2013 - FC SAN - Cisco MDS 9124e (Blade Switch) - konfigurácia SAN prepínača
Anglická verzia tohto dokumentu: 2013 - FC SAN - Cisco MDS 9124e (Blade Switch) - configuring the SAN switch.
|=-------------------------------------------------=[ FC SAN ]=-----------------------------------------------=| +--------------------------------------------------------------------------------------------------------------+ | | | Storage: 1x HP 3PAR 7400 | | FC SAN: 2x Cisco MDS9124e (Blade switch) | | Server: 4x HP BL660gen8, 1x HP BL460gen8 | | | | Zadanie: Konfiguracia XenServer servera HV01 | | | +--------------------------------------------------------------------------------------------------------------+ |=------------------------------------------------=[ LH 2013 ]=-----------------------------------------------=|
SCHEMA ZAPOJENIA
+-----------------------+
| |
| HP 3PAR 7400 |
| |
+-----------+-----------+
| | |
| | |
|Controller1|Controller2|
| | |
| | |
| FC PORTS | FC PORTS |
| | |
|0:1:1 0:1:2|1:1:1 1:1:2| -> HP-> Node:Slot:Port
| C0P0 C0P1 | C1P0 C1P1 | -> Generic-> ControllerPort
+---^----^--+---^----^--+
| | | |
| | | +------------------------------+
| | +------------------------------+ |
DC| |DMZ DC| |DMZ
| | | |
| | | |
+-----------------------------------|----|-------------------------------------|----|----------+
| 11| 12| 21| 22| |
| +----------------------------+----+---+ +----------------------------+----+--+ |
| |HV01 HV02 HV03 HV04 MGMT01 EXT1 EXT2 | |HV01 HV02 HV03 HV04 MGMT01 EXT1 EXT2| |
| SW1 |BAY1 BAY2 BAY3 BAY4 BAY5 | |BAY1 BAY2 BAY3 BAY4 BAY5 | SW2 |
| +-^----^----^-----^----^--------------+ +--^----^----^---^-----^-------------+ |
| 11| 11| 12| 12| 11| 21| 21| 22| 22| 21| |
| | | | | | +-----------------+ | | | | |
| | | | | | |+---------------------+ | | | |
| | | | | | ||+-----------------------------------+ |
| | | | | | ||| | | |
| | | | +--------------------------+ +--------+ | |
| | | +-------------------------------+| |+-----------+ |
| | +-------------+ | ||| || || |
| +-----------------+| | ||| || || |
| || | ||| || || |
| +-++-+----+++-+ +------++-++--+ |
| | | | | |
| +----> VSAN DC | | VSAN DMZ | |
| |+---> | | | |
| || +-^^------^^--+ +--^^-----^^--+ |
| || || || || || |
| || || || || || |
| || || || || || |
| || || || || || |
| 11||21 11||21 11||21 12||22 12||22 |
| +-++-+ +-++-+ +--++--+ +-++-+ +-++-+ |
| |HV01| |HV02| |MGMT01| |HV03| |HV04| |
| +----+ +----+ +------+ +----+ +----+ |
| HP c7000 |
+----------------------------------------------------------------------------------------------+Zakladna konfiguracia
Reset to default
--------------------------------------------------------------------------------------------------------
FCSwitch1# write erase
--------------------------------------------------------------------------------------------------------
Warning: This command will erase the startup-configuration.
Do you wish to proceed anyway? (y/n) [n] y
FCSwitch1# reload
--------------------------------------------------------------------------------------------------------
This command will reboot the system. (y/n)? [n] y
Komplexivita hesiel
Do you want to enforce secure password standard (yes/no) [y]:
---- System Admin Account Setup ----
Do you want to enforce secure password standard (yes/no) [y]: y
Enter the password for "admin": HESLOHESLO
Confirm the password for "admin": HESLOHESLO
---- Basic System Configuration Dialog ----
This setup utility will guide you through the basic configuration of
the system. Setup configures only enough connectivity for management
of the system.
Please register Cisco MDS 9000 Family devices promptly with your
supplier. Failure to register may affect response times for initial
service calls. MDS devices must be registered to receive entitled
support services.
Press Enter at anytime to skip a dialog. Use ctrl-c at anytime
to skip the remaining dialogs.
