DCX光纤交换机初始化配置.doc

DCX光纤交换机初始化配置微码升级 由于新到的交换机与环境中使用的交换机版本有所区别，因此在，交换机上架前，需先对其进行版本升级至v6.4.2，从而与生产环境匹配。具体升级操作过程见附件：Brocade交换机微码升级操作手册。准备部分1、新交换机预先配置a) 修改交换机名字 用switchname命令进行相应交换机名字的定义。switchname NFDXSN21-L1chassisname NFDXSN21-L1bannerset any unauthorized access is illegal! Contact:9350bannershowtimeout 30b) 交换机IP地址并对管理端口配置百兆全双工用ipaddrset命令进行IP地址的设置NFDXSN21-L1:admin ipaddrset -chassisEthernet IP Address :Ethernet Subnetmask :NFDXSN21-L1:admin ipaddrset -cp 0Host Name cp0:Ethernet IP Address 05:Ethernet Subnetmask :Gateway IP Address 54:NFDXSN21-L1:admin ipaddrset -cp 1Host Name cp1:Ethernet IP Address 05:Ethernet Subnetmask :Gateway IP Address 54:NFDXSN21-L1:admin ifModeSet eth0 /Active CP Auto-negotiate (yes, y, no, n): yes n Force 100 Mbps / Full Duplex (yes, y, no, n): yes NFDXSN21-L1:admin ifmodeset eth0 /Standby CPAuto-negotiate (yes, y, no, n): yes nForce 100 Mbps / Full Duplex (yes, y, no, n): no yForce 100 Mbps / Half Duplex (yes, y, no, n): no nForce 10 Mbps / Full Duplex (yes, y, no, n): no nForce 10 Mbps / Half Duplex (yes, y, no, n): no nCommitting configuration.done.交换机配置DomainID、添加端口描述、disable ISL、disable 交换机用configure命令设置NFDXSN21-L1的DomainID （出厂是1），adminswitchdisable change domain ID21adminconfigureConfigure. Fabric parameters (yes, y, no, n): no y Domain: (1.239) 1 21Insistent Domain ID Mode (yes, y, no, n): no yAdminswitchenable检查Principal Selection Mode，并配置NTP/SYSLOG 查看是否为Principal Selection Mode: DisableNF12SN81_N1:checklist fabricprincipal -qPrincipal Selection Mode: DisableNF12SN81_N1:checklist fabricprincipal 1（强制设成fabricprincipal）NTP配置tsclockserver “;XX.XX.XX.XX”tsTimeZone +8date mmddhhmmyysyslog配置syslogdIpAdd 1syslogdIpAdd 2syslogdIpAdd 4syslogdfacility l 7网管配置1）snmp配置前提条件：（a）交换机支持snmp的相关命令；（b）开通交换机与网管服务器之间的snmp访问策略。通过命令snmpconfig -set accessControl可以配置网管SNMP只读服务器的地址。在进行SNMP配置时，目的IP地址应为五台网管服务器的地址1、12、14。配置命令： snmpconfig -set accessControl输入ip后输入F(ro)表示只读 SNMP access list configuration: Access host subnet area in dot notation: 1 Read/Write? (true, t, false, f): truef Access host subnet area in dot notation: 2 Read/Write? (true, t, false, f): truef Access host subnet area in dot notation: 4 Read/Write? (true, t, false, f): true f Access host subnet area in dot notation: Read/Write? (true, t, false, f): true f Committing configuration.done.验证是否配置成功: snmpconfig -show accessControlSNMP access list configuration:Entry 0: Access host subnet area 1 (ro)Entry 1: Access host subnet area 2 (ro)Entry 2: Access host subnet area 4 (ro)Entry 3: No access host configured yetEntry 4: No access host configured yetEntry 5: No access host configured yet通过命令snmpconfig -set snmpv1配置snmp为v1版本，并配置snmp只读community字符串。配置命令： snmpconfig -set snmpv1SNMP community and trap recipient configuration:Community (rw): Secret C0de Trap Recipients IP address : Community (rw): OrigEquipMfr Trap Recipients IP address : Community (rw): private Trap Recipients IP address : Community (ro): public NFR99OTrap Recipients IP address : Community (ro): common Trap Recipients IP address : Community (ro): FibreChannel Trap Recipients IP address : Committing configuration.done.注：数据中心（北京）只需敲入BFR990，其它回车默认。