- Device Manager Help
- Configuring Cisco DCNM-SAN Server
- Configuring Authentication in Cisco DCNM-SAN
- Configuring Cisco DCNM-SAN Client
- Device Manager
- Configuring Performance Manager
- Configuring High Availability
- Configuring Trunking
- Configuring PortChannels
- Configuring N Port Virtualization
- Configuring Interfaces
- Configuration of Fibre Channel Interfaces
- Using the CFS Infrastructure
- Configuring SNMP
- Configuring Domain Parameters
- Configuring and Managing Zones
- Configuring FCoE
- Configuring Dense Wavelength Division Multiplexing
- Configuring and Managing VSANs
- Discovering SCSI Targets
- Configuring SAN Device Virtualization
- Configuring Fibre Channel Routing Services and Protocols
- Managing FLOGI, Name Server, FDMI, and RSCN Databases
- Configuring FICON
- Creating Dynamic VSANs
- Distributing Device Alias Services
- Configuring Advanced Fabric Features
- Configuring Users and Common Role
- Configuring Security Features on an External AAA Server
- Configuring Certificate Authorities and Digital Certificates
- Configuring FC-SP and DHCHAP
- Configuring Cisco TrustSec Fibre Channel Link Encryption
- Configuring FIPS
- Configuring IPv4 and IPv6 Access Control Lists
- Configuring IPsec Network Security
- Configuring Port Security
- Configuring Fabric Binding
- Configuring FCIP
- Configuring the SAN Extension Tuner
- Configuring iSCSI
- Configuring IP Services
- Configuring IP Storage
- Configuring IPv4 for Gigabit Ethernet Interfaces
- Configuring IPv6 for Gigabit Ethernet Interfaces
- Configuring SCSI Flow Services
- Configuring SCSI Flow Statistics
- Configuring Fibre Channel Write Acceleration
- Monitoring the Network
- Monitoring Performance
- Configuring Call Home
- Configuring System Message Logging
- Scheduling Maintenance Jobs
- Configuring RMON
- Configuring Fabric Configuration Server
- Monitoring Network Traffic Using SPAN
- Monitoring System Processes and Logs
- Configuring QoS
- Configuring Port Tracking
- Configuring FlexAttach Virtual pWWN
- Configuring Interface Buffers
- Verifying Ethernet Interfaces
- Information About DPVM
- Licensing Requirements for VSANs
- Guidelines and Limitations
- Default Settings
- Creating DPVM
- Enabling DPVM
- Configuring DPVM with the DPVM Wizard
- Configuring DPVM Config and Pending Databases
- Activating DPVM Config Databases
- Enabling Autolearning
- Clearing Learned Entries
- Disabling DPVM Database Distribution
- Locking the Fabric
- Committing Changes
- Discarding Changes
- Clearing a Locked Session
- Copying DPVM Databases
- Comparing Database Differences
- Verifying the DPVM Configuration
- Monitoring DPVM
- Configuration Examples for DPVM
- Field Descriptions for DPVM
- Additional References
Information About DPVM
Port VSAN membership on the switch is assigned on a port-by-port basis. By default each port belongs to the default VSAN.
You can dynamically assign VSAN membership to ports by assigning VSANs based on the device WWN. This method is referred to as Dynamic Port VSAN Membership (DPVM). DPVM offers flexibility and eliminates the need to reconfigure the port VSAN membership to maintain fabric topology when a host or storage device connection is moved between two Cisco MDS 9000 family switches or two ports within a switch. It retains the configured VSAN regardless of where a device is connected or moved. To assign VSANs statically, see Chapter19, “Configuring and Managing VSANs”
DPVM configurations are based on port world wide name (pWWN) and node world wide name (nWWN) assignments. A DPVM database contains mapping information for each device pWWN/nWWN assignment and the corresponding VSAN. The Cisco NX-OS software checks the database during a device FLOGI and obtains the required VSAN details.
The pWWN identifies the host or device and the nWWN identifies a node consisting of multiple devices. You can assign any one of these identifiers or any combination of these identifiers to configure DPVM mapping. If you assign a combination, then preference is given to the pWWN.
DPVM uses the Cisco Fabric Services (CFS) infrastructure to allow efficient database management and distribution. DPVM uses the application driven, coordinated distribution mode and the fabric-wide distribution scope (for information about CFS, refer to the Cisco MDS 9000 Family NX-OS System Management Configuration Guide .
Note DPVM does not cause any changes to device addressing. DPVM only pertains to the VSAN membership of the device, ensuring that the host gets the same VSAN membership on any port on the switch. For example, if a port on the switch has a hardware failure, you can move the host connection to another port on the switch and you do not need to update the VSAN membership manually.
