000 Series Fibre Channel Switch Installation Guide A List of Figures Figure Page 2-1 SANbox 5000 Series Fibre Channel Switch. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-1 2-2 Chassis Controls and LEDS. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-2 2-3 Chassis L[...]

  • Page 8

    Page viii 59096-04 A SANbox 5000 Series Fibre Channel Switch Installation Guide S Notes[...]

  • Page 9

    59096-04 A 1-1 Section 1 Introduction This manual describes the features and inst allation of the SANbox® 5000 Series Fibre Channel switch, firmware version 6.7. T able 1-1 describes the SANbox 5000 Series switch models and th eir distinguishing features. This manual is organized as follows:  Section 1 describes the intended audience, related m[...]

  • Page 10

    1 – Introduction Intended Audience 1-2 59096-04 A S 1.1 Intended Audience This manual introduces users to the switch and exp lains its installa tion and service. It is intended for user s who are responsible for inst alling and servicing network equipment. 1.2 Related Materials The following manuals and materials are referenced in the text and/or[...]

  • Page 11

    1 – Introduction New in this Release 59096-04 A 1-3 A 1.3 New in this Release The following items are new in the current re lease:  The switch is equipped with the Qu ickT ools embedded graphical user interface. QuickT ools is a web applet that provides basic switch management tools.  Enterprise Fabric Suite 2007 is a workst ation-based Jav[...]

  • Page 12

    1 – Introduction Safety Notic es 1-4 59096-04 A S 1.4 Safety Notices A Wa r n i n g notice indicates the presence of a hazard that has the po tential of causing personal injury . 4-4 , 4-5 , 4-1 1 4-4 , 4-5 , 4-1 1 , 6-1 A Caution notice indicates the presence of a hazard th at has the potential of causing damage to the equipment. 5-16 5-16 , 6-2[...]

  • Page 13

    1 – Introduction Communications S tatements 59096-04 A 1-5 A 1.7 Communications St atement s The following st atements apply t o this product. The statement s for other product s intended for use with this product appear in their accomp anying manuals. 1.7.1 Federal Communications Commissi on (FCC) Class A S t atement This equipment has been test[...]

  • Page 14

    1 – Introduction Communications S tatement s 1-6 59096-04 A S 1.7.3 A vis de conformité aux normes du ministère des Co mmunications du Canada Cet équipement ne dép asse pas le s limites de Classe A d'émission de bruits radioélectriques por les app areils numé riques, telles que prescrites par le Réglement sur le brouillage radio éle[...]

  • Page 15

    1 – Introduction Communications S tatements 59096-04 A 1-7 A  EN 61000-3-3: 1995, A1:2001 – “Limit ation Of V oltage Fluctuations And Flicker In Low-V oltage Su pply Systems For Equipment With Rated Current Less Than Or Equal T o 16 A” 1.7.5 VCCI Class A St atement This is a Class A product based on the standard of the V oluntary Control[...]

  • Page 16

    1 – Introduction Laser Safe ty Information 1-8 59096-04 A S 1.8 Laser Safety Information This product uses Class 1 laser optical tr ansceive rs to communicate over the fiber optic conductors. The U.S. Depa rtment of Health and Human Se rvices (DHHS) does not consider Class 1 lasers to be hazardous. The International Electrotechnical Commission (I[...]

  • Page 17

    1 – Introduction Accessible Parts 59096-04 A 1-9 A 1.10 Accessible Part s The Field Replaceable Units (FRUs) for the SANbox 5000 Series switch are the following:  Power supplies (models 5202 and 5602)  Small Form-Factor Pluggable (SFP) op tical transceivers  XP AK optical transceivers 1.1 1 Pièces Accessibles Les pièces remplaçables ,[...]

  • Page 18

    1 – Introduction General Public License 1-10 59096-04 A S 1.13 General Public License QLogic® Fibre Channel switches are powered by t he Linux operating system. A machine-readable copy of th e Linux source code is avai lable upon written request to the following address. A nominal fee wi ll be charged for reproduction, sh ipping, and handling co[...]

  • Page 19

    1 – Introduction General Public License 59096-04 A 1-1 1 A For example, if you distribute copies of such a program, whether gratis or for a fee, you must give th e re cip ient s all the right s that you have. Y ou must make sure that they , too, receive or can get the so urce code. And you mu st show them these terms so they know their rights. We[...]

  • Page 20

    1 – Introduction General Public License 1-12 59096-04 A S Y ou may charge a fee for the physical a ct of transferring a copy , and you may at your option of fer warranty protection in exchange for a fee. 3. Y ou may modify your copy or copies of the Program or any po rtion of it, thus forming a work based on the Program, and copy and distribute s[...]

  • Page 21

    1 – Introduction General Public License 59096-04 A 1-13 A and 2 above on a medium customarily used f or software interchange; or , b. Accompany it with a written o ffer , valid for at least three ye ars, to give any third party , for a charge no more than your cost of physically performing source distribution, a comple te machine-readable copy of[...]

  • Page 22

    1 – Introduction General Public License 1-14 59096-04 A S 7. Each time you redistribute the Progr am (or any work based on the Program), the recipient automatically receives a license from the original licensor to copy , distribute or modify the Program subject to these terms and conditions. Y ou may not impose any furth er restrictions on the re[...]

  • Page 23

    1 – Introduction General Public License 59096-04 A 1-15 A 1 1. Each version is given a distingui shing version number . If the Program specifies a version number of this Lic ense which applies to it and "any later version", you have the option of following the terms and conditions either of that version or of any later version published[...]

