HP StorageWorks Fabric OS 5.3.
Legal and notice information © Copyright 2007 Hewlett-Packard Development Company, L.P. © Copyright 2007 Brocade Communications Systems, Incorporated Confidential computer software. Valid license from HP required for possession, use or copying. Consistent with FAR 12.211 and 12.212, Commercial Computer Software, Computer Software Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government under vendor's standard commercial license.
Version 5.3.0c Effective date November 2007 Description Fabric OS 5.3.0c is a patch release that contains fixes since the release of Fabric OS 5.3.0b. There is no new device support added with this release for HP StorageWorks platforms. Update recommendations HP strongly recommends that users upgrade to Fabric OS 5.3.0c as soon as possible, particularly if your model is the Brocade 4Gb SAN Switch for HP c-Class BladeSystem (Brocade 4024) and you are running a version older than 5.3.0b.
Support for embedded switch models The B-Series embedded switches have transitioned from supporting the Fabric OS 5.0.5 stream only, to operating with Fabric OS 5.2.1b and later. The B-Series embedded switch models include: • Brocade 4Gb SAN Switch for HP p-Class BladeSystem (Brocade 4012) • Brocade 4Gb SAN Switch for HP c-Class BladeSystem (Brocade 4024) NOTE: The Fabric OS 5.0.5 stream remains active for the Core Switch 2/64 and for the SAN Director 2/128 in chassis modes 3 and 4.
• Access Gateway mode support on the HP StorageWorks 4/16 SAN Switch (not supported on the 4/8 SAN Switch) • Access Gateway enhancements: • Web Tools support • Fabric Manager support • NPIV on F_ports • Fibre Channel Routing enhancements • IP Broadcast zone support • IP over FC also via FCR • IP Filter support (formerly MAC and Management port ACLs in Secure Fabric OS (SFOS)) • Support for FCS with base Fabric OS (formerly in SFOS) • Support for multiple NTP servers • Port mirroring for 4/32B switch • Secur
requiring a domain and the associated fabric rebuild traffic that is prevalent when switches are powered on, or added, or removed from a fabric. Refer to the Brocade Access Gateway Administrator’s Guide available on http://www.hp.com/go/san for more information. Access Gateway support in non-Brocade fabrics In addition to being supported in Brocade fabrics, Access Gateway is supported for connectivity to the following: • McDATA fabrics running EOS 09.00.xx with Brocade FOS 5.2.
• • • • DH-CHAP now supported for authentication of HBAs and end-devices in addition to switches Additional password security options Lockout of Admin users that fail authorization. Flexible E_Port authentication settings, allowing better interoperability options for fabrics with varying levels of support. Certificate authentication is now optional. • Auditing of authorization attempts.
Table 1 Current supported Fabric OS versions Model Earliest compatible version Recommended version HP StorageWorks 1 Gb Switch 2.6.2c 2.6.2d1 HP StorageWorks SAN Switch 2/8–EL, HPStorageWorks SAN Switch 2/16, MSA SAN Switch 2/8 3.2.1 3.2.1c HP StorageWorks Core Switch 2/64 5.0.5 5.0.5e HP HP HP HP 5.1.0d 5.3.0c HP StorageWorks 4/64 SAN Switch 5.1.0d 5.3.0c nl HP StorageWorks B-Series MP Router Blade, HP StorageWorks 400 MP Router 5.1.0d 5.3.
CAUTION: Install port blades like the HP StorageWorks 4/48 SAN Director Blade (FC4–48) only after upgrading to Fabric OS 5.2.0a or later. HP does not support directly upgrading from more than two previous releases. For example, upgrading from Fabric OS 5.1.x to 5.3.0c is supported, but upgrading from Fabric OS 5.0.x or a previous release directly to 5.3.0c is not. Upgrading a switch from Fabric OS 5.0.x or a previous release to 5.3.0 requires a two-step process: first upgrade to Fabric OS 5.1.x or 5.2.
FICON support With release 5.2.0 and later, the Switch Connection Control high integrity requirement for cascading FICON is available in the standard base Fabric OS. End users can now deploy new cascade FICON Directors without purchasing a separate Secure Fabric OS license. To add a new FICON Director into existing cascaded configurations already running Secured Fabric OS, HP recommends that users continue to deploy Secure Fabric OS on the new FICON Director instead of migrating to FOS ACL configuration.
FC4–48 port Blade for the 4/256 SAN Director • The HP StorageWorks 4/48 SAN Director Blade requires a minimum of Fabric OS 5.2.0a. Do not insert the FC4–48 Blade into the 4/256 chassis until the chassis is running Fabric OS 5.2.0a or later. After Fabric OS has been updated and an FC4–48 has been installed, the Fabric OS will not be able to be downgraded earlier than 5.2.0a until the FC4–48 is removed. • The FC4–48 Blade supports only core PID (fmt 1) in Secure Fabric OS.
Firmware upgrade/ downgrade • When upgrading from Fabric OS 5.1.0x to 5.2.0x or 5.3.0x, if two or more inter-fabric links (IFLs) connect to an edge fabric, one IFL will stay online and the other IFLs will go online and offline. This will cause a temporary traffic disruption going from multiple IFLs to one IFL and then back to multiple IFLs. This is due to the new front domain consolidation feature in Fabric OS 5.2.0, where the IFLs connected to the same edge share the same front domain.
HA If there is an already segmented port and backbone devices are exported to an edge fabric, a build fabric/fabric reconfiguration can occur after running haFailover. Ensure that there no segmented port exist before upgrading firmware. IPSec for B-Series MP Router Blade (FR4–18i) • IPSec implementation details: • Pre-shared key • Main mode (IKE negotiation protocol) • Tunnel mode in Encapsulating Security Payload (ESP) • IPSec specific statistics not provided.
