Instruction/ maintenance manual of the product MDS 9000 Cisco Systems
Go to page of 74
CH A P T E R Send documentation comments to mdsfeedbac k-doc@cisco.com. 35-1 Cisco MDS 9000 Family Configuration Guide OL-6973-03, Cisco MDS SAN-OS Release 2.x 35 Configuring iSCSI Cisco MDS 9000 Famil y IP storage (IPS) services e xtend the reach of Fibr e Channel SANs by using open-standard, IP-based techno logy .
35-2 Chapter 35 Configur ing iSCSI About iSCSI Figur e 35-1 T ranspor ting iSCSI Requests and Responses f or T ranspar ent iSCSI Routing Each iSCSI host that requires access to storage through the IPS module or MPS-14/2 module needs to hav e a compatible iSCSI driv er inst alled.
Cisco MDS 9000 Family Configuration Guide OL-6973-03, Cisco MDS SAN-OS Release 2.x Chapter 35 Configuring iSC SI Configuring iSCSI Fibr e Channel SAN Vi ew—i SCSHI Host as an HBA Figur e 35-4 iSCSI .
35-4 Cisco MDS 9000 Family Configuration Guide OL-6973-03, Cisco MDS SAN-OS Release 2.x Chapter 35 Configur ing iSCSI Configuring iSCSI • • • • Presenting iSCSI Hosts as V irtual Fibre Channel.
Cisco MDS 9000 Family Configuration Guide OL-6973-03, Cisco MDS SAN-OS Release 2.x Chapter 35 Configuring iSC SI Configuring iSCSI Presenting Fibre Channel Targets as iSCSI Targets • Dynamic mapping—automat ically maps all the Fibre Channel tar get de vices/ports as iSCSI de vices.
35-6 iqn.1987-05.co m.cisco:05.< MDS_switch_management_IP_address >.01-01.31001 12233445566 (see Figure 35-5 ). Dynamic T ar get Mapping iSCSI iSCSI IP host A iqn.host A IP Network MDS-mgntIP LUN0 LUN1 LUN2 LUN0 LUN1 LUN2 iSCSI 1/1 Vir tual iSCSI T arget iqn.
35-7 Static Mapping Y ou can manually (statically) create an iSCSI tar get by assigni ng a user-d ef ined unique iSCSI node name to it. The iSCSI qualif ied name is restricted to a mini mum length of 16 characters and a maximum of 223 characters.
35-8 Cisco MDS 9000 Family Configuration Guide OL-6973-03, Cisco MDS SAN-OS Release 2.x Chapter 35 Configur ing iSCSI Configuring iSCSI Note Advertising Static iSCSI Targets iSCSI Virtual Target Confi.
35-9 Figur e 35-8 Mapping LUNs t o a iSCSI Node Name Example 3 Figur e 35-9 Mapping LUNs t o Multiple iSCSI Nod e Names 0 iSCSI v i e w of st or age device iqn.1987-02.com.cisco.target-1 0 0 0 1 2 Fibre Channel s t orage device pWWN 28:00:01:02:03:04:05:06 112190 iqn.
35-10 Presenting iSCSI Hosts as Virtual Fibre Channel Hosts Initiator Identification • • Command Purpose Step 1 Step 2 Step 3.
Cisco MDS 9000 Family Configuration Guide OL-6973-03, Cisco MDS SAN-OS Release 2.x Chapter 35 Configuring iSC SI Configuring iSCSI Initiator Presentation Modes • to Fibre Channel, each host can ha v e dif ferent zoning or LUN access cont rol on the Fibre Channel storage de vice.
Cisco MDS 9000 Family Configuration Guide OL-6973-03, Cisco MDS SAN-OS Release 2.x Chapter 35 Configur ing iSCSI Configuring iSCSI Figure 35-1 0 Vir tual Host HBA P ort • • • SCSI_FCP in the FC-.
Cisco MDS 9000 Family Configuration Guide OL-6973-03, Cisco MDS SAN-OS Release 2.x Chapter 35 Configuring iSC SI Configuring iSCSI iSCSI Initiator Idle Timeout WWN Assignment for iSCSI Initiators An i.
name ip-address Making the Dynamic Initiator WWN Mapping Static Command Purpose Step 1 Step 2 iqn.1987-02.com.cisco.initiator no iscsi initiator name iqn.1987-02.com.cisco.initiator config terminal iscsi initiator ip-address 10.50.0.0 no iscsi initiator ip-address 10.