  • Page 24

    1 – Introduction General Public License 1-16 59096-04 A S 1.13.3 How to Apply These T erms to Y our New Programs If you develop a new program, and you want it to be of the greatest possible use to the public, the best wa y to achieve this is to make it free sof tware which everyone can redistribute and change under these terms. T o do so, attach [...]

  • Page 25

    1 – Introduction T echnical Support 59096-04 A 1-17 A Y oyodyne, Inc., hereby disclaims all copyright interest in the program `Gnomovision' (which makes p asses at co mpilers) written b y Ja mes Ha cker . signature of T y Coon , 1 April 1989 T y Coon, President of V ice This General Public Licens e does not permit incorporating your program [...]

  • Page 26

    1 – Introduction T echnical Support 1-18 59096-04 A S 1.14.3 Cont act Information Support Headquarters QLogic Cor poration 12984 V alley View Road Eden Prairie, MN 55344-3657 USA QLogic Web Site www .qlogic.com T echnical Support Web S te support@qlogic.com T echnical Support Email support@qlog ic.com T echnical Tra ining Email tech.training@qlog[...]

  • Page 27

    59096-04 A 2-1 Section 2 General Description This section describes the features and capabilities of the SANbox 5000 Series Fibre Channel switches. This includes models 5200 and 5600 and the dual power supply models 5202 and 5602 as shown in Figure 2-1 . The following topics are described:  Chassis Controls and LEDs  Fibre Channel Ports  E[...]

  • Page 28

    2 – General Descrip tio n Chassis Controls and LEDs 2-2 59096-04 A S 2.1 Chassis Controls and LEDs The Maintenance button shown in Figure 2-2 is the only chassis control and is used to reset a switch or to recover a disabled switch. The chassis LEDs provide information about the switch’ s operational st atus. These LEDS include the Input Power [...]

  • Page 29

    2 – General Description Chassis Controls and LEDs 59096-04 A 2-3 A 2.1.1.2 Placing the Switch in Maintenance Mode T o place the switch in maintenance mode, do the following: 1. Isolate the switch from the fabric. 2. Press and hold the Maintenance button with a pointed tool for a few seconds until the Heartbeat LED alone is illuminat ed. Continue [...]

  • Page 30

    2 – General Descrip tio n Chassis Controls and LEDs 2-4 59096-04 A S 2.1.2.1 Input Power LED (Green) The Input Power LED indicate s the voltage st atus at the switch logic circuitry . During normal operation, this LED illuminates to in dicate that the switch logic circuitry is receiving the proper DC volt ages. When the switch is in maintenance m[...]

  • Page 31

    2 – General Description Fibre Channel Port s 59096-04 A 2-5 A 2.2 Fibre Channel Port s The SANbox 5000 Series switch has sixteen 1/2/4-Gbp s Fibre Channel po rt s and four 10-Gbps Fibre Chann el ports. Ports are numbered 0–19 as shown in Figure 2-4 . Each of the 1/2/4-Gbp s ports is served by a Small Form-Factor Pluggable (SFP) transceiver and [...]

  • Page 32

    2 – General Descrip tio n Fibre Channel Port s 2-6 59096-04 A S 2.2.1 Port LEDs Each port has its own Logged-I n LED (L) and Activity LED (A) as shown in Figure 2-5 . Figure 2-5. Port LEDs 2.2.1.1 Port Logged-In LED (Green) The Logged-in LED indica tes the logged-in or initialization status of the connected devices. Af ter successful completion o[...]

  • Page 33

    2 – General Description Fibre Channel Port s 59096-04 A 2-7 A 2.2.2 T ransceivers The SANbox 5000 Series switch suppor ts SFP optical transceivers for the 1/2/4-Gbps ports and XP AK optical transceivers for the 10-Gbps port s . A transceiver convert s electrical signa ls to and fr om optical laser signals to transmit and receive dat a. Duplex fib[...]

  • Page 34

    2 – General Descrip tio n Ethernet Port 2-8 59096-04 A S 2.3 Ethernet Port The Ethernet port is an RJ-45 connector that provides a connection to a management workst ation through a 10/100 Base-T Ethernet cable. Figure 2-6 shows the Ethernet port on a model 5200/ 5600; the model 5202/5602 is simila r . A management worksta tion can be a Windows®,[...]

  • Page 35

    2 – General Description Serial Port 59096-04 A 2-9 A 2.4 Serial Port The SANbox 5000 Series switch is e quipped with an RS-232 serial port for maintenance purposes. Figure 2-7 shows the serial port on a model 5200 /5600 switch; the model 5202/5602 is similar . Y ou can manage th e switch through the serial port using the CLI. Figure 2-7. Serial P[...]

  • Page 36

    2 – General Descrip tio n Power Supplies and Fans 2-10 59096-04 A S 2.5 Power Supplies and Fans The model 5200/5600 switch h as a single power supply that convert s 100–240 V AC to DC voltages for the various switch circuit s. Four internal fans provide cooling. The switch monitors internal air temperature, and therefore does not monitor or rep[...]

  • Page 37

    2 – General Description Switch Management 59096-04 A 2-1 1 A 2.6 Switch Management The switch supports the following management tools:  QuickT ools Web Applet  Enterprise Fabric Suite 2007  Command Line Interface  Application Programming Interface  Simple Network Management Protocol  S torage Management Initiative–S pecificati[...]

  • Page 38

    2 – General Descrip tio n Switch Management 2-12 59096-04 A S 2.6.2 Enterprise Fabr ic Suite 2007 Enterprise Fabric Suite 2007 is a sep a rately licensed work station-based Java ® application that provides a graphical us er interface for full fabric and switch management. Enterprise Fabric Suite 2007 is de signed for managing fabrics of four or [...]

