HP StorageWorks Fabric OS 5.3.
Legal and notice information © Copyright 2007 Hewlett-Packard Development Company, L.P. © Copyright 2007 Brocade Communications Systems, Incorporated Confidential computer software. Valid license from HP required for possession, use or copying. Consistent with FAR 12.211 and 12.212, Commercial Computer Software, Computer Software Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government under vendor's standard commercial license.
Version 5.3.0b Effective date October 2007 Description Fabric OS 5.3.0b is a patch release that contains fixes since the release of Fabric OS 5.3.0a. There is no new device support added with this release for HP StorageWorks platforms. Update recommendations HP strongly recommends that users upgrade to Fabric OS 5.3.0b as soon as possible, particularly if your model is the Brocade 4Gb SAN Switch for HP c-Class BladeSystem (Brocade 4024). Install Fabric OS 5.3.
Support for embedded switch models The B-Series embedded switches have transitioned from supporting the Fabric OS 5.0.5 stream only, to operating with Fabric OS 5.2.1b and later. The B-Series embedded switch models include: • Brocade 4Gb SAN Switch for HP p-Class BladeSystem (Brocade 4012) • Brocade 4Gb SAN Switch for HP c-Class BladeSystem (Brocade 4024) NOTE: The Fabric OS 5.0.5 stream remains active for the Core Switch 2/64 and for the SAN Director 2/128 in chassis modes 3 and 4.
• Access Gateway mode support on the HP StorageWorks 4/16 SAN Switch (not supported on the 4/8 SAN Switch) • Access Gateway enhancements: • Web Tools support • Fabric Manager support • NPIV on F_ports • Fibre Channel Routing enhancements • IP Broadcast zone support • IP over FC also via FCR • IP Filter support (formerly MAC and Management port ACLs in Secure Fabric OS (SFOS)) • Support for FCS with base Fabric OS (formerly in SFOS) • Support for multiple NTP servers • Port mirroring for 4/32B switch • Secur
requiring a domain and the associated fabric rebuild traffic that is prevalent when switches are powered on, or added, or removed from a fabric. Refer to the Brocade Access Gateway Administrator’s Guide available on http://www.hp.com/go/san for more information. Access Gateway support in non-Brocade fabrics In addition to being supported in Brocade fabrics, Access Gateway is supported for connectivity to the following: • McDATA fabrics running EOS 09.00.xx with Brocade FOS 5.2.
• • • • DH-CHAP now supported for authentication of HBAs and end-devices in addition to switches Additional password security options Lockout of Admin users that fail authorization. Flexible E_Port authentication settings, allowing better interoperability options for fabrics with varying levels of support. Certificate authentication is now optional. • Auditing of authorization attempts.
Table 1 Current supported Fabric OS versions Model Earliest compatible version Recommended version HP StorageWorks 1 Gb Switch 2.6.2c 2.6.2d1 HP StorageWorks SAN Switch 2/8–EL, HPStorageWorks SAN Switch 2/16, MSA SAN Switch 2/8 3.2.1 3.2.1c HP StorageWorks Core Switch 2/64 5.0.5 5.0.5e HP HP HP HP 5.1.0d 5.3.0b HP StorageWorks 4/64 SAN Switch 5.1.0d 5.3.0b nl HP StorageWorks B-Series MP Router Blade, HP StorageWorks 400 MP Router 5.1.0d 5.3.
CAUTION: Install port blades like the HP StorageWorks 4/48 SAN Director Blade (FC4–48) only after upgrading to Fabric OS 5.2.0a or later. HP does not support directly upgrading from more than two previous releases. For example, upgrading from Fabric OS 5.1.x to 5.3.0b is supported, but upgrading from Fabric OS 5.0.x or a previous release directly to 5.3.0b is not. Upgrading a switch from Fabric OS 5.0.x or a previous release to 5.3.0 requires a two-step process: first upgrade to Fabric OS 5.1.x or 5.2.
FICON support With release 5.2.0 and later, the Switch Connection Control high integrity requirement for cascading FICON is available in the standard base Fabric OS. End users can now deploy new cascade FICON Directors without purchasing a separate Secure Fabric OS license. To add a new FICON Director into existing cascaded configurations already running Secured Fabric OS, HP recommends that users continue to deploy Secure Fabric OS on the new FICON Director instead of migrating to FOS ACL configuration.
FC4–48 port Blade for the 4/256 SAN Director • The HP StorageWorks 4/48 SAN Director Blade requires a minimum of Fabric OS 5.2.0a. Do not insert the FC4–48 Blade into the 4/256 chassis until the chassis is running Fabric OS 5.2.0a or later. After Fabric OS has been updated and an FC4–48 has been installed, the Fabric OS will not be able to be downgraded earlier than 5.2.0a until the FC4–48 is removed. • The FC4–48 Blade supports only core PID (fmt 1) in Secure Fabric OS.
Firmware upgrade/ downgrade • When upgrading from Fabric OS 5.1.0x to 5.2.0x or 5.3.0x, if two or more inter-fabric links (IFLs) connect to an edge fabric, one IFL will stay online and the other IFLs will go online and offline. This will cause a temporary traffic disruption going from multiple IFLs to one IFL and then back to multiple IFLs. This is due to the new front domain consolidation feature in Fabric OS 5.2.0, where the IFLs connected to the same edge share the same front domain.