Note DPVM is not supported on FL ports. DPVM is supported only on F ports.
- About DPVM Configuration
- About DPVM Databases
- About Autolearned Entries
- About DPVM Database Distribution
- About Locking the Fabric
- About Copying DPVM Databases
About DPVM Configuration
To use the DPVM feature as designed, be sure to verify the following requirements:
- The interface through which the dynamic device connects to the Cisco MDS 9000 Family switch must be configured as an F port.
- The static port VSAN of the F port should be valid (not isolated, not suspended, and in existence).
- The dynamic VSAN configured for the device in the DPVM database should be valid (not isolated, not suspended, and in existence).
Note The DPVM feature overrides any existing static port VSAN membership configuration. If the VSAN corresponding to the dynamic port is deleted or suspended, the port is shut down.
About DPVM Databases
The DPVM database consists of a series of device mapping entries. Each entry consists of a device pWWN or nWWN assignment along with the dynamic VSAN to be assigned. You can configure a maximum of 16,000 DPVM entries in the DPVM database. This database is global to the whole switch (and fabric) and is not maintained for each VSAN.
The DPVM feature uses three databases to accept and implement configurations.
- Configuration (config) database—All configuration changes are stored in the configuration database when distribution is disabled.
- Active database—The database currently enforced by the fabric.
- Pending database—All configuration changes are stored in the DPVM pending database when distribution is enabled (see the “About DPVM Database Distribution” section).
Changes to the DPVM config database are not reflected in the active DPVM database until you activate the DPVM config database. Changes to the DPVM pending database are not reflected in the config or active DPVM database until you commit the DPVM pending database. This database structure allows you to create multiple entries, review changes, and let the DPVM config and pending databases take effect.
About Autolearned Entries
The DPVM database can be configured to automatically learn (autolearn) about new devices within each VSAN. The autolearn feature can be enabled or disabled at any time. Learned entries are created by populating device pWWNs and VSANs in the active DPVM database. The active DPVM database should already be available to enable autolearn.
You can delete any learned entry from the active DPVM database when you enable autolearn. These entries only become permanent in the active DPVM database when you disable autolearn.
Note Autolearning is only supported for devices connected to F ports. Devices connected to FL ports are not entered into the DPVM database because DPVM is not supported on FL ports.
The following conditions apply to learned entries:
- If a device logs out while autolearn is enabled, that entry is automatically deleted from the active DPVM database.
- If the same device logs multiple times into the switch through different ports, then the VSAN corresponding to last login is remembered.
- Learned entries do not override previously configured and activated entries.
- Learning is a two-part process—Enabling autolearning followed by disabling autolearning. When the auto-learn option is enabled, the following applies:
– Learning currently logged-in devices—Occurs from the time learning is enabled.
– Learning new device logins— Occurs as and when new devices log in to the switch.
About DPVM Database Distribution
Using the CFS infrastructure, each DPVM server learns the DPVM database from each of its neighboring switches during the ISL bring-up process. If you change the database locally, the DPVM server notifies its neighboring switches, and that database is updated by all switches in the fabric.
If fabric distribution is enabled, all changes to the configuration database are stored in the DPVM pending database. These changes include the following tasks:
- Adding, deleting, or modifying database entries.
- Activating, deactivating, or deleting the configuration database.
- Enabling or disabling autolearning.
These changes are distributed to all switches in a fabric when you commit the changes. You can also discard (abort) the changes at this point.
Tip You can view the contents of the DPVM pending database by using the show dpvm pending command.
Tip See the “Viewing the Pending Database” section to view the contents of the of the pending database.
If the DPVM database is available on all switches in the fabric, devices can be moved anywhere and offer the greatest flexibility. To enable database distribution to the neighboring switches, the database should be consistently administered and distributed across all switches in the fabric. The Cisco NX-OS software uses the Cisco Fabric Services (CFS) infrastructure to achieve this requirement (refer to the Cisco MDS 9000 Family NX-OS System Management Configuration Guide ).
About Locking the Fabric
The first action that modifies the existing configuration creates the DPVM pending database and locks the feature in the fabric. Once you lock the fabric, the following conditions apply:
- No other user can make any configuration changes to this feature.
- A copy of the configuration database becomes the DPVM pending database. Modifications from this point on are made to the DPVM pending database. The DPVM pending database remains in effect until you commit the modifications to the DPVM pending database or discard (abort) the changes to the DPVM pending database.
About Copying DPVM Databases
The following circumstances may require the active DPVM database to be copied to the DPVM config database:
- If the learned entries are only added to the active DPVM database.