Would you like to enter the basic configuration dialog (yes/no): no
--------------------------------------------------------------------------------------------------------
Nastavime heslo pre uzivatela "admin" (nie je nutne, nakolko sme heslo zmenili zakladnym setup wizardom)
--------------------------------------------------------------------------------------------------------
FCSwitch1# username admin password 5 $1$j01Wz3jA$ZVEWbZ4l8J66/2fOzn8W51 role network-admin
Nastavime manazmentovu IP adresu FC prepinaca a default branu
--------------------------------------------------------------------------------------------------------
FCSwitch1# interface mgmt0
ip address 10.141.176.14 255.255.255.0
FCSwitch1# ip default-gateway 10.141.176.254
Zapneme SSH server
--------------------------------------------------------------------------------------------------------
FCSwitch1# feature ssh
Nastavime meno prepinaca
--------------------------------------------------------------------------------------------------------
FCSwitch1# switchname FCSwitch1
Vygenerujeme si VSAN-y
--------------------------------------------------------------------------------------------------------
FCSwitch1# vsan database
vsan 11 name MGMT_DC
vsan 12 name DMZ
Priradime fyzicke rozhrania do VSAN-y
--------------------------------------------------------------------------------------------------------
FCSwitch1# vsan database
vsan 11 interface ext1
vsan 12 interface ext2
vsan 11 interface bay1
vsan 11 interface bay2
vsan 12 interface bay3
vsan 12 interface bay4
vsan 11 interface bay5
Nastavime fyzicke porty (nie je nutne, default su nastavene porty na typ portu F)
--------------------------------------------------------------------------------------------------------
FCSwitch1# interface ext1
switchport mode F
no shutdown
interface ext2
switchport mode F
no shutdown
interface bay1
switchport mode F
no shutdown
interface bay2
switchport mode F
no shutdown
interface bay3
switchport mode F
no shutdown
interface bay4
switchport mode F
no shutdown
interface bay5
switchport mode F
no shutdown
Alternativa k suboru /etc/hosts (lokalne rozlisovanie/preklad domenovych mien)
--------------------------------------------------------------------------------------------------------
FCSwitch1# ip domain-lookup
ip host FCSwitch1 10.141.176.14Zoznam zariadeni, ktore su nalogovane do fabricu
FCSwitch1# sh flogi database
--------------------------------------------------------------------------------------------------------
--------------------------------------------------------------------------------
INTERFACE VSAN FCID PORT NAME NODE NAME
--------------------------------------------------------------------------------
bay1 11 0x2a0000 50:01:43:80:26:e9:69:c0 50:01:43:80:26:e9:69:c1
bay2 11 0x2a0100 50:01:43:80:26:e9:69:d4 50:01:43:80:26:e9:69:d5
bay3 12 0x660000 50:01:43:80:26:e9:6a:90 50:01:43:80:26:e9:6a:91
bay4 12 0x660200 50:01:43:80:26:e9:6a:92 50:01:43:80:26:e9:6a:93
bay5 11 0x2a0200 50:01:43:80:26:e8:a8:2c 50:01:43:80:26:e8:a8:2d
ext1 11 0x2a0300 21:12:00:02:ac:00:72:dd 2f:f7:00:02:ac:00:72:dd
ext2 12 0x660300 21:11:00:02:ac:00:72:dd 2f:f7:00:02:ac:00:72:dd
Total number of flogi = 7.
