Brocade ISCSI Gateway Mgr v326 Admin Guide

8/18/2019 Brocade ISCSI Gateway Mgr v326 Admin Guide

1/120

Publication Number: 53-1000203-01 Rev. A

iSCSI Gateway Manager Administrator’s Guide

Supporting Brocade iSCSI Gateway


2/120

Copyright © 2006, SANRAD, Inc..

ALL RIGHTS RESERVED. Publication Number: 53-1000203-01 Rev. A

This manual contains information that is proprietary to SANRAD. No part of this publication may be reproduced in any

form whatsoever without prior written approval by SANRAD.

Right, title and interest, all information, copyrights, patents, know-how, trade secrets and other intellectual property or

other proprietary rights relating to this manual and to the StoragePro Management System and any software componentscontained therein are proprietary products of SANRAD protected under international copyright law and shall be and

remain solely with SANRAD.

StoragePro Management System is a registered trademark of SANRAD. No right, license, or interest to such trademark

is granted hereunder, and you agree that no such right, license, or interest shall be asserted by you with respect to such

trademark.

Brocade, the Brocade B weave logo, Secure Fabric OS, and SilkWorm are registered trademarks and Tapestry is a

trademark of Brocade Communications Systems, Inc., in the United States and/or in other countries. All other brands,

products, or service names are or may be trademarks or service marks of, and are used to identify, products or services of

their respective owners.

Notice: The information in this document is provided “AS IS,” without warranty of any kind, including, without

limitation, any implied warranty of merchantability, noninfringement or fitness for a particular purpose. Disclosure of

information in this material in no way grants a recipient any rights under Brocade's patents, copyrights, trade secrets orother intellectual property rights. Brocade reserves the right to make changes to this document at any time, without

notice, and assumes no responsibility for its use.

The authors and Brocade Communications Systems, Inc. shall have no liability or responsibility to any person or entity

with respect to any loss, cost, liability, or damages arising from the information contained in this book or the computer

programs that accompany it.

Export of technical data contained in this document may require an export license from the United States Government.

Brocade Communications Systems, Incorporated

Document History

Corporate Headquarters

Brocade Communications Systems, Inc.

1745 Technology DriveSan Jose, CA 95110

Tel: 1-408-333-8000

Fax: 1-408-333-8101

Email: [email protected]

Asia-Pacif ic Headquarters

Brocade Communications Singapore Pte. Ltd.

9 Raffles Place#59-02 Republic Plaza 1

Singapore 048619

Tel: +65-6538-4700

Fax: +65-6538-0302


European and Latin American Headquarters

Brocade Communications Switzerland Sàrl

Centre Swissair

Tour A - 2ème étage

29, Route de l'Aéroport

Case Postale 105

CH-1215 Genève 15

Switzerland

Tel: +41 22 799 56 40Fax: +41 22 799 56 41


Document Title Publication Number Summary of Changes Publication

Date

Brocade iSCSI Gateway

Manager Administrator’s Guide

53-1000203-01 Rev. A New document March 2006


3/120

Table of Contents iPublication Number: 53-1000203-01

Table of Contents

Introduction to Brocade iSCSI Gateway Manager.................................1-1

Brocade iSCSI Gateway Topology ................................................................... .......... 1-1

iSCSI Overview ......................................................... ................................................. 1-2

iSCSI Initiator and Targets............................................................................................ 1-2 Portals............................................................................................................... 1-2 Targets and LUNs ............................................................................................. 1-2

Discovery Methods...................................................................................................... 1-3 iSCSI Discovery ................................................................................................ 1-3 SLP .................................................................................................................... 1-3

iSNS .................................................................................................................. 1-3 iSCSI Security................................................................................................................ 1-4

Access Rights.................................................................................................... 1-7 Target and Initiator Authentication ................................................................1-8

Brocade iSCSI Gateway Cluster ................................................................. ............... 1-11

Maintaining Cluster Communications.......................................................................1-14 Synchronizing a Cluster ..............................................................................................1-14

Brocade iSCSI Gateway Manager Overview ............................................................ 1-14

Managing the Brocade iSCSI Gateway.......................................................................1-15 Brocade iSCSI Gateway Manager Icons.....................................................................1-16

Installation Operations ......................................................................... 2-1

Windows Platform.....................................................................................................2-1

Installing Brocade iSCSI Gateway Manager on a Windows Platform........................ 2-1 Running Brocade iSCSI Gateway Manager Server..................................................... 2-6

Brocade iSCSI Gateway Manager Server Located Behind NAT.....................2-7 Running Brocade iSCSI Gateway Manager Client ..................................................... 2-8

Accessing Brocade iSCSI Gateway Manager on the Local ManagementStation ............................................................................................................. 2-8 Accessing Brocade iSCSI Gateway Manager through a Web Browser ........ 2-9

Linux Platform ......................................................... ............................................... 2-10

Installing Brocade iSCSI Gateway Manager on a Linux Platform.............................2-10 Running Brocade iSCSI Gateway Manager Server.....................................................2-11

Running Brocade iSCSI Gateway Manager Client .....................................................2-11

Brocade iSCSI Gateway Operations ..................................................... 3-1

Initial Brocade iSCSI Gateway Manager Configuration ............................................. 3-1

Assigning a Management IP Address .......................................................................... 3-1 Telnet/SSH Connection .................................................................................. 3-1 RS232 Serial Connection ................................................................................. 3-1

Brocade iSCSI Gateway Manager User Login Profiles .............................................. 3-2


4/120

ii iSCSI Gateway Manager Administrator’s GuidePublication Number: 53-1000203-01

Brocade iSCSI Gateway Cluster Configuration ..................................................... 3-3

Adding a New Brocade iSCSI Gateway .......................................................................3-4 Setting Brocade iSCSI Gateway Properties ................................................................ 3-6