Checking for WWN Conflicts install all Proxy-Initiator Mode Command Purpose Step 1 Step 2s Step 3 Returns to EXEC mode. Step 4 Command Purpose Step 1 Step 1 iscsi duplicate-wwn-check List of Potential WWN Conflicts: -------------------------------- Node : iqn.
Multiplexi ng IPS Por ts iSCSI iSCSI Host B iSCSI iSCSI Host A iSCSI iSCSI Host C MDS Pro xy initiator host 120874 IP network switch# switch(config)# switch(config)# switch(config-if)#.
VSAN Membership for iSCSI • • VSAN Membership for iSCSI Hosts Step 3 Step 4 Command Purpose Command Purpose Step 1 Step 2 Step 3 Note.
Cisco MDS 9000 Family Configuration Guide OL-6973-03, Cisco MDS SAN-OS Release 2.x Chapter 35 Configur ing iSCSI Configuring iSCSI Note VSAN Membership for iSCSI Interfaces Ti p no iscsi interface vsa.
Cisco MDS 9000 Family Configuration Guide OL-6973-03, Cisco MDS SAN-OS Release 2.x Chapter 35 Configuring iSC SI Configuring iSCSI Advanced VSAN membership for iSCSI hosts iSCSI Access Control • • Fibre Channel Zoning Based Access Control devices.
Cisco MDS 9000 Family Configuration Guide OL-6973-03, Cisco MDS SAN-OS Release 2.x Chapter 35 Configur ing iSCSI Configuring iSCSI Common mechanisms of identi fying members in Fibre Channel Zon e are .
iSCSI ACL Based Access Control • • • Note Command Purpose Step 1 Step 2 Step 3 Step 4.
Cisco MDS 9000 Family Configuration Guide OL-6973-03, Cisco MDS SAN-OS Release 2.x Chapter 35 Configur ing iSCSI Configuring iSCSI Enforcing Access Control • • its login is rejected.
T o configure AAA auth entication for an iSCSI user , follo w these steps: Y ou can configure iSCSI CHAP o r None authentication at both the global le ve l and at each interface lev el. The authentication for a Gigabit Ethernet int erface or subi nterface o verri des the authenticatio n method confi gured at the global lev el.
Restricting iSCSI Initi ator Authentication Mutual CHAP Authentication Command Purpose Step 1 Step 2 Command Purpose Step 1 Step 2 Step 3 Ti p Command Purpose Step 1.
Cisco MDS 9000 Family Configuration Guide OL-6973-03, Cisco MDS SAN-OS Release 2.x Chapter 35 Configuring iSC SI Configuring iSCSI show running-conf ig show iscsi global show running-conf ig show iscsi initiat or confi gured ) iSCSI Immediate Data and Unsolicited Data Features Step 2 !@*asdsfsdfjh!@df (!@*asdsfsdfjh!@df) for all initiators.
These two features help red uce I/O time for small write commands because i t remov es one round-trip between the initiator an d the targ et for the R2T PDU. As an iSC SI target, the M DS switch al lows up to 64 KB of unsolicited data per comman d. This is co ntrolled b y the FirstBurstLength parameter during iSCSI login ne gotiation phase.
QoS iSCSI Routing Modes Each mode neg otiates dif ferent operational parameters, has dif ferent advantages and disadv antages, and is suitable for different usages.
Figure 35-13 compares the messages exchange d by t he iSCSI routing modes. T able 35-1 compares the adva ntages and dissuasiv en ess of the dif ferent iSCSI routing modes.
Cisco MDS 9000 Family Configuration Guide OL-6973-03, Cisco MDS SAN-OS Release 2.x Chapter 35 Configuring iSC SI Configuring iSCSI Displaying iSCSI Information Displaying iSCSI Interfaces Example 35-1.
Data-in 0 pdus, 0 bytes switch# iscsi2/1 5 minutes input rate 704 bits/sec, 88 bytes/sec, 1 frames/sec 5 minutes output rate 704 bits/sec, 88 bytes/sec, 1 frames/sec iSCSI statistics 974756 packets in.
Xfer_rdy:1804 (Rcvd:1804) Data-In:90453 (Rcvd:90463), 92458248 bytes Response:2352 (Rcvd:2362), with sense 266 TMF Resp:0 Login:attempt:13039, succeed:110, fail:12918, authen fail:0 Rcvd:NOP-Out:91458.