--------------------------------------------------------------------------------------------------------Zoznam zariadeni, ktore su nalogovane do fabricu - dodatocne informacie (Initiator, Target, NodeName)
FCSwitch1# sh fcns database
--------------------------------------------------------------------------------------------------------
VSAN 11:
--------------------------------------------------------------------------
FCID TYPE PWWN (VENDOR) FC4-TYPE:FEATURE
--------------------------------------------------------------------------
0x2a0000 N 50:01:43:80:26:e9:69:c0 (HP) scsi-fcp:init
0x2a0100 N 50:01:43:80:26:e9:69:d4 (HP) scsi-fcp:init
0x2a0200 N 50:01:43:80:26:e8:a8:2c (HP) scsi-fcp:init
0x2a0300 N 21:12:00:02:ac:00:72:dd scsi-fcp:target
Total number of entries = 4
VSAN 12:
--------------------------------------------------------------------------
FCID TYPE PWWN (VENDOR) FC4-TYPE:FEATURE
--------------------------------------------------------------------------
0x660000 N 50:01:43:80:26:e9:6a:90 (HP) scsi-fcp:init
0x660200 N 50:01:43:80:26:e9:6a:92 (HP) scsi-fcp:init
0x660300 N 21:11:00:02:ac:00:72:dd scsi-fcp:target
Total number of entries = 3
--------------------------------------------------------------------------------------------------------Nastavime FC aliasy pre servery
FC alias pre server HV01, ktory je umiestneny v BAY1 a patri do VSAN 11 (DC)
--------------------------------------------------------------------------------------------------------
FCSwitch1(config)# fcalias name HV01 vsan 11
FCSwitch1(config-fcalias)# member pwwn 50:01:43:80:26:e9:69:c0
--------------------------------------------------------------------------------------------------------
FC alias pre server HV02, ktory je umiestneny v BAY2 a patri do VSAN 11 (DC)
--------------------------------------------------------------------------------------------------------
FCSwitch1(config)# fcalias name HV02 vsan 11
FCSwitch1(config-fcalias)# member pwwn 50:01:43:80:26:e9:69:d4
--------------------------------------------------------------------------------------------------------
FC alias pre server HV03, ktory je umiestneny v BAY3 a patri do VSAN 12 (DMZ)
--------------------------------------------------------------------------------------------------------
FCSwitch1(config)# fcalias name HV03 vsan 12
FCSwitch1(config-fcalias)# member pwwn 50:01:43:80:26:e9:6a:90
--------------------------------------------------------------------------------------------------------
FC alias pre server HV03, ktory je umiestneny v BAY4 a patri do VSAN 12 (DMZ)
--------------------------------------------------------------------------------------------------------
FCSwitch1(config)# fcalias name HV04 vsan 12
FCSwitch1(config-fcalias)# member pwwn 50:01:43:80:26:e9:6a:92
--------------------------------------------------------------------------------------------------------
FC alias pre server MGMT01, ktory je umiestneny v BAY5 a patri do VSAN 11 (DC)
--------------------------------------------------------------------------------------------------------
FCSwitch1(config)# fcalias name MGMT01 vsan 11
FCSwitch1(config-fcalias)# member pwwn 50:01:43:80:26:e8:a8:2c
--------------------------------------------------------------------------------------------------------Nastavime FC aliasy pre diskove polia
FC alias pre storage - VSAN DC (11)
--------------------------------------------------------------------------------------------------------
FCSwitch1(config)# fcalias name Storage1-C0P0 vsan 11
FCSwitch1(config-fcalias)# member pwwn 21:12:00:02:ac:00:72:dd
--------------------------------------------------------------------------------------------------------
FC alias pre storage - VSAN DMZ (12)
--------------------------------------------------------------------------------------------------------
FCSwitch1(config)# fcalias name Storage1-C0P1 vsan 12
FCSwitch1(config-fcalias)# member pwwn 21:11:00:02:ac:00:72:dd
--------------------------------------------------------------------------------------------------------Nastavime zonovanie (single-initiator zoning) pre DMZ (VSAN 12)