- If the DPVM config database or entries in the DPVM config database are accidently deleted.
Note If you copy the DPVM database and fabric distribution is enabled, you must commit the changes.
Licensing Requirements for VSANs
The following table shows the licensing requirements for this feature:
Guidelines and Limitations
This section explains the database guidelines for this feature.
A database merge refers to a union of the configuration database and static (unlearned) entries in the active DPVM database. For information about CFS merge support, refer to the Cisco MDS 9000 Family NX-OS System Management Configuration Guide for detailed concepts.
When merging the DPVM database between two fabrics, follow these guidelines:
- Verify that the activation status and the autolearn status is the same is both fabrics.
- Verify that the combined number of device entries in each database does not exceed 16 K.
Default Settings
Table 25-1 lists the default settings for DPVM parameters.
Creating DPVM
This section includes the following topics:
- Enabling DPVM
- Configuring DPVM with the DPVM Wizard
- Configuring DPVM Config and Pending Databases
- Activating DPVM Config Databases
- Enabling Autolearning
- Clearing Learned Entries
- Disabling DPVM Database Distribution
- Locking the Fabric
- Committing Changes
- Discarding Changes
- Clearing a Locked Session
- Copying DPVM Databases
- Comparing Database Differences
Prerequisites
To begin configuring DPVM, you must explicitly enable DPVM on the required switches in the fabric. By default, this feature is disabled in all switches in the Cisco MDS 9000 Family.
The configuration and verification commands for DPVM are only available when DPVM is enabled on a switch. When you disable this feature, all related configurations are automatically discarded.
To enable DPVM on any participating switch, follow these steps:
Note To overwrite the login information with the duplicate pWWN login, enter the dpvm overwrite-duplicate-pwwn command.
Configuring DPVM with the DPVM Wizard
To use the DPVM Setup Wizard to set up dynamic port VSAN membership, follow these steps:
Step 1 Click the DPVM Setup Wizard icon in the DCNM-SAN toolbar (See Figure 25-1).
You see the Select Master Switch page.
Step 2 Click the switch you want to be the master switch. This switch controls the distribution of the DPVM database to other switches in the fabric.
You see the AutoLearn Current End Devices page.
Step 4 (Optional) Click the Create Configuration From Currently Logged In End Devices check box if you want to turn on autolearning.
You see the Edit and Activate Configuration page.
Step 6 Verify the current or autolearned configuration. Optionally, click Insert to add more entries into the DPVM config database.
Step 7 Click Finish to update the DPVM config database, distribute the changes using CFS, and activate the database, or click Cancel to exit the DPVM Setup Wizard without saving changes.
Step 8 Select the switch you want to be the master switch. This switch controls the distribution of the DPVM database to other switches in the fabric.
You see the AutoLearn Current End Devices page.
Step 10 (Optional) Check the Create Configuration From Currently Logged In End Devices check box if you want to enable autolearning.
You see the Edit and Activate Configuration page.
Step 12 Verify the current or autolearned configuration. Optionally, click Insert to add more entries into the DPVM config database.
Step 13 Click Finish to update the DPVM config database, distribute the changes using CFS, and activate the database, or click Cancel to exit the DPVM Setup Wizard without saving changes.
Configuring DPVM Config and Pending Databases
To create and populate the DPVM config and pending databases, follow these steps:
To create and populate the config and pending databases, follow these steps:
Step 1 Expand Fabricxx> All VSANs, and then select DPVM in the Logical Attributes pane.
You see the DPVM configuration in the Information pane.
Step 2 Click the CFS tab and select a master switch by checking a check box in the Master column.
Note You must click the CFS tab in order to activate the other tabs.
Step 3 Click the Config Database tab and then click the Create Row to insert a new entry.
You see the Create Config Database dialog box.
Step 4 Choose an available WWN and VSAN combination or fill in the pWWN and Login VSAN fields.
Step 5 Click Create to save these changes in the config or pending database or click Close to discard any unsaved changes.
Step 6 Click the CFS tab and select the Config Action drop-down menu for the master database.
Step 7 Select commit from the drop-down menu to distribute these changes or abort to discard the changes.
Activating DPVM Config Databases
When you explicitly activate the DPVM config database, the DPVM config database becomes the active DPVM database. Activation may fail if conflicting entries are found between the DPVM config database and the currently active DPVM database. However, you can force activation to override conflicting entries.
To disable DPVM, you must explicitly deactivate the currently active DPVM database by issuing the no dpvm activate command.
To activate the DPVM config database, follow these steps:
To activate the DPVM config database, follow these steps:
Step 1 Expand Fabricxx> All VSANs, and then select DPVM from the Logical Attributes pane.