  • Page 39

    2 – General Description Switch Management 59096-04 A 2-13 A 2.6.5 Simple Network Manageme nt Protocol SNMP provides monitoring and trap func tion s for the fabric. SANbox firmware supports SNMP versions 1 an d 2, th e Fibre Alliance Management Information Base (F A-MIB) version 4.0, and the Fabric Element Manage ment Information Base (FE-MIB) RFC[...]

  • Page 40

    2 – General Descrip tio n Switch Management 2-14 59096-04 A S Notes[...]

  • Page 41

    59096-04 A 3-1 Section 3 Planning Consider the following when planning a fabric:  Devices  Device Acce ss  Performance  Feature Licensing  Multiple Chassis Fabrics  Switch Services  Fabric Security  Fabric Management 3.1 Devices When planning a fabric, consider the number of devices and the anticip ated demand. This will det[...]

  • Page 42

    3 – Planning Device Access 3-2 59096-04 A S 3.2 Device Access Consider device access needs within the fa bric. Access is controlled by the use of zoning. Some zoning strategies include the following:  Separate device s by operating system.  Separate device s that have no need to communicate with other devices in the fabric or have classifie[...]

  • Page 43

    3 – Planning Performance 59096-04 A 3-3 A A zoning database is ma intained on each switch. T able 3-1 describes the zoning database limit s, excluding the active zone set. 3.3 Performance The SANbox 5000 Series switch supp orts class 2 and class 3 Fibre Channel service at transmission rates of 1-, 2-, 4- , or 10-Gbps with a maximum frame size of [...]

  • Page 44

    3 – Planning Performance 3-4 59096-04 A S 3.3.1 Dist ance Consider the physical distribution of devices and switches in the fabric. Choose SFP transceivers that are compatible with the cable typ e, distance, Fibre Cha nnel revision level, and the device host bu s adapter . Refer to Appendix A for more information about cable types and tran sceive[...]

  • Page 45

    3 – Planning Performance 59096-04 A 3-5 A 3.3.2 Bandwid th Bandwidt h is a measure of the volume of dat a that can be transmitte d at a given transmission rate. A 1/2/4-Gbp s port can transmit or receive at nominal rates of 1 -, 2-, or 4-Gbps dependin g on the device to which it is connected. This corresponds to full duplex bandwid th values of 2[...]

  • Page 46

    3 – Planning Feature Licensing 3-6 59096-04 A S 3.4 Feature Licensing License keys provide a way to exp and the cap abilities of your switch and fabric as your needs grow . Consider your need for the following featu res and arrange to purchase license keys from your switch distributor or autho rized reseller .  Enterprise Fabric Suite 2007 pro[...]

  • Page 47

    3 – Planning Multiple Chassis Fabrics 59096-04 A 3-7 A 3.5 Multiple Chassis Fabrics By connecting switches together you can expand the n umber of available ports for devices. Each switch in t he fabric is identified by a unique domain ID, and th e fabric can automatically resolve domain ID conf licts. Because the Fibre Chann el ports are self-con[...]

  • Page 48

    3 – Planning Multiple Chassis Fabrics 3-8 59096-04 A S 3.5.2 Domain ID, Princip al Priority , and Domain ID Lock The following switch configuration settings affect multiple chassis fabrics:  Domain ID  Principal priority  Domain ID lock The domain ID is a unique number from 1– 239 that identifies each switch in a fabric. The princip al[...]

  • Page 49

    3 – Planning Multiple Chassis Fabrics 59096-04 A 3-9 A 3.5.3 S tacking Y ou can connect up to six 20-port SANbox 5000 Series switches together through the 10-Gbps po rts, thus preserving the user port s for devices. This is called stacking. The following 2-, 3-, 4 -, 5-, an d 6-switch stacking configurations are recommended for best performance a[...]

  • Page 50

    3 – Planning Multiple Chassis Fabrics 3-10 59096-04 A S Figure 3-3 shows a four-switch stack o f model 5000 switches using three 3-inch and three 9-inch XP AK switch stacking cables. 64 1/2 /4-Gbps port s are available for devices. Figure 3-3. Four-Switch Stack Figure 3-4 shows a five-switch st ack of m odel 5000 switches using ten XP AK switch s[...]

  • Page 51

    3 – Planning Multiple Chassis Fabrics 59096-04 A 3-1 1 A Figure 3-5 shows a six-switch stack of model 5000 switches using eight XP AK switch stacking cables. Ninety-six 1/2/4-Gbps ports are available fo r devices. Figure 3-5. Six Switch S tack 3.5.4 Common T opologies The SANbox 5000 Series switch supp orts the following topolo gies using the 1/2[...]

  • Page 52

    3 – Planning Multiple Chassis Fabrics 3-12 59096-04 A S 3.5.4.1 Cascade T opology A cascade topology describes a fab ric in which the switches are connected in series. If you connect the last switch ba ck to the f irst switch, you create a cascade-with-a-loop topology as shown in Figure 3-6 . The loop re duces latency because any switch can route[...]

  • Page 53

    3 – Planning Multiple Chassis Fabrics 59096-04 A 3-13 A 3.5.4.2 Mesh T opology A mesh topology describes a fabric in wh ich each chassis has at least one port directly connected to each other chassis in the fabric. Using 16-port SANbox 5000 Series switches the mesh fabric sho wn in Figure 3-7 has the following characteristics:  Each link contr[...]