Zona s nazvom "HV03-Storage1" pre server HV03 a diskove pole v zone DMZ (VSAN12)
--------------------------------------------------------------------------------------------------------
FCSwitch1(config)# zone name HV03-Storage1 vsan 12
FCSwitch1(config-zone)# member fcalias Storage1-C0P1
FCSwitch1(config-zone)# member fcalias HV03
FCSwitch1(config-zone)# exit
--------------------------------------------------------------------------------------------------------
Zona s nazvom "HV04-Storage1" pre server HV04 a diskove pole v zone DMZ (VSAN12)
--------------------------------------------------------------------------------------------------------
FCSwitch1(config)# zone name HV04-Storage1 vsan 12
FCSwitch1(config-zone)# member fcalias Storage1-C0P1
FCSwitch1(config-zone)# member fcalias HV04
FCSwitch1(config-zone)# exit
--------------------------------------------------------------------------------------------------------Nastavime zonovanie (single-initiator zoning) pre DC (VSAN 11)
Zona s nazvom "HV01-Storage1" pre server HV01 a diskove pole v zone DC (VSAN11)
--------------------------------------------------------------------------------------------------------
FCSwitch1(config)# zone name HV01-Storage1 vsan 11
FCSwitch1(config-zone)# member fcalias Storage1-C0P0
FCSwitch1(config-zone)# member fcalias HV01
FCSwitch1(config-zone)# exit
--------------------------------------------------------------------------------------------------------
Zona s nazvom "HV02-Storage1" pre server HV02 a diskove pole v zone DC (VSAN11)
--------------------------------------------------------------------------------------------------------
FCSwitch1(config)# zone name HV02-Storage1 vsan 11
FCSwitch1(config-zone)# member fcalias Storage1-C0P0
FCSwitch1(config-zone)# member fcalias HV02
FCSwitch1(config-zone)# exit
--------------------------------------------------------------------------------------------------------
Zona s nazvom "MGMT01-Storage1" pre server MGMT01 a diskove pole v zone DC (VSAN11)
--------------------------------------------------------------------------------------------------------
FCSwitch1(config)# zone name MGMT01-Storage1 vsan 11
FCSwitch1(config-zone)# member fcalias Storage1-C0P0
FCSwitch1(config-zone)# member fcalias MGMT01
FCSwitch1(config-zone)# exit
--------------------------------------------------------------------------------------------------------Vytvorenie zonesetu s nazvom "PROD-DMZ"
Vytvorime zoneset s nazvom "PROD-DMZ" pre VSAN 12 = naplnime tento zoneset zonami, ktore sme si definovali
--------------------------------------------------------------------------------------------------------
FCSwitch1(config)# zoneset name PROD-DMZ vsan 12
FCSwitch1(config-zoneset)# member HV03-Storage1
FCSwitch1(config-zoneset)# member HV04-Storage1
FCSwitch1(config-zoneset)# exit
--------------------------------------------------------------------------------------------------------Vytvorenie zonesetu s nazvom "PROD-DC"
Vytvorime zoneset s nazvom "PROD-DC" pre VSAN 11 = naplnime tento zoneset zonami, ktore sme si definovali
--------------------------------------------------------------------------------------------------------
FCSwitch1(config)# zoneset name PROD-DC vsan 11
FCSwitch1(config-zoneset)# member HV01-Storage1
FCSwitch1(config-zoneset)# member HV02-Storage1
FCSwitch1(config-zoneset)# member MGMT01-Storage1
FCSwitch1(config-zoneset)# exit
--------------------------------------------------------------------------------------------------------Aktivujeme zoneset s nazvom "PROD-DMZ" pre DMZ (VSAN 12)
Pozrieme sa ake zonovanie je aktualne aktivne pre VSAN 12
--------------------------------------------------------------------------------------------------------
FCSwitch1(config)# show zoneset active vsan 12
--------------------------------------------------------------------------------------------------------
zoneset name ZONESET_V12 vsan 12
zone name Z_FC1_b3_FC1_e2_V12 vsan 12
* fcid 0x660000 [interface bay3 swwn 20:00:54:7f:ee:d7:68:18]
