Documente Academic
Documente Profesional
Documente Cultură
UC434S F.00
Lab guide
Use of this material to deliver training without prior written permission from HP is prohibited.
Lab guide
Use of this material to deliver training without prior written permission from HP is prohibited.
Copyright 2010 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein. This is an HP copyrighted work that may not be reproduced without the written permission of HP. You may not use these materials to deliver training to any person outside of your organization without the written permission of HP. Microsoft, Windows, Windows XP, and Windows Vista are U.S. registered trademarks of Microsoft Corporation. UNIX is a registered trademark of The Open Group. Export Compliance Agreement Export Requirements. You may not export or re-export products subject to this agreement in violation of any applicable laws or regulations. Without limiting the generality of the foregoing, products subject to this agreement may not be exported, re-exported, otherwise transferred to or within (or to a national or resident of) countries under U.S. economic embargo and/or sanction including the following countries: Cuba, Iran, North Korea, Sudan and Syria. This list is subject to change. In addition, products subject to this agreement may not be exported, re-exported, or otherwise transferred to persons or entities listed on the U.S. Department of Commerce Denied Persons List; U.S. Department of Commerce Entity List (15 CFR 744, Supplement 4); U.S. Treasury Department Designated/Blocked Nationals exclusion list; or U.S. State Department Debarred Parties List; or to parties directly or indirectly involved in the development or production of nuclear, chemical, or biological weapons, missiles, rocket systems, or unmanned air vehicles as specified in the U.S. Export Administration Regulations (15 CFR 744); or to parties directly or indirectly involved in the financing, commission or support of terrorist activities. By accepting this agreement you confirm that you are not located in (or a national or resident of) any country under U.S. embargo or sanction; not identified on any U.S. Department of Commerce Denied Persons List, Entity List, US State Department Debarred Parties List or Treasury Department Designated Nationals exclusion list; not directly or indirectly involved in the development or production of nuclear, chemical, biological weapons, missiles, rocket systems, or unmanned air vehicles as specified in the U.S. Export Administration Regulations (15 CFR 744), and not directly or indirectly involved in the financing, commission or support of terrorist activities. Printed in USA Accelerated SAN Essentials Lab guide December 2010
Contents
UC434S F.00
Module 4 Lab 1a: Installing and using the SANsurfer utility for QLOGIC HBAs in Windows 2008
Objectives .............................................................................................. L4.1a-1 Requirements .......................................................................................... L4.1a-1
Module 4 Lab 1b: Windows HBA Emulex information and configuration (optional)
Objectives .............................................................................................. L4.1b-1 Requirements .......................................................................................... L4.1b-1 Installing the SANsurfer HBA configuration utility......................................... L4.1b-2
Contents
Adding to a configuration .................................................................... L6.1-3 Zoning using Web Tools ...................................................................... L6.1-4 Create a configuration using WWN zoning ........................................... L6.1-6 Create a configuration using both port and WWN zoning....................... L6.1-7 Clearing the zoning configurations ........................................................ L6.1-7 Final zoning Important!............................................................................ L6.1-8
iii
iv
UC434S F.00
Fabric Documentation
Module 1 Lab 1
Objective
This is a working lab that will be used to record information, gathered through the week. By the end of the course you will have sufficient documentation to allow you to reference all your connected SAN hosts, targets and fabric switches.
Requirements
Before beginning this lab, it is assumed that:
You have SAN hosts, disk targets and switches to document. You will not complete this lab entirely before continuing to the next module. However you should make every effort to return to it when missing information becomes available to you.
Note: This is a working lab that will be used to record information, gathered through the week. By the end of the course you will have sufficient documentation to allow you to reference all your connected SAN hosts, targets and fabric switches.
UC434S F.00
L1-1
Fabric documentation
One of the most important aspects in SAN support is clear and current documentation of the environment. In this exercise you will complete a cut-down version of the documentation required for a production SAN. Documentation should be considered an organic entity continually evolving and updating. Remember in a support situation your documentation will assist you and your support coworkers problem solve more efficiently and effectively.
L1-2
UC434S F.00
Fabric Documentation
UC434S F.00
L1-3
BL20 - 362 192.168.136.212 192.168.136.220 20 :0 0 :0 0 :0 0 :c9:4d:33:9c 10 :0 0 :0 0 :0 0 :c9:4d:33:9c 20 :0 0 :0 0 :0 0 :c9:4d:33:9d 10 :0 0 :0 0 :0 0 :c9:4d:33:9d EdgeA1 2,4 None BL20 - 362Zone EdgeB1 5,4 AD1 BL20 - 362Zone
BL20 - 363 192.168.136.213 192.168.136.221 20 :0 0 :0 0 :0 0 :c9:4d:24:dc 10 :0 0 :0 0 :0 0 :c9:4d:24:dc 20 :0 0 :0 0 :0 0 :c9:4d:24:dd 10 :0 0 :0 0 :0 0 :c9:4d:24:dd EdgeA1 2,5 None BL20 - 363Zone, BackupZone EdgeB1 5,5 AD1 BL20 - 363Zone, BackupZone
In the above example the fields have been completed for two host systems connected to two fabric switches. Zoning and Admin Domain information has been included along with switch name and domain ID & port information. 1. Use the tables in the following pages to document similar details for your SAN hosts. You may need to return to this document later in the class to complete all the data fields.
L1-4
UC434S F.00
Fabric Documentation
Host Documentation
Host Name IP address 1 IP address 2 ILO/MP IP HBA 0 Node WWN Port WWN HBA 1 Node WWN Port WWN Fabric A Switch name Domain,Port AD member Zone member Fabric B Switch name Domain,Port AD member Zone member
Host Documentation
Host Name IP address 1 IP address 2 ILO/MP IP HBA 0 Node WWN Port WWN HBA 1 Node WWN Port WWN Fabric A Switch name Domain,Port AD member Zone member Fabric B Switch name Domain,Port AD member Zone member
UC434S F.00 2010 Hewlett-Packard Development Company, L.P.
L1-5
Host Documentation
Host Name IP address 1 IP address 2 ILO/MP IP HBA 0 Node WWN Port WWN HBA 1 Node WWN Port WWN Fabric A Switch name Domain,Port AD member Zone member Fabric B Switch name Domain,Port AD member Zone member
Host Documentation
Host Name IP address 1 IP address 2 ILO/MP IP HBA 0 Node WWN Port WWN HBA 1 Node WWN Port WWN Fabric A Switch name Domain,Port AD member Zone member Fabric B Switch name Domain,Port AD member Zone member
L1-6
UC434S F.00
Fabric Documentation
In the above example the fields have been completed for a single disk array. You may not be able to complete the entire form immediately but bear it in mind while you progress through SAN discovery and lab exercises during this class. 1. Complete the following array documentation forms for the array(s) in your fabric. As you create additional (or remove) logical drives during your class, remember to add/remove them to the list.
