Brocade ISCSI Gateway v326 CMD Ref

iSCSI Gateway
Command Reference Manual
Supporting Brocade iSCSI Gateway
Publication Number: 53-1000204-01 Rev. A
Copyright 2006, SANRAD, Inc..

ALL RIGHTS RESERVED.
Publication Number: 53-1000204-01 Rev. A
This manual contains information that is proprietary to SANRAD. No part of this publication may be reproduced in any
form whatsoever without prior written approval by SANRAD.
Right, title and interest, all information, copyrights, patents, know-how, trade secrets and other intellectual property or
other proprietary rights relating to this manual and to the StoragePro Management System and any software components
contained therein are proprietary products of SANRAD protected under international copyright law and shall be and
remain solely with SANRAD.
StoragePro Management System is a registered trademark of SANRAD. No right, license, or interest to such trademark
is granted hereunder, and you agree that no such right, license, or interest shall be asserted by you with respect to such
trademark.
Brocade, the Brocade B weave logo, Secure Fabric OS, and SilkWorm are registered trademarks and Tapestry is a
trademark of Brocade Communications Systems, Inc., in the United States and/or in other countries. All other brands,
products, or service names are or may be trademarks or service marks of, and are used to identify, products or services of
their respective owners.
Notice: The information in this document is provided AS IS, without warranty of any kind, including, without
limitation, any implied warranty of merchantability, noninfringement or fitness for a particular purpose. Disclosure of
information in this material in no way grants a recipient any rights under Brocade's patents, copyrights, trade secrets or
other intellectual property rights. Brocade reserves the right to make changes to this document at any time, without
notice, and assumes no responsibility for its use.
The authors and Brocade Communications Systems, Inc. shall have no liability or responsibility to any person or entity
with respect to any loss, cost, liability, or damages arising from the information contained in this book or the computer
programs that accompany it.
Export of technical data contained in this document may require an export license from the United States Government.
Brocade Communications Systems, Incorporated

Corporate Headquarters
Brocade Communications Systems, Inc.
1745 Technology Drive
San Jose, CA 95110
Tel: 1-408-333-8000
Fax: 1-408-333-8101
Email: info@brocade.com
Asia-Pacific Headquarters
Brocade Communications Singapore Pte. Ltd.
9 Raffles Place
#59-02 Republic Plaza 1
Singapore 048619
Tel: +65-6538-4700
Fax: +65-6538-0302
Email: apac-info@brocade.com
European and Latin American Headquarters

Brocade Communications Switzerland Srl
Centre Swissair
Tour A - 2me tage
29, Route de l'Aroport
Case Postale 105
CH-1215 Genve 15
Switzerland
Tel: +41 22 799 56 40
Fax: +41 22 799 56 41
Email: emea-info@brocade.com
Document History
Document Title
Publication Number
Summary of Changes
Publication
Date
Brocade iSCSI Gateway

Command Reference Manual
53-1000204-01 Rev. A
New document
March 2006
Table of Contents
Chapter 1 Introduction to Brocade iSCSI Gateway ................................... 1-1
iSCSI Gateway Topology ................................................................................................. 1-1
iSCSI Overview ............................................................................................................... 1-2
iSCSI Initiator and Targets.................................................................................................. 1-2
Portals..................................................................................................................... 1-2
Targets and LUNs ................................................................................................... 1-2
Discovery Methods .............................................................................................................1-3
iSCSI Discovery .......................................................................................................1-3
SLP ...........................................................................................................................1-3
iSNS .........................................................................................................................1-3
iSCSI Security...................................................................................................................... 1-4
Access Rights...........................................................................................................1-7
Target and Initiator Authentication ...................................................................... 1-8
iSCSI Gateway Cluster ................................................................................................... 1-11
Maintaining Cluster Communications ............................................................................. 1-14
Chapter 2 iSCSI Gateway Operations ....................................................... 2-1

Initial iSCSI Gateway Configuration ............................................................................... 2-1
Management IP Address.................................................................................................... 2-1
Telnet/SSH Connection ........................................................................................ 2-1
RS232 Serial Connection ....................................................................................... 2-2
Configuring Management Parameters ............................................................................2-2
Set Device Parameters ....................................................................................................... 2-3
Show iSCSI Gateway Configuration Information .............................................................2-4
Set Telnet Port ....................................................................................................................2-4
Traps and SNMP ................................................................................................................. 2-5
Adding an SNMP Manager .................................................................................... 2-5
Setting SNMP Communities..................................................................................2-6
Removing an SNMP Manager ...............................................................................2-6
User Login Profiles .............................................................................................................2-6
Changing a User Profile ......................................................................................... 2-7
Removing a User Profile ........................................................................................ 2-7
Configuring the iSCSI Gateway Interfaces ......................................................................2-7
Show FC Interface Information..........................................................................................2-8
Set FC Storage Port .............................................................................................................2-8
iSCSI Gateway World Wide Node Name .........................................................................2-9
Changing a Network Interface Alias ..................................................................................2-9
Adding a Network Interface IP Address .......................................................................... 2-10
Table of Contents
Publication Number: 53-1000204-01
Removing a Network Interface IP Address ..................................................................... 2-10

Show IP Configuration ...................................................................................................... 2-11
Configuring IP Routing .................................................................................................. 2-11
Add an IP Route................................................................................................................. 2-11
Set Default Gateway......................................................................................................... 2-12
Check IP Routes ............................................................................................................... 2-12
Traceroute .........................................................................................................................2-13
Show IP Routes................................................................................................................. 2-14
Remove an IP Route......................................................................................................... 2-14
Configuring iSCSI Portals .............................................................................................. 2-15
Create iSCSI Portals...........................................................................................................2-15
Show iSCSI Portals.............................................................................................................2-15
Remove iSCSI Portals ....................................................................................................... 2-16
Configuring Storage Devices ........................................................................................ 2-16
Discovering Storage Devices........................................................................................... 2-16
Renaming a Storage Device..............................................................................................2-17
Removing a Storage Device..............................................................................................2-17
iSCSI Gateway Related Commands .............................................................................. 2-18
Resetting an iSCSI Gateway ............................................................................................. 2-18
Saving (Uploading) a iSCSI Gateway Database File........................................................ 2-18
Downloading a iSCSI Gateway Configuration File ......................................................... 2-18
Configuring an iSCSI Gateway Cluster.......................................................................... 2-19
Set iSCSI Gateway ID....................................................................................................... 2-20
Add Neighbor.................................................................................................................. 2-20
Maintaining Cluster Communications ............................................................................ 2-21
Enable/Disable Cluster Failover......................................................................................2-22
Additional iSCSI Gateway Cluster Configurations .........................................................2-22
Show Neighbor Details....................................................................................................2-22
Managing a Cluster .......................................................................................................... 2-23
Upgrading the iSCSI Gateway Firmware .......................................................................2-24
Safe Mode.....................................................................................................................2-24
Automatic Safe Mode ...................................................................................................... 2-25
Exporting a Corrupted Database..................................................................................... 2-25
Manual Safe Mode ........................................................................................................... 2-25
Level O: Normal Mode....................................................................................... 2-25
Level 1: Last Good Configuration .......................................................................2-26
Level 2: Default Factory Database .....................................................................2-26
Level 3: Default Factory System..........................................................................2-26
Chapter 3 Storage Exposure & Security .................................................... 3-1

Identifying and Configuring Storage Devices ................................................................. 3-1
Exposing an iSCSI Target and LUN..................................................................................3-4
Create and Expose Storage on a New Target.................................................................... 3-4
Expose Storage on an Existing Target. ............................................................................... 3-5
ii
iSCSI Gateway Command Reference User Manual

Viewing LUNs ..................................................................................................................... 3-5

Removing an iSCSI Target ..................................................................................................3-6
Show iSCSI Targets .............................................................................................................3-6
iSCSI Target Details ............................................................................................................3-6
Configuring Access Control List (ACL) ............................................................................ 3-7
Set ACL Parameters ............................................................................................................ 3-7
Create Identity....................................................................................................................3-8
Show Access Rights ............................................................................................................3-8
Add Initiators to an Identity...............................................................................................3-9
Assigning Identity Credentials ........................................................................................3-9
Add CHAP......................................................................................................................... 3-10
Identity Details ................................................................................................................. 3-10
Add RADIUS Server........................................................................................................... 3-11
Show Configured RADIUS Servers ................................................................................... 3-11
Removing a RADIUS Server ..............................................................................................3-12
Connect an Identity and Target .................................................................................... 3-12
Discovering iSCSI Targets ............................................................................................. 3-13
Add iSNS client..................................................................................................................3-13
Show iSNS client................................................................................................................3-13
Remove iSNS Client ......................................................................................................... 3-14
Chapter 4 Monitoring & Statistics ............................................................. 4-1

Health Monitoring .......................................................................................................... 4-1
system hardware show ...................................................................................................... 4-1
Interface Statistics........................................................................................................... 4-1
interface statistics show .....................................................................................................4-2
interface statistics details ...................................................................................................4-2
TCP/IP Statistics..............................................................................................................4-3
ip statistics ip show............................................................................................................. 4-3
ip statistics icmp show ....................................................................................................... 4-3
tcp connection show .........................................................................................................4-4
tcp statistics show...............................................................................................................4-4
udp listeners show .............................................................................................................4-5
udp statistics show .............................................................................................................4-5
iSCSI Session Statistics ................................................................................................... 4-6
iscsi session show...............................................................................................................4-6
iscsi session details.............................................................................................................4-6
iscsi session statistics..........................................................................................................4-7
iSCSI Connection Statistics ............................................................................................ 4-8
iscsi session connection show...........................................................................................4-8
iscsi session connection details.........................................................................................4-8
SCSI Port Statistics ......................................................................................................... 4-9
scsi target port statistics .....................................................................................................4-9
Remote iSCSI Initiator Statistics.................................................................................... 4-10
Table of Contents
iii
iscsi rinitiator show........................................................................................................... 4-10

iscsi rinitiator list............................................................................................................... 4-10
iscsi rinitiator statistics show............................................................................................. 4-11
Logical Unit (LU) Statistics ............................................................................................. 4-11
Chapter 5 Command Line Interface Reference ........................................ 5-1

iSCSI Gateway CLI Commands .......................................................................................5-2
acl add ................................................................................................................................ 5-2
acl details ............................................................................................................................ 5-2
acl remove .......................................................................................................................... 5-2
acl set .................................................................................................................................. 5-3
acl show .............................................................................................................................. 5-3
acl identity add chap.......................................................................................................... 5-3
acl identity add name ........................................................................................................ 5-3
acl identity add srp.............................................................................................................5-4
acl identity create...............................................................................................................5-4
acl identity delete...............................................................................................................5-4
acl identity details ..............................................................................................................5-4
acl identity remove chap ................................................................................................... 5-5
acl identity remove name .................................................................................................. 5-5
acl identity remove srp ...................................................................................................... 5-5
acl identity set.....................................................................................................................5-6
acl identity show ................................................................................................................5-6
admin add ..........................................................................................................................5-6
admin password.................................................................................................................5-6
admin remove ....................................................................................................................5-6
admin show ........................................................................................................................ 5-7
cluster failover enable........................................................................................................ 5-7
cluster failover disable ....................................................................................................... 5-7
cluster failover force........................................................................................................... 5-7
cluster set............................................................................................................................ 5-7
cluster show........................................................................................................................5-8
cluster synchronize lusn ....................................................................................................5-8
debug..................................................................................................................................5-8
device advance set .............................................................................................................5-8
device advance show.........................................................................................................5-8
device set............................................................................................................................5-9
exit..................................................................................................................................... 5-10
fc interface show .............................................................................................................. 5-10
fc node show .................................................................................................................... 5-10
fc set .................................................................................................................................. 5-10
ft download ....................................................................................................................... 5-11
ft export problem .............................................................................................................. 5-11
ft show................................................................................................................................ 5-11
iv

ft update............................................................................................................................. 5-11
ft upload ............................................................................................................................5-12
info .....................................................................................................................................5-12
interface details .................................................................................................................5-12
interface set .......................................................................................................................5-12
interface show ...................................................................................................................5-13
interface statistics show ....................................................................................................5-13
interface statistics details ..................................................................................................5-13
ip config remove ...............................................................................................................5-13
ip config set .......................................................................................................................5-13
ip config show .................................................................................................................. 5-14
ip isns add......................................................................................................................... 5-14
ip isns remove .................................................................................................................. 5-14
ip isns show ...................................................................................................................... 5-14
ip radius add..................................................................................................................... 5-14
ip radius remove ...............................................................................................................5-15
ip radius set........................................................................................................................5-15
ip radius show ...................................................................................................................5-15
ip route add .......................................................................................................................5-15
ip route default................................................................................................................. 5-16
ip route remove................................................................................................................ 5-16
ip route show.................................................................................................................... 5-16
ip statistics icmp show ..................................................................................................... 5-16
ip statistics ip show............................................................................................................5-17
iscsi portal create ..............................................................................................................5-17
iscsi portal remove ............................................................................................................5-17
iscsi portal show ................................................................................................................5-17
iscsi rinitiator list................................................................................................................5-17
iscsi rinitiator show........................................................................................................... 5-18
iscsi rinitiator statistics show............................................................................................ 5-18
iscsi session connection details....................................................................................... 5-18
iscsi session connection show......................................................................................... 5-18
iscsi session details........................................................................................................... 5-18
iscsi session show............................................................................................................. 5-18
iscsi session statistics........................................................................................................ 5-18
iscsi target alias ................................................................................................................. 5-19
iscsi target create.............................................................................................................. 5-19
iscsi target details ............................................................................................................. 5-19
iscsi target remove ........................................................................................................... 5-19
iscsi target set....................................................................................................................5-20
iscsi target show ...............................................................................................................5-20
lu details............................................................................................................................5-20
lu remove...........................................................................................................................5-21
lu show...............................................................................................................................5-21
lu statistics show................................................................................................................5-21
neighbor add.....................................................................................................................5-21
Table of Contents
neighbor set.......................................................................................................................5-21
neighbor show ................................................................................................................. 5-22
neighbor details ............................................................................................................... 5-22
neighbor remove ............................................................................................................. 5-22
ping ................................................................................................................................... 5-22
scsi target port statistics ................................................................................................... 5-23
snmp manager add .......................................................................................................... 5-23
snmp manager remove .................................................................................................... 5-23
snmp manager set ............................................................................................................5-24
snmp manager show ........................................................................................................5-24
storage alias ......................................................................................................................5-24
storage blink abort ...........................................................................................................5-24
storage blink start ............................................................................................................. 5-25
storage details .................................................................................................................. 5-25
storage discovery ............................................................................................................. 5-25
storage disk set ................................................................................................................. 5-25
storage disk show ............................................................................................................. 5-25
storage expose .................................................................................................................5-26
storage remove.................................................................................................................5-26
storage set.........................................................................................................................5-26
storage show..................................................................................................................... 5-27
storage unexpose ............................................................................................................. 5-27
system boot ...................................................................................................................... 5-27
system hardware show .................................................................................................... 5-27
system reset ......................................................................................................................5-28
system reset_default_factory ...........................................................................................5-28
tcp connection show .......................................................................................................5-28
tcp statistics show.............................................................................................................5-28
traceroute .........................................................................................................................5-28
udp listeners show ...........................................................................................................5-29
udp statistics show ...........................................................................................................5-29
Index ..........................................................................................................I-1
List of Figures
Figure 1-1.
Figure 1-2.
Figure 1-3.
Figure 1-4.
Figure 1-5.
Figure 1-6.
Figure 1-7.
vi
iSCSI Gateway Network Topology........................................................................ 1-1

iSCSI Target Access ................................................................................................1-3
Identities Coupled with Targets............................................................................1-5
Default Identities .................................................................................................. 1-6
Access Rights per Identity-Target Pair ..................................................................1-7
Identity with iSCSI Initiators and Credentials...................................................... 1-9
Sending a CHAP Authentication Challenge .......................................................1-10
Figure 1-8.
Figure 1-9.
Figure 2-1.
iSCSI Gateway Cluster Configuration ................................................................. 1-12

Re-Routing Storage Access with Off-line iSCSI Gateway................................... 1-13
Terminal Properties .............................................................................................. 2-2
List of Tables
Table 2-1:
Table 2-2:
Table 2-3:
Table 2-4:
Table 2-5:
Table 2-6:
Table 2-7:
Table 3-1:
Table 3-2:
Table 3-3:
Table 3-4:
Table 3-5:
Table 3-6:
Table 3-7:
Table 3-8:
Table 4-1:
Table 4-2:
Table 4-3:
Table 4-4:
Table 4-5:
Table 4-6:
Table 4-7:
Table 4-8:
Table 4-9:
Table 4-10:
Table 4-11:
Table 4-12:
Table 4-13:
Table 4-14:
Table 4-15:
Table 4-16:
Table 4-17:
Table 4-18:
Table 4-19:
Table 4-20:
Table 4-21:
Table 5-1:
iSCSI Gateway Configuration............................................................................... 2-4

iSCSI Gateway Interfaces......................................................................................2-8
iSCSI Gateway IP Configuration Table................................................................ 2-11
iSCSI Gateway IP Routing Paths ......................................................................... 2-14
iSCSI Portals .........................................................................................................2-15
Neighbors in a Cluster ........................................................................................ 2-22
Neighbor Details................................................................................................. 2-22
Storage Devices .....................................................................................................3-1
Storage Details ...................................................................................................... 3-3
Details of all LUNs................................................................................................. 3-5
iSCSI Targets..........................................................................................................3-6
iSCSI Target Details...............................................................................................3-6
Default Identity Target Access .............................................................................3-8
Identity Details.................................................................................................... 3-10
Configured RADIUS IP Addresses ......................................................................3-12
System Hardware...................................................................................................4-1
Interface Statistics Overview ................................................................................ 4-2
Interface Statistics Details..................................................................................... 4-2
IP Statistics............................................................................................................. 4-3
ICMP Statistics....................................................................................................... 4-3
TCP Connections ..................................................................................................4-4
TCP Statistics .........................................................................................................4-4
UDP Statistics ........................................................................................................ 4-5
iSCSI Sessions........................................................................................................4-6
Basic iSCSI Session Details ...................................................................................4-6
Advanced iSCSI Session Details........................................................................... 4-7
CRP iSCSI Session Details.....................................................................................4-8
TXRX iSCSI Session Details ...................................................................................4-8
Error iSCSI Session Details....................................................................................4-8
iSCSI Session Connections...................................................................................4-8
iSCSI Session Connection Details........................................................................4-9
Advanced iSCSI Session Connection Details ......................................................4-9
SCSI/iSCSI Initiator Port Statistics ........................................................................4-9
All Connected Remote iSCSI Initiators.............................................................. 4-10
Connected Remote iSCSI Initiators on a Target................................................ 4-10
LU Statistics .......................................................................................................... 4-11
Hot Keys .................................................................................................................5-1
Table of Contents
vii
viii

Chapter 1
Introduction to Brocade iSCSI Gateway
This chapter provides an overview of the iSCSI Gateway, its topology and features.
iSCSI Gateway Topology

The iSCSI Gateway provides servers with IP access to storage through SCSI routing using
iSCSI protocol. Using SCSI routing, hosts on an IP network access storage attached to iSCSI
Gateways as local disks.
Figure 1-1 shows a standard iSCSI Gateway network topology.
z
The iSCSI Gateway in the center connects to the storage elements in the back-end while
connecting to the IP network on the front-end.
The iSCSI Gateway enables hosts to access attached storage using IP-SAN protocol
iSCSI. For more information, refer to iSCSI.
Storage elements can be a combination of FC JBOD (Just a Bunch Of Disks) or FC RAID

subsystems. Storage elements can be connected either directly to the iSCSI gateway or
connected across a Fibre Channel network.
Tower
Hostbox
Tower
Hostbox
Tower
Hostbox
Cloud
IP Network
iSCSI Gateway
10236b
FC
Cloud
Network
FC RAID
Figure 1-1.

