Home
HP 4Gb User's Manual
Contents
1. Add j OK Cancel Help Email Event Notification Setup Figure 26 Server Users dialog box Adding a user account To add a user account 1 Select SAN gt Users The Server Users dialog box is displayed Figure 26 2 Click Add The Add User dialog box is displayed Figure 27 Name Email Address o aj User ID Password Email Enable Filter Retype Password Cancel Help Figure 27 Add Edit User dialog box 64 Managing the HAFM application 7 Enter the user information in the following boxes Name e Email Address separating multiple addresses with a semicolon User ID e Password e Retype Password Select Enable to enable e mail notification for the user A message can display stating that you must enable event notification for the SAN Click Yes Click the Filter link to specify the event types for which to send e mail notifications to this user See Filtering event notifications for a user on page 66 for details Click OK The new user is displayed in the Server Users dialog box Click OK Changing a user account To modify a user account 1 Select SAN gt Users The Server Users dialog box is displayed Figure 26 on page 64 2 Select the user whose information you want to edit 3 Click Edit The Edit User dialog box is displayed Figure 27 on page 64 4 Edit the information as necessary 5 Click OK The edited
2. ok cancet Help Figure 64 Select Template dialog box E NOTE You can generate a report of the Physical Map by clicking Generate Reports or pressing Ctrl G on the right hand toolbox while viewing a discovered SAN 2 Select the type s of reports you want to generate 3 Click OK The generated reports are automatically displayed in the Reports dialog box 4 To print the report a Click Show in Browser The selected report is displayed in your default web browser b Select File gt Print in the web browser c Close the web browser and the Reports dialog box HA Fabric Manager user guide 107 EY NOTE Hyperlinks in reports are active as long as the source data is available Viewing reports You can view reports through the application or through a web browser Reports are stored in Install_Home Server Reports 1 Select Monitor gt Reports gt View The Reports dialog box is displayed Figure 65 2 HAFM 8 7 1 Reports Ol x lt gt Show in Browser Delete Report Help 4 an Reports gt Performance Data Aug 20 2005 4 52 09 PM EDT Sep 19 2005 By Report Type By User Ba By Time B sep 19 2005 4 52 07 PM ED D PerformanceData_gary_ Summary Server HAFMSERVERS7 IP address 16 129 91 119 There are total 16 switch ports and 7 switches that have been monitored for th for performance data The port that has gone beyond the normal range in threshold
3. gt Master Log Define S Legend Fg K Minimap a 9 Level Source Type Description A 100008008 Product Evert Fan status polling tempor Q 100008008 Product Evert A cooling fan propeller h 9 100008008 Product Evert A cooling fan propeller h 100008008 Product Event A cooling fan propeller h 30 t0 100 60 to 80 4010 60 2010 40 Oto 20 0 E Figure 8 HAFM window Accessing the HAFM application remotely Users at remote PCs can access the HAFM application and Element Managers loaded on the appliance if the following criteria are met The remote workstation meets minimum hardware and software requirements see Configuring remote workstations on page 257 The HAFM client application is running If you need to install the HAFM client application see Configuring remote workstations on page 257 The remote system is configured to connect with the HAFM appliance over a TCP IP network connection No more than seven other remote users are currently logged in to the HAFM application Operators at remote workstations can manage and monitor all products controlled by the HAFM appliance Each active connection between a remote workstation and an HAFM appliance and managed product is called a session To access the HAFM appliance from a remote workstation perform the following HA Fabric Manager user guide 39 1 If the H
4. LUN masking failed on Symmetrix systems To perform LUN masking the EMC Solutions Enabler Configuration Manager License must be installed Port Binding failed on Symmetrix systems To perform Port Binding the EMC Solutions Enabler Configuration Manager License must be installed HA Fabric Manager user guide 207 Table 27 Address problems and resolutions continued Problem Resolution The LUN Management box is Verify that the application has finished collecting LUN displayed as empty data before opening the LUN Management dialog box On Symmetrix systems e Verity that the WideSky API is not installed on the system running the HAFM appliance gt Verify that the SYMAPI server is running and can be contacted from the system running the HAFM appliance gt Verify that the system running the SYMAPI server is running and is connected to a Symmetrix port through in band 208 Troubleshooting Table 27 Address problems and resolutions continued Problem Resolution LUN Management is not available on HP UX systems The LUN management feature is not currently supported on HP UX systems It is only available on Windows Solaris and AIX systems Encountering errors when performing LUN management on HDS systems 1 Make sure the HiCommand Device Manager server is online 2 Ensure that communication between HiCommand Device Manager and the storage array is intact When t
5. CN CCC CS Error removing zone or The HAFM application Try the operation again If the zone member encountered an internal problem persists contact the next error level of support Error transferring files An error occurred while Try the file transfer operation lt message gt transferring files from the again If the problem persists PC hard drive to the contact the next level of support HAFM application The message varies depending on the problem Fabric Log will be lost When you unpersist a Click Yes to unpersist the fabric or once the fabric unpersists fabric the corresponding No to cancel the operation Do you want to continue fabric log is deleted Fabric member could not A fabric member does not Ensure the product is incorporated be found exist when the application into the fabric and retry the prepared to find a route operation If the problem persists find a route node or contact the next level of support gather route information on that fabric member Fabric not persisted You attempted to refresh Click OK to continue Ensure the or clear the log aftera fabric is persisted before fabric was unpersisted attempting to refresh or clear the When you unpersist a Fabric Log fabric the corresponding fabric log is deleted Field cannot be blank The data box requires an Enter appropriate information in entry and cannot be left the data box blank File transfer aborte
6. Mails the exported files as an e mail attachment directly from the application 3 Select the types of files that you want to export from the Files check boxes Depending on the export destination you selected in the previous step some file types may not be available 52 Using the HAFM application 4 Performance data is an optional feature If you purchased this option you can select the switches for data export Figure 20 You have selected to export performance data By default HAFM 8 will include data tor all switches By limiting the number of switches you can reduce the size of the export file Select Switches tor Performance Data Nickname JIP Address Node Name File Size 16 129 91 93 100008008840406F 2 574 16 129 91 83 1000080088405456 1 295 UnSelect All 16 129 91 115 1000080088405260 5 406 16 129 91 111 1000080088407C64 654 KB 16 129 91 116 100008008860308C 912KB Select All SIS Only include files of last v Hour v Day v Week w Month y Year v Max Apply to All OK Cancel Help Figure 20 Select Switches dialog box EY NOTE You can click Select All to include all switches or you can click Unselect All to remove all switches a Select the check box for each switch that you want performance data for b Select what you want from the Only include performance files of last check boxes c Click Apply to All if you want the information selected in step 4b to
7. Newer versions of HAFM or Element Managers installed on the HAFM appliance are automatically downloaded when the remote client logs in to the appliance Installation procedure To install HAFM on a remote workstation 1 2 3 Obtain the HAFM appliance address from your network administrator Open a web browser Enter the HAFM appliance address in the Location or Address box of the browser and then press Enter The HP StorageWorks HAFM page is displayed Click Begin Solaris Installation to begin the installation process If you have read the security agreement information and wish to continue click Yes The HP High Availability Fabric Manager Available Installers page is displayed Figure 15 Click Download The File Download dialog box is displayed Figure 116 HA Fabric Manager user guide 261 7 Click Open The system begins downloading the HAFM installer When the download is complete the Introduction window is displayed EY NOTE Atany time you can return to the previous page by clicking Previous or quit the installation by clicking Exit 8 Click Next The License Agreement window is displayed 9 If you have read the license agreement and agree to accept the terms click accept the terms of the License Agreement 10 Click Next The Important Information window is displayed 11 Click Next The Choose Install Folder window is displayed 12 Perform one of the following actions to sel
8. You attempted to add a detached switch to the Fabric Membership List through the Fabric Binding option SANtegrity Binding feature but an entry already exists in the Fabric Membership List with the same WWN The maximum number of zone members that can be defined was reached The HAFM application version running on the HAFM appliance differs from the version running on the remote workstation client A compatible version must be downloaded from the HAFM appliance Configured user rights do not allow this operation to be performed An SMTP server address must be defined and configured for e mail to be activated At least one e mail address must be defined and configured for e mail to be activated At least one IP address for a remote workstation must be contigured for a remote session to be activated Sa ey Enter a unique WWN for the switch in the Add Detached Switch dialog box Delete an existing zone member before adding a new zone member Download a compatible version of the HAFM application to the remote workstation client using the web install procedure Verify user rights with the customer s network administrator and change as required using the Configure Users dialog box Define the SMTP server address at the Configure E Mail dialog box Define an e mail address at the Configure E Mail dialog box Define an IP address for at least one remote workstation at the Remote Access
9. setlocal pushd dp0 call bin set_cp bat rem HAFM Server start SJAVA_HOME bin HAFMServer exe server Xmx512m Xminf 15 Xmaxf 35 classpath S CLASSPATH Dsmp Mp max 512 Dsmp autodiscovery false Dsmp mpi test Dsmp deployment prefix Server Dsmp zoning legacy Dsmp zoning wait timeout 180000 Dsmp webServer Dsmp registry port XXXX Dsmp flavor APP_FLAVORS Server rem HAFM Server Debug Mode rem start SJAVA_HOME bin HAFMServerD exe server Xmx512m Xminf 15 Xmaxf 35 classpath CLASSPATH Dsmp Mp max 512 Dsmp autodiscovery false Dsmp mpi test Dsmp deployment prefix Server Dsmp zoning legacy Dsmp zoning wait timeout 180000 Dsmp debug Dsmp webServer Dsmp registry port XXXX Dsmp flavor APP_FLAVOR Server Client rem HAFM Client start JAVA_HOME bin HAFMClient exe Xmx256m Xminf 15 Xmaxf 35 classpath CLASSPATH Dsun java2d noddraw true Dsmp fabricPersistenceEnabled true 198 Configuring HAFM through a firewall Dsmp Mp max 256 Dsmp deployment prefix Client Dsmp registry port XXXX Dsmp flavor APP_FLAVOR Client rem HAFM Client Debug Mode rem start JAVA_HOME bin HAFMClientD exe Xmx256m Xminf 15 Xmaxf 35 classpath S CLASSPATH Dsun java2d noddraw true Dsmp fabricPersistenceEnabled true Dsmp Mp max 256 Dsmp deployment prefix Client Dsmp debug Dsmp registry port XXXX Dsmp flavor APP_FLAVOR S Client end ioe J popd endlocal HAFM_c bat Th
10. Only one zone set can be active By enabling the selected zone set the current active zone set will be replaced While viewing routes the HAFM appliance was unable to connect to the switch The switch failed or the switch to HAFM appliance Ethernet link failed The HAFM application encountered an internal error The HAFM application encountered an internal error The HAFM application encountered an internal error The HAFM application encountered an internal error The HAFM application encountered an error while trying to read the log E Modify to make it unique or delete the selected WWN Delete one of the duplicate zones from the zone set Delete one of the duplicate zone members from the zone Close the Element Manager then delete the product Click OK to continue or Cancel to end the operation Try the operation again If the problem persists contact the next level of support Try the operation again If the problem persists contact the next level of support Try the operation again If the problem persists contact the next level of support Try the operation again If the problem persists contact the next level of support Try the operation again If the problem persists contact the next level of support Try the operation again If the problem persists contact the next level of support HA Fabric Manager user guide 221 Table 30 HAFM Messages continued
11. on page 51 or see the HAFM online help EY NOTE Currently you can export only to the same versions of the application Monitoring port performance You can monitor the performance of switch ports devices in the SAN using the port performance graph The graph also shows information about transmit and receive performance To monitor port performance 1 Right click a switch icon on the Physical Map and select Performance Graphs The Performance Graph dialog box is displayed Figure 82 Select a port row and click History Events or double click a port row to display the Port Performance Graph dialog box Figure 83 Measure MB sec Transmit z Time Range 1Week v Histogram Display 201 101 o Jan 16 Jan 17 Jan 18 Jan 19 Jan 20 Jan 21 Jan 22 Jan 23 Show Trends Linear Display Threshold Crossings Set Event Thresholds Running Average _ Display High x none gt C Apply to All Ports 0 4 hour 7 A snone b 89 Low A snone gt El 9 none gt OK Cancel Help Figure 83 Port Performance Graph dialog box 3 Select options from the following lists to customize the performance graph Measure Assigns a unit of measure for the graph Time Range Selects a time range HA Fabric Manager user guide 135 e Histogram Display Shows the percentage of trunk utilization over a period of time Move the Histogram slide bar to change the period of time displayed Linear Display Shows a linear average of the
12. zone members listing 159 removing from zones 152 zone sets activating 152 comparing 160 creating 151 deactivating 153 deleting 158 duplicating 158 exporting 155 importing 156 naming conventions 148 properties viewing 159 removing zone 152 296 renaming 157 zones creating 150 deleting 158 finding in zone sets 159 naming conventions 148 properties viewing 159 removing 152 renaming 157 zoning naming conventions 148 steps 148 zooming in 47 zooming out 47
13. 11 Click Next The Choose Install Folder window is displayed 12 Perform one of the following actions to select a folder on the remote workstation in which to store the HAFM software e Accept the default location e Enter the path to a new location e Click Choose to browse for an appropriate location e Click Restore Default Folder to change the location back to the default folder 13 Click Next 14 If HAFM is already installed on the system you are prompted to uninstall the existing version If you want to uninstall the existing software click Yes and press Next 15 When the Uninstall HAFM window is displayed click Uninstall 16 When the Uninstall Complete window is displayed click Quit The Choose Shortcut Location window is displayed 17 Select a shortcut location The options for the location of HAFM icons are In a new Program Group Adds a new program group on the Start menu for HAFM e In an existing Program Group Enables you to select from existing program groups on the Start menu for HAFM e In the Start Menu Puts the HAFM icon on the initial Start menu e On the Desktop Puts HAFM icons on the Windows desktop e Other Enables you to choose any location on your hard drive or network for HAFM files Don t create icons Prevents the installation from creating an icon for HAFM You can enable the Create Icons for All Users box for some of the shortcut options but not alll If you select the check box t
14. Local Only Local Only Local Only Local Only hterface V Enable BAS Method Local Only V Enable Telnet Method Local Only C SSH Permited Users User Role ENS Tenet Administrator Adhiristreto Vi v Operator OperatorRole v Y Pe be Y ARMSERVERGT tes 1 gary Figure 100 Security Center Displaying the Fabrics list The Fabrics list displays all discovered fabrics listed by their WWNs with their operational status on the left side if the status is available When a fabric is selected from the left side all switches within the fabric are displayed in the top table This includes devices not managed by this HAFM appliance and offline devices Although all devices display only HP products managed by the HAFM appliance can be configured These products display with their corresponding product icon These are the same icons shown on the topology map If an HP product is not managed by the HAFM appliance the product displays a generic icon If the product is offline a customized product icon is displayed with a unknown operations status icon HA Fabric Manager user guide 165 EY NOTE Ifa device is managed by the HAFM appliance when the device displayed on the Security tab is offline or loses a MPI link the previously discovered value can still display in the top table If this switch is selected a blank area is displayed in the bottom pane with an error message
15. Retry the operation later If the condition persists contact the next level of support Retry the operation later If the condition persists contact the next level of support Retry the operation later If the condition persists contact the next level of support Table 31 Cannot retrieve port statistics Cannot retrieve switch date and time Cannot retrieve switch state Cannot run diagnostics on a port that is failed Cannot run diagnostics on an active E port Cannot run diagnostics on a port that is not installed Cannot run diagnostics on a port card that is not installed Element Manager messages continued peo ee Port statistics cannot be retrieved by the Element Manager because the Ethernet link is down or busy The director or switch date and time cannot be retrieved by the Element Manager because the Ethernet link is down or busy The director or switch state cannot be retrieved by the Element Manager because the Ethernet link is down or busy Port diagnostics loopback tests cannot be performed on a port that has failed any previous diagnostic power on diagnostic online diagnostic or loopback test The amber LED associated with the port illuminates to indicate the failed state Port diagnostics cannot be performed on an active E port Port diagnostics cannot be performed on a port card that is not installed Port diagnostics loopback tests cannot be
16. Selecting a customized view of the main window See Creating a customized view on page 83 to specify which information you want to display on the main window To select a customized view click the View tab and then select the view name from the menu Accessing the HAFM application You can access the HAFM application in one of two ways Log in from a local browser capable PC connected through an Ethernet LAN segment Log in remotely with an HAFM client application Accessing the HAFM application locally 36 You can log in to the HAFM application located on the HAFM appliance from a PC connected through an Ethernet LAN segment 1 2 Launch the browser application Netscape Navigator or Internet Explorer from the PC Enter the URL in the following format http xXxXx xXxXX XxXxX xxx 5800 xxx xxx xxx xxx is the default IP address or the IP address configured for the appliance during installation Using the HAFM application The VNC Authentication window is displayed Figure 5 Disconnect Options Eipbosra Send Cara Retest VNC Authentication Password DK Figure 5 VNC Authentication window 3 Enter the password and click OK The Welcome to Windows dialog box is displayed Figure 6 EY NOTE The default VNC viewer password is password Disconnect Options Clipboard Send CtrAltDel Refresh Built on NT Technology pon ses Press Ctrl Alt Delete to begin Ctrl Alt Del helps keep
17. Switch Nickname Name Device Type Class Tag DracoLab 29 Switch DracoLab 33 Switch Switch draco 11 Switch Ma A al Le Cancel lt Back Help Figure 12 Select Switches tab HA Fabric Manager user guide 45 Select switches and directors in the Available Switches Directors table and move them to the Selected Switches Directors table or to remove them from the Selected list using the arrows Select the Use Group list to select a group and the table is populated with the products in the group To add a group move a switch or director from the Available Switches Directors table to the Selected Switches Directors table Click Save type a group name and then click OK Displaying other tabs Select Firmware Displays all firmware that can be installed on any product in the selected products list Use this tab to add revise and delete firmware Output Options Displays the output options information where you can save all data collections files to a folder You can also save the data collections files in a single zipped file Execution Options Displays execution options information You can pause before executing the action on each product or halt the process anytime an error occurs Data Collection Displays data collection options information that lets you confirm group membership and run data collection Install Displays install information that lets you confirm
18. Trap Forwarding Off Specifies whether trap forwarding is enabled Region Region of the world where the user is located Time Zone User s time zone User Count Number of users Performance event properties Performance events occur when the performance at a switch port crosses a user defined threshold Table 41 describes the event properties Table 41 Performance event properties Property Description Threshold Type Performance threshold type for example high critical Measure Type Performance measurement units Port Number Port number that encountered an event IP Address IP address of the device that encountered an event Source Label of the device where the event occurred Node Name WWN of the device that encountered an event Port Name WWWN of the port that encountered an event Description Description of the performance event Event Level Severity level Table 42 describes the properties of a device in the SAN Table 42 Performance device properties Description Label Device s label as shown on the Physical Map Name Device s name as specified in the Properties dialog box Device Type Type of device for example HBA Node Name Device s WWN IP Address Device s IP address Vendor Device s vendor HA Fabric Manager user guide 273 Table 42 Performance device properties continued Model Device s model Serial Number Device s ser
19. Using the Authentication table The Authentication table includes summary data about each switch or director in a fabric This includes security and nonsecurity information This table automatically refreshes to reflect the latest changes to the products listed Some information is not available for switches and directors that are not managed or that are not at the correct firmware level Selecting a fabric When a fabric is selected from the left side all switches within the fabric are displayed on the top table of the Authentication table Note the following specifics Only HP products that are currently being managed by the HAFM appliance can be configured These products are represented by their corresponding customized product icons on the topology map These are the only products whose security settings can be discovered and displayed A generic icon is displayed for all products that are not managed by the HAFM appliance e If a switch goes offline then the switch does not display in the top table and a warning message indicates there are unapplied changes on the tab If you click off the tab all the changes are lost for that tab An offline switch is contained in its own fabric and works like a managed switch The icon for the offline switch is the customized product icon If none of the discovered products is manageable when the Security tab is first accessed a message is displayed indicating this device cannot be config
20. D Install EJOS firmware This installs firmware on a group of products D Create Group Event Log Set up a group event log for display Figure 11 Select Group Action dialog box Select Action tab with Install E OS firmware selected The Install E OS firmware option installs firmware on a group of products 44 Using the HAFM application 1 Select Configure gt Group Manager The Group Manager dialog box is displayed Figure 11 on page 44 2 Select Install E OS firmware and the following tabs are displayed on the left side Select Action Select Switches Select Firmware e Execution Options e Install e History Select Action tab with Create Group Event Log selected 1 Select Configure gt Group Manager The Group Manager dialog box is displayed Figure 11 on page 44 2 Select Create Group Event Log and the following tabs are displayed on the left side Select Action Select Switches e Create Log Displaying the Select Switches tab The Select Switches tab displays all switches and directors discovered by the HAFM appliance and allows you to select any set of those products for use in the Group Manager SS AA xi Select Action eee Select Switches Directors Gitput Options A a Available Switches Directors Use Group not saved v Execution options i Nctrame llame Device Type Selected SwitchesiDirectors Deta Collection DracoLab 34 Switch a a Collection ATTENTION
21. For example a WWN for a switch attached to an E_Port can be removed if Switch Binding Connection Policy was enabled to Restrict E Ports e The switch or device with the WWN is connected to a port that is blocked e The switch or device with the WWN is not currently connected to the director or switch detached node If the director or switch is online and Switch Binding is not enabled all nodes and switches attached to the director or switch are automatically added to the Switch Membership List Zoning with Switch Binding enabled SANtegrity has no effect on existing zoning configurations However if a device WWN is in a specific zone but the WWN is not in the Switch Membership List the device cannot log in to the director or switch port and cannot connect to other devices in the zone with Switch Binding enabled 122 Optional HAFM features Port Fencing Port Fencing is a policy based feature that allows the user to set thresholds on port events If the port generates more events in a user specified time period than you think is acceptable Port Fencing blocks the port disabling transmit and receive traffic until you have a chance to investigate solve the problem and manually unblock the port Access the Port Fencing Policy dialog box by selecting Configure gt Port Fencing The Port Fencing dialog box displays the existing policies that are discovered on HP directors and switches running firmware 07 x and later Use this dialog
22. If the Enable IP Access Control List check box is selected the restricted access to the follow IP addresses is enforced If not checked management interfaces can access the switch from any IP address The check box is enabled only if at least one IP address is in the list HA Fabric Manager user guide 183 Adding a new IP address 1 Click Add The Add Edit IP Address or Range dialog box is displayed 2 Enter an IP Address or an IP Address Range The IP range is defined by a starting IP address and ending IP address 3 Click Apply Editing one IP address or one range of IP addresses 1 Click Change The Add Edit IP Address or Range dialog box is displayed 2 Change the IP address or IP Address Range 3 Click Apply Ef NOTE If multiple IP addresses or ranges are selected Edit is disabled Removing multiple IP addresses at one time After adding changing or removing IP addresses to set the IP Access Control List perform one of the following Click Apply and the changes are reflected for that switch in the Product Configuration table Click Apply To and a dialog box with a list of switches is displayed Click Reset and all the changes are dropped and the settings revert to the values that were set before the changes The IP address of the HAFM appliance is not a default included in this list When accessing the IP ACL tab the Enable IP ACL check box is not selected You cannot remove the server IP address from
23. Period Affected Ports Find gt Ports Port Type Directly Assigned _ A Changed Indicator ISL Threshold Limit Period State ISL Default 5 Smin 0 All Fabrics Protocol Default 5 5min 0 5 100008008840428D pe No ISL Threshol o 1000080088E04C6B 88 100008008840406F lw a za gt Add Edit Remove Properties Cancel Help Figure 73 Port Fencing dialog box 2 Select ISL Protocol from the Violation Type list 3 Click Add The Add ISL Threshold dialog box is displayed Figure 74 2 Add ISL Threshold x Block a port when one of the following ISL protocol error types meets the threshold ISL Bouncing ISL Segmentation ISL Protocol Mismatch Name Threshold 5 Y errors per 5 Minutes Cancel Help Figure 74 Add ISL Threshold dialog box Enter a name for the threshold in the Name box Select the number of port events allowed for the threshold from the Threshold errors list Select the time period for the threshold from the Threshold Minutes list Click OK to add the ISL threshold to the table and close the Add ISL Threshold dialog box To assign this threshold to fabrics switches or switch ports see Assigning thresholds on page 126 9 Click OK PU Optional HAFM features Adding link thresholds Use the link threshold to block a port when a Link Level Hot I O error meets the threshold Active Loop ports repeatedly received LIP and active non l
24. Product Event A cooling fan propeller in 200511203 20 24 14 16 129 91 117 1000080088409816 A Figure 59 Master log The Master Log columns are Level The level of the event e Informational e Warning e Fatal Source The product on which the event occurred Type The type of event for example client server communication events Description Description of the event Time The time and date on which the event occurred IP The IP address of the product on which the event occurred Node Name The name of the node on which the event occurred Port Name The name of the port on which the event occurred Viewing other logs If you want to view certain types of events but not the entire event log you can open a specific log To view more than one log you must open a separate window for each 1 Select Monitor gt Logs 102 Monitoring SAN products The View Logs dialog box is displayed Figure 60 Session Log Y J Display in a new window Time Description User Network Address Export 200311 0 02 15 43 SAN opened by A Administrator 172 18 3 205 2003 1 002 15 42 User Administrato Administrator 172 18 3 205 Clear 2003 1 0 02 11 05 SAN opened by A Administrator 172 18 3 205 Refresh Ley OK Cancel Help Figure 60 View Logs dialog box 2 3 4 Select the log that you want to view If you want to view multiple logs simultaneously select the Disp
25. SANvergence Manager Browse OK Cancel Apply Help Figure 25 Options dialog box Tools Configuration 3 To configure the application to launch SAN Router Element Managers a Click Browse for the HTML Browser box b Browse to the install location of your web browser For Internet Explorer the default is C Program Files Internet Explorer c Select the browser executable file in the Locate the Browser dialog box and then click Select File For Internet Explorer select iexplore exe 4 To configure the application to launch SANvergence Manager a Click Browse for the SANvergence Manager box b Browse to the install location for SANvergence Manager The default is C Program Files McDATA SANvergence Manager xx HA Fabric Manager user guide 61 where xx is the current release number c Select SM bat file in the Locate the Browser dialog box and then click Select File d Click OK Configuring Call Home for remote dial in To run the Call Home service For remote dial in to work RAS must be installed and configured on your appliance The modem must be sent to auto answer A new user srvacc must be configured with Administrator privileges The PC must be configured for dial in connections with the correct IP addresses The srvacc user must be allowed to connect via dial in Miscellaneous If a web server is running on the PC such as IIS then the default embedded http server port needs to b
26. Select a device and click Edit The Add User dialog box is displayed 2 Click OK and the CHAP Secret for the device is updated in the current local database for the switch This device is not actively authenticating with the current switch so the CHAP Secret needs to be changed for this device locally and for other affected devices Removing a detached device from a switch 1 Select a detached device and click Remove The detached device is not actively authenticating with the current switch so it is removed Enabling or disabling E_Port and N_Port authentication Select or clear the check box for E_Port or N_Port authentication The port authentication state overrides the E_Port and N_Port authentication at the switch level Changing the Enable Authentication method Select an option from the Enable Authentication Method list for E_Port or N_Port e Ifthe Radius Only option is selected and E_Port or N_Port authentication is enabled the application checks to see if the RADIUS server settings on the Radius tab have been set If not the Radius Only and Radius then Local options do not display on the list Changing the port authentication state for an authenticated device 1 Select a device and choose a different port authentication state If the device is already in the authenticated device list changing the port authentication state can occur HA Fabric Manager user guide 181 Changing the port authentication state for a nona
27. Windows systems 1 Open the Instal1_Home bin HAFM_sc bat file using a text editor for example Notepad 2 Find the following lines rem HAFM Server start JAVA_HOME bin HAFMServer exe server Xmx128m Xminf 15 Xmaxf 35 Xincgc classpath SCLASSPATHS Dsmp Mp max 128 Dsmp autodiscovery false Dsmp mpi test Dsmp deployment prefix Server Dsmp zoning Principal Dsmp zoning wait timeout 180000 Dsmp webServer Dsmp flavor HAFM Server 3 After the Dsmp zoning wait timeout line add the following lines Be sure to include a space before and after each entry Dsmp log maxLogDiskSpace maximum space reserved for the log between 1MB and 1024MB inclusive 286 Editing batch files Dsmp log eventCountAfterTruncate number of entries to be saved between 1 and 2000 rem HAFM Server start SJAVA_HOMESYbin HAFMServer exe server Xmx128m Xminf 15 Xmaxf 35 Xincgc classpath SCLASSPATHS Dsmp Mp max 128 Dsmp autodiscovery false Dsmp mpi test Dsmp deployment prefix Server Dsmp zoning Principal Dsmp zoning wait timeout 180000 Dsmp log maxLogDiskSpace 50 Dsmp log eventCountAfterTruncate 1000 Dsmp webServer Dsmp flavor HAFM Server UNIX systems 1 Open the Instal1_Home bin HAFM_Mgr file using a text editor for example vi 2 Find all instances of the following lines SMP Server xmx and smp Mp max should agree SAN_JRE_DIR bin java server Xmx128m classpath S CLASSPATH
28. click the following button to begin the installation process You will receive la Java Security warning requesting permission to download and start the installer program and to read and write files on your system You must grant these permissions to allow installation of the HAFM application Figure 114 Remote client installation page 4 Click Download to begin the installation process 5 If you have read the security agreement information and wish to continue click Yes 258 Configuring remote workstations The HP HAFM Available Installers page is displayed Figure 115 hp StorageWorks ha fabr c manager HP HAFM Available Installers Platform includes Java VM Instructions A Windows Downbad y View Figure 115 HP HAFM Available Installers page 6 Click Download The File Download dialog box is displayed Figure 116 Figure 116 File Download dialog box 7 Click Open The system begins downloading the HAFM installer When the download is complete the Introduction window is displayed HA Fabric Manager user guide 259 EY NOTE Atany time you can return to the previous page by clicking Previous or quit the Installer by clicking Cancel 8 Click Next The License Agreement window is displayed 9 If you have read the license agreement and agree to accept the terms click accept the terms of the License Agreement 10 Click Next The Important Information window is displayed
29. optional 3 Enter or edit information 4 Click OK HA Fabric Manager user guide 139 Deleting devices To delete planned devices right click the planned device icon on the Physical Map and select Delete Displaying a planned device as an installed device Right click a planned device icon on the Physical map and select Planned Device e Ifthe Planned Device option is selected the device icon is displayed inside a box icon e If the option is not selected the device icon is displayed without a box Editing port types To arrange devices and edit a planned device s port types Ef NOTE You can perform this task only in the Planning window Select View gt Planned SAN from the Planning window menu Add devices as necessary Rearrange devices as necessary Connect the devices Right click a planned device icon and select Ports to view the device s ports COU kh wWDN Click the black arrow next to the port number The Port Properties dialog box is displayed Figure 89 Port Number 4 Port Type E Ad OK Cancel Figure 89 Port Properties dialog box 7 Enter a port number in the Port Number box 8 Select a port type from the Port Type list available only for multiport devices 9 Click OK 10 Optionally right click a planned device icon and select Planned Device The device changes from a planned device to an implemented device Configuring ports You can configure port numbers and
30. 103 Copying log entries cad ad aaa iS Peces 104 Using event notifications rate paria ia add td Al ED 104 Configuring e mail notification se nak ra AA 104 Configuring Call Home notification orion rc e ed a 105 Enabling Etherneteventa narra ari a ad da 106 Creating TepOMnts aseri dams 6 oa aia A eb nh ae ow AAA Ai A 106 Generating reports suaves aras Sakis Baia a ia id 107 Viewing r poriSe io ieo aaia a d e a a a a dais 108 BA ees Sees SNe eee ed 109 6 Ophonal HAFM Tiles oreg cued cated Pelrnaweyou A a da os 111 A A Whe ae hc a Me oA a WA ce Bh eh ty ed 111 Event Management esoo a aakae aa Rae AS Roa bee bala awa does 112 Components aca a bathe book ee de bee hades ald db Od Ooo EE Beh Does 112 A A 112 ri A II REDES me EARS He Ome eS 113 Event FiIggerS ena A Eke a A a aa 114 Sched le triggers 6424 44 Re eei na a A 114 A a A CSU ED eee ase ee he ye 114 IPG MMV O E Se da en We a Ne eg sae de ae ce ts ts he cent ei ag oe 115 A aA Oe as Ae ae Ra ea ages wae 116 Creating TUS 6 ia ct bia EAR OD EERO KSEE ia a EREDAR DATED OS a E 116 Managing Event Management 0 0 eee te teens 117 SANtegrity features sici n Win eS dc Ger ee an ih Sea ee a Ie SE Je we Meni de ane Se 118 Fabric E MCG 2 poet aa ca OO a WAS RG eed ened yatta ne quae ag aes 118 Enable disable and online state functions 0 0 0 eee eee ee eee eens 118 Switch Binding a cana po nite dun OE Sl ae SRR at ARS a Ga ee ee RA Da eS 119 A hE eG ee hee deen aay B
31. Address IP address of the device that encountered an event Source Label of the device that encountered an event Node Name WWN of the device that encountered an event Port Name World wide name of the port that encountered an event Description Description of the event Event Level Severity level of the event 278 Reference Table 51 describes the properties about a device in a SAN Table 51 Device context properties Descipion Label Device s label as shown on the Physical Map Name Device s name as specified in the Device Properties dialog box Device Type Type of device for example HBA Node Name Devices WWN IP Address Device s IP address Vendor Device s vendor Model Device s model Serial Number Device s serial number Port Count Device s port count Firmware Device s firmware level Comments User entered comments Text through Text4 User entered values Device Status Device s availability online offline Table 52 describes time context properties Table 52 Time context properties Property mm dd hh mm ss hh mm ss Description Specifies date and time by month day hour minute and second Specifies the time by hour minute and second raw Specifies the time in milliseconds since Jan 1 1970 UTC for example 1027966562386 lt User defined gt Format from the Java SimpleDateFormat class see hitp java sun com 2se 1 3 doc
32. Default Default Default Default Default Default Lal lv Figure 32 Discover Setup dialog box 72 Managing the HAFM application Cancel Help EY NOTE To discover all SAN products you must specify each product s IP address in the Discover Setup dialog box Out of Band tab If you do not configure the application to discover the devices directly the connections and attached devices may not be correct on the window 6 7 Select IP addresses from the Available Addresses list and add them to the Selected Individual Addresses list by clicking the right arrow gt button Click OK Click Add to specify the IP addresses you want to discover through out of band discovery You can add change and remove IP addresses as necessary See Configuring IP addresses and community strings on page 76 for instructions Select the entries from the Selected Individual Addresses list that you do not want to discover now and move them back to the Available Addresses list by clicking the corresponding left arrow button Click OK Turn discovery on or off by selecting Discover gt On or Discover gt Off Troubleshooting discovery If you encounter discovery problems use the following procedure to ensure that discovery was set up correctly 1 2 Verify IP connectivity by pinging the switch a Display the command prompt b From the server type ping switch IP address
33. Figure 14 Display Switch and Attached Port VWWNs 7 Operational Status Type All VANS Discovered Port Testi IOD0S00SS 205250 Discovered Node Remove _500508B2007424C3 Discovered Port 1000080088404280 Discovered Node A000080088E04C6B Discovered Node Import A00008008840406F Discovered Node 1000080088409816 Discovered Node Export 450050852007 424C2 Discovered Port 5005085200742413 Discovered Port 41000080088407 C6A Discovered Node 4500508862007 44303 Discovered Port 450050852007 44302 Discovered Port _100008008860308C Discovered Node AMOO 8OO8RENARIS Disenvered Node Detached WAN 500508B2007424C3 Nickname Test2 Add OK Cancel Help Figure 14 Configure Nicknames dialog box 2 Using the Display list specify how you want to display devices Select All Nicknames to display all devices with a nickname Select All WWNs to display all discovered devices with a WWN 48 Using the HAFM application Select Switch and Attached Port WWNs to display all devices The table displays the nickname WWN operational status and type of the device Assigning a nickname to an existing device To assign a nickname to an existing device 1 Select Configure gt Nicknames The Configure Nicknames dialog box is displayed Figure 14 2 Select All WWNs from the Display list All discovered devices are displayed 3 Double click in the Nickname column of the device that to which you w
34. Figure 61 Define Filter dialog box Select the events from the Available Events list that you want to include in the Master Log Click b Scan the Selected Events list and select any event you want to exclude from the Master Log Click 4 6 Click OK U AOON Copying log entries Use the cut Ctrl C and paste Ctrl V features to copy data and column headings from logs to other applications Use the copy all Ctrl A feature to select all from the menu Ef NOTE When using the View Logs dialog box you can copy only one row at a time To copy multiple rows of data copy the data from the Master Log on the HAFM main window Using event notifications You can configure the application to send event notifications to e mail addresses at certain time intervals This is a convenient way to keep track of SAN events You can also configure products to Call Home to notify the support center of product problems Configuring e mail notification To configure e mail notification 1 Select Monitor gt Event Notification gt Email 104 Monitoring SAN products The Email Event Notification Setup dialog box is displayed Figure 62 Email Event Notification Setup x V Enable Email Event Notification E mail Server Reply Address Summary Interval o minutes Y E mail Test Options 8 Sendto Send to all users enabled for notification Send Test E mail User List OK Cancel Help Figure 62 Email Eve
35. HBA s node WWN does not uniquely identify an HBA Using the port WWN makes it possible to uniquely specify an HBA Server HBA Mappings csv Imports Server HBA Mappings into the existing Fabric Map The general format for this import is in comma separated value CSV ASCII format The first row contains the header for the file which does not effect the import process however text must be present The first two boxes must be the World Wide Port Name WWNN then the Server Nickname If either of these boxes is empty the entry is null and is not imported All additional boxes are ignored during the import process The format is space sensitive only commas are used as separators so trim leading or trailing spaces unless you want to import them as part of the data Storage Port Mappings csv Imports Storage Port Mappings into the existing Fabric Map The general format for this import is in comma separated value CSV ASCII format The first row contains the header for the file which does not effect the import process however text must be present The first two boxes must be the WWPN then the Storage Device Nickname If either of these boxes are empty the entry is null and is not imported All additional boxes are ignored during the import process The format is space sensitive only commas are used as separators so trim leading or trailing spaces unless you want to import them as part of the data A CAUTION Importing files clears t
36. If you select CIM WBEM Services from the Product Type list enter a name in the Name Space box then go to step 14 e If you select Clariion from the Product Type list go to step 16 e If you select HDS from the Product Type list go to step 14 e If you select HP XP Storage from the Product Type list go to step 14 e If you select IBM ESS Storage from the Product Type list go to step 14 e Tlf you select NetApp from the Product Type list do the following Select the product protocol from the Protocol list Enter the product DFM port number in the DFM Port box e Go to step 14 e If you select lt not specified gt from the Product Type list go to step 16 e If you select Switch from the Product Type list go to step 14 e If you select Symmetrix from the Product Type list go to step 16 5 Enter a user ID in the User ID box Enter the password in the Password and Retype Password boxes 7 Click OK o HA Fabric Manager user guide 79 Turning discovery on and off To turn discovery on or off select Discover gt On or Discover gt Off Determining the operational status Ef NOTE The Product List panel can be hidden by default To view the Product List select View gt Product List or press F9 You can determine a product s operational status by looking at the icons on the Physical Map or the Product List Table 14 lists icons and operational statuses Table 14 Operational status ken Tr No
37. Maximum value Number of zone members in a zone Number of zones in a zone set Number of unique zone members in a zone set Total number of zone members in a zone set where a zone member can be in multiple zones Characters per zoning name Number of unique zone members in HAFM zoning library Number of zones in HAFM zoning library HA Fabric Manager user guide 147 Table 23 Zoning parameter limits continued Zoning parameter Maximum value Number of zone sets in HAFM zoning library Number of end ports Number of devices supported including loop devices 1 The supported number of zones is based on a zone name with a maximum of 32 characters On all edge switches and directors except the Director 2 140 the maximum number of zones decreases if the names are 64 characters long The limits are based on two members per zone Zone set sizes are determined by the Number of zones in the zone set e Length of each zone name Number of members in each zone Interoperability mode of the fabric Contact HP Professional Services or your support representative if you have questions regarding specific zone set configurations Zoning naming conventions The following rules apply for zone names and zone set names Names must begin with alphabetic characters but can include alphanumeric characters and underscores Names must be unique and are case insensitive Names cannot in
38. NIC networks page 284 e Editing Master Log settings page 286 Configuring the application to use dual network cards Issues with client to server connectivity can be due to different causes Some examples are The computer running the application has more than one network card NIC installed The computer running the application is behind a firewall that performs network address translation In order to ensure that clients can connect to the server edit the HAFM_sc bat file to manually specify the IP address that the server should communicate to its clients Windows systems 1 Open the Instal1_Home bin HAFM_sc bat file using a text editor 2 Find the following lines and add the bold text with one space before and after the text rem HAFM Server start S JAVA_HOME bin HAFMServer exe server Xmx512m Xminf 15 Xmaxf 35 classpath CLASSPATH Dsmp Mp max 512 Dsmp autodiscovery false Dsmp mpi test Dsmp deployment prefix Server Djava rmi server hostname x x x x Dsmp zoning legacy Dsmp zoning wait timeout 180000 Dsmp webServer Dsmp flavor APP_FLAVOR Server where x x x x is the desired IP address for the appliance UNIX systems 1 Open the Instal1_Home bin HAFM_Mgrfile using a text editor for example vi 2 Edit all instances of the following lines SMP Server S SAN_JRE_DIR bin java classpath CLASSPATH Dsmp deployment prefix Server Dsmp server edport 1 DZoning Principal com smp server SANMgrR
39. NS Zoom dialog Dok iara AN RG FW A E RIA aR 47 14 Configure Nicknames dialog box n n nananana aeaee 48 15 Nickname already exists message 2 tenet eee 49 16 Import nicknames confirmation message ocio iria ed 50 7 Open dale BR ada A a a 50 Rs A O Ee Rea ae aS 51 19 Export Discovered SAN Disk dialog box igo cc Was ci a OMR 52 20 Select Switches dialog Dread 53 21 Export Discovered SAN Email dialog box ares cs rr EIA 54 22 Export confirmation message ia as a 54 23 Impor dialog COW serere steine II SAM 56 24 Options dialog DOK 444 ada e a ea ea Ea bas 59 25 Options dialog box Tools Configuration vip A 6l 26 Server Users dialog box ea e A 64 27 Add Edit User dialog box ca e a AA Rd Ra 64 28 Filer dialog DOS sest enei a ees dee oA Ree eee a 66 29 Remote Access dialog box n RAR Rap a 67 30 Disconnect User message box n ii da ad Ai RN 68 ol Group didlog Dox neeese cret dae O A ON 69 32 Discover Setup dialog Doa pad dedos 72 33 SNMP MEW iena a aiae e he O E E A 74 34 Hardware VIEW 227 44 ae A AAA SEER RO RR a 75 Address Properties dialog box IP Address tab nonn rara A 76 Address Properties dialog box SNMP tab o o oooooooooooooo nee 78 Address Properties dialog box Product Type and Access tab ooooooooo ooo 79 SNMP Agent Setup dialog box eii de il DA be ee ae 81 Add Trap Recipient ala loquo tas Sie dr ada das e Dad dis 82 Edit Trap Recipient dialog box aude s A A A Add 82 Crea
40. Radius Servers tab and the to be populated new settings Click Apply or Apply To even if there are no security settings being changed If there are no security settings being changed the Security Change Confirmation and Status Servers dialog box is displayed with the Detailed Changes table showing that No Changes were Found on the first row Click Start and the status window displays a message indicating the security settings are identical and there are no changes to apply Viewing the Security Log You must log in as the Security Administrator or System Administrator to view the Security Log The Security Log can be viewed from the following On the HAFM main window click the Security tab The Security Log is displayed Figure 112 on page 190 as a table at the bottom of the window On the HAFM main window select Monitor gt Log gt Security Log The Security Log dialog box is displayed Figure 112 on page 190 On the Element Manager main window select Logs gt Security Log The Security Log dialog box is displayed Figure 112 on page 190 186 SANtegrity Security Center Severity gt User Reason Description Date Time Count Informational unknown 10102 API Manage 2004 09 20 1 1 Informational Admitsinotarr 10000 BNS User C 2004 09 21 O 1 Informational Admitsinotarr 10000 EvvS User C 2004 09 21 1 1 Informational unknown 10003 API Manage 2004 09 22 1 1 Informational unknown 10102 A
41. SNMP Product Type and Access Description Po P Address Subnet Mask 255 255 248 0 Add Multiple _ Generate a sequence of IP addresses OK Cancel Help Figure 35 Address Properties dialog box IP Address tab 4 Enter the appropriate information for the product in the following boxes e Description e IP Address Subnet Mask 5 To generate a sequence of IP addresses Select the Generate a sequence of IP addresses check box Enter the last IP address in the Last IP box 76 Managing the HAFM application Ef NOTE All IP addresses in a sequence must be on the same subnet and have the same first three octets 6 Click OK Changing an IP address To edit IP addresses or associated subnets that are listed on the Discover Setup dialog box 1 Select Discover gt Setup The Discover Setup dialog box is displayed Figure 32 on page 72 Select the IP address you want to change from the Available Addresses list Click Edit The Address Properties dialog box is displayed Figure 35 on page 76 Edit the information as necessary 5 6 Click OK Click OK Removing an IP address A CAUTION This procedure removes the IP addresses without prompting you for a confirmation To remove IP addresses from the Discover Setup dialog box 1 2 3 4 Select Discover gt Setup The Discover Setup dialog box is displayed Figure 32 on page 72 Select the IP address that you
42. The maximum number of zones per zone set has already been configured The nickname does not exist The maximum number of nicknames that can be defined to the HAFM application was reached The maximum number of open switches allowed was reached The number of managed HP switches 48 that can be defined to the HAFM application was reached The number of managed HP switches of this type 48 that can be defined to the HAFM application was reached A maximum number of eight IP addresses for remote workstations can be configured at the Session Options dialog box That number was reached The number of users 32 that can be defined to the HAFM application was reached The maximum number of zones that can be defined was reached The maximum number of zone sets that can be defined was reached The maximum number of zones that can be defined in a zone set was reached The entered nickname does not exist in the fabric peer ey OOOO Delete an existing nickname before adding a new nickname Close an Element Manager session existing open product before opening a new session Delete an existing product before adding a new product Delete an existing product of this type before adding a new product Delete an existing IP address before adding a new IP address Delete an existing user before adding a new user Delete an existing zone before adding a new zone Delete an existing zone s
