Brocade FICON Administrator's Guide v7.1.0 (53-1002753-01, March 2013)

FICON Administrator’s Guide 25

53-1002753-01

Configuring cascaded FICON

In addition to performing the steps listed in “Configuring switched point-to-point FICON” on

page 20, you also need to perform the following steps to configure cascaded FICON.

CAUTION

Configuring the switch for FICON is a disruptive process. The switch must be disabled to configure

switch parameters. This procedure must be followed prior to channels joining the fabric.

1. Perform the following actions for each switch:

a. Enable the IDID mode using the Fabric OS configure command. For details on enabling the

IDID mode, refer to “Enabling insistent domain ID” on page 18.

b. Set the domain ID. It is highly recommended that the switch ID used in HCD and IOCP be

the same as the switch address in hexadecimal. All switches ship from the factory with a

default domain ID of 1. The best practice is to use something other than 1 so that a new

switch can be added to the fabric without changing the domain ID.

2. Use the secPolicyCreate command to configure the SCC policies on all switches to limit

connectivity to only the switches in the selected fabric.

switch:admin> secPolicyCreate SCC_POLICY, member;...;member

In the command syntax, member indicates a switch that is permitted to join the fabric. Specify

switches by WWN, domain ID, or switch name. Enter an asterisk (*) to indicate all the switches

in the fabric. To create a policy that includes all the switches in the fabric, enter the following

command:

switch:admin> secPolicyCreate SCC_POLICY ”*”

3. Save or activate the new policy by entering either the secPolicySave or the secPolicyActivate

command. If neither of these commands is entered, the changes are lost when the session is

logged out. To activate the SCC policy, enter the following command:

switch:admin> secPolicyActivate

4. Enter the fddCfg command to enable the ACL fabric wide consistency policy and enforce a

strict SCC policy.

switch:admin> fddcfg --fabwideset ”SCC:S”

5. Connect and enable channel and control unit (CU) devices. The Query for Security Attributes

(QSA) response to the channel indicates that the fabric binding and IDID are enabled.