Date and Time .................................................................................................3-7 IP Address ....................................................................................................... 3-8 Portals..............................................................................................................3-11

IP Routing ....................................................................................................... 3-12 Creating a New Cluster .............................................................................................. 3-14 Creating a Cluster by Adding New Brocade iSCSI Gateway to a Stand-AloneGateway...................................................................................................................... 3-15

Synchronizing a Cluster.................................................................................3-16 Setting Cluster Properties ..........................................................................................3-16

Keep Alive, Suspicious and Faulty Intervals ................................................. 3-16 Breaking a Cluster ...................................................................................................... 3-18 Additional Brocade iSCSI Gateway Functionality .................................................... 3-19

FC Storage Port Configuration ...................................................................... 3-19

iSNS Configuration ....................................................................................... 3-20 RADIUS Server Configuration.......................................................................3-22

SNMP Configuration......................................................................................3-23 Opening a Telnet Session..............................................................................3-24 Telnet Port Designation.................................................................................3-25 Rediscovering Storage Devices.................................................................... 3-26 Report LUNs Command (Discovering Storage Devices)............................ 3-26 Rediscover Brocade iSCSI Gateway or Cluster ........................................... 3-26 Reset Brocade iSCSI Gateway ...................................................................... 3-28

Storage Exposure Security .......................... ............................. .......... 4-1

Disk Operations................................. ................................................................ ....... 4-1

Displaying Available Storage ....................................................................................... 4-1 Storage Exposure Targets ...................................................................... ................ 4-2

Exposing Disks and Creating a New Target.................................................................4-3 Creating a New Stand-Alone Target ........................................................................... 4-6 Exposing Disks on Existing Targets ............................................................................. 4-8 Modifying & Displaying Target Properties................................................................. 4-8

Unexposing Disks (Deleting LUNs).................................... ...................................... 4-11

Disk Security............................................................................................................4-13

Target Authentication ................................................................................................ 4-13 Identities ..................................................................................................................... 4-13

Creating Identities ......................................................................................... 4-13 Adding Initiators to an Identity ..................................................................... 4-14 Assigning Identity Credentials (Initiator Authentication) ............................ 4-16 Attaching Identities to Targets ...................................................................... 4-17

Monitoring Statistics ............................ ............................ .................. 5-1

Health Monitoring.....................................................................................................5-1


5/120

Table of Contents iiiPublication Number: 53-1000203-01

Scroll and Zoom Functions ...................................................... ................................. 5-2

Interface Statistics and Counters ........................................................ ...................... 5-6

TCP/IP.......................................................................................................................... 5-8 ICMP ............................................................................................................................ 5-8 TCP..............................................................................................................................5-10 UDP..............................................................................................................................5-11

iSCSI Statistics..........................................................................................................5-12

Viewing iSCSI Session Information ........................................................................... 5-13 Viewing iSCSI Sessions............................................................................................... 5-14 Viewing iSCSI Session Statistics ................................................................................. 5-15

iSCSI Connection Statistics ..................................................................... ................ 5-16

Viewing iSCSI Connections .......................................................................................5-16 Viewing Connected iSCSI Initiators .......................................................................... 5-16 Viewing iSCSI Initiator Statistics ................................................................................ 5-17

Troubleshooting ................................................................................... 6-1

Alarm Operations ............................................................. ........................................ 6-1

Configuring Email Alarm Notification ......................................................................... 6-1 Viewing Specific Alarms.............................................................................................. 6-4 Viewing Propagated Alarms ....................................................................................... 6-5 Viewing Alarms History............................................................................................... 6-6 Viewing Current Alarms.............................................................................................. 6-6 Acknowledging an Alarm ........................................................................................... 6-7 Closing an Alarm ......................................................................................................... 6-8 Viewing Alarm Properties ........................................................................................... 6-9

Alarm Severity ............................................................................................................6-10

Index ..................................................................................................... I-1

List of Figures

Figure 1-1. Brocade iSCSI Gateway Network Topology..................................................................1-1 Figure 1-2. iSCSI Target Access.........................................................................................................1-3 Figure 1-3. Identities Coupled with Targets.................................................................................... 1-5 Figure 1-4. Default Identities............................................................................................................1-6 Figure 1-5. Access Rights per Identity-Target Pair...........................................................................1-7

Figure 1-6.

Identity with iSCSI Initiators and Credentials...............................................................1-9 Figure 1-7. Sending a CHAP Authentication Challenge ............................................................... 1-10

Figure 1-8. Brocade iSCSI Gateway Cluster Configuration .......................................................... 1-12 Figure 1-9. Re-Routing Storage Access with Off-line Brocade iSCSI Gateway ............................1-13 Figure 1-10. Brocade iSCSI Gateway Management Options ..........................................................1-15 Figure 2-1. Brocade iSCSI Gateway Manager Server Installation Wizard .................................... 2-2 Figure 2-2. Stand-Alone Client Installation Wizard ....................................................................... 2-3 Figure 2-3. Brocade iSCSI Gateway Manager Installation Location ............................................. 2-4 Figure 2-4. Brocade iSCSI Gateway Manager Installation Location Confirmation...................... 2-5 Figure 2-5. Complete Installation ................................................................................................... 2-6 Figure 2-6. Brocade iSCSI Gateway Manager Server Location .....................................................2-6 Figure 2-7. Tools Menu.................................................................................................................... 2-7

Figure 2-8.

System Configuration Dialog Box ................................................................................ 2-7


6/120

iv iSCSI Gateway Manager Administrator’s GuidePublication Number: 53-1000203-01

Figure 2-9. Brocade iSCSI Gateway Manager Client Location...................................................... 2-8 Figure 2-10. Brocade iSCSI Gateway Manager Login Screen..........................................................2-9 Figure 2-11. Brocade iSCSI Gateway Manager URL.........................................................................2-9 Figure 3-1. Terminal Properties....................................................................................................... 3-2 Figure 3-2. Admin Menu.................................................................................................................. 3-3

Figure 3-3.

