Brocade Fabric OS Encryption Administrator's Guide Supporting Fabric OS v6.2.0 (53-1001201-04, May 2009)

216 Encryption Administrator’s Guide

53-1001201-04

MPIO and internal LUN states

The Internal LUN State field displayed within the cryptocfg -show -LUN command output does not

indicate the host-to-storage path status for the displayed LUN, but rather the internal LUN state as

known by the given encryption engine. Due to the transparent and embedded nature of this

encryption solution, the host-to-storage array LUN path status can only be displayed by using host

MPIO software.

For example, assume there are two paths from a host through two encryption switches to a LUN

configured within an active/passive storage array. If the LUN is trespassed, and the active and

passive paths to the LUN are swapped, the host MPIO software will continue to indicate that only

one path is active to the LUN, but the Brocade encryption switch internal LUN states for both paths

will now likely be displayed as Encryption Enabled.

In active/passive storage array environments, for troubleshooting purposes, you may want to

update the encryption engine Internal LUN States to match those of their host MPIO path states.

You can do this by running the cryptocfg -discoverLUN <crypto target container name> command

for the encryption engines that own paths to the LUN in question. This command forces a LUN

discovery, causing the encryption engine's Internal LUN State to be updated.