  • Page 54

    3 – Planning Multiple Chassis Fabrics 3-14 59096-04 A S 3.5.4.3 MultiS t age T opology  Each link contributes up to 425 MB of bandwid th between chassis. Competition for this bandwid th is less than that of a cascade topology , but greater than that of the mesh topology .  Latency between any two port s is no more than two chassis hop s. ?[...]

  • Page 55

    3 – Planning Switch Services 59096-04 A 3-15 A 3.6 Switch Services Y ou can configure your switch to suit the demands of yo ur environment by enabling or disabling a variety of switch services. Familiarize yourself with the following switch services and determine which ones you need. Notice that the SSH and SSL services require the Fabric Securit[...]

  • Page 56

    3 – Planning Fabric Security 3-16 59096-04 A S  Common Information Model (CIM) : Pro vides for the management of the switch through third-p arty applications that use the S torage Management Initiative–S pecification (SMI-S). The default is enabled.  File T ra nsfer Protocol (FTP) : Provides for transferring files rapidly between the work[...]

  • Page 57

    3 – Planning Fabric Security 59096-04 A 3-17 A 3.7.1 Connection Security Connection security provides an encry pted dat a path for switch manag ement methods. The switch supports the Secure Shell (SSH) protocol for the command line interface and the Secure Socket Layer (SSL) protocol for management applications such as Enterprise Fab ric Suite 20[...]

  • Page 58

    3 – Planning Fabric Security 3-18 59096-04 A S Authentication of the user account and password can be performed locally using the switch’ s user account database or it can be done remotely using a RADIUS server such as Microsoft® RADIUS. Authe nticating user logins on a RADIUS server requires a secure management connection to the switch. Refer[...]

  • Page 59

    3 – Planning Fabric Security 59096-04 A 3-19 A 3.7.4 Device Security Device security provides for the authorization and a uthentication of devices that you attach to a switch. Y ou can configure a switch with a group of devices ag ainst which the switch authorizes new att ach ments by d evices, other switches, or devices issuing management server[...]

  • Page 60

    3 – Planning Fabric Security 3-20 59096-04 A S Consider the devices, switches, and manag ement agents and evaluate th e need for authorization and authe ntication. Also consider whether the security dat abase is to distributed on the swit ches or cent ralized on a RADIUS server a nd how many servers to configure. The following examples illustrate[...]

  • Page 61

    3 – Planning Fabric Security 59096-04 A 3-21 A 1. Create a security set (Security_Set_1) on Switch_1. a. Create a port group (Group_Port_1) in Security_Set_1 with Switch_1, HBA_1, and JBOD as members.  Switch_1 and all devices and switches connected to Switch_1 must be included in the group even if the switch or devices does not support authen[...]

  • Page 62

    3 – Planning Fabric Security 3-22 59096-04 A S b. Create an ISL group (Group_ISL_1) in Security_ Set_1 with Switch_1, Switch_2, HBA1, and JBOD as members. The Switch_1 secret must be shared with the Switch_2 security dat abase. 2. Configure security on HBA_1 using the appropriate management tool. Logins between the Switch_1 and HBA_1 will be chal[...]

  • Page 63

    3 – Planning Fabric Security 59096-04 A 3-23 A 3.7.4.2 Security Exampl e: RADIUS Server Consider the fabric shown in Figure 3-10 . This fabric is similar to the one shown in Figure 3-9 with the addition of Radius_1 acti ng as a RADIUS server . Authorization and authentication is p assed from the switch to Radius_1 in the following cases:  HBA_[...]

  • Page 64

    3 – Planning Fabric Security 3-24 59096-04 A S 1. Configure the Radius_1 host as a RADIUS se rver on Switch_1 and Switch_2 to authenticate device logins. S pecify the server IP address and the secret with which the switch es will authenticate with the server . Configure the switches so that devi ces authenticate through the switches only if the R[...]

  • Page 65

    3 – Planning Fabric Security 59096-04 A 3-25 A 2. Create a security set (Security_Set_1) on Switch_1. a. Create a port group (Group_Port_1) in Security_Set_1 with Switch_1 and HBA_1 as members.  Switch_1 and all devices and switches connected to Switch_1 must be included in the group even if the switch or device does not support authentication[...]

  • Page 66

    3 – Planning Fabric Security 3-26 59096-04 A S b. Create an ISL group (Group_ISL_1) in Security_ Set_1 with Switch_1 and Switch_2 as members. The Switch_1 secret must b e shared with the Switch_2 se curity database. 3. Configure security on HBA_1 using the appropriate management tool. Logins between the Switch_1 and HBA_1 will be challeng ed (CHA[...]

  • Page 67

    3 – Planning Fabric Security 59096-04 A 3-27 A 3.7.4.3 Security Example: Host Authentication Consider the fabric shown in Figure 3-1 1 . In this fabric, only Switch_2 and HBA_2/APP_2 support security , where APP_2 is a host application. The objective is to secure the management server on Swit ch_2 from unauthorized access by a n HBA or an associa[...]

  • Page 68

    3 – Planning Fabric Security 3-28 59096-04 A S 1. Create a security set (Security_Set_2) on Switch_2. 2. Create a Management Server group (Group_1 ) in Security_Set_2 with Switch_2 and HBA_2 or APP_2 as its member .  Y ou must specify HBAs by node wo rldwide name. Switches can be specified by port or node worldwide name. The type of switch wor[...]

  • Page 69

    3 – Planning Fabric Manageme nt 59096-04 A 3-29 A 3.8 Fabric Management The Enterprise Fabric Suite 2007 a pplication executes on a management workstation and p rovides for the configuration, control, and maintena nce of multiple fabrics. Supported plat fo rms include Windows, Solaris, Linux, and MacOS X. Enterprise Fabric Suite 2007 comes with a[...]