Users Window ............................................................................................................... 3-3 Figure 3-4. New Brocade iSCSI Gateway Menu............................................................................. 3-4

Figure 3-5. New Brocade iSCSI Gateway........................................................................................ 3-4 Figure 3-6. Brocade iSCSI Gateway Entity (Cluster Level) ............................................................. 3-5 Figure 3-7. Brocade iSCSI Gateway Physical Entity........................................................................3-6 Figure 3-8. Properties (Brocade iSCSI Gateway Menu).................................................................3-6 Figure 3-9. Brocade iSCSI Gateway Properties .............................................................................. 3-7 Figure 3-10. Setting the Brocade iSCSI Gateway Date.....................................................................3-8 Figure 3-11. Add Network Port IP Parameters ................................................................................3-10 Figure 3-12. Delete IP Address.........................................................................................................3-10 Figure 3-13. Portal Values.................................................................................................................3-12 Figure 3-14. Add IP Route Dialog Box .............................................................................................3-13

Figure 3-15.

New Cluster Menu .......................................................................................................3-14

Figure 3-16.

New Cluster Dialog Box...............................................................................................3-15

Figure 3-17. Properties Selected......................................................................................................3-16 Figure 3-18. Cluster Properties Dialog Box ..................................................................................... 3-17 Figure 3-19. Cluster Properties Dialog Box – Neighbors Tab.........................................................3-17 Figure 3-20. Offline Brocade iSCSI Gateway Selected ...................................................................3-18 Figure 3-21. Navigation Pane with Remaining Brocade iSCSI Gateway........................................3-19 Figure 3-22. Brocade iSCSI Gateway Fibre Channel Option..........................................................3-19 Figure 3-23. Setting FC Port Speed..................................................................................................3-20 Figure 3-24. Brocade iSCSI Gateway Selected................................................................................3-21 Figure 3-25. RADIUS Server Configuration .................................................................................... 3-22 Figure 3-26. SNMP Tab..................................................................................................................... 3-23 Figure 3-27. Opening a Telnet Session ........................................................................................... 3-24 Figure 3-28.

Telnet Session.............................................................................................................. 3-24

Figure 3-29. Advanced Properties - Setting Telnet Port, Report LUNs Discovery....................... 3-25 Figure 3-30. Storage Discovery .......................................................................................................3-26 Figure 3-31. Rediscover Cluster ...................................................................................................... 3-27 Figure 3-31. Discovery Started Status ............................................................................................. 3-27 Figure 3-32. Ready Status................................................................................................................. 3-27 Figure 3-33. Reset Selected From Brocade iSCSI Gateway Menu ................................................ 3-28 Figure 3-34. Discovery Started ........................................................................................................3-28 Figure 3-35. Ready Status................................................................................................................. 3-29 Figure 4-1. Storage View Focus ........................................................................................................4-1 Figure 4-2. Disk Properties .............................................................................................................. 4-2 Figure 4-3. Expose Disk.................................................................................................................... 4-3

Figure 4-4.

Expose Volume.............................................................................................................. 4-3 Figure 4-5. New Target..................................................................................................................... 4-4

Figure 4-6. New Target Listed in Expose Dialog Box ..................................................................... 4-5 Figure 4-7. New Target Listed in Navigation Pane ......................................................................... 4-5 Figure 4-8. Create New Target.........................................................................................................4-6 Figure 4-9. New Target Alias and Name ......................................................................................... 4-7 Figure 4-10. New Target in Navigation Pane .................................................................................... 4-7 Figure 4-11. Expose ............................................................................................................................ 4-8 Figure 4-12. Target Properties...........................................................................................................4-9 Figure 4-13. Target Properties – General Tab ................................................................................... 4-9 Figure 4-14. Target Properties – Details Tab................................................................................... 4-10


7/120

Table of Contents vPublication Number: 53-1000203-01

Figure 4-15. Target Properties – Authentication Tab ...................................................................... 4-11 Figure 4-16. Disk Selected to Unexpose .........................................................................................4-12 Figure 4-17. Delete LU Confirmation Box .......................................................................................4-12 Figure 4-18. Identities Selected........................................................................................................4-14 Figure 4-19. New Identity Parameters .............................................................................................4-14

Figure 4-20.

Identity Selected...........................................................................................................4-15 Figure 4-21. Identity Properties Dialog Box ....................................................................................4-15

Figure 4-22. Add Identity..................................................................................................................4-16 Figure 4-23. Authentication Method Parameters ...........................................................................4-17 Figure 4-24. Added Authentication Method...................................................................................4-17 Figure 4-25. Attaching Identities to Targets.....................................................................................4-18 Figure 4-26. Attach Identities to Target Window............................................................................4-19 Figure 4-27. Access Rights for Identity............................................................................................4-20 Figure 5-1. Hardware Selected from Brocade iSCSI Gateway Menu ............................................ 5-1 Figure 5-2. Brocade iSCSI Gateway Hardware Status Window .................................................... 5-2 Figure 5-3. Scrolling within Graph .................................................................................................. 5-3 Figure 5-4. Graph Scrolled............................................................................................................... 5-3

Figure 5-5.

Graph Area Selected..................................................................................................... 5-4

Figure 5-6.