<----------------------------Proxy initiator is enabled nWWN is 28:00:00:05:30:00:a7:a1 (system-assigned)<----System-assigned nWWN pWWN is 28:01:00:05:30:00:a7:a1 (system-assigned)<---- Syste.
Displaying Global iSCSI Information Displays the Cur rent Global iSCSI Configur at ion and State Example 35-7 Displays Br ief Info r mation of All iSCSI Sessions Target VT1 VSAN 1, ISID 00023d000046, Status active, no reservation Session #3 Target VT2 VSAN 1, ISID 00023d000048, Status active, no reservation Initiator 10.
switch# show iscsi session initiator 10.10.100.199 target VT1 show iscsi session initiator 10.10.100.199 target VT1 detail DataSeqInOrder No, InitialR2T Yes, ImmediateData No Registered LUN 0, Mapped LUN 0 Stats: PDU: Command: 38, Response: 38 Bytes: TX: 8712, RX: 0 Number of connection: 1 Connection #1 Local IP address: 10.
iSCSI Node name is 10.10.100.199 iSCSI Initiator name: iqn.1987-05.com.cisco.01.7e3183ae458a94b1cd6bc168cba09d2e iSCSI alias name: oasis-qa Node WWN is 22:03:00:05:30:00:10:e1 (configured) Member of v.
switch# VSAN 1: -------------------------------------------------------------------------- FCID TYPE PWWN (VENDOR) FC4-TYPE:FEATURE -------------------------------------------------------------------------- 0x020101 N 22:04:00:05:30:00:35:e1 (Cisco) scsi-fcp:init isc.
====================================================================== ------------------------ VSAN:2 FCID:0xef0001 ------------------------ port-wwn (vendor) :22:02:00:05:30:00:35:e1 (Cisco) node-wwn :22:01:00:05:30:00:35:e1 class :2,3 node-ip-addr :10.
iSCSI High Availability Displaying iSCSI Virtual Targets * Port WWN 21:00:00:20:37:62:c0:0c Configured node all initiator permit is enabled target: VT2 Port WWN 21:00:00:04:cf:4c:52:c1 Configured node all initiator permit is disabled target: iqn.1987-05.
Cisco MDS 9000 Family Configuration Guide OL-6973-03, Cisco MDS SAN-OS Release 2.x Chapter 35 Configuring iSC SI iSCSI High Availability iSCSI High Availability with Ho st Running Multi-Path Software iSCSI iSCSI IP 10.1.1.1/24 10.1.1.2/24 iSCSI iSCSI IP 20.
Cisco MDS 9000 Family Configuration Guide OL-6973-03, Cisco MDS SAN-OS Release 2.x Chapter 35 Configur ing iSCSI iSCSI High Availability iSCSI HA with Host Not Havi ng Any Multi-Path Software • • .
Cisco MDS 9000 Family Configuration Guide OL-6973-03, Cisco MDS SAN-OS Release 2.x Chapter 35 Configuring iSC SI iSCSI High Availability Storage Port Failover LUN Trespass Step 3 Note Step 4 Step 5 Co.
Cisco MDS 9000 Family Configuration Guide OL-6973-03, Cisco MDS SAN-OS Release 2.x Chapter 35 Configur ing iSCSI iSCSI High Availability Multiple IPS Ports Connected to the Same IP Network iSCSI iSCSI FC FC IP Addr 10.1.1.1 iqn.initiator .abc IP Addr 10.
Cisco MDS 9000 Family Configuration Guide OL-6973-03, Cisco MDS SAN-OS Release 2.x Chapter 35 Configuring iSC SI iSCSI High Availability Multiple Gig abit Ether net Interf aces in the Sam e IP Netw or k IP network 90861 IP-10.1.10.100 IP-10.1.1.1 FC f abric pWWN-P1 iqn.
Cisco MDS 9000 Family Configuration Guide OL-6973-03, Cisco MDS SAN-OS Release 2.x Chapter 35 Configur ing iSCSI iSCSI High Availability VRRP-Based High Availability IP network 90862 VRRP across two por ts Ph ysical view (iSCSI) Vir tual IP-10.1.1.1 FC f abric pWWN-P1 iqn.
Cisco MDS 9000 Family Configuration Guide OL-6973-03, Cisco MDS SAN-OS Release 2.x Chapter 35 Configuring iSC SI iSCSI Authentication Set up Guidelines and Scenarios Ethernet PortChannel-Based High Availability Note Note iSCSI Authentication Setup Guidelines and Scenarios • • • Note IP network 90863 Ethernet PortChannel IP-10.