RAID
RAID
RAID
iSCSI Gateway Network Topology
1-1
iSCSI Overview
iSCSI transmits native SCSI commands and data over the TCP/IP protocol stack. iSCSI
transfers and stores SCSI commands and data at any iSCSI enabled storage location with
access to a LAN, MAN, WAN or the Internet. iSCSI enables the creation of high performance
IP-SANs.
iSCSI has many benefits including:
z
Can use existing Ethernet cabling and existing network elements.
Uses common TCP/IP for global connectivity.
Leverages the existing expertise of network administrators, integrators and support

services.
iSCSI Initiator and Targets

iSCSI initiators establish TCP connections with iSCSI targets. Data can be transferred via
iSCSI when an iSCSI initiator establishes a TCP connection with an iSCSI target.
z
The iSCSI initiator resides in the host computer.
The iSCSI target resides in the iSCSI Gateway.
iSCSI initiators and targets have a World Wide Unique Identifier (WWUI) of up to 223
free form characters, e.g. www.brocade.switch1.target1.
Portals
To enable iSCSI communications over TCP, the system administrator must configure portals
during the initial iSCSI Gateway configuration. A portal is comprised of both an IP address
and its assigned TCP port. Each configured portal automatically becomes an iSCSI access
point to each target that exists in the iSCSI Gateway. Typically, there are few portals and
many targets.
Targets and LUNs

An iSCSI initiator can access, read and write to a disk only after the disk is exposed. An
exposed disk is a disk that has been attached to a target and assigned a LUN (Logical Unit
Number). An exposed disk can be accessed by any iSCSI initiator unless ACL restrictions
are configured.
When creating iSCSI targets, the user administrator assigns an alias and name for each one.
The alias is an internal identifier for the system administrator. The name is the WWUI used
to connect initiators to the target.
Note:
When creating targets, keep in mind that:
1-2
Each target can have multiple LUNs.
Each target should be exposed by only one iSCSI Gateway in a cluster.
Each target can be accessed by multiple hosts.
iSCSI Gateway Command Reference Manual

There are two ways to expose a disk:

1. Create a new target and assign a LUN in the same process.
2. Assign LUNs to previously created targets.
Example:
In Figure 1-2 Disk 1 is exposed via Target 1 and is accessible to any iSCSI initiator via
either portal (IP1, 3260) or (IP2, 3260). Likewise, Disk 2 is exposed via Target 2, Disk 3
and Disk 4 are exposed via Target 3.
(IP1, 3260)
(IP2, 3260)
iSCSI Target 1
wwui1
iSCSI Target 2
wwui2
iSCSI Target 3
wwui3
Disk 1
Disk 2
Disk 3
Disk 4
LU0
LU0
LU0
LU1
10124b
iSCSI Gateway
Figure 1-2.
iSCSI Target Access
Discovery Methods
The iSCSI Gateway supports three types of discovery: iSCSI Discovery, SLP and iSNS.
iSCSI Discovery
In an iSCSI discovery session the user administrator configures an IP and port of the iSCSI
target in the initiator. The initiator discovers all applicable targets and LUNs.
SLP
SLP (Service Location Protocol) is a common broadcast-based discovery mechanism that
uses agents. The iSCSI Gateway acts as an SLP Service Agent (SA) and advertises its iSCSI
service. The initiator identifies the iSCSI Gateway and discovers the iSCSI Gateways targets.
iSNS
iSNS is a client/server protocol designed for compatibility with FCs Simple Name Server
(SNS). Once an iSNS server is located (either through DHCP or SLP), discovery can take
place without the need for broadcasts. iSNS enables iSCSI initiators in the IP-SAN to locate
the iSCSI Gateway targets automatically.

1-3
iSCSI Security
No matter what discovery method is used, ACL (Access Control List) allows only those
targets that are defined as available to be accessed. To allow selective iSCSI initiator access
to iSCSI target disks, the iSCSI Gateway uses identities to define pools of initiators. An
identity is a user-defined list of iSCSI initiators. Attaching an identity to a target restricts its
access to the list of initiators defined by that identity.
Note:
When planning and creating identities, keep in mind that:
z
Each identity can contain one or more iSCSI initiators.
Each identity can be assigned one or both login authentication methods

(CHAP, SRP).
Each identity can be attached to more than one target.
Each target is first automatically coupled to a default read-write unauthenticated access identity and therefore can be accessed by everyone.
Each target can have more than one identity. The order of the identities is
important. The first match is used, not the best match.
Note:
If you are working with an iSNS server, all hosts are able to see all targets but only those hosts
with access rights are able to connect to the authorized targets.
1-4

Example:
In Figure 1-3 identities are coupled with iSCSI targets to limit iSCSI initiator access to a
targets underlying disks. An identity can be used with more than one target and each
target can have more than one identity.
Identity A is coupled with both Targets 1 and 2.
Identity B is coupled with Target 3.
Identity C is coupled with Target 4.
As a result, each iSCSI initiator has access to the following disks:

wwui1
Disk 1
iSCSI Target 1
wwui21
wwui2
wwui3
Ident A
Disk 2
wwui4
Disk 3
iSCSI Target 2
wwui22
wwui5
Ident B
wwui6
Disk 4
iSCSI Target 3
wwui23
wwui8
wwui9
Ident C
iSCSI Target 4
wwui24
Disk 5
Disk 6
wwui10
Figure 1-3.
10151b
wwui7
Identities Coupled with Targets
When you assign an identity to a target, you give the identity a position. A position is an
identitys rank in the iSCSI Gateway scan for an iSCSI initiator identity match. When the
iSCSI Gateway scans the list of identities coupled with a target, it starts with the highest
position and stops with the first match. After matching, the initiator is granted the identitys
access rights.
An identity can be connected to more than one target to provide the same pre-defined list
of initiators for each target.

1-5
Example:
In Figure 1-4, the default identities for Target 1 and Target 2 have been modified to not
accessible (NA) for all initiators.
Target 1 is coupled with Identity A with read-write (RW) access to Identity As list of
iSCSI initiators (WWUI1).
Target 2 is coupled with Identity B with read-write (RW) access to Identity Bs list of
iSCSI initiators (WWUI2).
When iSCSI initiator WWUI1 logs in to Target 1, the iSCSI Gateway first scans Identity A
and finds the initiator listed there. The scan stops and the initiator is granted read-write
access to Target 1s underlying disk, Disk 1.
If iSCSI initiator WWUI1 tries to login to Target 2, the iSCSI Gateway first scans Identity
B. It does not find the initiator listed so it continues to scan the next identity, the
default identity. The default identity implicitly lists all iSCSI initiators, including
WWUI1. However, the scan stops and the initiator is denied access to Target 2s
underlying disks (Disk 2 and Disk 3), since the default identity is configured as not
accessible.
iSCSI
initiator
iSCSI
initiator
Tower
box
wwui2
Tower
box
wwui1
Disk 1
Disk 2
RW
RW
Disk 3
RW
IPCloud
SAN
iSCSI Gateway
Identity A
Target 1
Identity B
Target 2
Def Ident
Def Ident
Ident A
wwui1
Ident B
wwui2
RW
RW
Default
all
Default
all
NA
NA
iSCSI Target 1
wwui3
iSCSI Target 2
wwui4
Disk 2
Disk 3
LU0
LU0
LU1
10156b
Disk 1
Figure 1-4.
1-6
Default Identities

Access Rights
When you couple an identity and a target, you assign access rights: read-write (RW), readonly (RO) or not accessible (NA). The access rights are per identity-target pair.
z
An identity can be coupled with multiple targets, each time with different access rights.
A target can have multiple identities, each with different access rights.
Note:
If you add or modify Identities on a target after its disks have been exposed, the access rights
will take effect only at the next login for each iSCSI initiator.
Example:
In Figure 1-5 Identity A is coupled with both Target 1 and Target 2.
The pair Identity A Target 1 is assigned iSCSI initiator read-write access to Target 1
disks.
However, the pair Identity A Target 2, is assigned iSCSI initiator read-only access
to Target 2 disks.
wwui1
Disk 1
wwui2
Ident A
wwui3
rite
d-W
Rea
Re
ad
wwui4
-O
nly
iSCSI Target 1
wwui21
Disk 2
iSCSI Target 2
wwui22
Disk 3
wwui5
Re
ad
-W
rite
wwui7
wwui8
Ident C
wwui9
Rea
d
-Wr
i
te
Disk 4
iSCSI Target 3
wwui23
iSCSI Target 4
wwui24
wwui10
Figure 1-5.

Disk 5
Disk 6
10152b
Ident B
wwui6
Access Rights per Identity-Target Pair
1-7
Target and Initiator Authentication

The iSCSI Gateway supports the authentication methods CHAP and SRP for the iSCSI
initiator. The credentials for CHAP and SRP are the combination of user name + password.
CHAP
CHAP is a protocol that is used to authenticate the peer of a connection and is based upon
the peers sharing a secret (a security key that is similar to a password). The target and the
initiator authenticate each other.
The iSCSI Gateway supports two way CHAP authentication. The target authenticates the
initiator and the initiator can authenticate the target (it is up to the initiator to request target
authentication). A separate secret can be set for each target and for each initiator in the
storage area network (SAN).
Note:
An authentication method is assigned per identity and not per iSCSI initiator.
z
An identity can be assigned an additional authentication method.
If no authentication method is assigned, all listed iSCSI initiators in an identity

will have un-authenticated login access rights.
When an iSCSI initiator logs in to a target, its WWUI is checked against the identity initiator
list. After the iSCSI initiator passes the identity stage, if credentials are configured, the iSCSI
initiator must authenticate itself. The credentials list is checked for the iSCSI initiators user
name + password. The list can contain:
z
A separate user name + password for each initiator.
Note:
There is no strict link between an initiator from the initiator names in the identity and a specific
username + password from the credentials of the identity.
1-8
A few user name + password pairs common to a few initiators
A single user name + password for all initiators in the identity.

Example:
In Figure 1-6 there are:
Six iSCSI initiators in Identity B
Only four user name + password credentials. Certain initiators have the same user
name + password configured on them.
Ident B
Credentials
wwui3
CHAP
SRP
wwui4
Sarah C6H12O6
Dinos RockOn
wwui6
Dinos RockOn
Albert energy
10155
Initiators
wwui7
wwui8
wwui9
Figure 1-6.
Identity with iSCSI Initiators and Credentials
Configuring a RADIUS Server

When a RADIUS Server exists in the network, you can use it to manage the iSCSI Gateway.
When CHAP user names and passwords are configured on the network in a RADIUS server,
the RADIUS server can be configured on the iSCSI Gateway to direct a CHAP challenge to
the RADIUS server and eliminate the need to configure all user name + password pairs on
the iSCSI Gateway. This decreases configuration time and increase overall network security.

1-9
Example:
In Figure 1-7, a CHAP authentication challenge is sent to the iSCSI Gateway.
The iSCSI Gateway first checks if the user name is set for RADIUS authentication.
If it is, the CHAP challenge is passed on to the RADIUS server.
If it is not, the user name and password are compared against the pairs configured
in the iSCSI Gateway.
iSCSI
initiator
iSCSI
initiator
Tower box
iqn.1991-05.microsoft:steven.brocade
iqn.com.brocade.steven
Tower box
iqn.1991-05.microsoft:wilbur.brocade
CHAP Authentication
steven
isatwork
IPCloud
SAN
Tower box
RADIUS
Server
Yes
iSCSI Gateway
RADIUS
Authentication?
No
brocade.steven
accounting
steven
ilovecookies
microsoft:steven
Default
all
NA
Figure 1-7.
1-10
10261b
finance
brocade.billing
Sending a CHAP Authentication Challenge

iSCSI Gateway Cluster

A cluster is made from two iSCSI Gateways that are attached to the same storage element(s).
In a cluster, the iSCSI Gateways interact in a peer-to-peer fashion with the other neighbor
iSCSI Gateway. In this active-active configuration, neither iSCSI Gateway is configured to act
as the master iSCSI Gateway. All disks are accessible to each iSCSI Gateway and can be
exposed on either iSCSI Gateway. This allows you to split the load between the two iSCSI
Gateways. Clusters provide high availability in the event of iSCSI Gateway failover.
Each network port on the iSCSI Gateway is configured with its own:
z
active, or functioning, IP addresses
inactive, or dormant, neighbor IP addresses.
When one iSCSI Gateway goes off-line, the remaining iSCSI Gateway activates its neighbors
IP addresses. The hosts continue to access disk targets through the same IP address without
sensing that their regular iSCSI Gateway has gone offline or noticing any impact on storage
performance.
Note:
All LUNs in a RAID controller must be simultaneously exposed through all ports connected to
both iSCSI Gateways.

1-11
Example
In Figure 1-8, two iSCSI Gateways are connected to one FC JBOD. From the four physical disks,
two disks have been exposed and are equally accessible to both iSCSI Gateways.
iSCSI Gateways are both fully operational in a cluster. No iSCSI Gateway must sit in stand-by
mode.
Both iSCSI Gateways are also connected to two hosts via the IP SAN. Disk 1 is exposed via iSCSI
Gateway 1 to Host 1, represented by the orange dashed line. Disk 2 is exposed via iSCSI
Gateway 2 to Host 2, represented by the purple dotted line.
Disk 1
IP1,Target 1
iSCSI
initiator
Disk 2
iSCSI
initiator
Tower
Hostbox
1
Tower
Hostbox
2
IP2,Target 2
IPCloud
SAN
IP1-active
IP2-inactive
IP2-active
IP1-inactive
iSCSI Gateway 2
iSCSI Gateway 1
iSCSI Target 1
wwui1
iSCSI Target 2
wwui2
Disk 1
Disk 2
LU0
LU0
FC JBOD
Disk 2
Disk 3
Disk 4
10228b
Disk 1
Figure 1-8.
1-12
iSCSI Gateway Cluster Configuration

Example
In Figure 1-9, iSCSI Gateway 1 has gone off-line. iSCSI Gateway 2 activates iSCSI Gateway 1s IP
address and takes over exposure of Disk 1 to Host 1, represented by the orange dashed line.
Host 1 continues to access Disk 1 through the same IP address as it did before its iSCSI Gateway
went off-line. Host 1 has no way of knowing that its regular iSCSI Gateway is off-line.
Disk 1
IP1,Target 1
iSCSI
initiator
Disk 2
iSCSI
initiator
Tower
Hostbox
1
Tower
Hostbox
2
IP2,Target 2
IPCloud
SAN
IP1-active
IP2-inactive
IP2-active
IP1-active
iSCSI Gateway 1
iSCSI Gateway 2
iSCSI Target 1
wwui1
iSCSI Target 2
wwui2
Disk 1
Disk 2
LU0
LU0
FC JBOD
Disk 2
Disk 3
Disk 4
10229b
Disk 1
Figure 1-9.
Re-Routing Storage Access with Off-line iSCSI Gateway

1-13
Maintaining Cluster Communications

Once a iSCSI Gateway is configured as a cluster, it begins sending out a regular keep alive
signal to its neighbor. The iSCSI Gateway also begins listening for the keep alive signal from
its neighbor. The keep alive signal is transmitted through all connecting paths between
each neighbor. Thus, if one path fails, the remaining path(s) will still carry the keep alive
signal.
If a specified time period passes without a keep alive signal from the neighbor, a suspicious
interval, measured in seconds, is entered. The iSCSI Gateway suspects that its neighbor has
gone off-line and begins preparing to activate the neighbor IP addresses to take over disk
exposure.
If a keep alive signal is received during the suspicious interval, the timer is reset and the
iSCSI Gateway continues to function as usual. If a keep alive signal is not received by the
end of the suspicious interval, a faulty interval is entered. At the end of the faulty interval,
the neighboring iSCSI Gateway is considered off-line, the failover process is initiated and
the on-line iSCSI Gateway actives the neighbor IP addresses and takes over disk exposure.
1-14

Chapter 2
iSCSI Gateway Operations
Initial iSCSI Gateway Configuration
After powering up the iSCSI Gateway, the first thing you must do is to configure its
management parameters. This can be done via telnet or via a console or dumb terminal to
open a direct connection with the iSCSI Gateways RS232 console port.
The iSCSI Gateway has a default IP Address of 10.11.12.123. This allows you to set initial
startup parameters via a telnet session.
Management IP Address
The management IP address can be set via:
z
RS-232 port
Telnet session
Telnet/SSH Connection
To initialize the iSCSI Gateway via telnet/SSH session:

1.
Change your computers IP Address to anything on the same subnet 10.11.12.*
2. Connect to the management port on the iSCSI Gateway.

