HP B-series Fabric OS 7.1.0c Release Notes (5697-2892, October 2013 - includes all 7.1.0x versions)

Performance optimization on FC long distance ISLs
The following enhancements allow users to optimize performance on FC long distance ISLs:
• Two new options for the portcfglongdistance command: to configure the number of
buffers, and to configure the frame size for LD and LS modes.
• Display of average buffer usage and average frame size in the portbuffershow output.
• A new command portBufferCalc to calculate the number of buffers required on a long
distance port, by providing the distance, speed and average frame size.
Fabric OS security enhancements
• TACACS+ support – In addition to RADIUS and LDAP, support for TACACS+ for user
authentication and authorization has been added. The support includes:
◦ Allows users to login to Fabric OS switches using user accounts configured in the
TACACS+ server.
◦ Allows users to configure the TACACS+ server configuration using the aaaconfig
command.
• Open LDAP support – OpenLDAP server based authentication is supported for Fabric OS
platforms. When configured with the correct CA certificates, the complete LDAP session will
be encrypted using TLS.
• Miscellaneous LDAP enhancements – Users are not required to provide the domain part of the
userPrincipalName. In prior versions of Fabric OS, a complete userPrincipalName
was mandatory for user authentication.
• Support for password expiration policy per user – The password expiration policy can be
configured on a per user basis. User accounts without this configuration will use the global
password expiration configuration.
• Sorting security policy member list – In a strict fabric-wide consistency policy, if the security
policy members are not in the same order, a newly joined switch will be segmented. To avoid
segmentation of ports due to member list order mismatch, the security policy members are
sorted by default. Newly added members to existing policies will also be sorted.
FCIP enhancements
• VF support on the HP 1606 Extension SAN Switch platform with support for up to four logical
switches. However, the HP 1606 Extension SAN Switch VF configuration does not support
base switch functionality or XISL usage.
• IPsec support for the XGE0 port of an HP StoreFabric Enhanced Multiprotocol Extension Blade
(Brocade FX8-24E). This enables creation of IP Security enabled FCIP tunnels on VE ports
12-21 of an HP StoreFabric Enhanced Multiprotocol Extension Blade.
• FCIP Tunnel TCP statistics monitoring enhancements allow users to view statistics that represent
a specific time period for tunnels, circuits, and TCP connections. Two new sub-options (reset
and lifetime) have been added to the portshow fciptunnel and portshow
fcipcircuit commands. The --reset option allows users to start a new statistical
checkpoint for the tunnel, circuits, and the TCP connections. The --lifetime option allows
users to see statistics related to the lifetime of the tunnel, circuits, and TCP connections.
• FCIP enforcement of ED_TOV through an internal queue time limit (of 2 seconds) for all FCIP
received FC frames to address issues in congested networks. This ensures that no old FC
sequences will be forwarded to the destination if the age (queue time) of the FC frame on an
FCIP FC send queue exceeds 2 seconds.
6