UC434S F.00
L1-7
Array Documentation Array name Firmware Node WWN PortWWN PortWWN PortWWN PortWWN Management host name/IP LUN name/No. Capacity RAID level Presented to (host) No. Paths FC Port Speed
L1-8
UC434S F.00
Fabric Documentation
Array Documentation Array name Firmware Node WWN PortWWN PortWWN PortWWN PortWWN Management host name/IP LUN name/No. Capacity RAID level Presented to (host) No. Paths FC Port Speed
UC434S F.00
L1-9
EdgeA1 2 Domain ID 1 92.168.1 36.28 .0c F/W version 6.1 1 0:00:0 0:05:1 e:03:62:57 US B640W819 S ubordinate Role mastercfg Switch port detail Port type Device WWPN E port E port E port E port F port F port F port F port 1 0:0 0:00:05:1 e:03:ab:d8 Trunk port, master 0 1 0:0 0:00:05:1 e:03:5c:b6 Trunk port, master 2 1 0:0 0:00:00:c9:4d:33:9d 1 0:0 0:00:00:c9:4d:24:dd 50:06:0b:00 :00:29:e5:aa 50:05:08:b3:0 0:90:f2:81
L1-10
UC434S F.00
Fabric Documentation
Fabric Switch Documentation Switch name IP address Switch WWN Serial number Active zone set # 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 Speed Domain ID F/W version Role Switch port detail Port type Device WWPN
UC434S F.00
L1-11
Fabric Switch Documentation Switch name IP address Switch WWN Serial number Active zone set # 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 Speed Domain ID F/W version Role Switch port detail Port type Device WWPN
L1-12
UC434S F.00
Fabric Documentation
Fabric Switch Documentation Switch name IP address Switch WWN Serial number Active zone set # 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 Speed Domain ID F/W version Role Switch port detail Port type Device WWPN
UC434S F.00
L1-13
Fabric Switch Documentation Switch name IP address Switch WWN Serial number Active zone set # 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 Speed Domain ID F/W version Role Switch port detail Port type Device WWPN
L1-14
UC434S F.00
Fabric Documentation
Fabric Switch Documentation Switch name IP address Switch WWN Serial number Active zone set # 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 Speed Domain ID F/W version Role Switch port detail Port type Device WWPN
UC434S F.00
L1-15
Fabric Switch Documentation Switch name IP address Switch WWN Serial number Active zone set # 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15
You have successfully completed this lab.
Domain ID F/W version Role Switch port detail Port type Device WWPN
Speed
L1-16
UC434S F.00
Objectives
After completing this lab, students will be able to:
Connect to a fabric switch using Web Tools and the CLI Verify the status of the switch by using specific commands Record relevant information to Fabric Documentation
Requirements
To complete this lab, you need:
A HP B-Series fabric switch with firmware version 6.2.x or later A client (server or workstation) with Telnet Network connectivity between the client workstation and the fabric switches The IP addresses of the fabric switches ISL Ports between the ports should be enabled The login name and password of the admin account for the switches
UC434S F.00
L3.1 1
Remember to record any information collected in this lab in to your Fabric Documentation. 1. From your Windows workstation or server, launch the web browser. In the Address field, enter the IP address of the switch:
http://<IPaddress> Note Web Tools also supports the HTTPS protocol, if that protocol is enabled for the switch.
After your workstation downloads some Java files from the switch you should enter your login credentials at the Upfront Login prompt:
When the Web Tools windows launches you may see an Internet Explorer page behind the user interface. This browser window is now of no use to you so you may ignore it or close it down. Doing so will not affect your management interface.
L3.1 2
UC434S F.00
Web Tools
Note If you are using the HP Virtual Lab the switches can also be accessed via the quick links option, account and passwords are displayed to the left. Or by Hovering the mouse over Web Interface and you will see the display change to show the username:password. Click to launch Web Tools.
Once the web tools are launched a Switch View is displayed which contains an active depiction of the switch, providing details on its Status, temp, power, fan and port status. Below there are two tabs which provide access for Switch Events and Switch Information details.
UC434S F.00
L3.1 3
The Switch Explorer View is the first web page that displays when you connect to a switch. The Switch Explorer includes:
Fabric Tree Displays a navigation menu of icons for all switches in the fabric. Manage Provides easy access to fabric-level administration tasks. Monitor Access to Name Server and other monitoring tools Switch View Display real-time information about the selected switch. Switch Information page Displays a synopsis of useful information about the selected switch. Port Status information Displays real-time information about the port including status lights, and in-use lights.
L3.1 4
UC434S F.00
Tasks Pane
The Fabric Tree displays a list of all the switches in the fabric. When you select a switch from this view it is displayed in the Switch View. You can display switches in the Fabric Tree list by Name, IP address, or worldwide name (WWN).
UC434S F.00
L3.1 5
Switch graphic
The Switch View graphic is an interactive display of the particular switch you have selected from the Fabric Tree. The Web Tools interface replicates in real-time the switch you have selected. The displays in Web Tools correspond to the front of the actual switch and its various switch and port LEDs. Ports that are in use are displayed as well as unused ports. You can click a port in this window to open a dialog box that displays information about that port. If you only wish to see detail of a specific port then you can right click the port to enter a context-sensitive menu:
L3.1 6
UC434S F.00
The Port Administration window has a Basic and Advanced mode. These modes not only allow more/less configuration options, they also operate to display more/less context data within each selected option. For example, the additional information displayed for SFP in Advanced mode:
UC434S F.00
L3.1 7
What is the SFP wavelength of the port that you are interrogating? (this information can be found in the advanced section of the SFP tab you will need to use Show Advanced Mode to access it) _______________________________________________________________________ What do you think that the units are? _______________________________________________________________________
Click the Switch Admin link in the Manage section of the Tasks pane to access the switch administration functions. The tabs in the resulting window may be license dependant. For example:
Switch parameter configuration Network configuration User management Routing options Firmware Download License and feature management
2010 Hewlett-Packard Development Company, L.P. UC434S F.00
L3.1 8
Performance Monitor
Use the Performance Monitor button to graphically display throughput (megabytes per second) for each port and for the entire switch. Note: Several features previously available in Web Tools have now migrated to the brocade Professional Management tool.
UC434S F.00
L3.1 9
5.
You may enter a path to your preferred Telnet or SSH client on the local machine or click OK. You will need to OK the following error message to launch the local machine default Telnet client if you have not indicated an alternative path.
6. 7.
Enter a username and password. Enter the exit command to close the Telnet session. You will be returning to the command line interface later in this lab exercise.
L3.1 10
UC434S F.00
Name Server
The Name Server Table View provides the name server entries listed in the Simple Name Server database. This includes all name server entries for the fabric, not only those that are situated in the local domain. Each row in the table represents an NPort connection to the fabric. E-Ports are not listed in the Name Server.
Note: to view all available data use the bottom scroll bar to display all the name sever information
UC434S F.00
L3.1 11
Zone Administration
On older switches a Zoning license is required, with the introduction of firmware 6.1 and above zoning is no longer required to have a license. To configure zoning you require administrative/zoning privileges to access the Zone Administration view. If a switch or device is added or removed from the network, it is necessary to save the changes and re-launch the Zone Administration view for the changes to take effect. You will return to Zoning in a later lab exercise.
L3.1 12
UC434S F.00
The login prompt is displayed if the Telnet connection successfully found the switch on the network. 2. 3. 4. Enter the user ID admin at the login prompt. Press Enter. Enter the admin password. Press Enter. Verify that the login was successful. A prompt is displayed showing the switch name and user ID to which you are logged on with.
UC434S F.00
L3.1 13
L3.1 14
UC434S F.00
2. 3. 4.
What is the switch role? ................................................................................................................. What is the switch Domain ID? ................................................................................................................. Are there any active zoning configurations? .................................................................................................................
UC434S F.00
L3.1 15
2. 3.
What is the WWN of the device connected to this port? ................................................................................................................. The same information can be viewed using Web Tools. Return to your Web Tools session. From the main page, in the top left pane, click the graphical representation of port 4. Leave the current window open.
L3.1 16
UC434S F.00
All Fibre Channel ports on the switch are taken offline. If the switch was part of a fabric, the fabric reconfigures. The switch must be disabled before making configuration changes (using configure or configDefault) or before running many diagnostic tests. All commands that require the switch to be disabled send an error if invoked while the switch is enabled. The switch does not need to be disabled before rebooting or powering off. As each port is disabled, the front panel LED changes to a slow flashing yellow.
UC434S F.00
L3.1 17
3.