43. This overrides the default UDP port number for a trap recipient with any legal decimal UDP number 8 Select a community string from the Community String list 9 Click OK Editing trap recipients To edit an existing trap recipient 1 Select Monitor gt SNMP Agent gt Setup The SNMP Agent Setup dialog box is displayed Figure 38 on page 81 2 Click the Trap Recipients tab Select the IP address of the trap recipient that you want to edit 4 Click Edit The Edit Trap Recipient dialog box is displayed Figure 40 ow Trap Recipient y Activate IP Address 192 52 22 2 UDP Port 162 _ Community String public v OK Cancel Figure 40 Edit Trap Recipient dialog box 5 Edit the information as necessary 6 Click OK Removing trap recipients A CAUTION This procedure removes trap recipients without prompting you for confirmation To remove an existing trap recipient from the list 82 Managing the HAFM application 1 Select Monitor gt SNMP Agent gt Setup The SNMP Agent Setup dialog box is displayed Figure 38 on page 81 Click the Trap Recipients tab Highlight the trap recipient that you want to remove Click Remove Click OK nap Customizing the main window You can customize the main window by adjusting the level of detail displayed on the Physical Map or Product List columns This helps to simplify management of large SANs This section provides instructions for customizing the topolo
44. Trap Forwarding dialog box is displayed Figure 57 2 Highlight the recipient you want to remove from the Available Recipients list ba Click Remove 4 Click OK 100 Configuring SAN products and fabrics 5 Monitoring SAN products This chapter contains the following topics which describe the tools you can use to monitor SAN products e Monitoring events page 101 e Using event notifications page 104 e Creating reports page 106 Monitoring events The HAFM application provides logs that you can use to monitor SAN products You can view all events or specify which events you want to view The available logs include Master Log Lists all SAN events Audit Log Lists a history of user actions except log in log out e Event Log Lists errors related to SNMP traps and client server communications e Fabric Log Lists a history of changes to the fabric including e ISL added to fabric e ISL removed from fabric e Switch added to fabric e Switch removed from fabric e Fabric renamed e Fabric persisted e Fabric status changed e Device unpersisted e Group Log Lists the event logs defined using the Group Manager window e Security Log Lists the following security information e Severity e User e Reason e Description Date and Time e Count e Category IP e Role e Interface Session Log Lists users who have logged in and out of the HAFM appliance Product state Log Lists status changes for managed
45. Verify the SNMP settings a Launch HAFM Basic interface by opening a web browser and entering the IP address of the product as the Internet URL For example http 10 1 1 11 b Log in and click OK c Select Configure gt SNMP HA Fabric Manager user guide 73 The SNMP view is displayed Figure 33 Configure gt SNMP SNMP Agent Enabled i ia TA MID Version FA MIB 3 1 Enable Authentication Traps SS J O ae 6 E L E AD A a z Figure 33 SNMP view d Verify that the SNMP Agent is enabled If not then click Enable e Verify that the Name box displays public or matches the HAFM appliance configuration 3 Verify the product data a Select Product gt Hardware 74 Managing the HAFM application The Hardware view is displayed Figure 34 Product gt Hardware Front View Name 4500 Description Fibre Channel Switch Location End User Premise Contact End User Contact World Wide Name 10 00 08 00 88 45 01 69 Type Number 004500 Model Number 001 Manufacturer MCD Serial Number TEST4500 EC Level 1040518 Firmware Level 08 00 00 Figure 34 Hardware view b Verify that the WWN has the correct syntax XX XX XX XX XX XX XX XX c Verify that the Type Number is one of the following 003016 003032 003216 003232 004300 004500 005000 006064 006140 4 Verify SNMP connectivity a Use a third party MIB
46. WWN address EY NOTE Ifyou select an invalid domain port value or WWN address and then activate the zone set the application shows a zoning mismatch message after the next discovery pass 6 Click OK The Zoning dialog box is displayed Figure 91 on page 149 7 Select an option from the Zoning Method list 8 Select the members to add to the zone from the Potential Zone Members list To add all ports on a device select the device 9 Click gt to the right of the Potential Zone Members list to add the selected members to the zone 10 Click OK EY NOTE Ifyou click Cancel or the close button X without clicking OK only the changes that you made to the active zone set are saved Creating a zone set To create a new zone set 1 Display the zone library See Displaying the zone library on page 149 The Zoning dialog box is displayed Figure 91 on page 149 2 Click New Set to create a new zone set Rename the zone set See Zoning naming conventions on page 148 a 4 Press Enter HA Fabric Manager user guide 151 5 6 7 To activate the zone set see Activating a zone set on page 152 8 Select the zones you want to add to the zone set from the Zones list Click gt to the right of the Zones list to add the selected zones to the zone set Click OK Removing a member from a zone 1 2 3 4 Display the zone library See Displaying the zone library on page 149 The Zoning
47. and IP addresses of all devices needing attention Click a product name to jump to the product on the Physical Map This list updates dynamically Displaying routes between ports You can view the path that Fibre Channel frames must take between two ports in a multiswitch fabric More than one route shows at a time within the same fabric If you attempt to show a different route within the same fabric the previous route fades Before you display the route between two ports ensure that The fabric consists solely of HP M series products All switches or directors in the route are managed by the HAFM application and attached to the same appliance All switches or directors in the route are attached to the same appliance All switches or directors in the route are Director 2 64 Director 2 140 Edge Switch 2 32 Edge Switch 2 16 or Edge Switch 2 24 models and are running firmware 1 3 or higher All attached products in the route are in the same zone To show the route for two ports 1 In the Product List click the plus symbol next to the switch product icon you want to expand 2 Right click a node and select Show Route HA Fabric Manager user guide 91 The Show Route dialog box is displayed Figure 47 Select a destination port and OK to display route Source Port Qlogic 210100E08B290543 Destination Port Product Port Nickname IP Address El lug MCDATA 100008008840E010 ES3032 1723114 Qlogic 2100
48. and terminating problem persists contact the next communication with the level of support attached product SNMP trap address not If an SNMP community Enter a corresponding SNMP trap defined name is defined a recipient address corresponding SNMP trap recipient address must also be defined HA Fabric Manager user guide 227 Table 30 HAFM Messages continued Pe ee OO Switch is not managed by HAFM The Administrator user cannot be deleted The Domain ID was not accepted The World Wide Name and Domain ID must be unique in the Fabric Membership List The management server is busy processing a request from another Element Manager The link to the managed product is not available The maximum number of aliases has already been configured The maximum number of management server network addresses has already been configured The maximum number of members has already been configured The selected switch or director is not managed by the HAFM application The administrator user is permanent and cannot be deleted from the Configure Users dialog box You attempted to add a detached switch to the Fabric Membership List through the Fabric Binding option SANtegrity Binding feature but a switch already exists in the fabric with the same domain ID The HAFM appliance is processing a request from another instance of an Element Manager and cannot perform the requested operation T
49. and that there are no changes to apply Using the Devices tab The Devices tab Figure 107 defines which switches and directors are eligible to mutually authenticate with the highlighted switch on the top table The features on the Devices tab can be configured only if the switch has the proper PFE key installed If not when you click the Devices tab a message is displayed indicating that the feature has not been installed 176 SANtegrity Security Center View Al HAFM 8 7 1 0 SAN Edit View Plan Discover Configure Monitor Help Pie ge eK bea 7 View Aly Event Management Fabres Sater 1000080088A0406F Product Configuration 1000080088404280 1000080088E0AC 8 NodeName Model Firmware PFEKey Aut EWS J of Ds EWS Method EWS Telnet SSH Telnet of IDs 100008008GA09816 001 07 00 0064 Y Local Only X 2 gt 1000080088407C54 001 07 01 02 4 Y Local Only e 100008008860308 oot 07 00 00_84 Y Local Only 2 amp 1000080088408280 07 00 0084 Y Local Only 2 ay Users Software Devices IP Access Control Radus Servers Node Name 1000080088A0406F Edit Secret 7 Enable E Port Authentication Local Only Y 7 Enable N_Port Authentication Local Only Y Port Authentication List Authenticated Devices Authenticati Port NodeName Atta Se Nickname Type Portiame NodeName Nckna E Nu eft Disabled 4 1000080068408260 Test E Port 200808008840406F eft Dis
50. appliance displays all the switches directors and end nodes connected to the highlighted switch in the Devices tab This tracks the security settings on each switch port and the state of connected devices This list can include Non SANtegrity Il compatible switches Non manageable switches Non HP switches e JBOD HBA Other storage devices When your HAFM appliance is installed with SANtegrity and you discover a secure or unsecure fabric the E_Port authentication is disabled and the drop down menus for port authentication display your HAFM appliance If a device is SANtegrity capable your HAFM appliance can discover its current security settings and display them on the table If not your HAFM appliance displays only a limited information about that device The Authenticated Devices list displays a list of authenticated devices that are in the current switch local database In this database there are connected or detached devices Devices listed in this table must have a CHAP Secret Add an attached or detached device from the left Port Authentication List table by selecting a device and clicking the right arrow button double clicking the device or clicking Add Change the CHAP Secret of a device by selecting the device and clicking Edit To remove devices from this list select a device or multiple devices and click Remove EY NOTE Ifthe device is involved with the authentication process and the device is removed the con
51. appliance was modified at the Remote Access disallowed dialog box Resource is unavailable The specified operation Verify the HAFM cannot be performed appliance to product link is up If because the product is the link is up the HAFM appliance unavailable can be busy Try the operation again later Route data corrupted The information for this Try the operation again If the route is corrupt problem persists contact the next level of support Route request timeout The Show Route request Try the operation again If the timed out problem persists contact the next level of support Routing is not supported This switch or director Choose a different switch or by the switch does not support the director to show the route Show Routes feature SANtegrity Feature not You selected Fabric Install the SANtegrity Binding installed Please contact Binding or Enterprise feature to use Fabric Binding or your sales representative Fabric Mode from the enable Enterprise Fabric Mode Fabrics menu These selections are not enabled because the optional SANtegrity binding feature is not installed Select alias to add to An alias was not selected Choose an alias before clicking zone before clicking Add Add Selection is not a World The selection made is not Choose a valid WWN before Wide Name a WWN performing this operation Server shutting down The HAFM application is Reboot the HAFM appliance If the closing
52. both communities with names require identical communities with the same name have the same write authorizations identical names they write authorizations must also have identical write authorizations Duplicate Fabric Name The specified fabric name Choose another name for the already exists fabric Duplicate name in zoning Every name in the zoning Modify to make it unique or configuration All zone library must be unique delete the duplicate name and zone set names must be unique Duplicate nickname in Duplicate nicknames Modify the selected nickname to nickname configuration cannot be configured make it unique 220 Informational and error messages Table 30 HAFM Messages continued Duplicate World Wide Name in nickname configuration Duplicate zone in zone set configuration Duplicate zone member in zone configuration Element Manager instance is currently open Enabling this zone set will replace the currently active zone set Do you want to continue Error connecting to switch Error creating zone Error creating zone set Error deleting zone Error deleting zone set Error reading log file A WWN can be associated with only one nickname More than one instance of a zone is defined in a zone set More than one instance of a zone member is defined in a zone A product cannot be deleted while an instance of the Element Manager is open for that product
53. browser to verify the SNMP connection b Change the SNMP default timeout Stop the server e Increase the default SNMP settings If the device is running heavy traffic or is known to have slow SNMP response time moderately increase the SNMP timeout default timeout is one second and retry count default count is one retry HA Fabric Manager user guide 75 e These two values are controlled by two VMParameters residing in the bin HAFMService ini file when the application is running as a Windows service smp snmp timeout and smp snmp retries For example specifying Dsmp snmp timeout 5 and Dsmp snmp retries 1 instructs the server to use five seconds as the SNMP timeout and one retry as the retry count NOTE The higher the values the longer discovery will spend waiting for a SNMP response This translates to slower system performance e Restart the server Configuring IP addresses and community strings You can alter the database of selected IP addresses SNMP community strings Product type and Access that the application uses to perform discovery communication functions and password authentication Adding an IP address To add IP addresses and subnets through which the SAN can be discovered 1 Select Discover gt Setup The Discover Setup dialog box is displayed Figure 32 2 Click Add The Address Properties dialog box is displayed Figure 35 3 Click the IP Address tab IP Address
54. click OK The WWN or nickname is displayed in the Switch Membership List Click Activate Enable disable and online state functions In order for Switch Binding to function specific operating parameters and optional features must be enabled Also there are specific requirements for disabling these parameters and features when the director or switch is offline or online Be aware of the following Switch Binding can be enabled or disabled whether the switch is offline or online Enabling Enterprise Fabric Mode automatically enables Switch Binding You cannot disable Switch Binding if Enterprise Fabric Mode is enabled If Enterprise Fabric Mode is enabled and the director or switch is online you cannot disable Switch Binding However if Enterprise Fabric Mode is disabled you can disable Fabric Binding Switch Binding or both If Enterprise Fabric Mode is enabled and the director or switch is offline you can disable Switch Binding but Enterprise Fabric Mode disables WWNs can be added to the Switch Membership List when Switch Binding is enabled or disabled WWNs can only be removed from the Switch Membership List if any of the following are true e The director or switch is offline e Switch Binding is disabled The switch or device with the WWN is not connected to the director or switch e Switch Binding is not enabled for the same port type as enabled for the Connection Policy in the Switch Binding State Change dialog box
55. correct Name format is invalid The format valid format is eight two digit hexadecimal numbers separated by colons xx xXx xXx Xx XX XX XXIXX Invalid World Wide The WWN or nickname Try the operation again using a Name or nickname that you have specified is valid WWN or nickname invalid The valid format for the WWN is eight two digit hexadecimal numbers separated by colons xx XX XX XX XX xx xx xx The valid format for a nickname is non blank characters up to 32 characters 224 Informational and error messages Table 30 HAFM Messages continued Invalid World Wide Name Valid WWN format is xXX XX XX XX XX XXIXX XX Invalid zone in zone set Limit exceeded No address selected No attached nodes selected No management server specified No nickname selected No Element Managers installed No routing information available No user selected The specified WWN format is invalid The valid format is eight two digit hexadecimal numbers separated by colons xx xx XX XX OCA The defined zone no longer exists and is invalid You cannot add a new product or user to HAFM application if the maximum number of that resource already exists on the system You cannot complete the operation because an address has not been selected An operation was attempted without an attached node selected An HAFM appliance is not defined to the HAFM application No nickn
56. describes each panel of the HAFM main window 6 7 8 Connection utilization legend 2 1 HA Fabric Manager user guide 33 Menu bar The menu bar Figure 4 0 consists of pull down menus that allow you to view information and configure and manage the application Toolbar The toolbar Figure 4 provides buttons to perform various functions Place your cursor on a toolbar button for information about the button function Ef NOTE Depending on your configuration the buttons on your toolbar can differ from the example View tab The View tab Figure 4 displays the Master Log Physical Map topology and Product List Change the default size of the display by placing the cursor on the divider until a double arrow is displayed Click and drag the adjoining divider to resize the window You can also show or hide an area by clicking the left or right arrow on the divider Product List The Product List Figure 4 O shows an inventory of all discovered devices and ports The Product List is a quick way to look up product and port information including serial numbers and IP addresses To display the Product List select Product List from the View menu or press F9 You can edit information in the Product List by double clicking in a box marked with a green triangle You can sort the Product List by clicking a column heading See Customizing the Product List on page 86 for information about customizing the inform
57. dialog box HA Fabric Manager user guide 231 Table 30 HAFM Messages continued You must download the HAFM client via the web install Zones configured with port numbers are ignored in Open Fabric Mode Zones must be defined before creating a zone set Zoning by port number is ignored in Open Fabric Mode Zoning by port number is not supported in Open Fabric Mode Zoning name already exists An attempt was made to download the HAFM application to a remote workstation client using an improper procedure While in Open Fabric mode zones configured using port numbers are enforced through WWNs You cannot create a zone set without any zones defined for HAFM While in Open Fabric mode zones configured using port numbers are enforced through WWNs You cannot specify an item for zoning by port number if HAFM is in Open Fabric Mode Duplicate zone names are not allowed in the zoning library 232 Informational and error messages pa A 22 Download a compatible version of the HAFM application to the remote workstation client using the web install procedure Informational message only no action is required Define zones using the New Zone dialog box Informational message only no action is required Either define zones by WWN of device or change to Homogeneous Fabric mode in the Configure Operation Mode dialog box of the Element Manager Modify to make it unique or del
58. dialog box is displayed Figure 91 on page 149 Expand a zone by clicking the symbol in the Zones list Right click the member you want to remove and click Remove Click OK Removing a zone from a zone set 1 2 3 4 Display the zone library See Displaying the zone library on page 149 The Zoning dialog box is displayed Figure 91 on page 149 Expand a zone set by clicking the symbol in the Zone Sets list Right click the zone you want to remove and click Remove Click OK Activating a zone set EY NOTE Activation speeds can vary depending on the hardware vendor and type of zoning used To activate a zone set 1 Display the zone library See Displaying the zone library on page 149 The Zoning dialog box is displayed Figure 91 on page 149 Select a zone set from the Zone Sets list Click Activate 152 Zoning The Activate Zone Set dialog box is displayed Figure 93 Fabric Name 100000CODDO0C130 Current Active Zone Set abcdeabcdeabcdeabcdeabcdeabcdeabc New Active Zone Set abc Directors Switches Affected Nickname a Node Name Domain ID P Address SANBox2_d 100000CODDO0C130 172 31 1 39 Summary 2 Zones Removed 4 Zone Members Removed Details a E abe asdtg ast NewZone w Generate a report with the activation of new zone set OK Cancel Help Figure 93 Activate Zone Set dialog box 4 Verify the information and click OK A confirm
59. e The lower part is a tabbed pane containing a set of five tabs for completing security configuration tasks The lower left part of the Security window displays the server Master Log the lower right part of the window displays the Security Log e The Security tab and Security Log are only available to users with Security Administrator privileges Change the default size of the display by placing the cursor on the divider until a double arrow is displayed Click and drag the adjoining divider to resize the window You can also show or hide an area by clicking the left or right arrow on the divider e On the toolbar the Display By option and the Search Box option are disabled 164 SANtegrity Security Center Ef NOTE SANtegrity Authentication can also be accessed from any SANtegrity capable Element Manager by selecting Configure gt SANtegrity Authentication Accessing SANtegrity Authentication from the Element Manager allows you to manage only one device at a time View All HAFM 8 7 1 olx SAN Edt View Plan Discover Configure Monitor Help Publ 4K oo k aia 3 RS Authentication oooosoosaaosoer Product Configuration 4 Jannen Iodane Nekiame Model Dai Fare PFE Key Aut ENS of Ds ENS Mehod EWS Tee 10OOBODBBADSDI6 Tess OO vons Y oooosnoseu07ca m3 mms Y ronocenoensosc mo 7 vons Y k Y id ay Users Software Devices IP Access Control Radius Servers SSH Tenet_ of Ds x
60. enable API authentication then the HAFM appliance is not locked e If mutual authentication is required between software and switch a software ID is required The HAFM appliance is given a default ID during installation Accept the default or provide another ID name The software ID must be unique If the same ID is used the new ID is rejected and the name must be changed Disabling API authentication on the switch If API authentication is not enabled on a switch the HAFM appliance can manage the switch if an MPI link with the switch is established If the HAFM appliance is not licensed with SANtegrity Security Center launch the Element Manager to add this appliance to the Permitted Software list for the switch Adding the current HAFM appliance to the Permitted Software List The Permitted Software List displays software IDs that are allowed to access the switch through API 1 To manage the switch add the current HAFM appliance to the Permitted Software list by selecting the Include Current Server check box If the current appliance does not have a CHAP Secret defined a message is displayed indicating that you have not defined a CHAP Secret for this appliance If a CHAP Secret is defined click OK to add the current HAFM appliance to the Permitted Software List 2 To define a CHAP Secret for the HAFM appliance click OK to display the Server Properties dialog box If you click Cancel the Software tab is displayed with the check box n
61. enable the Open Systems management style and FICON management Management Server or enable the management server style is allowed if the Open Systems management style FICON Management Server feature is enabled You attempted to enable Open Systems management style Incorrect product type When configuring a new Choose the correct product type for product through the New the product with the network Product dialog box an address incorrect product was specified Installing this feature key If the switch is online Click Yes to install the feature key while online will cause installing the new feature or No to not install an IPL operation on the key will cause an internal switch and a momentary program load IPL The loss of LAN connection LAN connection to the This operation is HAFM appliance will be nondisruptive to the Fibre lost momentarily but Fibre Channel traffic Do you Channel traffic will not be wish to continue installing affected this feature key Internal file transfer error The director or switch Retry the operation If the problem received from director detected an internal file persists contact the next level of transfer error support Invalid character in field An invalid character was Remove invalid characters from the entered in the Data box entry Invalid configuration Attempted to save an Use up to 24 alphanumeric name address configuration characters incl
62. excessive Resolution 1 1 Select Discover gt Setup 2 Click the Method column in the Selected Subnets pane and select Broadcast 3 Click OK Resolution 2 Decrease the SNMP timeout to decrease the discovery time Cannot open an Element Manager for an HP device Ensure that only one copy of the application is being used to monitor and manage the device The symapi jar file is not in the class path Verify that the symapi jar file has been copied to HAFM s 1ib directory 204 Troubleshooting Problems with products Table 26 describes possible product problems and suggested resolutions Table 26 Product problems and resolutions Problem HBAs not connected to SAN Resolution Check your physical cables and connectors Switches not connected to Ethernet Check your physical cables and connectors Switches not connected to SAN Check your physical cables and connectors Cannot disable Fabric Binding while Enterprise Fabric Mode is active Disable the Enterprise Fabric Mode through the Enterprise Fabric Mode dialog box before disabling Fabric Binding Problems with addresses Table 27 describes possible problems with addresses and suggested resolutions Table 27 Address problems and resolutions Problem No subnets or addresses selected Resolution 1 Select Discover gt Setup 2 Click the subnet or individual address you would like to
63. fabric 97 persisted fabrics 97 HA Fabric Manager user guide 291 planned device 269 products 267 server planned 269 storage planned 269 switch planned 269 switch group 270 tape planned 269 unknown device planned 269 importing 51 importing a zone set 156 information bar 35 IP addresses adding 76 changing 77 removing 77 ISL load balancing 130 ISLs clearing alerts 98 isolated group icon 270 J JBOD icon 269 K keyboard shortcuts 280 L life cycle of a SAN 24 listing zone members 159 load balancing ISLs 130 localhost HAFM appliance name 38 log entries copying 104 log file location 34 logging out 40 logs exporting 103 open trunking 133 overview 34 101 viewing 102 loop group icon 270 292 M macros writing 277 management SNMP agent 24 managing reports 106 managing users overview 63 master log copying from 104 filtering 103 icons 268 illustrated 34 location 34 overview 34 members finding in zones 159 merging persisted fabrics 98 messages element manager 233 fabric manager 216 HAFM application 216 minimap overview 35 minus icon persisted fabrics 97 monitoring connection utilization 133 port performance 135 switch performance 134 monitoring events 101 N naming conventions 148 network attached storage icon planned 269 notifications configuring call home 105 configuring e mail 104 overview 104 O offline icon 268 Open Trunking feature 130 dialog box 132 en
64. for Event Management to add relevant data to the action phrases The Writing Event Management macros following actions allow macros E mail e Launch log e Message HA Fabric Manager user guide 277 When you right click near the cursor in a text area a menu of the context property sets is displayed Select one of the choices to see a list of the available context properties Select one of the properties to insert a bracketed macro at the cursor When the trigger fires the values for the context properties that you selected are inserted into the text in place of the macro Write the text in such a way that you know what the value is since the property name is not inserted along with the value Example The device labeled PROPlabel has come back online Its Node Name is PROPnodename EY NOTE Actions that are triggered by a schedule trigger do not have access to Device and Event properties since no device is directly involved in triggering the policy Table 50 describes event context properties Table 50 Event context properties Device Status Status of the device online or offline Discovery Type In band or out of band discovery Element Type A device status event or a link status event Threshold Type Performance threshold type for example high critical Measure Type Performance measurement units Port Number Port number that encountered an event IP
65. group membership and install firmware History Displays history information of firmware installations Select the product firmware install that you want to reverse Create Log Confirms group membership and creates a log of that information Using the Group Log The Group log lets the user view delete or export the event logs defined on the Group Manager window To access this log 1 Select Monitor gt Logs gt Group The Group Log is displayed 2 Click Delete Log if you want to delete the log A confirmation message dialog box is displayed a Click OK 3 Click Export if you want to export the log The Save Group Logs dialog box is displayed a Enter the name of file b Click OK Viewing detail on the Product List 46 You can view different levels of information on the Product List Viewing all details To display all information on the Product List 1 Click View All 2 Select Levels gt All Levels Using the HAFM application To display only products on the Product List 1 Click View All 2 Select Levels gt Products Only Zooming in and out of the Physical Map You can zoom in or out of the Physical Map to view products and ports Zooming in To zoom in on the Physical Map use one of the following methods 1 Click the zoom in icon 4 on the HAFM toolbox or Select View gt Zoom The Zoom dialog box is displayed Figure 13 zoom xi D 150 100 75 50 25 O Fitto
66. information is displayed in the Users dialog box 6 Click OK Removing a user account A CAUTION This procedure removes the user s account without prompting you for confirmation To remove a user account 1 ow Select SAN gt Users The Users dialog box is displayed Figure 26 on page 64 Select the user account you want to remove Click Remove Click OK HA Fabric Manager user guide 65 Ef NOTE Ifthe user is logged in when you remove the account the account is not affected until the user logs out and attempts to log in again Filtering event notifications for a user The application provides notification of many different types of SAN events If a user needs to know only about certain events you can specify which event notifications are sent to that user To filter event notification 1 Select SAN gt Users The Users dialog box is displayed Figure 26 on page 64 Click the Filter link in the Email column associated with the user for whom you want to filter events The Filter dialog box is displayed Figure 28 The Selected Events table includes the events of which this user is notified The Available Events table includes all other events Available Events Selected Events Type Subtype Level Type Subtype Level SNMP Trap a I rx PERENA ES SNMP Trap roll D Product Hardware Informational 4 User Action Informational e de 9 Product Link Incid Warning A 4 Product Link
67. is down or unavailable The IPL configuration Deletion of the IPL Cancel the operation cannot be deleted address configuration was attempted and was not allowed HA Fabric Manager user guide 253 Table 31 The management server is busy processing a request from another Element Manager The optical transceiver is not installed The switch did not accept the request The maximum number of address contigurations has been reached The switch did not respond in the time allowed The switch is busy saving maintenance information The switch must be offline to change the Management Style The switch must be offline to configure This feature is not installed Please contact your sales representative Element Manager messages continued pama O A The HAFM appliance is processing a request from another instance of an Element Manager and cannot perform the requested operation Information is not available for a port without an optical transceiver installed The director or switch cannot perform the requested action The maximum number of saved address configurations has been reached While waiting to perform a requested action the director or switch timed out The director or switch cannot perform the requested action because it is busy saving maintenance information The firmware is below the required level and you attempted to change the management style A configurati
68. is not accessed by a license key HA Fabric Manager user guide 187 The SANtegrity Security Center is accessed from a tab that is parallel to the View tab in the main window The SANtegrity Authentication is accessed from the Configure menu The SANtegrity Security Center displays a Product Configuration table that lists all discoverable products and their security settings The SANtegrity Authentication display does not have this table e The SANtegrity Security Center Users tab displays an Apply To button The SANtegrity Authentication Users tab does not have this button The SANtegrity Security Center Software tab displays an Apply To button The SANtegrity Authentication Software tab display does not have this button The SANtegrity Security Center Devices tab populates CHAP Secrets to the local switch and the connected devices The SANtegrity Authentication Devices tab populates CHAP Secrets to the local switch The SANtegrity Security Center IP ACL tab displays an Apply To button The SANtegrity Authentication IP ACL tab display does not have this button The SANtegrity security Center Radius tab displays an Apply To button The SANtegrity Authentication Radius tab display does not have this button The SANtegrity Security Center Security Change Confirmation and Status tab displays multiple switches in addition to the local switches The SANtegrity Authentication Security Change Confirmation and Status tab displays only the
69. operation later If the information Element Manager while condition persists contact the next retrieving port information level of support because the Ethernet link is down or busy Error retrieving port An error occurred at the Retry the operation later If the statistics Element Manager while condition persists contact the next retrieving port statistics level of support because the Ethernet link is down or busy Error stopping port An error occurred at the Retry the operation later If the diagnostics Element Manager while condition persists contact the next attempting to stop port level of support diagnostics from running because the Ethernet link is down or busy Error transferring files lt An error occurred while Try the file transfer operation message gt transferring files from the again If the problem persists PC hard drive to the contact the next level of support Element Manager The message varies depending on the problem HA Fabric Manager user guide 243 Table 31 Element Manager messages continued CE CN CS The firmware version on the hardware product switch or director is lower than 05 00 00 This message is displayed if the optional Open Trunking feature is installed Feature not supported The product name must be running version 05 00 00 or higher Field cannot be blank The data box requires an entry and cannot be left blank The maximum numbe
70. or Of da a tom dy RADA HO ede ale A 81 Configuring trap iSciblents 4 45 04 4 1e9 RARA TARA DET RRA Awe 81 Editing trap recipienis 3i2 43066s di bitch behiode seeeeeasteh deeb hd bod nd ween 82 Removing trap recipients ads CE aN RA E USAR E he eed 82 HA Fabric Manager user guide 5 Customizing the main window 247 da a Ra a aca la TES ad ORS 83 Creating a customized VIEW 6 edd ne be ER ASEM Re Rede ee WH wk ERE REORE O 83 Editing a customized view sn pis dene de ne waeca gaudy soe da das 4 86 Deleting a customized view 4 5 4 4 624 4406F deed ROM dv OE DRS OR oR a eee Os 86 Selecting a customized view 2 ooo 86 Customizing the Product List tratara yawn hp kak eared eed ke 86 Adding a column to the Product List 0 eee eee eee 86 Changing a column on the Product List 24 5 c465 500028 0 ee eee eededieeees 87 Removing a column from the Product List 0 2 0 cece eee eae 88 A Ceantiguring SAN products and fabrics coria 89 Managing SAN produchs wide ea we eee heed 89 Using the Element Manager 1 25 2645535464085 A 455 Rhee ae ad ir 89 Opening the Element Manager from the user interface 0 000 cee eee eee 89 Opening the Element Manager from the command line 0 0 0 e eee eee ee 89 Searching tor products in a SAN ia he Owe a aha AEE Adi 90 Changing product properties 4 ck ee be dade eae we eeGAe ee ee beg ea ees seb ai 90 Determining product status 6244 444248464 4 Wks ba eis dow h0G dd did 91 Display
71. security settings for a switch or director are changed by another management interface then the following occurs If the switch that was changed by another interface is not currently configured by your HAFM appliance user the top table accepts the changes and an event is generated in the Security Log If the changes made by another interface affect the switch whose security data is currently being modified by a Security Administrator a message is displayed indicating the security settings have been changed by an external source The message asks you if you want fo load the new settings from the switch or keep your changes e Click Load New Settings The information is displayed on the top table and configuration on the bottom tab update All working data is overridden by the new data in the switch e Click Keep Changes The updates are made to the switch but you can maintain the configuration both on the top table and bottom tab If needed these changes can be overridden with the current configuration Accessing SANtegrity Security Center tabs The Authentication section has five tabs Users Allows the Security Administrator to set up users accessing the switch from CLI and web interfaces tab the Security Administrator specifies whether the Telnet and HAFM Basic interfaces are enabled which method the switch or director uses to authenticate users and which users are authorized to use these interfaces Software Allows the Secur
72. set on the new appliance This allows preexisting zoning information on the switch to be stored on the new appliance To save the active zone set to a zoning library 1 Select Configure gt Zoning The Zoning dialog box is displayed Figure 91 on page 149 2 Select a fabric from the Fabric list Click the Active Zone Set tab 4 Select the active zone set and click Save As ow The Save Active Zone Set As dialog box is displayed 5 Rename the active zone set and click OK The switch s zoning information is imported to the new appliance You can now manage zones and zone sets through the new appliance Comparing zone sets To compare two zone sets 1 Select Configure gt Zoning The Zoning dialog box is displayed Figure 91 on page 149 2 Select a fabric from the Fabric list 3 Click the Activate Zone Set tab 160 Zoning 4 Click Compare With The Select a Zone Set dialog box is displayed 5 Select a zone set and click OK The comparison results are displayed HA Fabric Manager user guide 161 162 Zoning 8 SANtegrity Security Center This chapter provides instructions for using the SANtegrity Security Center e Security Center Overview page 163 e Accessing the Security Center page 163 e Displaying the Fabrics list page 165 e Using the Authentication table page 166 e Viewing the Security Log page 189 Security Center Overview The Security Center is a tool for viewing and configuring your instal
73. skip the call back step and shortens the login time Forcing a client to polling mode To force a client to be a polling client add the Dsmp callback passive parameter to the following files in the HAFM 8 x bin directory typically in c Program Files HAFM 8 x bin e Client portion of the HAFM_sc bat file HAFM_c bat file The HAFM_sc bat file starts both the client and server and is installed on a computers with the HAFM appliance software The HAFM_c bat file starts the client only and is installed with the client software The following example shows the edited files with the additional parameter in bold This parameter only affects the specified client HA Fabric Manager user guide 195 EY NOTE This example illustrates the HAFM_c bat file The portion of this file starting with rem HAFM Client is also included in the HAFM_sc bat file Both files must be modified if they are installed on your computer setlocal pushd dp0 call bin set_cp bat rem HAFM Client start JAVA_HOME bin HAFMClient exe Xmx256m Xminf 15 Xmaxf 35 classpath SCLASSPATH Dsun java2d noddraw true Dsmp fabricPersistenceEnabled true Dsmp Mp max 256 Dsmp deployment prefix Client Dsmp callback passive Dsmp flavor APP_FLAVOR Client rem HAFM Client Debug Mode rem start JAVA_HOME bin HAFMClientD exe Xmx256m Xminf 15 Xmaxf 35 classpath CLASSPATH Dsun java2d noddraw true Dsmp fabricPersistenceEnabled true Dsmp Mp max 25
74. the Insistent Domain ID option in the Configure Switch Parameters dialog box is automatically enabled if Fabric Binding is enabled e If Fabric Binding is enabled and the switch is online you cannot disable Insistent Domain ID e If Fabric Binding is enabled and the director or switch is offline you can disable Insistent Domain ID but this disables Fabric Binding You cannot disable Fabric Binding or Switch Binding if Enterprise Fabric Mode is enabled However if Enterprise Fabric Mode is disabled you can disable Fabric Binding Switch Binding or both 118 Optional HAFM features Switch Binding This feature is managed through the Switch Binding option available on the Element Manager Configure menu Using Switch Binding you can specify devices and switches that can attach to director and switch ports This provides security in environments that include a large number of devices by ensuring that only the intended set of devices attach to a switch or director Overview To configure Switch Binding you must first activate the feature using the Switch Binding State Change dialog box while selecting the type of port where you want to restrict connection connection policy Possible selections are E_Ports F_Ports or all types If the director or switch is online activating Switch Binding populates the Membership List in the Switch Binding Membership List dialog box Element Manager with the following WWNs currently connected
75. the SAN The HAFM application establishes contact with many SAN devices gathers embedded information and presents a visual map of devices and their connections as a Physical Topology map 3 Configure the SAN The administrator configures SAN devices and fabrics 4 Monitor the SAN The self monitoring event logging and event notification application generates events and messages about product and property status The user interface features an animated display of the data flow and error rates over the entire topology Searching the online help To find help topics that contain a particular word or phrase 1 On the Help window click the tab with the magnifying glass icon 2 In the Find box enter the word or phrase for which you want to search 3 Press Enter If any matches are found a list of topics is displayed in the panel The number of times the word or phrase occurs in the topic is displayed next to the name 4 Click the name to display that topic HA Fabric Manager user guide 25 System requirements This section describes client and server system requirements for HAFM HAFM appliance system requirements 26 The server running the HAFM application must meet the following requirements for Windows or Solaris platforms When setting up your HAFM appliance Use the recommended configuration To set up Call Home follow the steps in Configuring Call Home for remote dial in on page
76. the appliance in the Permitted Software list before enabling API authentication The current HAFM appliance cannot be deleted If you remove the current appliance with API authentication turned on and you click Apply or Apply To a message is displayed indicating that the current server ID cannot be removed when API authentication is enabled Do not delete the last user in the database If you do a warning message is displayed indicating that the last software ID cannot be removed when API authentication is enabled For the Authentication method the following applies Use the Method list to select Local Only Radius Only or Local then Radius The default is Local Only HA Fabric Manager user guide 173 e If you select Radius Only the HAFM appliance checks to see whether a RADIUS server is specified on the Radius Servers tab If not the Radius Only and Radius then Local options are not available from the drop down menu e If one RADIUS server is set to Radius Only then the Radius then Local option is available The HAFM appliance cannot automatically populate API information to the RADIUS server A message is displayed indicating that you have set API Authentication Method to Radius Only If you have not properly defined the software on the RADIUS server API authentication will fail and the connectivity between software and product will be broken The ID and CHAP Secret must be defined for the HAFM appliance so that e After you
77. the license agreement and agree to accept the terms click accept the terms of the License Agreement 18 Click Next The Important Information window is displayed 264 Configuring remote workstations 19 Click Next The Choose Install Folder window is displayed 20 Perform one of the following to select a folder on the remote workstation in which to store the HAFM software e Accept the default location Enter the path to a new location Click Choose to browse for an appropriate location Click Restore Default Location to change the location back to the default 21 Click Next If HAFM is already installed on the system you are prompted to uninstall the existing version If you want to uninstall the existing software click Yes and then press Next 22 When the Uninstall HAFM window is displayed click Uninstall 23 When the Uninstall Complete window is displayed click Quit The Choose Shortcut Location window is displayed 24 Select a shortcut location from this window The options for the location of HAFM links are In your home folder Adds a new program group on the Start menu for the HAFM e Other Enables you to select any location on your hard drive or network for the HAFM files Don t create links Prevents the installation from creating a link for the HAFM 25 Click Next The Pre Installation Summary window is displayed 26 Review the installation information and click Install The pro
78. the name must be unique Attempt was made to display all zone members not logged in using the Zone Set tab but all members are currently logged in Only one instance of the HAFM application is allowed to be open per remote workstation The currently selected network address will be deleted The selected nickname will be deleted from the list of nickname definitions The selected product will be deleted from the list of product definitions The selected user will be deleted from the list of user definitions The selected zone will be deleted from the zone library 216 Informational and error messages Add one or more zone members to the new zone using the Modify Zone dialog box Add one or more zones to the new zone set using the Modify Zone dialog box At the New Zone dialog box choose a unique name for the new alias zone or zone set Informational message Close all but one of the HAFM application sessions Click Yes to delete or No to cancel Click Yes to delete the nickname or No to cancel the operation Click Yes to delete the product or No to cancel the operation Click Yes to delete the user or No to cancel the operation Click Yes to delete the zone or No to cancel the operation Table 30 HAFM Messages continued pa ie Are you sure you want to delete this zone set Are you sure you want to overwrite this zone set Are you sure you want to remove all member
79. the need to duplicate a design Planning window The Planning window Figure 84 differs slightly from the window that shows a discovered SAN The Planning window has e Three tabs e Physical Map e Product List Event Management A menu bar Click a menu item to see a list of available options A device toolbox The toolbox provides tools to add select and connect devices in the SAN To see a definition of a tool position your curser over the tool Master log 136 Optional HAFM features e Minimap Select View gt Planned SAN The Planning window is displayed Figure 84 SAN Edit View Plan Discover Configure Monitor Help 64M ak Amo Physical Map Product List gt Event Management gt DracoLab 34 DracoLab 11 Y DracoLab 29 Ying DracoLab 33 a draco 1 switch av 3 CJ pan Master Log Define gt Minimap Level Source Type Description Time Je Q Administrator Session Event SAN opened by Administ 2004 01 24 22 07 23 16 4 x Product Event A cooling fan propeller h 2004 01 24 16 41 47 16 Mej e ae X HAFMSERVER_v8 1 0 Clients 2 Administrator Figure 84 Planning window Plan design By designing a plan you can configure connect and arrange planned devices This saves you cost and time by enabling you to evaluate the plan before implementing the design Planning a SAN To plan a new SAN 1 Select SAN gt New Plan or press Ctr
80. the previous values 132 Optional HAFM features Open Trunking log T he Open Trunking log Figure 81 provides details on flow rerouting through switch ports Date Time Receive Port Target Domain Ola Exit Port New Exit Port Jl Refresh Close Help F igure 81 Open Trunking log The log lists the following Date Time The date and time of the rerouting occurrence Receive Port The receive port number decimal on the local switch associated with the flow that was rerouted Target Domain The domain ID decimal associated with the flow that was rerouted Old Exit Port The exit port number decimal on this switch that the flow used to access the target domain New Exit Port The exit port number decimal on this switch that the flow now uses to access the target domain Performance Module Performance Module is a feature that you use to monitor SAN devices For information about event monitoring and notification see the HAFM online help Displaying connection utilization The HAFM application shows the percentage of data utilization of the trunks To display the connection utilization legend Select Monitor Utilization gt On from the main window menu bar or press Ctrl U To turn utilization off Select Monitor gt Utilization gt Off from the main window menu bar See Viewing the HAFM main window on page 33 for details HA Fabric Manager user guide 133 Monitoring swi
81. the zone selected no longer exists in the fabric A zone set cannot be deactivated if there are no active zones A zoning operation was attempted without a zone set selected A zoning operation was attempted without a zone set selected or the zone set you selected no longer exists in the fabric You cannot display unused ports when adding ports by WWN Entries in the password box and confirmation password box do not match The entries are case sensitive and must be the same Only IP addresses of remote workstations specified at the Remote Access dialog box are allowed to connect to the HAFM appliance 226 Informational and error messages Choose a zone member and try the operation again Choose a zone and try the operation again Choose a zone and try the operation again Informational message only no action is required Choose a zone set and try the operation again Choose a zone set and try the operation again Change the add criteria to Add by Port Enter the password and confirmation password again Consult with the customer s network administrator to determine if the IP address is to be configured for remote sessions Table 30 HAFM Messages continued CE CSC CN Remote session support The connection between Consult with the customer s network has been disabled the specified remote administrator to determine if the workstation and the workstation entry should be HAFM
82. threshold 1 Select Configure gt Port Fencing The Port Fencing dialog box is displayed Figure 73 on page 124 2 Select Security from the Violation Type list 3 Click Edit The Edit Security Threshold dialog box is displayed Figure 79 Edit Security Threshold x Block a port when one of the following security violation types meets the threshold Authentication Fabric Binding Switch Binding Port Binding ISL Security N Port Connection Not Allowed Name Default Security Policy Threshold 5 w errorsper 5 Minutes OK Cancel Help Figure 79 Edit Security Threshold dialog box 4 Make changes to the threshold if necessary 5 Click OK to accept the changes and close the Edit Security Threshold dialog box If the threshold has already been assigned to ports the message This edit will apply to affected switches is displayed Click OK to close 128 Optional HAFM features 6 To assign this threshold to fabrics switches or switch ports see Assigning thresholds on page 126 7 Click OK Finding assigned thresholds HAFM allows you to find all ports with a specific threshold applied To find assigned thresholds 1 Select Configure gt Port Fencing The Port Fencing dialog box is displayed Figure 73 on page 124 2 Select a threshold type from the Violation Type list Select a threshold from the Threshold table 4 Click Find Each port that uses the selected threshold is highligh
83. to name a policy set the limit and period and select objects to which to apply the policy If a switch does not support Port Fencing the ISL threshold box displays a Port Fencing Not Supported message Configuring Port Fencing To configure port fencing the following requirements must be met To configure Port Fencing you must have one of the following models which must be running firmware 7 0 or later e Edge Switch 2 16 e Edge Switch 2 24 e Edge Switch 2 32 e Director 2 64 e Director 2 140 Firmware 7 x supports ISL protocol fencing only Firmware 8 x supports ISL protocol link fencing and security fencing All switches must be discovered directly using MPI Adding thresholds HAFM allows you to manage ISL protocol link and security thresholds Adding ISL Protocol thresholds Use an ISL protocol threshold to block a port when one of the following ISL protocol errors meets the threshold ISL Bouncing ISL has repeatedly become unavailable due to link down events e ISL Segmentation ISL has repeatedly become segmented e ISL Protocol Mismatch ISL has been repeatedly put into the Invalid Attachment state due to a protocol error To add ISL Thresholds 1 Select Configure gt Port Fencing HA Fabric Manager user guide 123 124 The Port Fencing dialog box is displayed Figure 73 2 Port Fencing x Violation Type ISL Protocol X D ports blocked by thresholds ISL Thresholds Ports Name Limit