验证是否配置成功: snmpconfig -show snmpv1SNMPv1 community and trap recipient configuration: Community 1: Secret C0de (rw) No trap recipient configured yet Community 2: OrigEquipMfr (rw) No trap recipient configured yet Community 3: private (rw) No trap recipient configured yet Community 4: NFR99O (ro) No trap recipient configured yet Community 5: common (ro) No trap recipient configured yet Community 6: FibreChannel (ro) No trap recipient configured yet 2）AAA管理前提条件：（a）设备版本推荐是v6.4.0b以后的；（b）开通交换机与ACS服务器之间的Radius防火墙策略；（c）Virtual Fabric功能没有被关闭。（1）在SAN交换机上通过aaaconfig命令配置Radius认证服务器地址。配置命令：Fabric A交换机aaaconfig -add 1 -conf radius -s password -a papaaaconfig -add 2 -conf radius -s password -a papaaaconfig -authspec radius;local -backupFabric B交换机aaaconfig -add 1 -conf radius -s password -a papaaaconfig -add 2 -conf radius -s password -a papaaaconfig -authspec radius;local backup验证是否配置成功： aaaconfig -showPosition : 1Server : XX.1.115.YYPort : 1812Secret : passwordTimeout(s) : 3Auth-Protocol: PAPPrimary AAA Service: RADIUSSecondary AAA Service: Switch database as backup请注意：针对48000、DCX和DCX-4S交换机，交换机使用Active CP的固定IP地址向Radius服务器发送请求，为今后认证方便，请将每台交换机的3个IP地址都加为Radius服务器的客户端，以便在发生CP切换后，服务器还可以继续认证。关于如何设置Radius服务器，请参考北中心的配置文档。3）Fabric Watch管理启用Fabric Watch可以通过手工定制实现对设备状态（包括端口、机箱、电源、操作系统等）的监控。具体的监控内容包括：设备硬件状态（Power supplies、Temperatures、Fans、WWN servers、CP、Blades、Flash、ports、SFP发光功率等）、性能指标（端口Rx/Tx performance等）、端口连接状态（如link loss、link reset、link failure、state change、CRC error、收发光功率、invalid word、C3TX_TO）等。SAN交换机可以在检测到上述监控对象故障时，实时产生告警日志，将交换机各种中间状态的变化写到syslog里（syslog的信息量会大），并通过syslog发到网管系统进行展现。实施SAN交换机Fabric Watch的前提条件：（a）通过命令licenseshow，检查是否存在Fabric Watch License。如果不存在Fabric Watch License，暂不实施Fabric Watch的管理。licenseAdd R9QyyQy9zbgAR（b）已配置syslog的服务器地址。（c）已配置网管SNMP只读服务器的地址，已配置snmp为v1版本，并配置snmp只读community字符串。（d）已在Principal交换机上配置时钟源。（e）需提前在访问SAN交换机fabricwatch的PC机上安装正确的java软件版本（注：不同的存储交换机及版本所需的java版本会有所不同，可根据提示到java官方网站自行下载）。（f）各单位的存储环境不同，需要关注的交换机阀值会有所不同，同时不同类型SAN交换机的Fabric Watch界面也有细微的差异。首先在IE界面通过http方式访问SAN交换机地址，输入用户名和密码后，进入管理界面。A）F_Port/FL_Port配置因可能发生SAN交换机或对端设备异常，连接服务器、盘机、带机的光纤线老化等突发故障的现象，同时也可能存在端口流量过大而引发交换性能效率降低的现象，故在运维过程中需要通过Fabric Watch对交换机及端口的状态进行预判，及早发现相关问题。1)、配置invalid word、C3TX_TO、link loss、link failure、link reset、state change为了监控链路异常现象，请按下列图形的数字标识顺序进行invalid word参数的配置，配置方法是将threshold的上限（High threshold）设为40，下限（Low threshold）设为25。portthconfig -set fop-port -area ITW -lowthreshold -value 25 -buffer 0portthconfig -set fop-port -ar ITW -highthreshold -value 40 -trigger above -action raslogportthconfig -apply fop-port -area ITW -action_level cust -thresh_level custportthconfig -show fop-port -area ITW为了监控链路异常现象，请按下列图形的数字标识顺序进行link loss参数的配置，配置方法是在阀值配置（Threshold Configuration）中，将时间间隔（Time Base）选定为每分钟（Minute），其上限（High Boundary）为0，下限（Low Boundary）为0；同时在报警配置（Alarm Configuration）中，勾选Above所在行中的ERROR_LOG和SNMP_TRAP。为了监控端口同步状态、光信号丢失、端口状态变化的现象，按上述方法，将C3TX_TO、link failure、link reset、state change的参数配置成与link loss相同的参数。