In the Switch Status section, change the radio button to Enable. Click Apply. All Fibre Channel ports that passed the POST test are enabled. If the switch was part of a fabric, it rejoins the fabric. At this point in time any ports that had previously been disabled will come back online. Note: Ports that have been persistently disabled will not be re-enabled.
As each port is enabled, the front panel LED changes to green for online ports, black for disconnected ports, or yellow for uninitialized ports. 4. Leave the current window open.
L3.1 18
UC434S F.00
Disabling/enabling a port
To disable a port, follow these steps: 1. From the Switch View image of the switch in Web Tools, right click the port that you wish to interrogate and select Port Admin from the resulting menu. Ports in the Port Administration window appear listed in the FC Ports Explorer pane to the left. When the General tab is selected in the body of the window control buttons are visible. Port online options include Enable, Disable, Persistent Enable and Persistent Disable. Functions not available appear greyed. 2. To disable a specific port, select the appropriate port in the FC Ports Explorer pane and click the Disable button in the window main body. Click Yes when asked to confirm. If the port is connected to another switch, the fabric may reconfigure. If the port is connected to a port in a Node, that port will no longer be available to the fabric. The front panel LED of a disabled port flashes yellow with a two second cycle. 3. 4. Leave the Web Tools session open. Using a Telnet session, enter the portdisable command using the following syntax:
switch:admin>portdisable portnumber
Specify the port number that you want to disable. 5. 6. Verify that the port has been disabled using switchshow:
switch:admin>switchshow
To enable a port, follow these steps: 7. From Telnet, enter the portenable command at the command line, using the following syntax:
switch:admin>portenable portnumber
If the port is connected to another switch, the fabric may reconfigure. If the port is connected to one or more devices, these devices become available to the fabric. The front panel LED of an enabled and online port is green. 8. Verify that the port has been enabled using switchshow:
switch:admin>switchshow
UC434S F.00 2010 Hewlett-Packard Development Company, L.P.
L3.1 19
9.
Return to the Prot Administration window and select the port that you disabled previously and click Enable in the main body of the window. Click Yes when asked to confirm.
L3.1 20
UC434S F.00
2. 3. 4. 5.
UC434S F.00
L3.1 21
Use these steps to upload a backup copy of the configuration settings to a host computer using Web Tools: You may need to install IIS and the ftp service if you wish to use your Windows host to perform this task, if using the hpvl this task as already been performed for you. Note the Username; password and Ip address that are to be used for saving the switch configuration are reference used to access your ftp server. Using Web Tools, from the Switch Admin window of your first switch, click the Configure tab. If you do not see the Configure tab then you may need to switch to Advanced mode. 6. 7. 8. Click the Upload/Download sub-tab. Click the Config Upload to Host radio button. Enter the user name, password, file name (e.g. config.txt) and host IP information. Click Apply, and then Yes when prompted Do you want to proceed? You can monitor the progress by looking at the Upload/Download Progress bar on the Upload/Download sub-tab.
L3.1 22
UC434S F.00
C:\Users\Administrator
UC434S F.00
L3.1 23
Using CLI to back up your configuration You can also use the command line interface (CLI) to back up your configuration. Use these steps to upload a backup copy of the configuration settings to a host computer using CLI: 1. Your instructor will provide you with the host location of where the FTP service is running. The instructor will also provide you with a user name and password.
Your HP-UX host is running the ftp daemon already. If you feel comfortable doing so then you may use the unix host for this upload. If you wish to use the Windows host for this task then you may need to install the ftp service using the following steps: Navigate to Add/Remove Programs and select the Add/Remove windows components button to the left of the window. In the Windows component wizard double click the application server item. In the dialog box that opens double click the Internet Information Services (IIS) item. Then check the tick box for File Transfer Protocol (FTP) Service (you will see other boxes will be auto-selected also). Click OK twice and then choose Next to install the chosen items. During the install you may be prompted to provide the location of an i386 directory. If you are using the hpvl then you will find it at: C:\i386 or your instructor will be able to give you its location. Click Finish and close any open windows when the installation is complete. N.B. You will need to change the default permissions for the FTP site to allow write access.
NOTE
2.
Connect to your switch if you are not already. At the command line enter the following command:
# configupload
3.
When prompted, provide the IP address, the user name, file name, protocol, and password.
4.
The following graphic shows an example of the configuration file generated when viewed in WordPad..
L3.1 24
UC434S F.00
UC434S F.00
L3.1 25
L3.1 26
UC434S F.00
Objectives
After completing this lab students will be able to:
Install Fabric Manager and Device Manager Configure a VSAN Configure Port Channels Configure Zoning Upgrade switch firmware
Requirements
To complete this lab you need:
A Windows host system Cisco Simulation installation files (your instructor will provide these for you or show you where to obtain them)
UC434S F.00
L3.2 1
L3.2 2
UC434S F.00
Installing and using the SANsurfer utility for QLOGIC HBAs in Windows 2008
Module 4 Lab 1a
Objectives
After completing this lab, you should be able to:
Install the qlogic SANsurfer utility Access the graphical interface Inspect and modify the default HBA settings Create a persistent binding to a remote target.
Requirements
To complete this lab you will need: . A Windows 2008 host system with Qlogic Host Bus Adapters (HBAs) Note if you do not have Qlogic HBAs in your server do not perform this lab
UC434S F.00
L4.1a 1
Installation
If you arfe not using the hpvl environment ask your instructor fro the location of the Qlogic SANsurfer software. Locate and double click the SANsurfer installation file:. 1. If the firewall requests that you confirm the run command then do so and follow the first steps by clicking Next.
2. 3.
Select the SANsurfer FC HBA Manager option indicated above (you will only need this selection for the following lab) and then choose Next. The next installation step will prompt you to select the installation path accept the default and choose Next.
L4.1a 2
UC434S F.00
Installing and using the SANsurfer utility for QLOGIC HBAs in Windows 2008
4. 5.
Install the application shortcuts in the Current Users Profile and click Next. Choose Next again at the next step to accept the creation of the Desktop Icon and then click Install at the summary screen.
6. 7.
Do NOT select the tick box shown above. Doing so will enable the Qlogic failover configuration you do not want this. Choose Next. Click Done at the final screen and you will have successfully installed the utility.
UC434S F.00
L4.1a 3
2. In order to begin HBA management you first need to Connect and select localhost or your desired alternative hostname from the list.
Select localhost and click Connect 3. Start general configuration wizard by selecting Yes
L4.1a 4
UC434S F.00
Installing and using the SANsurfer utility for QLOGIC HBAs in Windows 2008
And click Next 5. View the HBA Port Information and click Next 6. Set the HBA Port Connection Settings to Point to Point and click Next
7. On the Target Persistent Binding leave all selections unchecked and click Next 8. On the Confirm Changes page click Next 9. Enter password of config click OK
UC434S F.00
L4.1a 5
11. Configure the second HBA to Point to Point, following the previous steps if required. 12. In the navigation pane to the left of the window you should see the HBA ports for the host that you have connected to and, upon selection of one of those ports, to the right you should see port properties (see diagram below) Select one of the ports in the navigation pane and then click the Information tab to display some of the port properties. What is the Port Name (WWN) of this port? ______________________________________________________________ What is the Port ID? _____________________________________________ What is the Actual Connection Mode? _______________________________ What is the Actual Data Rate?______________________________________
Installing and using the SANsurfer utility for QLOGIC HBAs in Windows 2008
Icon indicates LUN or target device offline Icon indicates LUN or target device online
13. Select either Port0 or Port1 in the navigation pane and click the Target List tab, the image below shows an example:
How do the entries in the Port ID column relate to your zoning if its enabled on the FC switch? __________________________________________________________________ __________________________________________________________________ __________________________________________________________________ Which service in the fabric (i.e. on the FC switch) can help you to relate the 24 bit fabric address (or Port ID) to the Port WWN a node? __________________________________________________________________
14. Select either Port0 or Port1 in the navigation pane and click the Monitoring tab. You will see a statistics charts for your HBA port similar to the one shown below:
UC434S F.00 2010 Hewlett-Packard Development Company, L.P.