You see the DPVM configuration in the Information pane.
Step 2 Click the Action tab and set the Action drop-down menu to activate or forceActivate to activate the DPVM config database.
Step 3 Click the CFS tab and select the Config Action drop-down menu for the master database.
Step 4 Select commit from the drop-down menu to distribute these changes or abort to discard the changes.
Note To disable DPVM, you must explicitly deactivate the currently active DPVM database.
Enabling Autolearning
To enable autolearning, follow these steps:
To enable autolearning, follow these steps:
Step 1 Expand Fabricxx> All VSANs, and then select DPVM from the Logical Attributes pane.
You see the DPVM configuration in the Information pane.
Step 2 Click the Actions tab and check the Auto Learn Enable check box to enable autolearning.
Step 3 Click the CFS tab and select commit to distribute these changes or abort to discard the changes.
Clearing Learned Entries
You can clear DPVM entries from the active DPVM database (if autolearn is still enabled) using one of two methods.
Restrictions
These two procedures do not start a session and can only be issued in the local switch.
Note These two commands do not start a session and can only be issued in the local switch.
To clear a single autolearn entry, follow these steps:
Step 1 Expand Fabricxx> All VSANs, and then select DPVM from the Logical Attributes pane.
You see the DPVM configuration in the Information pane.
Step 2 Click the Actions tab and select clearOnWWN from the Auto Learn Clear drop-down menu.
Step 3 Check the clear WWN check box next to the WWN of the autolearned entry that you want to clear.
Step 4 Click CFS and select commit to distribute these changes or abort to discard the changes.
To clear all autolearn entries, follow these steps:
Step 1 Expand Fabricxx> All VSANs, and then select DPVM from the Logical Attributes pane.
You see the DPVM configuration in the Information pane.
You see the DPVM Actions menu.
Step 3 Select clear from the Auto Learn Clear drop-down menu.
Step 4 Click the CFS tab and select commit to distribute these changes or abort to discard the changes.
Disabling DPVM Database Distribution
To disable DPVM database distribution to the neighboring switches, follow these steps:
These changes are distributed to all switches in a fabric when you commit the changes. You can also discard (abort) the changes at this point.
Tip See the “Viewing the Pending Database” section to view the contents of the pending database.
To disable DPVM database distribution to the neighboring switches, follow these steps:
Step 1 Expand Fabricxx> All VSANs, and then select DPVM from the Logical Attributes pane.
You see the DPVM configuration in the Information pane.
Step 2 Click the CFS tab and select disable from the Admin drop-down menu.
Step 3 Click Apply Changes to save this change or click Undo Changes to discard the change.
Locking the Fabric
To lock the fabric and apply changes to the DPVM pending database, follow these steps:
To lock the fabric and apply changes to the DPVM pending database, follow these steps:
Step 1 Expand Fabricxx> All VSANs, and then select DPVM from the Logical Attributes pane.
You see the DPVM configuration in the Information pane.
Step 2 Click the Config Database tab and Create Row.
You see the Create Config Database dialog box.
Step 3 Choose an available pWWN and login VSAN.
Step 4 Click Create to save this change to the pending database or click Close to discard any unsaved change.
Committing Changes
If you commit the changes made to the configuration, the configuration in the DPVM pending database are distributed to other switches. On a successful commit, the configuration change is applied throughout the fabric and the lock is released.
To commit the DPVM pending database, follow these steps:
To commit the DPVM pending database, follow these steps:
Step 1 Expand Fabricxx> All VSANs, and then select DPVM from the Logical Attributes pane.
You see the DPVM configuration in the Information pane.
Step 2 Click the CFS tab and select commit from the Config Action drop-down menu.
Step 3 Click Apply Changes to save this change or click Undo Changes to discard the change.
Discarding Changes
If you discard (abort) the changes made to the DPVM pending database, the configurations remain unaffected and the lock is released.
To discard the DPVM pending database, follow these steps:
To discard the DPVM pending database, follow these steps:
Step 1 Expand Fabricxx> All VSANs, and then select DPVM from the Logical Attributes pane.
You see the DPVM configuration in the Information pane.
Step 2 Click the CFS tab and select abort from the Config Action drop-down menu.
Step 3 Click Apply Changes to save this change or click Undo Changes to discard the change.
Clearing a Locked Session
If you have performed a DPVM task and have forgotten to release the lock by either committing or discarding the changes, an administrator can release the lock from any switch in the fabric. If the administrator performs this task, your changes to the DPVM pending database are discarded and the fabric lock is released.