Area Zoomed In ............................................................................................................ 5-4

Figure 5-7. Zoom Context Menu .................................................................................................... 5-5 Figure 5-8. Interface Statistics Selected from Brocade iSCSI Gateway Menu.............................. 5-6 Figure 5-9. Brocade iSCSI Gateway Interface Statistics ................................................................. 5-7 Figure 5-10. IP Statistics Window......................................................................................................5-8 Figure 5-11. ICMP Statistics Window................................................................................................ 5-9 Figure 5-12. TCP Statistics Window .................................................................................................5-10 Figure 5-13. UDP Statistics Window.................................................................................................5-11 Figure 5-14. iSCSI Menu....................................................................................................................5-12 Figure 5-15. iSCSI Information Window..........................................................................................5-13 Figure 5-16. iSCSI Sessions Window................................................................................................5-14 Figure 5-17. iSCSI Sessions Statistics................................................................................................5-15 Figure 5-18.

iSCSI Connections Window ........................................................................................5-16

Figure 5-19. Target Connected iSCSI Initiators ...............................................................................5-17 Figure 5-20. Statistics Selected from the Connected Initiators Menu...........................................5-17 Figure 5-21. iSCSI Connected Initiators Statistics Window............................................................5-18 Figure 6-1. Alarms Menu...................................................................................................................6-1 Figure 6-2. Selected Alarms for Email Notification ........................................................................ 6-2 Figure 6-3. Configure Menu ............................................................................................................ 6-3 Figure 6-4. SMTP Server Configuration .......................................................................................... 6-3 Figure 6-5. Email to Send Alarm Notification to.............................................................................6-4 Figure 6-6. Specific Alarms Selected...............................................................................................6-4 Figure 6-7. Specific Alarms Window............................................................................................... 6-5 Figure 6-8. Propagated Alarms Window ........................................................................................ 6-5

Figure 6-9.

Alarms Menu..................................................................................................................6-6 Figure 6-10. Alarms History Window................................................................................................6-6

Figure 6-11. Current Alarms Window...............................................................................................6-7 Figure 6-12. Acknowledge Alarm......................................................................................................6-8 Figure 6-13. Ack Checkbox................................................................................................................6-8 Figure 6-14. Close Alarm....................................................................................................................6-9 Figure 6-15. Close Alarm Confirmation Dialog Box ........................................................................6-9 Figure 6-16. Properties.....................................................................................................................6-10 Figure 6-17. Alarm Properties Window.......................................................................................... 6-10


8/120

vi iSCSI Gateway Manager Administrator’s GuidePublication Number: 53-1000203-01

List of Tables

Table 3-1. Brocade iSCSI Gateway Management Parameters............................................................ 3-5 Table 3-2. General Tab ......................................................................................................................... 3-7 Table 3-3. Network Port Parameters...................................................................................................3-10

Table 3-4. Portal Parameters ...............................................................................................................3-12

Table 3-5: IP Routing Parameters........................................................................................................ 3-13 Table 3-6. SNMP Tab Parameters ...................................................................................................... 3-23 Table 4-1. General Target Properties ................................................................................................. 4-10 Table 4-2. Target Details..................................................................................................................... 4-10 Table 6-1: Brocade iSCSI Gateway Manager Alarms ......................................................................... 6-11


9/120

Introduction to Brocade iSCSI Gateway Manager 1-1Publication Number: 53-1000203-01

Chapter 1

Introduction to Brocade iSCSI Gateway Manager

This chapter provides an overview of the Brocade iSCSI Gateway, its topology and features.

Brocade iSCSI Gateway Topology

The Brocade iSCSI Gateway provides servers with IP access to storage through SCSI routingusing iSCSI protocol. Using SCSI routing, hosts on an IP network access storage attached togateways as local disks.

Figure 1-1 shows a standard Brocade iSCSI Gateway network topology.

The gateway in the center connects to the storage elements in the back-end while

connecting to the IP network on the front-end.

The gateway enables hosts to access attached storage using IP-SAN protocol iSCSI. Formore information, refer to iSCSI.

Storage elements can be a combination of FC JBOD (Just a Bunch Of Disks) or FC RAIDsubsystems. Storage elements can be connected either directly to the iSCSI gateway orconnected across a Fibre Channel network.

iSCSI Gateway

Cloud IP Network

FC RAID

Tower boxHost

CloudFC

Network

Tower boxHost

Tower boxHost

1 0 2 3 6 b

RAID RAID RAID

Figure 1-1. Brocade iSCSI Gateway Network Topology


10/120

1-2 Brocade iSCSI Gateway Manager Administrator's Guide

Publication Number: 53-1000203-01

iSCSI Overview

iSCSI transmits native SCSI commands and data over the TCP/IP protocol stack. iSCSI

transfers and stores SCSI commands and data at any iSCSI enabled storage location withaccess to a LAN, MAN, WAN or the Internet. iSCSI enables the creation of high performanceIP-SANs.

iSCSI has many benefits including:

Can use existing Ethernet cabling and existing network elements.

Uses common TCP/IP for global connectivity.

Leverages the existing expertise of network administrators, integrators and supportservices.

iSCSI Initiator and Targets

iSCSI initiators establish TCP connections with iSCSI targets. Data can be transferred viaiSCSI when an iSCSI initiator establishes a TCP connection with an iSCSI target.

The iSCSI initiator resides in the host computer.

The iSCSI target resides in the Brocade iSCSI Gateway.

iSCSI initiators and targets have a World Wide Unique Identifier (WWUI) of up to 223free form characters, e.g. www.brocade.switch1.target1.

Portals

To enable iSCSI communications over TCP, the system administrator must configure portalsduring the initial gateway configuration. A portal is comprised of both an IP address and itsassigned TCP port. Each configured portal automatically becomes an iSCSI access point toeach target that exist in the gateway. Typically, there are few portals and many targets.

Targets and LUNs

An iSCSI initiator can access, read and write to a disk only after the disk is “exposed”. Anexposed disk is a disk that has been attached to a target and assigned a LUN ( Logical UnitNumber) . An exposed disk can be accessed by any iSCSI initiator unless ACL restrictions areconfigured.