L4.1a 7
15. Select the Set Rate box at the bottom of the window.
Type 10 in the Sampling Rate box and click OK You should now find that the Start button is greyed out and the chart will automatically refresh. At this moment in time there may not be much information displayed due to the inactivity of environment,
Select either Port0 or Port1 in the navigation pane and click the Parameters tab. Click the Connection Options drop-down list. What options are displayed?
L4.1a 8
2010 Hewlett-Packard Development Company, L.P. UC434S F.00
Installing and using the SANsurfer utility for QLOGIC HBAs in Windows 2008
__________________________________________________________________ __________________________________________________________________ __________________________________________________________________ __________________________________________________________________ Under what circumstances would you want to check the Enable HBA Port BIOS box? __________________________________________________________________ __________________________________________________________________ __________________________________________________________________ Select either Port0 or Port1 in the navigation pane and click the Link Status tab. The content page shows each visible (i.e. within the HBA ports zone) storage port WWN. List the column headings on this page: 1. ____________________________________________________________ 2. ____________________________________________________________ 3. ____________________________________________________________ 4. ____________________________________________________________ 5. ____________________________________________________________ Close SANsurfer and look at another method of collecting information regarding the installed HBAs.
UC434S F.00
L4.1a 9
Enter option 2 and record your HBA Information an example is shown below:
L4.1a 10
UC434S F.00
Objectives
After completing this lab, students will be able to:
View HBA information for your Windows host Use the Emulex HBAnywhere utility Add Host information to a Fabric Documentation Note this lab cannot be completed if using the hpvl if in doubt which HBA cards are in your windows server please ask your instructor.
Requirements
To complete this lab you need:
A Windows host system with Emulex HBAs or a blade with Emulex mezzanine cards Fibre Channel switch to connect them to Emulex software installation files (your instructor can provide these for you)
Note if you do not have Emulex cards in your windows servers do not attempt this lab
UC434S F.00
L4.1b 1
Installation and use of Emulex HBAnywhere 1. Double click the setupapps.exe file in the HBAanywhere folder. If you are using the hpvl then you will find it at: Z:\ HBAnywhere (your instructor will direct you to it if you cannot find it).
7. From the General tab view the entry for your local HBAs. You will see the Port WWN and the Node WWN.
Document the Node Wide Name and the Port World Wide Name for each Host Bus Adaptor below: Node World Wide Name__________________________________________________ Port World Wide Name___________________________________________________ Node World Wide Name__________________________________________________ Port World Wide Name___________________________________________________
8. To the right of the navigation window there are the main tabs these are used for configuring your HBA and gaining feedback on what it has discovered in the fabric 9. Select the Adapter details tab. Record the following:
UC434S F.00 2010 Hewlett-Packard Development Company, L.P.
L4.1b 3
Symbolic Name _______________________________________________ Hardware Version _____________________________________________ Serial Number ________________________________________________ Discovered Ports_______________________________________________ Port FC ID ______________________________________________ Port Type _______________________________________________
Select the Target Mapping tab. Document the information that you see:
WWPN
WWNN
D_ID
SCSI ID
This information will assist you later so ensure that you document it accurately. Note that these Mappings are automatically updated you may disable this Automapping function or change the bind type at a later stage.
Are there any Persistent Bindings active? _________________________________ When are persistent bindings most likely to be used? ______________________________________________________________________
10. Review the Driver Parameters tab. Scroll down to the bottom of the list of parameters and record the value and description for the Topology entry: (it will help if you click it once to select it in the list) ______________________________________________________________________
L4.1b 4
UC434S F.00
Objectives
After completing this lab, students will be able to:
Requirements
To complete this lab you need:
A HP-UX host system with Agilent HBAs Fibre Channel switch to connect them to
UC434S F.00
L4.2 1
HBA information
FCMSUTIL The fcmsutil command is a diagnostic tool to be used for the TACHYON TL A5158A and TACHYON XL2 A6795A Fibre Channel Host Bus Adapters. This command provides the ability to perform Fibre Channel Test and Echo functionality, read the card's registers, etc. This command requires the use of a device file to indicate the interface over which the requested command needs to be performed. You will first need to determine how many HBAs there are in your system and what type they are. Remember also to record information gathered in to your fabric Documnetation. 1. To do this use the ioscan command in the following format Ioscan fnCfc You will see output resembling that below: # ioscan fnCfc
2. Now that you know the device file names of your HBAs you can run the fcmsutil command thus: fcmsutil /dev/fcd0
L4.2 2
UC434S F.00
3. Run the command for both (or all) of your HBAs and document their Node World Wide Name and Port World Wide Name below
You will need this information later so ensure that you document it accurately
4. Document also the speed of connection for each HBA port and its topology
UC434S F.00
L4.2 3
5. Run the following command to query the Name Server: fcmsutil /dev/fcdx ns_query_ports the HBA device file) (where x corresponds to
L4.2 4
UC434S F.00
6. Use the get remote all switch (e.g. fcmsutil /dev/fcdX get remote all) to gather information on remote disk targets. [For more information about the other switches and options for this command type: fcmsutil] Example output:
Record the Target Port World Wide Name and the Target Node World Wide Name values for each target device that you can see: Target 1 WWNN_________________________________________________________________ WWPN__________________________________________________________________ Target 2 WWNN_________________________________________________________________ WWPN__________________________________________________________________ How might this information help you when you configure your zoning? _________________________________________________________________________ _________________________________________________________________________ _________________________________________________________________________ _________________________________________________________________________
UC434S F.00
L4.2 5
L4.2 6
UC434S F.00
Objectives
After completing this lab, you should be able to:
Install the Microsoft MPIO framework and multi-path DSM for Windows 2008 R2
Prerequisites
One MSA2324fc for your group Two PCI-Express class servers with Windows Server 2008 installed Two single or one dual port Fibre channel HBA installed in the server 4 2m FC cables (these may or may not be connected already) Latest PSP drivers will be pre-installed
UC434S F.00
L5.1 1
Important MPIO software is required in any configuration in which a single host has more than one data path connection to the external storage array. Without MPIO software installed, the multiple paths to the array would cause ghost drives to appear in the disk management utility. This would also lead to not being able to format or mount logical disks. Once MPIO software is installed, it should not be removed unless only one data path exists between the host server and the external storage array.
1. Logon to your windows server and open a command prompt window and run the following command:
ocsetup Mulipathio /norestart mpclaim n I -a 2. type in mpclaim e so can see the effects of the MPIO before and after implementation.
3. Reboot the server. Once the MPIO DSM is installed, no further configuration is required; however, after initial installation, use Windows Server Device Manager to check that the MPIO DSM has been installed correctly. 4. Once the system has rebooted, logon on to the system 5. open a new command prompt window 6. Reenter the command mpclaim e and view the results, how do the results from the mpclaim command differ in the before and after the reboot?
L5.1 2
2010 Hewlett-Packard Development Company, L.P. UC434S F.00
..
7. Right click Computer on the desktop and select manage from the new pop up window. 8. Expand the Diagnostic field and select Device Manager
9. To the right in the Device Manager box expand the Disk drives section and select one of the HP MSA2324fc Multi-Path Disk Device right click and select properties.
10. From the new window select the MPIO tab 11. Select the MPIO policy to Round Robin With Subset.
UC434S F.00
L5.1 3
12. Later you will be setting MPIO policies for the new disks added to your configuration from the MSA2324 fc Storage Array. 13. Install MPIO on to the second windows 2008 R2 server.
When you complete the software installation for the second server, you have completed this portion of the lab and are ready to move on to configuring the MSA2324fc.
