In this post, we will see the commands for the Cisco MDS SAN switch zoning. You can also do the zoning from GUI but using CLI would be much faster.

Step 1 Verify the following physical connections for the new Cisco MDS 9000 Family switch (see Figure 2-4 ):. The console port is physically connected to a computer terminal (or terminal server). The 10/100/1000 Ethernet management port (mgmt0) is connected to an external hub, switch, or router. The Configuring Cisco MDS 9000 Series Switches (DCMDS) v3.1 course shows you how to implement, manage, and troubleshoot Cisco MDS 9000 Series Switches, to build highly available, scalable storage networks. Cisco SAN Analytics running on the Cisco MDS 32G platform provides real-time, complete visibility across the fabric comprising of SCSI / NVMe flows. Let’s look at this very briefly and understand how it functions in Cisco’s MDS 32G switches.

We suggest you should read the What Is Zoning for better understanding steps.

What Is Zoning?

Zoning is a process of grouping initiator and target ports WWPN which is performed in SAN switch. Once zoning is completed initiator and targets can exchange of FC packets happens between them.

We have already discussed the zoning steps for brocade SAN switch in previous posts.

Steps Of Cisco MDS SAN Switch Zoning

Below are the overall steps of Zoning that need to perform on a switch. We will discuss more on each step in the coming section.

1. Check Connectivity Status of HBA Port.
2. Create fcAlias Name For HBA Port WWPN
3. Create fcAlias for Storage Array Port WWPN.
4. Create a ZONE and add fcAlias members.
5. Add the newly created zone to an active zone set.
6. Commit the zone if extended zoneset is enabled.
7. Activate the zoneset.
8. Copy running-config to startup-config.

Cisco MDS SAN Switch Zoning Commands

First, we need to enter into the config mode. In the Cisco switch, all configuration changes happen in configuration mode.

To enter the config mode just execute the below command.

switch# config t

Step 1. Check the connectivity Status of Initiator

First, we need to check if the host is connected to the SAN switch or not. You can check it by executing below command

switch (config)# show fcns database | grep -i 10:xx:xx:xx:xx:xx:xx:xx

If you want to know how devices connect with each other in a SAN network then follow or post on SAN architecture.

Step 2. Create fcAlias

We need to create fcAlias for host WWPN. As a WWPN is difficult to remember so for better management creating fcAlias is good practice.

The below commands creates a fcAlias of host WWPN with the name HostName_hba1in VSAN 3.

switch(config)# fcalias name HostName_hba1 vsan 3
switch(config-fcalias)#
switch(config-fcalias)# member pwwn 10:00:00:23:45:67:89:ab
switch(config-fcalias)#exit
switch(config)# fcalias name Array_Port1 vsan 3
switch(config-fcalias)#
switch(config-fcalias)# member pwwn 50:00:00:53:29:67:89:ab
switch(config-fcalias)# exit
switch(config)#

Similarly, we can create fcAlias for Storage array port or any devices that are connected to SAN switch.

Step 3. Create a zone and add fcAlias Member

After creating fcAlias we need to create a zone in VSAN 3. After creating a zone we need to add fcAlias member into it.

Below commands will create a zone with name Zone1 in VSAN 3 and add two fcAlias member HostName_hba1 and Array_Port1.

switch(config)# zone name Zone1 vsan 3
switch(config-zone)#
switch(config-zone)# member fcalias HostName_hba1
switch(config-zone)# member fcalias Array_Port1
switch(config-zone)# exit
switch(config)#

Step 4. Find Active Zoneset and Zone and Activate it.

Every VSAN has an active zoneset. If a zone is not a part of active zoneset then communication between the zone’s member will not happen.

In the below example, ZoneSet3 is the active zoneset in VSAN 3. We need to add Zone1 in active zoneset ZoneSet3. Finally, we need to activate the zoneset again.

switch(config)# show zoneset active vsan 3
switch(config)#zoneset name ZoneSet3 vsan 3
switch(config)# zoneset name ZoneSet3 vsan 3
switch(config-zoneset)#member Zone1
switch(config-zoneset)#zone commit vsan 3
switch(config)# zoneset activate ZoneSet3 vsan 3

Step 5. Save The Running Config To Start-Up Config

Finally, we have to copy the running-config to startup-config. This will make sure that even after reboot the zoning information is consistent.

switch(config)# copy running-config startup-config

Cisco MDS SAN Switch Zoning Video

You can also watch below video tutorial on the Cisco MDS SAN switch zoning. You can also subscribe to the Youtube Channel for more such videos.