84. want to remove from the Available Addresses list Click Remove Click OK Configuring a community string The community string defines read write accessibility to devices By default the public community has read only privileges and the private community has read write privileges However you can customize the community string To specify community strings used to communicate with products perform the following procedure 1 Select Discover gt Setup The Discover Setup dialog box is displayed Figure 32 on page 72 Select the IP address that you want to change from the Available Addresses list Click Add The Address Properties dialog box is displayed Figure 35 on page 76 Click the SNMP tab HA Fabric Manager user guide 77 The SNMP tab is displayed Figure 36 Address Properties A x IP Address SNMP Product Type and Access Set the SNMP community strings used to communicate with devices Read 6 Default public Custom Write e Default private Custom OK Cancel Help Figure 36 Address Properties dialog box SNMP tab 5 7 8 9 Select a Read option Select Default public to select the default string Select Custom to specify a custom string Select a Write option Select Default private to select the default string Select Custom to specify a custom string If you selected Custom in step 5 or step 6 continue to step 8 Otherwise pr
85. your password secure Click Help For more information Help Figure 6 Welcome to Windows dialog box 4 Click Send Ctrl Alt Del at the top of the window to log on to the HAFM appliance desktop The Log On to Windows dialog box is displayed Figure 7 EY NOTE Do not press Ctrl Alt Delete on your keyboard This logs you on to the PC instead of the HAFM appliance HA Fabric Manager user guide 37 Disconnect Options Clipboard Send Ctr Alt Del Refresh Log On to Windows Professional Microsoft Built on NT Technology User name Administrator Password Cancel Options gt gt Figure 7 Log On to Windows dialog box 5 Enter the Windows 2000 user name and password and click OK You are logged in to the PC and the desktop is displayed EY NOTE The default Windows 2000 user name is Administrator and the default password is password The user name and password are case sensitive 6 If the HAFM 8 8 Log In dialog box is not displayed double click the HAFM 8 8 icon on the desktop The HAFM 8 8 Log In dialog box is displayed Figure 3 on page 31 The default address that is displayed in the Network Address box is the address of the last appliance accessed Click the Network Address list to view the network addresses of all HAFM appliances that were accessed from the computer you are logged in to 7 Enter the HAFM appliance IP address in the Network Address box e If you want to connect to an
86. 0 eee ee eee ee 183 Changing a CHAP Secret for a detached device 1 2 0 0 eee eee ee 183 Removing a detached device from a switch 0 0 cee eect eee ee 183 Enabling or disabling E_Port and N_Port authentication 2 2 2 000 0 eee eee 183 Changing the Enable Authentication method 2 0 0 cee eee eee 183 Changing the port authentication state for an authenticated device 184 Changing the port authentication state for a nonauthenticated device with or without a CHAP A A Sethe cao ht deen a ee 184 Changing the port authentication state for a nonmember device manageable without a CHAP CTI do tats fe tt A ee BE sri Sr feb et ak acter 184 Changing the port authentication state for a nonmember device that is not managed 184 Applying changes and confirmation 4 4 6 rt es Paw oe panne ae aww des 185 IP Access Control list tabe rtorras raid 186 Adding a new IP address econo dd a epi bees 186 Editing one IP address or one range of IP addresses 1 2 0 0 000 cere eres 186 Removing multiple IP addresses at one time 2 2 eee eee eee 187 Applying changes and confirmation 6 2 0 0 0c cette eee 187 RADIUS Servers tab l n on dire erre iia da 188 Applying changes and confirmation a naana aaae 189 Viewing the secu Logi eis sei ee bomb iene e e e a e de e a a ad e aeaa aide 189 Differences between the SANtegrity Security Center and the SANtegrity Authentication 193 Contiguring HAFM inrough firewall ov
87. 00080088409C05 29 5 Qlogic 200100E08B290543 Figure 49 Route Properties dialog box Displaying fabric properties To display and change a fabric s properties 1 Right click a fabric icon or the background of an expanded fabric and select Properties The Fabric Properties dialog box is displayed Figure 50 Nickname Principal Switch 4 00008008840406F FabricBinding Disabled FabricStatus 0 0K cancel Help Figure 50 Fabric Properties dialog box The nickname is the only fabric property that can be changed Assigning a nickname to a fabric is optional However you cannot revert to having no nickname after one has been assigned You can change the nickname if you choose but you cannot leave the Nickname box blank after assigning a nickname HA Fabric Manager user guide 93 Configuring Enterprise Fabric Mode Enterprise Fabric Mode option automatically enables features and operating parameters in multiswitch enterprise fabric environments Enabling Enterprise Fabric Mode forces each switch in the fabric to enforce the following security related features e Fabric Binding Allows or prohibits switches from merging with a selected fabric Switch Binding Allows or prohibits switches from connecting to switch E_Ports and F_Ports Rerouting delay Ensures that frames are delivered through the fabric in order to their destination even if a shorter new path is created Frames sent over the new shorter path are
88. 00E08B090543 210000E08B lg MCDATA 1000080088409C05 ES 3032 172 31 1 36 OK Cancel Help Figure 47 Show Route dialog box 3 Select a destination port from the Destination Port list 4 Click OK The route between the ports is displayed Figure 48 P B ha Y amp 2G Dracoffab 34 DracoLab 32 DracolLab 33 Digital Equipment y A G A T3 draco 1 DracoLab 29 switch Figure 48 Displaying routes between ports Hiding routes You can hide routes between two ports in a multiswitch fabric To hide the route 1 Display the route that you want to hide See Displaying routes between ports on page 91 2 Right click the route and select Hide Route 92 Configuring SAN products and fabrics Displaying properties of routes To display the properties of a route 1 Display the route that you want to hide See Displaying routes between ports on page 91 2 Right click the route and select Properties The Route Properties dialog box is displayed Figure 49 Source Port Qlogic 210100E08B290543 Destination Port Qlogic 210000E08B090543 Route Source to Destination Network Nodes In Port Out Port Qlogic 200100E088290543 IMCDATA 1000080088409C05 5 29 IMCDATA 100008008840E010 27 23 Qlogic 200000E08B090543 Route Destination to Source Network Nodes In Port Out Port Qlogic 200000E08B090543 IMCDATA 100008008840E010 23 27 IMCDATA 10
89. 088A07C5A 100008008860308C 89 tono0s0oesa0876o 4 ay Fimiware PFE Key Aut EAS of Ds BAS Method BAS Tehet___ SSH Tehet_ of Ds vuns Y 2 Local Oly 701 024 2 07 00 00 64 2 07 00 00 64 2 Local Only 2 Local Only 2 Local Only 2 Users Software Devices IP Access Control Radus Servers RADIUS Servers and Sequence HostName UDP Port Tineout sec Retries ao be Y haruserverz ces 1 m Figure 111 Security Center Radius Servers tab You can specify up to three RADIUS servers per switch The device that must be authenticated by the RADIUS server always is display ed at the top of the table If the first device does not respond after a certain amount of time due to connection or configuration problems the next device is authenticated and so on The RADIUS servers and Sequence table includes information about the following The Host Name can be an IP Address The UDP Port displays the number that the device uses to contact the RADIUS server The port number is 1812 by default The Time out sec displays the amount of time to wait for a response from the RADIUS server before retransmitting the packet It can be 1 to 1000 the default is 2 seconds The Retries column specifies the number of times a packet is sent to a RADIUS server if a response is not received before the timeout After the retransmit limit is reached the Gateway switches to the
90. 2 Right click the zone set that you want to copy Select Duplicate to copy the zone set Select Deep Duplicate to copy the zone set and its zones The copied zone set is displayed 3 Optionally enter a new name for the zone set See Replacing zone members on page 157 4 Click OK Deleting a zone To delete a zone 1 Display the zone library See Displaying the zone library on page 149 The Zoning dialog box is displayed Figure 91 on page 149 2 Right click the zone you want to delete and click Delete EY NOTE The zone is deleted without confirmation If you delete a zone accidentally click Cancel instead of OK to restore it 3 Click OK Deleting a zone set To delete a zone set 1 Display the zone library See Displaying the zone library on page 149 The Zoning dialog box is displayed Figure 91 on page 149 2 Right click the zone set you want to delete and click Delete 158 Zoning EY NOTE The zone set is deleted without confirmation If you delete a zone set accidentally click Cancel instead of OK to restore it 3 Click OK Viewing zone and zone set properties You can view information for zones and zone sets such as names number of zones zone sets or zone members number of unique zone members and status 1 Display the zone library See Displaying the zone library on page 149 The Zoning dialog box is displayed Figure 91 on page 149 2 Right click a zone or zone
91. 2 SNMP trap recipients SNMP sends messages for specific events that occur on the appliance to trap recipients Figure 38 shows the dialog box used to configure the SNMP agent Community Strings Trap Recipients Y Enable Authorization Traps Trap Recipients Active IP Address UDP Port Community String Figure 38 SNMP Agent Setup dialog box Turning the SNMP agent on or off To turn the SNMP agent on or off select Monitor gt SNMP Agent gt On Off Configuring trap recipients To configure the SNMP agent that runs on the appliance and implements the Fibre Alliance MIB 1 Select Monitor gt SNMP Agent gt Setup The SNMP Agent Setup dialog box is displayed Figure 38 2 Click the Trap Recipients tab 3 Select Enable Authorization Traps if you want to enable messages to be sent when unauthorized management stations try to access SNMP information through the appliance 4 Click Add Help HA Fabric Manager user guide The Add Trap Recipient dialog box is displayed Figure 39 Trap Recipient y Activate IP Address UDP Port 162 Community String public v OK Cancel Figure 39 Add Trap Recipient dialog box 5 If you want this trap recipient to be active select the Activate check box 6 Enter the IP address or DNS host name of the trap recipient in the IP Address box This name must be 64 characters or fewer 7 Enter the User Datagram Protocol UDP port number in the Port box
92. 26 on page 64 2 Select a user from the Users table 3 Click Find The groups to which the user belongs are highlighted in the Groups list 4 Click OK Determining the discovery state 42 Ef NOTE The Product List panel can be hidden by default To view the Product List select View gt Product List or press F9 You can determine the discovery status of products by looking at the status column in the Product List Table 12 lists the operational statuses and their equivalent discovery states Table 12 Discovery state equivalent Operational status Discovery state Unknown Offline Operational Online Degraded Failed Using the HAFM application Grouping on the Physical Map To simplify the Physical Map devices are displayed in groups Figure 10 Groups are displayed with background shading and are labeled as a group You can expand and collapse groups to easily view a large topology SEAGATE ST318304FC SEAGATE SEAGATE ST318304FC ST318304FC Loop Group Figure 10 A group on the Physical Map EY NOTE Zonable fabrics are true fabrics Fabric groups are a set of connected devices that can or cannot be fabric devices Collapsing groups To collapse a single group on the Physical Map Double click the icon at the top right corner of the group on the topology jz Double click in the group but not on a device e Right click in a group but not on a device and select Collapse T
93. 6 Dsun java2d noddraw true Dsmp fabricPersistenceEnabled true Dsmp deployment prefix Client Dsmp debug Dsmp callback passive Dsmp flavor APP_FLAVOR Client popd endlocal Forcing all clients to polling mode y To force all clients communicating with a server to be treated as polling clients regardless of the parameters the clients launch with add the Dsmp callback passive parameter to the HAFM server section of the HAFM_sc bat file located in the HAFM 8 x bin directory typically in c Program Files HAFM 8 x bin The following example shows the edited files with the added parameter in bold setlocal pushd dp0 call bin set_cp bat rem HAFM Server start JAVA_HOME bin HAFMServer exe server Xm512m Xminf 15 Xmaxf 35 classpath SCLASSPATH Dsmp Mp max 512 Dsmp autodiscovery false Dsmp mpi test Dsmp deployment prefix Server Dsmp zoning legacy Dsmp zoning wait timeout 180000 Dsmp webServer Dsmp callback passive Dsmp flavor APP_FLAVOR Server rem HAFM Server Debug Mode rem start JAVA_HOME bin HAFMServerD exe server Xmx512m Xminf 15 Xmaxf 35 classpath SCLASSPATHS Dsun java2d noddraw true Dsmp Mp max 512 Dsmp autodiscovery false Dsmp mpi test Dsmp deployment prefix Server Dsmp zoning legacy 196 Configuring HAFM through a firewall Dsmp zoning wait timeout 180000 Dsmp debug Dsmp webServer Dsmp callback passive Dsmp flavor APP_FLAVOR Server
94. 62 To backup follow the steps in Customersupplied server backup on page 58 Ef NOTE A maximum of eight clients are allowed per HAFM appliance Ef NOTE The HAFM appliance supports up to 48 HP directors or switches managed products Table 3 Windows system hardware requirements for HAFM Minimum Recommended Processor 2 0 GHz Intel Pentium 4 Processor 3 0 GHz 1 MB 800 MHz FSB Intel Pentium 4 Processor Hardware 24 8X CD RW DVD Combo Data Only 48 32X CD RW DVD Combo Data Only Operating system Windows 2000 service pack 4 Windows 2003 Server Standard Edition Memory 1 GB 2 GB DDR400 SDRAM Memory Graphics card 16 MB 32 MB VGA capable Hard drive 40 GB 40 GB ATA 100 IDE 7200 rpm Modem 56K v 92 data fax modem PCI 56K v 92 data fax modem PCI Ethernet NIC HAFM overview 10 100 Mbps Ethernet LAN card 10 100 Mbps Ethernet LAN card Table 4 Windows system requirements for HAFM Processor 1 GHz Intel Pentium IIl or greater Hardware CD RW Operating system Windows 2000 Professional service pack 4 Windows 2003 Windows XP service pack 1 Windows 2000 Server service pack 4 Windows 2000 Advanced Server service pack 4 Memory 1 GB RAM minimum Disk space 650 MB disk space Video requirements 8 MB video RAM Resolution 256 colors Table 5 Solaris system requi
95. AFM Basic interface The removed user who is in a session with the switch can continue working on the switch until logging out Adding a set of users to multiple switches The Security Administrator can add the same set of users to multiple switches EY NOTE This feature is not available from the Element Managers To add the same set of users to multiple switches 1 Click Apply To HA Fabric Manager user guide 169 The Apply to Other Products dialog box is displayed Figure 103 apply to other products gt Select Node Name Nickname Model DomainiD Firmware Wi 1000080088602084 Coret 6140 1 06 01 00 Selecta v 100008008850208D Edgel 3232 2 07 00 00 J gt 100008008850208E Edge2 3216 23 070000 Unselect All v 2100008008850208C Edge3 4500 16 060200 Y amp 1000080086602086 Core2 6064 5 06 02 00 Al vi A r00008008e60208F Legecyt 5000 3 05 00 00 OK Cancel Figure 103 Apply to Other Products dialog box To be listed in this dialog box e The switches and directors must be manageable The Element Manager must manage one of the following models e A 16 port 1 Gb or 2 Gb switch e A 24 port 2 Gb switch A 32 port 1 Gb or 2 Gb switch e A 64 port or 140 port director The firmware must be 7 0 or later 2 Select the check boxes for the devices to which you want to apply the users 3 Click OK 170 SANtegrity Security Center Using the Security Change Confirmation and Status dialog b
96. AFM appliance manages The public LAN is for communication between the HAFM appliance and computers seeking remote client access to the HAFM appliance Either LAN connection on the HAFM appliance can be the public LAN or the private LAN The directors and edge switches can be managed via either LAN however only the public LAN supports remote client access The title bar of the main window of the HAFM application shows the IP address of the public LAN 22 HAFM overview Public and private LAN designations In a dual LAN configuration both LANs must be connected when the HAFM appliance boots If only one is connected the HAFM appliance interprets this as a single LAN configuration and the connected LAN is designated as the public LAN The HAFM application designates the public LAN as the first LAN detected whose IP address is not the reserved private subnet 10 x x x Thus if neither IP address is 10 x x x the first LAN detected by the HAFM application is designated as the public LAN This order of detection is influenced by Microsoft Windows and not guaranteed There are a two ways to ensure the pubic and private designations of the LANs e Assign the private LAN IP address 10 x x x to the LAN you want designated as the private LAN You must also have the public LAN connection active when the HAFM appliance is booting up Configure a specified Ethernet interface on the HAFM appliance to be the public LAN by manually editing a
97. AFM application is not running or the HAFM 8 8 Log In dialog box is not displayed on your remote workstation start the client application by following the appropriate procedure for your workstation s operating system see Table 1 Table 11 Starting HAFM on a remote workstation Operating Procedure software Windows 2000 a Start the HAFM client application using one of the Windows NT following options e Select Start gt Programs gt HP HAFM gt Windows XP HAFM x x e Double click the HAFM x x desktop icon b Enter the network address user ID and password for the HAFM appliance you want to access c Click Login The HAFM client accesses the HAFM appliance and the View All HAFM window is displayed Figure 8 HP UX From the directory in which you installed the HAFM application usually the home directory AIX Li a Go to the location where you installed the INUX A P application the default is usr Solaris b Start the appliance and client HAFM c To start the client only Client Or Go to the bin directory in which you installed the application the default is opt cd path HAFM x x bin d Start the appliance HAFM_Mgr start e Start the client HAFM_Client 2 Click OK 3 Follow step 7 through step 10 in Accessing the HAFM application locally on page 36 Logging out of an appliance To log out of the appliance select SAN gt Log Out You are logged out of the current appli
98. Click OK Exporting a plan You can export planning files to share your plan with others or to archive it for future reference Follow the instructions described in Exporting data on page 52 Printing a plan You can export a plan as a Physical Map in JPG format You can then print the JPG file from a photo application or a web browser 146 Optional HAFM features 7 Zoning Zoning defines the communication paths in a fabric A zone consists of initiator and target ports in the SAN Ports can communicate only with other ports in their zone However ports can be members of more than one zone To zone devices in a fabric the fabric s principal switch must be an HP switch and HAFM must discover and manage it HAFM performs zoning discovery once at startup and thereafter once every two hours during routine discovery For best results HP recommends that you perform zoning five discovery cycles after starting the HAFM appliance The following zoning features are described e Zoning limits page 147 e Zoning naming conventions page 148 e Zoning configuration page 148 e Zoning administration page 156 Zoning limits You can configure large zone sets with HAFM Table 23 lists the zoning limits for the edge switches and directors EY NOTE Hard zoning is enforced when the firmware initializes Devices not conforming to zoning rules are restricted to their assigned zones Table 23 Zoning parameter limits Zoning parameter
99. Dsmp Mp max 128 Dsmp callback retries 100 Dsun java2d noddraw true Dsmp mpi test Dsmp deployment prefix Server Dsmp zoning legacy Dsmp zoning wait timeout 180000 Dsmp webServer Dsmp flavor APP_FLAVOR Server amp Xmaxf 35 Xincgc classpath CLASSPATH Dsmp mpi test Dsmp deployment prefix Server Dsmp zoning Principal Dsmp zoning wait timeout 180000 Server where S SAPP_FLAVORS is HAFM 3 After the Dsmp zoning wait timeout line add the following lines Be sure to include a space before and after each entry Dsmp log maxLogDiskSpace maximum space reserved for the log between 1MB and 1024MB inclusive Dsmp log eventCountAfterTruncate number of entries to be saved between 1 and 2000 Xmaxf 35 Xincgc classpath CLASSPATH Dsmp mpi test Dsmp deployment prefix Server Dsmp zoning Principal Dsmp zoning wait timeout 180000 Dsmp log maxLogDiskSpace 50 Dsmp log eventCountAfterTruncate 1000 Server amp HA Fabric Manager user guide 287 288 Editing batch files Index A access assigning 64 changing 65 removing 65 accessing remote HAFM appliances 39 actions adding to rules 114 activating zone sets 152 active sessions dialog box 41 active sessions viewing 41 adding IP addresses 76 trap recipients 99 users 64 adding actions 114 adding devices to a plan 138 adding product list columns 86 adding trap recipients 8 admin access assigning 64 65 alerts clearing I
100. Element Manager because the Ethernet link is down or busy The SNMP configuration cannot be saved at the Element Manager because the Ethernet link is down or busy Displays if you try to set ports to operate at 1 Gb sec data speed through the Configure Ports dialog box and some ports do not support speed configuration Displays if you try to set ports to operate at 2 Gb sec data speed through the Configure Ports dialog box and some ports do not support speed configuration 238 Informational and error messages Ensure the device is logged out and perform diagnostics again Log out the device and run the diagnostic test again The FICON Management Server property active save must be disabled for HAFM to save the IPL file Retry the operation later If the condition persists contact the next level of support Retry the operation later If the condition persists contact the next level of support Replace ports that do not support speed configuration with those that do support more than one configuration Replace ports that do not support speed configuration with those that do support more than one configuration Table 31 Cannot set all ports to Negotiate due to port speed restriction on some ports Cannot set Fibre Channel parameters Cannot set switch date and time Cannot set switch state Cannot set write authorization without defining a community name Cannot start data col
101. Ethernet events An Ethernet event occurs when the Ethernet link between the appliance and the managed product is lost To enable Ethernet events notification 1 Select Monitor gt Ethernet Event The Configure Ethernet Event dialog box is displayed Figure 63 7 Enable Ethernet Event Ethernet Time Out minutes 10 120 OK Cancel Help Figure 63 Configure Ethernet Event dialog box 2 Select the Enable Ethernet Event check box 3 Enter the amount of time between the event and the notification in the Ethernet Time Out box 4 Click OK Creating reports Presenting and archiving data about a SAN is equally as important as gathering the data Through the application you can generate reports about the SAN You can send the reports to network administrators support consultants and others interested in the SAN s architecture or archive them for future reference The following report types are available Product List Lists the Product List which has detailed information about the products in the SAN Operating Status Change Lists status change for products in the SAN including the number of products online and offline the product with the most downtime and details about each product s status This report only captures events from the event log for the last 30 days To save space the log can be truncated and events lost resulting in an inaccurate summary Performance Data Displays the performance data The Perf
102. HAFM appliance on the list select the IP address e If you are logging in to the local HAFM appliance the network address is localhost e If you want to connect to an HAFM appliance that is not listed enter the IP address 8 Enter your user name and password in the User ID and Password boxes respectively EY NOTE If user names have not been established use the default user name Administrator and password password HP recommends that you change the default password as soon as possible To add or modify user names passwords and user rights see Managing users on page 63 9 If you want your computer to save the login information select Save Password 10 Click Login The HAFM window is displayed Figure 8 on page 39 38 Using the HAFM application The network address you entered remains in the Network Address list for future logins If you fail to connect to the appliance the HAFM window is not displayed and the network address does not remain in the list View All HAFM 8 8 Joj xj SAN Edit View Plan Discover Configure Monitor Help 2 de wi o QS ta TE A aj B Name View aiv gt Event Management Security Levels Nickname Name gt Switch Count 1 100008008860308C 1000080088609E4D 100008008840406F 1000080083407C64 1000080088409816 A 100008008840428D DracoLab 34 100008008540626D 1000080088E0AC6B 1000080088E30058 1000080088E3009C 1000080088E30169 Odd ABBA
103. HARM 5 3 pi rc aiii id bob dci a 32 Adding an appliance rr A ds 32 Removing an appliance 00 oa ta bee AAN AA AA 32 Viewing the HAFM main window s a ecos A 33 HAFM main window panela ii di 33 M nu Bar asea e a a e e a e tees a E A 34 Toolbar sex seo A Eea a En e nt tha fe E E 34 View lab saca ea E a E EA 34 O AA a e a a a a e aa shied 34 Physical Topology map ooann naaa 34 o A A O A A 34 A A EE 34 Connection utilization legend oso coi ici rs ra di 35 MINIMO aras tua o a os laos bate ae da cida 35 Anchoring or floating the Minimap sini css cis a a ee ee RW a 35 HA Fabric Manager user guide 3 Floating the Minimap rr e a Blane Mh ooh his 35 Anchoring the MiS A oa Soke ERA 35 Resizing the Minimap Lirios o po Gree Baga Pa e 35 Status Da esre ian ap de ek Se eet elas NA 35 Selecting a customized view of the main window 0 0 e cece eee eee eens 36 Accessing the HAFM application wis tact usy guns ore Giekotea ce ehh ates eA Oh AIR A 36 Accessing the HAFM application locally sian beans 4a gadie vada es 36 Accessing the HAFM application remotely 0 3 logging out ofan appliance ia bad vx we hue ea 924 Fo Gee Ban Wen dl A UNS 40 Monitoring the HAFM application 0 bs wer eens a kG ahi eS 40 Starting and stopping HAFM Services ooooooooocooccco eee eae 41 Viewing USER SESSIONS scier a eed a Cae a Soe ha he a pd 41 Disconnecting Users a a Soh A a a aS 41 Determining User GLOUPS Ls Fs aa A OS tae et
104. HP StorageWorks HA Fabric Manager user guide FW 08 01 00 HAFM SW 08 08 00 Part number AA RS2CG TE Sixth edition December 2005 invent Legal and notice information O Copyright 2001 2005 Hewlett Packard Development Company L P Copyright 2005 McDATA Corp Hewlett Packard Company makes no warranty of any kind with regard to this material including but not limited to the implied warranties of merchantability and fitness for a particular purpose Hewlett Packard shall not be liable for errors contained herein or for incidental or consequential damages in connection with the furnishing performance or use of this material This document contains proprietary information which is protected by copyright No part of this document may be photocopied reproduced or translated into another language without the prior written consent of Hewlett Packard The information is provided as is without warranty of any kind and is subject to change without notice The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services Nothing herein should be construed as constituting an additional warranty HP shall not be liable for technical or editorial errors or omissions contained herein Intel and Pentium are trademarks or registered trademarks of Intel Corporation or its subsidiaries in the United States and other countries Java is a U S trademark of Sun Microsystems I
105. IP must be specified Description IP addresses must be specified for all switches hubs and bridges Command RE IPAddress for device switch or device hub or device bridge OK Cancel Help Figure 90 Planning Rules dialog box Ey NOTE box If spelling or syntax errors are detected the rule cannot display in the Planning Rules dialog 3 Select the rules you want to apply when evaluating the plan 4 Click OK Plan evaluation To evaluate a plan 1 Select SAN gt Open plan from the Planning window menu bar to open the plan 2 Select Plan gt Evaluate The application evaluates the plan and shows the results in the SAN Evaluation Report window 3 Review the report Click the hyperlinks to jump to devices and view the tips to determine resolutions 4 Resolve the issues 5 Select Plan gt Evaluate to revaluate the plan 6 Repeat step 2 through step 5 if more problems are identified HA Fabric Manager user guide 145 Plan conservation This section describes how to save export and print a plan Saving a plan After you design a plan you can save it for future reference To save a plan with its current name select SAN gt Save Plan from the planning window menu The plan is saved with the current name To save a plan with a new name 1 Select SAN gt Save as Plan from the Planning window menu bar The Save As dialog box is displayed 2 Enter a new file name in the Save As box 3
106. Incid Informational Q Product Threshold Fatal 9 Product Threshold Warning A Product Threshold Informational Q Ethernet Warning amp a OK Cancel Help Figure 28 Filter dialog box 3 4 Move events between the tables by selecting the event and clicking the appropriate arrow button Click OK The Users dialog box opens Turn on event notification for the user by selecting the Filter check box Click OK 66 Managing the HAFM application Configuring remote management access To specify the network addresses that can access the appliance 1 Select SAN gt Remote Access The Remote Access dialog box is displayed Figure 29 v Allow remote management sessions Maximum number of remote sessions 25 Allow 8 Any network address to connect _ Only network addresses below to connect D All network addresses EXCEPT those below to connect OK Cancel Help Figure 29 Remote Access dialog box 2 Select Allow remote management sessions to allow others to access the appliance remotely Enter the maximum number of remote sessions you want to allow 3 4 Select whether to allow all or some network addresses to connect 5 If you select Only network addresses below to connect or All network addresses EXCEPT those below to connect enter the appropriate addresses in the Network Address box To add an address click Add enter a network address and then click OK To remove a
107. Log In dialog box is displayed Figure 3 Adding an appliance 1 Select SAN gt Log Out The HAFM Log In dialog box is displayed Figure 3 on page 31 2 To add a new appliance enter the appliance network address in the Network Address box TIP If the appliance and client are on the same machine you can type localhost in the Network Address box Ef NOTE You must have an established login and password account on the new appliance The appliance name is displayed in the Server Name box 3 Enter your user ID and password A Specify whether you want the application to remember your password the next time you log in 5 Click Login The application logs in to the appliance located at the specified network address Removing an appliance You can remove appliances from the list in the Log In dialog box 1 If you are logged in to an appliance select SAN gt Log Out If you do not have the application open start the application The HAFM Log In dialog box is displayed Figure 3 on page 31 2 Select the appliance you want to remove from the Network Address list The selected appliance IP address is displayed in the Network Address box Y IMPORTANT The appliance will be deleted without confirmation 32 Using the HAFM application 3 Click Delete 4 Click OK Viewing the HAFM main window Figure 4 shows the View All display of the HAFM main window You can customize your window view to show only the i
108. M Messages continued CEN CS CN Connection to The HAFM application at Restart the HAFM application to management server lost a remote workstation lost connect to the HAFM appliance Click OK to exit the network connection to application the HAFM appliance Could not export log to A log file input output If the disk is full use another disk If file I O error occurred and the disk is write protected change the file could not be the write protect properties or use saved to the specitied another disk destination The disk can be full or write protected Default zoning is not A default zone cannot be Change the Interop Mode from supported in Open Fabric enabled when the Open Fabric to Homogeneous Mode product is enabled for using the Configure Fabric Open Fabric mode Parameters dialog box You can Open Fabric mode does also redefine zone members by the not support zone device WWN members defined by port numbers Device is nota member of The selected device is not Enable the default zone or activate a zone in the active zone a member of a zone in a zone set containing the member set the active zone set and before attempting to show the therefore cannot route communicate with the other devices in the route Download complete Download of HAFM and Start the HAFM application to Click OK and start the the Element Manager is continue HAFM complete Duplicate community If configuring two Verify that
109. MI HA Fabric Manager user guide 283 to read SMP Server S SAN_JRE_DIR bin java classpath CLASSPATH Dsmp deployment prefix Server Djava rmi server hostname x x x x Dsmp server edport 1 DZoning Principal com smp server SANMgrRMI where x x x x is the desired IP address for the server Setting the zoning delay Edit the batch file to set the application to configure zoning through either ECC or Telnet If a response is not received within the amount of time specified here the application ends the operation and report that it failed If the flag is not set the time out returns to its default setting of 180000 ms 180 sec EY NOTE Setting large zones through Telnet can take a long time for large zone sets approximately six seconds for each zone set Windows systems 1 Open the Instal1_Home bin HAFM_sc bat file using a text editor 2 Find the following lines and add the bold text with one space before and after the text rem HAFM Server start SJAVA_HOME bin HAFMServer exe server Xmx512m Xminf 15 Xmaxf 35 classpath S CLASSPATH Dsmp Mp max 512 Dsmp autodiscovery false Dsmp mpi test Dsmp deployment prefix Server Dsmp zoning legacy Dsmp zoning wait timeout 180000 Dsmp webServer Dsmp flavor APP_FLAVOR Server 3 Edit the Dsmp zoning wait timeout entry Be sure to add a space after your entry 4 Save and close the file Specifying a host IP address in multi NIC networks I
110. NOTE Although products can perform normal operations without an HAFM appliance the HAFM appliance should operate at all times to monitor product operations report failures log event changes and log configuration changes HAFM application The application is composed of two parts the appliance which runs only on the HAFM appliance and the client The server is installed on one HAFM appliance and stores storage area network SAN information it does not have a user interface To view SAN information through a user interface you must log in to the server running on the appliance through a client EY NOTE The server and clients can reside on the same machine or on separate machines In most configurations the server calls the client whenever it has new data In some cases a network can utilize virtual private network VPN or firewall technology which can prohibit communication between the server application running on HAFM appliances and clients In this situation the application automatically detects the network configuration and runs the client in polling mode See Configuring HAFM through a firewall on page 195 Dual LANs on the HAFM appliance When two LANs are connected at the HAFM appliance Microsoft Windows and the HAFM application designate one as the public LAN and the other as the private LAN The private LAN is for communication between the HAFM appliance and the directors and edge switches that the H
111. Operator The ID of the user is Administrator and the password is password The third and fourth column indicate whether a user has access to the switch through the HAFM Basic or Telnet interface or through both of them 168 SANtegrity Security Center A default user is set up in the switch user base The ID of the user is Administrator and the password is password There is one default user displayed in the table and the Telnet and HAFM Basic check boxes are selected Adding a new user To add a new user 1 Click Add The Add Edit User dialog box is displayed Figure 102 Add Edit User i xj Add or Edit User User ID Password Retype ok Cancel Figure 102 Add Edit User dialog box 2 Enter information in the boxes User ID must be unique If you specify an existing ID it will be rejected The maximum length of password is 24 characters 3 Click OK 4 Assign the Administrator or Operator role to the user By default all new users are set up with an Administrator privileges You can changed this by clicking the list under the Role column and selecting another option The Security Administrator can delete users from the switch user database There must be at least one user with Administrator privileges for Telnet and HAFM Basic A message is displayed if you try to delete the last user with Administrator privileges If a user is removed from the table the user cannot access the switch through the Telnet or H
112. PI Manage 2004 09 22 1 1 Informational unknown 10003 API Manage 200409722 1 1 Informational Admitsinotarr 10000 EvvS User C 200409723 0 1 Led Export Clear Refresh Close Help Figure 112 Security Log Columns in the Security Log are Severity The severity level of the event informational warning or fatal User The user associated with the event Reason The reason code for the failure Description Provides details of the event and the IP address of the product Date Time The date and time that the event occurred The format is yyyy mm dd hh mm ss tt The last two characters hundredth of seconds are for advanced logs with a higher frequency rate Count The number of times that the same event occurs Category The category of the event IP The IP address of the switch Role The role of the user Interface The interface Table 24 lists the Security Log reason codes Differences between the SANtegrity Security Center and the SANtegrity Authentication The SANtegrity Security Center for your HAFM appliance that manages the fabric is similar to the SANtegrity Authentication for the Element Manager that manages a single product The following differences between the two occur because one manages the fabric while the other manages a single product The SANtegrity Security Center is accessed by a license key and the SANtegrity Authentication accessed on the Element Manager
113. SANtegrity features SANtegrity includes a set of features that enhance security in Storage Area Networks SANs that contain a large and mixed group of fabrics and attached devices Through these features you can allow or prohibit switch attachment to fabrics and device attachment to switches These features are enabled by purchasing a feature key then enabling the key through the Configure Feature Key dialog box SANtegrity Binding features include Fabric Binding e Switch Binding Although Enterprise Fabric Mode is not a keyed feature the SANtegrity Fabric Binding and Switch Binding must be installed before you can use the Enterprise Fabric Mode function through the HAFM Fabrics menu Fabric Binding This feature is managed through the Fabric Binding option available through the Fabrics menu in HAFM when the Fabrics tab is selected Using Fabric Binding you can allow specific switches to attach to specific fabrics in the SAN This provides security from accidental fabric merges and potential fabric disruption when fabrics become segmented because they cannot merge Enable disable and online state functions In order for Fabric Binding to function specific operating parameters and optional features must be enabled Also there are specific requirements for disabling these parameters and features when the director or switch is offline or online Be aware of the following Because switches are bound to a fabric by WWN and domain ID
114. SL alerts 98 appliances logging out 40 arranging device icons 139 audience 17 audit log copying from 104 overview 101 authorized reseller HP 19 B band information status icons 269 bridge group icons 270 bridge icon planned 269 browse access assigning 64 65 C call home notification configuring 105 changing fabric properties 93 IP addresses 77 nicknames of fabrics 93 product list columns 87 product properties 90 product types 90 user accounts 65 users 65 view options 36 83 zone names 157 zone set names 157 clearing ISL alerts 98 columns changing in product list 87 creating in product list 86 removing from product list 88 community strings configuring 77 reverting to default 78 comparing zone sets 160 compatibility with applications 267 configure menu switch binding 120 Configure Open Trunking dialog box 132 configuring community strings 77 event notification call home 105 e mail 104 planned devices 139 planned ports 140 remote access 67 connecting planned devices 139 connections illustrated 270 on persisted fabrics 97 98 connections monitoring utilization 133 conventions document 18 text symbols 18 copying zone sets 158 copying from logs 104 creating HA Fabric Manager user guide 289 columns product list 86 product list columns 86 zone sets 151 zones 150 creating user accounts 64 D data exporting 51 importing 51 data exporting 135 deactivating zo
115. Screen O Percentage OK Cancel Figure 13 Zoom dialog box 2 Select a zoom percentage 3 Click OK Zooming out To zoom out of the Physical Map use one of the following methods 1 Click the zoom out icon 4L on the toolbox or Select View gt Zoom The Zoom dialog box is displayed Figure 13 2 Select a zoom percentage 3 Click OK Changing view options on the Physical Map To change the view of the Physical Map select View gt Show from the HAFM menu bar and then select one of the available view options HA Fabric Manager user guide 47 Turning flyovers on or off Flyover text is displayed when you place the cursor on a product They provide a quick way to view a product s properties To turn flyovers on or off 1 Select View gt Enable Flyover Display and select the check box to enable flyovers Or Select View gt Enable Flyover Display and deselect the check box to disable flyovers Configuring nicknames HAFM allows you to use nicknames as a method of providing simple names to products and ports in a SAN Using HAFM you can Associate a nickname with a product or port WWN that has been discovered Add a WWN and an associated nickname for a product or port that has not yet been discovered Remove or disassociate a nickname from a WWN Viewing nicknames You can view devices by the device nickname 1 Select Configure gt Nicknames The Configure Nicknames dialog box is displayed
116. Table 18 Open trunking configuration options Option Function when enabled Enable Open Trunking Enables the open trunking option Congestion Thresholds Sets the congestion threshold levels for ports as percentages 1 99 of link bandwidths When the link s traffic load becomes congested traffic is rerouted if possible to an uncongested link Two options are available Select the check box under the Use Algorithmic Threshold column to use a value computed by the rerouting algorithm Click in the Threshold column and enter a value in the range of 1 through 99 Event Notification Identifies the type of events that result in an event log entry and generates an SNMP trap The notifications occur on first instance only The event notification types are Unresolved congestion The rerouting algorithm cannot find a path for rerouting data flow to relieve congestion Back Pressure The low BB_credit threshold has been exceeded Low BB_Credit threshold Defines the acceptable percent of time that the transmitting link has no BB_credit Two options are available e Default threshold value e User defined threshold value Configuration To enable open trunking for a switch and configure threshold values and event notification options 1 Select Configure gt Open Trunking HA Fabric Manager user guide 131 The Configure Open Trunking dialog box is displayed Figure 80 y Enable Open Trun
117. Table 44 User action event properties Descriptor Description Description of the performance event Source User ID of the user who performed the action IP Address IP address of the client from which the action was taken Node Name WWN of the device that encountered an event Port Name WWN of the port that encountered an event Event Level Severity level of the event always informational Table 45 describes the user action properties about the platform and the appliance Table 45 User action system properties Descriptor Admin Client Count Number of administrator clients logged in to the SAN Client Count Discovery Off Number of clients logged in to the SAN Specifies whether discovery is turned on Event Notification Off Free Memory Specifies whether event notification is turned on Available physical memory Server Name IP Address Appliance s IP address VM Name Name of the Java Virtual Machine VM Vendor Vendor of the Java Virtual Machine VM Version Version of the Java Virtual Machine OS Architecture Operating system architecture OS Name Operating system name OS Version Operating system version Name of the appliance Subnet Mask Total Memory Discovered subnet mask Total physical memory Trap Forwarding Off Specifies whether trap forwarding is enabled Region Region of the world where the user is located Time Zone User s time zone User Co
118. UTION Once you have chosen a schedule type and added the first phrase do not change types or you can lose your work Actions You can configure multiple actions to be performed when the specified triggers are fired The following actions are possible E mail Send an e mail to specified recipients Export Export data e Launch Launch an application using a script Log Add an entry to the Master Log file and window display e Message Display a message to all open clients Pause Insert a pause between actions Report Generate a report Sound Play a sound The launch and sound actions point to information in a file You can select an existing option from a list or add options to the list as follows Fora launch action add your script files to the Instal1_Home Server LaunchScripts directory For a sound action add your sounds to the Instal1_Home Server Sounds directory 114 Optional HAFM features Ef NOTE You can specify macros for some actions by clicking in the Value column and then right clicking and selecting an argument from the menu See Writing Event Management macros on page 277 for instructions Window To view Event Management click the Event Management tab on the HAFM main window All configured rules display Figure 69 From this dialog box you can manage Event Management rules See Table 17 for a description of each window section Table 17 Event Management tab Descr
119. Vendor Device s vendor Model Device s model Serial Number Device s serial number Port Count Device s port count Firmware Device s firmware level 276 Reference Table 48 Device state properties continued Comments User entered comments Text through Text4 User entered values Device Status Device s availability online offline Table 49 describes the properties about the platform and the appliance Table 49 Device state system properties Property Description Admin Client Count Number of administrator clients logged in to the SAN Client Count Number of clients logged in to the SAN Discovery Off Specifies whether discovery is turned on Event Notification Off Free Memory Specifies whether event notification is turned on Available physical memory Total Memory IP Address Appliance s IP address VM Name Name of the Java Virtual Machine VM Vendor Vendor of the Java Virtual Machine VM Version Version of the Java Virtual Machine OS Architecture Operating system architecture OS Name Operating system name OS Version Operating system version Server Name Name of the appliance Subnet Mask Discovered subnet mask Total physical memory Trap Forwarding Off Specifies whether trap forwarding is enabled Region Region of the world where the user is located Time Zone User s time zone User Count Number of users You can write macros
120. XXX Dsmp flavor 3APP_FLAVOR Server Client rem HAFM Client start JAVA_HOME bin HAFMClient exe Xmx256m Xminf 15 Xmaxf 35 classpath CLASSPATH Dsun java2d noddraw true Dsmp fabricPersistenceEnabled true Dsmp Mp max 256 Dsmp deployment prefix Client Dsmp client export port YYYY Dsmp flavor APP_FLAVOR Client rem HAFM Client Debug Mode rem start S JAVA_HOME bin HAFMClientD exe Xmx256m Xminf 15 Xmaxf 35 classpath S CLASSPATH Dsun java2d noddraw true Dsmp fabricPersistenceEnabled true Dsmp Mp max 256 Dsmp deployment prefix Client Dsmp debug Dsmp client export port YYYY Dsmp flavor APP_FLAVOR Client end popd endlocal ae 200 Configuring HAFM through a firewall HAFM_c bat HAFM_c bat starts the client only HAFM_c bat starts the client only and is installed with the client software Edit the file to include the parameter Dsmp client export port YYYY Add this parameter after the CLASSPATH parameter The following example shows the edited file with the added parameters in bold setlocal pushd dp0 call bin set_cp bat rem HAFM Client start SJAVA_HOME bin HAFMMClient exe Xmx256m Xminf 15 Xmaxf 35 Xincgc classpath S CLASSPATH Dsmp Mp max 256 Dsmp deployment prefix Client Dsmp flavor HAFM Client rem HAFM Client Debug Mode rem start SJAVA_HOME bin HAFMClientD exe Xmx256m Xminf 15 Xmaxf 35 Xincgc classpath CLASSPATH Dsmp Mp max 256 Dsmp d
121. a coger Gus 106 Select Template dialog box e eee nee eal eae Ree tr Ra ew ET ee ee 107 Repons ciclog DO aa od rr taa tata oe 108 Configure Feature Key dialog box n onanan nanana 111 New Feature Key dialog box lus vhs dc nwa de ete ee dy raya SAAS ee Ee A 111 Trigger phrase development s n aiv0 Pad one Rye ewes NSP La Ree REREAD 113 Event Management tab a mee Giick wd A ARA Ad 116 Add Rule dialog DO 5 ta A A A gh Ge eens ee PR eh ae 117 Switch Binding State Change dialog box 2 2 teens 120 Switch Binding Membership List dialog box 2 0 een ee 121 Port Peneing dial g DOC tad ARAN A 124 Add ISL Threshold dialog Dox 0 A AR LS 124 Add Link Threshold dialog box snes A pO A RC 125 Add Security Threshold dialog box n o Sak hse ed oe Reg MENS eS 126 Edit ISL Threshold dialog box rt A A A A td 127 Edit Link Threshold dialog box RS ARS 128 Edit Security Threshold dialog box n on RA AAA eR A 128 Configure Open Trunking dialog Dia 24K ech yee oid eee Se ENS 132 Open Trunking loga ua Goa aaa TORA RA an AA acme 133 HA Fabric Manager user guide 13 82 Performance graph dialog potasa ts vis Th oat hee 134 83 Port Performance Graph dialog bot its tr EE a 135 84 Planning Window s oea mh aaa eaa a aan a BOA a a ae ale E a a ae Ree ee 137 85 New Plan dialog box n dd a TS AAA A 137 86 Open Plan dialog bee ae aves paa Mar e Cut lle She eh 138 87 Insert Multiple Devices dialog box o oooooooooooo
122. abled 8 1000080088408260 Test E Port 200C080088A0406F eft Disabled 0 1000080088E04B23 E Port 200408008840406F SwitchDefaut 1 2005080088A0406F witehDefaut 2 2006080088A0406F witehDefaut 3 2007080088A0406F SwitchDeteut 4 5 2009080088A0406F i wichDefaut 6 200408008840406F a A ee hare oes 1 Figure 107 Security Center Devices tab For two connected switches to authenticate each other locally each switch must have its own user ID node WWN and CHAP Secret as well as the other switch s user ID and CHAP Secret The switch can store more IDs and CHAP Secrets if it has multiple connections with other switches only You can also store IDs and CHAP Secrets of switches that have no physical connections with this switch This is not recommended because accessing one switch provides access to all switches CHAP Secrets For two connected switches to authenticate each other through the RADIUS server only all product IDs and CHAP Secrets are stored on the RADIUS server and the product local database is not required to maintain the same data In this case the HAFM appliance does not communicate with the RADIUS server effectively The Radius Only authentication method can cause more errors and performance problems When you select the Radius Only option the HAFM appliance ensures that only the CHAP Secret for the switch is defined and stored in the local database If not a message is displayed indicating that
123. abling and configuring 131 Open Trunking feature log 133 operational icon 268 outof band discovery overview 72 P password default TightVNC 37 default Windows 2000 38 password default 38 pasting events from logs 104 performance data storing 134 viewing 134 performance event properties 273 performance thresholds setting 135 persisted fabrics clearing alerts 98 connection status determining 97 98 icon 97 icons 97 merging 98 minus icon 97 principal switches in 98 persisting fabrics 96 physical map exporting 52 zooming in 47 zooming out 47 plan adding devices to 138 arranging devices 139 configuring 139 140 connecting devices 139 deleting devices 140 devices showing as installed 140 evaluating 145 exporting 146 opening 138 printing 146 rules configuring 144 file location 141 keywords 143 overview 141 setting 144 writing 141 saving 146 starting new plan 137 planned device icons 269 planned devices adding 138 arranging 139 configuring 139 connecting 139 deleting 140 planning devices showing as installed 140 evaluating 145 new SAN 137 opening a plan 138 rules configuring 144 file location 141 keywords 143 overview 141 setting 144 writing 141 saving 146 planning rules configuring 144 file location 141 keywords 143 overview 141 setting 144 writing 141 policy engine macros writing 277 properties device state event 276 performance event 273 SNMP trap 271 user action event 274 writing mac
124. ads 67 Managing user grouUpS 225 een LA ak A Pasa BRAG CRC eee wa eae ae 68 Understanding user groups and access levels 0 2 0 eee eee 68 Creating a user group ooo 69 Changing a ser Gro P nt toca Pen gate beet iba SON ar abe eae hehe ese ERC 70 REMOVING user groups a DIAG yp EIA RAMAN TRAD GUA G eA aE RAS 70 Assigning users I1O GROUNDS iii Fad dd HO is ODOR EVREAR AAD D EE ira 71 Determining user grouUpS o o oooooooorr ee eee ee 71 Discovering SAN e car IN E NAAA AA AA 72 Understanding how discovery works 20 0000 eect eee teen eee 72 Configuring Asc dice podias ada rated id di id ade ia 72 Troubleshooting discovery sus lors AAA a ae 73 Configuring IP addresses and community strings 2 2 0 eee ee eee 76 Adding an IP address haa rai aca ae Lamas es 76 Changing an IP address es iodo Shiai ecb bede birra bbc heeds beans 77 Removing an IP address dorar e a ia a 77 Configuring a community string Far AAN ered ohh NAAA A 77 Reverting to a default community string 2 0 cee ete eee 78 Configuring the product type and access occ 78 Turning discovery on and O iii ive ne eG de SoS Hee AR DERE Ee eae REEDS 80 Determining the operational status 0 o 60keee en de eae dd rad Cee eae 80 Determining the Discovery State 2 eee eee eae 80 Configuring the SNMP agente ibi 44 bid dcir dei edd dba e de hea ewe heh i 80 Setting up the SNMP agent cad fas daetd dens 0550 a A Sakae EERE 81 Turning the SNMP agent on