  • Page 70

    3 – Planning Fabric Managem ent 3-30 59096-04 A S Notes[...]

  • Page 71

    59096-04 A 4-1 Section 4 Installation This section describes how to inst all and configure the switch. The following topics are covered:  Site Requirement s  Installing a Switch  Installing Firmware  Adding a Switch to an Existing Fabric  Installing Feature L icense Keys 4.1 Site Requirement s Consider the following items when in sta[...]

  • Page 72

    4 – Installation Site Requirement s 4-2 59096-04 A S 4.1.1 Fabric Management Wo rkst ation The requirements for fa bric managem ent workstations are described in Ta b l e 4 - 1 : T elnet workstations require an RJ-45 Ethernet port or an RS-232 serial port and an operating system with a T elnet client. 4.1.2 Switch Power Requirement s Power requir[...]

  • Page 73

    4 – Installation Installing a Switch 59096-04 A 4-3 A 4.2 Inst alling a Switch Unpack the switch an d accessories. T he SANbox 5000 Ser ies product is shipped with the component s shown in Figure 4-1 :  SANbox 5000 Series Fibre Channel Switch (1) with firmware installed  Power cords (1) –model 5200/5600 (2) –model 5202/5602  Rubber f[...]

  • Page 74

    4 – Installation Installing a Switch 4-4 59096-04 A S 4.2.1 Mount the Switch The switch can be placed on a flat surf ace and stacked or mounted in a 19” EIA rack. Refer to “Dimensions” on page A-4 for weight and dimensional specifications. Adhesive rubber feet are provided for surface mount s. Witho ut the rubber feet, the switch occupies 1[...]

  • Page 75

    4 – Installation Installing a Switch 59096-04 A 4-5 A T o mount a model 5200/5600 switch in a rack without the use of rails, fasten the brackets to the switch as shown in Figure 4-2 . Choose the bracket screw holes to produce the setback you want. Place the switch in the ra ck and fasten the bracket flanges to the rack with two screws on each sid[...]

  • Page 76

    4 – Installation Installing a Switch 4-6 59096-04 A S T o mount a model 5200/5600 switch in a rack using the General Devices C-874 rail kit, you must fasten the switch brackets and inner rails to the switch as shown in Figure 4-3 . Use the screws that come with the rail kit. Refe r to the rail kit instructions for complete information. Figure 4-3[...]

  • Page 77

    4 – Installation Installing a Switch 59096-04 A 4-7 A If you are using the 10-Gbps port s, remove the port covers by the cover tabs using your fingers or pliers as shown in Figure 4-4 . Figure 4-4. Removing 10-Gbps Port Covers T o install XP AK switch stacking cables, position the cable c onnectors with the circuit board toward the mid line of th[...]

  • Page 78

    4 – Installation Installing a Switch 4-8 59096-04 A S 4.2.3 Configure the W orkst ation If you plan to use the command line interf ace to con figure and manage the switch, you must configure the workstation. This involves setting the workstation IP address for Ethernet connections, or configuring the workst ation serial port. If you plan to use Q[...]

  • Page 79

    4 – Installation Installing a Switch 59096-04 A 4-9 A 4.2.3.2 Configuring the Wo rkst ation Serial Port T o configure the workstation se rial port, do the following: 1. Connect a null mo dem F/F DB9 cable from a COM po rt on the management workstation to the RS-232 serial port on the switch. 2. Configure the workstation serial port according to y[...]

  • Page 80

    4 – Installation Installing a Switch 4-10 59096-04 A S 4.2.4 Connect the Workst ation to the Switch Y ou can manage the switch using the CLI, QuickT ools, or Enterprise Fabric Suite 2007. QuickT ools and Enterprise Fabric Suite 2007 req uire an Ethernet connection to the switch. The CLI can use an Ethernet connection or a serial connection. Choos[...]

  • Page 81

    4 – Installation Installing a Switch 59096-04 A 4-1 1 A 4.2.5 Connect the Switch to AC Pow er W ARNING!! This product is supplied with a 3-wi re power cable an d plu g for the user ’s safety . Use this power cable in conjunction with a properly grounded outlet to avoid electrical shoc k. An electrical outlet that is not correctly wired could pl[...]

  • Page 82

    4 – Installation Installing a Switch 4-12 59096-04 A S W ARNUNG!! Dieses Produkt wird mit einem 3-adrigen Netzkabel mit S tecker geliefert. Dieses Kabel erfüllt die Siche rheitsanforderungen und sollte an einer vorschrift smäßigen Schukosteckdose angeschlossen werden, um die Gefahr e ines elektrischen Schlages zu vermeiden.Ele ktros teckdosen,[...]

  • Page 83

    4 – Installation Installing a Switch 59096-04 A 4-13 A T o power up a SANbox 5000 Series switch, do the following:  For a model 5200/5600 switch, connect the power cord to the AC power receptacle on the fron t of the switch chassis and to a grounded AC outlet.  For a model 5202/5602 switch, conn ect the power cords to the power supply recep[...]

  • Page 84

    4 – Installation Installing a Switch 4-14 59096-04 A S 4.2.6 Configure the Switch Y ou can configure the switch using the CLI, QuickT ools, or Enterprise Fabric Suite 2007. Enterprise Fabric Suite 2007 is an op tional, full fabric graphical user interface that comes with a 30-day trial license. Re fer to the SANbox 5000 Series Enterprise Fabric S[...]