3. Telnet to 10.11.12.123.
4. Enter Username and Password: admin.
You will be asked to accept or change the default values for the following:
z
management IP Address
management IP Mask
device name

2-1
management interface (eth1)
RS232 Serial Connection

To initialize the iSCSI Gateway via an RS-232 serial connection:
z
Connect the cable to the appropriate port on the management server, and open a
Terminal session. Set the following parameters in the terminal:
Parameter
System Requirement
Config Serial Port
ComX (according to your physical port

connection)
Bits per second
115200
Data Bits
Parity
none
Stop Bits
Flow Control
none
Emulation
Auto detect
Figure 2-1.
Terminal Properties
Configuring Management Parameters

After logging in to the iSCSI Gateway, you can change the general management parameters
and Telnet communications port as well as add user login profiles and hardware
temperature scale.
2-2

Set Device Parameters

You can change iSCSI Gateway management parameters (IP address and mask) or UDP port
number as well as include details of whom to contact in the event of technical difficulties
and which read/write communities to send traps to. Use the CLI command device set
to add or change management parameters. This command will not appear in the CLI menu
until the iSCSI Gateway is initialized.
device set
You can define or change the following parameters using this command:
Switch
Definition
Type
Values/Remarks
-c
contact person in the event of a

system malfunction
optional
-d
local date
optional
dd/mm/yyyy
0, 1*
*each iSCSI Gateway must have a
different ID
ASCII string
-id
iSCSI Gateway ID in a cluster
optional
-if
management port alias
optional1
eth1: (default for iSCSI Gateway)
-im
management port IP mask
optional1
IP network mask
255.255.255.0
-ip
management port IP address
optional1
-loc
location of the contact person
optional
ASCII string
-n
iSCSI Gateway name
optional1
ASCII string
-p
-rcom
IP address
integer in range 0..65535
port through which all SNMP

communications will flow
optional
read community
optional
y (yes)
n (no)
161
ASCII string (maximum 80
characters)
public
-rld
report lun discovery
optional
-t
local time
optional
hh:mm
-telnet
telnet port for iSCSI Gateway

communications
optional
23
-temperature_units
temperature display scale
optional
c(elcius), f(ahrenheit)
optional

characters)
-wcom
write community
private
Dependencies
optional1: at least one of the switches is mandatory

2-3
Example:
The iSCSI Gateway alias is reset to iSCSI Gateway 1; the IP address for iSCSI Gateway management
functions is changed to 212.199.43.47. The date is set to the 21st of July, 2002 and the time to 1:30
p.m. Anna Levin is named as the contact person and she can be reached at the internal office
extension 4838.
device set n iSCSIGateway1 ip 212.199.43.47 d 21/07/2002 t 13:30 c
AnnaLevin loc ext4838
You can now connect to the iSCSI Gateway 1 Gb Ethernet port and begin managing the iSCSI
Gateway operations and the attached SAN.
Show iSCSI Gateway Configuration Information

After setting the general iSCSI Gateway Management configurations, you can use the CLI
command info to access the iSCSI Gateway Configuration table and view the current
configuration, including whom to contact in the event of technical difficulties.
info
Table 2-1:
iSCSI Gateway Configuration
Parameter
Value
Name
iSCSIGateway1
Description
SW Version 2.0, build 4,patch 0

Board version 1, PCB version 0
ID
-1
Contact
Anna Levin
Location
Ext. 4838
Status
OK
Object ID
1.3.6.1.4.1 10059 1.1.2
Time Since Last Reset
12 days 17 hours 29 min 32 sec
Mgmt IP Address
212.199.43.47
Mgmt UDP Port
161
Date & Time [DD/MM/YY]
21/04/02 13:33
Telnet Port
23
Eth
Up
FC
Up
Read Community
Public
Write Community
Private
Set Telnet Port

If your Telnet communications connection to the iSCSI Gateway traverses a firewall, the
2-4

standard Telnet communications port 23 may be blocked by the firewall as a security

measure. To enable Telnet communications to the iSCSI Gateway, you can designate an
alternate port using the CLI command device set -telnet. This port can be opened in
the firewall for dedicated Telnet-iSCSI Gateway communications.
device set -telnet
Example:
The port 1597 is programmed as the Telnet communications port.
device set -telnet 1597
Use the CLI command info to check the iSCSI Gateways designated Telnet port.
Traps and SNMP

The iSCSI Gateway supports standard MIB s for monitoring and sends SNMP traps that can
be viewed by an SNMP manager/console. Any SNMP manager using the correct default
read and write communities can get and set MIB variables. If you are working with iSCSI
Gateway Manager, the iSCSI Gateway management system, iSCSI Gateway Manager will
automatically add itself as the SNMP manager. The default SNMP communities are public
for read and private for write. The default communities can be changed by an
administrator.
Adding an SNMP Manager

To get trap notifications, an SNMP manager must be registered as a SNMP manager in the
database of the SNMP agent. You can register as a SNMP manager by using CLI command
snmp manager add.
snmp manager add
Switch
Definition
Type
Values/Remarks
-ip
manager IP address
mandatory
IP address
-p
receive traps through specific port
optional

162
-rcom
read community
optional

characters)
public
-trap
send traps to manager
optional
y (send),
n (do not send)
-wcom
write community
optional

characters)
private

2-5
Example:
An SNMP manager is added on IP address 212.199.43.96. It receives traps through port 162. The
manager receives information through the public community and writes information through the
private community.
snmp manager add ip 212.199.43.96 p 162 rcom public wcom private
trap yes
Setting SNMP Communities

You can set SNMP read and write communities to regulate SNMP manager access to
variables. Use the CLI command device set to change the default read and write SNMP
communities. Use the CLI command info to check the default communities.
device set
Switch
Definition
Type
Values/Remarks
1
-c

system malfunction
optional
-d
local date
optional1
-id
optional
0, 1*
different ID
-if
optional1
eth1: (default for iSCSI Gateways)
-im
optional
ASCII string
dd/mm/yyyy
IP network mask
255.255.255.0
-rcom
read community
optional

characters)
public
-wcom
optional1
write community

characters)
private
Removing an SNMP Manager

This command removes a manager from the iSCSI Gateway.
snmp manager remove
Switch
Definition
Type
Values/Remarks
-ip
manager IP address
mandatory
IP address
-p
receive traps through specified

port
mandatory
User Login Profiles

After logging in to an iSCSI Gateway, a total of ten user profiles (name plus password) can be
configured on an iSCSI Gateway using the CLI command admin add. The default user
name and password admin can be maintained or removed.
2-6

The user name can have from one to twenty characters. The user password can have from
six to twelve characters. Both fields are case sensitive and accept all characters, including
spaces.
admin add
Switch
Definition
Type
Values/Remarks
-pw
user password
mandatory
ASCII string
6-11 characters
-un
user name
mandatory
ASCII string
119 characters
Example:
admin add un Joe Cool pw 123456
Changing a User Profile

Note:
If you are working in an iSCSI Gateway cluster, a user profile must be changed on both iSCSI
Gateways
This interactive command enables a user to change their login password for their user name
on the iSCSI Gateway.
admin password
After entering the command, you are prompted to enter your existing password and the
new password.
Removing a User Profile

Note:
If you are working in an iSCSI Gateway cluster, a user profile must be changed on both iSCSI
Gateways.
You can remove any user profile from the iSCSI Gateway database except the profile you
are logged in with. This ensures at least one user profile in the database at all times.
admin remove
Switch
Definition
Type
Values/Remarks
-un
user name
mandatory
ASCII string
119 characters
Example:
admin remove un Joe Cool
Configuring the iSCSI Gateway Interfaces

You can change the default configuration of each FC storage port. Use the CLI command
interface show to show all iSCSI Gateway interfaces.

2-7
Table 2-2:
iSCSI Gateway Interfaces
Type
Name
Description
Alias
Phys Address
RS232
cons
RS232
Management Int
cons
000000000000
ETHERNET
eth1
Fast Ethernet
Manage
eth1
000000000000
FibreChannel
Fc1
FC MMF
fc1
000000000000
FibreChannel
Fc2
FC MMF
fc2
000000000000
ETHERNET
eth1
Gigabit Ethernet
Net
eth1
00081a000110
ETHERNET
eth2
Gigabit Ethernet
Net
eth2
00081a000112
Show FC Interface Information

Use the CLI command fc interface show to view all FC ports on the iSCSI Gateway;
their World Wide Port Names (WWPN) and administrative and operative types.
fc interface show
Alias
WWPN
Connect Mode
Oper Type
Speed
fc1
20:00:00:20:38:1
1:34:78
Private
NlPort
1Gbs
fc2
20:00:00:20:38:
00:10:64
Private
NlPort
1Gbs
Set FC Storage Port

The iSCSI Gateway default configuration for FC connections is 1 GB nl port in a public loop.
If you want to change the default configuration, each storage port connected to an FC
device can be reconfigured to change the connection speed, port type and connection
mode. Use the CLI command fc set to change the FC storage port communication
speed, port type or connection mode.
fc set
2-8

Switch
Definition
Type
Values/Remarks
-if
storage port
mandatory

characters)
-cm
connection mode
optional
fab (fabric),
pul (publicloop),
prl (privateloop)
-sp
FC communication speed
optional
0: auto
1: 1 Gb
2: 2 Gb
Example:
fc set if fc2 sp 1 cm prl
iSCSI Gateway World Wide Node Name

Use the CLI command fc node show to view the iSCSI Gateway World Wide Node Name
(WWNN).
fc node show
Name
iSCSI Gateway1
Description
SW Version 1.5, build 5,patch 0

Board version 1, PCB version
WWNN
20:00:20:10:58:00:10:46
Function
Gateway
Changing a Network Interface Alias

You can change the alias of an iSCSI Gateway interface for user convenience. Leaving the
new alias field blank will return the alias to its default setting
Note:
If you are working in an iSCSI Gateway cluster, the interface alias must be changed on both iSCSI
Gateways.
interface set
Switch
Definition
Type
Values/Remarks
-if
current interface alias
mandatory

characters)
-na
new alias
mandatory

characters)

2-9
Example:
The storage interface, fc1 is renamed to Storage 1.
interface set if fc1 na Storage1
Adding a Network Interface IP Address

Note:
If you are working in an iSCSI Gateway cluster, the interface IP must be added on both iSCSI
Gateways.
You can assign more than one IP address to each network port.
ip config set
Note:
Executing this command on the same network port with a different IP address will not reset the
network port address. It will add another IP address to the network port
ip config set
Switch
Definition
Type
Values/Remarks
-ip
IP address assigned to interface

port
mandatory
IP address
-act
activity status
if IP address is active to expose
volumes. use inactive status to
allow failover.
optional
1 (active),
-if
network interface port
optional
eth1, eth2 (for new configuration)
-im
IP network mask
optional
IP network mask
2 (inactive)
relevant only in cluster
255.255.255.0
Example:
IP address 212.199.43.57 is added to interface eth1 for a total of two IP addresses assigned to
interface eth1.
ip config set if eth1 ip 212.199.43.57
Removing a Network Interface IP Address

Note:
If you are working in an iSCSI Gateway cluster, the interface IP must be removed on both iSCSI
Gateways.
You can remove an IP address from the network ports.
ip config remove
2-10
Switch
Definition
Type
Values/Remarks
-ip
IP address to remove from the

mandatory
IP address

Example:
The second IP address, 212.199.43.70, on the network interface eth2 is removed.
ip config removeip 212.199.43.70
Show IP Configuration
After setting the management and network port IP addresses, you can use the CLI command
ip config show to access the IP Configuration Table and view all assigned port IP
addresses.
ip config show
Table 2-3:
iSCSI Gateway IP Configuration Table
If Name
IP Address
Net Mask
Activity
mgmt
212.199.43.46
255.255.255.0
Active
eth1
212.199.43.56
255.255.255.0
Active
eth1
212.199.43.57
255.255.255.0
Inactive
eth2
212.199.75.66
255.255.255.0
Active
eth2
212.199.12.70
255.255.255.0
Inactive
Configuring IP Routing
To enable communications between the iSCSI Gateway and IP networks located outside the
iSCSI Gateway LAN, you must configure IP routing paths for each external network port.
The IP route begins with a specified network port on the iSCSI Gateway and ends at the
external network IP address. Just as each IP address is unique, each IP routing path is
unique. There can be only one IP route to a given external network IP address per iSCSI
Gateway.
Note:
You can configure only one IP route to a given external network on your iSCSI Gateway.
Add an IP Route
You can enable communications to networks outside of your LAN by configuring an IP
routing path. This allows volume access to hosts located on external networks. Use the CLI
command ip route add to add an IP routing path to your iSCSI Gateway. If you are
working in an iSCSI Gateway cluster, you must configure the IP route on both iSCSI
Gateways in the iSCSI Gateway cluster. For more information on iSCSI Gateway clusters, see
Configuring an iSCSI Gateway Cluster.
ip route add
Switch
Definition
Type
Values/Remarks
-dip
destination IP
mandatory
IP address
-gw
gateway router IP address
mandatory
IP address

2-11
Switch
Definition
Type
Values/Remarks
-if
interface alias
mandatory

characters)
-dmask
host destination IP mask
optional
255.255.255.255
Dependencies
optional1:
mandatory when -dip = subnet IP (network route)
Example:
An IP routing path to Network D, IP 10.10.20.0, and (IP mask 255.255.255.0) is mapped from
network port Eth2 through router gateway 30.30.20.20.
ip route add dip 10.10.20.0 dmask 255.255.255.0 gw 30.30.20.20 if
eth2
Set Default Gateway

You can configure the default gateway for IP routes. This gateway is used for any IP address
not specified in the iSCSI Gateway routing table. Use the CLI command ip route
default to set the default gateway IP address. To change the default gateway, repeat the
command with the new default gateway IP address.
ip route default
Switch
Definition
Type
Values/Remarks
-gw
IP address of the default gateway

router
mandatory
IP address
-if
interface alias
optional
eth1
ip route default gw 20.20.10.20
Check IP Routes
After creating an IP routing path, you can ping any IP-connected device from the iSCSI
Gateway ETH interface to check that the routing is configured correctly. Use the CLI
command ping to ping an IP address from the iSCSI Gateway. Make sure that the route is
defined on the other side as well.
ping
Switch
Definition
Type
Values/Remarks
-ip
IP address to ping
mandatory
IP address
-if
interface alias that issues ICMP

requests
optional

characters)
Example:
Ping ETH1 port on device 172.17.200.69.
ping ip 172.17.200.69 if ETH1
Use the CLI command traceroute to track packet routes. Traceroute is similar to NetBSD
2-12

however, the switches are different.
Traceroute
This command tracks packet routes. Traceroute is similar to NetBSD however, the switches
are different.
traceroute
Switch
Definition
Type
Values/Remarks
-ip
destination IP address
mandatory
IP address
-firstttl
initial time-to-live used in the

first outgoing probe packet
optional
1..255
-icmp
use ICMP echo instead of udp

datagrams
optional
do not specify, no value allowed

for switch
-if
network interface alias for

outgoing probe packets
optional
ASCII string
-length
probe datagram length in bytes

of outgoing packets
optional1
40
-maxttl
max number of hops used in

optional
1..30..255
-nofrag
sets the "don't fragment" bit
optional

for switch
-noroute
bypass the normal routing tables

and send directly to a host on an
attached network
optional

for switch
-numprobe
number of probe packets sent for

each hop
optional
-port
base udp port number used in

probes
optional
0..33434..65535
-probemtu
probe mtu sets the "don't

fragment" bit, and use the next
hop mtu each time we get the
"need fragmentation" error, thus
probing the path mtu
optional

for switch
-showttl
displays TTL value of the

returned packet
optional

for switch
-src
IP address of source address in

optional
used to force the source address to

something other than the IP
address of the interface the
probe packet is sent on
-timeout
time to wait for a response to

probe
optional
5 seconds

2-13
Switch
-gw
Definition
Type
specifies loose source route

gateway
Values/Remarks
optional
IP address
Dependencies
optional1 : cannot be set if using -probemtu
optional2 :
can use multiple -gws (up to 8)
Example:
traceroute host 172.17.200.69
Show IP Routes
After creating an IP routing path to an external network, you can view it and any other
configured IP routing path. Use the CLI command ip route show to view an iSCSI
Gateways routing table.
ip route show
Table 2-4:
iSCSI Gateway IP Routing Paths
Dest IP Address
Dest Mask
Interface
Gateway
10.10.20.20
255.255.255.0
Eth2
30.30.20.20
10.12.40.40
255.255.255.0
Eth3
20.22.11.11
TOS
Remove an IP Route
You can remove unwanted IP routing paths from your iSCSI Gateway. Use the CLI
command ip route remove to remove an IP routing path. If you are working in an iSCSI
Gateway cluster, the IP route must be removed from both iSCSI Gateway databases. For
more information on iSCSI Gateway clusters, see Configuring an iSCSI Gateway Cluster.
ip route remove
Switch
Definition
Type
Values/Remarks
-dip
host destination IP address
mandatory
IP address
-dmask
optional
IP network mask
255.555.255.255
-gw
gateway to host station IP address
optional
IP address
Example:
The routing path to destination network IP 10.12.40.0 (IP mask 255.255.255.0) is removed from
network port Eth2.
ip route remove dip 10.12.40.0 dmask 255.255.255.0 if eth2
You have now configured all basic iSCSI Gateway parameters. If you are creating an iSCSI
Gateway cluster, continue with Configuring an iSCSI Gateway Cluster.
2-14

Configuring iSCSI Portals

Note:
z
Do not create an iSCSI portal on the management IP address.
The iSCSI Gateway supports a maximum of 100 portals.
Create iSCSI Portals

To enable communication between iSCSI initiators and iSCSI targets you need to assign a
portal to the iSCSI protocol transport. Use the CLI command iscsi portal create to
create an iSCSI portal. A portal is the coupling of an IP address and a TCP port. Once
created, a portal is opened automatically during a communication session. If you are
working in an iSCSI Gateway cluster, each portal must be created on both iSCSI Gateways in
the iSCSI Gateway cluster. For more information on iSCSI Gateway clusters, see
iscsi portal create
Switch
Definition
Type
Values/Remarks
-ip
network port IP address
mandatory
IP address
-p
tcp port for iSCSI communication
optional

3260
Example:
An iSCSI portal is created using the default TCP port 3260 for the IP address 212.199.43.66.
iscsi portal create ip 212.199.43.66
Show iSCSI Portals

View all created portals using the CLI command iscsi portal show.
iscsi portal show
Table 2-5:
iSCSI Portals
Protocol
Address Type
Address
Port
ipv 4
212.199.43.56
3260
ipv 4
212.199.43.57
3260
ipv 4
212.199.43.66
5003
ipv 4
212.199.43.67
5003
Protocol 6 is the transport protocol for iSCSI. Address type IPv 4 designates a four byte IP
address.

