-
Cisco MDS 9000 Family CLI Configuration Guide, Release 3.3(3)
-
Index
-
New and Changed Information
-
Preface
- Getting Started
- Installation and Switch Management
- Switch Configuration
-
Fabric Configuration
-
Configuring and Managing VSANs
-
SAN Device Virtualization
-
Creating Dynamic VSANs
-
Configuring Inter-VSAN Routing
-
Distributing Device Alias Services
-
Configuring Fibre Channel Routing Services and Protocols
-
Managing FLOGI, Name Server, FDMI, and RSCN Databases
-
Discovering SCSI Targets
-
Configuring FICON
-
Advanced Features and Concepts
-
Configuring and Managing Zones
-
-
Security
-
Configuring FIPS
-
Configuring Users and Common Roles
-
Configuring SNMP
-
Configuring RADIUS and TACACS+
-
Configuring IPv4 and IPv6 Access Control Lists
-
Configuring Certificate Authorities and Digital Certificates
-
Configuring IPsec Network Security
-
Configuring FC-SP and DHCHAP
-
Configuring Port Security
-
Configuring Fabric Binding
-
- IP Services
- Intelligent Storage Services
- Network and Switch Monitoring
- Traffic Management
- Troubleshooting
-
Configuration Limits for Cisco MDS SAN-OS Release 3.x
-
Feedback
Table Of Contents
New and Changed Information
This document provides release-specific information for each new and changed feature in the Cisco MDS SAN-OS Release 3.x software. The Cisco MDS 9000 Family CLI Configuration Guide is updated to address each new and changed feature in the Cisco MDS SAN-OS Release 3.x software. The latest version of this document is available at the following Cisco Systems website:
http://www.cisco.com/en/US/products/ps5989/products_installation_and_configuration_guides_list.html
Tip
The configuration guides created for earlier releases are also listed at the aforementioned website. Each guide addresses the features introduced in or available in those releases. Select and view the configuration guide that pertains to the software installed in your switch.
To check for additional information about Cisco MDS SAN-OS Release 3.x, refer to the Cisco MDS 9000 Family Release Notes available at the following Cisco Systems website:
http://www.cisco.com/en/US/products/ps5989/prod_release_notes_list.htmlTable 1-1 summarizes the new and changed features for the Cisco MDS 9000 Family CLI Configuration Guide, Release 3.x, and tells you where they are documented. The table includes a brief description of each new feature and the release in which the change occurred.
Table 1-1 New and Changed Features for Release 3.x
EMC Email Home
EMC Email Home configuration information was added to the CallHome chapter.
3.3(3)
First and Last Core
Added updates.on First and Last core commands and Verification.
3.3(1a)
Common Information Model
Added commands for displaying Common Information Model.
3.3(1a)
FlexAttach Virtual pWWN
New chapter added for this new feature.
3.3(1a)
IP Network Simulator
Added a note on IP Network Simulator support for Multiservice Module (MSM) and the Multiservice Modular Switch.
3.3(1a)
About SAN Ext Tuner
Added a note on SAN support for Multiservice Module (MSM) and the Multiservice Modular Switch.
3.3(1a)
NPV Traffic Management
Added inforamton on NPV Traffic Managment throughtout the NPV chapter.
3.3(1a)
Configuring SNMP Users from the CLI
Removed des from the command switch(config)# snmp-server user user1 role1 auth md5 0xab0211gh priv 0x45abf342 localizedkey in To create or modify passwords for SNMP users from the CLI.
3.3(1a)
Migrating from Supervisor-1 Modules to Supervisor-2 Modules
Updated the steps for migrating from Supervisor-1 modules to Supervisor-2 modules on a Cisco MDS 9509 or 9506 switch.
3.3(1a)
Enabling the Buffer-to-Buffer State Change Number
Added information on BB_SCN on ISLs.
3.3(1a)
Configuring Inter-VSAN Routing
Updated for no IVR support on MDS 9134 Fabric Switch.
3.3(1a)
Distributing Device Alias Services
Updated the second bullet in Database Merge Guidelines.
3.3(1a)
Configuring Generation 2 Switches and Modules
Updated table Bandwidth and Port Groups for Generation 2 FC Modules and Fabric Switches in Port Groups section.
3.3(1a)
Configuring iSCSI
Added the enable and disable command for modules in the iSCSI feature.
3.2(2b)
Obtaining and Installing Licenses
Removed the prefix "VDH=" from HostID serial number.
3.2(2b)
N Port Virtualization
N port virtualization educes the number of Fibre Channel domain IDs in SANs.
3.2(1)
Cisco MDS 18/4-port Multiservice module
Added updates about support or non-support of the module throughout the book.