When creating iSCSI targets, the user administrator assigns an alias and name for each one.

The alias is an internal identifier for the system administrator. The name is the WWUI usedto connect initiators to the target.

Note:

When creating targets, keep in mind that:

Each target can have multiple LUNs.

Each target should be exposed by only one Brocade iSCSI Gateway in a cluster.

Each target can be accessed by multiple hosts.


11/120


There are two ways to expose a disk:

1. Create a new target and assign a LUN in the same process. For more information seeExposing Disks and Creating a New Target in Chapter 4.

2. Assign LUNs to previously created targets. For more information, see Creating a NewStand Alone Target in Chapter 4.

Example:

In Figure 1-2 Disk 1 is exposed via Target 1 and is accessible to any iSCSI initiator viaeither portal (IP1, 3260) or (IP2, 3260). Likewise, Disk2 is exposed via Target 2, Disk 3and Disk 4 are exposed via Target 3.

1 0 1 2 4 b

iSCSI Target 3

wwui3

Disk 3 Disk 4

LU0 LU1

Disk 2

LU0

iSCSI Target 2wwui2

Disk 1

LU0

iSCSI Target 1

wwui1

iSCSI Gateway (IP1, 3260) (IP2, 3260)

Figure 1-2 iSCSI Target Access.

Discovery Methods

The Brocade iSCSI Gateway supports three types of discovery: iSCSI Discovery, SLP andiSNS.

iSCSI Discovery

In an iSCSI discovery session the user administrator configures an IP and port of the iSCSItarget in the initiator. The initiator discovers all applicable targets and LUNs.

SLP

SLP (Service Location Protocol) is a common broadcast-based discovery mechanism thatuses agents. The gateway acts as an SLP Service Agent (SA) and advertises its iSCSI service.The initiator identifies the gateway and discovers the gateway’s targets.

iSNS

iSNS is a client/server protocol designed for compatibility with FC’s Simple Name Server(SNS). Once an iSNS server is located (either through DHCP or SLP), discovery can takeplace without the need for broadcasts. iSNS enables iSCSI initiators in the IP-SAN to locatethe gateway targets automatically.


12/120



iSCSI Security

No matter what discovery method is used, ACL (Access Control List) allows only thosetargets that are defined as available to be accessed. To allow selective iSCSI initiator access

to iSCSI target disks, the Brocade iSCSI Gateway uses identities to define pools of initiators.An identity is a user-defined list of iSCSI initiators. Attaching an identity to a target restrictsits access to the list of initiators defined by that identity.

Note:

When planning and creating identities, keep in mind that:

Each identity can contain one or more iSCSI initiators.

Each identity can be assigned one or both login authentication methods (CHAP,SRP).

Each identity can be attached to more than one target.

Each target is first automatically coupled to a default read-write un-authenticatedaccess identity and therefore can be accessed by everyone.

Each target can have more than one identity. The order of the identities isimportant. The first match is used, not the best match.

Note:

If you are working with an iSNS server, all hos s are able to see all ta gets but only those hostst r with access rights are able to connect to the authorized targets.


13/120


Example:

In Figure 1-3 identities are coupled with iSCSI targets to limit iSCSI initiator access to atarget’s underlying disks. An identity can be used with more than one target and each

target can have more than one identity.

Identity A is coupled with both Targets 1 and 2.

Identity B is coupled with Target 3.

Identity C is coupled with Target 4.

As a result, each iSCSI initiator has access to the following disks:

1 0 1 5 1 b

wwui2

wwui1

wwui10

wwui9

wwui8

wwui7

wwui4

wwui3

Ident B

wwui6

wwui5

iSCSI Target 1wwui21

iSCSI Target 2

wwui22

iSCSI Target 4wwui24

iSCSI Target 3

wwui23

Ident A

Ident C

Ident B

Disk 1

Disk 4

Disk 2

Disk 3

Disk 5

Disk 6

Figure 1-3. Identities Coupled with Targets

When you assign an identity to a target, you give the identity a pos ion. A position is an

identity’s rank in the gateway scan for an “iSCSI initiator – identity match ”. When thegateway scans the list of identities coupled with a target, it starts with the highest positionand stops with the first match. After matching, the initiator is granted the identity’s accessrights.

it

An identity can be connected to more than one target to provide the same pre-defined listof initiators for each target.


14/120



Example:

In Figure 1-4, the default identities for Target 1 and Target 2 have been modified to notaccessible (NA) for all initiators.

Target 1 is coupled with Identity A with read-write (RW) access to Identity A’s list ofiSCSI initiators (WWUI1).

Target 2 is coupled with Identity B with read-write (RW) access to Identity B’s list ofiSCSI initiators (WWUI2).

When iSCSI initiator WWUI1 logs in to Target 1, the gateway first scans Identity A andfinds the initiator listed there. The scan stops and the initiator is granted read-writeaccess to Target 1’s underlying disk, Disk 1.

If iSCSI initiator WWUI1 tries to login to Target 2, the gateway first scans Identity B. Itdoes not find the initiator listed so it continues to scan the next identity, the defaultidentity. The default identity implicitly lists all iSCSI initiators, including WWUI1.

However, the scan stops and the initiator is denied access to Target 2’s underlying disks(Disk 2 and Disk 3), since the default identity is configured as not accessible.

1 0 1 5 6 b

iSCSI Gateway

CloudIP SAN

Tower boxTower boxwwui1

iSCSI

initiator

iSCSI

initiator

wwui2

Disk 1

LU0

Ident Awwui1

Target 1Identity A

Def Ident

Target 2Identity B

Def Ident

iSCSI Target 1wwui3

Disk 2

LU0

Disk 3

LU1

Default

all

RW

NA

iSCSI Target 2wwui4

Default

all

Ident Bwwui2

RW

NA

Disk 1

RW

Disk 3

RW

Disk 2

RW

Figure 1-4. Default Identities


15/120


Access Rights

When you couple an identity and a target, you assign access rights: read-write (RW), read-only (RO) or not accessible (NA). The access rights are per identity-target pair.