Table Of Contents

Initial Switch Configuration

This chapter provides instructions for setting up the hardware, connecting to the console port, and initially configuring the switch.

This chapter includes the following sections:

•Preparing for Network Connections

•Connecting the Console Port

•Connecting the 10/100 Ethernet Management Port

•Connecting to the MGMT 10/100/1000 Ethernet Port

•Using the Switch Setup Utility

•Verifying the Module Status

Preparing for Network Connections

When preparing your site for network connections to the Andiamo 9500 switch, consider the following for each type of interface:

•Cabling required for each interface type

•Distance limitations for each signal type

•Additional interface equipment needed

Before installing the device, have all additional external equipment and cables available.

Configuration Prerequisites

Before you configure a switch in the Cisco MDS 9000 Family for the first time, make sure you have the following information:

•Administrator password.

•Switch name—This is also used as your switch prompt.

•IP address for the switch's management interface.

•Subnet mask for the switch's management interface.

•IP address of the default gateway.

Connecting the Console Port

This section describes how to connect the RS-232 console port to a PC. The console port allows you to perform the following functions:

•Configure the switch from the CLI.

•Monitor network statistics and errors.

•Configure SNMP agent parameters.

•Manage downloading software updates (through the Ethernet management interface) or distributing software images residing in Flash memory to attached devices.

Figure 2-1, Figure 2-3, Figure 2-4, and Figure 2-4 show the console port and the management port, located on a Cisco MDS 9500 series supervisor-1 module, Cisco MDS 9500 series supervisor-2 module, a Cisco MDS 9200 Series supervisor module, and Cisco MDS 9100 Series supervisor module.

Figure 2-1 Cisco MDS 9500 Series Supervisor-1 Module

Figure 2-2 Cisco MDS 9500 Series Supervisor-2 Module

Figure 2-3 Connecting the Console Cable to a Cisco MDS 9200 Series Switch

Figure 2-4 Connecting the Console Cable to a Cisco MDS 9100 Series Switch

Connecting the Console Port to a PC

You can connect the console port to a PC serial port for local administrative access to the Andiamo 9500 switch.

Note The PC must support VT100 terminal emulation. The terminal emulation software—frequently a PC application such as HyperTerminal Plus—makes communication between the Andiamo 9500 switch and your PC possible during setup and configuration.

To connect the console port to a PC, follow these steps:

Step 1 Configure the baud rate and character format of the PC terminal emulation program to match the following management port default characteristics:

•9600 baud

•8 data bits

•1 stop bit

•No parity

Note On Cisco terminal servers, issue the following commands starting in EXEC mode:
switch# config t
switch(config)# no flush-at-activation
switch(config)# exit
switch# copy running-config startup-config
This configuration ensures that the MDS switch does not receive random characters that might cause it to hang.

Step 2 Connect the supplied RJ-45 to DB-9 female adapter or RJ-45 to DB-25 female adapter (depending on your PC connection) to the PC serial port.

Step 3 Connect one end of the supplied console cable (a rollover RJ-45 to RJ-45 cable) to the console port. (See Figure 2-4.) Connect the other end to the RJ-45 to DB-9 (or RJ-45 to DB-25) adapter at the PC serial port.

Note If you are using a Cisco MDS 9500 Series switch that has multiple supervisor modules, connect the console port to the 'active' supervisor. The active supervisor is the module with the green Active LED.

Connecting the 10/100 Ethernet Management Port

The autosensing 10/100 Ethernet management port is located on the left side of the front panel (labeled 10/100 MGMT), to the right of the Console port (see Figure 2-1, Figure 2-4, and Figure 2-4). This port is used for out-of-band management of the Cisco MDS 9000 Family switches.

Make sure to connect the Ethernet management ports of both supervisor modules on an MDS 9500 Series switch. Even though there are two Ethernet connections, only one management IP address is required for a switch with dual supervisors.

Tip The two Ethernet connections should be connected to ports in different slots on the same LAN switch, or should be split between two different LAN switches.

If only the active supervisor module is connected to the LAN and an event occurs that causes a system switchover (such as a software upgrade), the switch becomes unmanageable through the Ethernet port after the active supervisor reboots and the standby supervisor becomes the active supervisor.