L5.1 4
UC434S F.00
Objectives
Completion of this lab will depend on the MSA2000 storage solution which has been provided. After completing this lab, you should be able to:
Set and/or verify the IP address assigned to your MSA2324fc Launch the MSA2324 Storage Management Utility Create a RAID 5 Vdisk Create six volumes (logical drives) within the Vdisks Assign volumes to attached host servers Discover volumes and format for use
Prerequisites
Two PCI-E capable servers running Windows 2000/2003 and two HBAs One HP-UX system and two HBAs An MSA2012fc with at least six hard drives Fibre channel cabling between the MSA2324 and each host server MSA2012fc support software installed (from the previous lab)
UC434S F.00
L5.2 1
Note: If using the hpvl this task has already been performed for you.
1. Start and configure a terminal emulator such as HyperTerminal or VT100, using the following display settings: Terminal Emulation Mode: VT100 or ANSI (for color support) Font: Columns: Terminal 80
Connector: Com 1 (typically) Baud Rate: 1 15 200 Data Bits: Parity: Stop bits: 8 None 1
Flow control: None Click OK to continue. 2. Press Enter a few times. You should see a # show up in the terminal display. 3. If you are using the hpvl launch the telnet session from the quick links page. When prompted enter a user name of manage and a password of !manage 4. Enter the command SHOW NETWORK-PARAMETERS and press Enter. You should get a display back that looks something like this:
L5.2 2
UC434S F.00
5. Record the IP address shown on your screen for both Controller A and Controller B. You will use these in a web browser to manage the MSA2324fc. 6. Controller A 7. Controller B
UC434S F.00
L5.2 3
Note These are the default login credentials for the MSA2000 Controllers. Username: manage Password: !manage The MSA2324fc has a choice of languages and these are: English, Spanish, French, German, Italian, Japanese, Dutch, Chinese-simplified, Chinese-traditional, Korean.
L5.2 4
UC434S F.00
2. Enter the default username and password to see a Status Summary page.
Important Setting the date and time is an important step. The date/time stamps will be used to track system events in the onboard event log (such as knowing exactly when a drive failed).
3. From the top menu select Configuration System Settings Data, Time
4. From here the system date and time values can be set, or an NTP can be
configured for automatically updating the date and time.
UC434S F.00
L5.2 5
6. In the Main Window, locate the Link Speed box. Set the Port speeds to auto if it is not already set, and the Connection Mode to point to point.
L5.2 6
UC434S F.00
7. Click the Apply button to save any changes, when prompted selected apply again and then OK.
Deleting Volumes
There may be in rare occasions volumes and Vdisk in your training environment that were created in a previous class, this is the process to remove them so are starting from a fresh install. 1. From the right navigation windows expand the Vdisk and select the volume to delete.
Right click select Provisioning and then Delete Volume 2. In the right pane select the volume to delete
3. Click Delete Volume(s) 4. on the next prompt Confirm Operation confirm this action by clicking Delete
UC434S F.00
L5.2 7
Accelerated SAN Essentials 5. Now that the volume has been deleted, delete the Vdisk, right click the Vdisk Provisioning Delete Vdisk
7. Select Delete Vdisk(s) 8. Confirm operation delete ok 9. Confirm that there are no volumes and vdisks on your build.
Creating Vdisks
On the MSA2000, a Vdisk is a collection of physical disks that contain a RAID policy. The MSA2000 family supports RAID 0, 1, 3, 5, 6, 10, and 50. Once the Vdisk is created, the available logical space can be used to carve out individual volumes, similar to logical drives in previous MSA products. For this lab, we will create a single RAID 5 Vdisk from 5 physical disks with one online spare. From there, we will carve out six volumes (logical drives) from it. Initially only three of the disks will be used with each server having only one disk allocated to it.
L5.2 8
UC434S F.00
1.
2.
From the top section of the create disk option, Vdisk name, Raid Level and Chunk size can be configured, please leave as default.
3.
Select the disks to be members of your Vdisk and also your spare, this is achieved by selecting the radio button by RAID5 and Spare and the check boxes to the left of the disks. Notice when selections are made the State changes from available to RAID5 or SPARE and Disks colors change, from grey to yellow and then to green. once finished selecting your disk and click Create Vdisk
UC434S F.00
L5.2 9
Note Although we could, we will not use the entire space from the Vdisk in this lab. 1. In the left hand pane expand Logical and the Vdisks folders 2. Select your newly created Vdisks and right click and from the new menu display select Provisioning Create Volume.
4. 5.
In the Volume Name box enter Vdisk1_Server1 and a size of 1GB and select apply. Create another two volumes with the following names and sizes
Vdisk2_Server2 - 2 GB Vdisk3_HPUX 3GB 6. 7. 8. 9. Create three more volumes these will be used in later labs and call them: Assign the volume name Vdisk4_Server1 and a size of 4GB Assign a volume name Vdisk5_Server2 and a size of 5GB Finally a volume name Vdisk6_HPUX and a size of 6GB.
10. Check the configuration view to the left, where all your new Vdsiks should be visible.
L5.2 10
2010 Hewlett-Packard Development Company, L.P. UC434S F.00
UC434S F.00
L5.2 11
Accelerated SAN Essentials 2. Select Manage Host Mappings 3. For your fist server assign Vdisk1_Server1 4. Tick the Check box map and assign a Lun Number (e.g 1)
5. Map the second HBA from the first server to the same volume assigning the same lun number. 6. Repeat the above process for server two, mapping Vdisk2_Server2 to both HBAs, and for the HP unix server presenting Vdisk3_HPUX to both of its HBAs. 7. Assign the remaining three disks to their respective servers, remember to increment the Lun number to 2. 8. Confirm mapping of the volumes.
Highlight the volume name and select View Overview and select Map This can also be achieved by right clicking the volume name View Overview
L5.2 12
2010 Hewlett-Packard Development Company, L.P. UC434S F.00
3. Expand the Storage section and select Disk Management. 4. Right click the disks that are unknown and select Online.
UC434S F.00
L5.2 13
Accelerated SAN Essentials 6. Accept the defaults for the MBR and click OK
Right click the unallocated volume and select New Simple Volume 8. From the New Simple Volume Wizard Select Next
L5.2 14
UC434S F.00
9. Follow all the defaults and assign a drive letter to your new volume. 10. On the Format Partition page enter a volume e.g the name assigned when you created the volume using the MSA configuration utility.
11. Next then finish. 12. Format the second drive and assign a volume name e.g Vdisk4_Server1 13. .Repeat this exercise on the second windows Server.
UC434S F.00
L5.2 15
Use insf e to install the device drivers for the new Lun and then you are ready to format the Lun with a file system.
L5.2 16
UC434S F.00
Multi-Path Management
Module 5 Lab 3
Objectives
After completing this lab, students will be able to:
Consider the steps required to failover fabric traffic in a controlled way Appreciate what happens when fabric failover occurs due to hardware failure
Requirements
To complete this lab, you need:
At least two connected HP B-Series fabric switches with firmware version 6.2.x or later A client (server or workstation) with Telnet Network connectivity between the client workstation and the fabric switches The IP addresses of the fabric switches The login name and password of the administrator account for the switches Hosts running Multi-path software LUNs presented to those hosts from a SAN disk array
UC434S F.00
L5.3 1
L5.3 2
UC434S F.00
Multi-Path Management
4. from the hardware tab select the option Properties and the select the MPIO tab.
