The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.
This chapter describes the Cisco NX-OS Fibre Channel, virtual Fibre Channel, and Fibre Channel over Ethernet (FCoE) commands that begin with Z.
To clone a zone name, use the zone clone command.
zone clone current-zone-name new-zone-name vsan vsan-id
Zone attribute group name. The name can be a maximum of 64 characters. |
|
|
|
---|---|
Use the no form of the zone name (configuration mode) command to delete the zone name.
This example shows how to create a clone of the original zone group called origZone into the clone zone group cloneZone on VSAN 45:
|
|
---|---|
To commit zoning changes to a Virtual SAN (VSAN), use the zone commit command. To negate the command, use the no form of this command.
zone commit vsan vsan-id [ force ]
no zone commit vsan vsan-id [ force ]
|
|
---|---|
Use the no form of the zone commit command to clear a session lock on a switch where the lock originated.
This example shows how to commit zoning changes to VSAN 200:
|
|
---|---|
To compact a zone database in a Virtual SAN (VSAN), use the zone compact command.
|
|
8000 zones are supported in a Cisco Nexus 5000 Series switch.
If you attempt to merge VSANs, the merge will fail if more than 2000 zones are present in a VSAN and the neighboring VSAN cannot support more than 2000 zones.
Activation will fail if more than 2000 zones are present in the VSAN and one or more switches in the fabric cannot support more than 2000 zones.
This example shows how to compact a zone database in VSAN 1:
|
|
---|---|
Displays detailed analysis and statistical information about the zoning database. |
To copy the active zone set to the full zone set, use the zone copy command. To negate the command or revert to the factory defaults, use the no form of this command.
zone copy active-zoneset full-zoneset [ include-auto-zones ] vsan vsan-id
zone copy vsan vsan-id active-zoneset { bootflash: | ftp: | full-zoneset | scp: | sftp: | tftp: | volatile: }
|
|
This example shows how to copy the active zone set to the full zone set:
This example shows how to copy the active zone set in VSAN 3 to a remote location using SCP:
|
|
---|---|
To define whether a default zone (assigned to nodes not assigned to a created zone) permits or denies access to all nodes in the default zone, use the zone default-zone command. To negate the command or revert to the factory defaults, use the no form of this command.
zone default-zone permit vsan vsan-id
no zone default-zone permit vsan vsan-id
Sets default zoning behavior for the specified Virtual SAN (VSAN). The ID of the VSAN is from 1 to 4093. |
|
|
Use the zone default-zone permit vsan command to define the operational values for the default zone in a VSAN. This command applies to existing VSANs; it has no effect on VSANs that have not yet been created.
Use the system default zone default-zone permit command to use the default values defined for the default zone for all VSANs. The default values are used when you initially create a VSAN and it becomes active.
This example shows how to permit the default zoning in VSAN 2:
|
|
---|---|
To restrict zone database merging, use the zone merge-control restrict vsan command. To disable this feature, use the no form of this command.
zone merge-control restrict vsan vsan-id
no zone merge-control restrict vsan vsan-id
|
|
If merge control is set to restricted and the two databases are not identical, the merge fails and Inter-Switch Links (ISLs) between the switches become isolated.
This example shows how to set the zone merge control for VSAN 10 to restricted:
|
|
---|---|
To enable enhanced zoning for a Virtual SAN (VSAN), use the zone mode enhanced command. To disable this feature, use the no form of this command.
zone mode enhanced vsan vsan-id
no zone mode enhanced vsan vsan-id
|
|
Before using the zone mode enhanced command, verify that all switches in the fabric are capable of working in enhanced zoning mode. If one or more switches are not capable of working in enhanced zoning mode, the request to enable enhanced zoning mode is rejected.
When the zone mode enhanced vsan command completes successfully, the software automatically starts a session, distributes the zoning database using the enhanced zoning data structures, applies the configuration changes, and sends a release change authorization (RCA) to all switches in the fabric. All switches in the fabric then enable enhanced zoning mode.
This example shows how to enable enhanced zoning mode:
|
|
---|---|
To create a zone, use the zone name command. To negate the command or revert to the factory defaults, use the no form of this command.
zone name zone-name vsan vsan-id
member
zone name zone-name vsan vsan-id
no member
no zone name zone-name vsan vsan-id
Name of the zone. The name can be a maximum of 64 characters. |
|
|
|
Zones are assigned to zone sets. Zone sets are then activated from one switch and propagate across the fabric to all switches. Zones allow security by permitting and denying access between nodes (hosts and storage). zone name commands are entered from the configuration mode. Configure a zone for a VSAN from the config-zone mode.
Use the show wwn switch command to retrieve the switch world wide name (sWWN). If you do not provide an sWWN, the software automatically uses the local sWWN.
This example shows how to configure attributes for the specified zone (Zone1) based on the member type (pWWN, fabric pWWN, FCID, or Fibre Channel alias) and value specified:
This example shows how to configure the members for the specified zone (Zone2) based on the member type (pWWN, fabric pWWN, FCID, or Fibre Channel alias) and value specified:
|
|
---|---|
To configure a zone in a zone set, use the zone name command. To delete the zone from the zone set, use the no form of this command.
Name of the zone. The name can be a maximum of 64 characters. |
|
|
This example shows how to configure a zone in a zone set:
This example shows how to delete a zone from a zone set:
|
|
---|---|
To rename a zone, use the zone rename command.
zone rename current-name new-name vsan vsan-id
Current fcalias name. The name can be a maximum of 64 characters. |
|
New fcalias name. The name can be a maximum of 64 characters. |
|
|
|
This example shows how to rename a zone:
|
|
---|---|
To group zones under one zone set, use the zoneset command. To negate the command or revert to the factory defaults, use the no form of this command.
zoneset { activate [ name zoneset-name ] vsan vsan-id | clone zoneset-currentName zoneset-cloneName vsan vsan-id | distribute full vsan vsan-id name zoneset-name vsan vsan-id | rename current-name new-name vsan vsan-id }
no zoneset { activate [ name zoneset-name ] vsan vsan-id | clone zoneset-currentName zoneset-cloneName vsan vsan-id | distribute full vsan vsan-id name zoneset-name vsan vsan-id | rename current-name new-name vsan vsan-id }
|
|
Zones are activated by activating the parent zone set.
The zoneset distribute full vsan command distributes the operational values for the default zone to all zone sets in a VSAN. If you do not want to distribute the operation values, use the system default zone distribute full command to distribute the default values.The default values are used when you initially create a VSAN and it becomes active.
The zoneset distribute full vsan command applies to existing VSANs; it has no effect on VSANs that have not yet been created.
This example shows how to activate a zone set called zSet1 in VSAN 333:
This example shows how to clone a zone set called zSet1 into a new zone set called zSetClone in VSAN 45:
This example shows how to distribute the operational values for the default zone to all zone sets in VSAN 22:
|
|
---|---|
To merge zone set databases, use the zoneset command.
zoneset { distribute | export | import interface { fc slot / port | san-port-channel port-number }} vsan vsan-id
|
|
You can also enter the zoneset import and the zoneset export commands for a range of VSANs.
The zoneset distribute vsan vsan-id command is supported in interop 2 and interop 3 modes, and not in interop 1 mode.
This example shows how to import the zone set database from the adjacent switch connected through the VSAN 2 interface:
This example shows how to export the zone set database to the adjacent switch connected through VSAN 5:
This example shows how to distribute the zone set in VSAN 333:
|
|
---|---|