具体配置如下：portthconfig -set fop-port -area C3TX_TO -highthreshold -value 5 -trigger above -action raslog -buffer 0portthconfig -apply fop-port -area C3TX_TO -action_level cust -thresh_level custportthconfig -show fop-port -ar C3TX_TOportthconfig -set fop-port -area LOS -highthreshold -value 0 -trigger above -action raslog -buffer 0portthconfig -apply fop-port -area LOS -action_level cust -thresh_level custportthconfig -show fop-port -ar LOSportthconfig -set fop-port -area LF -highthreshold -value 0 -trigger above -action raslog -buffer 0portthconfig -apply fop-port -area LF -action_level cust -thresh_level custportthconfig -show fop-port -ar LFportthconfig -set fop-port -area LR -highthreshold -value 0 -trigger above -action raslog -buffer 0portthconfig -apply fop-port -area LR -action_level cust -thresh_level custportthconfig -show fop-port -ar LRportthconfig -set fop-port -area ST -highthreshold -value 0 -trigger above -action raslog -buffer 0portthconfig -apply fop-port -area ST -action_level cust -thresh_level custportthconfig -show fop-port -ar ST2)、配置Rx/Tx performance此项目通过Bottleneckmon Detection来监控，设置congestion的阀值为80%。3)、配置CRC error为了监控端口CRC错误，请按下列图形的数字标识顺序进行Invalid CRCs参数的配置，配置方法是在阀值配置（Threshold Configuration）中，将时间间隔（Time Base）选定为每分钟（Minute），其上限（High Boundary）为5，下限（Low Boundary）为0；同时在报警配置（Alarm Configuration）中，勾选Above所在行中的ERROR_LOG和SNMP_TRAP。 具体配置如下：portthconfig -set fop-port -ar CRC -lowthreshold -value 5 -buffer 0portthconfig -set fop-port -ar CRC -highthreshold -value 20 -trigger above -action raslogportthconfig -apply fop-port -area CRC -action_level cust -thresh_level custportthconfig -show fop-port -area CRCB) E_Port配置为判断交换机互联端口问题，可参考上一章节的F_Port/FL_Port配置，配置E_Port的invalid word、C3TX_TO 、link loss、link failure、link reset、state change参数、Rx/Tx performance参数和Invalid CRCs参数。具体配置如下：portthconfig -set e-port -ar CRC -lowthreshold -value 5 -buffer 0portthconfig -set e-port -ar CRC -highthreshold -value 20 -trigger above -action raslogportthconfig -apply e-port -area CRC -action_level cust -thresh_level custportthconfig -show e-port -area CRCportthconfig -set e-port -ar ITW -lowthreshold -value 25 -buffer 0portthconfig -set e-port -ar ITW -highthreshold -value 40 -trigger above -action raslogportthconfig -apply e-port -area ITW -action_level cust -thresh_level custportthconfig -show e-port -area ITWportthconfig -set e-port -area C3TX_TO -highthreshold -value 5 -trigger above -action raslog -buffer 0portthconfig -apply e-port -area C3TX_TO -action_level cust -thresh_level custportthconfig -show e-port -ar C3TX_TOportthconfig -set e-port -area LOS -highthreshold -value 0 -trigger above -action raslog -buffer 0portthconfig -apply e-port -area LOS -action_level cust -thresh_level custportthconfig -show e-port -ar LOSportthconfig -set e-port -area LF -highthreshold -value 0 -trigger above -action raslog -buffer 0portthconfig -apply e-port -area LF -action_level cust -thresh_level custportthconfig -show e-port -ar LFportthconfig -set e-port -area LR -highthreshold -value 0 -trigger above -action raslog -buffer 0portthconfig -apply e-port -area LR -action_level cust -thresh_level custportthconfig -show e-port -ar LRportthconfig -set e-port -area ST -highthreshold -value 0 -trigger above -action raslog -buffer 0portthconfig -apply e-port -area ST -action_level cust -thresh_level custportthconfig -show e-port -ar STportthconfig -set e-port -ar RX -highthreshold -value 80 -trigger above -action raslog -buffer 0portthconfig -apply e-port -area RX -action_level cust -thresh_level custportthconfig -show e-port -ar RXportthconfig -set e-port -ar TX -highthreshold -value 80 -trigger above -action raslog -buffer 0portthconfig -apply e-port -area TX -action_level cust -thresh_level custportthconfig -show e-port -ar TXC) fabric配置为了监控fabric中组网设备互联端口，请按下列图形的数字标识顺序进行E_Port Down参数的配置，配置方法是在阀值配置（Threshold Configuration）中，将时间间隔（Time Base）选定为每分钟（Minute），其上限（High Boundary）为0，下限（Low Boundary）为0；同时在报警配置（Alarm Configuration）中，勾选Above所在行中的ERROR_LOG和SNMP_TRAP。其它fabric配置（如fabric reconfigure、domain id changes、segmentation、zone changes、fabric logins、sfp state changes）保持系统默认参数即可。具体配置如下：thconfig -set FABRIC -area ED -highthreshold -value 0 -trigger above -action raslogthconfig -apply FABRIC -area ED -action_level cust -thresh_level custthconfig -show FABRIC -area ED D) switch配置1)、EnvironmentTemperature配置保持系统默认参数060度。Fan配置保持系统默认参数16003400RPM。Power Supply配置保持系统默认参数1 OK/0 FAULTY。2)、SFP收发光功率配置为监控SFP收光功率，请按下列图形的数字标识顺序进行Rx Power参数的配置，配置方法是在阀值配置（Threshold Configuration）中，将时间间隔（Time Base）选定为每分钟（Minute），其上限（High Boundary）为5000，下限（Low Boundary）为32；同时在报警配置（Alarm Configuration）中，勾选Below和Above所在行中的ERROR_LOG和SNMP_TRAP。具体配置如下：thconfig -set SFP -area RXP -highthreshold -value 5000 -trigger above -action raslogthconfig -set SFP -area RXP -lowthreshold -value 32 -trigger below -action raslogthconfig -apply SFP -area RXP -action_level cust -thresh_level custthconfig -show SFP -area RXP 为监控SFP发光功率，请按下图进行Tx Power参数的配置，配置方法是在阀值配置（Threshold Configuration）中，将时间间隔（Time Base）选定为每分钟（Minute），其上限（High Boundary）为5000，下限（Low Boundary）为126；同时在报警配置（Alarm Configuration）中，勾选Below和Above所在行中的ERROR_LOG和SNMP_TRAP。具体配置如下：thconfig -set SFP -area TXP -highthreshold -value 5000 -trigger above -action raslogthconfig -set SFP -area TXP -lowthreshold -value 126 -trigger below -action raslogthconfig -apply SFP -area TXP -action_level cust -thresh_level custthconfig -show SFP -area TXP3)、Security所有的安全配置保持系统默认参数。4)、Resource交换机逻辑卷空间配置保持系统默认参数85.5)、FRU交换机的可替换部件（如电源、wwn卡、风扇、板卡）保持系统默认absent告警。c) Switchdisable并确认PID format用configshow显示 PID,并确认与被替换交换机一致（应PID=1）Configshow all | grep pidformat确认fabric.ops.mode.pidFormat:1d) 确认BBcredit用configshow显示 BBcredit并确认与被替换交换机一致（默认为16）Configshow确认为fabric.ops.BBCredit:16e) Firmware版本一致E)Bottleneck 配置 为监控F_Port的延迟情况，防止系统中出现慢速设备，从而影响整个系统的运行，需要进行bottleneckmon参数的配置。bottleneckmon -enable -cthresh 0.80 -alert -lthresh 0.02 -time 100 -qtime 60 act (边缘交换机)bottleneckmon -enable -cthresh 0.80 -alert -lthresh 0.02 -time 100 -qtime 60 (核心交换机)bottleneckmon -statusF）Port Fencing 配置基于FW中对EPORT、FPort的阀值设置，对在指定时间内超过阀值的端口实施自动Disable操作，从而防止不稳定端口影响Fabric中的其他链路所带来的影响。一、Server 交换机F Port 建议值Invalid Word low 25 & high 40CRC low 5 & high 20C3TX_TO 5 State Change 7Link Reset 5 1、Invalid Word low 25 & high 40设置上限：portthconfig -set fop-port -area itw -timebase minute -h -va 40 -tr above -action raslog -buffer 0/portthconfig -set fop-port -area itw -h -tr below -action raslog设置下限（采用Port Class触发上限告警）：portthconfig -set port -area itw -h -va 25 -tr above -action raslog -buffer 0/portthconfig -set port -area itw -h -tr below -action raslog应用设置：portthconfig -apply fop-port -area itw -ac cust -th custportthconfig -apply port -area itw -ac cust -th cust启用portfencing:portfencing -enable fop-port -area itw 检查设置：portthconfig -show fop-port -area itw portthconfig -show port -area itw检查port fencing设置：portfencing -show2、CRC low 5 & high 20设置上限：portthconfig -set fop-port -area crc -timebase minute -h -va 20 -tr above -action raslog -buffer 0/portthconfig -set fop-port -area crc -h -tr below -action raslog设置下限（采用port class触发上限告警）：portthconfig -set port -area crc -h -va 5 -tr above -action raslog -buffer 0/portthconfig -set port -area crc -h -tr below -action raslog应用设置：portthconfig -apply fop-port -area crc -ac cust -th cust portthconfig -apply port -area crc -ac cust -th cust 启用portfencing:portfencing -enable fop-port -area crc 检查设置：portthconfig -show fop-port -area crc portthconfig -show port -area crc检查port fencing设置：portfencing -show3、C3TX_TO 5 设置上限：portthconfig -set fop-port -area c3tx_to -timebase minute -h -va 5 -tr above -action raslog -buffer 0/portthconfig -set fop-port -area c3tx_to -h -tr below -action raslog设置下限（采用port class触发上限告警）：portthconfig -set port -area c3tx_to -h -va 0 -tr above -action raslog -buffer 0/portthconfig -set port -area c3tx_to -h -tr below -action raslog应用设置：portthconfig -apply fop-port -area c3tx_to -ac cust -th cust portthconfig -apply port -area c3tx_to -ac cust -th cust 启用portfencing:portfencing -enable fop-port -area c3tx_to 检查设置：portthconfig -show fop-port -area c3tx_to portthconfig -show port -area c3tx_to检查port fencing设置：portfencing -show4、State Change 7设置上限：portthconfig -set fop-port -area st -timebase minute -h -va 7 -tr above -action raslog -buffer 0/portthconfig -set fop-port -area st -h -tr below -action raslog设置下限（采用port class触发上限告警）：portthconfig -set port -area st -h -va 0 -tr above -action raslog -buffer 0/portthconfig -set port -area st -h -tr below -action raslog应用设置：portthconfig -apply fop-port -area st -ac cust -th cust 启用portfencing:portfencing -enable fop-port -area st 检查设置：portthconfig -show fop-port -area stportthconfig -show port -area st检查port fencing设置：portfencing -show5、Link Reset 5 设置上限：portthconfig -set fop-port -area lr -timebase minute -h -va 5 -tr above -action raslog -buffer 0/portthconfig -set fop-port -area lr -h -tr below -action raslog设置下限（采用port class触发上限告警）：portthconfig -set port -area lr -h -va 0 -tr above -action raslog -buffer 0/portthconfig -set port -area lr -h -tr below -action raslog应用设置：portthconfig -apply fop-port -area lr -ac cust -th cust portthconfig -apply port -area lr -ac cust -th cust检查设置：portthconfig -show fop-port -area lr启用portfencing:portfencing -enable fop-port -area lr 检查port fencing设置：portfencing -show二、所有交换机E Port 建议值Invalid Word low 25 & high 40CRC low 5 & high 20State Change 71、Invalid Word low 25 & high 40检查设置：portthconfig -show e-port -area itw portthconfig -show port -area itw 检查port fencing设置：portfencing -show2、CRC low 5 & high 20检查设置：portthconfig -show e-port -area crc portthconfig -show port -area crc检查port fencing设置：portfencing -show3、State Change 7设置上限：portthconfig -set e-port -area st -timebase minute -h -va 7 -tr above -action raslog -buffer 0/portthconfig -set e-port -area st -h -tr below -action raslog应用设置：portthconfig -apply e-port -area st