2-15
Remove iSCSI Portals

You can remove an iSCSI portal using the CLI command iscsi portal remove. Only
after all iSCSI portals related to an IP address are removed from a port can the IP address be
removed from the port. If you are working in a cluster, the portal must be removed from
both iSCSI Gateway databases. For more information on iSCSI Gateway clusters, see
iscsi portal remove
Switch
Definition
Type
Values/Remarks
-ip
mandatory
IP address
-p
tcp port for iSCSI communication
mandatory
Configuring Storage Devices

Discovering Storage Devices
The iSCSI Gateway default algorithm for storage devices discovery is using the SCSI
command REPORT LUNS. Certain storage devices either do not support this command or
do not respond according to the SCSI standard. To discover these devices, the REPORT
LUNs command must be disabled. If certain devices in the SAN are not being discovered by
the iSCSI Gateway, use the CLI command device set to disable or re-enable device
discovery via REPORT LUNs.
device set
Switch
-rld
Definition
Type
Values/Remarks
optional
y (yes)
n (no)
See Device Set, for the full list of switch parameters for the CLI command device set.
2-16

Renaming a Storage Device

Note:
If you are working in an iSCSI Gateway cluster, the disk must be renamed on both iSCSI
Gateways.
You can rename a disk.
storage set
Switch
Definition
Type
Values/Remarks
-s
storage alias to modify
mandatory

characters)
-info
information on storage to set
optional1
ASCII string
-na
new alias for storage
optional

characters)
Dependencies
optional1 : at least one of the switches is mandatory
Example:
The disk, Stor_1, is renamed to RAID1 and a note is made for the storage manager that disk was
exposed on JAN 12.
storage set s Stor_1 na RAID1 info Exposed_JAN_12
Removing a Storage Device

Note:
If you are working in an iSCSI Gateway cluster, the disk must be removed on both iSCSI
Gateways.
You can remove a disk from the iSCSI Gateway database. The disk must be defined as
missing to remove it.
storage remove
Switch
Definition
Type
Values/Remarks
-s
storage alias to remove
mandatory

characters)
Example:
Disk named Stor_1 is removed from the iSCSI Gateway database.
storage remove s Stor_1

2-17
iSCSI Gateway Related Commands

Resetting an iSCSI Gateway
You can perform a remote soft reset on the iSCSI Gateway using the CLI system reset
command. All configuration databases will be maintained on the iSCSI Gateway, including
user names and passwords; network port aliases; configured disks and iSCSI targets.
Saving (Uploading) a iSCSI Gateway Database File

You can upload a copy of an iSCSI Gateways full database file to the local TFTP server. If the
iSCSI Gateway fails, its database file can be downloaded to the replacement iSCSI Gateway.
This eliminates protracted configuration time on the new iSCSI Gateway and ensures
configuration integrity.
Use the CLI command ft upload to upload an iSCSI Gateways full database file
ft upload
Switch
Definition
Type
Values/Remarks
-fn
name to save file as
mandatory
ASCII string
-ip
server IP address
mandatory
IP address
-ft
format to save data in
optional
db : data base
log : log file
Example:
Upload the file v1_9dat as a database file to the tftp server at 212.199.43.70.
ft upload ip 212.199.43.70 fn iSCSIGateway/v1_9/v1_9database ft db
Downloading a iSCSI Gateway Configuration File

Note:
Download the database file to the iSCSI Gateway before attaching it to the storage devices.
After replacing a failed iSCSI Gateway, you can download the replaced iSCSI Gateway
database file from the TFTP server to the new iSCSI Gateway. Unlike a standard iSCSI
Gateway installation, do not connect the iSCSI Gateway to the storage devices before
powering up. You first download the database file and then connect the iSCSI Gateway to
the storage devices. This ensures that autodiscovery will not assign default aliases different
from the replaced iSCSI Gateway to the discovered disks.
Use the CLI command ft download to download an iSCSI Gateway database file from the
local TFTP server after you have initialized the replacement iSCSI Gateway with an IP
management address via LCD or Console.
Note:
The iSCSI Gateway must be reset for the downloaded database to become operational.
The download parameters are identical to the upload parameters.
2-18

ft download
Switch
Definition
Type
Values/Remarks
-fn
mandatory
ASCII string
-ip
IP address of telnet station where

TFTP application sits
mandatory
IP address
-ft
optional
db: data base
Example:
Download the file v1_9database as a database file from the tftp server at 212.199.43.70.
ft download ip 212.199.43.70 fn iSCSIGateway/v1_9/v1_9database ft db
Configuring an iSCSI Gateway Cluster

You can configure an iSCSI Gateway cluster using two iSCSI Gateways of the same type. A
cluster is a group of storage units and switches that function as one unit providing high
availability in the event of iSCSI Gateway failover.
A cluster can be configured between two iSCSI Gateways using CLI or the Brocade iSCSI
Gateway Manager.
Note:
We recommend using the Brocade iSCSI Gateway Manager for cluster configuration. For more
information on configuring a cluster using the Brocade iSCSI Gateway Manager refer to the
Brocade iSCSI Gateway Manager User Manual and on-line help system.
Note:
When configuring a cluster via CLI, you must configure each iSCSI Gateway with identical
configurations. This requires entering the same CLI commands twice, once for each iSCSI
Gateway.
Two iSCSI Gateways can be concurrently connected to the same storage devices to balance
volume exposure thus creating an iSCSI Gateway cluster. In a cluster, each iSCSI Gateway
interacts in an active-active, peer-to-peer fashion with the other iSCSI Gateway, or
neighbor, in the cluster. Neither iSCSI Gateway needs special configuration in order for it to
act as the master iSCSI Gateway in the cluster. This provides higher flexibility in building a
cluster.
Note:
Both iSCSI Gateways are fully operational in a cluster. No iSCSI Gateway must sit in stand-by
mode. When working in a cluster, the iSCSI Gateway can support a maximum of 100 portals:
50 active and 50 inactive.
Clusters provide high availability in the event of iSCSI Gateway failover. Each network port
on the iSCSI Gateway is configured with its own active, or functioning, IP addresses as well
as inactive, or dormant, neighbor IP addresses. If one iSCSI Gateway goes off-line, the
remaining iSCSI Gateway activates its neighbors IP addresses. The hosts continue to access
iSCSI targets through the same IP address without sensing that their regular iSCSI Gateway
has gone offline or noticing any impact on storage performance.

2-19
Note:
When working with RAID controllers, it is imperative that all LUNs in the RAID controller are
simultaneously exposed through all ports connected to both iSCSI Gateways for the iSCSI
Gateways to provide high availability during an iSCSI Gateway failover.
Set iSCSI Gateway ID

When you configure a cluster, you must give each iSCSI Gateway a different device ID for
proper cluster functioning. Use the CLI command device set to configure the iSCSI
Gateway ID for each iSCSI Gateway.
device set
Switch
Definition
Type
Values/Remarks
-id
optional
0, 1*
different ID
Example:
There are two iSCSI Gateways in a cluster. In iSCSI Gateway 1 the ID is set to 1.
device set id 1
In iSCSI Gateway 2 the ID is set to 0.
device set id 0
Add Neighbor
Note:
All CLI names and aliases are case sensitive. When you configure a cluster, you must tell each
iSCSI Gateway that it has a neighbor and how to contact its neighbor. Use the CLI command
neighbor add to inform each iSCSI Gateway of its neighbor.
You must inform each iSCSI Gateway of its neighbor in a cluster.
You must tell iSCSI Gateway 1 that its neighbor is iSCSI Gateway 2 and iSCSI Gateway 2 that
its neighbor is iSCSI Gateway 1.
When creating a cluster, first ensure that you have configured all IP addresses in the correct
active/inactive phase as well as portals and IP routes on both iSCSI Gateways.
neighbor add
2-20
Switch
Definition
Type
Values/Remarks
-ip
IP address of mgmt port on

neighbor
mandatory
IP address
-nb
alias of neighbor to add to cluster
mandatory

characters)

Example:
iSCSIGateway 1 is informed that it has a neighbor, iSCSIGateway2, and that it can establish
communication with iSCSIGateway2 via IP address 212.199.43.75.
neighbor add nb iSCSIGateway2 ip 212.199.43.75
Note:
All iSCSI Gateway database configurations must be replicated in both iSCSI Gateways when
creating an iSCSI Gateway cluster.
Maintaining Cluster Communications

Once an iSCSI Gateway knows that it has a neighbor, it begins sending out a regular keep
alive signal to its neighbor that it is on-line. The iSCSI Gateway also begins listening for the
keep alive signal from its neighbor. The keep alive signal is transmitted through all
connecting paths between each neighbor. Thus, if one path fails, the remaining path(s) will
still carry the keep alive signal.
If a specified time period passes without a keep alive signal from the neighbor, a suspicious
interval, measured in seconds, is entered. The iSCSI Gateway suspects that its neighbor has
gone off-line and begins preparing to activate the neighbor IP addresses to take over storage
exposure.
If a keep alive signal is received during the suspicious interval, the timer is reset and the
iSCSI Gateway continues to function as usual. If a keep alive signal is not received by the
end of the suspicious interval, a dead interval is entered. At the end of the dead interval, the
neighboring iSCSI Gateway is considered off-line, the failover process is initiated and the
on-line iSCSI Gateway actives the neighbor IP addresses and takes over volume exposure.
Use the CLI command cluster show to view the keep alive parameters of a cluster.
cluster show
Last Keep Alive
KeepAlive Int(s)
Susp Int(s)
Dead Int(s)
10
Example:
Every 2 seconds iSCSI Gateway 1 sends out a keep alive signal. If, after 6 seconds from the last keep
alive signal, iSCSI Gateway 1 does not receive another keep alive signal from its neighbor, it enters a
suspicious interval. If, after 10 seconds from the last keep alive signal, iSCSI Gateway 1 enters a dead
interval and begins activating the failover process.

2-21
Enable/Disable Cluster Failover

Once you have configured your cluster parameters, you need to enable the failover
functionality. Use the CLI command cluster failover enable to enable this
functionality. This command must be executed on both iSCSI Gateways in the cluster.
cluster failover enable
If you want to break a cluster or need to take an iSCSI Gateway off-line, you must first
disable iSCSI Gateway failover. Use the CLI command cluster failover disable to
disable this functionality. This command must be executed on both iSCSI Gateways in the
cluster.
cluster failover disable
Additional iSCSI Gateway Cluster Configurations

After configuring neighbor parameters on each iSCSI Gateway, you need to configure
identical storage configuration and exposure details on each iSCSI Gateway in the cluster.
Show Neighbor Details

Use the CLI command neighbor show to view the neighbor configured on an iSCSI
Gateway.
neighbor show
Table 2-6: Neighbors in a Cluster
Name
IP Address
UDP SNMP Timeout (msec)
iSCSIGateway2
212.199.43.75
161
SNMP # of Retries
Use the CLI command neighbor details to list the details of a neighbor in a cluster.
neighbor details
2-22
Switch
Definition
Type
Values/Remarks
-nb
alias of neighbor in cluster
mandatory

characters)
Table 2-7:
Neighbor Details
Neighbor Name
iSCSIGateway2
IP Address
212.199.43.75
Last Received Keep Alive:
Status
Alive
Lock Status
srOpen
A neighbors status can be alive, suspicious or dead. The lock status can be open, master
lock or slave lock. The lock status is not currently configurable and the default status is
open.
Managing a Cluster
If you modify an iSCSI Gateway alias or management IP address, you must implement the
updates in the neighboring iSCSI Gateway. Use the CLI command neighbor set to
update an iSCSI Gateway regarding changes in its neighbor.
neighbor set
Switch
Definition
Type
Values/Remarks
-ip

neighbor
mandatory
IP address
-nb
mandatory

characters)
Use the CLI command neighbor remove to remove a neighbor from a cluster.
neighbor remove
Switch
Definition
Type
Values/Remarks
-nb
mandatory

characters)
Use the CLI command cluster set to modify the default keep alive intervals.
cluster set
Switch
Definition
Type
Values/Remarks
-fint
failover interval
time when suspicious interval is
exceeded
optional1
-kai
keep alive interval

time between keep alive signals
from neighbors
optional1
-sint
suspicious interval
time from when a signal was
expected but not received
optional
Dependencies
optional1:
at least one of the switches is mandatory

2-23
Upgrading the iSCSI Gateway Firmware

Note:
The iSCSI Gateway must be reset for the new firmware to begin functioning.
You can upgrade the iSCSI Gateway firmware via CLI. The firmware upgrade files are first
downloaded from the TFTP server. You can then use the CLI command ft update to
upgrade the iSCSI Gateway firmware. There are a total of six upgrade files. Do not change
their names or the iSCSI Gateway will not be able to perform the upgrade.
All configured user profiles are unaffected by the firmware upgrade.
ft update
Switch
Definition
Type
Values/Remarks
-fn
file directory and filename
mandatory
ASCII string
-ip
TFTP server IP address
mandatory
IP address
Example:
Update firmware for version X_Y, patch W, build Z
ft update ip 212.199.43.46 fn brocade/update/v3_2/firmware_X_Y_W_Z.fw
After upgrading the firmware, the iSCSI Gateway must be reset for the new firmware to
begin functioning. Use the CLI command reset to reset the iSCSI Gateway.
reset
Use the CLI command info to view the firmware version to confirm that the firmware has
successfully upgraded.
Safe Mode
The iSCSI Gateway operating status includes the ability to enter into safe mode in the event
of booting problems or in an attempt to clear significant amounts of an iSCSI Gateway
configuration. There are two ways to enter safe mode:
z
Automatically during a reboot.
Manually via CLI.
There are four safe mode reboot options:
2-24
Level 0: Reboot in normal mode.
Level 1: Reboot with last good configuration.
Level 2: Reboot with default factory database.
Level 3: Reboot with default factory system.