125. all the SANtegrity Binding key installed Please contact Binding from the through the Configure Feature Key your sales representative Configure menu but the dialog box before using Switch optional SANtegrity Binding features Binding feature is not installed Send firmware failed A firmware download Retry the firmware download operation failed operation If the problem persists contact the next level of support SNMP trap address not If an SNMP community Enter a corresponding SNMP trap defined name is defined a recipient address corresponding SNMP trap recipient address must also be defined HA Fabric Manager user guide 251 Table 31 Element Manager messages continued CO CN CS Stop diagnostics failed Diagnostics for the port Verify port operation Retry The test is already was not running and Stop diagnostics for the port and choose running was selected on the Port Stop from the dialog box If Diagnostics dialog box problem persists contact the next Diagnostics quit for the level of support port for some reason but the Stop button remains enabled Stop diagnostics failed This action failed because Informational message The test was not running the test was not running Switch Binding was The device WWNs were Verify that the security level for removed from attached removed from the each device is as required by devices that are also director s Switch reviewing the Bound WWN list i
126. ame was selected when the command was attempted No director or switch Element Manager is installed on this workstation No information is available for the route selected A user was not selected when the command was attempted ae ie Retry the operation using a valid WWN or nickname Delete the invalid zone from the zone set Delete unneeded products or users from the system before attempting to add any new ones Choose an address and retry the operation Choose an attached node and try the operation again At the HAFM Log In dialog box type an appliance name in the Server Name box and click Login Choose a nickname and try again Install the appropriate Element Manager to this workstation Choose a different route and try the operation again Choose a user and try again HA Fabric Manager user guide 225 Table 30 HAFM Messages continued CE CSC CN No zone member selected No zone selected No zone selected or zone no longer exists No zone set active No zone set selected No zone set selected or zone set no longer exists Only attached nodes can be displayed in this mode Password and confirmation don t match Remote sessions are not allowed from this network address A zoning operation was attempted without a zone member selected A zoning operation was attempted without a zone selected A zoning operation was attempted without a zone selected or
127. ance and the HAFM 8 8 Log In dialog box is displayed Figure 3 on page 31 Monitoring the HAFM application This section describes monitoring the HAFM application 40 Using the HAFM application Starting and stopping HAFM Services HAFM Services is the software application that provides services to the HAFM application HAFM Services runs only on the HAFM appliance You can start or stop HAFM Services from the desktop 1 Select Start gt Programs gt HP StorageWorks ha fabric manager 8 8 gt Stop Services Or Select Start gt Programs gt HP StorageWorks ha fabric manager 8 8 gt Start Services Viewing user sessions Monitoring clients is an important part of maintaining the SAN because more than one client can access an appliance at a time You can view user sessions to determine which clients are logged in to the appliance To display the Active Sessions dialog box 1 Select SAN gt Active Sessions The Active Sessions dialog box is displayed Figure 9 ID Description Network Address Connected Disconnect User Administrator Default Admin 16 129 91 113 Dec 31 2003 13 57 50 Administrator Default Admin 16 115 195 223 Jan 12 2004 12 24 14 OK Cancel Help Figure 9 Active Sessions dialog box The Active Sessions dialog box shows information about the active users If a user is logged in from more than one location there is a separate entry for each session Disconnecting users To disconnec
128. anges to the persisted fabric For details about the fabric log see Monitoring events on page 101 Product status When you add a product to a persisted fabric is displayed with a plus icon Figure 54 lt gt Figure 54 Product added to persisted fabric When you remove a product from a persisted fabric it is displayed as a ghost image with a minus icon Figure 55 To find a product that is removed from a persisted fabric right click the ghost image and then select Find Product The corresponding online item is displayed lt Figure 55 Product removed from persisted fabric Connection status If more than one connection exists between products the Physical Map shows connection status as follows HA Fabric Manager user guide 97 e If all connections are enabled they display as black lines e If all connections are disabled they display as yellow dashed lines e If one or some of the connections are disabled but not all the enabled connections display as black lines and the disabled connections display as yellow dashed lines with an interswitch link ISL alert Figure 56 Switch Count 2 A it s 10114 Figure 56 Removed connection in a persisted fabric Clear ISLs from the Physical Map as follows To clear an ISL alert right click the ISL icon and select Clear ISL Alerts To clear all ISL alerts select Edit gt Clear All ISL Alerts Changing persisted fabrics When you merge tw
129. ant to assign a nickname 4 Enter the nickname for the device and press Enter If the nickname you entered already exists the following message is displayed Figure 15 The given nickname already exists OK Figure 15 Nickname already exists message a If you entered a duplicate nickname click OK and go back to step 3 5 Click OK Adding a nickname to a new device To add a nickname to a new device 1 Select Configure gt Nicknames The Configure Nicknames dialog box is displayed Figure 14 on page 48 2 Enter the WWN of the device in the Detached WWN box 3 Enter the nickname for the device in the Nickname box 4 Click Add The new device and nickname is displayed 5 Click OK Importing nicknames This section describes how to import nicknames from the Configure Nicknames dialog box You can also import nicknames from the Import dialog box For more information see Importing data on page 55 To import nicknames 1 Select Configure gt Nicknames The Configure Nicknames dialog box is displayed Figure 14 on page 48 2 Click Import HA Fabric Manager user guide 49 A confirmation message is displayed Figure 16 gt Importing a nickname for a WAN that already has a nickname will overwrite the q existing nickname Do you want to continue Figure 16 Import nicknames confirmation message 3 Click Yes to continue The Open dialog box is displayed Figure 17 Look In ssl My Docum
130. apply to all switches d Click OK EY NOTE The Product List is exported in tab delimited format To view the Product List in table format open it in Microsoft Excel 5 If you are exporting to disk proceed to step 8 HA Fabric Manager user guide 53 6 If you are exporting to e mail the email information is displayed Figure 21 Export To Email w Files SAN Files 114 KB _ Event File 28 KB _ Performance Data 920KB Select Switches _ Physical Map 6KB _ Product List 4KB _ Reports OKB _ Nicknames OKB L Status Total Mail To Mail List From gary ussia hp com Subject Message OK Cancel Apply Help Figure 21 Export Discovered SAN Email dialog box 7 Enter information in the following boxes e Mail To EY NOTE Click Mail List to display the Mail List dialog box e From Subject e Message 8 Click OK A confirmation message is displayed Figure 22 A Export to disk was successful The following files were created at C Program FilesiHAFM 8 8 ClientiClientiDataisan0512031637211san051203163721 zip Figure 22 Export confirmation message 9 Make a note of the file location and name and click OK 54 Using the HAFM application Importing data You can import the following information to the application SAN File zip Imports an entire SAN in zip format Nicknames Imports the nicknames that were assigned to HP switches usin
131. ation e Fabric Status Displays the state of the fabric that is least operational based on ISL status The possible states are e Operational e Unknown e Degraded e Failed HA Fabric Manager user guide 35 Select a product or fabric from the Physical Map or Product List and click this button to open the related Fabric Log only available for persisted fabrics See Monitoring events on page 101 for more information Attention Indicator Displays when at least one HP product in the SAN has an attention indicator Click the icon to open the Service Request dialog box which lists all HP switches and directors that need attention Call Home Status Displays the Call Home status if the Call Home service has been enabled If Call Home has been enabled on all managed HP switches and on the management application the icon is displayed as enabled If Call Home is disabled on any one of the HP switches or on the management application the icon is displayed as disabled Click the icon to open the Call Home Settings Summary dialog box which indicates whether the Call Home feature is enabled on HAFM and on each managed HP switch or director Server Name Displays the name of the appliance to which you are connected Client Count Displays the number of clients User s Access Level Displays the user ID of the logged in user EY NOTE Depending on your configuration the icons on your status bar can differ from the example
132. ation displayed in the Product List Physical Topology map The Physical Topology map Figure 4 shows devices and their connections and ports A topology is a logical and or physical arrangement of devices on a network See Creating a customized view on page 83 for information about customizing the information displayed in the Physical Topology map Toolbox The toolbox Figure 4 O allows you to vary the window display and generate Physical Map reports Place your cursor on a toolbox icon for information about its function Master log The Master log Figure 4 lists the events that occurred on the SAN The default locations for the log files are e Install_Home Server Universe_Home Test Universe _Working EventStorageProvider event log e Install_Home Server Local_Root EventStorageProvider event log 34 Using the HAFM application Connection utilization legend The connection utilization legend Figure 4 shows the percentage of utilization on the trunks on the Physical Map The color and length of the lines indicate the bandwidth utilization Minimap The Minimap Figure 4 O provides a high level view of the entire SAN You can use it to navigate to more detailed map views This feature is especially useful if you have a large SAN To quickly jump to a specific place on the Physical Map click the corresponding area on the Minimap Anchoring or floating the Minimap You can anchor or float the Minimap to custo
133. ation message is displayed Figure 94 A You are about to ac vele a Jone sel inthe fabric Are you sure sou would ihe to continue Figure 94 Activate Zone Set confirmation message 5 Click Yes to continue The Zoning dialog box is displayed 6 Click the Active Zone Set tab to view the active zone set and its zones Verify that the switch is being managed properly Ef NOTE Only one appliance should perform discovery at a time otherwise logon conflicts can occur 7 Click OK Deactivating a zone set To deactivate a zone set 1 Display the zone library See Displaying the zone library on page 149 The Zoning dialog box is displayed Figure 91 on page 149 2 Click Deactivate HA Fabric Manager user guide 153 The Deactivate Zone Set dialog box is displayed Figure 95 Fabric Name 100000CODDO0C130 Current Active Zone Set abcdeabcdeabcdeabcdeabcdeabcdeabc New Active Zone Set _ lt none gt Directors Switches Affected Nickname Node Name Domain ID IP Address SANBox2_d 100000C0DD00C1 30 172 31 1 39 Summary 3 Zones Removed 6 Zone Members Removed Details E abcdeabcdeabcdeabcdeabcdeabcdeabcdeabcdeabcdeabcdeabcdeabcde E asdtg ESO ast El NewZone y Generate a report with the activation of new zone set ok cancel Help Figure 95 Deactivate Zone Set dialog box 3 The dialog box shows the names of the active zone set and shows the new active zone set as n
134. cal diagnosed Press Next to optical loopback plug to transceiver before running external continue be installed wrap diagnostic testing 248 Informational and error messages Table 31 Maximum number of versions already installed Element Manager messages continued Darmi ee The number of firmware versions that can be defined to the HAFM application s firmware library eight was reached Delete an existing firmware version before adding a new version No file was selected Action requires the Select a file selection of a file No firmware version file was selected No firmware versions to delete Nonredundant director must be offline to install firmware Not all of the optical transceivers are installed for this range of ports Open Trunking is not installed for this product Please contact your sales representative A file was not selected in the Firmware Library dialog box before an action such as modify or send was performed There are no firmware versions in the firmware library to delete therefore the operation cannot be performed For directors if the director has only one CTP card the director must be set offline to install a firmware version For switches since the switch has only a single CTP card it must be offline to initiate a firmware installation Note that the CTP card is an internal component and not a FRU Some ports in the specified range do not ha
135. cal Map 3 Click Search to find each product Ef NOTE When the application finds a product it highlights the product on the Physical Map as well as on the Product List Changing product properties You can change some of the properties of products that are online This process does not change the product configuration To change product properties 1 Right click a product icon and select Properties The Properties dialog box is displayed Figure 46 Nickname Name DracoLab 29 Node Name 1000080088407C64 Port Count 16 IP Address Domain ID 29 Managed By HAFMSERVER Firmware 05 01 00 Location Draco Lab Contact Description Edge switch 2 16 Draco3 FAI unit OK Cancel Help Figure 46 Properties dialog box 90 Configuring SAN products and fabrics Ef NOTE The product you select must be online for you to edit this information 2 Edit the product properties as appropriate 3 Click OK Determining product status Determine product status by looking at the status icons on the Physical Map or the Product List Table 15 describes the status icons Table 15 Product status icons No icon Operational A Degraded Failed a Unknown Offline Displaying service requests To display a list of all products requiring attention click the Attention Indicator icon on the Status bar The Service Request dialog box shows the names
136. ce 44 46 6509 s40 00440 a a A as 134 Collecting performance data cc 04 004 rr ri a es 134 Storing performance daa awa gens et Rowe aA A AR THR RL RD 134 Viewing performance data ia ad de vache Poke ae CARE Rs EAE 134 Exporting performance data o on cag Rid ae koa a bab ae aes 135 Monitoring port performance 6 44454 ivid indie ed a de dutea dina da deus 135 Planning Module ae eee eee See ee Ada bad a 136 Planning AO treo aA a ele eee Pee haw WRG aR Be Rea aides 136 Plandesigis genia aos A eA ee hagas aS 137 Planning a SAN irritar LENO REED DAE PETE DAES OES 137 Opening a plan oonan 138 Adding CEVICES sa a ta amb See aiea Ei a ae OAM OWRD ER aa WHER RA E E 138 Adding one device rra a 138 Adding multiple devices 2 iii e ica e dd ia 138 Arranging devices dd dicta a ad 139 Connecting devices sr idad dd dd a EE AAA 139 Configuring devices errar iaa 139 Del ting dmca ceiba eiiiai iii ide dd ic did 140 Displaying a planned device as an installed device 2 2 0 0 eee eee ee 140 Editing port Ypes wa siais ae ae ex ye lh se oe BAe Wee Nee ac ak oh OS Oh A a he ee 140 Configuring Pad depa 140 A ROG Rd MMH AP aba a bared REDAE AOA S ORGAO 141 Planning rules syntax and format 60 0008 006854004 e680 e a ee 14 RU WOES a AN IN A Hee oh hee oh be Rae ches 142 o ae ee ere ee re ae ee Oe ee ee ee ee ae eee 143 Applying rules for plan evaluation 0 2 0 144 Plan A ee ee eee ee ee oe ee ee eee ee eee ee ene te ee 145 Plan
137. ce must have the local database refreshed or the connectivity is lost Populating a CHAP Secret to a current switch 1 Select a CHAP Secret for the current switch 2 Click Apply to populate the CHAP Secret in the current switch Changing a CHAP Secret for a switch 1 To modify a predefined CHAP Secret for the current switch click Apply A confirmation message is displayed that asks if you want to modify the CHAP Secret 2 Click Yes to modify the CHAP Secret of the current switch and populate the CHAP Secret to alll other connected and authenticating devices Adding a connected device with CHAP Secret to a switch 1 Select a device in the Port Authentication table 2 Click the right arrow The device is moved to the Authenticated Devices list 180 SANtegrity Security Center Adding a connected device without a CHAP Secret to a switch 1 Select a device in the Port Authenticated Devices table 2 Click the right arrow The Add User dialog box is displayed Changing a CHAP Secret for a connected device 1 Select a connected device from the Authenticated Devices list and click Edit The Change Secret dialog box is displayed 2 Click OK 3 The CHAP Secret for the device is changed inside the local database and in the current switch s Authenticated Devices list Removing a connected device from a switch 1 Select a connected device from the Authenticated Devices list 2 Click Remove Changing a CHAP Secret for a detached device 1
138. ckupManager Dsmp locale customization en_US_HAFM Server to tart SJAVA_HOME bin HAFMServer exe server Xmx128m f 35 Xincgc classpath CLASSPATH read rem HAFM Server start JAVA_HOME bin HAFMServer exe server Xmx128m Xminf 15 Xmax Dsmp mpi test Dsmp deployment prefix Server Dsmp server edipaddress x x x x Dsmp zoning Principal Dsmp zoning wait timeout 180000 Dsmp webServer Dsmp backupManager 35 Xincgc classpath SCLASSPATHS Dsmp locale customization en_US_HAFM Server where x x x x is the desired IP address HA Fabric Manager user guide 285 4 Save the file 5 Runthe install_service bat file UNIX systems 1 Open the Instal1_Home bin HAFM_Mgr file using a text editor for example vi 2 Edit all instances of the following lines SMP Server S SAN_JRE_DIR bin java classpath CLASSPATH Dsmp deployment prefix Server Dsmp server edport 1 DZoning Principal com smp server SANMgrRMI to read SMP Server S SAN_JRE_DIR bin java classpath CLASSPATH Dsmp deployment prefix Server Dsmp server edipaddress x x x x Dsmp server edport 1 DZoning Principal com smp server SANMgrRMI where x x x x is the desired IP address Editing Master Log settings The application keeps a log of events that occur in the SAN By default the event history will be kept for 45 days until 50 MB of disk space is taken up or when the number of entries reaches 2000
139. clude spaces Names cannot begin with SANav_ because it is reserved Names can have a maximum of 57 characters No duplicate names are allowed in zones zone sets or zone libraries Zoning configuration Use the Zoning dialog box Figure 91 to configure zoning When the Zoning dialog box is open zoning discovery is performed during every polling cycle for up to 30 minutes after which it is performed once every two hours You can e Display the zone library see Displaying the zone library on page 149 Create and add a zone to a zone set see Adding a zone to a zone set on page 150 e Create and add members to a zone see Adding a member to a zone on page 150 e Create a zone set see Creating a zone set on page 151 148 Zoning Remove a member from a zone see Removing a member from a zone on page 152 Remove a zone from a zone set see Removing a zone from a zone set on page 152 e Activate a zone set see Activating a zone set on page 152 Deactivate a zone set see Deactivating a zone set on page 153 Enable or disable the default zone see Enabling and disabling the default zone on page 154 Export a zone set see Exporting a zone set on page 155 Import a zone set see Importing a zone set on page 156 NOTE Only one appliance should perform discovery at a time otherwise logon conflicts can occur Displaying the zone lib
140. conservation Sia deca ae pct BAe Mh IA a ha Ae A eB a de 146 Saving IO is ea yack yo Wk a Gh he e e e Reh a fe deeb mune GR E a E 146 Exporing a PIAN asis Ghee haa aa ed a A os das 146 dido A SN coc cage haa gnc a can ey nN He Aap DH RGD Reed Mee ROHS a Rha GOD 146 E DM ES Seep A TS RE ae 147 Zoning limis ie desea ty saca ate ARAN Ve oe ta tech HIE a AAR A A 147 Zoning naming conventions 0 2 eee ne te eee 148 Zoning configuration o ae aeaaea Soe le Whee ake be Hdd Bk kw herd deed RE eno ant 148 Displaying the zone library ive d nn th dae dae cd dd SERA SOY S 149 Adding a zone to a zone set eee Keane edhe ek KER eK He AREA 150 Adding a member to a zone nannaa edb ey GA aw ke Raw eh OGRE A 150 Creating A Zone Sebe se veh bh bee a OG bee ee we ha eed 151 Removing a member from a zone o 152 Removing a zone from a zone Sel i aad cus keene eW ra a a ed 152 Activating a ZONE SO ia A E rd Moh ac ah E EE E eee e daba eds 152 Deactivating a zone set 1 eee es 153 Enabling and disabling the default zone nnana nananana 154 Exporting a zone set occ 155 Importing A Zone set iis iina i a a ie E Ad oe ea A a OE 156 Zoning administration nes e AA a db 156 Renaming a zone or zone set nouu unuau aaee 157 Replacing zone members 6 54 44055 os oA ee hag RHEE ENR EECA DO RRR ER ORE OS 157 Using the Potential Zone Members list onnan anana 157 Using the domain port or WWN 2 eee eens 157 Copying G ZOneS6t nics dod bt awe he
141. cted a specific security violation but only indicates that a generic security violation has occurred or a security configuration mismatch was detected N_Port Connection Not Allowed The switch is unavailable due to N_port connection not allowed events To add Security Thresholds 1 Select Configure gt Port Fencing HA Fabric Manager user guide 125 2 3 The Port Fencing dialog box is displayed Figure 73 on page 124 Select Security from the Violation Type list Click Add The Add Security Threshold dialog box is displayed Figure 75 2 Add Security Threshold x Block a port when one of the following security violation types meets the threshold Authentication Fabric Binding gt Switch Binding Port Binding ISL Security N Port Connection Not Allowed Name Threshold 5 w errorsper 5 Minutes OK Cancel Help Figure 76 Add Security Threshold dialog box 4 8 9 Enter a name for the threshold in the Name box 5 Select the number of port events allowed for the threshold from the Threshold errors list 6 7 Click OK to add the security threshold to the table and close the Add Security Threshold dialog Select the time period for the threshold from the Threshold Seconds list box To assign this threshold to fabrics switches or switch ports see Assigning thresholds on page 126 Click OK Assigning thresholds To assign thresholds 1 ow Select Confi
142. d 3 Click OK 138 Optional HAFM features Arranging devices After adding devices to your plan you can rearrange them To rearrange a device 1 Click the Select Devices icon ly on the devices toolbox 2 Click a planned device icon and drag it to the desired location 3 Repeat as necessary Connecting devices To connect the devices 1 Click the Connect Devices icon A on the devices toolbox 2 Click a device on the Physical Map A connection is created and associated with the first available port on the device 3 Click another device on the Physical Map The connection is associated with the first available port on the second device A connection is displayed between the two devices 4 If you want to make multiple connections click the Connect Devices icon hold down the Shift key and click each device you want to connect Configuring devices To specify properties for planned devices 1 Right click a planned device icon on the Physical Map and select Properties The planned device s Properties dialog box is displayed Figure 88 Narere Name Orecoleb 33 Node Name 1000050058 AC025D Port Cot 136 P Adress 16 12991115 Doman D Managed By HAFMAPPLANCE Frere 10601 0 Locaton End User Premise please contig Contect End User Comtect peste config Description Fibre Channel Deector gt on Cone hep Figure 88 Planned device Properties dialog box 2 Enter a nickname for the device in the Nickname box
143. d You aborted the file Verify the file transfer is to be transfer process aborted then click OK to continue HAFM error lt error The HAFM application Contact the next level of support to number 1 through 8 gt encountered an internal report the problem error 1 through 8 inclusive and cannot continue operation Management server An incorrect username or Verify the username and password could not log you on password both case with the customer s network Verify your username and sensitive was used while administrator and retry the password attempting to log in to the operation HAFM application 222 Informational and error messages Table 30 HAFM Messages continued CEN CC CN Management server is The HAFM application is Reboot the HAFM appliance If the shutting down closing and terminating problem persists contact the next Connection will be communication with the level of support terminated attached product Invalid character in field An invalid character was Remove invalid characters from the entered in the data box entry Invalid name One of the following Choose a valid name and retry the invalid names was used operation CON AUX COM1 COM2 COM3 COM4 COM5 COM6 COM COM8 COMO LPT1 LPT2 LPT3 LPT4 LPT5 LPT6 LPT7 LPT8 LPT9 NUL or PRN Invalid network address The IP address specified Verify and enter a valid product IP for the product is address unknown
144. d click OK to continue The default zone must be The message is displayed Disable the default zone and disabled to configure when you attempted to repeat the operation change the management style to Open Fabric and the default zone is enabled The Ethernet link The Ethernet connection Establish and verify the network dropped between the HAFM connection appliance and the director is down or unavailable The firmware file is A firmware version file is Contact the next level of support to corrupted corrupt report the problem The firmware version This firmware version Informational message only no already exists already exists in HAFM action is required appliance s firmware library The following parameters You attempted to disable Disable Enterprise Fabric Mode cannot be disabled while these parameters in the through the Enterprise Fabric Mode Enterprise Fabric Mode is Configure Switch dialog box in HAFM then disable active Insistent Domain Parameters dialog box the parameters ID Rerouting Delay while Enterprise Fabric Domain RSCNs Mode is enabled The link to the director is The Ethernet connection Establish and verify the network not available between the HAFM connection appliance and the director is down or unavailable The link to the switch is The Ethernet connection Establish and verify the network not available between the HAFM connection appliance and the switch
145. d Change Preferred Path dialog box change the preferred path Click Yes to confirm activating the new address configuration or No to cancel the operation Save the configuration with a different name that is unique to all saved configurations Replace FPM cards with UPM cards UPM cards operate at 1 and 2 Gb sec or set the director speed to 1 Gb sec Reconfigure the Fibre Channel port with a unique name Recontigure the port with a unique name Close the open Element Manager so the desired instance of the Element Manager can be opened Wait for the firmware installation process to complete and try the operation again HA Fabric Manager user guide 233 Table 31 Are you sure you want to delete firmware version Are you sure you want to delete this address configuration Are you sure you want to send firmware version Cannot change Port Type while Management Style is FICON without SANtegrity feature Please contact your sales representative Cannot disable Switch Binding while Enterprise Fabric Mode is active and the switch is Online Cannot disable Insistent Domain ID while Fabric Binding is active Cannot enable beaconing on a failed FRU Element Manager messages continued Damn a This message requests confirmation to delete a firmware version Firmware library can store up to 8 firmware versions Confirmation to delete the selected address configuration This message requ
146. delayed to arrive after older frames still in route over the older path Domain register state change notifications RSCNs Indicates a switch entered or left the fabric Notifications occur fabric wide and do not have zoning constraints e Insistent domain ID Sets the domain ID as the active domain identification when the fabric initializes If insistent domain ID is enabled the switch isolates itself from the fabric if the preferred domain ID is not the switch s domain ID Enabling and disabling Enterprise Fabric Mode 94 To enable or disable Enterprise Fabric Mode for a fabric 1 Select Configure gt Enterprise Fabric Mode The Enterprise Fabric Mode dialog box is displayed Figure 51 Please Note Enterprise Fabric Mode activates Fabric Binding Switch Binding Insistent Domain ID Rerouting Delay and Domain RSCNs Once activated deactivating Enterprise Fabric Mode will NOT disable these features Each feature may need to be disabled separately Fabric Name 1000080088208057 b A Enterprise Fabric Mode Unknown Cancel Fabric is not being managed Figure 51 Enterprise Fabric Mode dialog box 2 Select the fabric for which you want to configure Enterprise Fabric Mode from the Fabric Name list The fabric s current status is displayed in the Enterprise Fabric Mode box 3 To enable Enterprise Fabric Mode on the selected fabric click Activate To disable Enterprise Fabric Mode on the selected fabric click Deacti
147. discover in the Available Addresses list 3 Click gt to move your choice to the Selected Subnets list or to the Selected Individual Addresses list 4 Click OK Wrong IP addresses selected Select Discover gt Setup 2 Verify that the IP addresses in the Selected Subnets and Selected Individual Addresses lists are the correct current addresses for the SAN Click OK Wrong community strings selected Select Discover gt Setup Select an IP address Click Change Select the desired community strings Click OK OP oN a a HA Fabric Manager user guide 205 Table 27 Address problems and resolutions continued Problem The application cannot currently manage LUNs on this device Resolution Verify the following conditions have been met On Check the discovery setup Verify that discovery is not still in progress Verify that the management application is installed in the appropriate path If ESSCLI or NaviCll is not available events will be generated indicating that HAFM is not available Verify that the device you ve selected is a supported device configuration Verify that the device is online Verify that the management server is running For ESS systems the web server should be running on the ESS and be accessible from the machine running the server To test this from the machine running the server open an web browser In the address bar type http ipaddress_
148. dit View dialog box is displayed Figure 43 2 Select the view you want to edit Name Test Description Test View Members Columns Include Assets via O All 8 Selection Available Fabrics Selected Fabrics Nickname _ of Products Name Nickname of Products Name 1 100008008840428D 6 1000080088 40406F y Total Products Total Products Y OK Cancel Help Figure 43 Edit View dialog box 3 Edit the information as necessary 4 Click OK Deleting a customized view To delete a customized view 1 Select View gt Delete View 2 Select the view you want to delete 3 Click OK Selecting a customized view To select a customized view click the View tab and select the view name from the list Customizing the Product List You can customize the Product List by creating views that display certain fabrics or certain levels of detail on the Product List Adding a column to the Product List You can define new Product List columns This enables you to further customize the Product List to display pertinent device and port information 86 Managing the HAFM application To add a column to a new or existing view 1 Perform one of the following to select a new or existing view Select View gt Create View The Create View dialog box is displayed Figure 41 on page 84 Select View gt Edit View and select the view you want to edit The Edit View dialog box is display
149. dure that you follow depends on how the firewall is set up Ifthe firewall prevents the client from connecting to arbitrary ports on the server then perform the following procedures e Forcing the RMI registry to use a specific port on page 198 HA Fabric Manager user guide 197 e Forcing the server and client to export a port number on page 199 EY NOTE You must configure both the server and client export port numbers Ifthe firewall prevents the server from connecting to arbitrary ports on the client then configure the export port of the client in Forcing the server and client to export a port number on page 199 Forcing the RMI registry to use a specific port To force the RMI registry to use a specific TCP port for an RMI server configure the Dsmp registry port XXXX parameter in the following files in the HAFM 8 x bin directory typically in c Program Files HAFM 8 x bin e The client and server portion of the HAFM_sc bat file HAFM_c bat file if installed The HAFM_sc bat file starts both the client and server and is installed on a computers with the HAFM appliance software The HAFM_c bat file starts the client only and is installed with the client software HAFM_sc bat Place the parameter Dsmp registry port XXXX where XXXX is any TCP port number not being used by another application after the CLASSPATH parameter The following example shows the edited file with the added parameter in bold
150. e HAFM_c bat file starts the client only Edit file to include the parameter Dsmp registry port XXXX where XXXX is any TCP port number not being used by another application You must place this parameter after the CLASSPATH parameter The following example shows the edited file with the added parameters in bold setlocal pushd dp0 call bin set_cp bat rem HAFM Client start SJAVA_HOME bin HAFMClient exe Xmx256m Xminf 15 Xmaxf 35 Xincgc classpath S CLASSPATH Dsmp Mp max 256 Dsmp deployment prefix Client Dsmp flavor HAFM Client rem HAFM Client Debug Mode rem start SJAVA_HOME bin HAFMClientD exe Xmx256m Xminf 15 Xmaxf 35 Xincgc classpath CLASSPATH Dsmp Mp max 256 Dsmp deployment prefix Client Dsmp debug Dsmp registry port XXXX Dsmp flavor HAFM Client popd endlocal Forcing the server and client to export a port number To force the server and client to export a specific TCP port number for an RMI server 1 Configure the following parameters in the HAFM_sc bat file Dsmp server export port XXXX Dsmp client export port YYYY 2 Configure the Dsmp client export port YYYY parameter in the HAFM_c bat file These files are located in the HAFM 8 x bin directory typically in c Program Files HAFM 8 x bin HA Fabric Manager user guide 199 The HAFM_sc bat file starts both the client and server and is installed on a computers with the HAFM appliance software The HAFM_c bat fil
151. e configured for another port by adding the following property to the C Program Files HAFM 8 5 resources server Config properties file Smp server httpserverport lt port number gt Multiple network interface cards 62 A second Ethernet NIC may be desirable in the PC to isolate the switches in your SAN from the public network If there are any connection issues with the dual NICs a configuration file C Program Files HAFM 8 5 resources Server config properties can be modified to force the appliance to look at a specific IP address 1 Add the following parameter to the file ServerRmIpAddress xxx XXXK XXX XXKX where xxx xxx xxx xxx is the IP address of the NIC card that you want the client connections to come in on Follow the instructions provided by the InstallShield wizard Using the HAFM application 3 Managing the HAFM application This chapter provides instructions for managing and customizing the application Accessing HAFM page 63 Managing users page 63 Managing user groups page 68 Discovering a SAN page 72 Configuring the SNMP agent page 80 Customizing the main window page 83 Accessing HAFM You can access HAFM in one of two ways Log in from a browser capable PC connected through an Ethernet LAN segment Log in remotely with an HAFM client application See Accessing HAFM on page 63 for login instructions Adding and removing a network address When you log in to the appliance the ne
152. e eee 261 ReqUifeMEN S s eae irsin a he ot WD chek Wit A en id caf teh a Biche ORE In oR 261 Installation procedi a AAA AAA 261 Running FHAFM oo ici dd ad hid bn li 263 HP UX AIX and Linux systems arde 263 Reg irements ico A A AA AD A eA aa le 263 Installation proctdu ss 5 0 46 onda CA de Ra AAA 263 Running AAEM oi a ba bd ed Page eda wba alee Sede wate we ees 265 o bide ceca E deka ee EEEE EE E 267 Compatibility with other applications 2 5626 404e0e4205bab0405 e 09 ee baw ed hess 267 A c kg cheapest nek E he 267 a 2452043 oy Pea ea ees aaa a Gens case Reed BASES 267 Prod ct status ICONS aeee A eee hehe OS an an ee ae EA 268 EVEN ICONS ps ps Peas Fo KEW a Re ds A Ree eR EAS 268 Band information status icons li os gee Raye en noe eA ny RSE ARGS RD 269 Planned device icons sia ri EA A A Ra eh ae ee ey ee 269 Group ICONS ek ea a ae ae ee ee hae de Bo ie SA A A a hie hag deen Bees 270 CORNECIGNS 4 63 55 Jak od Hod SEA RAS DOES SRT SA DALE OSE Tae Ka 270 Event Management sinc coca ik ance AR HA Ee aad aE rena 271 Event trigger properties o ooooo ooooooooo nents 271 SNMP trap event properties n n 2 eee eens 271 Performance event properties 4 0 0 405 00450 bee By ew cee ew eed Sede een 273 User action event properties 2 nee nee eee 274 Device state event properties 0 2 eee eee 276 Writing Event Management macros 0 ccc eens 277 Keyboane sHonculs 4 5 45 3 4 454 iee sa ROP eRe ESO eee Dae E Ea eas 280 Pai
153. e starts the client only and is installed with the client software Ef NOTE Ifthe firewall prevents the server from connecting to arbitrary ports on the client then just force the export port of the client Dsmp client export port YYYY HAFM_sc bat Place the parameter Dsmp server export port XXXX in the server area of the file and the parameter Dsmp client export port YYYY in the client area of the file where XXXX and YYYY are any TCP port numbers not used by another application Although the server port number XXXX could match the client port number YYYY this is not necessary Add the parameters after the SCLASSPATHS parameter The following example shows the edited file with the added parameters in bold setlocal pushd dp0 call bin set_cp bat rem HAFM Server start SJAVA_HOME bin HAFMServer exe server Xmx512m Xminf 15 Xmaxf 35 classpath S CLASSPATH Dsmp Mp max 512 Dsmp autodiscovery false Dsmp mpi test Dsmp deployment prefix Server Dsmp zoning legacy Dsmp zoning wait timeout 180000 Dsmp webServer Dsmp server export port XXXX Dsmp flavor APP_FLAVOR Server rem HAFM Server Debug Mode rem start SJAVA_HOME bin HAFMServerD exe server Xmx512m Xminf 15 Xmaxf 35 classpath CLASSPATH Dsmp Mp max 512 Dsmp autodiscovery false Dsmp mpi test Dsmp deployment prefix Server Dsmp zoning legacy Dsmp zoning wait timeout 180000 Dsmp debug Dsmp webServer Dsmp server export port X
154. e zone User Count Number of users EXEC context property set Executes the command that is contained in the macro and then replaces it with the output of that command FILE context property set Inserts the contents of the file whose path and file name you specify in the macro Keyboard shortcuts You can use the keystrokes shown in Table 55 to perform common functions 280 Reference EY NOTE To open a menu using keystrokes press Alt the underlined letter To open a submenu release the Alt key first then press Shift the key for the underlined letter of the submenu option Table 55 Keyboard shortcuts Menu item or function Keyboard shortcut All Panels F12 Collapse All Ctrl L Copy Ctrl C Cut Ctrl X Delete Delete Delete All Ctrl Delete Expand All Ctrl E Help Fl Insert Devices Ctrl D New Plan Ctrl N Open Plan Ctrl O Paste Ctrl V Product List FO Properties Ctrl P Master Log FS Select All Cirl A Select Connections Ctrl T Event Management F11 View Selected Device s Ports F4 View Physical Map F7 View Utilization Connections Ctrl U HA Fabric Manager user guide 281 282 Reference F Editing batch files This appendix provides instructions for updating batch files It includes e Configuring the application to use dual network cards page 283 Setting the zoning delay page 284 e Specifying a host IP address in multi
155. ecified user datagram protocol UDP port number is invalid The number must be an integer from 1 through 65535 inclusive At the Configure Fabric Parameters dialog box the buffer to buffer credit BB_Credit value must be an integer from 1 through 60 inclusive 246 Informational and error messages Verify and enter a valid HAFM appliance IP address Verify and enter a valid product IP address Verify port address through the Configure Addresses Active dialog box FICON management style only and reenter Enter a port number within the correct range Ensure that each port selected for swap has not been previously swapped Retry the firmware download operation If the problem persists contact the next level of support Retry the firmware download operation If the problem persists contact the next level of support Ensure that the feature key being installed is specifically for this director serial number Verify and enter a valid UDP port number from 1 through 655535 Verify and enter a valid number between 1 through 60 Table 31 Invalid value for Low BB Credit threshold 1 99 Invalid value for day 1 31 Invalid value for ED TOV Invalid value for hour 0 23 Invalid value for minute 0 59 Invalid value for month 1 12 Invalid value for R_A_TOV Element Manager messages continued Pee o ee Low BB Credit Threshold box in Configure Open Trunking d
156. ecify the replacement member s domain port or WWN Using the Potential Zone Members list To replace a zone member 1 anu Bb WwW DN Display the zone library See Displaying the zone library on page 149 The Zoning dialog box is displayed Figure 91 on page 149 Select the member you want to replace from the Potential Zone Members list Click Find to find all instances of the member in the configured zones Click 4 to the right of the Potential Zone Members list to remove the member from the zones Select the replacement member from the Potential Zone Members list Click gt to the right of the Potential Zone Members list to add the member to the zones 7 Click OK Using the domain port or WWN To replace a zone member 1 Display the zone library See Displaying the zone library on page 149 The Zoning dialog box is displayed Figure 91 on page 149 Right click the member you want to replace and select Replace or right click in the Zones area and select Replace All HA Fabric Manager user guide 157 The Replace Zone Member dialog box is displayed Figure 98 Domain Port OK Cancel Help Figure 98 Replace Zone Member dialog box 3 Enter the domain and port IDs or the WWN of the replacement member 4 Click OK Copying a zone set To copy a zone set 1 Display the zone library See Displaying the zone library on page 149 The Zoning dialog box is displayed Figure 91
157. ect a folder on the remote workstation in which to store the HAFM software e Accept the default location Enter the path to a new location e Click Choose to browse for an appropriate location e Click Restore Default Location to change the location back to the default 13 Click Next 14 If HAFM is already installed on the system you are prompted to uninstall the existing version If you want to uninstall the existing software click Yes and then click Next 15 When the Uninstall HAFM window is displayed click Uninstall 16 When the Uninstall Complete window is displayed click Quit The Choose Shortcut Location window is displayed 17 Select a shortcut location The options for the location of HAFM links are e In your home folder Adds a new program group on the Start menu for HAFM Other Enables you to choose any location on your hard drive or network for the HAFM files Don t create links Prevents the installation from creating a link for HAFM 18 Click Next The Pre Installation Summary window is displayed 19 Review the installation information and click Install The progress of the installation is tracked on the Installing HP StorageWorks HAFM window 20 If desired select the Start the High Availability Fabric Manager check box to immediately open HAFM 262 Configuring remote workstations 21 Click Done Running HAFM Run the HAFM program from the directory in which you saved it the default is a subdirec
158. ed A zone must have a valid name to be modified 218 Informational and error messages The route must contain only Edge Switch 2 16s Edge Switch 2 32s Director 2 64s or Director 2 140s Enable the default zone or activate the zone for the device before attempting to show the route Error is displayed when attempting to show routes on a fabric with only one switch Configure Show Routes on a multiswitch fabric Contact the next level of support to report the problem Enable the default zone or activate a zone set before attempting to show the route Delete spaces from the box entry Assign a valid name to the zone set then modify the name through the Modify Zone Set dialog box Assign a valid name to the zone then modify the name through the Modify Zone Set dialog box Table 30 HAFM Messages continued pea ee Cannot modify product Cannot perform operation Fabric is unknown Cannot perform operation The list of attached nodes is unavailable Cannot retrieve current SNMP configuration Cannot save current SNMP configuration Cannot set write authorization without defining a community name Cannot show zoning library No fabric exists Click OK to remove alll contents from log Connection to management server lost The selected product cannot be modified This message is displayed if no switches in the fabric are connected to the HAFM appliance This message i
159. ed Figure 43 on page 86 2 Click the Columns tab The Create View dialog box with the Columns tab is displayed Figure 42 on page 85 3 Click Add The Create Column dialog box is displayed Figure 44 Label ff Description Type Product Y kon Bw OK Cancel Help Figure 44 Create Column dialog box 4 Enter information for the new column in the following boxes e Label e Description 5 Select whether the column shows information about products or ports from the Type list 6 Select an icon to display in the column from the Icon list 7 Click OK 8 Select a column from the Available Product List Columns list and click to display the new column in the Product List The column name moves to the Selected Product List Columns list Click OK The new column is displayed in the Product List Changing a column on the Product List To edit labels definitions information and icons of existing Product List columns 1 Select View gt Edit View 2 Select the view you want to edit The Edit View dialog box is displayed Figure 43 on page 86 3 Click the Columns tab The Create View dialog box is displayed Figure 42 on page 85 4 Click Change HA Fabric Manager user guide 87 The Edit Column dialog box is displayed Figure 45 Label Description Type Product Y Icon A v OK Cancel Help Figure 45 Edit Column dialog box 5 Edit the column properties as necessary 6 Click OK Removing a col
160. elp Figure 77 Edit ISL Threshold dialog box 4 5 6 7 Make changes to the threshold if necessary Click OK to accept the changes and close the Edit ISL Threshold dialog box If the threshold has already been assigned to ports the message This edit will apply to affected switches is displayed Click OK to close To assign this threshold to fabrics switches or switch ports see Assigning thresholds on page 126 Click OK Editing link thresholds To edit a link threshold 1 Select Configure gt Port Fencing The Port Fencing dialog box is displayed Figure 73 on page 124 Select Link from the Violation Type list Click Edit HA Fabric Manager user guide 127 The Edit Link Threshold dialog box is displayed Figure 78 2 Edit Link Threshold x Block a port when link level hot I O errors meet the threshold Name Defaut Link Level Policy Threshold fso errors per 15 Y Seconds 1 to 65 535 OK Cancel Help Figure 78 Edit Link Threshold dialog box 4 Make changes to the threshold if necessary 5 Click OK to accept the changes and close the Edit Link Threshold dialog box If the threshold has already been assigned to ports the message This edit will apply to affected switches is displayed Click OK to close 6 To assign this threshold to fabrics switches or switch ports see Assigning thresholds on page 126 7 Click OK Editing security thresholds To edit a security
161. em ake EA aie 119 Enabling disabling Switch Binding 4i3 a0 4s0c0s0ac40s0444nde aa 119 Editing the Switch Membership List lt 22 2450c84 544 29462054050 bbos dbus 120 Enable disable and online state functions 0 ccc eee eee eee ee aa 122 Zoning with Switch Binding enabled 2 04 204 060 4604 00e sede bebe e bee aw eben 122 O bre WAGE a OEM SAGAS Saas ana Sop ALA G aAes 123 Configuring Port Fencing naaa Ghee hawks es ii ra 123 Adding thresholds 5 4 fixe riadas dns aid 123 Adding ISL Protocol thresholds cir ed ad Ree 123 Adding link thresholds 4 0 55 404000448648 paca aa 125 Adding security thresholds occiso 50s 005056040 a cd dd da evs 125 Assigning thresholds dar raras pra AR Away 126 A AAA A ao ne oO nes 127 Editing ISL Protocol Thresholds ori da a 127 Editing link thresholds pr icono dicte dd dd be beta bid ak BES 127 Editing security ihr sholdS even rr a a EMER dd 128 Finding assigned thresholds 4 11 04 ara dd A ARA NARA 129 Viewing thresholds pasara 129 Removing thresholds siria id e dc de dd es 129 Open A GMa a eee Bak 130 HA Fabric Manager user guide 7 OPINIONS a a rico a de ada 131 AAA A Bate ec oe eh Meh de We Re talon Mey oP nde a she BE Bh E 131 Global threshold changes sis ag Peg a GA CORA AAA 132 Open Tr nking log jig bee de a Ri We ad bici tae 133 Performance Module 0220 aire eds EA id dd 133 Displaying connection utilization esta ad A A hae hehe 133 Monitoring switch performan
162. ene i 42 Determining the discovered ees 42 Grouping on the Physical Map 6 0 0 bien w Bhd A LAM Oe Kall ee Aad Eee A 43 Collapsing groups wn At on 4a Mea eee ee tea etre eo ew SAR was eae Che 43 Expanding OU sire ons A pa A Oy AA part 43 Using the Group Manager pus tio ee OSC a 43 Select Action tab with Run data collection selected oooooooooooooooooooo o 44 Select Action tab with Install E OS firmware selected o o o o ooo o ees 44 Select Action tab with Create Group Event Log selected 2 0 2 eee eee 45 Displaying the Select Switchestab 255 0425 s 24 lt 4 eae a 45 Displaying other tabs osi ao ii had a od iii di 46 Using the Group LoS a adas eh tne yd E tia led oe OS 46 Viewing detail on the Produetlists li in ae a ban ne Rae eee ee 46 Viewing altas ao ea eae ats 46 Zooming in and out of the Physical Map nono hss cir a deewea eae Oke waa WE Be 47 ZOOMINGAIN kel loathe pee dew see ee cue beak bates ds 47 ZOOMING OU sas A A A ees 47 Changing view options on the Physical Map 20 24 naaa e a ages 47 Turning flyovers on or GH ed ale bgt oD o Se Rath Wee Bae Pa le da 48 Conti Ura nicas a dar gi ad GG tea oom hs 48 al AAA lok oat ee ears era eh RE Sirk aha MR ee 48 Assigning a nickname to an existing device 1 ee eee ee 49 Adding a nickname to a new device s 4459 eek AA A a RS 49 Importing nicknames gt ld ak Lhe teeters nak ees A A AA 49 Exporting nickidmes s eede ai iS OE 50 Removing a n
163. ening the Element Manager from the user interface Use the Element Manager to search for a product change product properties and perform other configuration and maintenance tasks There are two ways to open the Element Manager from the HAFM user interface e Right click a product icon and select Element Manager Double click a product icon Opening the Element Manager from the command line The HAFM application contains a script that opens an Element Manager To use the script 1 Ensure that the HAFM appliance is running and the product is discovered 2 Use a text editor to open the following script Install_Home bin HAFM_ElementMgr bat 3 Under the heading rem HAFM Element Manager find the line that begins ElementManagerStandAlone s ServerIp p ProductIp u UserName pw Password HA Fabric Manager user guide 89 4 Enter the appropriate values for the following parameters Serverlp Productlp e UserName e Password Example ElementManagerStandAlone s 172 16 9 10 p 172 16 9 211 u Administrator pw password 5 Save and close the file 6 Run the script by double clicking the file or entering the script name at a DOS prompt Searching for products in a SAN You can search for a product in a SAN by entering a parameter in the search box on the toolbar 1 Enter the search parameter for example an IP address in the Search box on the HAFM toolbar 2 Click the up or down arrow to search through the Physi
164. ents nA qa ft a Hi F Addendum 5 Cybrary HorizonChecklists El E Adobe C DocMD a HorizonForms Il Applications EpicTraining HPForms Ef contentMapping E eRoom Files for Offline Editing Localization Cf Corel User Files Dess A LP_ov_Stylesheets a E CustomerSurvey HomePictures a My eBooks gt File Name Files of Type Properties Files txt properties v Open Cancel Figure 17 Open dialog box 4 Browse to file you want to import and then click Open The file is imported and assigned 5 Click OK Exporting nicknames To export a nickname 1 Select Configure gt Nicknames The Configure Nicknames dialog box is displayed Figure 14 on page 48 2 Select All Nicknames or All WWNs from the Display list 3 Click Export 50 Using the HAFM application The Save dialog box is displayed Figure 18 Save In f My Documents Odia E addendum EA cybrary E Horizonchecklists E Adobe E Doemp EI HorizonForms C Applications m EpicTraining Cf HPForms ma ContentMapping J eRoom Files for Offline Editing Localization Cf corel User Files ci ess CI LP_ov_Stylesheets tia CustomerSurvey 5 Homerictures ma My eBooks File Name Files of Type Properties Files txt properties z Save Cancel Figure 18 Save dialog box 4 Browse to the folder where you want to save the file and enter a file name in the File Name box 5 Click Save The
165. eployment prefix Client Dsmp debug Dsmp client export port YYYY Dsmp flavor HAFM Client popd endlocal HA Fabric Manager user guide 201 202 Configuring HAFM through a firewall B Troubleshooting This appendix provides troubleshooting information for the following e Problems with discovery page 203 e Problems with products page 205 e Problems with addresses page 205 e Miscellaneous problems page 211 e Problems with zoning page 212 Problems with discovery Table 25 describes possible problems with discovery and suggested resolutions Table 25 Discovery problems and resolutions Problem Resolution Discovery is turned off Select Discover gt On Devices are not being Ensure that your SNMP communication parameters are discovered set correctly in order to discover switches Discovered devices are not Specify each device in the Out of Band dialog box being displayed either by the individual IP address or by subnet 1 Select Discover gt Setup 2 Add change and remove IP addresses as necessary See Configuring IP addresses and community strings on page 76 3 Select IP addresses from the Available Addresses list and add them to the Selected Subnets or Selected Individual Addresses lists by clicking gt If you add addresses to the Selected Subnets list select a method Broadcast or Sweep 4 Click OK Ensure that you ve selected to view the fabric that includes the discovered d