Restrictions
The DPVM pending database is only available in the volatile directory and is subject to being discarded if the switch is restarted.
To use administrative privileges and release a locked DPVM session, use the clear dpvm session command in EXEC mode.
To use administrative privileges and release a locked DPVM session using DCNM-SAN, follow these steps:
Step 1 Expand Fabricxx> All VSANs, and then select DPVM from the Logical Attributes pane.
You see the DPVM configuration in the Information pane.
Step 2 Click the CFS tab and select clear from the Config Action drop-down menu.
Step 3 Click Apply Changes to save this change or click Undo Changes to discard the change.
Copying DPVM Databases
To copy the currently active DPVM database to the DPVM config database, use the dpvm database copy command.
To copy the currently active DPVM database to the DPVM config database, follow these steps:
Step 1 Expand Fabricxx> All VSANs, and then select DPVM in the Logical Attributes pane.
You see the DPVM configuration in the Information pane.
Step 2 Click the Actions tab and check the CopyActive to Config check box.
Step 3 Click the CFS tab and select commit from the Config Action drop-down menu.
Comparing Database Differences
You can compare the DPVM databases as follows:
- Use the dpvm database diff active command to compare the active DPVM database with the DPVM config database.
- Use the dpvm database diff config command to compare the DPVM config database with the active DPVM database.
- Use the show dpvm pending-diff command (when CFS distribution is enabled) to compare the DPVM pending database with the DPVM config database.
To add pending database entries to the DPVM config database, follow these steps:
switch(config-dpvm-db)# pwwn 44:22:33:44:55:66:77:88 vsan 55 switch(config-dpvm-db)# pwwn 55:22:33:44:55:66:77:88 vsan 55 |
To compare the currently active database entries to the DPVM config database, follow these steps:
Step 1 Expand Fabricxx> All VSANs, and then select DPVM from the Logical Attributes pane.
You see the DPVM configuration in the Information pane.
Step 2 Click the Active Database tab.
You see the DPVM active database in the Information pane.
Step 3 Select Config from the Compare With drop-down menu.
You see the comparison dialog box.
Step 4 Select Close to close the comparison dialog box.
Verifying the DPVM Configuration
To display the DPVM configuration information, perform one of the following tasks:
For detailed information about the fields in the output from these commands, refer to the Cisco MDS 9000 Family Command Reference .
This section includes the following topics:
Displaying DPVM Merge Status and Statistics
This example shows the conflicts in DPVM databases merge:
Displaying DPVM Configurations
Use the show dpvm command to display information about WWNs configured on a per VSAN basis (see Examples 25-1 to 25-5 ).
Example 25-1 Displays the DPVM Configuration Status
Example 25-2 Displays the DPVM Current Dynamic Ports for the Specified VSAN
Example 25-3 Displays the DPVM Config Database
Example 25-4 Displays the DPVM Database
Example 25-5 Compares Pending Database with the DPVM Config Database
Monitoring DPVM
To view the configuration information, perform the following tasks:
Viewing the Pending Database
To view the pending database, follow these steps:
Step 1 Expand Fabricxx> All VSANs, and then select DPVM from the Logical Attributes pane.
You see the DPVM configuration in the Information pane.
Step 2 Click the CFS tab and set the Config View drop-down menu to pending.
Step 4 Click the Config Database tab.
You see the pending database entries.
Configuration Examples for DPVM
To configure a basic DPVM scenario, follow these steps:
Step 1 Enable DPVM and enable DPVM distribution.
At this stage, the configuration does not have an active DPVM database and the auto-learn option is disabled.
Step 2 Activate a null (empty) database so it can be populated with autolearned entries.
At this stage, the database is successfully activated and the auto-learn option continues to be disabled.
Step 3 Enable the auto-learn option and commit the configuration changes.
At this stage, the currently logged in devices (and their current VSAN assignment) populate the active DPVM database. However the entries are not yet permanent in the active DPVM database.
The output of the show dpvm ports and the show flogi database commands displays two other devices that have logged in (referred to as switch9 and switch3 in this sample configuration).
Step 4 Access switch9 and issue the following commands:
Step 5 Access switch3 and issue the following commands:
Step 6 Disable autolearning in switch1 and commit the configuration changes.
At this stage, the autolearned entries are made permanent in the active DPVM database.
Step 7 Access switch9 and issue the following commands:
Step 8 Access switch3 and issue the following commands:
Note These basic steps help you determine that the information is identical in all the switches in the fabric.
You have now configured a basic DPVM scenario in a Cisco MDS 9000 Family switch.
Field Descriptions for DPVM
This section describes the field descriptions for this feature.