Automatic Safe Mode

When the iSCSI Gateway reboots, either after upgrading the iSCSI Gateway software or any
other time that environmental irregularities require, there may be database corruption. To
prevent potential damage to the database, the iSCSI Gateway enters safe mode.
Safe mode can only be navigated from a console with a local, direct RS232 connection to
the iSCSI Gateway.
Exporting a Corrupted Database

After you reboot the iSCSI Gateway from safe mode level 1 or 2, you can use the CLI
command ft export problem to export the potentially corrupted database to
BROCADE technical support for examination.
If you rebooted in safe mode level 1 (last good configuration), the last good database file
and the corrupted database file are exported for examination.
If you rebooted in safe mode level 2 (reboot with default factory database), the corrupted
database file is exported for examination.
ft export problem
Switch
Definition
Type
Values/Remarks
-ip
server IP address
mandatory
IP address
-fd
directory to export files to
optional
ASCII string must end with \ or /
Example
The suspicious database is exported to the directory Corrupted_DB at IP address 212.199.43.70.
ft export problem ip 212.199.43.70 fd Corrupted_DB
Manual Safe Mode

You can use the CLI to clear an iSCSI Gateways database to varying degrees. This is useful if
you want to change the physical storage pool managed by an iSCSI Gateway.
Safe mode levels 0 and 1 can be executed from any Telnet station but, for extra safety, safe
mode levels 2 and 3 can only be executed from a console with a local, direct RS232
connection to the iSCSI Gateway.
system boot
Switch
Definition
Type
Values/Remarks
-sm
safe mode level
mandatory
0: normal
1: last good configuration
2: default database
3: default factory system
Level O: Normal Mode

This is the same as resetting the iSCSI Gateway. No change is made to the iSCSI Gateway
configuration.
2-25
Level 1: Last Good Configuration

Each time the iSCSI Gateway successfully boots up, it saves the database as the last good
configuration. If the last time the iSCSI Gateway booted was also the first time, the database
will be empty. Use this level to erase all configurations executed since the last reboot and
return to the previous iSCSI Gateway configuration.
For example, if you are modifying or making temporary changes to the iSCSI Gateway
configuration, first ensure that the current configuration is stored in the iSCSI Gateway by
resetting the iSCSI Gateway then execute the changes. If the changes are no longer
desirable, reboot in this level.
Level 2: Default Factory Database

Note:
A direct RS232 connection is necessary.
This clears the database of all configurations expect user login profiles.
For example, if you want to transfer the iSCSI Gateway to a different physical storage pool
within a campus, this level will prepare the iSCSI Gateway for its new configuration while
maintaining the same user profiles of the same system administrators.
Level 3: Default Factory System

Note:
A direct RS232 connection is necessary.
This clears the database of all configurations executed on the iSCSI Gateway, including user
login profiles. Use this level if you want to completely clear an iSCSI Gateways database.
For example, if you want to transfer an iSCSI Gateway to another branch office or campus
department with different system administrators, this level will return the iSCSI Gateway to
the same state it left the factory for shipping.
2-26

Chapter 3
Storage Exposure & Security
Identifying and Configuring Storage Devices
All disks are named automatically during the auto-discovery process. For FC, this name
includes FC disks World Wide Unique Identifier (WWUI) serial number.
Note:
The iSCSI Gateway supports a maximum of 512 disks.
Use the CLI command storage show to show the available storage devices and their
corresponding aliases needed to configure disks
storage show
Table 3-1:
Storage Devices
Alias
Entity Name
LUN
Oper. Status
Type
In Use
Stor_1
500507606058c900
Enabled
entire
yes
Stor_2
2000002037f88fb8
Enabled
entire
yes
Stor_3
2000002037c32b1f
Enabled
entire
no
Stor_4
2000002037c32450
Enabled
entire
no
The storage device operating status has four options.

z
Enabled denotes an attached and functioning storage device.
Storage is missing denotes that a storage device was previously registered and has since
lost its connection to the iSCSI Gateway.
Invalid denotes a storage device that was connected, removed and reconnected with a
different storage size.
Unknown denotes that a storage device is connected but is issuing parameters not
understandable to the iSCSI Gateway.
Note:
If a tape is attached to the iSCSI Gateway the timeout of the FC drivers should be changed using
the following command :
Device advance set param
StorageDrivers.FC.Tachyon.FCPort.Config.io.TimeoutSec val 300
The iSCSI Gateway automatically generates and assigns storage aliases as each device is
discovered. Use the CLI command storage blink start to identify the actual physical
device for an alias.
3-1
storage blink start

Switch
Definition
Type
Values/Remarks
-s
device alias to blink
mandatory

characters)
-t
length of time to blink device
optional
1..3600 sec
0: forever
Example:
The storage device, Stor_1, is set to blink for two minutes (one hundred and twenty seconds) to allow
it to be identified.
storage blink start s Stor_1 t 120
Use the CLI command storage blink abort to stop the blinking before the end of the
set time.
storage blink abort
Switch
Definition
Type
Values/Remarks
-s
alias of device to blink
mandatory

characters)
Example:
Stop blinking on storage device, Stor_1
storage blink abort s Stor_1
Once a storage device has been identified, use the CLI command storage set to change
the device alias or include helpful information on the device.
storage set
Switch
Definition
Type
Values/Remarks
-s
mandatory

characters)
-info
optional
-na
optional1
ASCII string
characters)
Dependencies
Example:
The alias of Stor_1 is changed to Disk2JBOD5 for easier identification and it is noted to save the disk
for the Exchange Log.
storage set s Stor_1 na Disk2JBOD5 info Exchange_Log
The iSCSI Gateway supports write cache enabling for increased performance. Use the CLI
3-2

command storage disk set to enable or disable the write cache.

storage disk set
Switch
Definition
Type
Values/Remarks
-d
disk device
mandatory

characters)
-alloc
allocates storage to host
optional
yes,
no
-wce
write cache enabled
optional
true,
false
The iSCSI Gateway also recognizes all write-protected storage devices. Use the CLI
command storage details to view a devices details, including if it is write-protected.
storage details
Switch
Definition
Type
Values/Remarks
-s
storage alias
mandatory

characters)
Table 3-2:
Storage Details
Alias:
Disk2JBOD5
Entity Name:
2000002037a9551e
LUN(Logical Unit Number)
0000000000000000
Vendor Name:
SEAGATE
Additional Info:
Transport type:
Fiber Channel
Oper. Status:
Enabled
Time since last Update:
8 days 3h:12m:16 sec 37 (1/60 Sec)
SCSI Version:
Revision Level:
0002ST336704FC
Product Id:
ST336704FC
Serial Number:
3CD0FHA400002108XYGLXYGL
Number Of Blocks:
71687369
Block Size:
512
Write Cache Enabled:
true
Write Protected
false

3-3
Alias:
Disk2JBOD5
Storage
sim
Exposing an iSCSI Target and LUN

Note:
A LUN value cannot be larger than 255.
To make storage accessible to a host, you need to assign a LUN to it, attach the LUN to an
iSCSI target and expose the target. The CLI command storage expose is used in two
ways:
1.
2.
Create and Expose storage on a new target.

Expose storage on an existing target.
Create and Expose Storage on a New Target.

The CLI command storage expose -new creates a new iSCSI target, assigns a LUN and
then exposes the new target.
storage expose new
Switch
Definition
Type
Values/Remarks
-s
storage alias to create LU and target

for
mandatory
ASCII string (maximum 10 characters)
-ta
user-assigned target alias to create
mandatory
-new
expose storage on new target
mandatory
-tn
user-assigned world wide unique

identifier for the target
mandatory
-device
iSCSI Gateway alias to expose target

on
optional
-lun
lun
optional1
do not specify, no value allowed for

switch
iSCSI World Wide Unique Identifier
(ASCII string of max. 223 characters)
integer
Dependencies
3-4
mandatory 1 :
mandatory on new target
optional1:
optional on existing target
optional2:
optional on new target

Example:
Expose Stor_1 on new target Tar_1 with alias Tar_1, LUN 1 and WWUI
www.company.com/SAN/MusicBox
storage expose s Stor_1 new Tar_1 ta Tar_1 lu 1 tn
www.company.com/SAN/MusicBox
The command storage unexpose unexposes a disk.
storage unexpose
Switch
Definition
Type
Values/Remarks
-s

for
mandatory

characters)
Example:
Unexpose stor_1 from target Tar_1
storage unexpose sx Stor_1
Note:
The command storage unexpose does not delete the target. To remove the target, use the
command: iscsi target remove
Expose Storage on an Existing Target.

After creating a target and LUN, you can add additional LUNs to the target using the CLI
command storage expose (without the new switch).
storage expose
Example 1:
The target finance already exists. The WWUI of finance has already been assigned to the target. The
disk Vol1 is assigned LU0 and attached to the target finance. The exposing device is iSCSIGateway1.
storage expose device Vol1 ta finance lun 0
Example 2:
The target musicbox is created. The WWUI of musicbox is brocade.musicbox. The disk Concat1 is
automatically assigned LU0 and attached to the target musicbox on iSCSIGateway1.
storage expose -new device Concat1 ta musicbox -tn brocade.musicbox
device iSCSIGateway1
Viewing LUNs
You can view all created LUNs using the CLI command lu show.
lu show
Table 3-3:
Details of all LUNs
LUN
Tgt Alias
Storage
Oper Status
pilote
xxx
Active

3-5
LUN
Tgt Alias
Storage
Oper Status
spirou
yyy
Active
pilote
Mir1
Active
lucky
zzz
Active
Removing an iSCSI Target

The command storage unexposed does not remove targets. Use the CLI command iscsi
target remove to delete targets.
iscsi target remove
Switch
Definition
Type
Values/Remarks
-ta
iSCSI target alias to remove
mandatory

characters)
Example:
iscsi target remove ta musicbox
Show iSCSI Targets

Use the CLI command iscsi target show to view all created iSCSI targets.
iscsi target show
Table 3-4:
iSCSI Targets
Target Alias
Target Name
# of LUs
Exposed On:
finance
brocade.billing
Not exposed
musicbox
musicbox.brocade
iSCSIGateway1
iSCSI Target Details

Use the CLI command iscsi target details to view the details of an iSCSI target.
iscsi target details
3-6
Switch
Definition
Type
Values/Remarks
-ta
user-assigned alias for iSCSI target
mandatory

characters)
Table 3-5:
iSCSI Target Details
Target Alias:
nms153
Target Name:
eui.00081affff012345
CHAP User Name:
brocade
Target Alias:
nms153
Status:
OK
Number of Ports:
Port Name:
eui.00081affff012345,t,0
Number of LUs:
# Login Failures:
Last Failure Time:
10/12/04 15:30
Last Failure Type:
Authentication Error
Last Initiator Name:
Plony
Last Initiator IP:
1.2.3.4
Configuring Access Control List (ACL)

When a target is created, a default access control identity is automatically assigned to its
position 0. The default identity allows all hosts read-write access to the target and its
underlying disk(s).
Set ACL Parameters

If you want to specify other access rights, you must change the general read-write access.
Use the CLI command acl set to modify a targets access rights and identity position.
If you add or modify identities on a target after its disks have been exposed, the access rights
will take effect only at the next login for each iSCSI initiator. Therefore, it is recommended
to modify the default access rights for a target first before creating new identities to insure
that it will not inadvertently be exposed to all iSCSI initiators in the beginning.
acl set
Switch
Definition
Type
Values/Remarks
-id
identity alias
mandatory

characters)
-ta
iSCSI target alias
mandatory

characters)
-acc
access rights to the target
optional
optional
-pos
access priority level (position)
rw, ro, na
Dependencies
optional 1: one of the optional switches is mandatory when changing

3-7
Example
The default access rights for the target finance are changed to not accessible meaning a non-specific
host is not allowed access to the target finance.
acl set ta finance id def_all acc na
Create Identity
Note:
If you are working with an iSNS server, all hosts are able to see the target but only those hosts
with access rights are able to connect to the target.
If you want to limit host, meaning iSCSI initiator, access to targets, you must create an
identity that is more discriminate than the default identity. Use the CLI command acl
identity create to name and describe an identity.
When creating identities, keep in mind that:
z
Each identity can contain one or more iSCSI initiators.
Each identity can be assigned one or both login authentication methods.
Each identity can be attached to more than one target.
Each target is first automatically coupled to a default read-write un-authenticated access

identity.
Each target can have more than one identity.
acl identity create

Switch
Definition
Type
Values/Remarks
-alias
identity alias
mandatory

characters)
-info
identity information
optional
ASCII string
Example
An identity, accounting, is created for those accountants allowed read-write access to the
accounting records.
acl identity create alias accounting info accountants allowed readwrite access to accounting records
Show Access Rights

After creating a target, use the CLI command acl show to view the targets automatically
connected default identity.
acl show
Table 3-6: Default Identity Target Access
3-8
Target
Position
Identity
Access
finance
DEF_ALL
read-write

Target
Position
Identity
Access
musicbox
DEF_ALL
not accessible
musicbox
musicdept
read-write
Add Initiators to an Identity

After creating an identity, you can begin adding hosts by their iSCSI initiator WWUIs to the
identity. The identity is a group of iSCSI initiators. It is not enough for an authorized host to
request access to a target. The host must be requesting access from the correct iSCSI
initiator. Use the CLI command acl identity add name to add iSCSI initiators to an
identity. Repeat this command to add all of the desired host initiators to the identity.
acl identity add name
Switch
Definition
Type
Values/Remarks
-id
identity alias
mandatory

characters)
-name
WWUI of initiator
mandatory
iSCSI World Wide Unique

Identifier (ASCII string of max. 223
characters)
Example
The host, steven, is added to the identity accounting according to his iSCSI initiator wwui, iqn.199105.microsoft:steven.brocade.
acl identity add name id accounting name iqn. 1991-05.microsoft:
steven.brocade
If a host has more than one iSCSI initiator installed, both initiators can be included in the identity.
acl identity add name id accounting name iqn.com.brocade.steven
Assigning Identity Credentials

Note:
If you are working in an iSCSI Gateway cluster, the identity authentication method(s) must be
added on both iSCSI Gateways.
You can require initiator authentication before allowing access to a target and its underlying
disk(s). The iSCSI Gateway supports CHAP and SRP authentication methods. Microsoft
initiators support CHAP. Use the CLI command acl identity add chap/srp to assign
a login authentication method(s) to initiators in an identity.
An assigned authentication method encrypts the host login name and password. The host
login and password do not have to relate to the iSCSI initiator WWUI. They can be any
selected character strings.
Note:
In the event of a failover, if each identity does not require authentication on both iSCSI Gateways,
each attached identity will have free access to the targets underlying disks.
3-9
Add CHAP
If you are working with a Microsoft initiator and configuring target authentication, note that
the iSCSI Gateway exchanges the final character in the password with a zero. Therefore, do
not configure initiator passwords with a zero as the final character. CHAP passwords must
be between twelve to sixteen characters in length.
acl identity add chap
Switch
Definition
Type
Values/Remarks
-id
identity alias
mandatory

characters)
-radius
RADIUS server
optional 1
flag
-un
host name
optional
-pw
host password
optional1
ASCII string
ASCII string [6-20 characters]
Dependencies
optional1:
when using -radius:
-id, -radius are mandatory, -un is optional, -pw is not an option
when not using -radius: -id, -un, -pw are mandatory, -radius is not an option
Example
The user name, steven, with user password, isatwork, is assigned CHAP credential verification in the
identity accounting.
acl identity add chap id accounting us steven pw isatwork
If a host has more than one iSCSI initiator installed, both initiators can be included in the identity
and given authentication methods. The user name and password do not need to be the same for
different initiators on the same host.
acl identity add chap id accounting us steven pw ilovecookies
Identity Details
After assigning iSCSI initiators and assigning credentials to an identity, use the CLI command
acl identity details to view the list of iSCSI initiators.
acl identity details
Switch
Definition
Type
Values/Remarks
-id
identity alias
mandatory

characters)
acl identity details id accounting

Table 3-7:
Description:
3-10
Identity Details
Accounts allowed read-write access to
accounting records
Description:
Accounts allowed read-write access to

accounting records
Initiators:
iqn.1991-05.microsoft:steven.
brocade
iqn.com.brocade.steven
Credentials:
CHAP
Add RADIUS Server

Note:
If you are working in an iSCSI Gateway cluster, the RADIUS server must be configured on both
iSCSI Gateways.
When CHAP user names and passwords are configured on the network in a remote RADIUS
server, use the CLI command acl identity add chap to direct a CHAP challenge to
the RADIUS server and eliminate the need to configure all user name + password pairs on
the iSCSI Gateway. This decreases configuration time and increase overall network security.
Use the CLI command ip radius add to add a RADIUS server address to the iSCSI
Gateway RADIUS client.
ip radius add
Switch
Definition
Type
Values/Remarks
-ip
IP address of RADIUS server
mandatory
IP address
up to 2 RADIUS servers
-k
shared secret between iSCSI

Gateway and RADIUS server
mandatory

characters)
min 16 characters
-p
UDP port number to send requests

to RADIUS server
optional

1812
Example:
The iSCSI Gateway is configured to relay CHAP challenges to the identity, accounting, from the user,
steven, to the RADIUS server. The iSCSI Gateway is configured to communicate with the RADIUS
server through port 1812 to IP address 212.199.43.2. The iSCSI Gateway RADIUS key is
DataTurnsMeOn.
The user password is not configured on the iSCSI Gateway. The RADIUS server authenticates the
user password and sends the results back to the iSCSI Gateway.
acl identity add chap id accounting user steven radius
ip radius add ip 212.199.43.2 p 1812 k DataTurnsMeOn
Show Configured RADIUS Servers

Use the CLI command ip radius show to view all configured RADIUS server IP
addresses.

3-11
ip radius show
Table 3-8: Configured RADIUS IP Addresses
Address
Port
212.199.43.2
1812
212.199.56.134
1812
Removing a RADIUS Server

Use the CLI command ip radius remove to remove a RADIUS server from the iSCSI
Gateway.
ip radius remove
Switch
Definition
Type
Values/Remarks
-ip
mandatory
IP address
-p

to RADIUS server
optional
Connect an Identity and Target

Note:
If you are working in an iSCSI Gateway cluster, each Identity must be connected to the target(s)
on both iSCSI Gateways.
Once created, an identity must be connected to a target to provide it with access control.
An identity specifies which access rights the iSCSI initiators within the Identity have to the
target.
When an identity is connected to a target, it is also given a position. The position of the
identity determines its place in the iSCSI Gateway access rights evaluation. An identity with
the position 0 (default identity) is the last identity evaluated when an initiator tries to access
a disk. If the initiator meets the profile of the identity, it is granted that identity s access
rights. If not, the iSCSI Gateway continues to position 1. The iSCSI Gateway does not scan
all identities to determine which most specifically fits the host. Therefore, identities must be
positioned in decreasing specificity to function correctly.
Note:
The iSCSI Gateway scans for the first fit and not the best fit.
An identity can be connected to more than one target to provide the same conditions for
each target. Use the CLI command acl add to connect an identity to a target.
Note:
All CLI names and aliases are case sensitive
acl add
3-12

Switch
Definition
Type
Values/Remarks
-id
identity alias
mandatory

characters)
-ta
iSCSI target alias
mandatory

characters)
-acc
optional
rw, ro, na
-pos
access priority level (position) *
optional
integer 1-2147482646
* the next free position
Example
The identity, accounting, is connected to the target finance. Accounting is the second identity
scanned for an initiator match. Any initiator in the accounting identity is given read-only access.
Later, an administrator identity can be created with read-write access and placed in position 0.
acl add ta finance id accounting acc rw pos 1
Discovering iSCSI Targets

iSCSI target discovery is performed across the IP-SAN by the iSCSI initiator located on the
server. The iSCSI Gateway supports three methods for reporting iSCSI targets in the IP-SAN
to iSCSI initiators:
z
iSCSI Discovery Session no configuration is necessary
SLP no configuration is necessary
iSNS you must add the iSNS server to the iSCSI Gateway iSNS client
Add iSNS client

Use the CLI command ip isns add to add an iSCSI server to the iSCSI Gateways iSNS
client.
ip isns add
Switch
Definition
Type
Values/Remarks
-ip
IP address of isns server
mandatory
IP address
up to 2 isns servers
Example:
Add iSNS server 212.199.43.1 to iSCSI Gateway iSNS client.
ip isns add ip 212.199.43.1
Show iSNS client

Use the CLI command ip isns show to view all added iSCSI server addresses.