166. er groups available with the application A System Administrator can create additional user groups to provide users access to specific features and views Users can be assigned the following types of access to features Read write access The ability to view and edit information Read only access The ability to view information edit and configuration capabilities are disabled No access Access to information is denied 68 Managing the HAFM application Table 13 User groups and access levels System Administrator Description Read write access for all features all functions are enabled and allowed Maintenance Read write access for Call Home event notification device maintenance and e mail event notification setup Read only access for all other features Administrator Operator Read write access for device operation Read only access for all other features Product Read write access for device administration Read only access for all other features Creating a user group To create a user group and specify access to certain features and views in the application 1 Select SAN gt Users The Users dialog box is displayed Figure 26 on page 64 2 Click Add below the Groups table The Group dialog box is displayed Figure 31 Name Description Features Views SY Active Session Management Call Home Event Notification Setup Device Administration Device Mainte
167. er messages continued peni E The feature set currently installed for this system contains features that are not being installed with the new feature key To activate the new feature key you must set the switch offline Activating the new feature set however will remove current features not in the new feature set The feature set currently installed for this system contains features that are not being installed with the new feature key Threshold alerts are not supported on firmware earlier than 01 03 00 You tried to download a firmware release that is not compatible with the current product configuration The HAFM appliance could not save the data collection file to the specified location PC hard drive CD or network Configured user rights do not allow this operation to be performed Set the switch offline through the Set Online State dialog box then activate the new feature key using the Configure Feature Key dialog box The new feature key will display both the new features and the features that were installed previously Click Yes to activate the feature key and remove current features not in the new feature set or No to cancel Informational message See the product release notes or contact the next level of support to report the problem Retry the operation If the condition persists contact the next level of support Verify user rights with the customer s network admini
168. erify that the management server is running For ESS the web server should be running on the ESS and be accessible from the machine running the server To test this from the machine running the server open an web browser In the address bar type http ipaddress_of ESS machine When the StorWatch application starts open a command prompt and type esscli u userid p passwd s ipaddress list server using the user ID and password you entered in the Discover Setup dialog box for the ESS and the IP address of the ESS Verify that the command returns meaningful data gt Verify that the client is communicating with the server e Verify that a green server connection indicator is displayed on the status bar Verify that the LUN data configuration was not changed while the dialog box was open On Symmetrix systems e Verify that the SYMAPI server is running and can be contacted from the system running the HAFM server gt Verify that the required SYMCLI licenses are installed To perform LUN querying the EMC Solutions Enabler Base Component License must be installed To perform LUN masking and Port Binding the EMC Solutions Enabler Configuration Manager License must be installed e Verify that the system running the SYMAPI server is running and is connected to a Symmetrix port through in band LUN query failed on Symmetrix systems To perform LUN querying the EMC Solutions Enabler Base Component License must be installed
169. erred Paths the range of O to xxx Preferred Paths source dialog box change the numbers in ports and exit ports must the Source Port and Exit Port boxes be in the range of ports to fall within the port count of the for the switch being switch on which you are configured configuring paths Preferred Paths can not be If the switch s domain ID Close the Configure Preferred Paths enabled until the Domain has not been set to dialog box and select Configure gt ID is set to Insistent Insistent the user is not Operating Parameters gt Switch Disable Preferred Paths allowed to activate the Parameters In the Configure then configure Switch Preferred Path Switch Parameters dialog box click Parameters configuration with the the Insistent check box Enable Preferred Paths check box selected R_A_TOV must be greater R_A_TOV must be greater Change one of the values so that than E_D_TOV than E_D_TOV R_A_TOV is greater than E_D_TOV Resource is unavailable The specified operation Verify that the Ethernet connection cannot be performed between the HAFM appliance and because the product is the director is up or available unavailable Resource is unavailable The specified operation Verify that the HAFM cannot be performed appliance to product link is up If because the product is the link is up the HAFM appliance unavailable can be busy Try the operation again later SANtegrity Feature not You selected Switch Inst
170. ers on page 112 e Actions on page 114 e Schedule triggers on page 114 Creating a rule To create a rule 1 Click the Event Management tab on the HAFM main window to display Event Management information Figure 69 View All Event Management Rules 10f2 active Reset Interval 1 Seconds _ Change LEN ag Actives Name j Jou Description User Date Activate Description Rule 1 Inventory Mc Inventory Monthly 1 Example Run a Product List Report ont admin Jul 3 un a Product List Report on Taj Deactivate Status Unknown 2 Example If a production switch or bridg admin Jul he first day of every month at w Trigger New Type Monthly Edit Start Time 0001 a Month 1 Copy Delete Actions 1 Report Template Product Lis 2 Message Severity Level INF Figure 69 Event Management tab 2 Click New 116 Optional HAFM features The Add Rule dialog box is displayed Figure 70 were Gop Example Trager Trigger Event Time Limits Schedule Actions Email Export Launch Log Message Pause Sound Active Desorpton vv Acton Delete Delete E y 2 Type SNMP Trap Evert X Property pernos value Ada IP Ad deans X X Baudorre 1 Select tram the Type list adora to create an Event Tagger 2 Gales or ender options in e Property Opecster and Value Viste 3 Click Add 4 Optional Repeat ctepe 2 and I to corigure ad itienal trigge
171. ese parameters Replace FRU and enable beaconing again or enable beaconing on operating FRU Table 31 Cannot enable beaconing while the system light is on Cannot enable beaconing while the system error light is on Cannot enable Open Trunking while Enterprise Fabric Mode is active and the switch is offline Cannot have E Ports if Management Style is FICON unless SANtegrity feature is installed Please contact your sales representative Cannot have spaces in field Cannot install firmware to a director with a failed CTP card Element Manager messages continued ee o e Occurs when choosing Enable Beaconing option for a failed FRU Beaconing cannot be enabled while the system error light is on Enterprise Fabric mode is active and the switch or director is online and you attempted to enable Open Trunking This message is displayed if the optional Open Trunking feature is installed Firmware is below the required level and you attempted to change management style from Open Systems to FICON management style with E_Ports configured but SANtegrity Binding is not installed Spaces are not allowed as part of the entry for this box A firmware version cannot be installed on a director with a failed control processor CTP card Replace FRU and enable beaconing again or enable beaconing on an operating FRU Select Clear System Error Light from Product menu to clear error light the
172. ests confirmation to send a firmware version from the HAFM appliance s firmware library to the director Firmware library can store up to 8 firmware versions Firmware is below the required level and you attempted to change a port type in the Configure Ports dialog box while FICON management style but the optional SANtegrity Binding feature is not installed You attempted to disable Switch Binding through the Switch Binding Change State dialog box but Enterprise Fabric Mode is enabled You attempted to disable the Insistent Domain ID parameter through the Configure Switch Parameters dialog box but Fabric Binding is enabled Occurs when selecting Enable Beaconing option for a failed FRU 234 Informational and error messages Click Yes to delete the firmware version or No to abort the operation Click Yes to confirm the deletion of the address configuration or No to cancel the operation Click Yes to send the firmware version or No to abort the operation Informational message If the firmware is below the required level install SANtegrity Binding before changing port types in the Configure Ports dialog box while in FICON management style You must either disable Enterprise Fabric Mode using the Enterprise Fabric Mode dialog box in the HAFM application or set the switch offline before you can disable Switch Binding Disable Fabric Binding through the Fabric Binding dialog box before disabling th
173. et before adding a new zone set Delete an existing zone before adding a new zone to the zone set Configure the nickname to the appropriate product or select an existing nickname HA Fabric Manager user guide 229 Table 30 HAFM Messages continued The nickname is already assigned Either use a different name or do not save the name as a nickname The software version on this management server is not compatible with the version on the remote management server The zoning library conversion must be completed before continuing This fabric log is no longer valid because the fabric has been unpersisted This network address has already been assigned This product is not managed by this management server This switch is currently part of this fabric and cannot be removed from the Fabric Membership List Isolate the switch from the fabric prior to removing it from the Fabric Membership List The entered nickname already exists in the fabric Each nickname must be unique A second HAFM appliance client connecting to the HAFM appliance must be running the same software version to log in The zoning library conversion is incomplete and the requested operation cannot continue The selected fabric log is no longer available because the fabric has been unpersisted The specified IP address was assigned and configured A unique address must be assigned The product selected is not ma
174. ete the duplicate zone name Element Manager messages This section lists Element Manager informational and error messages in alphabetical order Table 31 A Preferred Path already exists between this Source Port and this Destination Domain ID Please reconfigure the desired path Activating this configuration will overwrite the current configuration All configuration names must be unique All FPM ports will be held inactive while the director is configured to 2 Gb sec speed Do you want to continue All port names must be unique All port names must be unique An Element Manager instance is already open Another Element Manager is currently performing a firmware install Element Manager messages For any source port only one path can be defined to each destination domain ID Confirmation to activate a new address configuration All address configurations must be saved with unique names Occurs when FPM cards are installed in the director and director speed is being set to 2 Gb sec in the Configure Switch Parameters dialog box A duplicate Fibre Channel port name was configured All port names must be unique A duplicate port name was entered Every configured port name must be unique Only one instance of the Element Manager can be open at one time Only one instance of the Element Manager can install a firmware version to the director at a time pa On the Ad
175. evices Ensure that only one copy of the application is being used to monitor and manage the same devices in a subnet Cannot see HBA in discovery HAFM requires specific HBA driver levels Verify driver setup bos levels HA Fabric Manager user guide 203 Table 25 Discovery problems and resolutions continued Problem Broadcast request is blocked by routers Resolution Resolution 1 If you know the IP addresses and they are not in the Available Addresses list Select Discover gt Setup Click Add Enter data in the dialog box Click OK Repeat steps step 1 through step 4 until all addresses are available Y tm S al Select the IP addresses you would like to discover in the Available Addresses list 7 Click to move your choices to the Selected Individual Addresses list 8 Click OK Resolution 2 If you know the IP addresses and the addresses are listed in the Available Addresses list 1 Select Discover gt Setup 2 Select the IP addresses you would like to discover in the Available Addresses list 3 Click gt to move your choices to the Selected Individual Addresses list 4 Click OK Resolution 3 This method significantly increases your discovery time If you don t know the specific IP addresses 1 Select Discover gt Setup 2 Click the Method column for the selected subnet in the Selected Subnets list and select Sweep 3 Click OK Discovery time is
176. f each product If all changes are successfully populated to a product the status displays the product name and a message indicating success If the switch loses manageability or connection a message is displayed with an Error icon The remaining changes continue to process The Security Administrator can maintain the configuration data on the Users tab fix the connection problems and return to the either Apply or Apply To dialog box Select the unfinished products and repeat the confirmation process If there are no security settings being changed Apply and Apply To can be selected When this occurs the Security Change Confirmation and Status dialog box is displayed with the Detailed Changes table and a message indicates that no changes were found Clicking Start displays a Status message that indicates the security settings are identical and that there are no changes to apply Using the Software tab The Software tab Figure 105 enables you to define software access to the switch through the API and the OSMS interface Unlike the Telnet and HAFM Basic interfaces the API user uses the HAFM appliance name which is the server name defined at installation as the ID and uses the CHAP Secret as the password The OSMS interface allows HAFM to manage the switch from in band The only information required for the OSMS interface is the OSMS key 172 SANtegrity Security Center View All HAFM 8 7 1 olx SAN Edt View Plan Discover Configure Moni
177. ffline loop and storage device 270 Reference EY NOTE In Figure 119 gray lines on the HBA indicate no activity on those connections sw2100_b_C Switch Group san server 2 sw2100_b_C al Figure 119 Connection performance as displayed on Physical Map p ie Pong gt LJ FI A Figure 120 Switch on topology showing ports Event Management Event Management enables you to specify triggers and actions to automate tasks For example you can set an event trigger to fire at a certain time and day everyday at noon and associate the action of sending an e mail message Event trigger properties This section describes the properties you can set for event triggers SNMP trap event properties SNMP trap events occur when the appliance receives an SNMP trap Table 38 describes trap event properties Table 38 SNMP trap event properties IP Address Device s IP address Node Name Device s WWN Port Name Port s WWN HA Fabric Manager user guide 271 Table 38 SNMP trap event properties continued Descrpion Source The cause of the event for example user ID or device label Description Event description for example out of band offline Event Level The severity of the event for example informational Table 39 describes the properties of a device in the SAN Table 39 SNMP trap device properties Property Description Label Device s
178. file is exported to the selected folder Removing a nickname To remove a nickname 1 Select Configure gt Nicknames The Configure Nicknames dialog box is displayed Figure 14 on page 48 2 Select the nickname of the device you want to remove 3 Click Remove A confirmation message is displayed 4 Click Yes 5 Click OK Exporting and importing data The import and export features are important functions of the application You can import and export data for many reasons including to communicate issues to the support center and to capture network status Ef NOTE Currently you can only export to and import from the same version of HAFM application for example export from 08 06 00 and import to 08 06 00 Importing a file imports the following e Physical map HA Fabric Manager user guide 51 Status icons User properties e Discovered properties as they were set at the time of the export Exporting data To export data to disk or e mail 1 Select SAN gt Export The Export Discovered SAN dialog box is displayed Figure 19 Export To Disk w Files 7 SAN Files 84 KB 7 Physical Map 6 KB Product List 1KB Reports OKB Nicknames OKB _ XML Topology Status Total OK Cancel Apply Help Figure 19 Export Discovered SAN Disk dialog box 2 Select an option from the Export To list e Disk Saves the exported files to the disk in Install_Home Client Data sandate san zip EMail
179. file on the HAFM appliance to explicitly specify which IP address the HAFM application should use as the public LAN Perform the following to configure an Ethernet interface Open the config properties file in directory C Program Files HAFM and add the following line ServerRmilpAddress X X X X where x x x x is the IP address assigned to the Ethernet LAN adapter which is to be used as the public LAN This entry is case sensitive and must be made exactly as shown After this line has been added reboot the HAFM appliance EY NOTE Rebooting the server does not impact the Fibre Channel operations of any edge switch or director Only monitoring switch operations logging events and implementing configuration changes are interrupted Remote access to the public LAN If the public LAN IP address of the HAFM appliance is changed you must edit the config properties file to reflect the new IP address Remote workstations are not supported on the secondary adapter and must always connect to the public adapter For details on configuring remote workstations see Configuring remote workstations on page 257 Out of band access Besides the HAFM application and Element Managers on the HAFM appliance out of band non Fibre Channel management access to HP directors and switches is provided through the following HA Fabric Manager user guide 23 A Simple Network Management Protocol SNMP agent implemented through the HAFM ap
180. g naming conventions on page 148 Select the members to add to the new zone from the Potential Zone Members list Select the new zone from the Zones list Click gt to the right of the Potential Zone Members list to add the selected members to the zone Select an option from the Zoning Method list Select the zone sets to which you want to add the zone from the Zone Sets list Select the zones you want to add to the zone set from the Zones list Click gt to the right of the Zones list to add the selected zones to the zone sets To activate the zone set see Activating a zone set on page 152 Click OK Adding a member to a zone To add a new or existing member to a zone 1 2 3 4 150 Zoning Display the zone library See Displaying the zone library on page 149 Select the zones to which you want to add members from the Zones list To add an existing member skip to step 7 To create a new member click New Member The Add Zone Member dialog box is displayed Figure 92 e Domain Port Domain o 4 4 Port o Port WAN OK Cancel Apply Help Figure 92 Add Zone Member dialog box 5 Specify a zone member by its domain and port ID or WWN address EY NOTE Zoning by domain and port is supported only in Homogeneous Fabric interop mode Do one of the following Select Domain Port and enter the domain and port IDs in the appropriate boxes Select WWN and enter the
181. g rule parameters Parameter Required Description to load rule set rule_id Yes Sets the rule ID Must be a unique value but can be any length and format where rule Yes Sets the actual rule Use only the keywords Als id otherwise the follows this table 5 description No Provides a more Must be prepended with detailed description of an and esa Must be enclosed within quotation marks headline No Provides a short Must be prepended with overview of the rule an and Must be enclosed within quotation marks errormsg No Specifies the error Must be prepended with message to display if an and the rule is violated If this statement is not specified or if it is null a generic error message is displayed Must be enclosed within quotation marks remedy No Specifies a remedy for Must be prepended with the rule violation This an and text is displayed on the Must be enclosed within evaluation window quotation marks Rule types There are three types of rules that define the where rule parameter Connection rules Specify which devices can be connected in a plan Table 20 e Property validation rules Verify the validity or uniqueness of device names in a plan Table 21 Capacity control rules Verify the connections in a plan Table 22 142 Optional HAFM features Keywords EY NOTE Keywords are not case sensitive The w
182. g the HAFM appliance and displays them on the Physical Map and Product List as product labels Nicknames must have been defined in the Node List View of the HAFM appliance Nicknames defined in the Configure Ports area will not be imported The WWNs in the nicknames file are assumed to be port WWNs If this file uses the node WWN no import will take place The nicknames file is located in C E EcData EmsData efcHafmServices WwnNicknames Properties csv Imports properties of products and ports including labels and IP addresses The general format for this import is in comma separated value CSV ASCII format The first line defines the kind of import Node or Port and lists the properties and columns in the Product List The first column must be either Node Name or Port Name Subsequent columns contain property column names These properties can be standard for example Label or user defined for example Cabinet Color Non editable properties will not be imported for example Port Count Non existent columns will be ignored The format is space sensitive only commas are used as separators so trim leading or trailing spaces unless you want to import them as part of the data To import port properties use the Port Name column header Port import will only allow the Label property to be set HBA Node Name Imports data to an HBA use Node import but specify the HBA s port WWN in the Node Name column This is necessary since the
183. g the Security Change Confirmation and Status dialog box 173 Using the Software tab n nananana a A a 174 Enabling API authentication 5 co EA AN AAA ee ARAS 4 175 Disabling API authentication on the switch 0 2 eee eee 176 Adding the current HAFM appliance to the Permitted Software List 176 Removing the current HAFM appliance 0 2 00 0000 eee eee eee eee 177 Editing the CHAP Secret for the current HAFM appliance o oo o o o 177 Adding an additional HAFM appliance nnna naana cee eee 177 Editing the CHAP Secret for another HAFM appliance n on nnana nannaa 177 Removing another HAFM appliance n onanan anaa 178 HA Fabric Manager user guide 9 A Enabling OSMS authentication 6 6 eee ene 178 Applying changes and confirmation iia ed RR ER HORA 178 Using the Devices tab aria Aa paged eed sep ebbadaee 178 Understanding the Devices tab display and default settings 180 Adding a detached switch cido sir rr e ie each oo eee 181 Populating a CHAP Secret to a current switch 0 0 eee ee eee 182 Changing a CHAP Secret for a switch vir da aa ee gala 182 Adding a connected device with CHAP Secret to a switch oo oooo oooo 183 Adding a connected device without a CHAP Secret to a switch 183 Changing a CHAP Secret for a connected device 2 2 2 e eee eee eee ee 183 Removing a connected device from a switch 0
184. ged If there are no security settings being changed the Security Change Confirmation and Status dialog box is displayed with the Detailed Changes table showing that No Changes were Found on the first row 3 Click Start and the status window displays a message indicating the security settings are identical and there are no changes to apply IP Access Control list tab The IP Access Control tab Figure 1 10 contains IP addresses of the devices that are allowed to manage the switch IP addresses that are not on this list cannot manage the switch from the IP management port View All HAFM 8 7 1 10 x SAN Edt View Plan Discover Configure Monitor Help A 7 de a A i Hebe Qre tk a View Aly Event Menagerent Fabris Auhetiaton 0 1000080088A0406F Product Configuration 0 1000080088A04280 j Nodehlame NickName Model JDomainD Firmware PFE Key Aut EWS J of Ds EWS Method EWS Telnet JESH Tenet_ oflDs 1000080088E0AC 8 gt 1000080088409816 Test 001 45 07 00 00_84 Y 2 Local Only 2 07 01 02 4 2 Local Only 07 00 00_84 2 Local Only 2 07 00 00 _84 2 Local Only 1000080088407C6A oot 2 183 100008008860308C oot 7 9 100008008840B26D Testi 001 3 Users Software Devices P Access Control Radius Servers _ Enable P Access Control Permitted IP Addresses Stat End as AE Y harmservenez Cients 1 gary Figure 110 Security Center IP Access Control tab
185. gress of the installation is tracked on the Installing High Availability Fabric Manager window 27 If desired select the Start the High Availability Fabric Manager check box to immediately open the HAFM 28 Click Done Running HAFM Run HAFM from the directory in which you saved it 1 In the Terminal window enter cd HAFM 2 Press Enter 3 4 Press Enter Enter HAFM The HAFM application opens HA Fabric Manager user guide 265 266 Configuring remote workstations E Reference This appendix provides useful reference information e Compatibility with other applications page 267 e Icon legend page 267 Event Management page 271 e Writing Event Management macros page 277 e Keyboard shortcuts page 280 Compatibility with other applications The application is designed to operate smoothly with other enterprise applications and network monitoring programs Because this application has fully configurable SNMP trap listening and forwarding functions it can act as a primary or secondary network manager It can listen for trap events on any port and can forward traps to other network management software enabling easy integration into existing systems By default the application is configured to listen for traps on the standard port 162 Only one software application can control a TCP IP port at a given time If the application is not the primary network management tool and you plan to run the application
186. gt Control Panel gt Administrative Tools gt Services The Services dialog box is displayed Right click BK_MGR and select Properties The Properties dialog box is displayed Click Log On Click This account and enter the account name for the user who has rights to the network drive Enter a password in the Password and Confirm password boxes Click OK to apply changes and to close the BK_MGR Properties dialog box Click the close X icon on the Services dialog box Select SAN gt Options on the HAFM appliance The Options dialog box is displayed Select Backup in the Category list The currently defined directory is displayed in the Backup Output Directory box 10 Click Browse and select the mapped network drive and directory to which you want to back up i your data The default directory is D Backup It is assumed that a D is a CD RW drive Browse is only available on a local client not a remote client Click Apply or OK For local clients the application verifies that the device exists If the device does not exist an error message is displayed indicating that you have specified an invalid device If your are using a remote client when you click Apply or OK HAFM does not verify that the drive exists it just saves the settings Backups occur at 15 minute intervals Accessing to Eclipse management applications 60 This section describes how to configure HAFM to launch the f
187. gure gt Port Fencing The Port Fencing dialog box is displayed Figure 73 on page 124 Select a threshold type from the Violation Type list Select the threshold you want to assign in the ISL Thresholds table Select the objects All Fabrics Fabric Switch Port Type Security only and or Port to which you want to assign the threshold in the Ports table Click 2 to assign the threshold An icon displays next to the objects you selected in the Ports table to show that the threshold was applied at this level and was inherited by each object below it in the tree if not affected by lower level direct assignments An icon displays next to each object in the tree to which the new threshold is applied Click OK 126 Optional HAFM features Editing thresholds HAFM allows you to edit the name number of events and time period of ISL protocol link and security thresholds Editing ISL Protocol Thresholds To edit an ISL protocol threshold 1 Select Configure gt Port Fencing The Port Fencing dialog box is displayed Figure 73 on page 124 Select ISL Protocol from the Violation Type list Click Edit The Edit ISL Threshold dialog box is displayed Figure 77 2 Edit ISL Threshold x Block a port when one of the following ISL protocol error types meets the threshold ISL Bouncing ISL Segmentation ISL Protocol Mismatch Name ISL Defaut Threshold 5 w errorsper 5 Y Minutes OK Cancel H
188. gy layout and creating user defined views of the SAN You can create views that show only certain fabrics If you discover or import a SAN with more than 2000 devices the devices display on the Product List but do not display on the Physical Map Instead the topology area shows a message stating that the topology cannot be displayed You can create a new view to filter the number of devices being discovered Creating a customized view To customize the main window Ef NOTE Customized view settings reside on the appliance All users who log on to the same appliance can select that view 1 Do one of the following to open the Create View dialog box Select View gt Create View e Click the View tab and select Create View HA Fabric Manager user guide 83 The Create View dialog box with the View Members tab is displayed Figure 41 Name Description View Members Columns Include Assets via 0 All Selection OK Cancel Help Figure 41 Create View dialog box View Members tab 2 Enter information in the following boxes Name e Description 3 If you want to filter the fabrics that display on the Physical Map continue to step 4 otherwise proceed to step 7 4 Select Selection for the Include Assets via option 5 Select the fabrics you want to include from the Available Fabrics list EY NOTE Other in the Available Fabrics or Selected Fabrics lists refers to all isolated devices and connected
189. hat the new time or date will overwrite the existing time or date set for the director or switch Action cannot be performed because Periodic Date Time Synchronization option is active Informational message You removed Port Binding from attached devices but one or more of these devices is still controlled by Fabric Binding Port addresses entered in the Swap Ports dialog box are the same This is displayed when port diagnostics is run on a port in an inactive state This is displayed when you configure a port to 2 Gb sec and the director speed is set to 1 Gb sec 250 Informational and error messages Click OK to set the director offline or click Cancel to cancel the operation Click OK to set the director online or click Cancel to cancel the operation Verify that you want to overwrite the current date or time Click Periodic Date Time Synchronization check box in Configure Date and Time dialog box Configure menu to clear check mark and disable periodic date time synchronization Review the Switch Binding Membership List to determine if the devices should be members Ensure that address in the first and second Port Address boxes are different Run the diagnostics on an active port Set the director speed to 2 Gb sec in the Configure Switch Parameter dialog box Table 31 Element Manager messages continued CO CN CN Port numbers must be in When configuring In the Configure Pref
190. he Element Manager because the Ethernet link is down or busy or because the director is busy 240 Informational and error messages Retry the operation later If the condition persists contact the next level of support Perform a swap only on a port that is installed Click OK to delete the log contents or click Cancel to cancel the operation Start the HAFM application to connect to the HAFM appliance Continuing will activate the current configuration which may have been configured by a FICON host Ensure file name and drive are correct Ensure file name and directory are correct Or obtain a valid firmware file from your service representative Retry the operation later If the condition persists contact the next level of support Retry the operation later If the condition persists contact the next level of support Table 31 Element Manager messages continued CON CN CN Could not write firmware A firmware version could Retry the operation again If the to flash not be written from the condition persists contact the next HAFM appliance to level of support FLASH memory Control Unit Port CUP Within the address Make sure all names are unique for name and port name are configuration one or the ports and CUP name identical FICON ONLY more of the port names are the same as the CUP name Date entered is invalid The date is entered Verity each entry is valid and incorrectly at t
191. he Switch Binding State Change dialog box is displayed Figure 71 7 Enable Switch Binding Connection Policy Restrict E_Ports O Restrict F_Ports Restrict All Ports Activate Cancel Help Figure 71 Switch Binding State Change dialog box 2 Perform one of the following steps e To enable Switch Binding check mark is not in the Enable Switch Binding check box click the Enable Switch Binding check box to add a check mark Go on to step 3 to set the Connection Policy e To disable Switch Binding a check mark is displayed in the Enable Switch Binding check box click the Enable Switch Binding check box to remove the check mark 3 Click one of the Connection Policy options e Restrict E_Ports Select if you want to restrict connections from specific switches to switch E_Ports Switch WWNs can be added to the Switch Membership List to allow connection and removed from the Membership List to prohibit connection Devices are allowed to connect to any F_Port e Restrict F_Ports Select if you want to restrict connections from specific devices to switch F_Ports Device WWNs can be added to the Switch Membership List to allow connection and removed from the Membership List to prohibit connection Switches are allowed to connect to any E_Port e Restrict All Select if you want to restrict connections from specific devices to switch F_Ports and switches to switch E_Ports Device and switch WWNs can be added to the Swi
192. he Ethernet connection between the HAFM appliance and managed product is down or unavailable The maximum number of aliases allowed was reached The number of HAFM appliance IP addressees that can be defined to the HAFM application has already been configured The maximum number of unique members is 4097 The maximum number of members is 8192 228 Informational and error messages Choose a different switch or director Informational message only no action is required Enter a unique domain ID for the switch in the Add Detached Switch dialog box Wait until the process completes then perform the operation again Establish and verify the network connection Delete an existing alias before adding a new alias Delete an existing IP address before adding a new address Delete an existing zone member before adding a new zone member Table 30 HAFM Messages continued The maximum number of nicknames has already been configured The maximum number of open products has already been reached The maximum number of products has already been configured The maximum number of products of this type has already been configured The maximum number of remote network addresses has already been configured The maximum number of users has already been configured The maximum number of zones allowed has already been configured The maximum number of zone sets has already been configured
193. he HiCommand Device Manager cannot communicate to the device the following error will display An error was encountered during this operation Some of the operation can have been applied to the storage subsystem A refresh of the storage subsystem is recommended Please contact your System Administrator if you are a local user 3 To make sure HiCommand server is able to communicate to the storage device launch HiCommand GUI and refresh the array See the following documents on HiCommand Device Manager for HiCommand installation GUI usage and error codes e Hitachi HiCommand Device Manager Server Installation and Configuration Guide e Hitachi HiCommand Device Manager Web Client User s Guide e Hitachi HiCommand Device Manager Error Codes HA Fabric Manager user guide 209 Table 27 Address problems and resolutions continued Problem Encountering errors when performing LUN management on HDS 9980 V systems Resolution The host domains on this HDS 9980 V must be reconfigured using the native software before can manage the LUNs The same LUN or host port is included in two host domains on the same port The HDS 9980 V in conjunction with HiCommand Server 2 4 supports a new feature which is not yet supported in 4 2 This new feature allows you to create multiple host domains on the same storage port which include the same LUNs or host ports e 4 2 only supports the previous HDS V series configura
194. he Master Log of previous events HA Fabric Manager user guide 55 To import files 1 Select SAN gt Import The Import dialog box is displayed Figure 23 Import From SAN File zip gt A File Name Browse OK Cancel Help Figure 23 Import dialog box 2 Select the type of file you want to import from the Import From list 3 Enter the path and file name in the File Name box EY NOTE The default path is Instal1_Home ClientData san lt date gt san zip Importing the rep zip file causes errors 4 Click OK A confirmation message box is displayed e If you selected SAN File Nicknames or Properties continue with step 5 e If you selected Server HBA Mappings or Storage Port Mapping go to step 6 5 If you are sure you want to replace the data on the appliance click OK If you are importing a SAN file or a properties file the client is logged out and the HAFM 8 8 Log In dialog box is displayed 6 Log back in to the application Ef NOTE When discovery is on the discovered SAN is replaced with the imported data For information about discovery see Configuring discovery on page 72 Backing up and restoring data You can protect your SAN data by backing up the data and then restoring it when necessary The HAFM appliance provides a platform for the Enhanced Base package of the HAFM application This provides more memory for future product enhancements Several types of appliance platfor
195. he appropriate HAFM icons are placed on the desktop and in the Programs folder of every Windows user If you clear the check box the icons are created only for the current user and are not visible for other user IDs 18 Click Next The Pre Installation Summary window is displayed 19 Review the installation information and click Install 260 Configuring remote workstations The progress of the installation is tracked on the Installing HP StorageWorks HAFM window When the installation is complete the Install Complete dialog box is displayed 20 Click Done Running HAFM Solaris If you selected icons to be created in step 17 of the installation procedure access the icon in the windows Start menu or desktop to run HAFM If you did not create any icons in step 17 of the installation procedure a Access the HAFM folder default location Insta11_Home bin b Double click the file HAFM_coo bat to run HAFM systems This section describes the procedures for installing HAFM on a remote Solaris workstation Requirements The download and installation process requires the use of a workstation with the following minimum system requirements Solaris version 8 or 9 UltraSPARC Ili or greater processor 512 MB RAM 350 MB available disk space Video card supporting 256 colors at 800 x 600 resolution Network connection Web browser such as Microsoft Internet Explorer version 4 0 or later or Netscape Navigator version 4 6 or later
196. he consistent Configure Date and Time dialog box Individual box entries can be correct but the overall date is invalid for example a day entry of 31 for a 30 day month Device applications Port diagnostics Terminate the device application should be terminated loopback tests cannot and perform diagnostics again before starting be performed on a port diagnostics Press NEXT while an attached device to continue application is running device WWN cannot You attempted to remove Remove the device from the switch be removed from the a device WWN from the by blocking the port setting the Switch Membership List Switch Membership List switch offline or disabling Switch while participating in SANtegrity Binding Binding through the Switch Binding Switch Binding The feature while Switch Change State dialog box before device must be isolated Binding is enabled removing devices from the Switch from the switch or Switch Membership List Binding deactivated before it can be removed Director clock alert mode Clock alert mode is Disable clock alert mode through must be cleared before enabled through the the Configure FICON enabling period Contigure FICON Management Server dialog box synchronization Management Server dialog box and you attempted to enable Periodic Date Time Synchronization through the Configure Date and Time dialog box HA Fabric Manager user guide 241 Table 31 Director must be off
197. he product Disable Enterprise Fabric Mode through the Enterprise Fabric Mode dialog box in the HAFM application before disabling Fabric Binding Make sure devices named in Show Routes dialog box are attached to products managed by this HAFM appliance HA Fabric Manager user guide 217 Table 30 HAFM Messages continued esse CSC CN Cannot display route All switches in route must support routing Cannot display route Device is not a member of a zone in the active zone set Cannot display route on one switch fabric Cannot display route error 9 Cannot display route No active zone enabled Cannot have spaces in field Cannot modify a zone set with an invalid name Rename zone set and try again Cannot modify a zone with an invalid name Rename zone and try again You cannot show the route through a fabric that has switches or directors which do not support routing You cannot show the route for a device that is not a member of a zone in the active zone set The source node that you have selected is not part of a zone in the active zone set You cannot show routes between end devices in a fabric when configuring Show Routes Configure menu An internal error has occurred while trying to view routes You cannot show the route through a fabric with no active zone Spaces are not allowed as part of the entry for this box A zone set must have a valid name to be modifi
198. he system reboots or is unable to gather SNMP information Multiple SNMP calls are being sent to a device that can t handle the constant requests for information Verify that the devices you are discovering are not being discovered by another appliance Discovering devices using multiple appliances can result in errors A report failed to be generated due to memory constraints Generate a fewer number of reports at one time Receiving error Compatibility between lt TARGET VERSION gt and lt CURRENT VERSION gt is unknown Do you want to continue Firmware files are included in the upgrade process but release rules are not Since release rules are required when sending another firmware version to a switch this error results To fix this problem add the latest firmware file to the firmware library This also adds the new release rules and resolves the problem An error occurs when trying to delete a nickname Once assigned a nickname cannot be deleted The system reboots or is unable to gather SNMP information Multiple SNMP calls are being sent to a device that can t handle the constant requests for information To resolve this issue verify that the devices you are discovering are not being discovered by another server Discovering devices using multiple servers can result in errors Problems with zoning The following section states some possible issues and recommended solutions for zoni
199. here rule parameter allows the following keywords Types Device Network Zone Fabric Switch Hub Bridge NAS HBA Storage Tape JBOD Loop Server Property names Wwn Portwwn Model IPAddress SerialNumber Vendor Firmware Portlype PortNumber ZoneName F_Port FL_Port TL_Port E_Port NL_Port N_ Port H_Port UNKNOWN_PORTs MAXPORTS HA Fabric Manager user guide 143 e Operators lt lt gt gt Table 20 Connection rules Syntax do_not_connect device x Description Never connect device x to device x do_not_connect device x to device y Never connect device x to y do_not_connect device x to device y through device z Never connect device x to y through z do_not_attach device x to device y Never connect device x into a SAN that has device y connect device x Always connect device x to device x Always connect device x to y connect device x to device y connect device x to through device z device y Always connect device x to y through z Table 21 Property validation rules Syntax check_for_valid PropertyName for device x PropertyName should_be_unique_in Types Description Device x must have valid PropertyName Cannot have duplicate PropertyName in the same Types Table 22 Capacity control rules total_connections device x Operat
200. ial number Port Count Device s port count Firmware Device s firmware level Comments User entered comments Text through Text4 User entered values Device Status Device s availability online offline Table 43 describes the properties of the platform and the appliance Table 43 Performance system properties Property Description Admin Client Count Number of administrator clients logged in to the SAN Client Count Number of clients logged in to the SAN Discovery Off Specifies whether discovery is turned on Event Notification Off Free Memory Specifies whether event notification is turned on Available physical memory Total Memory IP Address Appliance s IP address VM Name Name of the Java Virtual Machine VM Vendor Vendor of the Java Virtual Machine VM Version Version of the Java Virtual Machine OS Architecture Operating system architecture OS Name Operating system name OS Version Operating system version Server Name Name of the appliance Subnet Mask Discovered subnet mask Total physical memory Trap Forwarding Off Specifies whether trap forwarding is enabled Region The region of the world where the user is located Time Zone User s time zone User Count Number of users User action event properties User action events occur when you change a setting in the appliance 274 Reference Table 44 describes the user action event properties
201. ialog box must have entries in the range from 1 and 99 This message is displayed if the optional Open Trunking feature is installed At the Configure Date and Time dialog box the DD value day must be an integer from 1 through 31 inclusive At the Configure Fabric Parameters dialog box the error detect time out value E_D_TOV must be an integer from 2 through 600 inclusive At the Configure Date and Time dialog box the HH value hour must be an integer from O through 23 inclusive At the Contigure Date and Time dialog box the MM value minute must be an integer from O through 59 inclusive At the Configure Date and Time dialog box the MM value month must be an integer from 1 through 12 inclusive At the Configure Fabric Parameters dialog box the resource allocation time out value R_A_TOV must be an integer from 10 through 1200 inclusive Enter a value from 1 to 99 into the Low BB Credit Threshold box of the Configure Open Trunking dialog box Verify and enter a valid date Verify and enter a valid number Verify and enter a valid time Verify and enter a valid time Verify and enter a valid date Verify and enter a valid number HA Fabric Manager user guide 247 Table 31 Element Manager messages continued CE CT CN Invalid value for second At the Configure Date Verify and enter a valid time 0 59 and Time dialog box the SS value second must be an integer fro
202. ickidme 5 0 45 ene aae E 51 Exporting and ImpOning data ati id E E E E 51 Exporting data dee R ER E NEE o O 52 Importing dal talas td a di kn he or 55 Backing up and restoring dat a an UR ti 56 Backing p did SA Rat PRM RS 57 Restoring Alco PA E O E EAN 57 Customer supplied server backup ooooooooooor eee teenies 58 ola TA A O O 58 Backing up to a CD RW cas rana ra ips l ba 58 Backing up to a hard dEl bridas il bebe hee oe wane 59 Backing up to a network drive veran da ee nee rad 60 Accessing to Eclipse management applications 0 0 0 0 eee eee 60 Configuring access anh bee Bahn hh Kee Pe rinda 61 Configuring Call Home for remote dial in iss 4 vans A eee Wa cen 62 a s 2oce 25 heaps geen eee Maeda teeta pease heeds ou 62 Multiple network interface cards 1 eect ete 62 Managing Me PALM GPDICORON o64 lt i5aene ig eens haemo eed eens i 63 Accessing HAFM ooo 63 Adding and removing a network address o lt 5i evissteue ja beens 63 Managing USES soe eee ee Ra ee ae Soha eR ase es 63 Viewing the list of users aba iii a di baked bd us c 64 Adding a user account oi au ee ldes lara eed b4a2 64 Changing a User GECOUNE sf when eee eke k wa Ohad ae E a ae Whee eda eR eg 65 Removing a User ACCOUNT ar i eke nee a AG eee eae dee eda pew a eas 65 Filtering event notifications for a user n tect teenies 66 Configuring remote management access ooo 67 Dis Onn cting a USET coito nda A AAO Oe oe eee bee wd be hee ch
203. icon Operational Degraded A a To see a list of all products requiring attention click the Attention Indicator icon on the Status bar at the bottom of the main window The Service Request dialog box displays the names and IP addresses of devices needing attention Click a product name hyperlink to jump to the product on the Physical Map The list will update dynamically Failed Unknown link down Determining the Discovery State EY NOTE The Product List panel can be hidden by default To view all panels select View gt All Panels or press F12 You can determine the discovery status of products by looking at the Status column in the Product List Additionally the operational status called Unknown is equivalent to the discovery state Offline The operational statuses Operational Degraded and Failed are equivalent to the discovery state Online Configuring the SNMP agent This section provides information to help you use the SNMP agent module 80 Managing the HAFM application Setting up the SNMP agent The SNMP agent module implements the objects defined in the Fibre Channel Management FCMGMT Management Information Base MIB 3 1 and a small number of objects defined in MIB II Through implementation of these MIB objects the agent translates information stored on the appliance into a form usable by SNMP management stations You can configure network addresses and community names for up to 1
204. ies that the device exists If the device does not exist an error message indicates that you have specified an invalid device Insert the formatted disk in the CD drive Backups occur at 15 minute intervals EY NOTE CDs have a limited life and may only last about a month An error message is displayed if your HAFM appliance can no longer backup to the CD Backing up to a hard drive 1 Select SAN gt Options The Options dialog box is displayed Select Backup in the Category list The currently defined directory is displayed in the Backup Output Directory box Click Browse and select the hard drive and directory to which you want to back up your data The default directory is D Backup It is assumed that the D drive is a CD RW drive Browse is only available on a local client not a remote client Click Apply or OK For local clients the application verifies that the device exists If the device does not exist an error message indicates that you have specified an invalid device Backups occur at 15 minute intervals HA Fabric Manager user guide 59 Backing up to a network drive To back up to a network drive your workstation must be in the same domain and you must have rights for the network drive in order to copy files The System Administrator can verify the user rights to the network drive The network drive must be mounted on the appliance 1 ONAN SDS w Select Start gt Settings
205. in Mao nth ba id Ghee a ei Tet 158 BA o ee ee ee eT eee eee ee ee 158 Deleting cr zone Sef o e sepa me ta maea aa daw diddy ARA haw bey 158 Viewing zone and zone set properties 2 0 tenes 159 Finding members in a zone ori 0 ate id ide dde ted de sc de 159 Finding zones in a zone set rra e ca 159 Displaying zone members eiii de in AAA DES a AAA a Be 159 Saving the active zone set to a zoning library 1 2 0 eee 160 Comparing zone SES 160 a coy ecaeie enews cere ae oTa OPETE EA 163 Security Center Overview 00 000 eee eee eee 163 Accessing the Security Center au edb ae deb Gee Ea SER beh bebe eed oe EK we 163 Displaying the Fabrics list 2 1 26 2 oask te nes apa A aa 165 Using the Authentication Table 6455444 624 nied e ici lid Orie dose hw hep ae wes 166 Selecting a fabric ad bath haw tes a POOR RMS pda ee ae 166 Changing security data internally v5 uc oo Sow ane AD ARA ae Wh a 166 Changing security data externally cta2044seeben EA ADA Ao 167 Accessing SANtegrity Security Center tabs 0 2 0 0 167 Common features about tabSoi sc sse adda hee eeeedaceea da 167 Common buttons displayed on tabs 464 6 uns oda dnd aia ains aa eae e 168 Setting Authentication methods 0 c eee teeta 169 Using the Users Tab decir A Ge LA OHO ROR Pee debe ee ye AS 170 Assigning users to a SWAN 170 Adding a new user ev as do dd a 171 Adding a set of users to multiple switches o oo ooooooooooooooooo 171 Usin