3.2(1)
Cisco MDS 9222i Multiservice modular switch
Added updates about support or non-support of the switch throughout the book.
3.2(1)
Cisco MDS 9134 Multilayer Fabric Switch
Added updates about support or non-support of the switch throughout the book.
3.2(1)
Chapter 3, "Obtaining and Installing Licenses"
SANTap enhancements
Provides for 32-bit support and dynamic LUNs.
3.2(1)
CFS enhancements
Support for CFS regions.
3.2(1)
TACACS+ password expiry notification
Password aging notification is initiated when the TACACS+ server authenticates access to the switch through Telnet or SSH
3.2(1)
Cisco 32-port switching module
Added a new guideline for copying a saved configuration that contains the no system default switchport shutdown command, and the effect that has on E-port configuration.
3.1(3)
Cisco CompactFlash CRC Checksum Test
Enables users to run the CompactFlash CRC Checksum test and update CompactFlash firmware.
3.1(3)
System default port mode F
Added information about the system default switchport mode F feature and command.
3.1(3)
Chapter 5, "Initial Configuration"
Cisco Fabric Switch for HP c-Class BladeSystem and Cisco Fabric Switch for IBM BladeCenter
Added updates about support or non-support of the switches throughout the book.
3.1(2)
Chapter 4, "On-Demand Port Activation Licensing"
On-Demand Port Activation Licensing
Added port naming conventions f and switch behavior of Cisco Fabric Switch for HP c-Class BladeSystem and Cisco Fabric Switch for IBM BladeCenter.
3.1(2)
Running the CompactFlash Report
Enables users to run the CompactFlash Check utility to generate a report that shows the status of CompactFlash on certain line cards.
3.1(2)
SAN device virtualization
Allows you to create virtual devices that represent physical end devices when configuring switches.
3.1(2)
Enable/disable up/down link
Allows users to enable or disable SNMP link-state traps on specific interfaces.
3.1(2)
Cisco MDS 9124 Fabric Switch support
Updates throughout the book to reflect support of the Cisco MDS 9124 Fabric Switch.
3.1(1)
On-demand port activation licensing
Allows users to buy additional licenses for ports in the Cisco MDS 9124 Fabric Switch, and to also move licenses among ports.
3.1(1)
Non-disruptive upgrades on the Cisco MDS 9124 Fabric Switch
Describes non-disruptive upgrades on the Cisco MDS 9124 Fabric Switch.
3.1(1)
Removal of restrictions on oversubscription ratios
Allows users to remove any restrictions on maximum oversubscription ratios.
3.1(1)
FICON Tape Acceleartion
Provides acceleration for FICON tape write operations over FCIP for the IBM Virtual Tape Server (VTS) and tape libraries that support the 3490 command set.
3.1(1)
IP Network Simulator
Allows users to simulate network conditions to test the impact of network latency for FCIP or iSCSI.
3.1(1)
Generation 2 switching modules
Provides default support for Fibre Channel ACL adjacency sharing on Generation 2 switching modules.
3.0(3)
Command scheduler remote user support
Allows remote users to configure command scheduler jobs.
3.0(3)
IVR zones and zone members
Increases the limits for IVR zones to 8000 and for IVR zone members to 20,000
3.0(3)
RLIR messages
Allows you to specify a server to receive Registered Link Incident Report (RLIR) frames.
3.0(3)
User configuration limit
Sets the maximum number of users on a switch to 256.
3.0(3)
show tech-support command
Allows you to specify new options for the show tech-support command for specific features.
3.0(3)
install ssi command
Copies the SSI boot image file to the SSM modflash:.
3.0(2)
Domain manager fast restart
Allows the domain manager to quickly recover from a principal link failure when a backup link is available.
3.0(2)
FICON port prohibiting default
Allows you to change the default setting for port prohibiting.
3.0(2)
CLI enhancements
Includes the following CLI enhancements:
•
•
•
•
3.0(1)
Configuration format change
Describes the multiple entry format for displaying interface configuration information in the show running-config and show startup-config command outputs.
3.0(1)
Supervisor-2 module support
Includes support for the following Supervisor-2 module features:
•
•
3.0(1)
CFS over IP
Allows CFS distributions over IP connections.
3.0(1)
Configuration check
Describes the changes to the show incompatibility system command that indicate the commands to use to disable features before downgrading to an earlier release of the system image.
3.0(1)
Supervisor module management procedures
Includes the following recommended supervisor module management procedures:
•
Generation 2 switching modules.•
3.0(1)
boot auto-copy command enabled by default
Changes the default state for the boot auto-copy command to enabled.
3.0(1)
Crossbar removal procedures
Provides the recommended procedures to prepare to remove crossbars from Cisco MDS 9500 Series Directors.