* fcid 0x660200 [interface bay4 swwn 20:00:54:7f:ee:d7:68:18]
* fcid 0x660300 [interface ext2 swwn 20:00:54:7f:ee:d7:68:18]
--------------------------------------------------------------------------------------------------------
Aktivujeme zoneset s nazvom "PROD-DMZ"
--------------------------------------------------------------------------------------------------------
FCSwitch1(config)# zoneset activate name PROD-DMZ vsan 12
--------------------------------------------------------------------------------------------------------
WARNING: You are trying to activate zoneset PROD-DMZ, which is different from current active zoneset ZONESET_V12. Do you want to continue? (y/n) [n] y
Zoneset activation initiated. check zone status
--------------------------------------------------------------------------------------------------------
Skontrolujeme ci sa zoneset pre VSAN 12 uspesne aktivoval
Zobrazi aktualne aktivne zonovanie pre VSAN 12
--------------------------------------------------------------------------------------------------------
FCSwitch1(config)# show zoneset active vsan 12
--------------------------------------------------------------------------------------------------------
zoneset name PROD-DMZ vsan 12
zone name HV03-Storage1 vsan 12
* fcid 0x660000 [pwwn 50:01:43:80:26:e9:6a:90]
* fcid 0x660200 [pwwn 50:01:43:80:26:e9:6a:92]
* fcid 0x660300 [pwwn 21:11:00:02:ac:00:72:dd]
--------------------------------------------------------------------------------------------------------
Vysledok = OK
Zobrazenie vsetkych (aktivnych aj neaktivnych) zonovacich nastaveni/moznosti pre VSAN 12
--------------------------------------------------------------------------------------------------------
FCSwitch1(config)# sh run zone vsan 12
--------------------------------------------------------------------------------------------------------
!Command: show running-config zone vsan 12
!Time: Fri Dec 6 04:31:15 2013
version 5.2(8)
!Active Zone Database Section for vsan 12
zone name HV03-Storage1 vsan 12
member pwwn 50:01:43:80:26:e9:6a:90
member pwwn 21:11:00:02:ac:00:72:dd
zone name HV04-Storage1 vsan 12
member pwwn 50:01:43:80:26:e9:6a:92
member pwwn 21:11:00:02:ac:00:72:dd
zoneset name PROD-DMZ vsan 12
member HV03-Storage1
member HV04-Storage1
zoneset activate name PROD-DMZ vsan 12
do clear zone database vsan 12
!Full Zone Database Section for vsan 12
fcalias name HV03 vsan 12
member pwwn 50:01:43:80:26:e9:6a:90
fcalias name HV04 vsan 12
member pwwn 50:01:43:80:26:e9:6a:92
fcalias name Storage1-C0P1 vsan 12
member pwwn 21:11:00:02:ac:00:72:dd
zone name Z_FC1_b3_FC1_e2_V12 vsan 12
member interface bay3 swwn 20:00:54:7f:ee:d7:68:18
member interface ext2 swwn 20:00:54:7f:ee:d7:68:18
zone name HV03-Storage1 vsan 12
member fcalias HV03
member fcalias Storage1-C0P1
zone name HV04-Storage1 vsan 12
member fcalias HV04
member fcalias Storage1-C0P1
zoneset name ZONESET_V12 vsan 12
member Z_FC1_b3_FC1_e2_V12
zoneset name PROD-DMZ vsan 12
member HV03-Storage1
member HV04-Storage1
--------------------------------------------------------------------------------------------------------Aktivujeme zoneset s nazvom "PROD-DC" pre DC (VSAN 11)
Pozrieme sa ake zonovanie je aktualne aktivne pre VSAN 11
--------------------------------------------------------------------------------------------------------
FCSwitch1(config)# show zoneset active vsan 11
--------------------------------------------------------------------------------------------------------
zoneset name ZONESET_V11 vsan 11
zone name Z_FC1_b1_FC1_e1_V11 vsan 11
* fcid 0x2a0000 [interface bay1 swwn 20:00:54:7f:ee:d7:68:18]
* fcid 0x2a0300 [interface ext1 swwn 20:00:54:7f:ee:d7:68:18]
zone name Z_FC1_b2_FC1_e1_V11 vsan 11
* fcid 0x2a0100 [interface bay2 swwn 20:00:54:7f:ee:d7:68:18]
* fcid 0x2a0300 [interface ext1 swwn 20:00:54:7f:ee:d7:68:18]
zone name Z_FC1_b5_FC1_e1_V11 vsan 11
* fcid 0x2a0200 [interface bay5 swwn 20:00:54:7f:ee:d7:68:18]
* fcid 0x2a0300 [interface ext1 swwn 20:00:54:7f:ee:d7:68:18]
--------------------------------------------------------------------------------------------------------