Cisco MDS 9000 Family Configuration Guide OL-6973-03, Cisco MDS SAN-OS Release 2.x Chapter 35 Configur ing iSCSI iSCSI Authentication Setup Guidelines and Scen arios No Authentication CHAP with Local .
Cisco MDS 9000 Family Configuration Guide OL-6973-03, Cisco MDS SAN-OS Release 2.x Chapter 35 Configuring iSC SI iSCSI Authentication Set up Guidelines and Scenarios Step 6 <---------------- Verify.
Cisco MDS 9000 Family Configuration Guide OL-6973-03, Cisco MDS SAN-OS Release 2.x Chapter 35 Configur ing iSCSI iSCSI Authentication Setup Guidelines and Scen arios • Step 1 Step 2 Step 3 Note Step.
Cisco MDS 9000 Family Configuration Guide OL-6973-03, Cisco MDS SAN-OS Release 2.x Chapter 35 Configuring iSC SI iSCSI Authentication Set up Guidelines and Scenarios Step 6 Note Step 7 Step 8 iscsi-zo.
Cisco MDS 9000 Family Configuration Guide OL-6973-03, Cisco MDS SAN-OS Release 2.x Chapter 35 Configur ing iSCSI iSCSI Authentication Setup Guidelines and Scen arios Step 12 Note * fcid 0x6d0001 [pwwn.
<--------- Host 2: Initiator ID based on node name because the initiator is entering iSCSI interface 7/5 <----------------------- - Host 1: Initiator ID based on IP address because the initiator.
<----------------- ----- <------ IP address of the iSCSI host iSCSI gateway node <---------------- ---- iSCSI initiator ID is based on the r egister ed node name <------ iSCSI gateway node.
Target Storage Device Requiring LUN Mapping • • • • Step 1 Step 2 Step 3 Step 4 iSCSI iSCSI iSCSI Host 1 Host 2 Switch 1 VSAN 1 VSAN 2 94137 Interface fc 2/1 21:00:00:20:37:6f:fd:97 Interface .
Cisco MDS 9000 Family Configuration Guide OL-6973-03, Cisco MDS SAN-OS Release 2.x Chapter 35 Configur ing iSCSI iSCSI Authentication Setup Guidelines and Scen arios Step 5 Step 6 Step 7 <-----Host.
Cisco MDS 9000 Family Configuration Guide OL-6973-03, Cisco MDS SAN-OS Release 2.x Chapter 35 Configuring iSC SI iSCSI Authentication Set up Guidelines and Scenarios Step 11 Note Step 12 Zoneset activation initiated.
<--- iSCSI initiator in name server <----- iSCSI initiator in name server.
<-- Session to f irst tar get <-- Session to second target <------------------------ vsan membership Dynamic WWN as static WWN not assigned <--------- Static pWWN f or the initiator <--.
About iSCSI Storage Name Services • • – – –.
35-59 About iSNS Client Functionality ; a unique entity is associ ated with each IPS interface The iSNS client uses a registration interval value of 15 minutes. If the cli ent fails to refresh the registratio n during this interval, th e server will deregister the entries.
Creating an iSNS Client Profile isns rer egister Verifying iSNS Client Configuration show isns pr of ile Command Purpose Step 1 Step 2 Step 3 Command Purpose Step 1 Step 2 Step 3.
Cisco MDS 9000 Family Configuration Guide OL-6973-03, Cisco MDS SAN-OS Release 2.x Chapter 35 Configuring iSC SI Creating an iSNS Client Pro file show isns pr of ile counters show i sns Displays iS NS.
Example 35-22 Displa ys T agg ed iSNS Interf aces ^^^^^^^^^^^^^^^^ 5 minutes input rate 112 bits/sec, 14 bytes/sec, 0 frames/sec 5 minutes output rate 0 bits/sec, 0 bytes/sec, 0 frames/sec 1935 packet.
1. 2. 3. 4. 5. 6. 7. 8. Configuring iSNS Servers FC FC iSCSI TOE iSCSI TOE IP Network - 1 iqn.host1 iqn.host2 P1 SW-1 SW-2 P2 Zone 1 Zone 2 130914 Gigabitethernet 3/1 Gigabitethernet 2/1.