206. ing service requests ear e de ic eu 91 Displaying routes between ports no a nananana ts e ea 91 Hiding routs sore auto r r O E 92 Displaying properties of routes coccommeniro racer rr eu beu owas 93 Displaying fabric properties a4 di a6 ooh pira ARA AAA TSE Ens 93 Configuring Enterprise Fabric Mode x 645 a5 Gk 6 he a ce oD 94 Enabling and disabling Enterprise Fabric Mode 0 00 cee eee eee ee 94 Configuring Fabric Blade iii ir ic dew enh BA A ne aii 95 Enabling Fabric Binding o oae a r dpi ba 95 Adding and removing switches sais rd ee 96 Persisting and unpersisting fabrics aa RARA A RRA ARA 96 Persisting a fabric i iie ria ia deed Dic bd asa ted dedicado 96 Unpersisting a fabric ira AE a a A Sohne ahs 96 Unpersisting a POUR ade ad AAA A AA 97 Interpreting Status o errotari a in hey DASE Rae Ae ead ye pea eae dowd 97 Persisted fabric status edad id ERG ed bici 97 Product stalus erecta a e a y ho 97 Connection SUS caracte ad a id 97 Changing persisted Tabla aa RAR 98 Configuring trap forwarding eiii ra iii ici da cd dd a 98 Adding trap recipients 44 5 aa ri AAA A 99 Removing trap recipients och ae Doce ddr Rese R ara ca 100 5 Monitoring SAN products cisco rrv des eeweewa 101 Monitoring events 2 0 ee eee eee 101 Viewing the Master Lita A Rda Ra eee Aa 102 Mo o ke oh cawennka doGeeehaee de EE ERE A a 102 Eirini OG A O Nin ge Ae a aw eee waa aes 103 Filtering events in the Master Log 1 0 eee eee eee ene
207. io id tsh 195 Polling A A eee ae ie ae 195 Decreasing login time sarna das cda bd aud 195 Forcing a client to polling mode 100 pta ici del ei 195 Forcing all clients to polling mode c orar ATA A e a 196 TCP per numbers irritada dd deta edo 197 HAFM function with RMI at TCP port level ooooooococoocoooo eee 197 Forcing the RMI registry to use a specific port 6 eee 198 HAFM SG BOP ice aio rr iaa o aS 198 HAFM_c bat 20 ce eee eee eee eee eae 199 Forcing the server and client to export a portnumber 0000 eee eee eee 199 HAF Misc Babia E toed E ead lt dd toa 200 HAFM 6 Bob usos asthe e Ada be Gabe ach Gis Road Abarat Stabby ats Agnes 201 WIEN ada E pe ds 203 Problems with discovery 4 a Re RES as e das de A oe 203 Problems with products dp a E YK oO RW eR Wane Hahn Dad Rhee PRY 205 Problems with addresses id hbo ob ea hee ehed ose ede bG4 44Se50ReRKo boas 205 Miscellaneous problems old AAN ER REN Gee Rd ee low gee 211 Problems with zoning oona annaa 212 Informational and error messageS 2 eee eee 215 HAFM application messages 4 ois nd sad sda aa a RAO Re 216 Element Manager messages 1 1 ooo 233 Configuring remote workstations otrora drid abbas Loe A SRP RA ENE ARS ODN OEE da BOE RS 257 REGQUIFEMONNS ito NA aks Rte dee ee dese Re ao E Ald a ated eA eee 257 Installation precedure 24 c nts tcndepg ets AAA A 257 Running HAFM ooo 261 O oe ee ee ee ee ec ee eee eee ee er ee ee eee ee eee eer r
208. iption column Specifies the auto assigned rule number Actions list Lists the actions to be performed when the rule s triggers are met Activate button Click to activate the selected rules Active column Specifies whether the rule is on Change button Click to change the reset interval Copy button Click to duplicate the selected rule Date Modified column Lists the date and time that the rule was last edited Deactivate button Click to deactivate the selected rules Delete button Click to delete the selected rule Description box Lists the description of the selected rule Description column Specifies the user defined rule description Edit button Click to edit the selected rule Group column Lists the group to which the rule belongs Name column Specifies the user defined rule name New button Click to add a new rule OFF button Click to turn the Event Management feature off ON button Click to turn the Event Management feature on Trigger list Lists the trigger for the selected rule User column Specifies the last user to modify the rule HA Fabric Manager user guide 115 Rules This section provides instructions for writing rules and setting up automated tasks Before you begin decide which triggers actions and schedules you want the rule to follow For more information see e Trigg
209. ity Administrator to set up software applications that can communicate with the switch through API Device Allows the Security Administrator to set device to device authentication parameters The Device tab is PFE key enabled If a proper PFE key is not provided the Device tab is not accessible IP Access Control Allows the Security Administrator to set up IP addresses to manage the switch Radius Server Allows the Security Administrator to set RADIUS server parameters that the switch can use to pass authentication information to the designated RADIUS servers The following buttons are used on the Authentication tabs a HA Fabric Manager user guide 167 Using the Users tab The Security Administrator uses the Users tab to set up role based user access to the selected switch through other management interfaces such as HAFM Basic or Telnet View Al HAFM 8 7 1 10 x SAN Edt View Plan Discover Configure Monitor Help a a z gt q ANXNXA A A P b ikaas m u View Aly YP Evert Management Seourty Ei Authentication R 100008008840406F Product Configuration conosoneenou2e0 Node ame NoName Model Domain jFimvare PFE Key Aut JENS ot Ds EWS MettodEWS Tehet __ SSH Tehet_ of Ds occo2oosseoaces 1O00080088ANSeI6 Tess 00 15 07 000 64 2 Local Oly 100008008807054 w a OEA Local Oriy ronvosooseenznec w 7 07 000 84 2 Local Oly 18 toc0ce002a4c6080 ant 3 07 0000 84 2 Local O
210. l N from the Planning window menu The New Plan dialog box is displayed Figure 85 New Plan RL lt o E 0 Start with discovered topology Start Empty OK Cancel Figure 85 New Plan dialog box 2 Enter a name in the New Plan box HA Fabric Manager user guide 137 3 Select one of the following options Start with discovered topology Use the discovered topology as the basis for the new plan Start Empty Start the new plan with an empty topology 4 Click OK Opening a plan To open a plan 1 Select SAN gt Open Plan from the Planning window menu or press Ctrl O The Open Plan dialog box is displayed Figure 86 Open Plan MyView_Plan 5 o Cancel Figure 86 Open Plan dialog box 2 Select a plan from the Open Plan list 3 Click OK Adding devices You can add one device or multiple devices to the plan Adding one device To add one device 1 Click a device icon on the devices toolbox 2 Click the Physical Map in the Planning window The new planned device icon is displayed on the Physical Map Adding multiple devices To add multiple devices 1 Click the devices icon on the devices toolbox The Insert Multiple Devices dialog box is displayed Figure 87 Host Bus Adapter s Hub s Switch es pl Bridge s Storage __ Tape s __ JBOD s __ NAS Device s Server OK Cancel Figure 87 Insert Multiple Devices dialog box 2 Enter a quantity for each device type you want to ad
211. label as shown on the Physical Map Name Device s name as specified in the Properties dialog box Device Type Type of device for example HBA Node Name Device s WWN IP Address Device s IP address Vendor Device s vendor Model Device s model Serial Number Device s serial number Port Count Device s port count Firmware Device s firmware level Comments User entered comments Text through Text4 User entered values Device Status Device s availability online offline Table 40 describes the properties of the operating system and the appliance Table 40 SNMP trap system properties Descipion Admin Client Count Number of administrator clients logged in to the SAN Client Count Number of clients logged in to the SAN Discovery Off Specifies whether discovery is turned on Event Notification Off Specifies whether event notification is turned on Free Memory Available physical memory IP Address Appliance s IP address VM Name Name of the Java Virtual Machine VM Vendor Vendor of the Java Virtual Machine VM Version Version of the Java Virtual Machine OS Architecture Operating system architecture 272 Reference Table 40 SNMP trap system properties continued OS Name Operating system name OS Version Operating system version Server Name Name of the appliance Subnet Mask Discovered subnet mask Total Memory Total physical memory
212. later If the condition persists contact the next level of support Install the firmware atter CTP card synchronization completes HA Fabric Manager user guide 239 Table 31 Cannot start port diagnostics Cannot swap an uninstalled port Click OK to remove all contents from log Connection to management server lost Click OK to exit application Continuing may overwrite host programming Continue Could not export log to file Could not find firmware file Could not remove dump files from server Could not stop port diagnostics Element Manager messages continued a a E Port diagnostics cannot be started at the Element Manager because the Ethernet link is down or busy A port swap cannot be performed when the port card is not installed This action deletes all contents from the selected log The HAFM application at a remote workstation lost the network connection to the HAFM appliance Configurations sent from the host can be overwritten by HAFM A log file I O error occurred and the file could not be saved to the specified destination The disk can be full or write protected Firmware file selected was not found in the FTP directory Or the selected file is not a firmware file Dump files could not be deleted from the HAFM appliance because the link can be down or the HAFM appliance or Element Manager is busy Port diagnostics could not be stopped by t
213. lation s Fibre Channel authentication parameters The Security Center provides a single central user interface for managing the authentication settings of all SANtegrity capable switches and directors in the installation The SANtegrity Security Center includes The list of fabrics Summaries of the security configuration for each SANtegrity capable device in each fabric Configuration tabs for updating each switch s SANtegrity authentication values The tabs are each oriented around a specific authentication task For example there is a tab to define which users are allowed to sign on to the switch to perform management tasks and which management interfaces are enabled and there is a tab to define the IP addresses from which management requests can originate and whether the switch or director will limit management requests based on originating IP address The ability to easily apply changes to all switches or directors in a fabric This key feature allows you to define the authentication parameters for one switch and by a few simple additional clicks propagate the changes to one or more additional switches in the fabric Thus the Security Administrator can view and manage security settings for entire fabrics at once A Security Log containing a record of all security related configuration updates as well as security related events such as illegal login requests The Security Center is designed to be a single point of control f
214. lay in a new window check box and then select an additional log To clear the selected log click Clear To refresh the selected log click Refresh Click OK Exporting log data You can export HAFM log data in tab delimited format This feature is useful if you want to provide the data to a third party or include it in a report 1 2 3 4 5 Select the log you want to export from the View Logs dialog box Figure 60 Click Export The Save dialog box is displayed Browse to the folder where you want to save the file Enter a file name in the File Name box Click Save To view the exported file in table format open the file in Microsoft Excel See Exporting and importing data on page 51 for more information Filtering events in the Master Log To filter the events that display in the Master Log 1 Click the Define link in the Master Log HA Fabric Manager user guide 103 The Define Filter dialog box is displayed Figure 61 Available Events Selected Events Type Subtype Level Type Subtype Level SNMP Trap Fatal x aj Fl Product Hardware Informational QW SNMP Trap Informational Uy a Product Link Incid Fatal 9 User Action Informational QQ Product Link Incid Varning 4 Product Link Incid Informational D Product Threshold Fatal 9 Product Threshold Warning A Product Threshold Informational Ey Ethernet Warning A OK Cancel Help ae
215. le clock alert mode through the Configure FICON Management Server dialog box Click Yes if you want to continue and disable Fabric Binding Click Yes if you want to continue and disable Fabric Binding Disable Enterprise Fabric Mode through the Enterprise Fabric Mode dialog box before disabling Switch Binding Click Yes to IPL the director or Cancel to cancel the operation In the Configure Preferred Paths dialog box change the number in the Destination Domain ID box to a number between 1 and 31 inclusive Delete the duplicate community name or make the write authorizations consistent Table 31 Element Manager messages continued CEN CI CN Element Manager error The Element Manager Contact the next level of support to lt number gt encountered an internal report the problem error and cannot continue Element Manager A Element Manager Informational message only instance is currently open window is currently open Enterprise Fabric Mode You attempted to disable Click Yes if you want to continue will be disabled if any of these parameters in the and disable Enterprise Fabric the following parameters Configure Switch Mode are disabled Insistent Parameters dialog box Domain ID Rerouting while the switch was Delay Domain RSCNs online but Enterprise Do you want to continue Fabric Mode SANtegrity Binding feature is enabled Error retrieving port An error occurred at the Retry the
216. leases see the following StorageWorks web site http h18006 www 1 hp com storage saninfrastructure html For information about Fibre Channel standards see the Fibre Channel Association web site http www tibrechannel org HA Fabric Manager user guide 17 Document conventions and symbols Table 1 Document conventions Convention Element Medium blue text Figure 1 Cross reference links and e mail addresses Medium blue underlined text http www hp com Web site addresses Bold font Key names e Text typed into a GUI element such as into a box GUI elements that are clicked or selected such as menu and list items buttons and check boxes Italics font Text emphasis Monospace font Monospace italic font e File and directory names System output Code Text typed at the command line Code variables Command line variables Monospace bold font Emphasis of file and directory names system output code and text typed at the command line A WARNING Indicates that failure to follow directions could result in bodily harm or death A CAUTION Indicates that failure to follow directions could result in damage to equipment or data IMPORTANT Provides clarifying information or specific instructions EY NOTE Provides additional information X TIP Provides helpful hints and shortcuts Rack stability A WARNING To reduce the risk of per
217. lection Cannot start firmware install while CTP synchronization is in progress Element Manager messages continued po ee Displays if you try to set all ports to Negotiate through the Configure Ports dialog box and some ports do not support speed configuration Fibre Channel parameters for the director cannot be set at the Element Manager because the Ethernet link is down or busy The switch date and time cannot be set at the Element Manager because the Ethernet link is down or busy The director or switch state cannot be set at the Element Manager because the Ethernet link is down or busy A community name was not defined in the Configure SNMP dialog box for the write authorization selected The data collection procedure cannot be started by the Element Manager because the Ethernet link is down or busy The director s CTP cards are synchronizing and firmware cannot be installed until synchronization is complete Replace ports that do not support speed configuration with those that do support more than one speed configuration Retry the operation later If the condition persists contact the next level of support Retry the operation later If the condition persists contact the next level of support Retry the operation later If the condition persists contact the next level of support Provide a name in the Name box where write authorization is checked Retry the operation
218. les which determine when and why SAN tasks are automatically executed Triggers Triggers define the condition that causes the action to occur or fire There are two types of triggers e Event triggers page 114 e Schedule triggers page 114 Both trigger types are comprised of logically related phrases and each phrase is composed of three parts Property A variable for which you are setting values There are many types of property variables See Reference on page 267 Operator Defines the relationship between properties and their values Table 16 lists the available trigger operators Multiple operators can be defined and phrase operators describe the relationship between them Value A user defined value presented in a list or entered by the user Ef NOTE Once you have selected a trigger type you can select only options within that type to complete the trigger phrase 112 Optional HAFM features Figure 68 shows the dialog box you use to create a trigger phrase Trigger Type Daily AG nt oN Property Operator Value Description Time Limits Start Time 0001 Military Time Example 0305 3 05 AM Schedule a be v Monday Actions Instructions E mail 7 Tuesday 1 Select from the Type list above to create a Export fA wean Schedule Trigger Laur 2 Enter a Start military time 0001 2400 hours JV Thursday 3 Select the Days of the week Log As 4 ClidcAda Message 4 5 Select action
219. line to configure Disabling Insistent Domain ID will disable Fabric Binding Do you want to continue Disabling Insistent Domain ID will disable Fabric Binding Do you want to continue Disabling Switch Binding will disable Enterprise Fabric Mode Do you want to continue Do you want to continue with IPL Domain IDs must be in the range of 1 to 31 Duplicate Community names require identical write authorizations Element Manager messages continued ponn A E Clock alert mode is enabled through the Configure FICON Management Server dialog box and you attempted to enable Periodic Date Time Synchronization through the Configure Date and Time dialog box Fabric Binding is enabled through HAFM and you attempted to disable Insistent Domain ID in the Configure Switch Parameters dialog box Fabric Binding is enabled through the HAFM and user attempted to disable Insistent Domain ID in the Configure Switch Parameters dialog box You attempted to disable Switch Binding through the Switch Binding State Change dialog box but Enterprise Fabric Mode is enabled This message requests confirmation to initial program load IPL the director Domain IDs entered in the Configure Preferred Paths dialog box must fall in a specific range Duplicate community names are entered at the Configure SNMP dialog box and have different write authorizations 242 Informational and error messages Disab
220. ller The product does not install on a Windows system Verify that the system has 100 MB available on the C drive The program requires 100 MB for installation but only 50 MB to run Mapping a loop to a hub causes the loop group and the outermost portion of the topology s background group color or layout format to revert to the default Make the background and or layout changes after mapping the loop to the hub HA Fabric Manager user guide 211 Table 28 Miscellaneous problems and resolutions continued Problem Cause resolution Using Fabric Manager or Device Manager to manage Cisco MDS9xx switches Install JRE 1 4 or greater which includes Java Web Start When the client application is started on an HP UX machine the exception java lang OutOfMemoryE rror unable to create new native thread is displayed in thread main The following two HP UX 11 0 kernel parameters are set too low for most Java applications Edit the parameter limits as described below max_thread_proc Increase the maximum number of threads allowed in each process higher than the expected maximum number of simultaneously active threads for example 1024 The maximum value is the value of nkthread nkthread Set the limit for the total number of kernel threads able to run simultaneously in the system to a value greater than nproc The default is approximately twice that of nproc The maximum is 30000 T
221. local switch 188 SANtegrity Security Center A Configuring HAFM through a firewall Networks can use a virtual private network VPN or firewall to prohibit communication between servers and clients This appendix provides optional procedures for configuring HAFM client and server applications to function across remote networks through a firewall This appendix describes the following topics e Polling mode page 195 e TCP port numbers page 197 Polling mode Generally the server calls the client when it has new data If the client uses firewall technology the server can be unable to reach the client In this case the HAFM application automatically detects the network configuration and runs the client in polling mode When the client is running in polling mode the server queues up the data and the client periodically approximately every 5 or 10 seconds checks in and retrieves the data The original two way communication is transformed into one way client controlled communication allowing passage through firewalls Decreasing login time When a client attempts to log in to a server the server typically calls back to verify communication In a firewall situation this call fails and the server then treats the client as a polling client It can take up to 45 seconds for this call back to fail You can configure a polling parameter in client and server batch files to identify the client as a polling client The causes the server to
222. m O through 59 inclusive Invalid value for threshold Value entered for each Enter a number from 1 to 99 into 1 99 port in the Configure the Threshold column of the Open Trunking dialog Configure Open Trunking dialog box must be in the range box from 1 to 99 This message is displayed if the optional Open Trunking feature is installed Invalid value for year At the Configure Date Verify and enter a four digit value and Time dialog box the for the year YYYY value year must be a four digit value Invalid World Wide The WWN or nickname Try the operation again using a Name or nickname that you have specified is valid WWN or nickname invalid The valid format for the WWN is eight two digit hexadecimal numbers separated by colons xx xxX XX XX XX xx xx xx The valid format for a nickname is non blank characters up to 32 characters Link dropped The HAFM Retry the operation Link reconnects appliance to director are attempted every 30 seconds If Ethernet link was the condition persists contact the dropped next level of support Log is currently in use Access to the log is Retry the operation later If the denied because the log condition persists contact the next was opened by another level of support instance of the Element Manager Loopback plug s must be External loopback Ensure that an optical loopback installed on ports being diagnostics require an plug is installed in port opti
223. mance data 135 F fabric binding 118 adding switches 96 online state functions 118 overview 95 procedure 95 fabric group icon 270 fabric manager messages 216 fabrics changing nicknames for 93 changing properties 93 determining status of 93 persisting 96 unpersisting 96 unpersisting product 97 failed icon 268 feature SANtegrity 118 file macro components 280 files exporting 51 52 importing 51 files exporting 135 filtering events in master log 103 per user 66 finding members in zone 159 products 90 zones in zone set 159 firewall configuration forcing port in RMI registry 198 forcing server and client port number 199 TCP port numbers for RMI 197 flyovers turning on and off 48 G generating reports 107 groups expanding 43 icons 270 H HAFM appliance name 38 HAFM application messages 216 HAFM server description 22 help obtaining 19 20 hide routes overview 92 High Availability Fabric Manager password default 38 user name default 38 uses 21 host bus adapter icon planned 269 host group icon 270 HP authorized reseller 19 storage web site 20 Subscriber s choice web site 19 technical support 19 HP UX OutOfMemoryError 212 hub icon planned 269 icons band information status 269 bridge planned 269 bridge group 270 device 267 fabric group 270 host bus adapter planned 269 host group 270 hub planned 269 isolated group 270 JBOD 269 loop group 270 network attached storage planned 269 persisted
224. ming out of band discovery the application connects to the switches through the IP network and product information is copied from the SNS database on the switch to the appliance Only fabrics that have HP switches as the principal switch are displayed If a HP switch is being directly managed but exists in a fabric where the principal switch is a third party device another appliance is not allowed to connect to and manage that device Ef NOTE Ensure that your SNMP communication parameters are set correctly in order to discover switches Otherwise the discovery can fail Configuring discovery To define the devices you want discovery to find 1 Select Discover gt Setup The Discover Setup dialog box is displayed Figure 32 j and A Addresses Selected Individual Addresses Description IP Address Community String Zoning Description P Address Community String 192 168 1 100 1723111 172311 2 172311 3 172 311 4 172311 5 1723116 172311 7 1723118 1723119 Default Default Default Default Default Default Default Default Default Default Enabled D 4 Enabled D Enabled Di Enabled D Enabled Di Enabled Di Enabled Di Enabled D Enabled Di Enabled D Add Enabled D y Lp 1723144 172311 5 1723116 172311 7 172311 8 1723119 172 31110 172 311 11 17231112 172 31113 Default Default Default Default Default
225. mize your main window Floating the Minimap To float the Minimap and view it in a separate window click Detach in the upper right hand corner of the Minimap Anchoring the Minimap To return the Minimap to its original location on the main window do one of the following Click Attach in the upper righthand corner of the Minimap e Click Close in the upper right hand corner of the Minimap e Click the logo in the upper left hand corner of the Minimap and click Close Alt F4 Resizing the Minimap On an anchored Minimap place the cursor on the left border of the Minimap until a double pointed arrow is displayed Click and drag the adjoining divider On a floating Minimap place the cursor on a border of the Minimap until a double pointed arrow is displayed Click and drag to change the window size Status bar The status bar Figure 4 provides status information about the SAN and the application Place your cursor on a status bar icon for information about the status displayed The icons are Server Status Displays local appliance status Connection Status Displays the appliance client connection status Product Status Displays the most degraded status of all devices in the SAN For example if all devices are operational except one which is degraded the Product Status is displayed as degraded Click this button to open the Product State Log See Determining the operational status on page 80 for more inform
226. ml v Cancel Figure 97 Import Zone Set dialog box 3 Locate the folder that contains the exported zone set 4 Select the XML file and click Import EY NOTE Ifthe zone set name already exists in the zone set library a warning message is displayed Unable to import zoneset The zoneset name already exists Change the zone set name and try again 5 Click OK Zoning administration This section describes zoning administrative tasks Tasks that you can perform on zones and zone sets include e Renaming a zone or zone set page 157 e Replacing zone members page 157 Copying a zone set page 158 e Deleting a zone page 158 e Viewing zone and zone set properties page 159 e Finding members in a zone page 159 156 Zoning Finding zones in a zone set page 159 Displaying zone members page 159 Saving the active zone set to a zoning library page 160 Comparing zone sets page 160 Renaming a zone or zone set To rename a zone or zone set 1 2 3 4 Display the zone library See Displaying the zone library on page 149 The Zoning dialog box is displayed Figure 91 on page 149 Right click the zone or zone set that you want to rename and select Rename Enter the new name See Zoning naming conventions on page 148 Press Enter to save the new name Replacing zone members You can replace zone members in one of two ways Select the replacement zone member from the Potential Zone Member list Sp
227. most frequently switch McDATA4GHSAN j There are no errors to be reported for the past 30 days View Performance Data by of Utilization View CRC Error View Loss of Si Error View Loss of Synchronization Error Figure 65 Reports dialog box 108 Monitoring SAN products 2 Select the report you want to view from the left hand pane If you don t see the report you want to view generate it first by following the instructions in Generating reports on page 107 EY NOTE Hyperlinks in reports are active as long as the source data is available 3 To print the report a Click Show in Browser The selected report is displayed in your default web browser b Select File gt Print in the web browser c Close the web browser and the Reports dialog box Deleting reports To delete reports 1 Select Monitor gt Reports gt View The Reports dialog box is displayed Figure 65 2 Select the report s you want to delete 3 Click Delete Report The report is deleted without confirmation 4 Close the Reports dialog box HA Fabric Manager user guide 109 110 Monitoring SAN products 6 Optional HAFM features This chapter provides detailed information on using administering and configuring optional HAFM features There are two types of features Keyed features that require the purchase of feature keys Features that do not require feature keys but do require separate keyed features This chap
228. ms can be available The rack mount appliance provides a platform for the Enhanced Base package of HAFM This unit provides more memory for future product enhancements Customer supplied server The following data is backed up from the Instal1_Home Call_Home Install_Home Server and Install_Home Client directories 56 Using the HAFM application All log files Zoning library Call home configuration including phone numbers and dialing options Configuration data Plans License information User launch scripts User defined sounds All data exported through the Export option on the SAN menu EY NOTE Firmware files are not backed up Backing up data If you keep a CD RW disk in the CD recorder drive of the appliance critical data from the HAFM application is automatically backed up to the CD RW disk when the data directory contents change or when you restart the HAFM application Restoring data Allow 45 minutes after making a configuration change before restoring data from the backup files This ensures that all your changes are included in the backed up files It is possible that in a disaster recovery situation configuration changes made less than 45 minutes before appliance loss could be missing from the backup To restore data to the appliance platforms perform the following procedure 1 2 3 Reinstall the application if necessary Open the HAFM application on the HAFM appliance Select SAN gt Imp
229. n participating in Port Membership List the Configure Ports dialog box Binding Please review SANtegrity Binding the Port Binding feature but you should Configuration note that one or more of these devices still has security control in Port Binding System diagnostics System diagnostics Replace failed ports cannot run The cannot run on switches Operational Status is with failed ports invalid The add firmware process You aborted the process Verify the firmware addition is to has been aborted to add a firmware version be aborted then click OK to to the HAFM appliance s continue firmware library Switch clock alert mode Clock alert mode is Disable clock alert mode through must be cleared before enabled through the the Configure FICON enabling period Configure FICON Management Server dialog box synchronization Management Server dialog box and user is attempting to enable Periodic Date Time Synchronization through the Configure Date and Time dialog box The data collection An error occurred while Try the data collection procedure process failed performing the data again If the problem persists collection procedure contact the next level of support 252 Informational and error messages Table 31 Element Manager messages continued CEC CN CN The data collection You aborted the data Verify the data collection process has been collection procedure procedure is to be aborted then aborte
230. n a network that has two or more NICs the local host IP returns one of the IPs known to the system To specify which IP is returned edit the Dsmp server edipaddress variable to instruct the Trap Event Distributor to use a specific IP address Windows server running as an executable 1 Open the Instal1_Home bin HAFM_sc bat file using a text editor 284 Editing batch files 2 Edit the following lines rem HAFM Server start JAVA_HOME bin HAFMServer exe server Xmx128m Xminf 15 Xmax Dsmp mpi test Dsmp deployment prefix Server Dsmp zoning Principal Dsmp zoning wait timeout 180000 Dsmp webServer Dsmp backupManager Dsmp locale customization en_US_HAFM Server 35 Xincgc classpath SCLASSPATHS to read rem HAFM Server start JAVA_HOME bin HAFMServer exe server Xmx128m Xminf 15 Xmaxf 35 Xincgc classpath SCLASSPATHS Dsmp mpi test Dsmp deployment prefix Server Dsmp server edipaddress x x x x Dsmp zoning Principal Dsmp zoning wait timeout 180000 Dsmp webServer Dsmp backupManager Dsmp locale customization en_US_HAFM Server where x x x x is the desired IP address Windows server running as a service 1 Stop the service 2 Uninstall the service 3 Edit the following lines in the install_service bat file rem HAFM Server Ss Xminf 15 Xmax Dsmp mpi test Dsmp deployment prefix Server Dsmp zoning Principal Dsmp zoning wait timeout 180000 Dsmp webServer Dsmp ba
231. n address highlight the address in the table and click Remove 6 Click OK Disconnecting a user To disconnect a use 1 Select SAN gt Active Sessions The Active Sessions dialog box is displayed HA Fabric Manager user guide 2 Select the user that you want to disconnect and click Disconnect User A message box is displayed Figure 30 2 Are you sure you want to terminate this connection now Yes No Figure 30 Disconnect User message box 3 Click Yes e The user is disconnected e The appliance immediately shuts down the appliance client connection e The status bar on the client window shows a message stating that the appliance connection was lost e All products and connections on the Physical Map stay in the condition they were in when the session ended they do not turn grey e The client window shows a message stating that a user disconnected the client from the appliance EY NOTE To prevent this user from reconnecting remove the user account See Removing a user account on page 65 Managing user groups User groups are a security feature that define allowable access to information and system features System Administrators determine each user s needs and assign an appropriate user group This section provides an overview of user groups and their access levels and describes how to set up a user group Understanding user groups and access levels Table 13 lists the four preconfigured us
232. n enable beaconing Perform either of the following steps Disable Enterprise Fabric Mode option by selecting the appropriate fabric in the Fabric Tree portion of the HAFM Manager window Fabrics tab and then selecting Enterprise Fabric Mode from the Fabrics menu When the Enterprise Fabric Mode dialog box is displayed click Start and follow prompts to disable the feature Set the switch or director offline through the Set Online State dialog box Display this dialog box by selecting Set Online State from the Element Manager Maintenance menu Informational message If firmware is below the required level and you install SANtegrity Binding before changing to FICON management style then E_Ports will remain as E_Ports when you change to FICON management style If SANtegrity Binding is not installed setting a director to FICON management style will change all E_Ports to G_Ports Delete spaces from the box entry Replace the failed CTP card and retry the firmware installation HA Fabric Manager user guide 235 Table 31 Cannot install firmware to a switch with a failed CTP card Cannot modify director switch speed Ports speeds cannot be configured at a higher data rate than the director switch speed Cannot perform this operation while the switch is offline Cannot retrieve current SNMP configuration Cannot retrieve diagnostics results Cannot retrieve information for port Cannot retrieve po
233. n when you reassign the group the account is not affected until the user logs out and logs in again To assign a user to an existing group 1 ow 5 Select SAN gt Users The Users dialog box is displayed Figure 26 on page 64 Select a user in the Users list Select the groups to which you want to assign the user in the Groups list Click b The user is assigned to the selected groups Click OK Determining user groups An administrator can determine the groups to which a user belongs through the HAFM Users dialog box To determine user groups 1 Select SAN gt Users The HAFM Users dialog box is displayed Figure 26 on page 64 Select a user in the Users list Click Find The groups to which the user belongs are highlighted in the Groups list Click OK HA Fabric Manager user guide 71 Discovering a SAN The application discovers products fabrics and connections in a SAN Through discovery you can manage and monitor your SAN in real time ensuring that any issues are resolved immediately This section provides instructions for configuring the discovery feature Understanding how discovery works Discovery is the process by which the application contacts the devices in the SAN The application illustrates each product and its connections on the Physical Map After you log in and configure and turn on discovery the application discovers products connected to the SAN When perfor
234. naged by this HAFM appliance You attempted to remove a switch from the Fabric Membership List using the Fabric Binding option but the switch is still part of the fabric 230 Informational and error messages ps ee Define a different nickname Upgrade the software version on the downlevel HAFM appliance Complete the zoning library conversion then retry the operation To start a new log for the fabric persist the fabric through the Persist Fabric dialog box Consult with the customer s network administrator to determine a new IP address to be assigned and configured Choose a product managed by this HAFM appliance or go to the HAFM appliance that manages the affected product Remove the switch from the fabric by setting the switch offline or blocking the E_Port where the switch is connected Table 30 HAFM Messages continued This World Wide Name was not accepted The World Wide Name and Domain ID must be unique in the Fabric Membership List Too many members defined You do not have a compatible version of the management server software In order for the HAFM application to function properly a compatible version must be installed on the client machine Click OK to install a compatible version You do not have rights to perform this action You must define an SMTP server address You must define at least one E mail address You must define at least one remote network address
235. nance amp Device Operation amp Discover On Off Discover Refresh Q Discovery Setup y Email Event Notification Setup Y Enterprise Fabric Mode amp Export amp FabricBinding amp Frame Sniffer SY Group Configuration Manager lt Import SY License Update LUN Management EG Map Editing Map HBA to Server amp Map Loop to Hub Performance Q Persist Fabric CA Plannine Readi rite Read Only v ok Cancel Figure 31 Group dialog box HA Fabric Manager user guide 69 9 Enter information for the new user group in the following boxes Name e Description If you want to assign permission to use only certain views proceed to step 9 If you want to assign permission to use certain features proceed to step 5 Select the features for which you want to provide read write access in the features list Click next to the Read Write list The features are moved to the Read Write list Select the features for which you want to provide read only access in the features list Click p next to the Read Only list The features are moved to the Read Only list Click the Views tab 10 Select the views you want the user group to be permitted to access in the Available Views list 11 Click gt to move the selections to the Selected Views list 12 Click OK The new group is displayed in the Groups list of the Users dialog box To add users to this group follow the instructi
236. nc linux is a U S registered trademark of Linus Torvalds Microsoft and Windows are U S registered trademarks of Microsoft Corporation Printed in the US HA Fabric Manager user guide Contents ABOU IS QUIS 0 os aa a A a wae E EA Bs 17 ended GUAIENE s ddr a is 17 Related documental ori e RAR ERE EE Ed E EE S 17 Document conventions and symbols o RARA AA 18 Rack SONNE sya 44 4 u a a RS RON a aa E E See EA D eae 19 HP technical E AAN II 19 HP oulhorized resell r coria a E A E a AE 19 Helpful web sites acing ey A Ree RK Rg hay er 20 Mt AA 21 HAFM componens sss e pia ii it Ge der eh cdta ARA A AE 21 HAFM applanes ss talas dias peroo un laa 22 HAFM application cipa bread e oid Ai ic 22 Dual LANs on the HAFM appliance n n ERA RARA 22 Public and private LAN designations 0 0 0 eee eee 23 Remote access to the public LAN dc Gao wee once dae ade Med SRM OREM 23 Outer bene arts ana 4544 al iaa adora dd 23 O O ena ea he eee ae R ES 24 Searching the online help o oo e A BK Be A EEA HES 25 System fequireme nisin cia AeA REE Ra ESR Bed Oe Be Cdk hes 26 HAFM appliance system requirements 0 00 eee ee eee eee 26 HAFM client system requirements 0 case anda ok eRe pea yee ee a eee Bake 28 2 Using the HAFM application 14 44 0464 494040644404 da 31 Managing the Gppllance 045 404 025 db Rotate wea bd nwa Nee amp ae Ranh ad We 31 Logging in to HAFM Seip ii oS Ee he ASE AA Rh dy hae aap aa ke ape eRe od 31 loagi g out of
237. ne OM AnS 283 Configuring the application to use dual network cards 2 2 cee 283 Windows systems ci e bE Bae oh Go E DoS eee eee hee 283 UNIX SYSTEMS i ili Pa Se ace ata a Wr EA hoe eG ewe Bed RR RRO Aon hcg 283 HA Fabric Manager user guide 11 Setting the zoning delay e a AER AR Ia CER ROSS 284 Windows systems dd Al edo A Bale AENA 284 Specifying a host IP address in multi NIC networks ooooooooooooooooo 284 Windows server running as an executable o oooooooooooo eee 284 Windows server running as a service n eee eee 285 UNIX SYSTEMS 00 ia as A A te eg AD te Acad o tte 286 Editing Master Log settings yo supra EA ASADA 286 Windows systems dr 4045 24 40GR S60 HE oad a bat Ee aa a EOE PEARED 286 UINDGSYStOMS 90 4 5 ga tad ades Bn EH ale dle Sh ag 84 Da GMS Fae Maen eh a BA 287 O A e IO 289 Figures 1 Product management options n a AAA A RR 21 SAN lifecycle cas aa e EN A is 24 3 ARM Log In dialog box air io Rh dee ee he Ree eR Bet RRs eR 31 4 View All HARM window idad Ae Rae Hees 33 5 VNC Authentication window ee REIR A RA 37 6 Welcome to Windows dialog box sia ri as 37 7 Log On to Windows dialog AA II OEM MEER HER ER 38 B HAFM WindeWit Gash im a Roe bone e A aE a bene E E a 39 9 Active Sessions dialog box AO oR eee eR 41 10 A group on the Physical Map ua e A 43 11 Select Group Action dialog box ein dpi RRS RES RR RE a 44 12 Select Switches tabis saec dia a E R a a eh bbe aa a G tower ee lt 45
238. ne sets 153 default TightVNC password 37 Windows 2000 password 38 Windows 2000 user name 38 default community strings 78 degraded icon 268 deleting reports 109 users 65 zone sets 158 zones 158 deleting planned devices 140 deleting views 86 determining users 64 device icons 267 device state event properties 276 dialog boxes Configure Open Trunking 132 switch binding membership list 120 director element manager messages 233 discovery issues 203 outof band 72 overview 72 turning on and off 80 disk exporting to 52 document conventions 18 related documentation 17 duplicating zone sets 158 290 E editing port types 140 editing trap recipients 82 editing views 86 editing zone names 157 Element Manager uses 2 element manager messages 233 e mail notification configuring 104 e mail exporting to 52 enterprise fabric mode configuring 94 overview 94 ethernet events enabling 106 evaluating plans 145 event log copying from 104 overview 34 101 event management event triggers overview 114 relational operators 113 schedule triggers overview 114 triggers overview 112 values 113 event notification configuring 106 call home 105 email 104 overview 104 events copying 104 exporting 103 filtering 66 103 icons 268 monitoring 101 viewing 102 exec macro components 280 expanding groups 43 exporting events 103 files 52 overview 5l exporting a plan 146 exporting a zone set 155 exporting perfor
239. nectivity breaks Adding a detached switch To add a detached switch 1 Click Add The Add Device dialog box is displayed Figure 109 on page 182 HA Fabric Manager user guide 179 To add a device that is not discovered by the HAFM appliance a device that is not physically connected or a device that is discovered but not directly attached to the current switch E Port NPort Node Name CHAP Secret Generate OK Cancel Retype Secret Figure 109 Add Device dialog box 2 Type the node name e If node name is already in the Authenticated Devices list or is invalid the new entry is rejected If the node name is in the Port Authentication list as a connected device the device can be transferred from the Port Authentication list to the Authenticated Devices list Ifthe node name is not in the Authenticated Devices list but is discovered in the fabric and has CHAP Secret a message is displayed e f the node name is not in the Authenticated Devices list but is discovered in the fabric and the CHAP Secret is not known because the device is not manageable or is an HBA a message is displayed 3 Click OK The added devices are displayed in the Authenticated Devices list in the order in which the devices were added 4 To edit the CHAP Secret for the device select the device and click Edit When editing a device s CHAP Secret all other devices that participate in authentication with this devi
240. next server The value can be 1 to 100 the default is 3 attempts The Dead Time setting located below the RADIUS servers and Sequence table apply to all available RADIUS servers If a RADIUS server does not respond to an authentication request it can be marked as dead for a specified time interval This can speed up authentication by HA Fabric Manager user guide 185 eliminating timeouts and retransmissions If no alternate RADIUS servers are available which means that only one server is configured or that all servers are marked as dead the dead time is ignored The dead time can be 0 to 1440 minutes the default is 0 Click Edit to display the Add Edit Radius Server dialog box Use this dialog box to define all the settings that display in the RADUIS Servers and Sequence table Select one or more RADIUS servers and click Clear to clear the settings Adjust the sequence of RADIUS servers by using the Move Up and Move Down buttons Click Reset to reverse the settings to the initial settings that displayed when the tab was first accessed Applying changes and confirmation l 2 4 Click Apply from the Radius Servers tab The Security Change Confirmation and Status dialog box is displayed This dialog box is similar in behavior to the Security Change Confirmation and Status that is displayed from the Users tab The only difference is in the Detailed Changes table This table displays the difference between the current settings of the
241. nformation that you need see Creating a customized view on page 83 EY NOTE Some panels can be hidden by default To view all panels select View gt All Panels or press F12 View All HAFM 8 8 eg Event Management Security SAN Edit View Plan Discover Configure Monitor Help ra uk lA Oj gt E ll Levels Nickname Name 100008008860308C 1000080088609E4D 10000800884 0406F 1000080088407C064 1000080088409816 1000080088404280 10000800884 0626D 1000080088E04 C6B 1000080088E30058 1000080088E3009C 1000080088E30169 ooo o ooo oo Nal Switch Count 1 SA DracoLab 34 gt Master Log Define Level Source onl Type j Description Jime 100008008 100008008 100008008 100008008 Product Event Product Event Product Event Product Event A coolines Fan status polling tempor A cooling fan propeller h A cooling fan propeller h A cooling fan propeller h 2005 1 2 200511 2 2005 1 2 2005 1 2 o S HAFMSERVER 1 Menu bar 2 Toolbar 3 View tab 4 Product List 5 Physical Topology map Clients g 4 Legend O Tg R Minimap a 3 80to100 60 to 80 40 to 60 20 to 40 Oto 20 0 Toolbox Master log Minimap 0 Status bar Figure 4 View All HAFM window HAFM main window panels This section
242. ng zone sets 15 zones 157 reports deleting 109 exporting 52 generating 107 212 overview 106 viewing 108 reports viewing performance 134 routers blocked broadcast request 204 routes hiding 92 showing 91 viewing 93 rules event triggers overview 114 S SAN files exporting 52 SANtegrity feature 118 fabric binding 118 SANtegrity features switch binding 119 saving a plan 146 saving performance data 134 searching for members in zone 159 for products 90 for zones in zone sets 159 selecting view 36 86 server icon planned 269 servers sessions 41 session log copying from 104 overview 101 session definition of 39 sessions specifying 67 viewing 41 setting performance thresholds 135 shortcuts 280 show routes overview 91 showing levels of detail physical map 47 showing levels of detail product list 46 SNMP introduction 24 snmp agent overview 81 SNMP trap event properties 27 specifying remote access 67 status bar 35 status determining for fabric 93 storage icon planned 269 storing performance data 134 Subscriber s choice HP 19 switch binding 119 enable and disable 119 membership list 120 online state functions 122 zoning function 122 switch binding membership list dialog box 120 switch group icon 270 switch icon planned 269 switch monitoring performance 134 symbols in text 18 T tape icon planned 269 technical support HP 19 text symbols 18 TightVNC default password 37 time mac
243. ng errors 212 Troubleshooting Table 29 Zoning problems and resolutions Problem Receiving zoning errors Cause resolution Verify that you did not configure zoning on a non principal switch The application is not performing zoning discovery very often Zoning discovery is performed once at startup and then once every two hours during routine discovery If the Zoning dialog box is open zoning discovery is performed during every polling cycle It continues to discover at the increased speed for 30 minutes before it returns to the default value When activating a large zone set on a two switch fabric on UNIX platforms an error message is displayed stating Failed to perform the requested zoning action Failed to zone due to exception COM hp hafmecc HafmUnava ilableException Although the error message states that the requested zoning action failed the zone set correctly activated Wait for the next zoning polling to occur Zoning activation message is displayed for a long time but zone set is not activated Telnet zoning can take a long time To improve speed open the Discover Setup dialog box and add the HAFM IP address for HP switches to the Selected Individual Addresses list When opening the Zoning dialog box from a particular switch or fabric the message Cannot zone the selected device or fabric is displayed The application can have been unable to log in to the fabric due to an
244. nt Notification Setup dialog box 2 Select the Enable Email Event Notification check box 3 Enter the appropriate information in the following boxes E mail Server IP address or name of the SMTP server e Reply Address Recipient s e mail address Summary Interval Amount of time between each notification A CAUTION Specifying a short interval can cause the recipient s e mail inbox to fill quickly 4 Select one of the following options Select Send to and enter an e mail address for a user to send a test e mail to a specific user Select Send to all users enabled for notification to send a test e mail to all users designated to receive notification 5 Click Send Test Email to test the e mail server A message is displayed indicating if the server was found 6 Click User List to specify which users receive e mail notifications The HAFM Server Users dialog box is displayed 7 Select the check box in the Email column for each user you want to receive notification 8 Click OK Notifications are combined into a single e mail and sent at the specified interval setting An interval setting of O zero causes notifications to be sent immediately Configuring Call Home notification When you configure Call Home notification the appliance automatically dials in to a support center to report system problems See the HA Fabric Manager Appliance installation guide for details HA Fabric Manager user guide 105 Enabling
245. ntel Pentium lll and greater Hardware CD ROM Operating system Red Hat Enterprise Linux ES 3 0 Red Hat 9 0 kernel v 2 4 20 8 Red Hat 8 0 kernel v 2 4 18 14 Memory 512 MB RAM minimum Disk space 350 MB disk space Video requirements 8 MB video RAM Resolution 256 colors Table 9 HP UX system requirements Models 9000 785 B2000 Processor 400 MHz PA RISC Hardware CD ROM Operating system HP UX version 11 0 Memory 512 MB RAM minimum Disk space 350 MB disk space Video requirements HP VISUALIZE FXE color 1280x1024 48 planes Resolution 256 colors Table 10 AIX system requirements Model RS 6000 44P Model 170 Processor 333 MHz Power3 ll Hardware CD ROM Operating system AIX 5 1 Memory 512 MB RAM minimum Disk space 350 MB disk space Video requirements 8 MB video RAM Resolution 256 colors HA Fabric Manager user guide 29 30 HAFM overview 2 Using the HAFM application This chapter provides instructions for using the HAFM application The following topics are described e Managing the appliance page 31 e Viewing the HAFM main window page 33 e Accessing the HAFM application page 36 e Monitoring the HAFM application page 40 e Using the Group Manager page 43 e Configuring nicknames page 48 e Exporting and importing data page 51 e Backing
246. o 138 88 Planned device Properties dialogboX icoo cane eens bees a dia ade 139 89 Port Properties dialog box iii is dla ORG EM e Oo de 140 90 Planning Rules dialog box A AAA AO 145 9 1 Zoning dialog DON a SR ANO RA Hench ae Goh A ERATE E Eaa 149 92 Add Zone Member dialog box one te Oak v Vo Lae eens 151 93 Activate Zone Set dialog box 5 4 ii de RA AAA A MOR ii 153 94 Activate Zone Set confirmation message 0 ooooooooooooo eee 153 95 Deactivate Zone Set dialog box dias A Sor RE EON a A 154 96 Export Zone Set dialog is e e ace Saale Peake RA eae a 155 97 Import Zone Set dialog bee id bd Oe Re Oa Oe Rk Fw Eee fe 156 98 Replace Zone Member dialog Doxa vas deta Ras hea ds 158 99 List Zone Members dialog Doxa ita wrt cnn Wns oh Medal etd Mice Ge Ee Pee he 160 100 Security Center oats tS Gastar oa 165 101 Security Center Users tab ii A ORG A AER ed SAR eee es 170 LOZ Add Edit User dialog Box cu Shake ais eats ni Laird a de Dol dea 171 103 Apply to Other Products dialog baca vidad pi ita dy Sea eS Ra 172 104 Security Change Confirmation and Status dialog box n nasasa ee eee eee 173 TOS Security Center Software Tabo i e eat de o a ea 175 106 Add or Edit Software ID and CHAP Secret dialog box ooooooooooooomooo 177 107 Security Center Devices Tobi We ha Boh ahd ame A ia 179 108 Add Device Edit Secret dialog boa a Haw VAS 180 109 Add Device dialog box n ii kOe te te Tiere AE a ia 182 110 Security Center IP Access Cont
