FICON Administrator's Guide v6.4.0 (53-1001771-01, June 2010)

20 FICON Administrator’s Guide

53-1001771-01

Configuring Cascaded FICON

In addition to performing the steps listed in “Configuring switched point-to-point FICON” on

page 16, you also need to perform the following steps to configure cascaded FICON.

CAUTION

Configuring the switch for FICON is a disruptive process. The switch must be disabled to configure

switch parameters.

1. Enter the switchDisable command to disable each switch in the fabric.

2. Perform the following actions for each switch:

a. Enable the IDID flag.

b. Set the domain ID. It is highly recommended that the switch ID used in HCD and IOCP be

the same as the switch address in hexadecimal. All switches ship from the factory with a

default domain ID of 1. Best practice is to use something other than 1 so that a new switch

can be added to the fabric without changing the domain ID.

3. Enter the switchEnable command to enable the switches. This rebuilds the fabric.

4. Use the secPolicyCreate command to configure the Switch Connection Control policies on all

switches to limit connectivity to only the switches in the selected fabric.

switch:admin> secPolicyCreate SCC_POLICY, member;...;member

Where:

member indicates a switch that is permitted to join the fabric. Specify switches by WWN, domain

ID, or switch name. Enter an asterisk (*) to indicate all the switches in the fabric. To create a

policy that includes all the switches in the fabric:

switch:admin> secPolicyCreate SCC_POLICY ”*”

5. Save or activate the new policy by entering either the secPolicySave or the secPolicyActivate

command. If neither of these commands is entered, the changes are lost when the session is

logged out. To activate the SCC policy:

switch:admin> secPolicyActivate

6. Enter the fddCfg command to enable ACL Fabric Wide Consistency Policy and enforce a strict

SCC policy

switch:admin> fddcfg --fabwideset ”SCC:S”

7. Connect and enable channel and control unit (CU) devices. The Query for Security Attributes

(QSA) response to the channel indicates that the fabric binding and IDID are enabled.