3-13
ip isns show
Remove iSNS Client

Use the CLI command ip isns remove to remove an iSNS server from the iSCSI Gateway iSNS
client.
ip isns remove
Switch
Definition
Type
Values/Remarks
-ip
mandatory
IP address
Example:
Remove iSNS server 212.199.43.1 from the iSCSI Gateway iSNS client.
ip isns remove ip 212.199.43.1
3-14

Chapter 4
Monitoring & Statistics
The iSCSI Gateway enables RFC standards compliant health, interface and session
monitoring of all iSCSI Gateway interfaces.
For specific details on a monitoring parameter, consult the RFC standard 2863.
Health Monitoring
You can monitor the health of the iSCSI Gateway hardware for fan malfunctions that could
lead to overheating as well as power supply malfunctions both of which can nullify high
availability and lead to iSCSI Gateway failover.
system hardware show

This command shows all hardware interface connection statistics.
Table 4-1:
System Hardware
Max No. of Power Supplies:
PS Status:
1 working
Max No. of Fans:
Fan Status:
2 working
CPU Temperature (C):
59
CPU Temperature Threshold (C):
Warning 90; Faulty 100
CPU Temperature Status:
OK
On-board Temperature (C):
33
On-board Temperature Threshold (C):
Warning 60; Faulty 70
On-board Temperature Status
OK
You can change the default temperature scale to Fahrenheit using the CLI command
device set temperature_units f.
Interface Statistics
You can monitor interface traffic and errors for each iSCSI Gateway interface to aid in system
diagnostics. The interface monitoring has two components: the interface configuration and
the counters.

4-1
interface statistics show

This command shows all interface connection statistics to provide an overview.
Table 4-2:
Interface Statistics Overview
Alias
In Octets
Out Octets
In Errors
cons
mgmt
42040
129772
fc3
647295438498
390488847341
fc4
eth1
535709973551
857473339209
eth2
eth3
interface statistics details

This command shows all interface connection counters.
4-2
Switch
Definition
Type
Values/Remarks
-if
interface alias
mandatory

characters)
Table 4-3:
Interface Statistics Details
Alias:
eth1
Discontinuity:
2 days 1h:37m:9 sec
In/Out Octets:
535709973551
In/Out Unicast Pkts:
857473339209
In/Out Discards:
0/0
In/Out Errors:
0/0
In/Out Multicast Pkts:
96251/0
In/Out Broadcast Pkts:
403010/0

TCP/IP Statistics
ip statistics ip show
This command shows all IP counters.
Table 4-4:
IP Statistics
In Receives:
161853270
In Header Errors:
683
In Address Errors:
65177
In Unknown Protos:
In Discards:
In Delivers:
161200809
Out Requests:
162958810
Out Discards:
Out No Routes:
3596
Reasm. Fragments Received:
Reasm. Fragments OK:
Reasm. Failures:
Fragments OK:
Failed to Fragment:
Number Generated Frag.:
Routing Discards:
ip statistics icmp show

This command shows all ICMP counters.
Table 4-5:
ICMP Statistics
Messages Received / Sent:
13/4
Errors In / Out:
0/0
Dest. Unreach In / Out:
0/0

4-3
Messages Received / Sent:
13/4
Time Excds In / Out:
0/0
Param. Problems In / Out:
0/0
Src Quench In / Out:
0/0
Redirect In / Out:
0/0
Echos In / Out:
4/0
Echo Reply In / Out:
0/4
Timestamps Received / Sent:
0/0
Timestamps Reply Received / Sent:
0/0
Address Masks Received / Sent:
0/0
Address Masks Replies Received / Sent:
0/0
tcp connection show

This command shows all TCP connections.
tcp connection show
Table 4-6: TCP Connections
Local Address
Local Port
Remote
Address
Remote Port
State
0.0.0.0
23
0.0.0.0
listen
0.0.0.0
427
0.0.0.0
listen
10.0.0.110
23
10.0.0.26
4943
established
11.11.11.110
3260
0.0.0.0
listen
11.11.11.110
3260
11.11.11.26
2176
established
22.22.22.110
3260
0.0.0.0
listen
tcp statistics show

This command shows all TCP connection counters.
tcp statistics show
Table 4-7:
4-4
TCP Statistics
#Current Connections:
Active Open:

#Current Connections:
Passive Open:
Attempt Failures:
Reset Establishments:
Segments Received:
16078975
Segments Sent:
162950234
Segments Retransmitted:
3794
Errors Received:
50
Reset Sent:
udp listeners show

This command shows all UDP listeners.
udp listeners show
Local Address
Local Port
0.0.0.0
427
0.0.0.0
17185
0.0.0.0
56789
0.0.0.0
65532
10.0.0.110
161
127.0.0.1
65538
udp statistics show

This command shows all UDP connection counters.
udp statistics show
Table 4-8: UDP Statistics
Datagrams Received
408815
Wrong Port Datagrams
Errors Datagrams
18681
Datagrams Sent
78999

4-5
iSCSI Session Statistics

You can monitor iSCSI sessions including:
z
All iSCSI sessions in and out of the iSCSI Gateway.
All iSCSI sessions for a specific initiator or target.
Specific iSCSI session details.
iscsi session show

This command shows all iSCSI sessions, both in and out of the iSCSI Gateway.
iscsi session show
Table 4-9: iSCSI Sessions
ID
Initiator
ISID
Target
TSIH
1.1.1
iqn.199*~
400001370000
nms151
b701
1.2.1
iqn.199*~
400001370000
nms151
7701
1.3.1
iqn.199*~
400001370000
nms154
3b01
1.4.1
iqn.199*~
400001370000
nms155
5701
iscsi session details

This command details all statistics, either basic or advanced, of a specific iSCSI session.
Switch
Definition
Type
Values/Remarks
-id
iSCSI session ID
mandatory
ID
-adv
advanced iSCSI session details
optional

for switch
Table 4-10: Basic iSCSI Session Details
4-6
Initiator Alias:
nms153
Initiator Name:
iqn.1991-05.com.microsoft:QA-2.qa.test.com
ISID:
400001370000
Target Alias:
nms154dr
Target Name:
nms154dr
TSIH:
b701
Type:
Normal
Initiator Alias:
nms153
Authentication
DEF_ALL
Connection ID:
State:
Full (2)
Local Address:
11.11.11.110
Local Port:
3260
Remote Address:
11.11.11.26
Remote Portal:
2178
Table 4-11: Advanced iSCSI Session Details

Initial R2T
False
Immediate Data
True
Max Outstanding R2T
First Burst Size
65536
Max Burst Size
262114
Number of Connections
Sequence In Order
True
PDU In Order
True
Error Recovery Level
iscsi session statistics

This command lists the statistics of all iSCSI sessions in and out of the iSCSI Gateway.
Switch
Definition
Type
Values/Remarks
-ta
target alias for statistics
mandatory

characters)
-type
initiator type
mandatory
crp, txrx, error
Example:
List the statistics of all iSCSI sessions for the target finance to initiator iqn.199105.microsoft:steven.brocade type crp.
iscsi session statistics ta finance -initiator iqn.199105.microsoft:steven.brocade type crp

4-7
Table 4-12: CRP iSCSI Session Details

ID
Initiator
ISID
TSIH
nms153
400001370000 b701
Cmd PDUs
Rsp PDUs
36941394
36938928
Table 4-13: TXRX iSCSI Session Details

ID
Initiator
ISID
TSID
Tx Octets
Rx Octets
nms153
4000013700
00
b701
2513649168
227187
Table 4-14: Error iSCSI Session Details

ID
Initiator
ISID
TSIH
Digests Err
Timeout Err
nms153
4000013700
00
b701
iSCSI Connection Statistics

You can monitor iSCSI connections including:
z
All iSCSI connections in and out of the iSCSI Gateway.
All iSCSI connections for a specific initiator or target.
Specific iSCSI connection details.
iscsi session connection show

This command lists all connections in the iSCSI Gateway.
Table 4-15: iSCSI Session Connections
ID
Cid
1.1.1
State
Local Address
Port
Remote Address
Port
11.11.11.110
3260
11.11.11.26
2178
1.2.1
11.11.11.110
3260
11.11.11.26
2176
1.3.1
11.11.11.110
3260
11.11.11.26
2177
iscsi session connection details

This command lists all connections of a specific session.
4-8


Switch
Definition
Type
Values/Remarks
-id
iSCSI connection ID
mandatory
X.X.X where X.X.X is the value

shown in iscsi session
connection show
-adv
advanced parameters
optional

for switch
Table 4-16: iSCSI Session Connection Details

Connection ID:
State:
Full
Local Address:
11.11.11.110
Local Port:
3260
Remote Address:
11.11.11.26
Remote Port:
2178
Table 4-17: Advanced iSCSI Session Connection Details

RX Data Segment Length:
65536
TX Data Segment Length
65536
Header Integrity
Data Integrity
SCSI Port Statistics

You can monitor both the SCSI/iSCSI target and initiator ports.
scsi target port statistics

This command lists SCSI/iSCSI target port statistics.
Table 4-18: SCSI/iSCSI Initiator Port Statistics
Target
Port
Trans
In Commands
Read MB
Written MB
nms154dr
42929
iSCSI
230845
244372
mns155dr
42929
iSCSI
3863197
2498873

4-9
Remote iSCSI Initiator Statistics

You can monitor remote iSCSI initiators including:
z
All initiators connected to the iSCSI Gateway.
All initiators connections to a specific target.
Statistics of all connected initiators.
The CLI has a twenty-character display limit for initiator WWUIs. Use iSCSI Gateway
Manager to view a WWUI longer than twenty characters.
iscsi rinitiator show

This command shows all remote iSCSI initiators connected to the iSCSI Gateway.
Table 4-19: All Connected Remote iSCSI Initiators
Target Alias
Initiator Alias
Initiator Name
nms154dr
iqn.1991-05.com.micr
nms155dr
iscsi rinitiator list

This command lists the statistics of all remote iSCSI initiators connected to the iSCSI
Gateway.
Switch
Definition
Type
Values/Remarks
-ta
target alias
mandatory

characters)
Table 4-20: Connected Remote iSCSI Initiators on a Target
4-10
Name
Alias
ISID
iqn.1991*~
iqn.1991*~
40001370000

iscsi rinitiator statistics show

This command lists the statistics of all iSCSI remote initiators connected to the iSCSI
Gateway.
Target
Initiator
Attached Times
Out Commands
Written MB
Read MB
ta1
iqn.199*~
4848612
7382819
ta2
iqn.199*~
3914422
8773472
ta3
iqn.199*~
146699
399844
Logical Unit (LU) Statistics

This command shows all statistics for configured LUNs on the iSCSI Gateway.
lu statistics show
Table 4-21: LU Statistics
LUN
Target
Commands
Read (MB)
Written (MB)
In Resets
OutTask
SetFull
ta1
36938947
2308445
77
ta1
32638777
407972
ta2
199543
203571
22314
222
ta2
3209004
1661175
415591

4-11
4-12

Chapter 5
Command Line Interface Reference
The CLI is available via:
z
Console port with a direct RS232 connection.
1 Gbit Ethernet network port (Eth1) with a Telnet session.
The CLI is used to implement all iSCSI Gateway management functions, including switching
and security.
Note:
All CLI commands must be entered in lower case. Inputted data is case sensitive and can include
upper and lowercase letters.
The CLI command prompt is >.
All CLI commands in this chapter are listed first with the basic command followed by a table
of command switches; their explanations and status (mandatory or optional). Default
values are listed as bold and underlined.
The CLI supports the use of the following hot keys for the listed functions:
Table 5-1:
Hot Keys
Command
Description
list of commands with a short description of each
return to main menu
esc
abort current command
display last command to view command history
tab
complete a command to the point of ambiguity

5-1
iSCSI Gateway CLI Commands

These commands enable you to configure and view the basic iSCSI Gateway parameters
needed to operate the iSCSI Gateway.
-Aacl add
Use the command acl add to link an identity to a target.
acl add
Switch
Definition
Type
Values/Remarks
-id
identity alias
mandatory

characters)
-ta
iSCSI target alias
mandatory

characters)
-acc
optional
rw, ro, na
-pos
access priority level (position) *
optional
integer 1-2147482646
* the next free position
acl details
This command shows the access control for a target.
acl details
Switch
Definition
Type
Values/Remarks
-ta
iSCSI target alias
mandatory

characters)
acl remove
This command removes an identity from the access control list of a specific target.
acl rem
5-2
Switch
Definition
Type
Values/Remarks
-id
identity alias
mandatory

characters)
-ta
iSCSI target alias
mandatory

characters)

acl set
Use the command acl set to modify a targets access rights and identity position.
acl set
Switch
Definition
Type
Values/Remarks
-id
identity alias
mandatory

characters)
-ta
iSCSI target alias
mandatory

characters)
-acc
optional
-pos
access priority level (position)
optional 1
rw, ro, na
Dependencies
optional 1: one of the optional switches is mandatory when changing
acl show
This command shows all target access per identity for the iSCSI Gateway.
acl show

This command adds CHAP authentication credentials to an identity.
Switch
Definition
Type
Values/Remarks
-id
identity alias
mandatory

characters)
-radius
RADIUS server
optional
optional
optional
-un
-pw
host name
host password
flag
ASCII string
Dependencies
optional1:
when using -radius:
-id, -radius are mandatory, -un is optional, -pw is not an option
when not using -radius: -id, -un, -pw are mandatory, -radius is not an option

This command adds an iSCSI initiator to an identity.

5-3

Switch
Definition
Type
Values/Remarks
-id
identity alias
mandatory

characters)
-name
WWUI of initiator
mandatory

characters)
acl identity add srp

This command adds SRP authentication credentials to an identity.
acl identity add srp
Switch
Definition
Type
Values/Remarks
-id
identity alias
mandatory

characters)
-pw
host password
mandatory
-un
host name
mandatory

characters)
acl identity create

This command creates an identity.
acl identity create
Switch
Definition
Type
Values/Remarks
-alias
identity alias
mandatory

characters)
-info
optional
ASCII string
acl identity delete

This command deletes an identity from the iSCSI Gateway.
acl identity delete
Switch
Definition
Type
Values/Remarks
-id
identity alias
mandatory

characters)

This command lists the details of a specific identity.
5-4


Switch
Definition
Type
Values/Remarks
-id
identity alias
mandatory

characters)
acl identity remove chap

This command removes a CHAP authentication credential from an identity.
acl identity remove chap
Switch
Definition
Type
Values/Remarks
-id
identity alias
mandatory

characters)
-un
host name
optional

characters)
Dependencies
optional1: mandatory if not using RADIUS
acl identity remove name

This command removes an iSCSI initiator from an identity.
acl identity remove name
Switch
Definition
Type
Values/Remarks
-id
identity alias
mandatory

characters)
-name
host name
mandatory

characters)
acl identity remove srp

This command removes an SRP authentication credential from an identity.
acl identity remove srp
Switch
Definition
Type
Values/Remarks
-id
identity alias
mandatory

characters)
-un
host name
mandatory

characters)

5-5
acl identity set

This command allows changes to an identity.
acl identity set
Switch
Definition
Type
Values/Remarks
-id
identity alias
mandatory

characters)
-info
optional
ASCII string
-na
new alias for identity
optional

characters)
-radius
radius authentication used
optional
flag
acl identity show

This command lists the identities in a iSCSI Gateway.
acl identity show
admin add
This command adds a user name to the list of valid user login names for the iSCSI Gateway.
A user name can be from 1 to 19 characters long, including spaces. A password can be from
6 to 11 characters long, including spaces.
admin add
Switch
Definition
Type
Values/Remarks
-pw
user password
mandatory
ASCII string
6-11 characters
-un
user name
mandatory
ASCII string
119 characters
admin password
This interactive command enables a user to change their login password for their user name
on the iSCSI Gateway. You can only change the password of the current active user.
admin password
admin remove
This command deletes a user name from the list of valid user login names for the iSCSI
Gateway. Any user name, except the logged in user name, can be deleted.
5-6

admin remove
Switch
Definition
Type
Values/Remarks
-un
user name
mandatory
ASCII string
119 characters
admin show
This command shows all valid user login names for the iSCSI Gateway.
admin show
-Ccluster failover enable

This command enables the cluster failover functionality. This command must be executed
on both iSCSI Gateways in the cluster.
cluster failover enable

This command disables the cluster failover functionality. This command must be executed
on both iSCSI Gateways in the cluster.
cluster failover force

This command forces the switch to take over.
cluster failover force
cluster set
This command allows you to modify a clusters parameters.
cluster set
Switch
Definition
Type
Values/Remarks
-fint
failover interval
time when suspicious interval is
exceeded
optional
-kai
keep alive interval

time between keep alive signals
from neighbors
optional
-sint
suspicious interval
time from when a signal was
expected but not received
optional1

5-7
Dependencies
optional1:
at least one of the switches is mandatory
cluster show
This command shows the keep alive parameters of a cluster.
cluster show
cluster synchronize lusn

This command allows you to synchronize the serial number of the logical units in case the
master was configured before the neighbor.
cluster synchronize lusn
-Ddebug
This command is used for advanced troubleshooting operations and requires a password
from Technical Support.
Note:
Do not use this command unless instructed to do so by technical support.
debug
device advance set

This command redefines the specified advanced parameter of the iSCSI Gateway.
device advance set
Switch
Definition
Type
Values/Remarks
-param
the exact name of parameter in

config file
mandatory
ASCII string
-val
new value to write to config file
mandatory
ASCII string
device advance show