An identity can be coupled with multiple targets, each time with different access rights.

A target can have multiple identities, each with different access rights.

Note:

If you add or modify Identities on a target after its disks have been exposed, he accesst rights will take effect only at the next login for each iSCSI initiator.

Example:

In Figure 1-5 Identity A is coupled with both Target 1 and Target 2.

The pair Identity A – Target 1 is assigned iSCSI initiator read-write access to Target 1disks.

However, the pair Identity A – Target 2, is assigned iSCSI initiator read-only accessto Target 2 disks.

1 0 1 5 2 b

wwui2

wwui1

wwui10

wwui9

wwui8

wwui7

wwui4

wwui3

Ident B

wwui6

wwui5

iSCSI Target 1

wwui21

iSCSI Target 2

wwui22

iSCSI Target 4

wwui24

iSCSI Target 3

wwui23

Ident A

Ident C

Ident B

R e a d - W

r i t e

R e a d - W r i t e

R e a d - O n l y

R e a d - W r i t e

Disk 1

Disk 4

Disk 2

Disk 3

Disk 5

Disk 6

Figure 1-5. Access Rights per Identity-Target Pair


16/120



Target and Initiator Authentication

The Brocade iSCSI Gateway supports the authentication methods CHAP and SRP for theiSCSI initiator. The credentials for CHAP and SRP are the combination of user name +password.

CHAP

CHAP is a protocol that is used to authenticate the peer of a connection and is based uponthe peers sharing a secret (a security key that is similar to a password). The target and theinitiator authenticate each other.

The Brocade iSCSI Gateway supports two way CHAP authentication. The targetauthenticates the initiator and the initiator can authenticate the target (it is up to the initiatorto request target authentication). A separate secret can be set for each target and for eachinitiator in the storage area network (SAN).

Note:

An authentication method assigned per identity and not per iSCSI initiator.is

An identity can be assigned an additional authentication method.

If no authentication method is assigned, all listed iSCSI initiators in an identitywill have un-authenticated login access rights.

When an iSCSI initiator logs in to a target, its WWUI is checked against the identity initiatorlist. After the iSCSI initiator passes the identity stage, if credentials are configured, the iSCSIinitiator must authenticate itself. The credentials list is checked for the iSCSI initiator’s user

name + password. The list can contain:

A separate user name + password for each initiator.

Note:

There is no strict link between an initiator from the initiator names in the identity and aspecific username + password from the credentials of the identity.

A few user name + password pairs common to a few initiators

A single user name + password for all initiators in the identity.


17/120


Example:

In Figure 1-6 there are:

Six iSCSI initiators in Identity BOnly four user name + password credentials. Certain initiators have the same username + password configured on them.

1 0 1 5 5

Ident B

Credentials

CHAP SRP

Sarah C6H12O6 Dinos RockOn

Dinos RockOn Albert energy

wwui4

wwui3

wwui6

Initiators

wwui7

wwui8

wwui9

Figure 1-6. Identity with iSCSI Initiators and Credentials

Configuring a RADIUS Server

When a RADIUS Server exists in the network, you can use it to manage the Brocade iSCSIGateway. When CHAP user names and passwords are configured on the network in aRADIUS server, the RADIUS server can be configured on the gateway to direct a CHAPchallenge to the RADIUS server and eliminate the need to configure all user name +password pairs on the gateway. This decreases configuration time and increase overallnetwork security.


18/120



Example:

In Figure 1-7, a CHAP authentication challenge is sent to the Brocade iSCSI Gateway.The gateway first checks if the user name is set for RADIUS authentication.

If it is, the CHAP challenge is passed on to the RADIUS server.

If it is not, the user name and password are compared against the pairs configuredin the gateway.

1 0 2 6 1 b

iSCSI Gateway

CloudIP SAN

Tower boxTower box

iSCSI

initiator

iSCSI

initiator

finance

brocade.billing

Default

all

NA

iqn.1991-05.microsoft:wilbur.brocade

accounting

steven

isatwork

microsoft:steven

brocade.steven

Tower boxRADIUS Server

Yes

RADIUS

Authentication?

No

CHAP Authentication

iqn.com.brocade.steven

steven

ilovecookies

iqn.1991-05.microsoft:steven.brocade

Figure 1-7. Sending a CHAP Authentication Challenge


19/120


Brocade iSCSI Gateway Cluster

A cluster is made from two gateways that are attached to the same storage element(s). In a

cluster, the Brocade iSCSI Gateways interact in a peer-to-peer fashion with the otherneighbor gateway. In this active-active configuration, neither gateway is configured to act asthe master gateway. All disks are accessible to each gateway and can be exposed on eithergateway. This allows you to split the load between the two gateways. Clusters provide highavailability in the event of gateway failover.

Each network port on the Brocade iSCSI Gateway is configured with its own:

active , or functioning, IP addresses

inactive, or dormant, neighbor IP addresses.

When one Brocade iSCSI Gateway goes off-line, the remaining gateway activates its

neighbor’s IP addresses. The hosts continue to access disk targets through the same IPaddress without sensing that their ‘regular’ gateway has gone offline or noticing any impacton storage performance.

Note:

All LUNs in a RAID controller must be s multaneously exposed through all ports connected toi both gateways.


20/120



Example

In Figure 1-8, two gateways are connected to one FC JBOD. From the four physical disks, twodisks have been exposed and are equally accessible to both gateways.

Brocade iSCSI Gateways are both fully operational in a cluster. No gateway must sit in stand-by mode.