247. o collapse all groups on the topology by one level click the Collapse icon on the HAFM toolbox Expanding groups To expand a group on the Physical Map Double click the group icon e Right click the group icon and select Expand To expand all groups on the topology by one level click the Expand icon on the HAFM toolbox Using the Group Manager The Group Manager allows you to make changes related to the configuration and monitoring of switches and directors This function also allows you to make changes to multiple devices at the same time You can Install firmware on switches and directors e Initiate data collections on multiple switches Create group event logs HA Fabric Manager user guide 43 When you launch Group Manager for the first time the Select Action tab is selected with the following options available Run data collection e Install E OS firmware e Create Group Event Log Select Action tab with Run data collection selected To access Group Manager 1 Select Configure gt Group Manager The Group Manager dialog box is displayed Figure 1 2 Select Run data collection and the following tabs are displayed on the left side e Select Action e Select Switches e Output Options e Execution Options Data Collection Select Switches Select Group Action OM 8 Run data collection Displays information that lets you confirm group membership and run data collection
248. o persisted fabrics the fabric whose principal switch is also the principal switch in the merged fabric becomes the real fabric It includes the switches of both fabrics in the Physical Map and the Product List The other fabric becomes a ghost fabric On the Physical Map the ghost fabric shows its original products with minus symbols Figure 55 On the Product List the ghost fabric is shown as offline without products The fabric log resets after the fabrics merge When you split merged fabrics the fabric that includes the principal switch becomes the persisted fabric When you move a product in a persisted fabric s topology the new location is stored on the client If the updated fabric is not persisted users logged in from a different client can show an invalid layout Configuring trap forwarding 98 Trap forwarding enables you to configure the application to send SNMP traps to other computers To configure trap reporting you must configure the target computer s IP address and SNMP ports 1 Select Monitor gt Trap Forwarding Contiguring SAN products and fabrics The Configure Trap Forwarding dialog box is displayed Figure 57 Enable Trap Forwarding Available Recipients Selected Recipients Description P Address Port Description P Address Pot OK Cancel Help Figure 57 Configure Trap Forwarding dialog box 2 If necessary add trap recipients to the Available Recipients list See Adding trap recipien
249. ocal Only which causes the switch to only check its local database to verify if the switch on the other end is allowed to communicate when authentication occurs 5 If the initial state of a fabric is not configured to enable device authentication the Enable N_port authentication check box is disabled To enable click the Enable N port Authentication check box 6 Click the list to the right of the check box and select Local Only Radius then Local or Radius Only The default is Local Only which causes the switch to check its local database only to verify that the switch on the other end is allowed to communicate when authentication occurs 7 Check the Port Authentication List Each table column can be sorted and the column position can adjusted All the ports are sorted by port number and display in that order 8 Select a port on the switch to override the authentication settings for that port Port settings include the following e If a port is configured to be Force Enabled the port participates in authenticating the other end of the link regardless of the authentication state set at the switch level e Ifa port is configured to be Force Disabled that port does not participate in authentication at any time 178 SANtegrity Security Center e Ifa port is specified as Switch default this port abides by all authentication settings configured for this switch All ports are set to this state at product initialization time The HAFM
250. oceed to step 10 Enter the custom string in the Custom box Enter the string again in the Confirm Custom box 10 Click OK 11 Click OK to close the Discover Setup dialog box Reverting to a default community string To set the community string with default values 1 Select Discover gt Setup The Discover Setup dialog box is displayed Figure 32 on page 72 2 Select an IP address from the Available Addresses list 3 Click Add The Available Addresses dialog box is displayed Figure 35 on page 76 4 Click the SNMP tab The SNMP tab is displayed Figure 36 on page 78 5 Select Default public and Default private 6 Click OK Configuring the product type and access 78 To specify the product type and set a user name and password for the address Managing the HAFM application EY NOTE The Product Type and Access tab may not be available in all situations 1 Select Discover gt Setup The Discover Setup dialog box is displayed Figure 32 on page 72 2 Click Add The Address Properties dialog box is displayed Figure 35 on page 76 3 Click the Product Type and Access tab The Product Type and Access tab is displayed Figure 37 IP Address SNMP Product Type and Access Product Type Switch T User ID Password Retype Password OK Cancel Help Figure 37 Address Properties dialog box Product Type and Access tab 4 Select the type of device from the Product Type list e
251. of_ESS_machine When the StorWatch application starts open a command prompt and type esscli u userid p passwd s ipaddress list server using the user ID and password you entered in the Discover Setup dialog box for the ESS and the IP address of the ESS Verify that the command returns meaningful data Symmetrix systems Verify that the SYMAPI server is running and can be contacted from the system running the HAFM server Verify that the SYMAPI is licensed for LUN Management Communication with the storage management application failed Verify the following conditions have been met Verify that the device is online Verify that the management server is running For ESS the web server should be running on the ESS and be accessible from the machine running the server To test this from the machine running the server open an web browser In the address bar type http ipaddress_of ESS machine When the StorWatch application starts open a command prompt and type esscli u userid p passwd s ipaddress list server using the user ID and password you entered in the Discover Setup dialog box for the ESS and the IP address of the ESS Verify that the command returns meaningful data 206 Troubleshooting Table 27 Address problems and resolutions continued Problem LUN Management actions failed Resolution Verify the following conditions have been met e Verify that the device is online gt V
252. ollowing Eclipse SAN Router management applications SANvergence Manager Launch this application by right clicking a SAN Router icon on the Physical Map and selecting SANvergence Manager SAN Router Element Manager Launch this application by right clicking a SAN Router icon on the Physical Map and selecting Element Manager To launch a SAN Router Element Manager when SANvergence Manager is operating Select the SAN Router in an expanded mSAN list in the left pane of the SANvergence Manager window and then click the Element Manager icon at the top of the window Select the SAN Router in the SAN Routers table in the right pane of the SANvergence Manager window when an mSAN cloud is selected and then click the Element Manager icon at the top of the window Using the HAFM application EY NOTE You cannot launch SANvergence Manager or Element Manager by selecting the router proxy port icons domain IDs 30 and 31 You must select the icon for the actual SAN Router Configuring access To configure HAFM to launch Eclipse SAN Router management applications 1 Select SAN gt Options The Options dialog box is displayed Figure 24 on page 59 2 Select Tools Configuration in the Category list The Options dialog box is displayed with the Tools Configuration options Figure 25 Category vols Configuration Backup Configure the paths for the tools below HTML Browser Program Filesinternet Exploreriexplore exe Browse
253. on a remote workstation 1 2 3 Obtain the HAFM appliance address from your network administrator Open a web browser Enter the HAFM appliance address in the Location or Address box on the browser and then press Enter HA Fabric Manager user guide 257 The HP StorageWorks HAFM remote client installation window is displayed Figure 114 shows the upper portion of this page HP StorageWorks HA Fabric Management Microsoft Intemet Explorer HP StorageWorks HA Fabric Management e Install HAFM remote client application Download SNMP MIB files Install HAFM Remote Client Please follow the instructions for your particular platform to install the application The HAFM remote client application will run on Microsoft Windows 2000 Service Pack 4 or later or on Microsoft Windows XP Service Pack 1 or later If the patches have been applied click the following button to begin the installation process You will receive a Java Security warning requesting permission to download and start the installer program and to read and write files on your system You must grant these permissions to allow installation of the HAFM Download View Instructions Sun Solaris requires specific patches to support Java version 1 4 used by the linstaller program and the HAFM application Please read the Solaris patch requirements prior to installing the HAFM application If the patches have been applied
254. on changed was attempted for a configuration requiring offline changes This feature has not been installed 254 Informational and error messages Wait until the process is completes then perform the operation again Install an SFP optical transceiver in the port Retry the operation If the condition persists contact the next level of support Delete configurations no longer needed to allow new configuration to be saved Retry the operation If the condition persists contact the next level of support Retry the operation later If the condition persists contact the next level of support Choose Set Online State from the Maintenance menu and click Set Offline Then change the management style Set the director or switch back online when finished Take the appropriate actions to set the director or switch offline before attempting the configuration change Contact your sales representative Table 31 This feature key does not include all of the features currently installed and cannot be activated while the switch is online This feature key does not include all of the features currently installed Do you want to continue with feature key activation Threshold alerts are not supported on firmware earlier than 01 03 00 Unable to change incompatible firmware release Unable to save data collection file to destination You do not have rights to perform this action Element Manag
255. on the same computer you may need to reconfigure the application to listen for traps on a different port For instance if the primary network management software is configured to listen for traps on port 162 and forward them on port 3000 reconfigure the application to listen for traps on port 3000 Icon legend Various icons are used to illustrate devices and connections in a SAN The following tables list icons that display on the Physical Map Product icons The following table lists the SAN product icons that display on the topology Some of the icons shown in Table 32 only display when certain features are licensed In the case of HP devices if another appliance is managing a HP device the Generic HP icon is displayed Table 32 Product Icons kon Deseipon ion Despo 7 Host Bus Adapter Network Attached S HBA P Storage NAS Switch Storage Bridge Hub Sia uz HA Fabric Manager user guide 267 Table 32 Product Icons continued kon Deseipon ion Deseripfon 7 Unknown Tape a a go FCIP Bridge Or Loop reik Gateway pes iSCSI iSCSI Bridge Or Appliance y Gateway y HP StorageWorks m HP StorageWorks D Edge Switch 2 16 a Edge Switch 2 32 en HP StorageWorks Generic HP egg Edge Switch 2 24 Bgl StorageWorks switch 7 or director HP StorageWorks HP StorageWorks SY Director 2 64 bg Director 2 140 Product status icons Table 33 Product status icons Icon Status No icon Ope
256. one Verify the information in this dialog box Click OK The active zone set and its zones are deactivated EY NOTE can still be able to communicate If the default zone is enabled and the active zone set is deactivated members of the zone Enabling and disabling the default zone By enabling the default zone the potential zone members that are not in zones can see all other potential members that are not in zones To enable the default zone 1 io Display the zone library See Displaying the zone library on page 149 The Zoning dialog box is displayed Figure 91 on page 149 Select the fabric for which you want to enable the default zone Enable the default zone by selecting Default Zone Click OK 154 Zoning Ef NOTE Default zones are only supported in Homogeneous Fabric interop mode Default zones are not supported in Open Fabric interop mode If default zoning is not available the Default Zone button is disabled To disable the default zone 1 Display the zone library See Displaying the zone library on page 149 The Zoning dialog box is displayed Figure 91 on page 149 2 Select the fabric for which you want to disable the default zone 3 Disable the default zone by selecting Default Zone 4 Click OK Exporting a zone set You can export a zone set as an XML file and import it to a different zone set library on the HAFM appliance or to a zone set library on another a
257. onnection to a switch port from a WWN currently in the Switch Membership List click the WWN or nickname in the Switch Membership List then click Remove The WWN or nickname moves to the Attached Nodes List WWNs can only be removed from the fabric if any of the following is true e The switch is offline e Switch Binding is disabled e The switch or device with the WWN is not connected to the switch e Switch Binding is not enabled for the same port type as enabled for the Connection Policy in the Switch Binding State Change dialog box For example a WWN for a switch attached to an E_Port can be removed if the Switch Binding Connection Policy was enabled to Restrict F_Ports e The switch or device with the WWN is connected to a port that is blocked The switch or device with the WWN is not currently connected to the switch detached node WWNs can be added to the Switch Membership List and thereby allowed connection when Switch Binding is either enabled or disabled To allow connection to a switch port from a WWN in the Attached Nodes List select the WWN or nickname in the Attached Nodes List then click Add The WWN or nickname moves to the Switch Membership List HA Fabric Manager user guide 121 8 9 To add a WWN for a device or switch not currently connected to the switch click Add Detached Node The Add Detached Node dialog box is displayed Enter the appropriate WWN or nickname if configured through HAFM and
258. ons in Assigning users to groups on page 71 13 Click OK Changing a user group An administrator can change a user group s access fo certain features and views This provides added security for your SAN as well as your management application To change a user group 1 6 Select SAN gt Users The Users dialog box is displayed Figure 26 on page 64 Select the user group to be changed Click Edit below the Groups list The Group dialog box is displayed Figure 31 Select the features that you want to change and click the appropriate arrow to move them to another list Click OK The Users dialog box is displayed Click OK to accept the changes Removing user groups A CAUTION This procedure removes the user group without prompting you for a confirmation 70 Managing the HAFM application An administrator can remove a user group regardless of whether any users are assigned to the group To remove a user group 1 2 3 4 Select SAN gt Users The Users dialog box is displayed Figure 26 on page 64 Select the group you want to remove from the Groups list Click Remove located below the Groups list Click OK Assigning users to groups An administrator assigns users to groups to provide access to features and topology views If an administrator assigns one user to multiple groups the user has access rights specified in all the groups Ef NOTE If a user is logged i
259. oop ports repeatedly received LR OLS or NOS To add a Link Threshold 1 Select Configure gt Port Fencing The Port Fencing dialog box is displayed Figure 73 on page 124 2 Select Link from the Violation Type list 3 Click Add The Add Link Threshold dialog box is displayed Figure 75 2 Add Link Threshold xj Block a port when link level hot O errors meet the threshold Name Threshold go errors per 15 Y Seconds 1 to 65 535 OK Cancel Help Figure 75 Add Link Threshold dialog box Enter a name for the threshold in the Name box Select the number of port events allowed for the threshold from the Threshold errors list Select the time period for the threshold from the Threshold Seconds list Click OK to add the Link threshold to the table and close the Add Link Threshold dialog box To assign this threshold to fabrics switches or switch ports see Assigning thresholds on page 126 9 Click OK Adding security thresholds ON AMS Use the security threshold to block a port when one of the following security violations occurs Authentication The switch is unavailable due to Authentication events Fabric Binding The switch is unavailable due to Fabric Binding events Switch Binding The switch is unavailable due to Switch Binding events e Port Binding The switch is unavailable due to Port Binding events ISL Security Generic Security Error The switch on the other side of the ISL dete
260. operties asada a 274 User action event properties 0 ee eee ee eee 275 User action system properties 2 2 0 et ee ee eee 275 User action propeny eseu ie eis k any gani a th kn ban a waged Banda das 276 HA Fabric Manager user guide 15 Device state event properties oooooooooooooor eee ee eee 276 Device Ste Properties ii Such A A ate ees E E 276 Device state system properties 0 1 cee eee ee 277 Event context properties 2 0 eee ee eens 278 Device context properties 2 2 0 tee eee eee 279 Time context properties ua ts eh ee eth eee ee ak 279 Useracontext properties ata A Sate eae 280 System context properties 2 o 280 Keyboard Ba 110 0 API Mad oleate E ede Ras 281 HA Fabric Manager user guide 17 About this guide This guide provides information about e Using the High Availability Fabric Manager HAFM to monitor configure and manage the Fibre Channel in which managed products operate Managing fabric zoning and HAFM logs Intended audience This guide is intended for use by data center administrators LAN administrators operations personnel and customer support personnel who Administer user access to the HAFM application Monitor and manage product operation Related documentation For a list of corresponding documentation see the related documents section of the release notes that came with the product For the latest information documentation and firmware re
261. or 2 The sum of connections to device x should be Operator than 2total_connections device x Operator MAXPORTS The sum of connections to device x should be Operator than MAXPORTS total_connections device x to device y Operator 2 The sum of connections from device x to device y should be Operator than 2 Applying rules for plan evaluation To apply rules for evaluating the plan 1 Select View gt Planned SAN The Planning window is displayed Figure 84 144 Optional HAFM features 2 Select Plan gt Set Rules from the Planning window menu bar The Planning Rules dialog box is displayed Figure 90 ail Type Headline v SAN_1 Property Validation Valid IP must be specified lv SAN_2 Property Validation IP address must be unique Y SAN_3 Property Validation Serial number must be unique lv SAN_4 Property Validation Port number must be unique Y SAN_5 Property Validation Valid Port Name QAAN lv SAN_6 Connection Validation Interswitch links must be E ports Y SAN_7 Connection Validation Invalid storage connections y SAN_8 Connection Validation HBA improperly connected v SAN_9 Connection Validation JBOD invalid connection y SAN_10 Connection Validation Loop device invalid connection v SAN_11 Capacity Control Maximum allowed device connections cama ERA laaleiad Ds E Ti UnselectAll SelectAll Headline valid
262. or the Security Administrator Although the Element Manager has the ability to configure the SANtegrity parameters for a single switch only the Security Center provides installation wide Fibre Channel security configuration and monitoring Accessing the Security Center The SANtegrity Security Center feature requires a license key and is not available unless the Security license key is installed on the HAFM appliance The SANtegrity Security Center is accessed from the Security tab on the main window and displays fabric information authentication information Master Log and Security Log HA Fabric Manager user guide 163 Access the SANtegrity Security Center by clicking the Security tab or pressing F8 on the main window In order to use the Security Center the user must have Security Administrator privilege If not the Security tab is hidden Additional information about the components of the Security window follows The upper left part of the Security window shows the Fabrics list All discovered fabrics are listed by their WWNs with their operational status icons on the left side The upper right part of the Security window displays the main working area where the Security Administrator configures the authentication security settings The main working area is divided into two parts e The upper part is the Authentication Product Configuration table which contains a summary of security related values for each switch in a fabric
263. ormance Module is an optional feature Contact your sales representative to purchase this module e Physical Map Displays a graphic of the SANs topology Port Usage Lists the number of connected ports in the SAN as well as detailed usage information for each port Since only E_Ports are displayed in the topology they are the only ports displayed in this report e Fabric Ports Lists fabric details including port and director utilization and product data Storage Device Summary Lists the assigned and free LUNs for the storage being managed through the application LUN Masking Summary Lists the number of host ports and storage devices in the SAN as well as the nicknames of hosts that do not have assigned LUNs 106 Monitoring SAN products Departmental Storage Allocation Lists the storage allocation for the entire SAN as well as the number of servers on the SAN for each department number of unique LUNs assigned to those servers total size of those unique LUNs and total percentage for each department You must have the LUN Management module to generate this report This is an optional feature Contact your sales representative to purchase the module Generating reports You can generate various SAN report Generated reports are saved to Install_Home Server Reports 1 Select Monitor gt Reports gt Generate The Select Template dialog box is displayed Figure 64 Select Output Template v Performance Data
264. ort The Import dialog box is displayed Figure 23 on page 56 Select SAN File zip from the Import From list Click Browse The Browse dialog box is displayed Select the following file CD Drive Backup Server Data Backup BkpPersisted zip Click Open Click OK A message box is displayed indicating that imported data replaces corresponding data on the appliance If you are sure you want to replace the data on the appliance click OK The client is logged out and the Login dialog box is displayed HA Fabric Manager user guide 57 10 Log back into the application 11 Stop the HAFM Services by selecting Start gt Programs gt HP StorageWorks ha fabric manager 8 8 gt Stop Services A DOS window displays messages of services being shut down 12 To restore data to the HAFM appliance complete the following a Copy the three folders Call Home client and server from the CD ROM drive X YBackupY directory and paste them in C Program Files Install_Home A message is displayed asking if you want to overwrite the existing files b Click Yes 13 Start HAFM Services by selecting Start gt Programs gt HP StorageWorks ha fabric manager 8 8 gt Start Services 14 Ensure discovery is turned on by selecting Discover gt On Customer supplied server backup There are three options for backing up with HAFM Backing up to a read writable CD Backing up to a hard drive Backing up to a net
265. ot selected The HAFM appliance cannot be added without the CHAP Secret defined 3 Define the CHAP Secret and then click OK on the Server Properties dialog box to return to the Software tab 4 Click Apply or Apply To to populate the CHAP Secret and server ID to the selected switch or switches When the current server ID is stored in the switch the Include Current Server check box is disabled but still selected The check box can be enabled only if the current HAFM appliance is removed from the Permitted Software List 174 SANtegrity Security Center Removing the current HAFM appliance To remove the current HAFM appliance do one of the following Ifthe server ID is defined only on the HAFM appliance and has not been added to the switch the current appliance can be removed by not selecting the Include current server check box If the current appliance is selected Remove is disabled If the server ID and CHAP Secret have been added to the switch highlight the current appliance and click Remove If the current appliance is removed from the Permitted Software List the Include current server check box is enabled Editing the CHAP Secret for the current HAFM appliance To edit the CHAP Secret for the current HAFM appliance 1 Select the appliance and click Edit A message is displayed indicating that you must use the Server Properties dialog box to edit the current appliance s properties 2 Click OK to display the Server Prope
266. other active session Verify that there is not another active session The application cannot support zoning on any of the discovered products HA Fabric Manager user guide 213 214 Troubleshooting Informational and error messages This appendix lists informational and error messages that are displayed by the HAFM application and the associated Element Managers The first section of the appendix lists HAFM application messages The second section lists Element Manager messages The text of each message is followed by a description and recommended course of action HA Fabric Manager user guide 215 HAFM application messages This section lists HAFM application informational and error messages in alphabetical order Table 30 HAFM Messages E CE CS A zone must have at least one zone member A zone set must have at least one zone All alias zone and zone set names must be unique All zone members are logged An HAFM application session is already active from this workstation Are you sure you want to delete this network address Are you sure you want to delete this nickname Are you sure you want to delete this product Are you sure you want to delete this user Are you sure you want to delete this zone When creating a new zone one or more zone members must be added When creating a new zone set one or more zones must be added When creating a new alias zone or zone set
267. ox Clicking OK on the Apply to Other Products dialog box or click Apply on the Users tab displays the Security Change Confirmation and Status dialog box Figure 104 This is a status monitoring dialog box that lets you know if the changes were successful Security Change Confirmation and Status ie x Please Note The following security changes are ready to be populated to the switch es below Please review the changes carefully before you accept them Click Start button to proceed and click Close button to cancel the changes User Name Gary Ussia Click on a product and view detailed changes Time 8 2005 10 07 04 AM GMT 05 00 1000080088A07C6A Server HAFMSERYERS6 16 129 94 63 Detailed Changes Description User Name Parameter Old Value New Value No changes Status Start Close Figure 104 Security Change Confirmation and Status dialog box The Security Change Confirmation and Status dialog box lists the ID of the user ID who initiated the changes the time that the changes were scheduled the ID of the server from which the changes are populated and the affected switches and directors The server ID is the server name plus the IP address The Detailed Changes table lists all configurations that the Security Administrator made on the Users tab The columns of this table vary depending on which tab the Security Administrator is accessing the confirmation information If there is only one
268. performed on a port that does not have a small form factor SFF optical transceiver installed Retry the operation later If the condition persists contact the next level of support Retry the operation later If the condition persists contact the next level of support Retry the operation later If the condition persists contact the next level of support Reset the port and perform diagnostics again Run diagnostics on an E port only when it is not active Run diagnostics only on a port that is installed Install a transceiver in the port and perform diagnostics again HA Fabric Manager user guide 237 Table 31 Cannot run diagnostics while a device is logged in to the port Cannot run diagnostics while a device is logged in to the port Cannot save IPL configuration while active saved is enabled Cannot save port configuration Cannot save SNMP configuration Cannot set all ports to 1 Gb sec due to speed restriction on some ports Cannot set all ports to 2 Gb sec due to speed restriction on some ports Element Manager messages continued pes JA Port diagnostics internal loopback test cannot be performed on a port while an attached Fibre Channel device is logged in A device is logged in to the port where a diagnostic test is attempted You cannot save the IPL file while the active saved property is set The port configuration cannot be saved at the
269. pliance in the Location or Address box of the browser and press Enter The HP Storage Works HAFM page is displayed 5 Read the instructions for your operating system 6 Ifa reference to fixes is made click the hyperlink and verify that your system is up to date 7 On the HAFM page click Begin HP UX Installation Begin AIX Installation Begin Linux Installation to begin the installation process 8 If you have read the security agreement information and wish to continue click Yes The HP High Availability Fabric Manager Available Installers page is displayed Figure 115 9 Click Download The File Download dialog box is displayed Figure 116 10 Click Open The system begins downloading the HAFM installer When the download is complete the Introduction window is displayed 11 A Save As dialog box is displayed with the default file name hpClientInstall bin Change the file name to home hpClientInstall bin 12 Click OK The software download begins 13 Close the browser window 14 In the Terminal window a Enter cd home b Press Enter c Enter sh hpClientInstall bin d Press Enter 15 When the download is complete the Introduction window is displayed Be aware that there can be a considerable delay 16 Click Next The License Agreement window is displayed EY NOTE Atany time you can return to the previous page by clicking Previous or quit the Installation by clicking Exit 17 If you have read
270. plication Administrators on SNMP management workstations can access product management information using any standard network management tool Administrators can assign IP addresses and corresponding community names for up to 12 SNMP workstations functioning as SNMP trap message recipients The Internet using the HAFM Basic interface installed on the director or switch This interface supports configuration statistics monitoring and basic operation of the product but does not offer all the capabilities of the corresponding Element Manager in HAFM Administrators launch the web server interface from a remote PC by entering the product s IP address as the Internet URL and then entering a user name and password at a login window The PC browser then becomes a management console A PC based Telnet session using the command line interface CLI Any platform that supports Telnet client software can be used SAN life cycle The HAFM application enables you to proceed through the four stages of the managed life cycle of the SAN with confidence Table 2 describes the different stages in the life cycle At any point a discovered SAN can be used as a starting point to plan a new SAN completing the life cycle aa y ine cy e Figure 2 SAN life cycle 24 HAFM overview Table 2 Stages of a SAN life cycle Sige Terk CO Plan the SAN The administrator uses paper and pen or a software application to plan the SAN 2 Discover
271. popd endlocal TCP port numbers This section provides information about configuring TCP port numbers for remote management interface RMI servers and registries to allow HAFM client and server application to function across firewalls HAFM function with RMI at TCP port level The HAFM appliance communicates with clients through the RMI server Figure 113 This is a full duplex function However the HAFM client must know the TCP IP port number of the RMI server on the HAFM appliance before they can communicate The RMI registry communicates this TCP port number to the HAFM client The HAFM appliance obtains the TCP port number of the RMI Server on the client during initial communications HAFM appliance HAFM client RMI server RMI registry RMI server RMI registry RMI servers TCP IP port RMI servers TCP IP port Full duplex communication Figure 113 HAFM appliance and client communications The TCP port numbers of the RMI server are randomly and automatically selected on both the HAFM appliance and client as a full duplex function Firewalls are configured to block all unknown incoming connections with no mapping of outgoing connections based on a socket part of TCP and IP To work around this problem administrators can configure the port numbers into appropriate batch files and then configure the firewall to unblock the configured port numbers The proce
272. ppliance EY NOTE You can export only one zone set at a time To export a zone set 1 Display the zone library See Displaying the zone library on page 149 The Zoning dialog box is displayed Figure 91 on page 149 2 Select the zone set that you want to export in the Zone Sets list 3 Click Export The Export Zone Set dialog box is displayed Figure 96 Look in CI nes1104 v a Sl al alo E java E EJ javaws E E jpi_cache A Application Data E Cookies E Desktop CI Favorites A Local Settings CA me Mocumants v File name Export Zone Set Files of type Zone Set File xml v Cancel Figure 96 Export Zone Set dialog box 4 Select the folder in which you want to save the XML file 5 Enter a name for the file in the File name box HA Fabric Manager user guide 155 6 Click Export Zone Set The file is saved to the specified folder 7 Click OK Importing a zone set To import a zone set XML file to a zone set library 1 Display the zone library See Displaying the zone library on page 149 The Zoning dialog box is displayed Figure 91 on page 149 2 Click Import The Import Zone Set dialog box is displayed Figure 97 Look in CI nes1104 i cal f mal Eje E java a E jpi_cache E E Application Data CI Cookies CI Desktop CI Favorites E Local Settings CI My Documents CA notitand 1 File name _ Import Files of type Zone Set File x
273. pport Code Execution Error Missing Property File Retry the command or action If the problem persists contact HP customer support Code Execution Error Invalid Product Type Retry the command or action If the problem persists contact HP customer support The server doesn t start Examine the server log Instal1_Home Server Universe_Home TestUniverse _Working Even tStorageProvider event log for diagnostic information Server to client communication is inhibited The network can be utilizing virtual private network VPN or firewall technology See Appendix A for more information Data and settings are not imported during installation Windows service does not display correctly in the Computer Management Windows 2000 or Service Control Manager Windows NT window Open an MS DOS window and enter the following script at the command line Install_ Service lt startstatus gt lt runnow gt The startstatus parameter is manual or auto and runnow parameter is true or false You installed or uninstalled the Win32 service while the Computer Management or Service Control Manager window was open Close the window and reopen it to see the changes An error is displayed stating that the application failed to setup the serverinit txt or license file Delete the Install_Home Server serverinit txt file or the Instal1_Home Server Config Other License file and rerun the insta
274. product to which changes must be applied only that product is listed The product ID is its node name By default this product is highlighted If you applied the same user settings to multiple products the Product List displays the product names that were selected in the Apply To dialog box By default the product that was selected from the top table for configuration is highlighted The content of the Detailed Changes table changes as you scroll through products in the Product List HA Fabric Manager user guide 171 The differences between the to be populated settings and current settings on each individual product are displayed because the Apply To dialog box takes changes made on user settings for one product and generalizes them to multiple products whose user settings can be totally different The new settings replace the existing settings on other products To thoroughly check the new changes click different products on the Product List and view detailed changes EY NOTE Populating user related settings to multiple products causes the new settings to override the existing settings Clicking Start causes the HAFM appliance to populate changes to the switch specified in the products list The Close button is disabled during this process to prevent you from disrupting the process Close is enabled after the process is complete or the process is aborted because of a product failure The bottom Status window displays the status o
275. products HA Fabric Manager user guide 101 The application also has an event notification feature Configure event notification to specify when the application notifies users of an event See Using event notifications on page 104 for details Viewing the Master Log The main HAFM window displays the Master Log Figure 59 It provides detailed information about all SAN events If the Master Log is not displayed in the main window select View gt All Panels 2 Test HAFM 8 8 lol x SAN Edit View Plan Discover Configure Monitor Help 18 n A es gy gt eK A a E Name v pooo O 2 gt search Y ay 4 Master Log Define gt a A X HAFMSERVER 118 Clients 3 gary Level Source Type _ Description Time JP Node Name _ Port Name A 100008008 Product Event Fan status polling tempor 2005 12 03 20 31 38 16 129 91 117 1000080088409816 9 100008008 Product Event A cooling fan propeller in 2005 12 03 20 30 50 16 129 91 117 1000080088409816 100008008 Product Event A cooling fan propeller in 2005 12 03 20 30 38 16 129 91 117 1000080088409816 9 100008008 Product Event A cooling fan propeller in 2005 12 03 20 30 14 16 129 91 117 1000080088409816 100008008 Product Event A cooling fan propeller in 200511 2 03 20 29 26 16 129 91 117 1000080088409816 9 100008008 Product Event A cooling fan propeller in 20051 2 03 20 24 26 16 129 91 117 1000080088409816 G 100008008
276. r of data entry characters allowed in the box was exceeded File transfer aborted You aborted the file Information message only transfer process Field has exceeded maximum number of characters File transfer is in progress A firmware file is being transferred from the HAFM appliance hard drive or a data collection file is being transferred to a CD The director or switch did not respond in the time allowed The status of the firmware install operation is unknown Firmware download timed out A firmware download operation aborted because a file O error occurred Firmware file I O error The firmware version is not installed or was deleted from the firmware library at the HAFM appliance Firmware file not found 244 Informational and error messages Install firmware version 5 00 00 or higher on the hardware product Enter appropriate information in the Data box Enter the information using the prescribed number of characters Informational message only no action is required Retry the operation If the problem persists contact the next level of support Retry the operation If the problem persists contact the next level of support Add the firmware version to the library and retry the operation Table 31 Element Manager messages continued CEC CI CN Incompatible If the Firmware is below Disable FICON Management configuration between the required level only Server
277. r phrarer 6 Opiioral Cid AND in the Tegger area to hosse a diferent logos selationmip Deteeen phrases 6 Optional Select a ptrare in the Trigger ares asd click the open or clone parenthesis button 7 Mpiiosal Repeat reps thnugh 6 at needed 8 Oplioral Select Time Lits from the lst of thre left te limit the event Bigger to certain Sires of days Q Select actors tom the Actions litt an the lett Note Te create a tne of date bared bigger select Schedule tor the Trigger lit en the left i ox Cancel hep Figure 70 Add Rule dialog box 3 Enter information in the following boxes Name e Group e Description 4 Select the Active check box to make the rule active after you are finished creating it 5 Select the type of trigger from the Trigger list 6 Follow the instructions on the window EY NOTE Each selection on the Trigger list or Actions list shows a different dialog box with instructions Follow the instructions on each dialog box to create rules Managing Event Management You can turn Event Management on or off by clicking the on or off button on the top right corner or the Event Management tab HA Fabric Manager user guide 117 Also from the Event Management tab you can manage the Event Management rules Select a rule and then click the appropriate button to e Activate the selected rule Deactivate the selected rule Edit the selected rule e Copy the selected rule Delete the selected rule
278. rary To display the zone library 1 Select Configure gt Zoning The Zoning dialog box is displayed Figure 91 Fabric 1000006069109238 v 4 Potential Zone Members gt Zones Zone Sets Products Ports P Find gt Find gt Activate En 2000002037D91904 El Ef 2000002037D914DE Ef 2000002037D91DC0 500601608802C0F7 200000E08B071F78 200000 08B07590E 200000E08B085186 200000 08B09D81B lt Zoning Method World Wide Name Y New Zone New Membe New Set Export Import OK Cancel Help Figure 91 Zoning dialog box 2 Select a fabric from the Fabric list This defines the fabric for the zoning actions HA Fabric Manager user guide 149 3 Click the Zone Library tab The Zones Zone Sets and Potential Zone Members lists are displayed Ef NOTE Ifthe Zoning dialog box is open for longer than 30 minutes the information displayed cannot be current Reopen the dialog box to increase zoning discovery speed and get the updated information Adding a zone to a zone set To add a new or existing zone to a zone sets 1 CONAN ag 9 10 11 12 13 Display the zone library See Displaying the zone library on page 149 The Zoning dialog box is displayed Figure 91 on page 149 To create a new zone click New Zone A new zone is displayed in the Zones list To add an existing zone proceed to step 9 Rename the zone See Zonin
279. rational Degraded A 9 O Failed Unknown Offline Event icons Table 34 Event icons kon Design Informational puto Warning Fatal e 268 Reference Band information status icons Table 35 Band information status icons kon Outotband irband Teon Outotband bond Present Not Present gt Present Present Failed Not Present Present Failed te Not Present Present Failed Present gt A Not Present Failed Failed Failed gt Planned device icons Icons of planned devices illustrate the device being unpacked from a box Table 36 illustrates the planned icons for various devices Table 36 on Deserpon Planned device icons Planned Host Bus Adapter HBA e EA Planned Network Attached Storage NAS Planned switch Planned storage e Planned hub Planned tape 4E Planned bridge Planned unknown device EE Planned JBOD AIGE Planned appliance HA Fabric Manager user guide 269 Group icons Table 37 Group icons IN EC CN LS Host Isolated group Switch Bridge K Loop X Fabric Switch Poto Switch Port31 1000080088A010AD 1000080088ADE010 Switch Group Switch Switch Group Figure 117 Online connection with online devices Switch Group Host Group Figure 118 Offline connection and o
280. rements for HAFM Processor 400 MHz Solaris UltraSparc II or greater Hardware CD ROM Operating system Solaris 7 Solaris 8 or Solaris 9 Memory 512 MB RAM minimum Disk space 650 MB disk space Video requirements 8 MB video RAM Resolution 256 colors Network interface adapter Supporting TCP IP EY NOTE HAFM for Solaris HAFM Lite includes all of the features of HAFM except for the Call Home and Backup features HA Fabric Manager user guide 27 HAFM client system requirements 28 The client system running HAFM must meet the following requirements EY NOTE A maximum of eight clients is allowed per HAFM appliance Table 6 Windows system requirements Processor Hardware Operating system 1 GHz Intel Pentium Ill or greater CD ROM Windows 2000 Professional with service pack 3 or greater Windows 2003 Memory 1 GB RAM minimum Disk space 350 MB disk space Video requirements 8 MB video RAM Resolution 256 colors Table 7 Solaris system requirements Models Ultra 10 or greater Processor UltraSparclli or greater Hardware CD ROM Operating system Solaris 8 or 9 Memory 512 MB RAM minimum Disk space 350 MB disk space Video requirements 8 MB video RAM Resolution HAFM overview 256 colors Table 8 Linux system requirements Processor 1 GHz I
281. riy 4 Lal y Users Software Devices IP Access Control Readius Servers hterface V Enable EWS gt Method Local Only IV Enable Telnet Method Local Only _ SSH Permitted Users User ID Roe jas Telnet lAdhiistetor Adhiistreto Vi v Operator OperatorRole v v ay e be Y haruserverz ces Figure 101 Security Center Users tab E If the Enable EWS HAFM Basic or Enable Telnet check box is not selected then no user can log in to the switch through this interface When the interfaces are enabled HAFM Basic and Telnet can be set to authenticate to a local database on the switch a RADIUS server or a local database and then a RADIUS server If the SSH check box is selected then all management data between the workstation and the switch through Telnet is encrypted using the SSH protocol If Radius Only is selected from the list your HAFM appliance checks the RADIUS information to determine if a RADIUS server has been specified If not the application prevents the user from selecting this option and a message is displayed If the RADIUS server is already set the Security Administrator is alerted that the user information on the RADIUS server must be entered manually The HAFM appliance cannot populate that information automatically Assigning users to a switch For the user role there are two options available from a list Administrator and
282. ro be id E aii 91 Trigger Operators acacia tee ah ea Hard a Rae ci 113 Event Management tab id a Ee ROLES OWES A Rey 115 Open trunking configuration options sia a a 131 Planning rule parameters nes dis dd ratas 142 Connection TES aint rd da 144 Property validation rules ARS A 144 Capacity control rules epa ad e rata Gh hh eh ee tae 144 Zoning parameter limits odiar 147 Security Log reason codes car RG A ORK RK 190 Discovery problems and resolutions o o oo ooooooooooorro eee 203 Product problems and resolutions i nig Ka be eH ae Wan a 205 Address problems and resolutions 44 d44o3 84444408 oe KOS Sage Ode eee eS 205 Miscellaneous problems and resolutions 0 0 eens 211 Zoning problems and resolutions c 44 404 d0 ne creerse Ea ee dee 213 HAFM Messages ei eae daea a piace ada RN AR Rk ia ca 216 Element Manager messages Virada a 233 ol Te AAA PI E a mer A R el Oe Ran AS 267 Prod ct stat s ICONS 44 44 psi re e pai e AA a a 268 Event icons A E e EYE ONE a A a ay ghd an hae RS 268 Band information status icons sara resi 269 Planned device ICONS a id RR 269 GOL ICONS e co eae dae Siena Sa ea e Gab Soke Bal pad Ed eda genes E ee 270 SNMP trap event properties 0 ee eee 271 SNMP trap device properties cuore 272 SNMP trap system properties 2 2 ee ee eee 272 Performance event properties 2 ce teen n ee ne 273 Performance device properties n nonan eens Vek a RRA eed ROE EM RMD 273 Performance system pr
283. ro components 279 toolbar description 34 toolbox description 34 trap recipients adding 81 99 editing 82 overview 81 removing 82 100 triggers 112 event 114 schedule 114 troubleshooting license setup 211 address issues 205 discovery issues 203 HP UX error 212 import issue 211 installation issue 211 mapping loop to hub 211 product issues 205 report generation 212 server startup issue 211 server client communication issue 21 serverinit txt setup 211 Windows service issue 211 trunking feature 130 dialog box 132 enabling and configuring 131 log 133 turning off discovery 80 turning on discovery 80 U unknown device icon planned 269 unknown icon 268 unpersisting fabrics 96 unpersisting products 97 user action event properties 274 user list viewing 64 user macro components 280 user name default Windows 2000 38 user name default 38 users adding 64 changing 65 filtering events for 66 managing overview 63 number of 21 removing 65 HA Fabric Manager user guide 295 viewing all 64 V view options changing 36 83 viewing active sessions 4 events 102 product list 34 reports 108 routes 93 users 64 zooming in 47 zooming out 47 viewing performance data 134 views deleting 86 editing 86 selecting 36 86 W warning rack stability 19 web sites HP storage 20 HP Subscriber s choice 19 Windows 2000 default password 38 default user name 38 writing macros 277 Z
284. rol tab o a cae os 186 111 Security Center Radius Servers tab a A oe RE ee RT ES 188 MZ Security LOGu chart s a a r ia at a Aaa 190 113 HAFM appliance and client communications oeoa 197 114 Remote client installation Pra a 258 115 HP HAFM Available Installers page ii AE RA id Pa ea 259 116 File Download dialog box i504 3 4 4 ae 4a a A a Ro OG IR Kh get 239 117 Online connection with online devices 0ooo oooooooooor 270 118 Offline connection and offline loop and storage device 1 0 ee eee ee 270 119 Connection performance as displayed on Physical Map 0 0000 c ee eee eee 271 120 Switch on topology showing ports a4 45 3 a ri ae a Wea Te 271 Document conventions 20 0 o 18 Stages of a SAN lecitina tia 25 Windows system hardware requirements for HAFM 0 000 ce eee eee eee 26 Solaris system requirements for HAFM 1 0 cc tenes 27 Windows system requirements for HAFM 2 2 2 0 cect eee eee 27 Windows system requirements n naan eek a ac RR la A cn 28 Solaris system requirements 445 4454 a SOAS HDDS RAG ER ERE RDE da 28 Linux system requirements vc a a dea ele eae a ato ae Aa 29 HP UX system requirements nanunua 29 AIX system requirements sere ea d e a a a a g a ia a e ee 29 Starting HAFM on a remote works ira a a 40 Discovery state equivalent nnan annaa ea 42 User groups and access levels is a a a 69 Operational status n o naana 80 Prod ct stat s icon aside
285. ros 277 polling client 195 configure for faster logins 195 force client to be polling 195 forcing all clients as polling 196 port types editing 140 ports configuring 140 ports editing types 140 ports monitoring performance 135 principal switches in persisted fabrics 98 printing a plan 146 product list changing columns 87 creating columns 86 exporting 52 HA Fabric Manager user guide 293 overview 34 removing columns 88 viewing 34 product state log copying from 104 overview 101 product status icons 268 product status determining 91 products changing properties 90 changing types 90 determining status 91 finding 90 icons 267 searching for 90 status icons 268 unpersisting 97 properties viewing for zone sets 159 viewing for zones 159 properties device route 93 R rack stability warning 19 related documentation 17 remote access 67 remote HAFM appliances accessing 39 remote users maximum 39 remote workstations configuring AIX systems 263 HP UX systems 263 Linux systems 263 Solaris systems 261 Windows systems 257 installation AIX systems 263 HP UX systems 263 Linux systems 263 Solaris systems 261 Windows systems 257 requirements AIX systems 263 HP UX systems 263 Linux systems 263 Solaris systems 261 Windows systems 257 294 removing IP addresses 77 members from zone 152 trap recipients 100 users 65 zone sets 158 zones 152 removing trap recipients 82 removing product list columns 88 renami
286. rt configuration Element Manager messages continued pp e E E O Firmware cannot be installed on a switch with a defective CTP card Port speeds cannot be configured at a higher data rate than the director speed This message is displayed when you set director sped to 1 GB sec through the Configure Switch Parameters dialog box and at least one of the ports is running at 2 Gb sec This operation cannot take place while the director or switch is offline The director SNMP configuration cannot be retrieved by the Element Manager because the Ethernet link is down or busy Director diagnostic results cannot be retrieved by the Element Manager because the Ethernet link is down or busy Port information cannot be retrieved by the Element Manager because the Ethernet link is down or busy The port configuration cannot be retrieved by the Element Manager because the Ethernet link is down or busy 236 Informational and error messages Note that the CTP card is not a FRU If it fails the switch must be replaced After replacement retry the firmware install to the switch Either return the director speed to 2 Gb sec or configure all port data speeds to 1 Gb sec through the Configure Ports dialog box Configure the director or switch offline through the Set Offline State dialog box and then retry the operation Retry the operation later If the condition persists contact the next level of support
287. rties dialog box 3 Edit the server ID or CHAP Secret If you change the server ID a message is displayed indicating that when you change the server ID you must also update the authenticating switches or the appliance becomes out of sync and the switches cannot be managed 4 Click OK to return to the Software tab Adding an additional HAFM appliance 1 To add another HAFM appliance to the Permitted Software List click Add The Add or Edit Software ID and CHAP Secret dialog box is displayed Figure 106 Add or Edit Software ID and CHAP Secret f xj Add or Edit Software ID and CHAP Secret SoftwarelD myserver a CHAP Secret 8C063567E38FS5O86EBDSF3703A97DEB6 r Generate Retype Secret 8C063567E38FSO86EBDSF3703497DEBB ox Cancel Figure 106 Add or Edit Software ID and CHAP Secret dialog box 2 Enter a unique Software ID 3 Click OK The Software tab is displayed with an asterisk next to the current server ID on the Permitted Software List Editing the CHAP Secret for another HAFM appliance To edit the CHAP Secret for another HAFM appliance in the Permitted Software List 1 Select the HAFM appliance and click Change The Add or Edit Software ID and CHAP Secret dialog box is displayed HA Fabric Manager user guide 175 If you modify a CHAP Secret for a non local server on the Software tab a message is displayed indicating you are about to modify the CHAP Secret of this HAFM appliance the switch s local database The me
288. s api for additional information HA Fabric Manager user guide 279 Table 53 describes the user context properties Table 53 User context properties Descipion ID The ID of the user who performed the action Role The access level of the user who performed the action for example Admin or Browse Clients for this user The number of client sessions open for the specified user Table 54 describes the properties about the platform and the appliance Table 54 System context properties Property Description Admin Client Count Number of administrator clients logged in to the SAN Client Count Number of clients logged in to the SAN Discovery Off Specifies whether discovery is turned on Event Notification Off Specifies whether event notification is turned on Free Memory Available physical memory IP Address Appliance s IP address VM Name Name of the Java Virtual Machine VM Vendor Vendor of the Java Virtual Machine VM Version Version of the Java Virtual Machine OS Architecture Operating system architecture OS Name Operating system name OS Version Operating system version Server Name Name of the appliance Subnet Mask Discovered subnet mask Total Memory Total physical memory Trap Forwarding Off Specifies whether trap forwarding is enabled Region Region of the world where the user is located Time Zone User s tim