  • Page 85

    4 – Installation Installing a Switch 59096-04 A 4-15 A T o configure the switch using the command line interface, do the following: 1. Open a command window according to the type of workstation and connection:  Ethernet (all platforms): Op en a T elnet session with the default switch IP address and log in to the switch with default acco unt na[...]

  • Page 86

    4 – Installation Installing Firmware 4-16 59096-04 A S 4.2.7 Cable Devices to the Switch Connect cables to the SFP transceivers an d their corresponding devices, and then energize the devices. Device ho st bus adapters can have SFP (or SFF) transceivers or GigaBit Interface Conve rters (GBIC). LC-type duplex fiber optic cable connectors are desig[...]

  • Page 87

    4 – Installation Installing Firmware 59096-04 A 4-17 A NOTE: Y ou can load and activate version 6.7 firmware on an oper ating switch without disrupting dat a traffic or having to re-initialize attach ed devices. If you attempt to perform a non-disrup tive activation without satisfying the following conditions, the activa tion will fail. If the no[...]

  • Page 88

    4 – Installation Installing Firmware 4-18 59096-04 A S 4.3.1 Using QuickT ools to Inst all Firmware T o install firmware using QuickT ools, do the following: 1. In the faceplate display , open the Switch menu and select Load Firmware. 2. In the Firmware Upload dialog, click the Browse button to browse and select the firmware file to be uploaded. [...]

  • Page 89

    4 – Installation Installing Firmware 59096-04 A 4-19 A Refer to the SANbox 5000 Series Fibre Ch annel Switch Command Line Interface Guide for information about t he CLI commands. 1. Enter the following commands to downloa d the firmware from a re mote host to the switch, install the firmware, then reset the switch to activate the firmware. SANbox[...]

  • Page 90

    4 – Installation Installing Firmware 4-20 59096-04 A S 4.3.2.2 Custom Firmware Inst allation A custom firmware installation downloads the firmware imag e file from an FTP or TFTP server to the switch, unp acks the image file, and reset s the switch in separate step s. This allows you to choose the type of switch reset a nd whether the activation [...]

  • Page 91

    4 – Installation Adding a Switch to an Existing Fabric 59096-04 A 4-21 A 4.4 Adding a Switch to an Existing Fabric If there are no special conditions to be co nfigured for the new switch, simply plug in the switch and the switch becomes functional with t he default fabric configuration. The default fabric c onfiguration settings are as follows: ?[...]

  • Page 92

    4 – Installation Installing Feature License Keys 4-22 59096-04 A S Notes[...]

  • Page 93

    59096-04 A 5-1 Section 5 Diagnostics/T roubleshooting Diagnostic information ab out the switch is available through the chassis LEDs and the port LEDs. Diagnostic information is also available through th e CLI, QuickT ools, or Enterprise Fabric Suite 2007 event logs and error displays. Th is section describes the follo wing types of diagnostics: ?[...]

  • Page 94

    5 – Diagnostics/Troubleshooting Chassis Diagnostics 5-2 59096-04 A S 5.1.1 Input Power LED Is Extinguished The Input Power LED illuminates to indicate t hat the switch logic circuitry is receiving proper volt ages. If the Input Power LED is extinguished, do the following: 1. Inspect the power cords and connectors. Is the cord unplugged? Is the co[...]

  • Page 95

    5 – Diagnostics/Troubleshooting Power-On Self T est Diagnostics 59096-04 A 5-3 A 5.2 Power-On Self T est Diagnostics The switch performs a series of test s as part of it s power-up procedure. The POST diagnostic program performs the following tests:  Checksum tests on the boot firmware in PROM and the switch firmware in flash memory  Intern[...]

  • Page 96

    5 – Diagnostics/Troubleshooting Power-On Self T est Diagnostics 5-4 59096-04 A S 5.2.1.1 Internal Firmware Fa ilure Blink Pattern An internal firmware failure blink p attern is 2 blinks followed by a two second pause. The 2-b link error pattern in dicates that the firmware has failed, an d that the switch must be reset. Moment arily press and rel[...]

  • Page 97

    5 – Diagnostics/Troubleshooting Power-On Self T est Diagnostics 59096-04 A 5-5 A 5.2.1.3 Configuration File Syste m Error Blink Pattern A configuration file system error blink pattern is 4 blinks followed by a two second pause. The 4-blink error pattern indicates th at a configuration file system error has occurred, and that the configu ration fi[...]

  • Page 98

    5 – Diagnostics/Troubleshooting Power-On Self T est Diagnostics 5-6 59096-04 A S 5.2.1.4 Over T emperature Blink Pattern An over temperature blink pat tern is 5 blinks followed by a two second pause. The 5-blink error pat tern indicates that the air temperature inside th e switch has exceeded the failure temperature th reshold. If the Heartbeat L[...]

  • Page 99

    5 – Diagnostics/Troubleshooting Power-On Self T est Diagnostics 59096-04 A 5-7 A 5.2.2 Logged-In LED Indications Port diagnostics are indicated b y the Logged-In LED for each port as shown in Figure 5-2 . Figure 5-2. Logged-In LED The Logged-In LED has three ind ications:  Continuous illumination: A device is logged in to the port.  Flashin[...]

  • Page 100

    5 – Diagnostics/Troubleshooting Power-On Self T est Diagnostics 5-8 59096-04 A S 5.2.2.1 E_Port Isolation A Logged-In LED error indication is often the result of E_Port iso lation. E_Port isolation can be caused by the following:  Security failure  FL_Port is connected to a nother switch  Conflicting domain IDs  Conflicting timeout va[...]