3.0(1)
N-port identifier virtualization (NPIV)
Provides support for multiple N port identifiers to support multiple applications on a server accessing an MDS switch.
3.0(1)
Auto port mode support change
Disallows configuring auto port mode on Storage Services Module (SSM) Fibre Channel interfaces.
3.0(1)
Generation 2 switching module support
Describes how to configure interfaces on the Generation 2 Fibre Channel switching modules.
3.0(1)
SFP diagnostic information
Describes the show interface transceiver command change to display SFP diagnostic information on Generation 2 modules.
3.0(1)
CFS support for allowed domain ID lists
Allows the allowed domain ID lists to be distributed in the fabric using the CFS infrastructure.
3.0(1)
IVR enhancements
Includes the following IVR enhancements:
•
•
•
•
•
•
•
3.0(1)
Increased zone limit per VSAN
Increases the maximum number of zones per VSAN from 2000 to 8000.
3.0(1)
Zone analysis
Provides a means to analyze zone characteristics using the show zone analysis command.
3.0(1)
Device alias rename
Allows existing device aliases to be renamed.
3.0(1)
In-order-delivery enhancement
Ensures that frames are delivered in order within the switch latency drop period.
3.0(1)
Chapter 26, "Configuring Fibre Channel Routing Services and Protocols"
CFS support for RCSN
Allows the RSCN timer value to be distributed in the fabric using the CFS infrastructure.
3.0(1)
Chapter 27, "Managing FLOGI, Name Server, FDMI, and RSCN Databases"
RSCN timer configuration
Allows the RSCN timer value to be configured.
3.0(1)
Chapter 27, "Managing FLOGI, Name Server, FDMI, and RSCN Databases"
FICON port numbering
Provides information on the changed default port numbering scheme for Generation 2 hardware and how to assign port numbers when a switch has more than 255 ports.
3.0(1)
fcid-last-byte command deprecated
Does not support the fcid-last-byte command.
3.0(1)
FICON port swapping
Provides the ability to port swap using the interface identifier when there are duplicate port numbers on a switch.
3.0(1)
SSH authentication enhancement
Provides digital certificate support for host authentication.
3.0(1)
AAA server enhancements
Includes the following AAA server enhancements:
•
•
•
3.0(1)
MSCHAP
Provides support for the Microsoft Challenge Handshake Authentication Protocol (MSCHAP).
3.0(1)
Change to show ip access-list command
Deprecates the usage option.
3.0(1)
Chapter 35, "Configuring IPv4 and IPv6 Access Control Lists"
IPv6 access control lists (IPv6-ACLs)
Describes the support for IPv6-ACLs.
3.0(1)
Chapter 35, "Configuring IPv4 and IPv6 Access Control Lists"
Certificate authorities and digital certificates
Describes interoperating with certificate authorities and using digital certificates for secure communication with peers.
3.0(1)
Chapter 36, "Configuring Certificate Authorities and Digital Certificates"
IKE digital certificate support
Allows IKE to use digital certificates for authentication instead of using preshared keys.
3.0(1)
IKE fully qualified domain name (FQDN)
Includes using FQDNs, as well as IPv4 addresses, for the following IKE features:
•
•
3.0(1)
Fabric binding for Fibre Channel
Supports fabric binding for Fibre Channel VSANs as well as FICON VSANs.
3.0(1)
FCIP read tape acceleration
Supports tape read acceleration over FCIP interfaces as well as tape write acceleration.
3.0(1)
SAN extension tuner enhancement
Describes how to assign tape read and write commands to N ports.
3.0(1)
iSCSI server load balancing (iSLB)
Provides information on how to easily configure large iSCSI deployments.
3.0(1)
iSNS cloud discovery
Provides information to iSNS on the various interfaces reachable from an initiator by partitioning the interfaces on a switch into disjointed IP clouds.
3.0(1)
Dynamic initiator modes
Allows configuration of dynamic initiator modes iSCSI, iSLB, and deny log in to the MDS switch.
3.0(1)
IPv6
Provides support for IP version 6 (IPv6).
3.0(1)
Chapter 44, "Configuring IP Services"
Chapter 47, "Configuring IPv6 for Gigabit Ethernet Interfaces"
RMON high capacity alarms
Provides the show rmon high capacity alarms command to display RMON high capacity alarm values.
3.0(1)
Call Home enhancement
Allows customization of alert group messages.
3.0(1)
QoS behavior
Provides information about the behavior of QoS with different combinations of Generation 1 and Generation 2 switching modules.
3.0(1)
On-line system health maintenance (OHMS) enhancements
Includes the following OHMS enhancements:
•
•
•
•
3.0(1)
On-board failure logging (OBFL)
Describes OBFL, how to configure it for Generation 2 modules, and how to display the log information.
3.0(1)
