Front cover -- Contents -- Figures -- Tables -- Notices -- Trademarks -- Preface -- The team that wrote this redbook -- Become a published author -- Comments welcome -- Chapter 1. Cisco switches and directors -- 1.1 Product description -- 1.1.1 MDS 9120 and 9140 Multilayer Switches -- 1.1.2 MDS 9216 Multilayer Switch -- 1.1.3 MDS 9506 Multilayer Director -- 1.1.4 MDS 9509 Multilayer Director -- 1.2 Features -- 1.2.1 Supported attachments -- 1.2.2 Port addressing and port modes -- 1.2.3 Fibre Channel IDs and Persistent FC_ID -- 1.2.4 Supported port types -- 1.3 Supervisor module -- 1.3.1 Control and management -- 1.3.2 Optional modules -- 1.4 MDS 9000 SAN-OS -- 1.4.1 Licensed feature packages -- 1.4.2 Fabric Shortest Path First -- 1.4.3 PortChannels -- 1.4.4 Trunking -- 1.4.5 Quality of Service -- 1.4.6 Congestion control -- 1.4.7 IP services -- 1.4.8 Call home -- 1.4.9 Virtual SAN -- 1.5 Security management -- 1.5.1 Switch access security -- 1.5.2 User authentication -- 1.6 Troubleshooting features -- 1.6.1 Troubleshooting with Fabric Manager -- 1.6.2 Monitoring network traffic using SPAN -- 1.6.3 Monitoring traffic using Fibre Channel analyzers -- 1.7 FICON -- 1.8 Fabric management -- 1.8.1 Cisco MDS 9000 Fabric Manager -- 1.8.2 In-band management and out-of-band management -- 1.8.3 Using the setup routine -- 1.8.4 Controlling administrator access with users and roles -- 1.8.5 Accessing Cisco Fabric Manager -- 1.8.6 Connecting to a supervisor module -- 1.9 Zoning -- 1.9.1 Zone features -- 1.9.2 Zone membership -- 1.9.3 Configuring a zone -- 1.9.4 Zone enforcement -- 1.9.5 Zone sets -- 1.9.6 Default zone -- 1.10 Switch interoperability mode -- 1.10.1 Interoperability matrix -- 1.11 IBM feature codes -- Chapter 2. Pre-installation planning -- 2.1 General FICON planning considerations -- 2.1.1 Processor support -- 2.2 Physical layout planning.

2.2.1 Port layout -- 2.3 Connecting -- 2.3.1 Short wave or long wave -- 2.4 Description of the environment we are building -- 2.4.1 Servers -- 2.4.2 Storage -- 2.4.3 IOCDS -- 2.4.4 Naming conventions -- 2.5 Specific Cisco FICON planning considerations -- 2.5.1 Licensing -- 2.5.2 PSP buckets and APARs -- 2.5.3 Interoperability matrix Web links -- 2.5.4 Port numbering and addressing -- 2.5.5 PortChannels and addressing -- 2.5.6 Domain IDs - persistent/static -- 2.5.7 HCD/IOCDS definitions -- 2.5.8 VSANs negate the need for zones -- 2.5.9 CUP installation -- 2.5.10 Cascaded versus simple topology -- 2.6 Specific Cisco FCP planning considerations -- 2.6.1 Licensing and base features -- 2.6.2 Interoperability matrix Web links -- 2.6.3 Persistent FCIDs for AIX -- 2.6.4 Persistent/static domain ids -- 2.6.5 Zoning -- 2.6.6 VSANs -- 2.6.7 Inter VSAN Routing -- 2.7 FCIP -- 2.7.1 FCIP requirements -- 2.8 Generic MDS 9000 planning considerations -- 2.8.1 Console ports to COMs server -- 2.8.2 Java levels -- 2.8.3 IP address allocation -- 2.8.4 Four cables, two IP addresses -- 2.8.5 COM1 port hooking up a modem -- 2.8.6 Licensing -- 2.8.7 Distribution of ISLs -- 2.8.8 VSANs -- 2.8.9 Zones and zoning -- 2.8.10 VSANs versus zones -- 2.8.11 PortChannnels -- 2.8.12 Trunking -- 2.8.13 FTP/TFTP server -- 2.8.14 Syslog server -- 2.8.15 Checking the current switch hardware and software levels -- Chapter 3. Installing and configuring DM and FM -- 3.1 Obtain the source files -- 3.1.1 System requirements -- 3.2 Obtaining current versions -- 3.2.1 Setting up the initial parameters with the setup program -- 3.3 Updating the current FM version -- 3.4 FM Server versus the bundled version -- 3.4.1 Licensing -- 3.4.2 Advantages of FM Server over freeware -- 3.5 Device Manager -- Chapter 4. FICON configuration -- 4.1 Hardware configuration definition.