Both Brocade iSCSI Gateways are also connected to two hosts via the IP SAN. Disk 1 isexposed via Brocade iSCSI Gateway 1 to Host 1, represented by the orange dashed line. Disk2 is exposed via Brocade iSCSI Gateway 2 to Host 2, represented by the purple dotted line.

1 0 2 2 8 b

CloudIP SAN

IP2-active

IP1-inactive

Tower boxHost 2

iSCSI

initiator

Disk 1

Tower boxHost 1

iSCSI

initiator

iSCSI Gateway 1

FC JBOD

Disk 1 Disk 2

Disk 4Disk 3

IP1,Target 1 IP2,Target 2

iSCSI Target 2

wwui2

iSCSI Target 1

wwui1

LU0LU0

IP1-active

IP2-inactive

Disk 1

Disk 2

Disk 2

iSCSI Gateway 2

Figure 1-8 Brocade iSCSI Gateway Clu ter Configuration. s


21/120


Example

In Figure 1-9, Brocade iSCSI Gateway 1 has gone off-line. Brocade iSCSI Gateway 2 activatesBrocade iSCSI Gateway 1’s IP address and takes over exposure of Disk 1 to Host 1,

represented by the orange dashed line.

Host 1 continues to access Disk 1 through the same IP address as it did before its gatewaywent off-line. Host 1 has no way of knowing that its regular gateway is off-line.

1 0 2 2 9 b

CloudIP SAN

IP1-active

IP2-inactive

IP2-active

IP1-active

Tower boxHost 2

iSCSI

initiator

Disk 1

Tower boxHost 1

iSCSI

initiator

iSCSI Gateway 1

FC JBOD

Disk 1 Disk 2

Disk 4Disk 3

IP1,Target 1 IP2,Target 2

iSCSI Target 2

wwui2

iSCSI Target 1

wwui1

LU0LU0

Disk 1

Disk 2

Disk 2

iSCSI Gateway 2

Figure 1-9. Re-Routing Storage Access with Off-line Brocade iSCSI Gateway


22/120



Maintaining Cluster Communications

Once a Brocade iSCSI Gateway is configured as a cluster, it begins sending out a regular

keep alive signal to its neighbor. The gateway also begins listening for the keep alive signalfrom its neighbor. The keep alive signal is transmitted through all connecting paths betweeneach neighbor. Thus, if one path fails, the remaining path(s) will still carry the keep alivesignal.

If a specified time period passes without a keep alive signal from the neighbor, a suspiciousinterval , measured in seconds, is entered. The gateway suspects that its neighbor has goneoff-line and begins preparing to activate the neighbor IP addresses to take over diskexposure.

If a keep alive signal is received during the suspicious interval, the timer is reset and theBrocade iSCSI Gateway continues to function as usual. If a keep alive signal is not receivedby the end of the suspicious interval, a faulty interval is entered. At the end of the faulty

interval, the neighboring gateway is considered off-line, the failover process is initiated andthe on-line gateway actives the neighbor IP addresses and takes over disk exposure.

Synchronizing a Cluster

If disks or targets are created on one Brocade iSCSI Gateway operating alone, when anothergateway is added, its database must be synchronized to the first gateway’s database. Thiscan happen in three situations:

1. A new gateway is added to a configured and functioning gateway to form a cluster.

2. An offline gateway in a cluster comes back online.

3. CLI is used to make an isolated configuration change in one gateway.

Note:

You should rediscover a cluster any time that CLI is used while B ocade iSCSI Gatewayr Manager is open.

When an element is not synchronized, a yellow exclamation mark appears to the left of itinstead of a green check mark and the alarm Object not redundant is displayed.Synchronization is possible at every level of the gateway manager: Cluster, Brocade iSCSIGateway, Target and Disk.

Synchronization is carried out from the selected level down. Synchronization at the clusterlevel will synchronize the gateways and their disks. You cannot synchronize IP addresses orIP routes.

Brocade iSCSI Gateway Manager Overview

Brocade iSCSI Gateway Manager is a network management system for the Brocade iSCSIGateway.

It centrally manages multiple Brocade iSCSI Gateways.


23/120


It automatically synchronizes parameters in both devices when they are part of a cluster.

It provides performance monitoring for advanced diagnostics.

It provides detailed alarm reporting including email notification and alarm propagation.

Managing the Brocade iSCSI Gateway

After powering up the gateway, the first thing you must do is to configure its managementparameters. This can be done via telnet, SSH or via a console or dumb terminal to open adirect connection with the gateway’s RS232 console port.

The Brocade iSCSI Gateway can be managed in two different ways. Each way requires adifferent configuration.

In band The management terminal (Telnet, SSH, SP server) connects to the gateway’s Eth1 port.The Eth1 port is used by the gateway for management as well as by the hosts for

accessing data accessing storage data (refer to B, Figure 1-10).

RS232 The console connects to the Brocade iSCSI Gateway’s RS232 port in a direct connection

(refer to A, Figure 1-10). The RS232 port is used mainly for initial configuration: setting upthe management IP, Mask and gateway name. For more information on RS232 SerialConnection refer to RS232 Serial Connection in Chapter 3.

1 0 2 2 3 b

In-Band Management

IP Cloud

RS232 port

A

B

Telnet Station

Cloud

Clients

IP Cloud

Figure 1-10. Brocade iSCSI Gateway Management Options


24/120



Brocade iSCSI Gateway Manager Icons

The gateway manager uses the following icons.

Icon Icon Icon

cluster delete help

Brocade iSCSIGateway

1 gateway close

disk warning alarm move down

target minor alarm move up

LU major Alarm tape

exit critical alarm read/writecapabilities

ACL Alarm read onlycapabilities

external current alarms

attach detach

no read/writecapabilities(no access)


25/120

Installation Operations 2-1Publication Number: 53-1000203-01

Chapter 2

Installation Operations

Brocade iSCSI Gateway Manager installation runs on Win32 and Linux platforms and workson a client-server model with the following access options:

Client installed locally on the same host server.