This command shows the specified advanced parameter of the iSCSI Gateway.
device show
5-8
Switch
Definition
Type
Values/Remarks
-param
the exact name of parameter in

config file
mandatory
ASCII string

device set
Use the CLI command device set to add or change management parameters. This
command will not appear in the CLI menu until the iSCSI Gateway is initialized.
device set
Switch
Definition
Type
Values/Remarks
-c

system malfunction
optional
-d
local date
optional
dd/mm/yyyy
0, 1*
different ID
eth1: (default for iSCSI Gateways)
-id
optional
-if
optional
-im
optional1
ASCII string
IP network mask
255.255.255.0
-ip
management port IP address
optional1
-loc
location of the contact person
optional
ASCII string
-n
iSCSI Gateway name
optional1
ASCII string
-p
port through which all SNMP

communications will flow
optional
read community
optional
y (yes)
n (no)
hh:mm
-rcom
IP address

161
characters)
public
-rld
optional
-t
local time
optional
-telnet
telnet port for iSCSI Gateway

communications
optional1
-temperature_units
temperature display scale
optional
c(elcius), f(ahrenheit)
optional

characters)
-wcom
write community
23
private
Dependencies

5-9
-Eexit
This command closes the Telnet/SSH session. It is not available when connected via RS-232
connection.
exit
-Ffc interface show

This command shows each FC port and its World Wide Port Name (WWPN).
Note:
This command is available only when an FC interface is present.
fc interface show
fc node show
This command shows the iSCSI Gateway World Wide Node Name (WWNN).
Note:
fc node show
fc set
This command allows you to set the speed of the FC communication.
Note:
fc set
Switch
Definition
Type
Values/Remarks
-if
storage port
mandatory

characters)
-cm
connection mode
optional
fab (fabric),
pul (publicloop),
prl (privateloop)
-sp
FC communication speed
optional
0: auto
1: 1 Gb
2: 2 Gb
5-10

ft download
This command downloads a iSCSI Gateway database configuration file from the local TFTP
server.
ft download
Switch
Definition
Type
Values/Remarks
-fn
mandatory
ASCII string
-ip
IP address of telnet station where

TFTP application sits
mandatory
IP address
-ft
optional
db: data base
ft export problem
This command exports three files: configuration file, last good database and the corrupted
database file for examination.
You can only export after the iSCSI Gateway reboots in safe mode.
ft export problem
Switch
Definition
Type
Values/Remarks
-ip
server IP address
mandatory
IP address
-fd
directory to export files to
optional
ASCII string must end with \ or /
ft show
This command displays the configuration for file transfer.
ft show
ft update
This command uploads firmware to the iSCSI Gateway.
ft update
Switch
Definition
Type
Values/Remarks
-fn
file directory and filename
mandatory
ASCII string
-ip
TFTP server IP address
mandatory
IP address

5-11
ft upload
This command uploads a iSCSI Gateway database file from the iSCSI Gateway to the local
TFTP server.
ft upload
Switch
Definition
Type
Values/Remarks
-fn
mandatory
ASCII string
-ip
server IP address
mandatory
IP address
-ft
optional
db : data base
log : log file
-Iinfo
This command displays the current iSCSI Gateway configuration, including whom to contact
in the event of technical difficulties.
info
interface details
This command lists the interface details of a specified interface.
interface details
Switch
Definition
Type
Values/Remarks
-if
alias of interface to show
mandatory

characters)
interface set
This command renames the specified interface alias.
interface set
5-12
Switch
Definition
Type
Values/Remarks
-if
current interface alias
mandatory

characters)
-na
new alias
mandatory

characters)

interface show
This command shows the iSCSI Gateway interfaces (ports) and their parameters.
interface show

This command shows all interface connection statistics.

This command shows all interface connection counters.
Switch
Definition
Type
Values/Remarks
-if
interface alias
mandatory

characters)
ip config remove
This command removes an IP address from an interface.
ip config remove
Switch
Definition
Type
Values/Remarks
-ip
IP address to remove from the

mandatory
IP address
ip config set
This command configures a new IP address or edits an existing one.
ip config set
Switch
Definition
Type
Values/Remarks
-ip
IP address assigned to interface

port
mandatory
IP address
-act
activity status
if IP address is active to expose
volumes. use inactive status to
allow failover.
optional
1 (active),
optional
-if

2 (inactive)
eth1, eth2 (for new configuration)
5-13
Switch
Definition
Type
Values/Remarks
-im
IP network mask
optional
IP network mask
255.255.255.0
ip config show
This command displays the iSCSI Gateway IP configurations.
ip config show
ip isns add
This command adds an iSNS servers IP address to the iSCSI Gateway iSNS client.
ip isns add
Switch
Definition
Type
Values/Remarks
-ip
mandatory
IP address
up to 2 isns servers
ip isns remove
This command removes an iSNS servers IP address from the iSCSI Gateway iSNS client.
ip isns remove
Switch
Definition
Type
Values/Remarks
-ip
mandatory
IP address
ip isns show
This command shows all iSNS servers configured on the iSCSI Gateway.
ip isns show
ip radius add
This command adds a RADIUS server IP address to the iSCSI Gateway RADIUS client.
ip radius add
Switch
Definition
Type
Values/Remarks
-ip
mandatory
IP address
up to 2 RADIUS servers
-k
5-14

mandatory

characters)
min 16 characters

Switch
Definition
Type
Values/Remarks
-p

to RADIUS server
optional

1812
ip radius remove
This command removes a RADIUS server IP address from the iSCSI Gateway RADIUS client.
ip radius remove
Switch
Definition
Type
Values/Remarks
-ip
mandatory
IP address
-p

to RADIUS server
optional
ip radius set
This command allows changes to a RADIUS server configuration on the iSCSI Gateway
RADIUS client.
ip radius set
Switch
Definition
Type
-ip
mandatory
-k
-p

to RADIUS server
Values/Remarks
optional
optional
IP address
ASCII string
minimum 16 characters
1812
Dependencies
ip radius show
This command shows all IP addresses for RADIUS servers configured on the iSCSI Gateway
RADIUS client.
ip route add
This command adds an IP route to a network port.
ip route add
Switch
Definition
Type
Values/Remarks
-dip
destination IP
mandatory
IP address

5-15
Switch
Definition
Type
Values/Remarks
-gw
gateway router IP address
mandatory
IP address
-if
interface alias
mandatory

characters)
-dmask
optional
255.255.255.255
Dependencies
optional1:
mandatory when -dip = subnet IP (network route)
ip route default
This command sets a default IP route to a network port.
ip route default
Switch
Definition
Type
Values/Remarks
-gw
IP address of the default gateway

router
mandatory
IP address
-if
interface alias
optional
eth1
ip route remove
This command removes an IP route from a network port.
ip route remove
Switch
Definition
Type
Values/Remarks
-dip
host destination IP address
mandatory
IP address
-dmask
optional
IP network mask
255.555.255.255
-gw
gateway to host station IP address
optional
IP address
ip route show
This command shows all IP routes on a iSCSI Gateway.
ip route show

This command shows all ICMP counters.
5-16

This command shows all IP counters.
iscsi portal create

This command creates an iSCSI portal on a 1 Gb (network) port.
iscsi portal create
Switch
Definition
Type
Values/Remarks
-ip
mandatory
IP address
-p
TCP port for iSCSI communication
optional

3260
iscsi portal remove

This command removes an iSCSI portal on a 1 Gb (network) port.
iscsi portal remove
Switch
Definition
Type
Values/Remarks
-ip
mandatory
IP address
-p
TCP port for iSCSI communication
mandatory
iscsi portal show

This command shows the portals defined for iSCSI on the iSCSI Gateway with which you are
communicating.
iscsi portal show

This command lists all remote initiators connected to a specific target.
Switch
Definition
Type
Values/Remarks
-ta
target alias
mandatory

characters)

5-17

This command shows all remote initiators.

This command shows the statistics for remote initiators.

This command shows all details of a specific connection.
Switch
Definition
Type
Values/Remarks
-id
iSCSI connection ID
mandatory
X.X.X where X.X.X is the value

shown in iscsi session
connection show
-adv
advanced parameters
optional

for switch

This command shows all connections for all iSCSI sessions.

This command lists all details of a specific session.
Switch
Definition
Type
Values/Remarks
-id
iSCSI session ID
mandatory
ID
-adv
advanced iSCSI session details
optional

for switch
iscsi session show

This command shows all iSCSI sessions.
iscsi session show

This command lists the statistics for a specific inbound session for a specified local target.
5-18


Switch
Definition
Type
Values/Remarks
-ta
target alias for statistics
mandatory

characters)
-type
initiator type
mandatory
crp, txrx, error
iscsi target alias

This command allows you to view all target aliases in full. The command iSCSI target show
has a ten-character display limit so iSCSI target aliases may be ambiguous in the iSCSI target
show table.
iscsi target alias
iscsi target create

This command creates an iSCSI target without creating LU0, attaching volumes or exposing
the target. Targets can be created in advance and only later have LUNs created and
exposed.
iscsi target create
Switch
Definition
Type
Values/Remarks
-ta
mandatory

characters)
tn
user-assigned world-wide unique

mandatory

characters)
device
alias of iSCSI Gateway to expose

target on
optional
ASCII string

This command shows the details of the iSCSI target.
Switch
Definition
Type
Values/Remarks
-ta
mandatory

characters)
iscsi target remove

This command removes an iSCSI target.

5-19
iscsi target remove

Switch
Definition
Type
Values/Remarks
-ta
iSCSI target alias to remove
mandatory

characters)
iscsi target set

This command renames a target alias.
iscsi target set
Switch
Definition
Type
Values/Remarks
-ta
alias of target to rename
mandatory

characters)
device
alias of iSCSI Gateway to expose

target on
optional
ASCII string
-na
new alias for target
optional

characters)
-chappw
user password for CHAP

authentication (for dual
authentication)
optional
ASCII string
-chapun
user name for CHAP authentication

(for dual authentication)
optional
ASCII string
Dependencies
optional1: mandatory with CHAP username
optional2: mandatory with CHAP password
iscsi target show

This command shows all created targets.
iscsi target show
-Llu details
This command shows the details of an LU in the database.
lu details
5-20
Switch
Definition
Type
Values/Remarks
-ta
target alias of LU
mandatory

characters)

Switch
Definition
Type
Values/Remarks
-lun
logical unit number
optional
lu remove
This command removes the LU from its target. The LU must be inactive before being
removed. This command is the opposite of storage expose.
lu remove
Switch
Definition
Type
Values/Remarks
-ta
target alias of LU
mandatory

characters)
-lun
logical unit number
optional
lu show
This command shows all LUNs defined in the database.
lu show
lu statistics show
This command shows all statistics for configured LUs on the iSCSI Gateway.
lu statistics show
-Nneighbor add
This command adds a neighbor to a cluster.
neighbor add
Switch
Definition
Type
Values/Remarks
-ip

neighbor
mandatory
IP address
-nb
mandatory

characters)
neighbor set
This command resets a neighbor IP address in a cluster.

5-21
neighbor set
Switch
Definition
Type
Values/Remarks
-ip

neighbor
mandatory
IP address
-nb
mandatory

characters)
neighbor show
This command lists the neighbor(s) in a cluster.
neighbor show
neighbor details
This command lists the details of a neighbor in a cluster.
neighbor details
Switch
Definition
Type
Values/Remarks
-nb
alias of neighbor in cluster
mandatory

characters)
neighbor remove
This command removes a iSCSI Gateway from a cluster.
neighbor remove
Switch
Definition
Type
Values/Remarks
-nb
mandatory

characters)
-Pping
This command pings any IP-connected device from the iSCSI Gateway port.
ping
5-22
Switch
Definition
Type
Values/Remarks
-ip
IP address to ping
mandatory
IP address
-if
interface alias that issues ICMP

requests
optional

characters)

-Sscsi target port statistics

This command shows statistics the SCSI target ports.
snmp manager add

This command adds a manager to the iSCSI Gateway.
snmp manager add
Switch
Definition
Type
Values/Remarks
-ip
manager IP address
mandatory
IP address
-p
receive traps through specific port
optional

162
-rcom
read community
optional

characters)
public
-trap
optional
y (send),
n (do not send)
-wcom
write community
optional

characters)
private
snmp manager remove

This command removes a manager from the iSCSI Gateway.
snmp manager remove
Switch
Definition
Type
Values/Remarks
-ip
manager IP address
mandatory
IP address
-p
receive traps through specified

port
mandatory

5-23
snmp manager set

This command modifies parameters of existing managers.
snmp manager set
Switch
Definition
Type
Values/Remarks
-ip
manager IP address
mandatory
IP address
-p
port to receive traps through
mandatory
-np
new port for receiving traps
optional1
-rcom
read community
optional1

characters)
public
-trap
optional1
y (send),
n (do not send)
-wcom
write community
optional1

characters)
private
Dependencies
snmp manager show

This command displays the managers of the iSCSI Gateway.
snmp manager show
storage alias
This command allows you to view all storage aliases in full. The command storage show
has a ten-character display limit so storage aliases may be ambiguous in the storage show
table.
storage alias
storage blink abort

This command stops a storage device from blinking.
storage blink abort
5-24
Switch
Definition
Type
Values/Remarks
-s
alias of device to blink
mandatory

characters)

storage blink start

This command allows you to blink a storage device to identify it.
storage blink start
Switch
Definition
Type
Values/Remarks
-s
device alias to blink
mandatory

characters)
-t
length of time to blink device
optional
1..3600 sec
0: forever
storage details
This command shows all storage devices attached to the iSCSI Gateway.
storage details
Switch
Definition
Type
Values/Remarks
-s
storage alias
mandatory

characters)
storage discovery
This command resets the Fiber Channel loop and reregisters all attached storage devices. In
most cases, the iSCSI Gateway automatically discovers new storage. Use this command after
adding or removing storage devices from the iSCSI Gateway topography if it is not
automatically discovered. Because this command resets the FC loop, it may cause a failure
of any I/O operations being executed when the command is invoked.
storage discovery
storage disk set

This command allows you to enable or disable write cache for a disk.
storage disk set
Switch
Definition
Type
Values/Remarks
-d
disk device
mandatory

characters)
-alloc
allocates storage to host
optional
yes,
no
-wce
write cache enabled
optional
true,
false
storage disk show

This command shows all storage disks connected to the iSCSI Gateway.
5-25
storage disk show
storage expose
This command exposes storage on a new or existing target.
storage expose
Switch
Definition
Type
Values/Remarks
-s

for
mandatory

characters)
-ta
user-assigned target alias to create
mandatory

characters)
-new
expose storage on new target
mandatory
-tn
user-assigned world wide unique

mandatory 1

Identifier (ASCII string of max.
223 characters)
-device
iSCSI Gateway alias to expose target

on
optional 2

characters)
-lun
lun
optional
do not specify, no value

allowed for switch
integer
Dependencies
mandatory 1 :
mandatory on new target
optional1:
optional on existing target
optional2:
optional on new target
storage remove
This command removes a storage device from the database only if the storage device state is
defined as StorageIsMissing.
storage remove
Switch
Definition
Type
Values/Remarks
-s
storage alias to remove
mandatory

characters)
storage set
This command allows you to edit storage device parameters.
5-26

storage set
Switch
Definition
Type
Values/Remarks
-s
mandatory

characters)
-info
optional
ASCII string
-na
optional

characters)
Dependencies
storage show
This command shows all storage devices connected to the iSCSI Gateway.
storage show
storage unexpose
This command unexposes a disk.
storage unexpose
Switch
Definition
Type
Values/Remarks
-s

for
mandatory

characters)
system boot
This command forces the iSCSI Gateway to boot in Safe Mode.
system boot
Switch
Definition
Type
Values/Remarks
-sm
safe mode level
mandatory
0: normal
1: last good configuration
2: default database
3: default factory system

This command shows all hardware interface connection statistics.