Cisco MDS 9000 Family Configuration Guide OL-6973-03, Cisco MDS SAN-OS Release 2.x Chapter 35 Configur ing iSCSI Configuring iSNS Serv ers Enabling the iSNS Server Before iSNS server feature can be enab led, iSCSI must be en abled (see the “Enabling iSCSI” section on page 35-4 ).
Cisco MDS 9000 Family Configuration Guide OL-6973-03, Cisco MDS SAN-OS Release 2.x Chapter 35 Configuring iSC SI Configuri ng iSNS Servers iSNS Client Registra tion and Deregistration Target Discovery.
Displa ys Explicitly Regist er ed Objects SCN Bitmap: OBJ_UPDATED|OBJ ADDED|OBJ REMOVED|TARGET&SELF Node Alias: <MS SW iSCSI Initiator> VSANS: 1(*), 5(*) Portal IP Address: 192.168.100.2 TCP Port: 4179 Entity Index: 2 Portal Index: 1 ESI Interval: 0 ESI Port: 4180 SCN Port: 4180 switch# Entity Id: isns.
Node Type: Target(1) Node Index: 0x80000002 VSANS: iSCSI Node Name: iqn.com.cisco.disk2 Entity Index: 1 Node Type: Target(1) Node Index: 0x80000003 WWN(s): 22:00:00:20:37:39:dc:45 VSANS: Portal IP Address: 192.168.100.5 TCP Port: 3205 Entity Index: 1 Portal Index: 3 Portal IP Address: 192.
Portal IP Address: 192.168.100.6 TCP Port: 3205 Entity Index: 1 Portal Index: 5 switch# Entity Id: isns.entity.mds9000 Index: 1 Last accessed: Fri Jul 30 04:08:16 2004 iSCSI Node Name: iqn.com.cisco.disk1 Entity Index: 1 Node Type: Target(1) Node Index: 0x80000001 WWN(s): 22:00:00:20:37:39:dc:45 VSANS: iSCSI Node Name: iqn.
switch# iSCSI Node Name: iqn.com.cisco.disk1 Entity Index: 1 Node Type: Target(1) Node Index: 0x80000001 WWN(s): 22:00:00:20:37:39:dc:45 VSANS: 1 switch# iSCSI Node Name: iqn.
switch# ------------------------------------------------------------------------------- IPAddress TCP Port Index SCN Port ESI port ------------------------------------------------------------------------------- 192.168.100.5 3205 3 - - 192.168.100.6 3205 5 - - switch# Portal IP Address: 192.
switch1# ------------------------------------------------------------------------------- Entity ID Last Accessed ------------------------------------------------------------------------------- dp-204 .
switch# iSCSI Global configuration: Switch: 20:00:44:0d:ec:01:02:40 iSCSI Auto Import: Enabled Use the command to display CFS peers switch i nformation about the iSNS applicat ion (see Example 35-43 ).
Cisco MDS 9000 Family Configuration Guide OL-6973-03, Cisco MDS SAN-OS Release 2.x Chapter 35 Configuring iSC SI Default Settings CHAP or none authentication mechanism.
Cisco MDS 9000 Family Configuration Guide OL-6973-03, Cisco MDS SAN-OS Release 2.x Chapter 35 Configur ing iSCSI Default Settings.
An important point after buying a device Cisco Systems MDS 9000 (or even before the purchase) is to read its user manual. We should do this for several simple reasons:
If you have not bought Cisco Systems MDS 9000 yet, this is a good time to familiarize yourself with the basic data on the product. First of all view first pages of the manual, you can find above. You should find there the most important technical data Cisco Systems MDS 9000 - thus you can check whether the hardware meets your expectations. When delving into next pages of the user manual, Cisco Systems MDS 9000 you will learn all the available features of the product, as well as information on its operation. The information that you get Cisco Systems MDS 9000 will certainly help you make a decision on the purchase.
If you already are a holder of Cisco Systems MDS 9000, but have not read the manual yet, you should do it for the reasons described above. You will learn then if you properly used the available features, and whether you have not made any mistakes, which can shorten the lifetime Cisco Systems MDS 9000.
However, one of the most important roles played by the user manual is to help in solving problems with Cisco Systems MDS 9000. Almost always you will find there Troubleshooting, which are the most frequently occurring failures and malfunctions of the device Cisco Systems MDS 9000 along with tips on how to solve them. Even if you fail to solve the problem, the manual will show you a further procedure – contact to the customer service center or the nearest service center