5. From this window selections can be made on the disk about access. 6. Select the MPIO policy: what options are available a) .. b) .. c) .. d) .. e) .. 7. Notice as you select an MPIO policy the description is displayed explaining each selection. 8. Select Details next to the DSM Name Microsoft DSM 9. On the next page is an explanation of each of the settings available and there role. 10. Tick the check box Path Verify Enabled
UC434S F.00
L5.3 3
Setting PathVerifyEnabled
Definition Flag that enables path verification by MPIO on all paths every N seconds (where N depends on the value set in PathVerificationPeriod). Type is boolean and must be filled with either 0 (disable) or 1 (enable). By default, it is disabled.
PathVerificationPeriod
This setting is used to indicate the time period (in seconds) with which MPIO has been requested to perform path verification. This field is only honored if PathVerifyEnabled is TRUE. This timer is specified in seconds. The default is 30 seconds. The maximum allowed is MAXULONG.
PDORemovePeriod
This setting controls the amount of time (in seconds) that the multipath pseudo-LUN will continue to remain in system memory, even after losing all paths to the device. When this timer value is exceeded, pending I/O operations will be failed, and the failure is exposed to the application rather than attempting to continue to recover active paths. This timer is specified in seconds. The default is 20 seconds. The max allowed is MAXULONG.
RetryCount
This setting specifies the number of times a failed I/O if the DSM determines that a failing request must be retried. This is invoked when DsmInterpretError() returns Retry = TRUE. The default setting is 3. This setting specifies the interval of time (in seconds) after which a failed request is retried (after the DSM has decided so, and assuming that the I/O has been retried a fewer number of times than RetryCount). This value is specified in seconds. The default is 1 second.
RetryInterval
L5.3 4
UC434S F.00
Multi-Path Management
11. Highlight a path in the This device has the followingpaths and click Edit
12. From the new window MPIO Path Details notice there are only two options available, select Active/Optimized.
13. If you return to Select the MPIO policy and change the policy to other options, such as failover or weight and return to the path failover and weight can be configured. 14. Click OK to close the MPIO. 15. Within Windows 2008 R2 there are different methods to launch the MPIO manager. 16. Open the Device Manager and select the Multi-Path Disk Device
17. Right Click the highlighted path right click Properties and select the MPIO tab.
UC434S F.00 2010 Hewlett-Packard Development Company, L.P.
L5.3 5
Accelerated SAN Essentials 18. Set all paths to Round Robin With Subset
L5.3 6
UC434S F.00
Fabric Zoning
Module 6 Lab 1
Objectives
After completing this lab, you should be able to:
Create, configure, establish, and modify zones on a single switch. Create a configuration using only domain/port identifiers. Create a configuration using only Worldwide Name (WWN) identifiers. Create a configuration that mixes Domain/port and WWN identifiers.
Requirements
Before proceeding with this lab, verify the following: Confirm that your hosts and disk array are connected and logged in to the fabric. Consider the nsshow or switchshow commands.
UC434S F.00
L6.1 1
Domain/port zoning
1. From your first switch, connect using Telnet. Note what your Domain ID is for this switch, and the active ports. # switchshow 2. 3. From the previous commands two ports are configured as E_Ports.
What are these ports ? ____________________________________ So that each delegate is able to create their own zones we will need to isolate the two switches from one another, so creating two fabric. Disable the E_Ports by using the following command: Portcfgpersistentdisable 0 Portcfgpersistentdisable 1 This is to ensure that the two switches remain independent from each other, even during reboots. Create aliases for ports 3-7 using hard addresses. (Domain, port numbers). ali_portx_BL20-3xx is a name use your devices to uniquely identify youralicreatswitchshow alias. # alicreate ali_port3_msap1, [your switch domain ID],3 # alicreate ali_port4_bl20_362, [your switch domain ID],4 # alicreate ali_port5_bl20_363, [your switch domain ID],5 # alicreate ali_port6_rp34_236, [your switch domain ID],6 # alicreate ali_port7_msap2, [your switch domain ID],7 Note that you should use the Domain_ID of YOUR switch!
Important Aliases are case-sensitive. They can greatly simplify the administrative process; however, they are not required to define zones.
4.
5.
Create a zone for your storage and Unix host and your two MSA ports
# zonecreate "unix_zone1"," ali_port6_rp34_236;ali_port3_msap1; ali_port7_msap2"
2010 Hewlett-Packard Development Company, L.P. UC434S F.00
Fabric Zoning
7.
8. 9.
12. From the information you see, and from what you have learned about zoning, do you see any problems with the configuration? ................................................................................................................. .................................................................................................................
Adding to a configuration
When zoning is disabled, the fabric is in a allAccess mode and devices can freely access other devices in the fabric. You can determine the status of this behavior using the command: defZone --show. When zoning is enabled, zoning is enforced throughout the fabric and devices can communicate only within their zones.
Note After zoning is enabled, if a device is not defined in a zone, that device will exist in a zone all by itself. The device will be isolated and be inaccessible to other devices in the fabric.
1.
UC434S F.00
L6.1 3
5.
You will now create a new alias for port 5, which contains the second windows server. a) Select the alias tab b) New Alias , enter a name e.g ali_port5_bl20_236 c) Under the Members Selection list, expand the Ports & Attached Devices, and expand the folder underneath. Locate port 5 and add as a member to your alias you have just created.
6.
You will now create a new zone named win_zone2 that includes ports 3,5 and 7, for the second windows server and its storage. a. b. Click New Zone. Enter win_zone2 and click OK.
L6.1 4
UC434S F.00
Fabric Zoning
c.
Confirm that win_zone2 is selected in the Name field, and in the Member Selection List column expand Aliases holding down the control key select your new alias and the two msa aliases and click Add Member.
7. 8. 9.
Create a new configuration file including the new zone and the two created through the cli session. Select the Zone Config tab. Create a New Zone Config called guicfgport.
10. Add the new zone and the two zones created through the cli form your Zones list to the guicfgport configuration. 11. Click the Enable Config button and select guicfgport from the resulting list. Click OK and, when prompted, answer the default messages.
UC434S F.00
L6.1 5
L6.1 6
UC434S F.00
Fabric Zoning
3.
Please ensure that you have completed the 3 steps in this section
UC434S F.00
L6.1 7
L6.1 8
UC434S F.00
iSCSI
Module 8 Lab 1
Objectives
During this lab exercise you will: Launch your VSA nodes Install the Centralized Management Console Create a Management Group and a Cluster Create an iSCSI volume Install the Microsoft iSCSI initiator Present the volume to your host Mount a filesystem on the volume.
UC434S F.00
L8.1 1
Storage nodes
Your Virtual Storage Appliances (VSAs) will pick up a host-only IP address when they start up. 1. In the C:\VSA\scripts\ directory on your host locate the VSAlaunch.cmd script and double click it. This script will launch 3 instances of VMWare Player each hosting a separate VSA. These are required to run for the duration of this exercise but you can minimize them as you do not interface with them directly. These Virtual Machines will simulate three P4000 storage nodes. Open a cmd.exe window (Start Run type cmd). Ascertain the IP addresses in use on your system by typing ipconfig. Examine the output for Ethernet adapter VMware Network Adapter VMnet1: and document the IP address and Subnet Mask below. This subnet is where the IP addresses of the VSAs will be discovered. IP Address _______________________________________________ Subnet Mask ____________________________________________ 3. Close the cmd.exe window.
2.
Software installation
This exercise provides experience with installing the Centralized Management Console. 1. Find the CMC installation file provided by your instructor and double-click on autorun.exe to start the Management Software Install manager. If you are using the HPVL you can locate the file at: Z:\iscsi\cmc\autorun.exe. You will first need to accept the license agreement. Click Centralized Management Console in the left pane and then Install CMC as pictured.
2.
L8.1 2
UC434S F.00
iSCSI
3. 4. 5. 6. 7. 8. 9.