FCIP • Frame drops observed on FCIP slow links: • The frame drops occur when the FCIP tunnel bandwidth is set to 10 Base-T (10Mbps), E1 (1.048Mbps), or T1 (1.544Mbps). • With E1 or T1, frames drop even without an impaired link. • With 10 Base-T, frame drops may be observed when a low impairment is put to the link. • The portperfshow command indicated incorrect (smaller) bidirectional throughput on the FCIP tunnel when Fastwrite/Tape Pipelining is enabled.
Zoning considerations with FC4–48 Blade B-Series switches running pre-5.2.0 firmware do not accept zone databases with Domain, Port Index, references to ports higher than 255. Zoning in Fabric OS 5.2.0 and later, therefore, do not allow a Domain, Port Index entry for ports above 255 to be created unless all switches in the fabric are at Fabric OS 5.2.0 or later versions. Once such an entry has been put into the zone database, an attempt to connect a pre-Fabric OS 5.2.
Faulty SFPs External port with a faulty SFP will be disabled, then enabled once good SFP is inserted. However, port will still show as faulty even though it is healthy. To get the correct "healthy" indication, after enabling the port with the good SFP, remove and re-insert it and the port will then show as healthy.
• Provides ability to clear 400 MP Router or B-Series MP Router Blade GE port Error counters using portStatsClear CLI command. Fabric OS 5.3.0 fixes Table 3 lists defects closed in the Fabric OS 5.3.0 firmware release. Table 3 Fabric OS 5.3.0 closed defects Closed defect summary Solution 4/256 Director running FICON with fsmode enabled & DLS on and port based route policy panics after upgrade from Fabric OS 5.0.x to 5.1.x or 5.2.0. Fixed per Fabric OS 5.3.
User was able to configure isns client via isnsccfg to communicate with isns server through a port on FR4-18i, but this will not work (nor should it). Fixed per Fabric OS 5.3.0 FICON traps sent with wrong “Enterprise” value resulting in trap being processed as a swFault. Fixed per Fabric OS 5.3.0 In Web Tools customized port detail report, the report will be generated for all ports even if the user gives a particular port range as a filter. Fixed per Fabric OS 5.3.
Process login drop due to devices in different edge fabrics with same node WWN. Applies to 4/256 with FCR-18i Blade, and 400 MP Router. Routers may not forward the Nameserver request to proper domain, resulting in request timeout & retries every 2 seconds. Fixed per Fabric OS 5.3.
Web Tools incorrectly returns “Directory change failed” error message rather than “file path provided is not valid” error message when config upload fails due to invalid file path. Fixed per Fabric OS 5.3.0 Modifying port speed and trunking on FC4-48 ports from Web Tools, followed by HAfailover, and then trying to re-launch, Port Admin window on those same ports fails to reload Web Tools window. Fixed per Fabric OS 5.3.
Error messages from ACL configuration through SMI are too generic and don’t contain sufficient information to debug the problem. Fixed per Fabric OS 5.3.0 Portstats: Selecting the “Show delta” radio button and clicking on the clear counter button, doesn’t clear the counters. It changes the values to negative. Clicking the clear counter button again will reset counter to zero. Fixed per Fabric OS 5.3.0 May see FFDC warning messages when manually changing switch IP address in DHCP network.
During stress testing, a significant delay in traffic coming back from a Fibre Channel Router (FCR) failure in fully redundant SAN configuration was seen, as traffic temporarily stopped before taking redundant path after rebooting one of the FCRs in dual back bone fabric. Fixed per Fabric OS 5.3.0 During stress testing, switch may report fabric busy following issuance of a long string of operations repeatedly. Fixed per Fabric OS 5.3.
Vulnerabilities reported about open SSL VU#386964 & VU#547300. For VU#547300:OpenSSL SSL_get_shared_ciphers() vulnerable to buffer overflow. For VU#386964:OpenSSL SSLv2 client code fails to properly check for NULL. Fixed per Fabric OS 5.3.0 Denial-of-Service condition affecting X.509 certificates verification (NISCC #729618) due to SSL vulnerability in OpenSSL. FOS 5.3.0 includes new version of OpenSSL that resolves this. Fixed per Fabric OS 5.3.0 Incorrect time in Web Tools Switch Health report.
During iSCSI 1024 session stress testing, one port lost multiple sessions. Even though switchshow –iscsi showed less than 64 sessions, iSCSI initiator wasn’t able to log in to the target (out of resources error). Fixed per Fabric OS 5.3.0 Incorrect GID_FT response from NameServer. NameServer assumes device’s FC4 type is FCP when GID_FT request is sent to the switch asking for PIDs of type FCP. PID of the sending device is incorrectly included in the reply list. Fixed per Fabric OS 5.3.
Fabric OS 5.3.0b fixes Table 5 lists defects closed in the Fabric OS 5.3.0b firmware release. Table 5 Fabric OS 5.3.0b closed defects Closed defect summary Solution With FC Tape Pipelining enabled on a 400 MP Router/MP Router Blade FCIP connection, data written to tape using a block size of greater than 128 KB will not be readable by some applications, causing backup to be unreadable.
When FRU in a 4/256 Director is inserted/removed a fruHistoryTrap should be generated, but is not. Fixed in Fabric OS 5.3.0c. Note that fruStatusChangeTrap will not be generated with FRU insert/remove. After upgrading switches to FOS 5.3.0, the Web Tools GUI bar showing the "Initializing Switch Details" will get stuck at 93% if the client’s regional and language settings are set to some non-US languages such as Dutch, Russian, and Greek.