  • Page 101

    5 – Diagnostics/Troubleshooting Power-On Self T est Diagnostics 59096-04 A 5-9 A 4. Compare the RA_T OV and ED_TOV timeout values for all switches in the fabric using the Show Config Switch command. Is each t imeout value the same on every switch?  Ye s - C o n t i n u e .  No - Correct the timeout values on the o ffending switches using th[...]

  • Page 102

    5 – Diagnostics/Troubleshooting Power-On Self T est Diagnostics 5-10 59096-04 A S If the count for any of these errors exceeds the rising trigger fo r three consecutive sample windows, the switch generates an alarm and d isables the affected port, changing its operational st ate to “down” . Port errors can be caused by the following:  T ri[...]

  • Page 103

    5 – Diagnostics/Troubleshooting T ransceiver Diagnostics 59096-04 A 5-1 1 A 5.3 T ransceiver Diagnostics Y ou can display the following transceiver informatio n using the Show Media CLI command:  Port number  Manufacturer  T emperature (°C)  Operating voltage (volt s)  T ransmitter bias (milliamp s)  T ransmitter powe r (milliw[...]

  • Page 104

    5 – Diagnostics/Troubleshooting Power Supply Diagnostics 5-12 59096-04 A S 5.4 Power Supply Diagnostics A model 5202/5602 switch power supply has a S t atus LED (Green) and a Fault LED (Amber) as shown in Figure 5-3 . Under norma l operating conditions, the Power Supply S tatus LED is illuminat ed and the Power Supply F ault LED is extinguished. [...]

  • Page 105

    5 – Diagnostics/Troubleshooting Recovering a Switch Using Maintenance Mode 59096-04 A 5-13 A 5.5 Recovering a Switch Using Maintenance Mode A switch can become inoperable or unma nageable for the following reasons:  Firmware becomes corrupt  IP address is lost  Switch configuration becomes corrupt  Forgotten password In these specific[...]

  • Page 106

    5 – Diagnostics/Troubleshooting Recovering a Switch Using Maintenance Mode 5-14 59096-04 A S 4. The maintenance menu displays several recovery op tions. T o select a switch recovery option, press the co rresponding number (displayed in option: field) on the keyboard and p ress the Enter key . 0) Exit 1) Image Unpack 2) Reset Network Config 3) Res[...]

  • Page 107

    5 – Diagnostics/Troubleshooting Recovering a Switch Using Maintenance Mode 59096-04 A 5-15 A 5. Select option 1 from the maintenance menu. When prompted for a file name prompt, enter the firmware image file name. Image filename: filename Unpacking ’filename’, please wait... Unpackage successful. 6. Select option 7 to reset the switch a nd exi[...]

  • Page 108

    5 – Diagnostics/Troubleshooting Recovering a Switch Using Maintenance Mode 5-16 59096-04 A S 5.5.7 Remaking the File Sys tem in Maintenance Mode In the event of a loss of power , the sw itch configuration may become corrupt. The file system on which the configuration is stored must be re-created. This opt ion resets the switch to the facto ry def[...]

  • Page 109

    59096-04 A 6-1 Section 6 Removal/Replacement This section describes the removal and r eplacement procedures for the following field replaceable units (FRU):  SFP transceivers  Power supplies for model 5202/5602 switches The switch is equipped with a battery t hat powers the non-volatile memory . This memory stores the switch configuration. Th[...]

  • Page 110

    6 – Removal/Rep lac em e nt Power Supply Removal and Replacemen t 6-2 59096-04 A S 6.2 Power Supply Removal and R eplacement The SANbox 5202/5602 power supplies ar e hot plu ggable. This means you can remove or inst all one of the power supplies while the switch is operating without disrupting service. The power sup plies are also interchangeable[...]

  • Page 111

    6 – Removal/Replacement Power Supply Remova l and Replacement 59096-04 A 6-3 A 1. Confirm that the Heartbeat LED is s howing the normal 1 blink per second. This allows the switch to correctly report powe r supply status. 2. Confirm that the new power supply is comp atible with the switch air flow direction. The part number label on th e power sup[...]

  • Page 112

    6 – Removal/Rep lac em e nt Power Supply Removal and Replacemen t 6-4 59096-04 A S Notes[...]

  • Page 113

    59096-04 A A-1 Appendix A S pecifications This appendix contain s the specifications for the SANbox 5000 Serie s Fibre Channel switch. Refer to Se ction 2 for the location of all connections, switches, controls, and component s. A.1 Fabric S pecifications Fibre Channel Protocols ................. FC-PH Rev . 4.3 FC-PH-2 FC-PH-3 FC-AL Rev 4.6 FC-AL-[...]

  • Page 114

    A – S pecifications Fabric S pecifications A-2 59096-04 A S Number of Fibre Channel Port s ...... (5200 Series models do not support 4-Gbps) V ariable and can be upgraded in the following configurations:  Eight 1/2/4-Gbps FC po rts  T welve 1/2/4-Gbps FC port s  Sixteen 1/2/4-Gbp s FC ports  Sixteen 1/2/4-Gbp s FC ports plus four 10-G[...]

  • Page 115

    A – S pecifications Maintainability 59096-04 A A-3 A A.2 Maint ainability Bandwidth Point-to-Point .......................... ....... Aggregate (single switch) ............... 212 MB, Full Duplex @ 1-Gbp s 224 MB, Full Duplex @ 2-Gbp s 850 MB, Full Duplex @ 4-Gbp s 1 2550 MB, Full Duplex @ 10-Gbp s Up to 23.80 GB Full Duplex Bandwidth Point-to-Po[...]

  • Page 116

    A – S pecifications Fabric Managem ent A-4 59096-04 A S A.3 Fabric Management A.4 Dimensions Management Methods .................... Enterprise Fabric Suite 2007 graphical user interface QuickT ools web applet Command Line Interface Application Programming Interface SMI-S GS-3 Management Server SNMP FTP TFTP Maintenance Connection ...............[...]

  • Page 117

    A – S pecifications Electrical 59096-04 A A-5 A A.5 Electrical A.6 Environment al Operating volt age ........................... 100 to 240 V AC; 50 to 60 Hz Power source loading (maximum) .. 1 A at 120 V AC 0.5 A at 240 V AC Heat Output (maximum) ................. 100 watts Circuit Protection ............................ Internally fused T emper[...]

  • Page 118

    A – S pecifications Regulatory Certifications A-6 59096-04 A S A.7 Regulatory Certifications Safety S tandards ............................ UL60950:2000 CSA 22.2 No. 60950-00 (Canada) EN60950 (EC) CB Scheme-IEC 60950 Emissions S tandards ...................... FCC Part 15B Class A ICES-03 Issue 3 VCCI Class A ITE CISPR 22, Class A EN 55022, Class[...]

  • Page 119

    59096-04 A Glossary-1 Glossary Access Control List Zone Access Control List zoning divides the fabric for purposes of controlling discovery and inbound traf fic. Active Zone Set The zone set that define s the current zoning for the fabric. Active Firmware The firmware image on the switch that is in use. Activity LED A port LED that indicates when f[...]

  • Page 120

    SANbox 5000 Series Fibre Channel Switch Installation Guide Glossary-2 59096-04 A S Class 2 Service A service which multiplexes frames at frame boundaries to or from one or more N_Ports wit h acknowledgment provid ed. Chassis Hop A measure of fabric latency represented by the ISL that any frame crosses when travelling from one switch to another . A [...]

  • Page 121

    59096-04 A Glossary-3 SANbox 5000 Series Fibre Channel Switch Installation Guide A Flash Memory Memory on the switch that cont ains the chassis control firmware. Frame Data unit consisting of a start-of-frame (SOF) delimiter , header , data p ayload, CRC, and an end-of-frame (EOF) delimiter . FRU Field Replaceable Unit Group A list of device worldw[...]

  • Page 122

    SANbox 5000 Series Fibre Channel Switch Installation Guide Glossary-4 59096-04 A S MIB Management Information Base Multist age T opology A fabric in which two or more edge switches connect to one or more core switches. Network Time Protocol A network protocol that enables a client to synchronize its time with a server . NL_Port Node Loop Port. A Fi[...]

  • Page 123

    59096-04 A Glossary-5 SANbox 5000 Series Fibre Channel Switch Installation Guide A V oluntary Control Council for Interference A consortium of Japanese ele ctronics industry associations that have established volunt ary standard s for controlling electromagnetic interfe rence (EMI). Worldwide Name (WWN) A unique 64-bit address assigned to a device [...]

  • Page 124

    SANbox 5000 Series Fibre Channel Switch Installation Guide Glossary-6 59096-04 A S Notes[...]

  • Page 125

    59096-04 A Index-1 Index Numerics 10/100 Base-T straight cable 4-10 10-Gbps port 2-5 A account name default 4-14 FTP 4-20 maintenance mode 5-13 active zone set 3-2 Activity LED 2-6, 2-8 air flow A-5 altitude A-5 Application Programming Interface 2-12 authorization 3-19 B bandwidth 3-5 , A-3 boot loader 5-16 browser 4-2 buffer credit 3-4, A-2 C cabl[...]

  • Page 126

    SANbox 5000 Series Fibre Channel Switch Installation Guide Index-2 59096-04 A S E E_Port 2-7, 5-8 emissions standards A-6 Enterprise Fabric Suite 2007 2-12 environment al conditions 4-2 specifications A-5 error critical 5-3 fatal POST 5-4 port 5-9 Ethernet direct connection 4-10 indirect connection 4-10 port 2-8 extended credit cable length 3-4 exa[...]

  • Page 127

    59096-04 A Index- 3 SANbox 5000 Series Fibre Channel Switch Installation Guide A L latency 3-5, A-2 LED Activity 2-6, 2-8 Heartbeat 2-4, 5-3 Input Power 2-4, 5-2 Link S tatus 2-8 Logged-In 2-6, 5-7 power supply 2-10 System Fault 2-4, 5-2 license key 2-5, 4-21 Link S tatus LED 2-8 log file 5-15 Logged-In LED 2-6, 5-7 login limit 3-29 M maintainabili[...]

  • Page 128

    SANbox 5000 Series Fibre Channel Switch Installation Guide Index-4 59096-04 A S Power-on Self T est description 5-3 fatal error 5-4 principal priority 3-8 switch 3-8 processor 4-2, A-2 Q QuickT ools service 3-15 web applet 2-11 R rack mount 4-4, 4-5, 4-6 RADIUS - See Remote Dial-In User Service. recovering a switch 5-13 regulatory certifications A-[...]

  • Page 129

    59096-04 A Index- 5 SANbox 5000 Series Fibre Channel Switch Installation Guide A T elnet service 3-15 temperature error 5-6 operating range 4-2, A-5 three-switch-sta cking 3-9 timeout values 5-9 topolo gy cascade 3-12 mesh 3-13 transceiver 2-7, 4-6, 6-1 transmission rate 3-3, 3-5 two-switch stacking 3-9 U upgrade 2-5 user account security 3-17 user[...]

  • Page 130

    SANbox 5000 Series Fibre Channel Switch Installation Guide Index-6 59096-04 A S Notes[...]