4.2 Checking processor is enabled for cascading -- 4.3 HCD define of switches to host -- 4.4 HCD define of switches to control units -- 4.5 HCD switch cascading -- 4.6 HCD definition of link addresses -- 4.7 Building the IODF production file -- 4.8 FICON port numbering on the MDS switches -- 4.9 Cisco MDS 9000 Mainframe Package license -- 4.10 FICON VSAN configuration and requirements -- 4.11 FICON load balancing -- 4.12 Static domain ID configuration -- 4.13 Fabric binding configuration -- 4.14 PortChannel configuration -- 4.15 Moving ports to the FICON VSAN -- 4.16 Verification of working topology -- 4.17 FICON configuration files -- 4.17.1 Using DM to prohibit, block, and swap ports -- 4.17.2 Using SA I/O Operations to prohibit and block ports -- Chapter 5. FCP configuration -- 5.1 FCP and the Cisco MDS 9000 products -- 5.1.1 Port addressing and port modes -- 5.1.2 Zoning -- 5.1.3 VSAN -- 5.1.4 Trunking and PortChannel -- 5.1.5 iSCSI and FCIP support -- 5.2 Initial setup of the Cisco MDS 9000 products -- 5.2.1 Preparing to configure the switch -- 5.2.2 Connecting to the switch via the serial port -- 5.2.3 Setting up the initial parameters with the setup program -- 5.2.4 Installing the Cisco Fabric Manager and Device Manager -- 5.3 Managing the Cisco SAN with the Fabric Manager -- 5.3.1 Getting started -- 5.3.2 User interface -- 5.4 Managing zones and zone sets -- 5.4.1 Creating aliases, zones and zone sets -- Chapter 6. FCIP configuration -- 6.1 FCIP concepts -- 6.2 FCIP licensing -- 6.3 FCIP configuration -- 6.4 Verification -- 6.5 FICON load balancing -- 6.6 Advanced configuration concepts -- 6.6.1 Advanced FCIP profile configuration -- 6.6.2 Advanced FCIP interface configuration -- 6.6.3 Configuring FCIP write acceleration -- 6.6.4 Enabling FCIP compression -- 6.6.5 FCIP high availability -- Chapter 7. Useful tools and procedures.

7.1 Syslog server -- 7.2 Setting up an FTP/TFTP server -- 7.3 Checking the current switch hardware and software levels -- 7.4 FM tools -- 7.4.1 Switch Health Analysis -- 7.4.2 Fabric Configuration Analysis -- 7.4.3 End to End Connectivity Analysis -- 7.4.4 ISL Performance Monitoring -- 7.4.5 FC Ping -- 7.4.6 FC Traceroute -- 7.5 Non-disruptive code loads using the CLI -- 7.6 Non-disruptive code loads using FM -- Chapter 8. Security -- 8.1 Securing management access to the switch -- 8.1.1 SNMP security -- 8.1.2 AAA using RADIUS and TACACS+ -- 8.1.3 Role based authorization -- 8.1.4 VSAN based authorization -- 8.1.5 SSH, SCP, and SFTP services -- 8.1.6 IP Access Control Lists -- 8.2 Securing access to the fabric -- 8.2.1 VSANs -- 8.2.2 Zoning -- 8.2.3 Fibre Channel Security Protocol support -- 8.2.4 FICON Fabric Binding -- 8.2.5 Port security -- 8.2.6 Reconfigure Fabric rejection support -- 8.2.7 Control of principal switch selection -- 8.2.8 Static domain ID assignment -- 8.2.9 Static, persistent FCID assignment -- Appendix A. CLI and FICON setup script -- CLI configuration FICON point to point topology -- License installation and verification -- FICON VSAN configuration using the FICON setup script -- FICON port configuration -- Verification -- Complete 9506 running configuration -- CLI configuration FICON cascaded topology -- License installation and verification -- FICON VSAN configuration using the FICON setup script -- FICON port configuration -- PortChannel configuration -- FCIP configuration -- Verification -- Complete 9506 and 9216 running configuration -- Invalid attachment state -- Appendix B. Generated IODF -- Glossary -- Related publications -- IBM Redbooks -- Cisco publications -- Online resources -- How to get IBM Redbooks -- Help from IBM -- Index -- Back cover.