Aktivujeme zoneset s nazvom "PROD-DC"
--------------------------------------------------------------------------------------------------------
FCSwitch1(config)# zoneset activate name PROD-DC vsan 11
--------------------------------------------------------------------------------------------------------
WARNING: You are trying to activate zoneset PROD-DC, which is different from current active zoneset ZONESET_V11. Do you want to continue? (y/n) [n] y
Zoneset activation initiated. check zone status
--------------------------------------------------------------------------------------------------------
Skontrolujeme ci sa zoneset pre VSAN 11 uspesne aktivoval
Zobrazi aktualne aktivne zonovanie pre VSAN 11
--------------------------------------------------------------------------------------------------------
FCSwitch1(config)# show zoneset active vsan 11
--------------------------------------------------------------------------------------------------------
zoneset name PROD-DC vsan 11
zone name HV01-Storage1 vsan 11
* fcid 0x2a0000 [pwwn 50:01:43:80:26:e9:69:c0]
* fcid 0x2a0300 [pwwn 21:12:00:02:ac:00:72:dd]
zone name HV02-Storage1 vsan 11
* fcid 0x2a0100 [pwwn 50:01:43:80:26:e9:69:d4]
* fcid 0x2a0300 [pwwn 21:12:00:02:ac:00:72:dd]
zone name MGMT01-Storage1 vsan 11
* fcid 0x2a0200 [pwwn 50:01:43:80:26:e8:a8:2c]
* fcid 0x2a0300 [pwwn 21:12:00:02:ac:00:72:dd]
--------------------------------------------------------------------------------------------------------
Vysledok = OK
Zobrazenie vsetkych (aktivnych aj neaktivnych) zonovacich nastaveni/moznosti pre VSAN 11
--------------------------------------------------------------------------------------------------------
FCSwitch1(config)# sh run zone vsan 11
--------------------------------------------------------------------------------------------------------
!Command: show running-config zone vsan 11
!Time: Fri Dec 6 05:28:58 2013
version 5.2(8)
!Active Zone Database Section for vsan 11
zone name HV01-Storage1 vsan 11
member pwwn 50:01:43:80:26:e9:69:c0
member pwwn 21:12:00:02:ac:00:72:dd
zone name HV02-Storage1 vsan 11
member pwwn 50:01:43:80:26:e9:69:d4
member pwwn 21:12:00:02:ac:00:72:dd
zone name MGMT01-Storage1 vsan 11
member pwwn 50:01:43:80:26:e8:a8:2c
member pwwn 21:12:00:02:ac:00:72:dd
zoneset name PROD-DC vsan 11
member HV01-Storage1
member HV02-Storage1
member MGMT01-Storage1
zoneset activate name PROD-DC vsan 11
do clear zone database vsan 11
!Full Zone Database Section for vsan 11
fcalias name HV01 vsan 11
member pwwn 50:01:43:80:26:e9:69:c0
fcalias name HV02 vsan 11
member pwwn 50:01:43:80:26:e9:69:d4
fcalias name MGMT01 vsan 11
member pwwn 50:01:43:80:26:e8:a8:2c
fcalias name Storage1-C0P0 vsan 11
member pwwn 21:12:00:02:ac:00:72:dd
zone name Z_FC1_b1_FC1_e1_V11 vsan 11
member interface bay1 swwn 20:00:54:7f:ee:d7:68:18
member interface ext1 swwn 20:00:54:7f:ee:d7:68:18
zone name Z_FC1_b2_FC1_e1_V11 vsan 11
member interface bay2 swwn 20:00:54:7f:ee:d7:68:18
member interface ext1 swwn 20:00:54:7f:ee:d7:68:18
zone name Z_FC1_b5_FC1_e1_V11 vsan 11
member interface bay5 swwn 20:00:54:7f:ee:d7:68:18
member interface ext1 swwn 20:00:54:7f:ee:d7:68:18
zone name HV01-Storage1 vsan 11
member fcalias HV01
member fcalias Storage1-C0P0
zone name HV02-Storage1 vsan 11
member fcalias HV02
member fcalias Storage1-C0P0
zone name MGMT01-Storage1 vsan 11
member fcalias MGMT01
member fcalias Storage1-C0P0
zoneset name ZONESET_V11 vsan 11
member Z_FC1_b1_FC1_e1_V11
member Z_FC1_b2_FC1_e1_V11
member Z_FC1_b5_FC1_e1_V11
zoneset name PROD-DC vsan 11
member HV01-Storage1
member HV02-Storage1
member MGMT01-Storage1
--------------------------------------------------------------------------------------------------------Port Security
Aktivujeme funkcionalitu Port-Security
--------------------------------------------------------------------------------------------------------
FCwitch1(config)# feature port-security
ENTERPRISE_PKG license not installed. Port Security feature will be shut down after grace period of approximately 119 day(s).
