Brocade Fabric OS Encryption Administrator's Guide Supporting Fabric OS v6.2.0 (53-1001201-04, May 2009)

Encryption Administrator’s Guide 205
53-1001201-04
Appendix
B
Maintenance and Troubleshooting
In this Appendix
•General encryption troubleshooting using the CLI . . . . . . . . . . . . . . . . . . . 205
•Troubleshooting examples using the CLI . . . . . . . . . . . . . . . . . . . . . . . . . . . 208
•Management application encryption wizard troubleshooting . . . . . . . . . . 210
•Errors related to adding a switch to an existing group . . . . . . . . . . . . . . . . 210
•LUN policy troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 214
•MPIO and internal LUN states. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 216
General encryption troubleshooting using the CLI
Table 15 lists the commands you can use to check the health of your encryption setup. Table 16
provides additional information for failures you might encounter while configuring switches using
the CLI.
TABLE 15 General troubleshooting tips using the CLI
Command Activity
supportsave Check whole system configuration.
Run RAS logs.
Run RAS traces.
Run Security Processor (SP) logs (mainly kpd.log).
errdumpall
• errdumpall | grep KAC
• errdumpall | grep CVLM
• errdumpall | grep CVLC
• errdumpall | grep spm
• errdumpall | grep CNM
Run error logs:
• Key Adapter Module error logs.
• Crypto Virtual device module error logs.
• Crypto LUN module error logs.
• SP Manager Module error logs.
• Cluster Node Manager error logs.
NOTE: errdumpall requires root user access.
configshow Check whole system persistent configuration database dump.
Check for SPM-, CVLM-, and CNM-related persistent database entries.
cfgshow Check for redirection zones starting with “red_xxx” in defined database for
virtual and physical devices.
nsshow Check for crypto virtual target and crypto virtual initiator entries for VT/VI