289. s displayed when attached nodes are unavailable and you attempt to modify a zone or create a new zone The current SNMP configuration could not be retrieved The current SNMP configuration could not be saved An SNMP community name has not been configured You cannot show the zoning library if no fabric exists You must have identified a switch or director to the HAFM application for a fabric to exist This action deletes all contents from the selected log The connection to the remote HAFM appliance has been lost Verity the HAFM appliance to product link is up If the link is up The HAFM appliance can be busy Another Element Manager instance can be open You cannot have permission to modify the product Ensure at least one fabric attached switch or director has an Ethernet connection to the HAFM appliance and retry the operation Verify an attached node is available and retry the operation Try again If the problem persists contact the next level of support Try again If the problem persists contact the next level of support Enter a valid community name in the Configure SNMP dialog box Identify an existing switch or director to the HAFM application using the New Product dialog box Click OK to delete the log contents or Cancel to cancel the operation Log in to the HAFM appliance again through the HAFM Log In dialog box HA Fabric Manager user guide 219 Table 30 HAF
290. s from this zone Cannot add a switch to a zone Cannot connect to management server Cannot delete product Cannot disable Fabric Binding while Enterprise Fabric Mode is active Cannot display route All switches in route must be managed by the same server The selected zone set will be deleted from the zone library The selected zone set will be overwritten in the zoning library All members will be deleted from the selected zone The device that you are attempting to add to the zone is a switch which cannot be added to a zone The HAFM application at a remote workstation could not connect to the HAFM appliance The selected product cannot be deleted You attempted to disable Fabric Binding through the Fabric Binding dialog box but Enterprise Fabric Mode was enabled You cannot show the route between devices that are attached to switches or directors managed by a different HAFM appliance Click Yes to delete the zone set or No to cancel the operation Click Yes to overwrite or No to cancel Click Yes to delete the members or No to cancel the operation Specify the port number or corresponding WWN for the device you want to add to the zone Verify the HAFM appliance IP address is valid Verify the HAFM appliance to product link is up If the link is up The HAFM appliance can be busy Another Element Manager instance can be open You cannot have permission to delete t
291. s from the Actions list on the left Pause JV Saturday Ren lA suna Note To create an eventbased trigger select Event p nos from the Trigger list on the left Sound Figure 68 Trigger phrase development Table 16 Trigger operators Number Number lt Number lt Number gt Number gt Number Contains String Does Not Contain String Starts With String Ends With String Phrase operators If the rule states that more than one operator must apply phrase operators describe the relationship between them The following phrase operators are used AND e OR AND NOT OR NOT HA Fabric Manager user guide 113 Event triggers Event triggers monitor system events and fire when the specified conditions exist You can define the phrases rows and their logical relationships The phrases filter all the event context properties to identify those events that you want to trigger the event Event triggers also allow you to set time limits so that the trigger occurs only if the event happens within a certain time and date range For example you can specify that all offline events between 5 p m and 8 a m trigger e mail message and log actions to take place Schedule triggers Schedule triggers monitor the system clock and fire when the specified time and date conditions are met Schedule triggers can be set to fire e Daily Weekly Monthly One time only e Hourly A CA
292. set and select Properties 3 Click Close when you have finished viewing the properties Finding members in a zone To find members in a zone 1 Display the zone library See Displaying the zone library on page 149 The Zoning dialog box is displayed Figure 91 on page 149 2 Select a device or port from the Potential Zone Members list and click Find All found members are highlighted in the Zones list Finding zones in a zone set To find members in a zone set 1 Display the zone library See Displaying the zone library on page 149 The Zoning dialog box is displayed Figure 91 on page 149 2 Select a zone from the Zones list and click Find All zones found are highlighted in the Zone Sets list Displaying zone members To display zone members 1 Select View All gt Levels gt All Levels All levels are displayed on the Product List 2 Expand a product on the Product List to display the ports 3 Right click a port and select List Zone Members HA Fabric Manager user guide 159 The List Zone Members dialog box is displayed Figure 99 Fabric Ncknemne fabric tve Port Marne 10000000C908F712 Zone Menters E de newzone Errex VVAA 1000000009200527 Figure 99 List Zone Members dialog box 4 Click Close to close the dialog box Saving the active zone set to a zoning library When you manage a switch s zone set through one appliance and then import that switch to a new appliance you must save the zone
293. sets You see all newly discovered devices in the category even if the devices were not originally part of the view 6 Click to move your selections to the Selected Fabrics list 7 If you want to show or hide Product List columns continue to step 8 otherwise proceed to step 12 8 Click the Columns tab 84 Managing the HAFM application The Create View dialog box with the Columns tab is displayed Figure 42 Create View x Name Description View Members Columns Available Product List Columns Selected Product List Columns Label Type Label Type Nickname Product Name Product Device Type Product Class Product Tag Product Node Name Product IP Address Product Domain ID Product 4 Vendor Product 5 Model Product Serial Product Port Count Product Firmware Product Location Product Add Edit Figure 42 Create View dialog box Columns tab 9 Select the columns you want to see in the Product List from the Available Product List Columns list 10 Click gt to move your selections to the Selected Product List Columns list 11 To add edit or remove columns see Customizing the Product List on page 86 12 Click OK The new view is displayed EY NOTE Ifyou select a customized view any newly discovered devices are displayed HA Fabric Manager user guide 85 Editing a customized view To edit a customized view 1 Select View gt Edit View The E
294. sonal injury or damage to equipment Extend leveling jacks to the floor Ensure that the full weight of the rack rests on the leveling jacks Install stabilizing feet on the rack In multiple rack installations secure racks together Extend only one rack component at a time Racks can become unstable if more than one component is extended HP technical support Telephone numbers for worldwide technical support are listed on the HP support web site http www hp com support Collect the following information before calling Technical support registration number if applicable Product serial numbers Product model names and numbers Applicable error messages Operating system type and revision level Detailed specific questions For continuous quality improvement calls can be recorded or monitored HP strongly recommends that customers sign up online using the Subscriber s choice web site at http www hp com go e updates Subscribing to this service provides you with e mail updates on the latest product enhancements newest versions of drivers and firmware documentation updates as well as instant access to numerous other product resources After signing up you can quickly locate your products by selecting Business support and then Storage under Product Category HP authorized reseller For the name of your nearest HP authorized reseller In the United States call 1 800 345 1518 Elsewhere visit the HP web si
295. ssage also says to check the Server Properties dialog box for this switch and make sure the secret is updated accordingly If you fail to do so this appliance cannot manage the products any more 2 Edit the CHAP Secret 3 Click OK to return to the Software tab Removing another HAFM appliance Although you can remove software IDs from the Permitted Software List you cannot remove the last entry in the list while the API authentication is enabled Enabling OSMS authentication OSMS is a PFE key dependent feature If the license key is not installed then OSMS authentication is not available Applying changes and confirmation To apply the change 1 From the Software tab click OK on the Apply or Apply To dialog box The Security Change Confirmation and Status dialog box is displayed This dialog box is similar to the dialog box that is displayed from the Users tab The only difference is the Detailed Change table This table displays the difference between the current settings of the Software tab and the to be populated new settings The behavior of this dialog box is the same as the dialog box for the Users tab 2 Click Start If there are no security settings being changed and you click Apply or Apply To the To Security Change Confirmation and Status dialog box is displayed with a message indicating no changes were found Click Start and a message is displayed in the Status window indicating the security settings are identical
296. strator and change as required HA Fabric Manager user guide 255 256 Informational and error messages D Configuring remote workstations This appendix describes the procedures for installing the HAFM application on a remote workstation To run HAFM on a remote workstation you must first download and install the HAFM application from the HAFM appliance This appendix describes the following topics Windows systems page 257 Solaris systems page 261 HP UX AIX and Linux systems page 263 Windows systems This section describes the procedures for installing HAFM on a remote workstation running Windows 2000 Windows NT or Windows XP Requirements The download and installation process requires the use of a PC with the following minimum system requirements Operating system one of the following Windows 2000 Professional with service pack 3 or above e Windows 2003 e Windows NT 4 0 with service pack 6a e Windows XP with service pack 1a 1 GHz Pentium Ill processor 1 GB RAM 350 MB available disk space Video card supporting 256 colors at 800 x 600 resolution Ethernet network adapter Java enabled web browser such as Microsoft Internet Explorer version 4 0 or later or Netscape Navigator version 4 6 or later Newer versions of HAFM or Element Managers installed on the HAFM appliance are automatically downloaded when the remote client logs in to the appliance Installation procedure To install HAFM
297. t a user 1 Select a user and click Disconnect User to disconnect the user from the appliance The appliance immediately shuts down the appliance client connection The status bar on the client displays that the appliance connection was lost All products and connections on the Physical Map stay in the condition they were in when the session ended they do not turn grey The client displays a message stating that a user disconnected the client from the appliance EY NOTE To prevent this user from reconnecting remove the user account See Removing a user account on page 65 for instructions HA Fabric Manager user guide 41 Fibre Channel networks use World Wide Names WWNs to uniquely identify nodes and ports within nodes For many devices the 64 bit WWNs are fixed and their assignment follows conventions established by the IEEE For other devices the WWNs can be set or modified by the user WWNs are a special concern for SAN Manager because WWNs are used as the primary keys to identify network elements e Previous experiences have shown that an ill formed WWN can be a malfunctioning device Proper operation with SAN Manager requires that WWNs be unique within the network and well formed they must be 64 bits in length and the first byte cannot be zero Determining user groups An administrator can determine the groups to which a user belongs 1 Select SAN gt Users The Server Users dialog box is displayed Figure
298. t click the fabric in the Physical Map or Product List and then select Persist Fabric Highlight a fabric in the Physical Map or Product List and then click the Persist Fabric icon on the toolbar Unpersisting a fabric 96 To unpersist a fabric from the HAFM window do one of the following Highlight a fabric in the Physical Map or Product List and then select Configure gt Unpersist Fabric Right click the fabric in the Physical Map or Product List and then select Unpersist Fabric A confirmation box is displayed and then click OK Contiguring SAN products and fabrics Unpersisting a product You can unpersist a product that is no longer part of a persisted fabric Doing so removes all connections associated with that product and updates the persisted fabric s data To unpersist a product from the HAFM main window 1 Right click the product in the Physical Map or Product List and then select Unpersist Fabric A confirmation box is displayed 2 Click OK Interpreting status There are various ways to determine the status of persisted fabrics and products Real time changes to the fabric display on the Physical Map and the Product List and are listed in the fabric log Persisted fabric status The green circle indicator on the fabric icon on the Physical Map and in the Product List shows the fabric is persisted Figure 53 1000080088 602088 Figure 53 Persisted fabric icon on Physical Map The Fabric Log lists ch
299. tang Congestion Threshold Pon Use Agora Inreshow threstntd o Y 66 a 1 Y 6 E Y 66 3 Y 66 4 Yy eb 5 Y 66 6 Y 66 y 66 Y 66 Y 66 10 Y 66 11 Y 66 z 15 ce Event Notification Unresolved Congestion Back Pressure Low BO Credit Threshotd Detet Tireshold 50 1 997 gt Activate Cancel Hap Figure 80 Configure Open Trunking dialog box 2 Select the Enable Open Trunking check box 3 Specify the congestion threshold value If you do not specify a threshold value for a port open trunking uses a default value that is based on port type 1 Gb s or 2 Gb s and channel bandwidth 4 Select the Event Notification options as appropriate 5 Set the low BB Credit threshold value 6 Click Activate Global threshold changes In the Configure Open Trunking dialog box rightclick a column in the Configuration Threshold table to display menu options that globally change values Use Algorithmic Threshold Right click this column to display these options Set All to Default Adds check marks to all check boxes in this column and sets all cells of Threshold column to default values Clear All Clears all check boxes in this column and restores values in cells of Threshold column with previous values Threshold Right click this column to display these options Set All To xx Sets all cells in this column to the value xx that you clicked e Restore All Sets all cells in the column to
300. tch Membership List to allow connection and removed from the Membership List to prohibit connection 4 Click Activate 5 Edit the Switch Membership List through the Switch Binding Membership List dialog box to add or remove switches and devices that are allowed to connect with the switch Editing the Switch Membership List 1 Select Configure gt Switch Binding gt Edit Membership List from the Element Manager window The Switch Binding Membership List dialog box is displayed Figure 72 120 Optional HAFM features The WWNs of devices and switches that can currently connect to switch ports are listed in the Switch Membership List Attached Nodes Switch Membership List Type World Wide Name World Wide Na e Attached lo E Port MCDATA 10 00 08 00 88 40 54 56 4 E Port MCDATA 10 00 08 00 88 40 B2 6D 8 E Port MCDATA 10 00 08 00 88 40 B2 6D Add gt Add Detached Node Display Options Activate Cancel Help Figure 72 Switch Binding Membership List dialog box See Editing the Switch Membership List on page 120 for information on how the Switch Membership List is populated with WWNs according to options set in the Switch Binding State Change dialog box If nicknames are configured for WWNs through HAFM and you want these to display instead of WWNs in this dialog box click Display Options The Display Options dialog box is displayed Click Nickname then click OK To prohibit c
301. tch performance A performance graph shows transmit receive and error data from the switch ports to the connected devices The graphs can be sorted by the errors transmit data or receive data To monitor switch performance 1 Right click a switch icon on the HAFM Physical Map and select Performance Graphs The Performance Graph dialog box is displayed Figure 82 Data Utilization e Errors none gt 4 ll ZA Y Transmit a y Receive o Port Errors Graph ae Transmit Rece 0 we i 0 100 Eso 0 d 0 Pek a E a a rere LO 40 30 20 10 0 Time seconds Current Polling Delay 16 seconds Client Server Offset 3553 seconds Ez Be Figure 82 Performance graph dialog box 2 Select the type of data to display from the Data list 3 Select the error data to display from the Errors list Collecting performance data You can collect performance data about your SAN and then view it or export it and distribute the data to others Storing performance data To store SAN performance data select Monitor gt Performance gt Store Data Viewing performance data See the HAFM online help for instructions on how to generate and view HTML reports of performance data 134 Optional HAFM features Exporting performance data To export SAN performance data to communicate issues to the support center capture network status and archive historical data see Exporting and importing data
302. te http www hp com Then click Contact HP to find locations and telephone numbers HA Fabric Manager user guide 19 Helpful web sites 20 For third party product information see the following HP web sites http www hp com http www hp com go storage e http www hp com support htto www docs hp com 1 HAFM overview HAFM is a graphical user interface GUI that enables you to manage users and products monitor products and open Element Managers This chapter describes the following topics e HAFM components page 21 SAN life cycle page 24 e Searching the online help page 25 System requirements page 26 HAFM components The HAFM application is installed on the 1U rack mount appliance HAFM appliance to provide local access to managed products HAFM client applications can also be installed on remote user workstations to provide remote access to the managed products through the HAFM appliance Figure 1 shows an example of an HAFM configuration Coane A 10 100 Mbps Ethernet Hub Director 2 64 Figure 1 Product management options HA Fabric Manager user guide 21 HAFM appliance The HAFM appliance provides a central point of control for managed Fibre Channel products The HAFM appliance is required for installing configuring and managing these products See the HP StorageWorks HA Fabric Manager installation guide for details about the HAFM appliance Ef
303. te View dialog box View Members tab o oooooooooooooo eee 84 Create View dialog box Columns tab 22 0 2 0 ce eee 85 Edit View dialog box T 25 lt thn ace aa a aeaa r e PRET aAa 86 Greate Colum diglag borrarla e ee Oe RG BRR a ae es ae PRMD 87 Edit Column dialog box o54 2 Aare ra VE ee A aaa ee eRe 88 Properties dialog DO ada oido da dal dale GOH a ea Side nO RG Ea Aiud AS the ace 90 Show Route dialog box 4 5 few ieee whinge dae ee Wa rel e tA gts Bly Leth Wee 92 Displaying routes between ports die oes AE oes A ny ORS ea ed om 92 Route Properties dialog box aussie sein eee Sela Sea RA eee RNS a 93 Fabric Properties dialog Bows ir had above daly Oe wig OR Wall dal Pla ie 93 Enterprise Fabric Mode dialog box n n naaa ied wee es eed BYR SEGRE ed hee 94 Fabne Dinelinig dialog box a 4 menia e pate er ria gata 95 Persisted fabric icon on Physical Map iuris o Peed a eee edad ales 97 Product added to persisted fabric 2 1 anaana nee nee 97 Product removed from persisted fabric vaca Ako woe AS A ERE aes 97 Removed connection in a persisted fabric o on nananana 98 Configure Trap Forwarding dialog bot ai sek ben te AA 99 Add Trap Recipient dialog Ote dd DA bn did dak bes 99 E O E AT AA 102 View kogs dialog box E O E O A sae ele ahead 103 Define Filter dialog GON ax rara Runes Lee ph aaa wee Akola Pe eae oia 104 Email Event Notification Setup dialog box 2 0 06 teenies 105 Configure Ethernet Event dialog bocas cantad
304. ted Devices list The secret is populated to both the device s local database and the current switch s Authenticatable list Changing the port authentication state for a nonmember device that is not managed 1 2 A 6 Select the E_port authentication check box for a device that is not manageable Change the port authentication state to Force Enabled or Switch Settings The Secret column changes from No to Needed Double click the corresponding Secret column to display the Add User dialog box Type the CHAP Secret Click OK The Secret column for that device displays Set The device is added to the Authenticated Devices list The secret is populated to the current switch s Authenticated Devices list Access the device that is not managed and populate the same Secret into the local database Applying changes and confirmation 1 Click Apply from the Devices tab The Security Change Confirmation and Status dialog box is displayed 182 SANtegrity Security Center This dialog box is similar in behavior to the Security Change Confirmation and Status that is displayed from the Users tab The only difference is in the Detailed Changes table On the Devices tab there is no Apply To available so there is always one product in the Product List This table displays the difference between the current settings of the Devices tab and to be populated new settings Click Apply even if there are no security settings being chan
305. ted in the Ports table 5 Click OK Viewing thresholds ow To view thresholds 1 Select Configure gt Port Fencing The Port Fencing dialog box is displayed Figure 73 on page 124 2 Select a threshold type from the Violation Type list 3 Review the Thresholds and Ports tables 4 Click OK Removing thresholds When you assign a new threshold to an object the old threshold is automatically removed HAFM also allows you to remove thresholds from an individual fabric switch or switch port from all fabrics switches and switch ports at once as well as from the Threshold table To remove thresholds from all Fabrics Switches and Switch Port s as well as the Threshold table 1 Select Configure gt Port Fencing The Port Fencing dialog box is displayed Figure 73 on page 124 2 Select a threshold type from the Violation Type list 3 Select the object with the threshold you want to remove from the Ports table 4 Click to remove the threshold A icon is displayed next to every instance where the threshold was removed from an object if there was another threshold higher in the tree that is now inherited by the object A icon is displayed next to the affected objects To remove thresholds from all Fabrics Switches and Switch Ports as well as the Threshold table 1 Select Configure gt Port Fencing The Port Fencing dialog box is displayed Figure 73 on page 124 HA Fabric Manager user guide 129 2 Select a
306. ter describes the following topics e Feature keys page 111 e Event Management page 112 SANtegrity features page 118 e Open trunking page 130 e Performance Module page 133 e Planning Module page 136 Feature keys Certain HAFM optional features require the installation of a feature key to validate ownership See the HP StorageWorks HA Fabric Manager Appliance installation guide for more information about feature keys To install and enable a feature key 1 Obtain the feature key 2 Select Configure gt Features from the Element Manager window The Configure Feature Key dialog box is displayed Figure 66 lewes J AAA a Open Trunking SANtegrity TM Preferred Path Element Manager f id D N tew Cose hep Figure 66 Configure Feature Key dialog box 3 Click New The New Feature Key dialog box is displayed Figure 67 Figure 67 New Feature Key dialog box HA Fabric Manager user guide 111 4 Enter the feature key in the Key box 5 Click OK Event Management Event Management automates tasks that are performed on the SAN You can configure the application to automatically perform functions such as Sending an e mail notification when events or errors occur Generating reports at specific times or for specific reasons e Exporting data e Playing sounds for notification of events Components The Event Management feature uses triggers and actions to create ru
307. the Permitted IP Addresses list while the Enable IP ACL check box is selected To remove the server IP from the list disable the IP ACL Applying changes and confirmation 1 Click Apply from the IP ACL tab The Security Change Confirmation and Status dialog box is displayed This dialog box is similar in behavior to the Security Change Confirmation and Status that is displayed from the Users tab The only difference is in the Detailed Changes table This table displays the difference between the current settings of IP ACL tab and to be populated new settings 2 Click Apply or Apply To even if there are no security settings being changed If there are no security settings being changed the Security Change Confirmation and Status dialog box is displayed with the Detailed Changes table showing that No Changes were Found on the first row 3 Click Start and the status window displays a message indicating the security settings are identical and there are no changes to apply 184 SANtegrity Security Center RADIUS Servers tab The Radius Servers tab Figure 111 allows you to specify the RADIUS server that will be used for authentication View Al HAFM 8 7 1 olx SAN Edt View Plan Discover Configure Monitor Help Pa l 4h Aan bo u ViewAly P Event Management Securty ES Authentication 0 1000080088 40408F Product Configuration 10 1on0080088A0A280 so000800s8E0AceB etena Porn 1000080088A09816 1000080
308. threshold type from the Violation Type list 3 Select the threshold you want to remove from the Thresholds table 4 Click Remove If this threshold is assigned to a fabric switch or switch port a message is displayed asking if you want to delete this threshold from its assigned ports Click OK to continue A icon is displayed next to each instance where the threshold was removed from an object if there was another threshold higher in the tree that is now inherited by the object A icon is displayed next to the each affected object and does not inherit a threshold from higher in the tree 5 Click OK Open trunking Open trunking is an optional license keyed feature that monitors the data flows on ISLs from a receive port to a target domain and periodically reroutes data from congested links to lightly loaded links It makes the most efficient use of redundant ISLs between switches Load balancing does not require user configuration other than to enable open trunking However you can modify default settings for congestion thresholds per port You do not need to manually configure ISLs into trunk groups of redundant links where data can be off loaded Open trunking identifies candidate links for rerouting and maintains the links automatically 130 Optional HAFM features Options Access open trunking through the HAFM menu bar Figure 80 shows the Configure Open Trunking dialog box Table 18 describes the function of each option
309. tion rules For each storage port any given LUN can only be a member of a single host storage domain For each storage port any given host port can only be a member of a single host storage domain To manage your 9980 V LUNs with 4 2 any preexisting host domains that do not conform to these two rules must be reconfigured or removed using the HiCommand Server 2 4 or greater When the rules are met 4 2 will discover all the host domains and allow you to configure them e If rules 1 8 2 are not met 4 2 can discover all the LUNs and their host assignments e The data displayed in the LUNs and Hosts tables will be correct The Troubleshoot tab can be used to diagnose the connectivity between LUNs and host ports The host domain data will be incomplete Therefore the dialog will be in a browse only mode No actions can be taken on a HDS 9980 V that has been configured in this way until its host storage domains are reconfigured to meet rules 1 and 2 above 210 Troubleshooting Miscellaneous problems Table 28 describes possible miscellaneous problems and suggested resolutions Table 28 Miscellaneous problems and resolutions Problem Code Execution Error Array Index Out Of Bounds Cause resolution Retry the command or action If the problem persists contact HP customer support Code Execution Error Internal Exception Retry the command or action If the problem persists contact HP customer su
310. to the director or switch depending on the connection policy set in the Switch Binding State Change dialog box WWNs of devices connected to F_Ports F_Port connection policy The WWN is the WWN of the attached device s port WWNs of switches connected to E_Ports E_Port connection policy The WWN is the WWN of the attached switch WWNs of devices connected to F_Ports and switches connected to E_Ports all ports connection policy When the Switch Binding feature is first installed and has not been enabled the Switch Membership List is empty When you enable Switch Binding the Membership List is populated with WWNs of devices switches or both that are currently connected to the switch If the switch is offline and you activate Switch Binding the Membership List is not automatically populated Edits to the Switch Binding Membership list are maintained when you enable or disable Switch Binding After enabling Switch Binding you prohibit devices and switches from connecting with director or switch ports by removing them from the Membership List in the Switch Binding Membership List dialog box You allow connections by adding them to the Membership List You can also add detached nodes and switches Enabling disabling Switch Binding Use the following procedure to enable and disable Switch Binding HA Fabric Manager user guide 119 1 Select Configure gt Switch Binding gt Change State from the Element Manager window T
311. to the domain name server invalid Invalid port number Valid You have specified an Specify a valid port number in the ports are O lt nn gt invalid port number range O to the maximum number of ports on the product minus 1 For example for a switch with 32 ports the valid port range is 0 31 Invalid product selection At the New Product Choose a valid product and retry dialog box an invalid the operation product was selected HA Fabric Manager user guide 223 Table 30 HAFM Messages continued CEN CSC CS Invalid request Three conditions result in Choose the action that is this message appropriate to the activity that You tried to add or caused the error modify a product from Network address Specify a unique Product View and the network address for the product network address is already in use Network addresses must be unique Do not delete the default Administrator user username Specify a unique username for the new user ID You tried to create a new user with a username that already exists A username must be unique You tried to delete the default Administrator user The default Administrator user cannot be deleted Invalid UDP port number The specified user Verify and enter a valid UDP port datagram protocol UDP number port number is invalid The number must be an integer from 1 through 65535 inclusive Invalid World Wide The specified WWN Enter a WWN using the
312. tor Help aa ik awn View ly VP Evert Management Security 2 al io y Fabrics Authentication 1000080088A0408F Product Configuration 1000080088a04280 NodeName jNickName Model DomainD Firmware PFEKey Aut EWS of Ds BWS Method EWS _ Telnet SSH Telnet of Ds 1000080088E0A088 1oooogooseaogsi6 Tests 001 15 rons Y 2 1000080088407C5A 001 2 07 01 02 4 Y 2 gt 1000080088603080 o 7 vuns Y 2 Y 2 Local Only X 2 Local Only Local Only 2 Local Only 2 la av pi Users Software Devices IP Access Control Radius Servers APL 7 Enable Authentication SMS _ Enable Authentication Method Local Only OSHS Key Retype Key _ Include Current Server Properties Permitted Software SeverD y ee Y HAEMSERVERET irs 1 gary Figure 105 Security Center Software tab Enabling API authentication If API authentication is enabled follow these guidelines There must be a minimum of one entry in the Permitted Software box If not a warning message is displayed when you click Apply The current HAFM appliance must be included If not the appliance loses manageability and you are forced to use an alternate management interface to disable API authentication If you click Apply or Apply To without including the appliance in the permitted list a message is displayed indicating that you must include
313. tory named HAFM in your home directory 1 HP UX In the Terminal window enter cd HAFM 2 Press Enter 3 4 Press Enter Enter HAFM Manager The HAFM application opens AIX and Linux systems This section describes the procedures for installing the HAFM on a remote HP UX AIX or Linux workstation Requirements The download and installation process requires the use of a PC with the following minimum system requirements Operating system one of the following e HP UX 11 0a AIX version 5 1 e Red Hat 9 0 kernel v 2 4 20 8 e Red Hat 8 0 kernel v 2 4 18 14 e Red Hat Enterprise Linux ES 3 0 Processor e 400 MHz HA PA RISC e 333 MHz Power3 ll e 1 GHz Intel Pentium III 512 MB RAM 350 MB disk space Video card supporting 256 colors at 800 x 600 resolution Ethernet network adapter Java enabled web browser such as Microsoft Internet Explorer version 4 0 or later or Netscape Navigator version 4 6 or later Newer versions of HAFM or Element Managers installed on the HAFM appliance are automatically downloaded when the remote clients log in to the HAFM appliance Installation procedure 1 Open a Terminal window by choosing Terminal from the Personal Applications subpanel HA Fabric Manager user guide 263 2 Atthe prompt enter netscape and then press Enter The Netscape browser opens 3 Obtain the HAFM appliance address from your network administrator 4 Enter the address of the HAFM ap
314. trunk utilization This function provides a forward looking trend analysis and is intended to notify the user of resource modeling problems Running Average Display Applies an averaging algorithm to the display This display can be adjusted on a varying percentage of an hour To change the display move the slide bar 4 Select the check boxes next to and to define the boundaries to configure both high and low usage performance warnings and critical thresholds 5 Adjust the slide bars at the right side of the display As you move a slide bar the percentage of utilization is displayed in the associated box 6 Set separate transmit and receive thresholds in either Utilization or MB sec Set separate error thresholds If Running Average Display is selected your thresholds are triggered only if the running average crosses the threshold 7 Click Apply to All Ports if you want to apply your changes to all ports on the device 8 Click OK EY NOTE Port performance data and thresholds are indexed by node name If you move a switch from one location to another it brings its performance data and thresholds with it Additionally if a threshold is set in one SAN file and the same port is discovered in a different SAN file the threshold is defined in both files Planning Module The Planning Module enables you to plan and evaluate a SAN before you implement the design You can use a discovered SAN as the basis for a plan eliminating
315. ts on page 99 for instructions ow Select the recipient that you want to provide trap messages to in the Available Recipients list 4 Click the right arrow button Scan the Selected Recipients list and if necessary select recipients to move from the list and then click left arrow button on 6 Select the Enable Trap Forwarding check box 7 Click OK Adding trap recipients To add a trap recipient 1 Select Monitor gt Trap Forwarding The Configure Trap Forwarding dialog box is displayed Figure 57 2 Click Add The Add Trap Recipient dialog box is displayed Figure 58 Description ins IP Address 172 0 0 2 Port 162 ao Cancel Figure 58 Add Trap Recipient dialog box 3 Enter the appropriate information in the following boxes e Description e IP Address Port HA Fabric Manager user guide 99 EY NOTE The HAFM appliance interprets trap data and displays the proper port value for all firmware levels When traps are generated on the switch firmware versions 4 0 and below send the actual port number and firmware versions 5 X and above add one to the port number to match the specification However third party applications cannot correctly interpret the information 4 Click OK to close the Add Trap Recipient dialog box 5 Click OK to close the Configure Trap Forwarding dialog box Removing trap recipients To remove a trap recipient 1 Select Monitor gt Trap Forwarding The Configure
316. twork address that you enter is added to the network address list on the HAFM 8 8 Log In dialog box A CAUTION This procedure deletes the appliance from the network address list without prompting you for a confirmation To remove a network address from the list in the HAFM 8 8 Log In dialog box 1 3 Turn on the HAFM appliance or if the appliance is already turned on double click the HAFM icon on the desktop The HAFM 8 8 Log In dialog box is displayed Figure 3 on page 31 Select the appliance you want to remove from the Network Address list The selected appliance s IP address is displayed in the Network Address box Click Delete Managing users To grant access to the HAFM application the administrator can assign user names passwords and access rights The administrator can configure up to 16 users in an HAFM application but no more than 9 users 8 remote and 1 local user can simultaneously access the HAFM appliance Access rights are defined by the user groups as described in Managing user groups on page 68 HA Fabric Manager user guide 63 Viewing the list of users Select SAN gt Users to view a list of users their event notification settings their e mail addresses and a list of user groups to which they belong in the Server Users dialog box Figure 26 5d of Users Groups ID Description Email Address Ce Admin Email Browse O Fil admin Default Admin UA 4
317. types for planned devices EY NOTE To configure planned ports planned devices must be connected 1 Right click a planned device icon on the Physical Map and select Ports 140 Optional HAFM features 2 Click the small triangle next to the port number The Port Properties dialog box is displayed Figure 89 3 Enter a number in the Port Number box 4 Select a port type from the Port Type list 5 Click OK Planning rules This section describes how to use planning rules to evaluate a plan Planning rules specify criteria for a plan evaluation Rules are stored in the text file Instal1_Home Server Config Other rules dat You can open the rules dat file using any text editor Planning rules syntax and format Planning rules must follow a certain syntax and format Table 19 describes the planning rule parameters EY NOTE You must be an advanced user with administrator privileges to edit planning rules The following example shows the syntax for a planning rule set rule_id SAN_1 where rule check_for_valid IPAddress for device switch or device hub or device bridge and description valid IP addresses must be specified for all switches hubs and bridges and headline Valid IP must be specified property validation and errormssg The device labeled 0 has invalid IP address and remedy Please specify a valid IP address HA Fabric Manager user guide 141 Table 19 Plannin
318. uding spaces name with an invalid hyphens and underscores name Invalid feature key The feature key was not Reenter the feature key Ensure that recognized you type each character in the correct case upper or lower include the dashes and do not add any spaces at the end Invalid firmware file The file selected for Choose the correct firmware firmware download is not version file and retry the operation a firmware version file HA Fabric Manager user guide 245 Table 31 Invalid management server address Invalid network address Invalid port address Invalid port number Invalid port swap Invalid response received from switch Invalid response received from director Invalid serial number for this feature key Invalid UDP port number Invalid value for BB_Credit Element Manager messages continued pa a EO The IP address specified for the HAFM appliance is unknown to the domain name server invalid The IP address specified for the product is unknown to the domain name server invalid Invalid port address has been entered The port number must be within a range of ports for the specific director or switch model Port swap selection is not allowed An error occurred at the switch during a firmware download operation An error occurred at the director during a firmware download operation The serial number and the feature key did not match The sp
319. umn from the Product List A CAUTION This procedure removes a column from the Product List without prompting you for a confirmation To remove unused Product List columns in a customized view 1 Select View gt Edit View 2 Select the view you want to edit The Edit View dialog box is displayed Figure 43 on page 86 3 Click the Columns tab The Create View dialog box is displayed Figure 42 on page 85 4 Ensure the column you want to remove is listed in the Available Columns list To move a column to the Available Columns list select it in the Selected Columns list and click lt 5 Select the column you want to remove from the Available Columns list 6 Click Remove 88 Managing the HAFM application 4 Configuring SAN products and fabrics This chapter provides instructions for configuring products fabrics and trap forwarding e Managing SAN products page 89 e Configuring Enterprise Fabric Mode page 94 e Configuring Fabric Binding page 95 e Persisting and unpersisting fabrics page 96 e Configuring trap forwarding page 98 Managing SAN products Use the HAFM application to manage discovered products Using the Element Manager You can use the Element Manager to manage switches and directors directly from the HAFM application Ef NOTE Use only one copy of the application to monitor and manage the same devices in a subnet Opening multiple copies of the application could result in errors Op
320. unt Number of users HA Fabric Manager user guide 275 Table 46 describes the properties of a user Table 46 User action property Descipion ID User ID of the user who performed the action Role Access level of the user who performed the action for example Admin or Browse Clients For This User Number of client sessions open for the specified user Device state event properties Device state events occur when a device or connection goes online or offline Table 47 describes the properties of a device in a SAN Table 47 Device state event properties Descriptor Device Status Status of the device online or offline Discovery Type In band or out of band discovery Element Type A device status event or a link status event Source Label of the device that encountered an event IP Address IP address of the device that encountered an event Node Name WWN of the device that encountered an event Port Name WWN of the port that encountered an event Description Description of the event Event Level Severity level of the event Table 48 describes the properties about a device in the SAN Table 48 Device state properties Descipion Label Device s label as shown on the Physical Map Name Device s name as specified in the Properties dialog box Device Type Type of device for example HBA Node Name Device s WWN IP Address Device s IP address
321. up and restoring data page 56 e Accessing to Eclipse management applications page 60 Managing the appliance This section describes how to add remove log in to and log out of the HAFM appliance Logging in to HAFM You must log in to a appliance to monitor a SAN EY NOTE You must have a login and password account on the HAFM appliance in order to log in 1 The HAFM Log In dialog box is displayed automatically when you open HAFM Figure 3 Connect to HAFM 8 8 server to open a SAN Network Address localhost v Delete Server Name User ID Password e Forget password Save password Login Exit 9 Server Not Available Figure 3 HAFM Log In dialog box The HAFM appliance address is displayed in the Network Address box 2 You can specify a new address by typing it in the box or selecting one from the list EY NOTE Localhost is the default HAFM determines the local IP address and uses it to log in HA Fabric Manager user guide 31 The HAFM appliance name is displayed in the Server Name box Enter your user ID and password no Ww Select whether you want the application to remember your password the next time you log in 6 Click Login Logging out of HAFM To log in to a different HAFM appliance you must first log out of the current appliance 1 Select SAN gt Log Out The HAFM Log In dialog box is displayed Figure 3 on page 31 You are logged out of the appliance and the HAFM
322. ure Fabric Binding 3 Click OK HA Fabric Manager user guide 95 Adding and removing switches With Fabric Binding enabled you can add or remove switches from the membership list To add switches to the selected fabric s membership list select the switches from the Available Switches list in the Fabric Binding dialog box and click to move the switches to the membership list To add a switch that does not have physical connection to the fabric a Click Add Detached Switch b Enter the appropriate information in the following boxes Domain ID Node WWN c Click OK To remove switches from the selected fabric s membership list select the switches from the Membership List in the Fabric Binding dialog box Click 4 to move the switches to the Available Switches list Persisting and unpersisting fabrics When you persist a fabric you take a snapshot of the fabric s products and connections This serves as a reference point for future comparisons You can export the persisted fabric information for future reference See Exporting data on page 52 EY NOTE Each fabric has an HP principal switch to manage the devices in fabric If the principal switch changes the new fabric must be manually persisted Persisting a fabric To persist a fabric from the HAFM main window do one of the following Select a fabric in the Physical Map or Product List and then select Configure gt Persist Fabric Righ
323. ured because it is not currently managed by this HAFM appliance e If you select a switch and start to configure the settings and then the switch goes offline or loses the MPI link you can continue configuring the switch by clicking Yes in the displayed warning message You can apply all changes to the offline switch and all changes are populated to the switch Alternatively you can wait until the switch is online and the changes made to the top table can be applied e If the switch is manageable and you complete the configuration changes from the bottom tabs and apply them to the Authentication table and then the switch loses manageability before you click Activate a message indicates that you cannot apply the changes because the switch is not manageable However you can apply the changes when the switch is manageable again as long as you do not exit the window Changing security data internally The Authentication table automatically refreshes to reflect the latest changes to the products listed The changes include security related or nonsecurity data With nonsecurity data the table refreshes and regular events are generated for the changes and logged in the Master Log 166 SANtegrity Security Center Changing security data externally When security data is changed by another interface such as HTTP or Telnet the Security Administrator should be notified because the working data can be affected by the table s live update If the
324. uthenticated device with or without a CHAP Secret i Select a device and select Force Enabled or Switch Setting from the corresponding authentication state while the E_Port authentication is checked If the device has not been transferred to the Authenticated Devices list Needed is displayed in the Secret column whether the device has a CHAP Secret or not Continue configuring multiple port authentication states Click Apply A message is displayed indicating the devices have not been put into the Authenticated Devices list and as a result the connectivity between the devices and the switch is broken Click Yes The authentication is enabled between the current switch and the connected devices with switch ports set to Enabled Or Click No and return to the Devices tab where you can add the devices to the Authenticated Devices list Changing the port authentication state for a nonmember device manageable without a CHAP Secret If the port authentication state is changed to Forced Enabled or Switch Setting from the corresponding authentication state while the E_port authentication is checked the Secret column changes its display value from No to Needed 1 2 Double click the corresponding Secret column or select the device and click the right arrow button to display the Add User dialog box Select the CHAP Secret and then click OK The corresponding Secret column displays Set The device is added to the Authentica
325. vate NOTE You must be managing the fabric in order to disable Enterprise Fabric Mode Contiguring SAN products and fabrics Configuring Fabric Binding Fabric Binding enables you to configure whether switches can merge with a selected fabric This provides security from accidental fabric merges and potential fabric disruption Fabric Binding requires the installation of a security feature called SANtegrity See SANtegrity features on page 118 for details EY NOTE You cannot disable Fabric Binding if Enterprise Fabric Mode is enabled Enabling Fabric Binding You enable Fabric Binding using the Fabric Binding dialog box After you enable Fabric Binding use the Membership List to add switches that you want to allow in the fabric 1 Select Configure gt Fabric Binding The Fabric Binding dialog box is displayed Figure 52 Fabric List Status Disabled Fabric Name 100008008840406F J Enable Disable Action Available Switches Membership List of 100008008840406F Nickname Node Name Domain Fabric Name Nickname Node Name Domain Fabric Name 1000080088 1 1000080088 1000080088 11 1000080088 1000080088 7 1000080088 gt 1000080088 29 1000080088 1000080088 3 1000080088 Figure 52 Fabric Binding dialog box Add Detached Switch lin OK Cancel Help 2 Select the Enable Disable check box for the fabric for which you want to config
326. ve optical transceivers installed The Open Trunking feature key has not been enabled This message is displayed if the optional Open Trunking feature is installed Click a firmware version in the dialog box to select it then perform the action again Informational message only no action is required Set the director or switch offline and install the firmware Use a port range that is valid for the ports installed Enter the feature key into the Configure Feature Key dialog box and enable the key If you require a feature key see your account representative HA Fabric Manager user guide 249 Table 31 Performing this operation will change the current state to Offline Performing this operation will change the current state to Online Performing this action will overwrite the date time on the switch Periodic Date Time synchronization must be cleared Port Binding was removed from attached devices that are also participating in Switch Binding Port cannot swap to itself Port diagnostics cannot be performed on an inactive port Port speeds cannot be configured at a higher rate than the director speed Element Manager messages continued Daan A This message requests confirmation to set the director offline This message requests confirmation to set the director online Warning that occurs when configuring the date and time through the Contigure Date and Time dialog box t
327. work drive Backing up data 58 HAFM backs up data to two alternate folders For example if the backup directory location is D Backup the backup service alternates between two backup directories D Backup and D BackupAl1t The current backup is always D Backup and contains a complete backup of the system The older backup is always D YBackupAlt If a backup cycle fails usually because the CDRW is full there may be only one directory D Backup There can also be a D BackupTemp directory which you should ignore as it can be incomplete Backing up to a CD RW To back up to a CD RW you must have CD writing software installed and the disk must be formatted by the software so that it behaves like a drive 1 Select SAN gt Options The Options dialog box is displayed Figure 24 on page 59 2 Select Backup in the Category list The currently defined directory is displayed in the Backup Output Directory box 3 Click Browse and select the hard drive and directory to which you want to back up your data The default directory is D Backup It is assumed that the D drive is a CD RW drive Using the HAFM application Browse is only available on a local client not a remote client Category vols Configuration Backup Output Directory Backup D iBackup OK Cancel Apply Help Figure 24 Options dialog box 4 Click Apply or OK For local clients the application verif
328. you must type or generate a secret for the current switch before you enable E_Port authentication If the CHAP Secret is defined for the current switch when you click Apply a message is displayed indicating that you have set E N_Port Authentication Method to Radius Only If you have not properly defined the secrets for all participating devices on the RADIUS Server E N_Port authentication fails and your fabric connectivity is lost HA Fabric Manager user guide 177 Understanding the Devices tab display and default settings When you access the Devices tab 1 Ensure that the node name is already discovered and displayed in a uneditable text box 2 Define the CHAP Secret for the selected switch a Click Edit Secret The Add Device dialog box is displayed Figure 108 Node Name 100008008840428D CHAP Secret Generate Retype Secret OK Cancel Figure 108 Add Device Edit Secret dialog box b Click Generate to automatically generate a CHAP Secret and place it in the CHAP Secret and Retype Secret boxes Or Type the secret in the CHAP Secret box and retype that Secret in the Retype Secret box c Click OK 3 If the initial state of a fabric is not configured to enable device authentication the Enable E_port authentication check box is disabled To enable click the Enable E port Authentication check box 4 Click the list to the right of the check box and select Local Only Radius then Local or Radius Only The default is L
Download Pdf Manuals
Related Search
Related Contents
Graco 312065M User's Manual iq display module series 2 (iqdm series 2) - Club Car Side-by Single Package Air Conditioner SVC MANUAL(Exploded Manual de Usuario User Manual microPower Curtis DVD1096 User's Manual USER GUIDE GoCartVac® Service Manual 案 - 上伊那広域連合 Samsung AP30Z0AX User Manual Copyright © All rights reserved.
Failed to retrieve file