9148 Common configuration of fiber switches
Switch Basic configuration
1. Configure the switch name
switch# Config Terminel
Switch (config) # switchname SwitchA
2. Configure the management IP address of the switch
Switch (config) #
Switch (config) # interface Mgmt 0
Switch (config-if) # IP adress 192.168.100.10 255.255.255.0
Switch (config-if) # no shutdown
Interface Mgmt 0 represents the management port of the switch.
3. Configure the default gateway
Switch (config) # IP default-gateway 192.168.100.1
4. Change the password
Switch (config) # username <username> Password <*****>
5. Save the configuration
switch# Copy Running-config Startup-config
Port activation
Switch (config) # int FC1/1-10
Switch (config) # no shutdown
Configure Vsan
1. Add Vsan
Switch#config T
Switch (config) #vsan database
Switch (config-vsan-db) # Vsan 2
Switch (CONFIG-VSAN-DB) #end
The default switch already has a VSAN001, and generally does not need to create a new Vsan.
Configure Zone
1. Add a Zone
Switch#config T
Switch (config) # zone name Vnx_viewer1 Vsan 1
Switch (config-zone) # member Interface FC1/3
Switch (config-zone) # member Interface FC1/4
Switch (config-zone) # member Interface FC1/5
Switch (config-zone) # member Pwwn 22:35:00:0C:85:E9:D2:C2
Add a zone named Vnx_viewer1 and FC1/3,FC1/4,FC1/5 into this area
2. Delete a zone
Switch (config) # no zone name Vnx_viewer1 Vsan 1
Configure Zoneset
Switch#config T
Switch (config) # zoneset name Zoneset_top Vsan 1
Switch (config-zoneset) # member Vnx_viewer1
Switch (config-zoneset) # member Vnx_viewer2
Switch (config-zoneset) # member Vnx_viewer3
Switch (config-zoneset) # EXIT
Add a zoneset named Zoneset_top and join the same type of zone
Note: If a new zone is configured and added to Zoneset, Acitvate is required to take effect, the command is as follows:
Switch#config T
Switch (config) #zoneset activate name Zoneset_top Vsan 1
Multiple zoneset can be created, but only one is activated, and the other alternative
Zone Default-zone Permit
Common Check Commands
Show run displays the current configuration
Show zone displays information for the zone currently configured
Show Zoneset displays information for the currently configured Zoneset
Show interface FC1/1 Display Port FC1/1 information
Show Zone status 1 to see if the default Zone policy diagram is deny
Show Zone analysis Vsan 1 zone analyst
Show Zone analysis Active Vsan 1
Show Zone Active Displays the zone information for the current activity
Show Zoneset Active Displays the Zoneset information for the current activity
Show Vsan shows Vsan
Show Vsan 1 Membership
Show Flogi Database Detail View the WWN number of the HBA card connected to the switch port
Show license all show license
Show zone internal change event-history Vsan <vsan-id> Find the cause of zone set activation issues
Show Zone Internal Merge event-history find problems with zone merging
Execute debug command in EXEC mode
Detecting Protocol Errors
Debug Zone Change Errors <vsan-id>
Detecting Protocol Events
Debug Zone Change Events <vsan-id>
Detection Protocol Package
Debug Zone Change Packets Vsan-id
switch# Show Zone Analysis active Vsan 1
Zoning Database Analysis Vsan 1
Active ZONESET:ZS1 [*]
Activated at:08:03:35 UTC Nov 17 2005
Activated by:local [GS]
Default Zone Policy:deny
Number of devices zoned in VSAN:0/2 (Unzoned:2)
Number of Zone members RESOLVED:0/2 (UNRESOLVED:2)
Num zones:1
Number of IVR zones:0
Number of IPS zones:0
formattted size:38 bytes/2048 Kb If the formattted size exceeds the 2048k limit, the activation zone set error is caused. Workaround reduce the number of zones in the zone set.
Other Debug Commands available
Debug Zone {All |
Change {errors | events | packets} |
Database {Detail | errors | events} |
GS Errors {Errors | events | packets} |
lun-zoning {Errors | events | packets} |
Merge {errors | events | packets} |
MTS Notifications |
PSS {errors | events} | |
read-only-zoning {Errors | events | packets} |
Tcam Errors {Errors | events | packets} |
Transit {errors | events}} [Vsan Vsan-id]
Configuration of the Trunking
By default, the Trunking protocol for each port of the switch is enabled, and the port of the switch interconnect should operate under E mode, if there are two switches connected to each other, enable trunking for example FC1/1 and FC1/2.
Specifies that the port is an e operating mode
SwitchA (config) # interface FC1/1
SwitchA (config-if) # Switchport mode E
SwitchB (config) # interface FC1/2
SwitchB (config-if) # Switchport mode E
Other configurations
1. Clear the configuration
Switch#write Erase
2. Setting the configuration Port timeout
Switch (config) # line console
Switch (config-console) # Exec-timeout 60
Switch (config) # line vty
Switch (config-line) # Exec-timeout 60
3. Installation and removal license
switch# Install license Bootflash:license-file
switch# Clear License License-file
switch# Clear License All
4. Disable and enable Telnet and SSH
switch# Config T
Switch (config) # no Telnet server enable
Switch (config) # Telnet Server enable
switch# Config T
Switch (config) # SSH server enable
Switch (config) # no SSH server enable
5. Download the configuration file
switch# Copy <scheme>://<url> System:running-config
switch# Copy tftp://172.16.10.1/237.img bootflash:237.img
6. Delete Vsan
switch# Config T
Switch (config) # Vsan database
switch-config-db# Vsan 5
Switch (config-vsan-db) # no Vsan 5
Overview
Partitioning allows access control between the storage device and the host. Creating zones increases the security of the network and prevents data loss or corruption.
A zone set includes one or more zones in a Vsan. An area set in all switch structures that can be activated or closed as a single entity, and only a single set of zones can be activated in a vsan.
A region is made up of multiple members. Members in one area can access each other, and members in different regions cannot access each other.
Troubleshooting Detection List
Verify that you have an active area set.
Verify that the host and storage devices are in the same zone.
The validation area is part of the active zone set.
If you do not use partitions, verify that the default zone is allowed.
If you have a Cisco MDS 9020 fabric, make sure you have only pwwn base zone.
Cisco MD9148 Storage Switch Common commands