Use modular, RJ-45 cables to connect the 10/100 Ethernet management port to external hubs and switches.

Connecting to the MGMT 10/100/1000 Ethernet Port

The Supervisor-2 module supports an autosensing MGMT 10/100/1000 Ethernet port (labeled 'MGMT 10/100/1000') and has an RJ-45 interface. You can use this port to access and manage the switch by IP address, such as through Cisco Fabric Manager.

Use a modular, RJ-45, straight-through UTP cable to connect the MGMT 10/100/1000 Ethernet port to an Ethernet switch port or hub.

Using the Switch Setup Utility

The switch setup utility helps you configure the switch. To configure the switch, follow these steps:

Step 1 Verify the following physical connections for the new Cisco MDS 9000 Family switch (see Figure 2-4):

•The console port is physically connected to a computer terminal (or terminal server).

•The 10/100/1000 Ethernet management port (mgmt0) is connected to an external hub, switch, or router.

Cisco San Switch Models

Refer to the hardware installation guide for your specific product.

Tip Save the host ID information for future use (for example, to enable licensed features). The host ID information is provided in the Proof of Purchase document that accompanies the switch.

Step 2 Verify that the default console port parameters are identical to those of the computer terminal (or terminal server) attached to the switch console port (see the 'Connecting the Console Port to a PC' section).

Step 3 Power on the switch. The switch boots automatically.

Note If the switch boots to the loader> orswitch(boot) prompts, contact your storage vendor support organization for technical assistance.

After powering on the switch, you see the following output:

Step 4 Make sure you enter the password you wish to assign for the admin user name.

Tip If a password is trivial (short, easy-to-decipher), your password configuration is rejected. Be sure to configure a strong password. Passwords are case-sensitive. You must explicitly configure a password that meets the requirements listed in the 'Configuring User Accounts' section in the Cisco MDS 9000 Family CLI Configuration Guide.

Note If you are running the switch setup utility for the first-time, it starts automatically. If this is not the first-time configuration, you are required to enter setup at the system prompt.

Note If you do not wish to answer a previously configured question, or if you wish to skip answers to any questions, press Enter. If a default answer is not available (for example, the switch name), the switch uses what was previously configured and skips to the next question.

Step 5 Enter yes to enter the setup mode.

The switch setup utility guides you through the basic configuration process. Press Ctrl-C at any prompt to end the configuration process.

Step 6 Enter no (no is the default) to not create any additional accounts.

Step 7 Enter no (no is the default) to not configure any read-only SNMP community strings.

Step 8 Enter no (no is the default) to not configure any read-write SNMP community strings.

Step 9 Enter a name for the switch.

Note The switch name is limited to 32 alphanumeric characters. The default is switch.

Step 10 Enter yes (yes is the default) to configure the out-of-band management configuration.

a. Enter the IP address for the mgmt0 interface.

b. Enter the netmask for the mgmt0 interface in the xxx.xxx.xxx.xxx format.

Step 11 Enter yes (yes is the default) to configure the default gateway (recommended).

a. Enter the default gateway IP address.

Step 12 Enter no (nois the default) to configure advanced IP options such as in-band management, static routes, default network, DNS, and domain name.

Step 13 Enter yes (yes is the default) to enable Telnet service.

Step 14 Enter no (no is the default) to not enable the SSH service.

Step 15 Enter no (no is the default) to not configure the NTP server.

Step 16 Enter noshut (shut is the default) to configure the default switch port interface to the noshut state.

Step 17 Enter on (on is the default) to configure the switch port trunk mode.

Step 18 Enter deny (deny is the default) to configure a default zone policy configuration.

Denies the traffic to flow for all members of the default zone.

Step 19 Enter yes (no is the default) to enable a full zone set distribution (refer to the Cisco MDS 9000 Family CLI Configuration Guide).

You see the new configuration. Review and edit the configuration that you have just entered.

Cisco Mds Switch Simulator Cisco Download

Step 20 Enter no (no is the default) if you are satisfied with the configuration.

Step 21 Enter yes (yes is default) to use and save this configuration.

Verifying the Module Status

Before you proceed with any further configuration of the switch, you need to ensure that the modules in the chassis are functioning as designed. To verify the status of a module at any time, issue the show module command. All the hardware that was physically installed should be displayed.

A sample output of the show module command follows:

Note If you do not see all the installed hardware, call your storage vendor support organization for further assistance.