When the installer starts, examine the Installation steps that are listed on the left side of the Introduction screen and click Next. Use the Radio button to accept the License Agreement and click Next. Select Typical install and click Next. Accept the default installation path and click Next. Make sure that you leave Create a shortcut to your desktop selected and click Next. Make sure that you leave the default to Start the Centralized Management console after installation selected and click Next. Examine your selections on the Installation Summary and click Install. The installation proceeds.
L8.1 3
b. c. d. e.
Select search By Subnet and Mask (global broadcast) and click Next. Click Add and enter your subnet (that you documented in an earlier step) for the storage modules and click OK. Click Finish. The Wizard should display all the storage nodes in the subnet. Click Close.
3.
In the Navigation Pane, click the + next to Available Nodes to expand all the available storage modules. Click the + next to the module to expand the configuration list for that storage module. Select your Storage Node and record the following information from the Content Pane:
4.
L8.1 4
UC434S F.00
iSCSI
VSA-1
Host Name: _____________________ IP Address: ___________________________ Model: _________________________ Software Version: _______________________
VSA-2
Host Name: _____________________ IP Address: ___________________________ Model: _________________________ Software Version: _______________________
VSA-3
Host Name: _____________________ IP Address: ___________________________ Model: _________________________ Software Version: _______________________
UC434S F.00
L8.1 5
If you have no NTP server, complete the following steps: a. b. Select the Manually set the time radio button If the time is set correctly, click Next. If it is not set correctly click the Edit button, change the time, click OK, and click Next.
You have configured your Management Group. You will now create your Cluster for Storage. 1. 2. 3. Select Standard Cluster and click Next. Provide your Cluster with a meaningful name and click Next. Click Add to set the Virtual IP Address for the cluster. This will be on the same subnet as your nodes and must not already be allocated to a device. You have documented the Node IP addresses already. As a suggestion you should try 192.168.xxx.200 (where xxx is the third octet of your VMNet1 IP address).
2010 Hewlett-Packard Development Company, L.P. UC434S F.00
L8.1 6
iSCSI
4. 5. 6. 7.
Enter the Virtual IP address and subnet and click OK. Click Next Check the Skip Volume Creation box and click Finish. The status bar will appear showing that the storage module is being added into the Management Group and Cluster. Once it finishes it will wait for the storage module to reboot. Do not cancel out of this process; wait for the storage module to come back up. You will need to OK several warning messages regarding licenses and registration. Please do so when asked. The VSA modules have not been licensed prior to this installation. Click Close after your Management Group and Cluster is created.
8.
9.
Create Volume
A volume is analogous to a LUN. It can be used as raw data storage or it can be formatted with a file system and used by an application server or file server. 1. 2. Right-click your Cluster in the Navigation Pane and select New Volume. On the Basic tab of creating a new volume supply the volume the following information: a. b. c. 3. Meaningful Volume name Description if desired Volume Size 5 GB (this is the volume size the application server will see)
On the Advanced tab of creating a new volume, supply the volume the following information: a. b. c. d. Cluster select your cluster name Replication Level -- 2-way will do for now Type - Primary Provisioning -- select Thin
4.
Click OK.
UC434S F.00
L8.1 7
L8.1 8
UC434S F.00
iSCSI
8.
A new pop up window displaying the iSCSI Initiator properties will appear. Click the configuration tab and record the initiator name
Record your Initiator Name: __________________________________________ 9. Leave the initiator display open
UC434S F.00
L8.1 9
4. 5.
9.
Click OK
10. Select the Target Tab and Click connect 11. Confirm connection to target by Clicking OK.
L8.1 10
UC434S F.00
iSCSI
2.
3.
UC434S F.00
L8.1 11
L8.1 12
UC434S F.00
System Requirements
Ensure ISL links are enabled Windows 2003 Server, 2 GHz, 1G Ram
Data Center Fabric Manager Enterprise edition is on a 75 day trial license, the latest version being 10.1-4. There is also a Data Center Fabric Manager Professional edition but it does not provide all the functionality of the Enterprise edition.
UC434S F.00
L11 1
6. 7. 8. 9.
Read the agreement on the License Agreement screen, select I accept the terms of the License Agreement and click Next. Select the location for your systems application files C:\Program Files\DCFM 10.1.4 on the Select Install Folder screen and click Next. Review the displayed installation summary on the Pre-Installation Summary screen and click Install.
L11 2
UC434S F.00
10. Make sure the Launch DCFM Configuration check box is selected (default) on the Installation Complete screen, and click Done. 11. Click Next on the Welcome screen. 12. Select No on the Copy Data and Settings screen and then click Next.
13. On the license page, leave the entries blank and click Next.
UC434S F.00 2010 Hewlett-Packard Development Company, L.P.
L11 3
14. Select External FTP Server on the FTP Server screen and click Next. 15. Complete the following steps on the Server IP Configuration screen.
L11 4
UC434S F.00
Ensure Client Server IP configuration return address is the name of the server where DCFM is installed and the preferred address is the 192.x.x.x network. Click Next.
16. Accept all defaults on the Server Port Configuration screen 17. If a message appears saying the port is in use increment the number by one. e.g port 80 is in use enter 81
18. Next 19. Select Small for the SAN size and then Next.
UC434S F.00
L11 5
20. Verify your configuration information on the Server License Summary screen and click Next. 21. Select the Start Client check box on the Start Server screen.
L11 6
UC434S F.00
User ID Password
Administrator password
Setting up discovery
To discover specific IP addresses or subnets, complete the following steps. 1. Select Discover > Setup. The Discover Setup dialog box displays. Click on add, and a new window appears with a heading of Address Properties.
UC434S F.00
L11 7
2. 3.
Enter the details of Fabric name the IP address of one switch in your labgroup, and admin and password, and then click OK. Once the switches are discovered a display similar to this will be seen.
Close the Discover Setup window and return to the main DCFM window.
L11 8
UC434S F.00
The Data Center Fabric Manager that has been installed is a 75 day trial version, as such major features are disabled.
In your Topology map or the navigation to the left select one switch so it is highlighted in blue. 1. 2. 3. 4. Set View Show Panels All Panels In the topology view select one of your switches Double click a switch in the topology what happens? From the Configure menu Element Manager a. Select Hardware What does this do? .. Under Port Admin disable Port 3, check DCFM what has changed? 5. Within DCFM return to Configure menu Element Manager a. Select Port What does this do? ..
L11 9
UC434S F.00
Re-enable port 3 Check DCFM has port 3 come back on line? 6. Within DCFM return to Configure menu Element Manager and this time
a. Select Admin
What does this do? .. Perform a configupload of you latest configuration 7. Configure Switch Save from the available switches select your SAN, check both switches are in the selected switch pane and then click ok.
8. 9.
Select configure Switch Configuration Repository Highlight one of your switches, do not tick the box and select View
10. What do you have? 11. Create a Schedule to capture you switch configurations every day at 10:300 12. Configure - Zoning What does this do? .. Generate a report of the zone configuration, view the report that is generated and then save it as a pdf to your local drive, and view the result.
L11 10
UC434S F.00
On the same page there is a Zone DB Operation select the Compare option
Where could we have used this option? Selected merge and save 1. 2. 3. From within DCFM open the web browser to one of the switches. Select switch admin and record the name of the switch. Change the name of the switch to match the other switch in your san including case sensitivity. Configure - Names What does this do? ..
UC434S F.00
L11 11
a) Select Fix Duplicates and Record the suggestions that the DCFM has made. b) Select I will fix them myself and ok c) Return to your switch and return it to its original name.
Add in the following accounts: User ID Rita Description as Zone administrator and a password of hp User ID Sue Description as Operator and a password of hp User ID Bob Description as Security Officer and a password of hp 2. Add each to their relevant resource group roles.
L11 12
UC434S F.00
3.
and Click OK
4. 5. 6.