HA If there is an already segmented port and backbone devices are exported to an edge fabric, a build fabric/fabric reconfiguration can occur after running haFailover. Ensure that there no segmented port exist before upgrading firmware. IPSec for B-Series MP Router Blade (FR4–18i) • IPSec implementation details: • Pre-shared key • Main mode (IKE negotiation protocol) • Tunnel mode in Encapsulating Security Payload (ESP) • IPSec specific statistics not provided.
FCIP • Frame drops observed on FCIP slow links: • The frame drops occur when the FCIP tunnel bandwidth is set to 10 Base-T (10Mbps), E1 (1.048Mbps), or T1 (1.544Mbps). • With E1 or T1, frames drop even without an impaired link. • With 10 Base-T, frame drops may be observed when a low impairment is put to the link. • The portperfshow command indicated incorrect (smaller) bidirectional throughput on the FCIP tunnel when Fastwrite/Tape Pipelining is enabled.
Zoning considerations with FC4–48 Blade B-Series switches running pre-5.2.0 firmware do not accept zone databases with Domain, Port Index, references to ports higher than 255. Zoning in Fabric OS 5.2.0 and later, therefore, do not allow a Domain, Port Index entry for ports above 255 to be created unless all switches in the fabric are at Fabric OS 5.2.0 or later versions. Once such an entry has been put into the zone database, an attempt to connect a pre-Fabric OS 5.2.
Faulty SFPs External port with a faulty SFP will be disabled, then enabled once good SFP is inserted. However, port will still show as faulty even though it is healthy. To get the correct "healthy" indication, after enabling the port with the good SFP, remove and re-insert it and the port will then show as healthy.
Fabric OS 5.3.0 fixes Table 3 lists defects closed in the Fabric OS 5.3.0 firmware release. Table 3 Fabric OS 5.3.0 closed defects Closed defect summary Solution 4/256 Director running FICON with fsmode enabled & DLS on and port based route policy panics after upgrade from Fabric OS 5.0.x to 5.1.x or 5.2.0. Fixed per Fabric OS 5.3.0 Kernel Ops error when counter is overrun during stress to fail test. Fixed per Fabric OS 5.3.
FICON traps sent with wrong “Enterprise” value resulting in trap being processed as a swFault. Fixed per Fabric OS 5.3.0 In Web Tools customized port detail report, the report will be generated for all ports even if the user gives a particular port range as a filter. Fixed per Fabric OS 5.3.0 On 2Gb/s platforms, switch panic can occur if unstable or faulty port generates excessive number of interrupts. Fixed per Fabric OS 5.3.
In a FICON environment a Switch panic (in the Management Server daemon) could be seen if the switch receives one of three FICON specific frames (FICON GCAP, RLIR, RNID) and the fabric goes "unstable" (fabric being rebuilt such as when one of the switches in the fabric is powered off) before a response is sent. Fixed per Fabric OS 5.3.0 Traffic can’t be routed into backbone fabric from EX_Port on 400 MP Router with domain ID 7 or 12 and from FR4-18i Blade in 4/256 with various domain ID’s.
Modifying port speed and trunking on FC4-48 ports from Web Tools, followed by HAfailover, and then trying to re-launch, Port Admin window on those same ports fails to reload Web Tools window. Fixed per Fabric OS 5.3.0 F_Port route cleanup doesn’t happen correctly when NPIV is used on switch in Access Gateway mode. Fixed per Fabric OS 5.3.0 EZSwitch Setup device display is overlapped in Display Connection window when window size not maximized. Fixed per Fabric OS 5.3.
Portstats: Selecting the “Show delta” radio button and clicking on the clear counter button, doesn’t clear the counters. It changes the values to negative. Clicking the clear counter button again will reset counter to zero. Fixed per Fabric OS 5.3.0 May see FFDC warning messages when manually changing switch IP address in DHCP network. Fixed per Fabric OS 5.3.
During stress testing, switch may report fabric busy following issuance of a long string of operations repeatedly. Fixed per Fabric OS 5.3.0 When using interactive mode to execute pathinfo, but with an invalid source port value, there is no error message. Fixed per Fabric OS 5.3.0 After receiving login reject on FC4-16IP, subsequent login attempts may fail intermittently under some conditions. This can be avoided by moving the session back to init state after rejecting a login. Fixed per Fabric OS 5.3.
Denial-of-Service condition affecting X.509 certificates verification (NISCC #729618) due to SSL vulnerability in OpenSSL. FOS 5.3.0 includes new version of OpenSSL that resolves this. Fixed per Fabric OS 5.3.0 Incorrect time in Web Tools Switch Health report. Fixed per Fabric OS 5.3.0 Incorrect F_Port behavior when RX side of the cable is disconnected, while the TX side is still inserted. Fixed per Fabric OS 5.3.
Fabric OS 5.3.0a fixes Table 4 lists defects closed in the Fabric OS 5.3.0a firmware release. Table 4 Fabric OS 5.3.0a closed defects Closed defect summary Solution Iswitchd panic occurred during data migration with DMM when invalid frame issued to the switch. Fixed per Fabric OS 5.3.0a. Diag failure caused FA4-18 to report a fault after continuously running CP failover test. Fixed per Fabric OS 5.3.0a. Panic occurred on SAN Director 2/128 when running MS commands GPT/GPPN/GPS/GAPNL continuously.
When supportsave is run in a continuous loop, certain types of files are not detected which periodically generates the message: SupportSave completed sh: /tmp/supportSave_files/CONSOLE0: No such file or directory. File name can vary. Fixed per Fabric OS 5.3.0b. When the SFP/XFP power and voltage readings are above or below the range, an excessive number of alert messages were reported. Fixed per Fabric OS 5.3.0b.