5-27
system reset
This command performs a remote soft reset of the iSCSI Gateway. All configuration
databases will be maintained on the iSCSI Gateway, including user names and passwords;
network port aliases; configured volumes and iSCSI targets.
system reset
system reset_default_factory
This command resets the iSCSI Gateway to factory default settings. It is available only when
connected via RS-232.
system reset_default_factory
-Ttcp connection show

This command shows all TCP connections.
tcp connection show
tcp statistics show

This command shows all TCP connection counters.
tcp statistics show
traceroute
This command tracks packet routes. Traceroute is similar to NetBSD however, the switches
are different.
traceroute
5-28
Switch
Definition
Type
Values/Remarks
-ip
destination IP address
mandatory
IP address
-firstttl
initial time-to-live used in the

first outgoing probe packet
optional
1..255
-icmp
use ICMP echo instead of UDP

datagrams
optional

for switch
-if
network interface alias for

optional
ASCII string
-length
probe datagram length in bytes

of outgoing packets
optional1
40
-maxttl
max number of hops used in

optional
1..30..255

Switch
Definition
Type
Values/Remarks
-nofrag
sets the "don't fragment" bit
optional

for switch
-noroute
bypass the normal routing tables

and send directly to a host on an
attached network
optional

for switch
-numprobe
number of probe packets sent for

each hop
optional
-port
base UDP port number used in

probes
optional
0..33434..65535
-probemtu
probe mtu sets the "don't

fragment" bit, and use the next
hop mtu each time we get the
"need fragmentation" error, thus
probing the path mtu
optional

for switch
-showttl
displays TTL value of the

returned packet
optional

for switch
-src
IP address of source address in

optional
used to force the source address to

something other than the IP
address of the interface the
probe packet is sent on
-timeout
time to wait for a response to

probe
optional
5 seconds
-gw
specifies loose source route

gateway
optional2
IP address
Dependencies
optional1 : cannot be set if using -probemtu
optional2 :
can use multiple -gws (up to 8)
-Uudp listeners show

This command shows all UDP listeners.
udp listeners show
udp statistics show

This command shows all UDP connection counters.
udp statistics show

5-29
5-30

Index
A
ACL
add ..................................................3-12, 5-2
details...................................................... 5-2
identity add CHAP ........................ 3-10, 5-3
identity add name ...........................3-9, 5-4
identity add SRP ..................................... 5-4
identity delete ........................................ 5-4
identity remove CHAP........................... 5-5
identity remove name............................ 5-5
identity remove SRP............................... 5-5
identity set .............................................. 5-6
remove.................................................... 5-2
set ..................................................... 3-7, 5-3
show......................................... 3-8, 5-3, 5-6
Add
ACL ..................................................3-12, 5-2
ACL identity CHAP ........................ 3-10, 5-3
ACL identity SRP..................................... 5-4
IP route......................... 2-11, 2-12, 5-15, 5-16
neighbor ...................................... 2-20, 5-21
RADIUS ..................................................5-14
SNMP manager..................................... 5-23
Add name
ACL identity .....................................3-9, 5-4
Admin
password..........................................2-7, 5-6
remove............................................. 2-7, 5-7
show........................................................ 5-7
Advance
device set ................................................ 5-8
device show............................................ 5-8
Alias
disk ........................................................ 5-24
iSCSI target.............................................5-19
storage .................................................. 5-24
Authentication
target ........................................................1-8
B
Blink
Index
storage abort ................................. 3-2, 5-24

storage start....................................3-2, 5-25
Boot .................................................. 2-25, 5-27
C
Celsius ................................................... 2-2, 4-1
Change
password .................................................2-7
user profile ..............................................2-7
CHAP
add ACL identity ............................3-10, 5-3
remove identity.......................................5-5
Check
IP route ......................................... 2-12, 5-22
CLI................................................................. 5-1
Cluster .................................................1-11, 2-19
failover disable......................................2-22
failover enable .............................. 2-22, 5-7
set....................................................2-23, 5-7
show ...............................................2-21, 5-8
Configure
FC storage port........................................2-7
IP routing ................................................2-11
iSCSI....................................................... 2-15
iSCSI Gateway cluster........................... 2-19
iSCSI Gateway cluster. 2-11, 2-14, 2-15, 2-16
Create
iSCSI portal....................................2-15, 5-17
iSCSI target ............................................ 5-19
D
Database
corrupted ......................................2-25, 5-11
download ...................................... 2-19, 5-11
export ............................................2-25, 5-11
upload .......................................... 2-18, 5-12
Dead interval ............................................. 2-21
Debug ..........................................................5-8
Delete
ACL identity.............................................5-4
iSNS........................................................ 3-14
I-1
RADIUS ..................................................3-12
Details
ACL .......................................................... 5-2
disk ................................................. 3-3, 5-25
interface .................................................5-12
interface statistics ...........................4-2, 5-13
iSCSI session .................................. 4-6, 5-18
iSCSI session connection.............. 4-9, 5-18
iSCSI target.................... 3-6, 4-11, 5-19, 5-21
LU ..........................................................5-20
neighbor ......................................2-22, 5-22
storage ........................................... 3-3, 5-25
Device
advance set ............................................. 5-8
advance show......................................... 5-8
set ........................................... 2-3, 2-20, 5-9
set telnet ................................................. 2-5
Disable
cluster failover ...................................... 2-22
Discover
storage .................................................. 5-25
Discover LU................................................2-16
Disk
alias........................................................ 5-24
details............................................. 3-3, 5-25
remove......................................... 2-17, 5-26
set ................................................... 3-3, 5-25
show...................................................... 5-26
Download
software ........................................ 2-19, 5-11
E
Enable
cluster failover ............................... 2-22, 5-7
Exit.............................................................. 5-10
Export
corrupted database...................... 2-25, 5-11
problem ........................................ 2-25, 5-11
Expose
new storage ...................................3-5, 5-26
storage ........................................... 3-5, 5-27
F
Fabric ........................................................... 2-8
Fahrenheit ............................................ 2-2, 4-1
Failover
cluster.................................................... 2-22
disable................................................... 2-22
enable ............................................ 2-22, 5-7
Faulty interval ............................................. 1-14
FC
I-2
connection mode .................................. 2-8

fabric....................................................... 2-8
interface show............................... 2-8, 5-10
node show..................................... 2-9, 5-10
point-to-point ........................................ 2-8
port type................................................. 2-8
private loop............................................ 2-8
public loop............................................. 2-8
set............................................................ 2-8
set speed ............................................... 5-10
File transfer
show ....................................................... 5-11
ft
download ...................................... 2-19, 5-11
export problem.............................2-25, 5-11
show ....................................................... 5-11
update ...........................................2-24, 5-11
upload software........................... 2-18, 5-12
H
Hardware temperature ........................ 2-2, 4-1
Hot keys ....................................................... 5-1
I
Identify
storage device................................3-2, 5-25
Identity
ACL add CHAP...............................3-10, 5-3
ACL add name ................................ 3-9, 5-4
ACL remove name ..................................5-5
add SRP....................................................5-4
delete ACL...............................................5-4
remove CHAP .........................................5-5
remove SRP .............................................5-5
set.............................................................5-6
Info ...............................................................2-4
iSCSI Gateway ....................................... 5-12
Interface
details .................................................... 5-12
set....................................................2-9, 5-12
show ............................................... 2-7, 5-13
show FC ................................................. 5-10
Interface statistics ........................................ 4-1
details ............................................. 4-2, 5-13
show ............................................... 4-2, 5-13
Interval
dead....................................................... 2-21
faulty .......................................................1-14
keep alive ...................................... 1-14, 2-21
suspicious...................................... 1-14, 2-21
IP
Brocade iSCSI Gateway GUI User Manual
active .............................................. 1-11, 2-19

inactive........................................... 1-11, 2-19
neighbor ........................................ 1-11, 2-19
RADIUS add...........................................5-14
RADIUS remove ....................................5-15
RADIUS set ............................................5-15
RADIUS show ............................... 3-12, 5-15
IP config
remove..........................................2-10, 5-13
set ..................................................2-10, 5-13
show...............................................2-11, 5-14
IP route
add ............................... 2-11, 2-12, 5-15, 5-16
config ..................................................... 2-11
remove..........................................2-14, 5-16
show..............................................2-14, 5-16
IP statistics
show................................................4-3, 5-17
iSCSI
alias target..............................................5-19
create target...........................................5-19
portal create ................................. 2-15, 5-17
portal remove...............................2-16, 5-17
remote initiator list.......................4-10, 5-17
remote initiator show ................. 4-10, 5-18
remote initiator statistics show ............ 4-11
remove target ............................... 3-6, 5-20
session connection details ........... 4-9, 5-18
session connection show ............. 4-8, 5-18
session details................................ 4-6, 5-18
session statistics............................. 4-7, 5-19
set target ...............................................5-20
show portal............................................5-17
show session.................................. 4-6, 5-18
show target ...........................................5-20
target details ................. 3-6, 4-11, 5-19, 5-21
iSCSI connection statistics..........................4-8
iSCSI Gateway
reset to factory default ......................... 5-28
system reset .......................................... 5-28
iSCSI Gateway Cluster ................................ 1-11
iSCSI initiator
statistics show........................................ 4-11
iSCSI portal
remove................................. 2-15, 2-16, 5-17
show.............................................. 2-15, 5-17
iSCSI remote initiator
list ..................................................4-10, 5-17
show............................................. 4-10, 5-18
iSCSI session
connection details ........................ 4-9, 5-18
connection show........................... 4-8, 5-18
details............................................. 4-6, 5-18
show............................................... 4-6, 5-18
statistics.......................................... 4-7, 5-19
Index
iSCSI session statistics ................................ 4-6

iSCSI target
alias ........................................................ 5-19
create..................................................... 5-19
details ............................3-6, 4-11, 5-19, 5-21
remove ..........................................3-6, 5-20
set.......................................................... 5-20
show ..................................................... 5-20
iSNS ............................................................ 3-13
K
Keep alive interval............................. 1-14, 2-21
Keep alive parameters ................................5-8
Keep alive signal................................ 1-14, 2-21
Key
RADIUS.................................................. 5-14
L
List
iSCSI remote initiator .................. 4-10, 5-17
Logical Unit statistics..................................4-11
LU
details ................................................... 5-20
discovery ............................................... 2-16
remove .................................................. 5-21
show ...................................................... 5-21
statistics ..................................................4-11
statistics show ....................................... 5-21
M
Management Station
ping from iSCSI Gateway............. 2-12, 5-22
N
Name
ACL identity remove...............................5-5
Neighbor
add................................................2-20, 5-21
details .......................................... 2-22, 5-22
remove ................................2-12, 2-23, 5-22
set................................................. 2-23, 5-22
show ............................................ 2-22, 5-22
Network topology ........................................ 1-1
New
storage expose.............................. 3-5, 5-26
Node
show FC ................................................. 5-10
I-3
O
Off-line....................................................... 2-22
P
Ping ................................................... 2-12, 5-22
Private Loop ................................................ 2-8
Public Loop ................................................. 2-8
R
RADIUS
add .........................................................5-14
key ..........................................................5-14
remove...................................................5-15
set ...........................................................5-15
show.............................................. 3-12, 5-15
Remote initiator statistics ......................... 4-10
Remove
ACL .......................................................... 5-2
ACL identity CHAP ................................. 5-5
ACL identity name.................................. 5-5
admin ............................................... 2-7, 5-7
disk ............................................... 2-17, 5-26
IP config ........................................2-10, 5-13
IP route..........................................2-14, 5-16
iSCSI portal ...................................2-16, 5-17
iSCSI target.................................... 3-6, 5-20
LU ...........................................................5-21
neighbor ............................. 2-12, 2-23, 5-22
RADIUS ..................................................5-15
SNMP manager..............................2-6, 5-23
SRP identity............................................. 5-5
storage ......................................... 2-17, 5-26
user profile.............................................. 2-7
Report LUNs ...............................................2-16
Reset .......................................................... 2-24
RS232 ......................................................... 2-25
S
Safe mode.................................................. 2-25
Safe Mode ................................................. 5-27
SCSI
target port statistics .......................4-9, 5-23
SCSI port statistics.......................................4-9
SCSI target
port statistics..................................4-9, 5-23
Service Agent ............................................... 1-3
Service Location Protocol ........................... 1-3
Set
I-4
ACL ...................................................3-7, 5-3

cluster .............................................2-23, 5-7
device .....................................2-3, 2-20, 5-9
disk..................................................3-3, 5-25
FC connection mode............................. 2-8
FC port type............................................ 2-8
FC speed................................................. 2-8
identity.....................................................5-6
interface..........................................2-9, 5-12
IP config........................................ 2-10, 5-13
iSCSI target ........................................... 5-20
neighbor...................................... 2-23, 5-22
RADIUS.................................................. 5-15
SNMP manager .....................................5-24
SRP identity .............................................5-6
storage ...................................2-17, 3-2, 5-27
telnet........................................................2-5
Show
ACL ........................................... 3-8, 5-3, 5-6
admin.......................................................5-7
cluster .............................................2-21, 5-8
disk........................................................ 5-26
FC interface ................................... 2-8, 5-10
FC node ......................................... 2-9, 5-10
file transfer.............................................. 5-11
interface.......................................... 2-7, 5-13
interface statistics........................... 4-2, 5-13
IP config......................................... 2-11, 5-14
IP route ......................................... 2-14, 5-16
IP statistics ...................................... 4-3, 5-17
iSCSI portal....................................2-15, 5-17
iSCSI remote initiator ..................4-10, 5-18
iSCSI session.................................. 4-6, 5-18
iSCSI session connection ............. 4-8, 5-18
iSCSI target ........................................... 5-20
LU........................................................... 5-21
LU statistics............................................ 5-21
neighbor...................................... 2-22, 5-22
SNMP manager .....................................5-24
storage ............................................ 3-1, 5-27
system hardware............................ 4-1, 5-27
TCP connection ............................ 4-4, 5-28
TCP statistics.................................. 4-4, 5-28
UDP listeners ................................ 4-5, 5-29
UDP statistics ..........................................4-5
SNMP
manager add .........................................5-23
manager remove........................... 2-6, 5-23
manager set...........................................5-24
manager show.......................................5-24
Software
download ...................................... 2-19, 5-11
update ...........................................2-24, 5-11
upload .......................................... 2-18, 5-12
SRP
add identity............................................. 5-4

remove identity ...................................... 5-5
Statistics
interface ...................................................4-1
iSCSI connections ..................................4-8
iSCSI initiator port ................................. 4-11
iSCSI sessions..........................................4-6
iSCSI target..................................... 4-7, 5-19
LU ........................................................... 4-11
LU show .................................................5-21
remote initiator .................................... 4-10
SCSI port .................................................4-9
SCSI target port..............................4-9, 5-23
TCP/IP..................................................... 4-3
Storage
blink abort ..................................... 3-2, 5-24
blink start ....................................... 3-2, 5-25
details............................................. 3-3, 5-25
discovery............................................... 5-25
disk set ........................................... 3-3, 5-25
disk show .............................................. 5-26
expose............................................ 3-5, 5-27
expose new....................................3-5, 5-26
remove......................................... 2-17, 5-26
set .......................................... 2-17, 3-2, 5-27
show................................................3-1, 5-27
Storage is missing...................................... 5-26
Storage port
configure................................................. 2-7
FC speed ................................................. 2-8
Suspicious interval.............................1-14, 2-21
System boot...................................... 2-25, 5-27
System hardware
show............................................... 4-1, 5-27
System reset
iSCSI Gateway ...................................... 5-28
System reset default factory
iSCSI Gateway ...................................... 5-28
Index
T
Target
authentication................................ 1-8, 3-10
existing..............................................3-4, 3-5
new ..........................................................3-4
TCP connection
show .............................................. 4-4, 5-28
TCP statistics
show .............................................. 4-4, 5-28
TCP/IP statistics ...........................................4-3
Telnet ................................................... 2-2, 2-4
Temperature scale................................ 2-2, 4-1
U
UDP listeners
show .............................................. 4-5, 5-29
UDP statistics
show ........................................................4-5
Update
software .........................................2-24, 5-11
Upload
software ........................................ 2-18, 5-12
W
World Wide Node Name .......................... 2-9
World Wide Port Name .................... 2-8, 5-10
World Wide Unique Identifier................... 1-2
Write cache
enable.............................................3-3, 5-25
Write-protected .................................3-3, 5-25
WWNN........................................................ 2-9
WWPN ............................................... 2-8, 5-10
WWUI .......................................................... 1-2
I-5
I-6


Brocade ISCSI Gateway v326 CMD Ref

Caricato da

Informazioni sul documento

Titolo originale

Copyright

Formati disponibili

Condividi questo documento

Condividi o incorpora il documento

Opzioni di condivisione

Hai trovato utile questo documento?

Questo contenuto è inappropriato?

Copyright:

Formati disponibili

Brocade ISCSI Gateway v326 CMD Ref

Caricato da

Copyright:

Formati disponibili

iSCSI Gateway

Command Reference Manual

Supporting Brocade iSCSI Gateway

Publication Number: 53-1000204-01 Rev. A

Copyright 2006, SANRAD, Inc..

Publication Number: 53-1000204-01 Rev. A

Brocade Communications Systems, Incorporated

European and Latin American Headquarters

Brocade iSCSI Gateway

Chapter 2 iSCSI Gateway Operations ....................................................... 2-1

Removing a Network Interface IP Address ..................................................................... 2-10

Chapter 3 Storage Exposure & Security .................................................... 3-1

iSCSI Gateway Command Reference User Manual

Viewing LUNs ..................................................................................................................... 3-5

Chapter 4 Monitoring & Statistics ............................................................. 4-1

iscsi rinitiator show........................................................................................................... 4-10

Chapter 5 Command Line Interface Reference ........................................ 5-1

iSCSI Gateway Command Reference User Manual

iSCSI Gateway Network Topology........................................................................ 1-1

iSCSI Gateway Cluster Configuration ................................................................. 1-12

iSCSI Gateway Configuration............................................................................... 2-4

iSCSI Gateway Command Reference User Manual

iSCSI Gateway Topology

Storage elements can be a combination of FC JBOD (Just a Bunch Of Disks) or FC RAID

Introduction to Brocade iSCSI Gateway

iSCSI Gateway Network Topology

Can use existing Ethernet cabling and existing network elements.

Uses common TCP/IP for global connectivity.

Leverages the existing expertise of network administrators, integrators and support

iSCSI Initiator and Targets

The iSCSI initiator resides in the host computer.

The iSCSI target resides in the iSCSI Gateway.

Targets and LUNs

Each target can have multiple LUNs.

Each target should be exposed by only one iSCSI Gateway in a cluster.

Each target can be accessed by multiple hosts.

iSCSI Gateway Command Reference Manual

There are two ways to expose a disk:

iSCSI Target Access

Introduction to Brocade iSCSI Gateway

Each identity can contain one or more iSCSI initiators.

Each identity can be assigned one or both login authentication methods

Each identity can be attached to more than one target.

iSCSI Gateway Command Reference Manual

Identity A is coupled with both Targets 1 and 2.

Identity B is coupled with Target 3.

Identity C is coupled with Target 4.

As a result, each iSCSI initiator has access to the following disks:

Identities Coupled with Targets

Introduction to Brocade iSCSI Gateway

iSCSI Gateway Command Reference Manual

Introduction to Brocade iSCSI Gateway

Access Rights per Identity-Target Pair

Target and Initiator Authentication

An identity can be assigned an additional authentication method.

If no authentication method is assigned, all listed iSCSI initiators in an identity

A separate user name + password for each initiator.

A few user name + password pairs common to a few initiators

A single user name + password for all initiators in the identity.

iSCSI Gateway Command Reference Manual

Six iSCSI initiators in Identity B

Identity with iSCSI Initiators and Credentials

Configuring a RADIUS Server