Exit DCFM and logon with each account in turn. You will notice that the topology view is different. Can Rita a) set up users, b) generate reports, c) configure zoning
7.
logout of DCFM and logon as Sue, Sue has the operator account. a) Can she set up users. b) generate reports c) configure zoning
UC434S F.00
L11 13
8.
Logout of DCFM and check the account status of Bob a) Can he set up users. b) generate reports c) configure zoning
9.
Once the report is finished a fabric summary report will be automatically displayed, Export to your local drive as a pdf document and review report.
L11 14
UC434S F.00
Fabric security
Module 12 Lab 1
Objectives
After completing this lab, you should be able to:
Configure a port type Configure a port name Create a Switch Connection Control policy Create a Device Connection Control policy Create new switch user accounts
Requirements
To complete this lab, you need:
Telnet and Web Tools access to a B-series switch running firmware 6.1.0 or later.
UC434S F.00
L12 1
Configuring ports
To configure the switch, you will use Web Tools and a Telnet session. HP recommends that you leave each connection tool open and switch between the tools as required.
Port types
Before continuing, it is necessary that you can identify the different types of ports. 1. What is an L_port? ................................................................................................................. 2. What is an E_port? ................................................................................................................. 3. What is an N_port? ................................................................................................................. 4. What is an NL_port? ................................................................................................................. 5. What is an F_port? ................................................................................................................. 6. What is an FL_port? ................................................................................................................. 7. What is a G port? ................................................................................................................. 8. What is a EX_port? ................................................................................................................. 9. What is a VE_port? ................................................................................................................. 10. What is a VEX_port? ................................................................................................................. 11. What is a M_port? ................................................................................................................. 12. What is a TE_Port? .
L12 2
UC434S F.00
Fabric security
2.
Using Web Tools, from the Switch Admin window of your first switch, click the Ports tab. As seen in the previous lab, you can gather port configuration information and port status from this view. View the output from the portflagsshow command and compare it with portcfgshow.
3.
UC434S F.00
L12 3
L12 4
UC434S F.00
Fabric security
2.
3. 4. 5.
Using Web Tools, from the Switch Admin window, click the Ports tab. Scroll to the right until you see the Port Name column. Notice that the name of port 0 has been changed to W2K3_HBA. Using Web Tools, name the other ports that are connected to your switches by double-clicking the appropriate field to edit the name. Configure the port names for all connected devices on both switches. Click Apply Yes. To help confirm and verify the ports by identifying the devices including a HP-UX host and the host ports of an EVA, perform the next exercise.
UC434S F.00
L12 5
Deny E-port
You may wish to configure ports in your fabric to deny an ISL connection. You can achieve this with the portcfgeport command. Why might you wish to do this? _________________________________________________________________________ _________________________________________________________________________ _________________________________________________________________________ _________________________________________________________________________ 1. You should have two E-ports (ports 0 and 1) which connect your edge switch to the other edge switch.
2. What will happen to the fabric if you issue a command to prevent these two ports from functioning as E-ports? _________________________________________________________________________ _________________________________________________________________________ _________________________________________________________________________ _________________________________________________________________________ 3. Use the command portcfgeport #,0 to invoke this denial for both of your E-ports. What is the switchshow output when this has been completed? ______________________________________________________________________ ______________________________________________________________________
L12 6
UC434S F.00
Fabric security
4. Use the Web Tools port configuration wizard to re-enable E-port status.
UC434S F.00
L12 7
These policies are part of a larger security set of policies known as Access Control List (ACL) policies which includes FCS (controlling which switches can make configuration changes within the fabric) and IPFilter (filtering management traffic according to IP address and TCP/UDP port).
L12 8
UC434S F.00
Fabric security
2. Using the web tools interface, open the Switch Admin window and navigate to the Security Policies tab (you will need to switch to Show Advanced Mode to see this tab).
3. Ensure Accept Distribution is set to Yes, this will need to be performed on both switches.
4. Click Edit and you will see the ACL Policy Configuration Wizard. If you clicked from the SCC sub-tab then you should see the SCC box checked. Click Next. 5. In the SCC Policy Configuration display tick the check box
UC434S F.00
L12 9
6. Next. 7. Click Finish to save the policy. 8. The policy is saved but no yet activated. Click Activate to do this and then confirm.
L12 10
UC434S F.00
Fabric security
9. You can see the Active Policy Set members in web tools and the command line:
UC434S F.00
L12 11
3. Click Next and then Finish to return to the Security Policies tab. 4. Click Activate and then OK to confirm. Your policies are now active. 5. Telnet to both switches and check the security policies have been activated on both switches. Run the secPolicyShow command to verify. 6. If the policies are not present on the second switch enter the following commands from the switch which has the SecPolicy set. 7. Switchshow Record the domain Id Record the name of the switch 8. Fabricshow Record the Domain Id and name of the other switch 9. To distribute the SecPolicy scc Distribute p scc d <domain id or switch name of the switch which does not have the scc policy set> e.g. distribute p scc d 1 e.g distribute p scc d EdgeA1
L12 12
UC434S F.00
Fabric security
10. To distribute the secpolicy dcc Distribute p dcc d <domain id or switch name of the switch which does not have the dcc policy set> e.g distribute p dcc d 1 e.g distribute p dcc d EdgeA1 11. telnet to the second switch and confirm that the scc and dcc policies have been distributed to the second switch now.
5. Click OK 6. The new account will now displayed in the Switch User Account 7. Highlight the new account and select Set Password Rule
UC434S F.00
L12 13
9. Click OK 10. Create a new account for Sue and give this account the Zone admin role and a password of password. Set this account for an Admin Domain of AD0. 11. Notice because we defined the password rules these are automatically added to this new account. 12. Click Apply and view the summary page. 13. Click Yes to confirm 14. What are the expiry dates for these two new accounts? ------------------------------------------------------------15. Logout of the switch and reconnect as Rita. 16. Select Switch Admin User 17. Can Rita add users? .. 18. Can Rita disable the switch and ports? ...
L12 14
2010 Hewlett-Packard Development Company, L.P. UC434S F.00
Fabric security
19. Launch Zone admin can Rita configure zoning? . 20. Log out from the switch and reconnect as Sue 21. Select Switch Admin User 22. Can Sue add users? 23. Can Sue disable the switch and ports? .................. 24. Can Sue launch Zone admin to configure zoning? . . 25. Log out of the switch and launch a telnet session 26. Logon as Rita 27. Can Rita disable the zoning configuration? . 28. Log out of the switch and reconnect using a telnet session as Sue 29. Can Sue issue the Portcfgpersistentenable 0 command? . 30. Log out of the switch and reconnect using the admin account 31. Enter the command userconfig - -show a 32. The following example creates new user account Bob with an admin role, access to all Admin Domains (AD0 through AD255), and home Admin Domain set to 255. Enter the following command at add a new admin account. userconfig - -add Bob -r admin -h 255 -a "0-255" 33. When prompted for a password enter password 34. Verify password. This user account is now a physical fabric administrator. 35. Logout of the switch and reconnect using telent as Bob 36. Enter Userconfig - - Show a 37. to view a specific account enter userconfig - -show Rita 38. To change a user role enter the following command for the Rita account. userconfig - -change Rita -r operator 39. Enter userconfig - -Show Rita what is a new role? 40. To delete and account. Enter userconfig - - delete Sue 41. On the confirmation prompt type in y 42. enter userconfig - - show Sue as it been deleted.
UC434S F.00 2010 Hewlett-Packard Development Company, L.P.
L12 15
43. Delete the Rita account 44. Logout of telnet and launch the web browser for the switch. 45. Login as Admin 46. Select Switch Admin user 47. Highlight the Account of Bob and select Modify and make this account a basic switch admin and apply. Confirmation action by clicking yes.
48. Highlight the account Bob and click remove and apply.
L12 16
UC434S F.00
Objectives
After completing this lab, you should be able to: