- Device Manager Help
- Configuring Cisco DCNM-SAN Server
- Configuring Authentication in Cisco DCNM-SAN
- Configuring Cisco DCNM-SAN Client
- Device Manager
- Configuring Performance Manager
- Configuring High Availability
- Configuring Trunking
- Configuring PortChannels
- Configuring N Port Virtualization
- Configuring Interfaces
- Configuration of Fibre Channel Interfaces
- Using the CFS Infrastructure
- Configuring SNMP
- Configuring Domain Parameters
- Configuring and Managing Zones
- Configuring FCoE
- Configuring Dense Wavelength Division Multiplexing
- Configuring and Managing VSANs
- Discovering SCSI Targets
- Configuring SAN Device Virtualization
- Configuring Fibre Channel Routing Services and Protocols
- Managing FLOGI, Name Server, FDMI, and RSCN Databases
- Configuring FICON
- Creating Dynamic VSANs
- Distributing Device Alias Services
- Configuring Advanced Fabric Features
- Configuring Users and Common Role
- Configuring Security Features on an External AAA Server
- Configuring Certificate Authorities and Digital Certificates
- Configuring FC-SP and DHCHAP
- Configuring Cisco TrustSec Fibre Channel Link Encryption
- Configuring FIPS
- Configuring IPv4 and IPv6 Access Control Lists
- Configuring IPsec Network Security
- Configuring Port Security
- Configuring Fabric Binding
- Configuring FCIP
- Configuring the SAN Extension Tuner
- Configuring iSCSI
- Configuring IP Services
- Configuring IP Storage
- Configuring IPv4 for Gigabit Ethernet Interfaces
- Configuring IPv6 for Gigabit Ethernet Interfaces
- Configuring SCSI Flow Services
- Configuring SCSI Flow Statistics
- Configuring Fibre Channel Write Acceleration
- Monitoring the Network
- Monitoring Performance
- Configuring Call Home
- Configuring System Message Logging
- Scheduling Maintenance Jobs
- Configuring RMON
- Configuring Fabric Configuration Server
- Monitoring Network Traffic Using SPAN
- Monitoring System Processes and Logs
- Configuring QoS
- Configuring Port Tracking
- Configuring FlexAttach Virtual pWWN
- Configuring Interface Buffers
- Verifying Ethernet Interfaces
- Information About DCNM-SAN Client
- Cisco DCNM-SAN Client Quick Tour: Server Admin Perspective
- Cisco DCNM-SAN Client Quick Tour: Admin Perspective
- Launching Cisco DCNM-SAN Client
- Setting Cisco DCNM-SAN Preferences
- Network Fabric Discovery
- Network LAN Discovery
- Modifying the Device Grouping
- Controlling Administrator Access with Users and Roles
- Using Cisco DCNM-SAN Wizards
- Cisco DCNM-SAN Troubleshooting Tools
- Integrating Cisco DCNM-SAN and Data Center Network Management Software
Configuring Cisco DCNM-SAN Client
This chapter describes about the Cisco DCNM-SAN Client, which is a java-based GUI application that provides access to the Cisco DCNM-SAN applications from a remote workstation.
This chapter contains the following sections:
- Information About DCNM-SAN Client
- Cisco DCNM-SAN Client Quick Tour: Server Admin Perspective
- Cisco DCNM-SAN Client Quick Tour: Admin Perspective
- Launching Cisco DCNM-SAN Client
- Setting Cisco DCNM-SAN Preferences
- Network Fabric Discovery
- Modifying the Device Grouping
- Controlling Administrator Access with Users and Roles
- Using Cisco DCNM-SAN Wizards
- Cisco DCNM-SAN Troubleshooting Tools
- Integrating Cisco DCNM-SAN and Data Center Network Management Software
Information About DCNM-SAN Client
Cisco DCNM-SAN is a Java and SNMP-based network fabric and device management tool with a GUI that displays real-time views of your network fabric, including Cisco Nexus 5000 Series switches, Cisco MDS 9000 Family and third-party switches, hosts, and storage devices.
In addition to complete configuration and status monitoring capabilities for Cisco MDS 9000 Family switches and Cisco Nexus 5000 Series switches, Cisco DCNM-SAN Client provides Fibre Channel troubleshooting tools. You can use these health and configuration analysis tools on the MDS 9000 Family switch or Cisco Nexus 5000 Series switch to perform Fibre Channel ping and traceroute.
Cisco DCNM-SAN Release 4.1(1b) and later provides multilevel security system by adding a server admin role that allows access to limited features. The configuration capabilities of a server admin is limited to FlexAttach and relevant data.
Note You must use the same release of Cisco DCNM-SAN Client and Cisco DCNM-SAN Server.
Cisco DCNM-SAN Advanced Mode
Advanced mode is enabled by default and provides the full suite of Cisco DCNM-SAN features, including security, IVR, iSCSI, and FICON. To simplify the user interface, from the list box in the upper right corner of the Cisco DCNM-SAN Client, choose Simple. In simple mode, you can access basic MDS 9000 features such as VSANs, zoning, and configuring interfaces. Advanced mode option is not available for server admin role.
Cisco DCNM-SAN Client Quick Tour: Server Admin Perspective
Cisco DCNM-SAN provides a multilevel security system by adding a server admin role that allows access only to limited features. The configuration capabilities of a server admin role is limited to FlexAttach and relevant data. The server admin can pre-configure SAN for new servers, move a server to another port on the same NPV device or another NPV device and replace a failed server onto the same port without involving the SAN administrator. The server role admin will not be able to manage Cisco DCNM-SAN users or connected clients.
Cisco DCNM-SAN provides a much improved user interface by including movable and dockable panes to let users arrange the Physical Attributes pane, Logical Domains pane, Fabric pane and Information pane according to requirements, making it easier to manage the workflow. The dockable panes are also called as dockable frames. A dockable frame can be standalone (floating), minimized or maximized. The logical, physical, information and the fabric panes can be can be collapsed and expanded as needed. These panes can also be docked at either the right side left side or to the bottom of the workspace.
Cisco DCNM-SAN Main Window
This section describes the Cisco DCNM-SAN Client interface that is specific to server admin users as shown in Figure 4-1.
Figure 4-1 Cisco DCNM-SAN Main Window: Server Admin Perspective
Menu Bar
The menu bar at the top of the Cisco DCNM-SAN main window provides options for managing and for controlling the display of information on the Fabric pane. Server admin will not have all the options that are available for SAN admin . The menu bar provides the following menus:
- File—Opens a new fabric, rediscovers the current fabric, locates switches, sets preferences, prints the map.
- View—Changes the appearance of the map (these options are duplicated on the Fabric pane toolbar).
- Tools—Manages the Server and configuration using the FlexAttach virtual pWWN feature.
- Help—Displays online help topics for specific dialog boxes in the Information pane.
Tool Bar
The Cisco DCNM-SAN main toolbar (specific to server admin ) provides icons for accessing the most commonly used menu bar options as shown in Table 4-1 .
Logical Domains Pane
Use the Logical Domains pane to view fabrics and to access user-defined groups. You can expand the groups to see different user-defined groups. The non-editable groups created for each core switch contains their NPV switches.
Physical Attributes Pane
Use the Physical Attributes pane to display a tree of the options available for managing the switches in the currently selected fabric or group.
To select an option, click a folder to display the options available and then click the option. You see the table with information for the selected option in the Information pane. The Physical Attributes pane provides the following main folders:
Information Pane
Use the Information pane to display tables of information associated with the option selected from the menu tree in the Logical Domains or Physical Attributes panes. The Information pane toolbar provides buttons for performing one or more of the operations shown in Table 5-2.
Fabric Pane
Use the Fabric pane to display the graphical representation of your fabric. Table 5-1 explains the graphics you may see displayed, depending on which devices you have in your fabric.
The bottom of the Fabric pane has the following tabs:
- Fabric—When displaying multiple fabrics, each fabric has its own tab. You can switch between fabrics by clicking on their respective tabs.
- Log—Displays messages that describe Cisco DCNM-SAN operations, such as fabric discovery.
- Events—Displays information about the SNMP traps received by the management station. This includes combination events as detected by discovery and important traps such as license, SNMP, and FICON.
Note Fabric map display is based on what you select in the logical domain pane. When you select a fabric node, all the switches that belong to that fabric will be enabled. When you select the group node, all the switches that belong to the groups listed under that group node will be enabled. When you select only a group, all the switches that belong to the specific group will be enabled.
Cisco DCNM-SAN Client Quick Tour: Admin Perspective
This section describes the Cisco DCNM-SAN Client interface shown in Figure 4-2.
Figure 4-2 Cisco DCNM-SAN Main Window
Note You can resize each pane by dragging the boundaries between each region or by clicking the Minimize or Maximize controls.
Menu Bar
The menu bar at the top of the Cisco DCNM-SAN main window provides options for managing and troubleshooting the current fabric and for controlling the display of information on the Fabric pane. The menu bar provides the following menus:
- File—Opens a new fabric, rediscovers the current fabric, locates switches, sets preferences, prints the map, and exports the Fabric pane log.
- View—Changes the appearance of the map (these options are duplicated on the Fabric pane toolbar).
- Zone—Manages zones, zone sets, and inter-VSAN routing (IVR).
- Tools—Verifies and troubleshoots connectivity and configuration, as described in the “Cisco DCNM-SAN Troubleshooting Tools”.
- Performance—Runs and configures Performance Manager and Cisco Traffic Analyzer, and generates reports.
- Server—Runs administrative tasks on clients and fabrics. Provides Cisco DCNM-SAN Server management and a purge command. Lists fabrics being managed.
- Help—Displays online help topics for specific dialog boxes in the Information pane.
File
The file menu provides the following options:
- Open Fabric—Opens a new switch fabric.
- Locate Switches and Devices— Uses the SNMPv2 protocol to discover devices responding to SNMP requests with the read-only community string public. You may use this feature if you want to locate other Cisco MDS 9000 switches in the subnet, but are not physically connected to the fabric.
- Rediscover—Initiates an on-demand discovery to learn recent changes from the switches and update the Cisco DCNM-SAN Client. You may use this option when Cisco DCNM-SAN Server is not in sync with switches in the fabric and you do not want to wait until the next polling cycle. The rediscover option does not delete the fabric and add it again. You may delete and add the fabric only if the rediscover option fails to update Cisco DCNM-SAN Server.
- Resync All Open Fabrics— Cisco DCNM-SAN Server forces all the fabrics to close and re-open. You may use this option when Cisco DCNM-SAN Client is not in sync with Cisco DCNM-SAN Server.
- Rediscover SCSI Targets— Initiates an on-demand discovery to learn recent changes from the SCSI target switches. You may use this option when Cisco DCNM-SAN Server is not in sync with SCSI target switches in the fabric and you do not want to wait until the next polling cycle.
- Preferences—Sets your preferences to customize the behavior of the Cisco DCNM-SAN Client.
- Import Enclosures—Imports saved enclosures.
- Export
– Map Image—Generates and export the map to a specified location.
– Visio—Exports the map to a Visio file.
– Table—Exports the table data to a text file.
– Log—Exports the log to a text file.
View
View menu provides the following options:
– Cancel—Cancels the current layout.
– Spring—Displays the layout based on spring algorithm.
– Quick—Quickly displays the layout when the switch has many end devices.
– Fit—Fits the view in the fabric pane.
- Grid—Enables the grid view.
- Overview Window—Allows you to center the Fabric pane on the area of the fabric that you want to see. This option is useful for large fabrics that cannot be displayed entirely within the Fabric pane.
- Legend—Shows all the legends used in the fabric map.
- Find in Map—Finds a device in the fabric map.
Zone
The zone menu provides the following options:
- Edit Local Full Zone Database—Allows you to create zones across multiple switches. Zones provide a mechanism for specifying access control. Zone sets are a group of zones to enforce access control in the fabric. All zoning features are available through the Edit Local Full Zone Database dialog box.
- Deactivate Zoneset—Deactivates an active zone set.
- Copy Full Zone Database—Creates a new zone set. On the Cisco MDS Family switches, you cannot edit an active zone set. However, you can copy an active zone set to create a new zone set that you can edit.
- Merge Analysis—Enables you to determine if zones will merge successfully when two Cisco MDS switches are interconnected. If the interconnected switch ports allow VSANs with identical names or contain zones with identical names, then Cisco DCNM-SAN verifies that the zones contain identical members. You can use merge analysis tool before attempting a merge, or after fabrics are interconnected to determine zone merge failure causes.
- Merge Fail Recovery—Recovers the port from its isolated state either by importing the neighboring switch's active zone set database and replacing the current active or by exporting the current database to the neighboring switch.
- Migrate Non-MDS Database—Migrate a non-MDS database using Cisco DCNM-SAN (you may need to use the Zone Migration Wizard to accomplish this task).
- IVR
– Deactivate Zoneset—Deactivates an active zone set.
– Copy Full Zone Database—Recovers an IVR zone database by copying the IVR full zone database from another switch.
– Copy Full Topology—Recovers a topology by copying from the active zone database or the full zone database.
Tools
Tools menu provides the following options:
– Switch Health—Determines the status of the components of a specific switch.
– Fabric Configuration—Analyzes the configuration of a switch by comparing the current configuration to a specific switch or to a policy file. You can save a switch configuration to a file and then compare all switches against the configuration in the file.
– Show Tech Support—Collects large amount of information about your switch for troubleshooting purposes. When you issue a show tech support command from Cisco DCNM-SAN for one or more switches in a fabric, the results of each command are written to a text file, one file per switch, in a directory you specify. You can then view these files using Cisco DCNM-SAN.
– End to End Connectivity—Determines connectivity and routes among devices with the switch fabric. This tool checks to see that every pair of end devices can talk to each other, using a Ping test and by determining if they are in the same VSAN or in the same active zone.
– Ping—Determines connectivity from another switch to a port on your switch.
– Trace Route—Verifies connectivity between two end devices that are currently selected on the Fabric pane.
– Compact Flash Report—Automatically scans the fabric and generate a report that shows the status of CompactFlash.
– CFS Static Peer Setup—Manage the peer list used during CFS on NPV-enabled switches. After setting up the static peers list, the CFS discovery on the switches will be changed to static mode for all peers in the list. Cisco DCNM-SAN does not automatically update static peers list. You may need to update the list using the CFS Static Peer Setup Wizard when a new switch is added to the fabric.
– Traffic Map Setup—Configures the list of external interfaces to the servers, and enabling or disabling disruptive load balancing. Using Traffic Map Setup you can specify the external ports that a server should use for traffic management.
– Flex Attach Pre-Configure Server—Sets the port configurations for all the ports in a switch such as enabling or disabling FlexAttach, setting the default VSAN ID, and setting the interface status.
– Flex Attach Move Server—Moves a server to another port on the same NPV device or another NPV device without changing the SAN.
– Flex Attach Replace Server—Replaces a failed server with a new server on the same port without changing the SAN.
– Server Based—Performs server-based data migration.
– Storage based—Performs storage-based data migration.
– Server LUN Discovery—Performs LUN discovery to select the LUNs available for migration and automates the session creation by matching the LUNs in the existing and new storage.
- FCoE—Launches the FCoE Configuration Wizard to create virtual Fibre Channel interfaces.
- Port Channel—Creates PortChannels from selected ISL either manually or automatically.
- DPVM Setup—Establishes dynamic port VSAN membership, enables autolearning, and activates the DPVM database.
- IP SAN
– FCIP Tunnel—Creates FCIP links between Gigabit Ethernet ports. Enables Fibre Channel write acceleration and IP compression.
– iSCSI Setup—Creates zones for iSCSI initiators and adds a VSAN to a target-allowed VSAN list.
– SAN Extension Tuner—Optimizes FCIP performance by generating either direct access (magnetic disk) or sequential access (magnetic tape) SCSI I/O commands and directing such traffic to a specific virtual target. This option is used to generate SCSI I/O commands (read and write) to the virtual target based on your configured options.
– Port Security—Prevents unauthorized access to a switch port in the Cisco MDS 9000 Family, rejects intrusion attempts and reports these intrusions to the administrator.
– IP ACL—Creates an ordered list of IP filters in a named IPv4-ACL or IPv6-ACL profile using the IPv4-ACL Wizard.
– License—Facilitate download and installation of licenses in selected switches in the fabric.
– Software—Verifies image compatibility and installs software images on selected switches in the fabric.
- Flow Load Balance Calculator —Allows you to get the best load-balancing configuration for your FICON flows. The calculator does not rely on any switch or flow discovery in the fabric.
- Device Manager—Invokes Device Manager for a switch.
- Command Line Interface —Enables command-line operations.
- Run CLI Commands—Runs command-line operations on more than one switch at a time.
Toolbar
The Cisco DCNM-SAN main toolbar provides icons for accessing the most commonly used menu bar options as shown in Table 4-3 .
Logical Domains Pane
Use the Logical Domains pane to manage attributes for fabrics, VSANs, and zones, and to access user-defined groups. Starting from NX-OS Release 4.2(0), SAN and LAN nodes are listed under Datacenter node and all the fabrics are listed under SAN node. When you select Datacenter node in the tree, Cisco DCNM-SAN displays all the switches and ISLs. When you select LAN node, Cisco DCNM-SAN displays only Ethernet switches and Ethernet links. Under the fabric node, VSANs are ordered by a VSAN ID. The segmented VSANs are placed under the fabric node. The label next to the segmented VSAN indicates the number of segments. You can expand a segmented VSAN and the segments under that VSAN. Right-click one of the folders in the tree and click a menu item from the pop-up menu. You see the appropriate configuration dialog box.
The default name for the fabric is the name, IP address, or WWN for the principal switch in VSAN 1. If VSAN 1 is segmented, the default name is chosen from a principal switch with the smallest WWN. The fabric names you see are as follows:
DETAILED STEPS
Step 1 Choose Server > Admin .
You see the Control Panel dialog box.
Step 2 Double-click the fabric name and enter the new name of the fabric.
Step 3 Click Apply to change the name.
Filtering
Cisco DCNM-SAN has a filtering mechanism that displays only the data that you are interested in. To filter, first select the fabric and VSAN from the Logical Domains pane. This action narrows the scope of what is displayed in the Fabric pane. Any information that does not belong to the selected items is dimmed. Also, any information that does not belong to the selected items is not displayed in the tables in the Information pane. The filter that you select is displayed at the top right of the Cisco DCNM-SAN window.
To further narrow the scope, select attributes from the Physical Attributes pane. The Cisco DCNM-SAN table, display, and filter criteria change accordingly.
Physical Attributes Pane
Use the Physical Attributes pane to display a tree of the options available for managing the switches in the currently selected fabric, VSAN, or zone.
To select an option, click a folder to display the options available and then click the option. You see the table with information for the selected option in the Information pane. The Physical Attributes pane provides the following main folders:
- Switches—Views and configures hardware, system, licensing, and configuration files.
- Interfaces—Views and configures FC physical, FC logical, VFC (FCoE), Ethernet, SVC, and PortChannel interfaces.
- FC Services—Views and configures Fibre Channel network configurations.
- IP—Views and configures IP storage and IP services.
- Events—Views and configures events, alarms, thresholds, notifications, and informs.
- Security—Views and configures MDS management and FC-SP security.
- FCoE—Views and configures FCoE interfaces.
- ISLs—Views and configures Inter-Switch Links.
- End Devices—Views and configures end devices.
Note You cannot view the detailed physical attributes of the data center switches or monitor the connections. When you select either a data center node or a LAN node the physical attributes pane will be blank.
Context Menu for Tables
When you right-click in the table, you see a pop-up menu with options that vary depending on the type of option you selected in the Physical Attributes pane. You can perform various operations by right-clicking the device listed in the table. To view various options available for switches, ISLs, and end devices, refer to the procedures in the sections that follows:
Viewing Switch Options
When you select the datacenter node, the switch table displays all the switches that are discovered. When you select the SAN node or the fabric node, the switch table displays all the Fibre Channel switches and when you select the LAN node, the switch table displays all the Ethernet switches.
Step 1 Click Switches in the Physical Attributes pane.
Step 2 Right-click the device in the table.
The pop-up menu provides the following options:
- Apply Changes—Applies the changes to the switch.
- Refresh Values—Refreshes the current values.
- Undo Changes—Undoes modifications to the switch.
- Export to File—Export the values to a file.
- Print Table—Prints the table.
- Detach Table—Detaches the table.
- Switch Attributes—Changes the switch properties.
- Interface Attributes—Changes the interface properties.
- Element Manager—Manages this switch.
- Command Line Interface—Enables to perform command line operations.
- Copy—Copies the switch.
- Purge—Purges the switch.
- Fix Location—Fixes the switch in the current location.
- Align—Aligns the switch.
- Show End Devices—Shows the end devices.
- Expand Multiple Links—Expands the links to this switch.
- Other—Other options.
- Group—Groups switches.
Viewing ISL Options
When you select the data center node, the ISLs table displays all of the Fibre Channel and Ethernet links. When you select the LAN node, the ISLs table displays all the Ethernet links.
Step 1 In the Physical Attributes pane, click ISLs and then click Summary tab.
Step 2 Right-click the device in the table.
The pop-up menu provides the following options:
- Refresh Values—Refreshes the current values.
- Copy—Copies information from a specific field.
- Find—Conducts search based on the input string.
- Export to File—Exports the values to a file.
- Print Table—Prints the table.
- Detach Table—Detaches the table.
- Interface Attributes—Changes the interface properties.
- Element Manager—Manages the device.
- FCIP Tunnel Attributes—Changes FCIP tunneling properties.
- Create Port Channel—Creates port channel.
- Re-enable—Reenables a disabled device.
- Enable FC-SP—Enables FC-SP.
- SAN Extention Tuner—Optimizes FCIP performance.
- Purge—Purges the device.
Note When you select a port channel from the table, the pop-up menu will have the following additional options:
- Member Attributes—Changes the member properties.
- Channel Attributes—Changes the port channel properties.
- Edit—Edits the channel properties.
Viewing End Device Options
Step 1 In the Physical Attributes pane, click End Devices and then click the Summary tab.
Step 2 Right-click the device in the table.
The pop-up menu provides the following options:
- Apply Changes—Applies the changes to the device.
- Refresh Values—Refreshes the current values.
- Copy—Copies the information specific to the field.
- Paste—Pastes the copied text.
- Undo Changes—Undoes modifications to the device.
- Find—Searches for information depending on the input string.
- Export to File—Exports the values to a file.
- Print Table—Prints the table.
- Detach Table—Detaches the table.
- Device Attributes—Changes the device properties.
- Interface Attributes—Changes the interface properties.
- Element Manager—Manages this device.
- Command Line Interface—Enables you to perform command line operations.
- Copy—Copies the switch.
- Purge—Purges the switch.
- Fix Location—Fixes the switch in the current location.
- Align—Aligns the switch.
- Ping—Pings another device.
- Trace Route—Determines the route taken by packets across the network.
- Select Dependent Ports—Selects dependent ports.
- Group—Groups devices.
Information Pane
Use the Information pane to display tables of information associated with the option selected from the menu tree in the Logical Domains or Physical Attributes panes. The Information pane toolbar provides buttons for performing one or more of the operations shown in Table 4-4 .
Opens the appropriate dialog box to make a new row in the table. |
|
Displays a non-editable copy of the table in the Information pane in its own window, which you can move around the screen. |
Note After making changes, you must save the configuration or the changes will be lost when the device is restarted.
Note The buttons that appear on the toolbar vary according to the option that you select. They are activated or deactivated (dimmed) according to the field or other object that you select in the Information pane.
Detachable Tables
Detachable tables in Cisco DCNM-SAN allow you to detach tables and move them to different areas on your desktop so that you can compare similar tables from different VSANs. You can keep informational tables open from one view while you examine a different area in Cisco DCNM-SAN. To detach tables, click the Detach Table icon in the Information pane in Cisco DCNM-SAN.
Fabric Pane
Use the Fabric pane to display the graphical representation of your fabric. Table 4-5 explains the graphics you may see displayed, depending on which devices you have in your fabric.
If a switch or director is grayed out, Cisco DCNM-SAN can no longer communicate with it.
The bottom of the Fabric pane has the following tabs:
- Fabric—When displaying multiple fabrics, each fabric has its own tab. You can switch between fabrics by clicking on their respective tabs.
- Log—Displays messages that describe Cisco DCNM-SAN operations, such as fabric discovery.
- Events—Displays information about the SNMP traps received by the management station. This includes combination events as detected by discovery and important traps such as license, SNMP, and FICON.
When viewing large fabrics in the Fabric pane, it is helpful to do the following tasks:
- Turn off end device labels.
- Collapse loops.
- Collapse expanded multiple links (collapsed multiple links are shown as very thick single lines).
- Dim or hide portions of your fabric by VSAN.
Note When a VSAN, zone, or zone member is selected in the VSAN tree, the map highlighting changes to identify the selected objects. To remove this highlighting, click the Clear Highlight button on the Fabric pane toolbar or choose Clear Highlight from the pop-up menu.
Context Menus
When you right-click an icon in the Fabric pane, you see a pop-up menu with options that vary depending on the type of icon selected. The various options available for different objects include the following:
- Open an instance of Device Manager for the selected switch.
- Open a CLI session for the selected switch.
- Copy the display name of the selected object.
- Execute a ping or traceroute command for the device.
- Show or hide end devices.
- View attributes.
- Quiesce and disable members for PortChannels.
- Set the trunking mode for an ISL.
- Create or add to a PortChannel for selected ISLs.
The Fabric pane has its own toolbar with options for saving, printing, and changing the appearance of the map. When you right-click the map, a pop-up menu appears that provides options (duplicated on the toolbar) for changing the appearance of the map.
Note You can launch web-based or non-web-based applications from the Fabric pane. To do this, you assign an IP address to the storage port or enclosure. Then right-click to bring up the pop-up menu, and select Device Manager.
Saving the Map
You can save the map in the Fabric Pane as an image, or as an editable Visio diagram. You can save the map with or without labels on the links. The created Visio diagram is editable and saved in two layers:
- The default layer includes all switches and links in the fabric.
- The end devices layer includes the end devices and can be turned off to remove end devices from the Visio diagram.
To save the map as a Visio diagram, choose Files > Export > Visio and choose Map or Map with link labels. The saved Visio diagram retains the viewing options that you selected from the Fabric pane. For example, if you collapse multiple links in the map and export the links as a Visio diagram, the Visio diagram shows those multiple links as one solid link.
The Show Tech Support option from the Tools menu also supports saving the map as a Visio diagram.
Purging Down Elements
The Fabric pane allows you to refresh the map at any time by clicking the Refresh Map icon. The Refresh Map icon redraws the map but does not purge elements that are down. To purge down elements you can:
- Choose Server > Purge Down Elements. This purges all down elements in the fabric.
- Right-click the Fabric pane and choose Purge Down Elements.
- Right-click a down element and choose Purge. This action purges only this element from the fabric.
Note If you select an element that is not down and purge it, that element will reappear on the next fabric discovery cycle.
Multiple Fabric Display
Cisco DCNM-SAN can display multiple fabrics in the same pane.
The information for both fabrics is displayed; you do not need to select a seed switch. To see details of a fabric, select the tab for that fabric at the bottom of the Fabric pane, or double-click the Cloud icon for the fabric in the SAN tab.
Note Enclosure names should be unique. If the same enclosure name is used for each port, Cisco DCNM-SAN shows a host/target enclosure connected to both fabrics. To fix this problem, you can either disable auto-creation or create unique enclosure names.
Filtering by Groups
You can filter the Fabric pane display by creating groups of switches or end ports.
Step 1 Right-click a switch or end port in the Fabric pane map and select Group > Create .
You see the Edit User Defined Group dialog box .
Step 2 Enter a group name in the Name field.
Step 3 Use the arrows to move additional switches or end ports from the Available column to the Selected column.
Step 4 Click OK to save the group.
To add a switch or end port to an existing group in Cisco DCNM-SAN.
Step 1 Right-click a switch or end device and select Group > Add To > YourGroupName .
You see the Edit User Defined Group dialog box.
Step 2 Use the arrows to move additional switches or end ports from the Available column to the Selected column.
Step 3 Click OK to save the updated group.
To filter the display by a group you have created.
Step 1 Expand the Groups folder in the Logical Domains pane.
You see the list of groups that you have created.
Step 2 Click the name of the group that you want to filter.
In the Fabric pane, the switches or end devices in your group are shown normally; all other switches and end devices are shown in gray.
Step 3 Click the Groups folder in the Logical Domains pane to return the display to normal.
Note User-defined groups tables are filtered based on switches in the group except for switches where CFS-controlled features are enabled when all CFS member switches are displayed to avoid misconfigurations.
Status Bar
The status bar at the bottom of the Cisco DCNM-SAN window shows the last entry displayed by the discovery process, and the possible error message on the right side. The status bar displays a message stating that something has changed in the fabric and a new discovery is needed. The status bar shows both short-term, transient messages (such as the number of rows displayed in the table) and long-term discovery issues.
Launching Cisco DCNM-SAN Client
As of Cisco SAN-OS 3.x and NX-OS Release 4.x, the Fabric Manager Client login procedure has changed.
Launching Fabric Manager Client in Cisco SAN-OS Release 3.2(1) and Later
You can launch Fabric Manager Client.
Note Network administrators must initially launch Cisco DCNM-SAN Client using Cisco DCNM-SAN Web Server, as described in the following procedure. Once an administrator has installed the Cisco DCNM-SAN Client icon on your desktop, you can double-click the icon to launch the Cisco DCNM-SAN Client.
Step 1 Open your browser and enter the IP address where you installed Cisco DCNM-SAN Server, or enter localhost if you installed Cisco DCNM-SAN Server on your local workstation.
You see the Cisco DCNM Web Client Login dialog box.
Step 2 Enter your user name and password and click Login .
You see the Cisco DCNM Web Client Summary page.
Step 3 Click the Download link in the upper right corner of the page.
You see the Download page for Cisco DCNM-SAN and Device Manager.
Step 4 Click the link for Cisco DCNM-SAN .
If you are launching Cisco DCNM-SAN Client for the first time, you see a message asking whether you want to create shortcuts for Cisco DCNM-SAN.
Step 5 Click Yes to create shortcuts for Cisco DCNM-SAN.
Note This message only appears the first time you launch Cisco DCNM-SAN Client. If you select No, your selection will be remembered and you will not be prompted to make a selection again. In this case, you will need to launch Cisco DCNM-SAN Client using the Cisco DCNM-SAN Web Client.
Step 6 When the software is installed and icons are created on your desktop, double-click the Cisco DCNM-SAN icon to launch Cisco DCNM-SAN.
You see the Cisco DCNM-SAN Login dialog box.
Step 7 Enter the Cisco DCNM-SAN Server user name and password.
Step 8 Check the Use SNMP Proxy check box if you want Cisco DCNM-SAN Client to communicate with Cisco DCNM-SAN Server through a TCP-based proxy server.
Step 9 Click Login . Once you successfully log in to Cisco DCNM-SAN Server, you can set the seed switch and open the fabrics that you are entitled to access.
Note When you launch Cisco DCNM-SAN Client for the first time or when there are no available fabrics, you see the Discover New Fabric dialog box.
You see the Discover New Fabric dialog box.
Note Only network administrators can discover new fabrics.
Step 10 Click the Ethernet (CDP) radio button to discover using Cisco Discovery Protocol (CDP).
Step 11 Starting from NX-OS Release 4.2(0), Fabric Manager uses Cisco Discovery Protocol to discover Ethernet switches such as Nexus 5000, Nexus 7000, Catalyst 4000, and Catalyst 6000 switches. You need to use a CDP seed switch for a CDP discovery.
Set the fabric seed switch to the Cisco MDS 9000 Family switch or Cisco Nexus 5000 Series that you want Fabric Manager to use.
Step 12 Choose the Auth-Privacy option according to the privacy protocol you have configured on your switch:
a. If you have not configured the switch with a privacy protocol, then choose Auth-Privacy option MD5 (no privacy).
b. If you have configured the switch with your privacy protocol, choose your Auth-Privacy choice.
Note You may use SNMP v2 credentials for CDP discovery as the most of the Catalyst switches do not use MD5-DES for configuration.
Note If you want a clean fabric discovery, remove the fabric and rediscover it. If you want a clean LAN discovery, unmanage LAN, remove the CDP seed switch and then rediscover it.
Step 13 Enter the username and password for the switch.
Step 14 (Optionsl) To limit the discovery, specify the VSAN range.
Scoping limits the resources discovered by Cisco DCNM-SAN client. You can either include a range of VSANs to be discovered or exclude a range of VSANs from being discovered.
a. To limit the discovery to a range of VSANs, click Included VSAN List radio button. Specify the range of VSANs.
b. To exclude a range of VSANs from being discovered, click Excluded VSAN List radio button. Specify the range of VSANs to be excluded.
You see the Control Panel dialog box.
You see the included and excluded VSANs list under the Fabric tab.
Note You see a message in the dialog box when the server and client are running on the same workstation and there are unlicensed fabrics in the database. You also see a message when there are unmanaged fabrics (the state of the licenses is unknown).
Note In the open tab, you see all the discovered fabrics displayed in the control panel. You need to click on the Open button to see all the discovered Ethernet switches.
Step 16 Check the check box(es) next to the fabric(s) you want to open in the Select column, or click Discover to add a new fabric.
Note Only network administrators can continuously manage or unmanage fabrics. For more information, see the “Selecting a Fabric to Manage Continuously” section.
Step 17 Click Open to open the selected fabric(s).
Note • If you have an incomplete view of your fabric, rediscover the fabric with a user that has no
VSAN restriction.
• If the fabric includes a Cisco Nexus 5000 Series switch, then the Layer 2 node appears under
the Switches > Interfaces > Ethernet tree, the VFC (FCoE) node appears under the
Switches > Interfaces tree, and the FCoE node appears under the Switches tree in the
Physical Attributes pane.
• For Cisco Nexus 5000 Series switches in the fabric, the tooltip for the switch shows the bind
information of a virtual Fibre Channel interface to its corresponding Ethernet interface, such
as vfc2(eth1/4).
You can launch Cisco DCNM-SAN Client from within a running instance of Cisco DCNM-SAN.
Step 1 Choose File > Open or click the Open Switch Fabric icon on the Cisco DCNM-SAN toolbar.
You see the Control Panel dialog box.
Step 2 Check the check box(es) next to the fabric(s) you want to open in the Select column and click Open .
Note Changes made using Cisco DCNM-SAN are applied to the running configuration of the switches that you are managing. If you have made changes to the configuration or performed an operation (such as activating zones), Cisco DCNM-SAN prompts you to save your changes before you exit.
Launching Cisco DCNM-SAN Client Using Launch Pad
Starting from Cisco NX-OS Release 4.2(0), you can use Cisco DCNM-SAN launch pad to connect to any server by specifying the IP address of the server. With launch pad, you can connect to any Cisco DCNM-SAN Server version 3.3(0) and later. Launch pad establishes connection with the server using HTTP protocol.
Step 1 Open your browser and enter the IP address where you installed Cisco DCNM-SAN Server, or enter localhost if you installed Cisco DCNM-SAN Server on your local workstation.
You see the Cisco DCNM-SAN Web Server Login dialog box.
Step 2 Enter your user name and password and click Login .
You see the Cisco DCNM-SAN Web Client Summary page.
Step 3 Click the Download link in the upper right corner of the page.
You see the Download page for Cisco DCNM-SAN and Device Manager.
Step 4 Click the link for Cisco DCNM-SAN .
You see the Cisco DCNM-SAN Server launch pad.
Step 5 Enter the host name of the server or IP address in the Server URL drop-down list.
Note Launch pad retains the history of the server URLs used. You can choose one of the previously user Server URLs from the drop-down list.
Setting Cisco DCNM-SAN Preferences
To set your preferences for the behavior of the Cisco DCNM-SAN, choose File > Preferences from the Cisco DCNM-SAN menu bar. You see the Preferences dialog box with the following tabs for setting different components of the application:
The default General preferences for Cisco DCNM-SAN are as follows:
- Show Device Name by —Displays the switches in the Fabric pane by IP address, DNS name, or logical name. The default setting for this value is Logical Name.
- Show WorldWideName (WWN) Vendor —Displays the world wide name vendor name in any table or listing displayed by Cisco DCNM-SAN. Check the Prepend Name check box to display the name in front of the IP address of the switch. Check the Replacing Vendor Bytes check box to display the name instead of the IP address. The default is the Prepend Name option.
- Show End Device Using —Displays end devices in the Fabric pane using alias or pWWN alias. The default setting for this value is Alias.
- Show Shortened iSCSI Names —Displays the default setting for this value is OFF.
- Show Timestamps as Date/Time —Displays timestamps in the date/time format. If this preference is not checked, timestamps are displayed as elapsed time. The default setting is enabled (checked).
- Telnet Path —Displays the path for the telnet.exe file on your system. The default is telnet.exe , but you need to browse for the correct location.
Note If you browse for a path or enter a path and you have a space in the pathname (for example, c:\program files\telnet.exe), then the path will not work. To get the path to work, you must manually place quotes around it (for example, "c:\program files\telnet.exe").
- Use Secure Shell instead of Telnet —Specifies whether to use SSH or Telnet when using the CLI to communicate with the switch. If enabled, you must specify the path to your SSH application. The default setting is disabled.
- Confirm Deletion —Displays a confirmation pop-up window when you delete part of your configuration using Cisco DCNM-SAN. The default setting is enabled (checked).
- Export Tables with Format —Specifies the type of file that is created when you export a table using Device Manager. The options are tab-delimited or XML. The default setting is Tab-Delimited.
- Show CFS Warnings—Shows warning messages if CFS is not enabled on all switches for a selected feature.
The default SNMP preferences for Cisco DCNM-SAN are as follows:
- Retry request 1 time(s) after 5 sec timeout —You can set the retry value to 0-5, and the timeout value to 3-30.
- Trace SNMP packets in Log —The default setting for this value is ON.
- Enable Audible Alert when Event Received —The default setting for this value is OFF.
The default Map preferences for Cisco DCNM-SAN are as follows:
- Display Unselected VSAN Members —Displays the unselected VSAN members in the Fabric pane. The default setting for this value is ON.
- Display End Devices —Displays the fabric’s end devices in the Fabric pane. The default setting for this value is ON.
- Display End Device Labels —Displays the fabric’s end device labels in the Fabric pane. The default setting for this value is OFF.
- Expand Loops —Displays the loops in the fabric as individual connections in the Fabric pane. The default setting for this value is OFF.
- Expand Multiple Links —Displays multiple links in the Fabric pane as separate lines instead of one thick line. The default setting for this value is OFF.
- Open New Device Manager Each Time —Opens a new instance of Device Manager each time that you invoke it from a switch in your fabric. The default value is OFF, which means that only one instance of Device Manager is open at a time.
- Select Switch or Link from Table —Allows you to select a switch or link in the Fabric pane by clicking the switch or link in a table in the Information pane. The default setting for this value is disabled (unchecked), which means clicking a switch or link in the table does not change the switch or link selection in the Fabric pane.
- Layout New Devices Automatically —Automatically places new devices in the Fabric pane in an optimal configuration. The default setting for this value is OFF. In this mode, when you add a new device, you must manually reposition it if the initial position does not suit your needs.
- Use Quick Layout when Switch has 30 or more End Devices —Displays the default setting for this value (30). You can enter any number in this field. Enter 0 to disable Quick Layout.
- Override Preferences for Non-default Layout —Displays the default setting for this value (ON).
- Automatically Save Layout —If this option is enabled, any changes in the layout are automatically saved. The default setting for this value is ON.
- Detach Overview Window —Allows you to easily center the Fabric pane on the area of the fabric that you want to see. (This feature is useful for large fabrics that cannot be displayed entirely within the Fabric pane.) Bring up the overview window by clicking the Show/Hide Overview Window button. It overlays the fabric window and remains there until you click the Show/Hide Overview Window button again. If you enable this preference, you can detach the overview window and move it to one side while you access the Fabric pane. The default setting for this value is disabled (unchecked).
Network Fabric Discovery
Cisco DCNM-SAN collects information about the fabric topology through SNMP queries to the switches that are connected to Cisco DCNM-SAN. The switch replies after having discovered all devices connected to the fabric by using the information from its FSPF technology database and the Name Server database and collected using the Fabric Configuration Server’s request/response mechanisms that are defined by the FC-GS-3/4 standard. When you start Cisco DCNM-SAN, you enter the IP address (or host name) of a seed switch for discovery.
After you start Cisco DCNM-SAN and the discovery completes, Cisco DCNM-SAN presents you with a view of your network fabric, including all discovered switches, hosts, and storage devices.
Network LAN Discovery
Starting from NX-OS Release 4.2(0), you can discover Nexus and Catalyst Ethernet switches using Cisco Discovery Protocol (CDP). DataCenter 3(DC3) switches are displayed under Datacenter and LAN nodes. Cisco DCNM-SAN displays basic information about DC3 switches and its ISLs.
Modifying the Device Grouping
Because not all devices are capable of responding to FC-GS-3 requests, different ports of a single server or storage subsystem may be displayed as individual end devices on the Cisco DCNM-SAN map.
DETAILED STEPS
Step 1 Expand End Devices and then choose Storage or Hosts in the Physical Attributes pane.
You see the end devices displayed in the Information pane.
Step 2 Click one of the devices in the Fabric pane, or click the Enclosures tab of the Information pane, and then click the device name (in the Name field) that you want to include in the enclosure.
Step 3 Enter a name to identify the new enclosure in the Fabric pane map.
Step 4 Click once on the device name in the Name field. To select more than one name, press the Shift key and click each of the other names.
Step 5 Press Ctrl-C to copy the selected name(s).
Step 6 Press Ctrl-V to paste the device name into the Name field.
Note To remove devices from an enclosure, triple click the device name and press Delete. To remove an enclosure, repeat this step for each device in the enclosure.
DETAILED STEPS
Step 1 Expand End Devices and choose Hosts or Storage from the Physical Attributes pane.
You see the list of devices in the Information pane. The NxPorts tab is the default.
Step 2 Right-click the enclosure names that you want to convert to alias names and choose Alias > Enclosure .
The Ailas > Enclosures window appears . It contains a list of expressions. You can also add expressions to the list and modify expressions in the current list.
Step 3 Click the Apply Changes icon to save the changes and then click Close.
Note Cisco DCNM-SAN uses the regular expressions to convert multiple alias names into one enclosure. The alias names should be in the same expression pattern rule. You can create enclosure names from selected aliases using the regular expresssions list.
Using Alias Names as Descriptions
Step 1 Choose End Devices and from the Physical Attributes pane.
You see the list of devices in the Information pane.
Step 3 Select the device names that you want to populate the description with alias names and then click Alias > Enclosure button .
You see the alias names are copied to corresponding rows in the description column.
Note Cisco DCNM-SAN does not parse or format the alias name while copying.
Controlling Administrator Access with Users and Roles
Cisco MDS 9000 Family switches support role-based management access whether using the CLI or Cisco Cisco DCNM-SAN. This lets you assign specific management privileges to particular roles and then assign one or more users to each role.
The default-role contains the access permissions needed by a user to access the GUI (Cisco DCNM-SAN and Device Manager). These access permissions are automatically granted to all users in order for them to use the GUI.
Cisco Cisco DCNM-SAN uses SNMPv3 to establish role-based management access. After completing the setup routine, a single role, user name, and password are established. The role assigned to this user allows the highest level of privileges, which includes creating users and roles. Use the Cisco Cisco DCNM-SAN to create roles and users and to assign passwords as required for secure management access in your network.
Note Either to create a new SNMPv3 user or modify password of SNMPv3 user, the DCNM login user need to have enabled with DES/AES privacy password. Since the creating and modifying SNMP SET request need to be encrypted, the login user password needs to have the privacy password.
Using Cisco DCNM-SAN Wizards
Cisco DCNM-SAN Client provides the following wizards to facilitate common configuration tasks:
- VSAN—Creates VSANs on multiple switches in the fabric and sets VSAN attributes including interop mode, load balancing, and FICON.
- Zone Edit Tool—Creates zone sets, zones, and aliases. Adds members to zones and edits the zone database.
- IVR Zone—Creates IVR zone sets, zones, and aliases. Enables IVR NAT and auto-topology. Adds members to IVR zones, and edits the IVR zone database.
- FCoE—Creates virtual Fibre Channel (FC) interfaces and VLAN-VSAN mappings, and binds virtual FC interfaces to Ethernet interfaces or PortChannels.
- PortChannel—Creates PortChannels from selected ISLs either manually or automatically. Sets PortChannel attributes such as channel ID and trunking mode.
- FCIP—Creates FCIP links between Gigabit Ethernet ports. Enables Fibre Channel write acceleration and IP compression.
- DPVM—Establishes dynamic port VSAN membership, enables autolearning, and activates the DPVM database.
- Port Security—Prevents unauthorized access to Cisco MDS switches and reports these intrusions to the administrator.
- iSCSI—Creates zones for iSCSI initiators and adds a VSAN to a target-allowed VSAN list.
- NPV—Reduces the number of Fibre Channel domain IDs in SANs.
- QoS—Sets QoS attributes for zones in the selected VSAN.
- IP ACL—Creates ordered IP access control lists and distributes to selected switches in the fabric.
- License Install—Facilitates download and installation of licenses in selected switches in the fabric.
- Software Install—Verifies image compatibility and installs software images on selected switches in the fabric.
Cisco DCNM-SAN Troubleshooting Tools
Cisco DCNM-SAN has several troubleshooting tools available from the toolbar or Tools menu
- Zone Merge Analysis —The zone merge analysis tool (available from the Zone menu) enables you to determine if zones will merge successfully when two Cisco MDS switches are interconnected. If the interconnected switch ports allow VSANs with identical names or contain zones with identical names, then Cisco DCNM-SAN verifies that the zones contain identical members. The merge analysis tool can be run before attempting a merge or after fabrics are interconnected to determine zone merge failure causes.
- End-to-End Connectivity —Cisco DCNM-SAN’s end-to-end connectivity analysis tool uses FC Ping to verify interconnections between Cisco MDS switches and end-device (HBAs and storage devices) in a particular VSAN. In addition to basic connectivity, Cisco DCNM-SAN can optionally verify the following:
– Zones contain at least two members.
End devices are connected to a manageable switch (have a currently active in-band or out-of-band management path.)
- Switch Health Analysis —You can run an in-depth switch health analysis with Cisco DCNM-SAN. It verifies the status of all critical Cisco MDS switches, modules, ports, and Fibre Channel services. Over 40 conditions are checked. This tool provides a very fast, simple, and thorough way to assess Cisco MDS switch health.
- Fabric Configuration Analysis —Cisco DCNM-SAN includes a fabric configuration analysis tool. It compares the configurations of all Cisco MDS switches in a fabric to a reference switch or a policy file. You can define what functions to check and what type of checks to perform. The analysis can look for mismatched values, and missing or extra values. If all configuration checking is performed for all functions, over 200 checks are performed for each Cisco MDS switch.
After the analysis is run, the results are displayed with details about the issues that were discovered. You can automatically resolve configuration differences by selecting them and clicking the Resolve button. Cisco DCNM-SAN automatically changes the configuration to match the reference switch or policy file.
Integrating Cisco DCNM-SAN and Data Center Network Management Software
Cisco DCNM-SAN and Data Center Network Management (DCNM) software are the two major components in the Cisco next-generation data center environment. Cisco DCNM-SAN configures Cisco Nexus 5000 Series switches and Cisco MDS 9000 Series switches. DCNM software configures Cisco Nexus 5000 and Cisco Nexus 7000 Series switches. The Scope of the Cisco DCNM-SAN software is confined to SAN while the scope of the DCNM-LAN software is limited to the LAN network.
In a typical data center environment, the mixture of SAN and LAN topology are becoming increasingly common. Since the two management software are not designed to work across their topology limits, users are not able to navigate to Cisco DCNM-SAN from DCNM-LAN software and vice versa.
Integrating Cisco DCNM-SAN and DCNM-LAN provides a single platform to manage the networks in data center 3.0 and it provides seamless user experience under specific configuration. Starting from Cisco MDS NX-OS Release 4.2, the directory structure has changed to accommodate the integration of Cisco DCNM-SAN with Cisco Nexus 5000 Series products.