Vymenujeme VVPN identifikatory, ktore sa mozu vyskytovat na danych fyzickych portoch pre VSAN 21
--------------------------------------------------------------------------------------------------------
FCwitch1(config)# port-security database vsan 11
FCwitch1(config-port-security)# pwwn 50:01:43:80:26:e9:69:c0 interface bay 1
FCwitch1(config-port-security)# pwwn 50:01:43:80:26:e9:69:d4 interface bay 2
FCwitch1(config-port-security)# pwwn 50:01:43:80:26:e8:a8:2c interface bay 5
FCwitch1(config-port-security)# pwwn 21:12:00:02:ac:00:72:dd interface ext 1
FCwitch1(config-port-security)# exit
Vymenujeme VVPN identifikatory, ktore sa mozu vyskytovat na danych fyzickych portoch pre VSAN 22
--------------------------------------------------------------------------------------------------------
FCwitch1(config)# port-security database vsan 12
FCwitch1(config-port-security)# pwwn 50:01:43:80:26:e9:6a:90 interface bay 3
FCwitch1(config-port-security)# pwwn 50:01:43:80:26:e9:6a:92 interface bay 4
FCwitch1(config-port-security)# pwwn 21:11:00:02:ac:00:72:dd interface ext 2
FCwitch1(config-port-security)# exit
Aktivujeme port-security pre danu VSAN (11 = DC)
!!! Poznamka : !!!
Ked nechceme nechat prepinac v uciacom/neintruzivnom rezime nezabudneme na klucove slovo "no-auto-learn"
--------------------------------------------------------------------------------------------------------
FCwitch1(config)# port-security activate vsan 11 no-auto-learn
Aktivujeme port-security pre danu VSAN (12 = DMZ)
--------------------------------------------------------------------------------------------------------
FCwitch1(config)# port-security activate vsan 12 no-auto-learn
Skontrolujeme port-security databazu pre VSAN 11
--------------------------------------------------------------------------------------------------------
FCwitch1(config)# sh port-security database vsan 11
--------------------------------------------------------------------------------------------------------
--------------------------------------------------------------------------------
VSAN Logging-in Entity Logging-in Point (Interface)
--------------------------------------------------------------------------------
11 50:01:43:80:26:e9:69:c0(pwwn) 20:0d:54:7f:ee:d7:68:18(bay1)*
11 50:01:43:80:26:e9:69:d4(pwwn) 20:0f:54:7f:ee:d7:68:18(bay2)*
11 50:01:43:80:26:e8:a8:2c(pwwn) 20:05:54:7f:ee:d7:68:18(bay5)*
11 21:12:00:02:ac:00:72:dd(pwwn) 20:15:54:7f:ee:d7:68:18(ext1)*
[Total 4 entries]
Skontrolujeme aktivnu port-security databazu pre VSAN 11
--------------------------------------------------------------------------------------------------------
FCwitch1(config)# sh port-security database active vsan 11
--------------------------------------------------------------------------------------------------------
--------------------------------------------------------------------------------
VSAN Logging-in Entity Logging-in Point (Interface) Learnt
--------------------------------------------------------------------------------
11 50:01:43:80:26:e9:69:c0(pwwn) 20:0d:54:7f:ee:d7:68:18(bay1)*
11 50:01:43:80:26:e9:69:d4(pwwn) 20:0f:54:7f:ee:d7:68:18(bay2)*
11 50:01:43:80:26:e8:a8:2c(pwwn) 20:05:54:7f:ee:d7:68:18(bay5)*
11 21:12:00:02:ac:00:72:dd(pwwn) 20:15:54:7f:ee:d7:68:18(ext1)*
[Total 4 entries]
Skontrolujeme narusenia bezpecnostnej politiky pre port-security
--------------------------------------------------------------------------------------------------------
FCwitch1(config)# sh port-security violations
--------------------------------------------------------------------------------------------------------
-------------------------------------------------------------------------------
VSAN Interface Logging-in Entity Last-Time [Repeat count]
-------------------------------------------------------------------------------
Skontrolujeme stav port-security nastaveni pre vsetky VSAN-y
--------------------------------------------------------------------------------------------------------
FCwitch1(config)# sh port-security status
--------------------------------------------------------------------------------------------------------
Fabric Distribution Disabled
VSAN 1 :No Active database, learning is disabled, No Session
VSAN 11 :Activated database, learning is disabled, No Session
VSAN 12 :Activated database, learning is disabled, No Session
Skontrolujeme stav port-security nastaveni pre VSAN 11
--------------------------------------------------------------------------------------------------------
FCwitch1(config)# sh port-security status vsan 11
--------------------------------------------------------------------------------------------------------
Fabric Distribution Disabled
VSAN 11 :Activated database, learning is disabled, No Session