Client and server installed remotely with the remote client accessing the local serverwith a Web browser as a JAVA applet.

Stand-alone client installed remotely accessing the local server.

Windows Platform

The following section is for Win32 platform only. If you are using Linux, refer to LinuxPlatform .

Installing Brocade iSCSI Gateway Manager on a Windows

Platform

Notes:

If you have a previous version of the gateway manager installed, you must remove the previous version before upgrading your gateway manager system.

To install and run the gateway manager, you must have the JAVA Runtime Environment(JRE) installed. If you have both a server and client installed, you need to install the JREin both places.

Brocade iSCSI Gateway Manager will not run if the correct version of the JRE is not properly installed on the host machine. The correct version of Java is included on theinstallation CDROM. Additionally, the JRE can be downloaded fromhttp://java.sun.com .

To install Brocade iSCSI Gateway Manager on a Windows platform:

1. Double click on the iSCSI_Gateway_Manager_X.X.X.X_Setup.exe file in the iSCSIGateway Manager folder on the CD shipped with the Brocade iSCSI Gateway.

Note:

If you insta l the gateway manager client as a stand-alone client, you will still need al gateway manager server installed a some point in you network to be able tot r communicate with your Brocade iSCSI Gateway(s) via the client.

To install only the client:

Double click on the iSCSI_Gateway_Manager_client_X.X.X.X_Setup.exe file in theiSCSI Gateway Manager folder on the CD shipped with the Brocade iSCSI Gateway.

The Brocade iSCSI Gateway Manager Installation Wizard opens.

2. Click Next to begin installation.

http://java.sun.com/http://java.sun.com/


26/120

Figure 2-1. Brocade iSCSI Gateway Manager Server Installation Wizard

2-2 Brocade iSCSI Gateway Manager Administrator's GuidePublication Number: 53-1000203-01


27/120

Figure 2-2. Stand-Alone Client Installation Wizard

3. Install Brocade iSCSI Gateway Manager in the default location or use browse to specify

an alternate location.

Note:

If the Brocade iSCSI Gateway Manager user will be accessing the application th ough ar Web browser, the gateway manager mus be installed under your system’s Web servert documents root.

4. Click Next.



28/120

Figure 2-3. Brocade iSCSI Gateway Manager Installa ion Locationt

5. Confirm installation location and click Next.



29/120

Figure 2-4. Brocade iSCSI Gateway Manager Installa on Location Confirmationti

The Brocade iSCSI Gateway Manager Management System files are installed in the

designated location.6. Click Finish to complete the installation wizard instructions and close the wizard.



30/120

Figure 2-5. Complete Installation

Running Brocade iSCSI Gateway Manager Server

The Brocade iSCSI Gateway Manager Server starts automatically. You can Stop/Restart/Runthe server.

To stop/restart/start the gateway manager server

From the Programs menu:Start > Programs > Brocade > iSCSI Gateway Manager > Server > Start/Stop/Restart

Figure 2-6. Brocade iSCSI Gateway Manager Server Location



31/120

Brocade iSCSI Gateway M anager Server Located Behind NAT

You need to configure the gateway manager server host machine alias or IP address if thegateway manager server host machine is located behind a NAT (Network Translation)environment. If the gateway manager server host machine is not located behind a NAT

environment, the System Configuration Hostname must be left blank.To configure system parameters:

1. From the Programs menu:Start > Programs > Brocade > iSCSI Gateway Manager > Server > Tools

The Tools icon appears in the system tray (Figure 2-7).

2. In the system tray, right click on the Tool icon and select Network Configuration

Figure 2-7. Tools Menu

The Network Configuration dialog box opens.

3. Enter the Hostname (use iSCSI Gateway Manager server host machine alias or IPaddress).

4.

Enter the RMI registry port.

5. Click OK.

Figure 2-8. System Configuration Dialog Box



32/120

Running Brocade iSCSI Gateway Manager Client

After installing gateway manager you can open the gateway manager client at any timeeither by running the client on the local management station, on another station or througha Web browser.

Note:

When accessing Brocade iSCSI Gateway Manager through a Web browser, it must beinstalled under your system’s Web server documents root. The gateway manager URL isin the fo m:r

http://ip of host terminal or host name/Brocade iSCSI Gateway

Manager/index html

Accessing Brocade iSCSI Gateway Manager on the Local Managem ent

Station

To start the client:

1. From the Programs menu:Start > Programs > Brocade > iSCSI Gateway Manager > Server > Local Client

(Figure 2-9)

Note:

If the client has been installed separately, the pa h is:t

Start > Programs > Brocade > iSCSI Gateway Manager > Client > Client

Figure 2 9 Brocade iSCSI Gateway Manager Client Location- .

The Brocade iSCSI Gateway Manager Management System screen opens.

2. Enter the default User Name and Password: admin.

Note:

If the gateway manager client is located on a different host server from the gatewaymanager server, you must enter the gateway manager server host name and server portto enable communicat on between the client and se ver.i r

3. If necessary, enter Server Host and Server Port

4. Click OK.



33/120

Figure 2 10. Brocade iSCSI Gateway Manager Login Screen-

Accessing Brocade iSCSI Gateway Manager through a W eb Browser

To access gateway manager via a Web browser:

1. Navigate to the gateway manager URL using your Web browser. The URL is in the form:http:// ”IP address of host terminal or host name”/ iSCSI Gateway Manager /index.html

Figure 2 11. Brocade iSCSI Gateway Manager URL-

The gateway manager screen opens (Figure 2-10).

2. Enter the default User Name and Password: admin.

3. Click OK.



34/120


Linux Platform

The following section is for Linux platform only. If you are using Win32, refer to WindowsPlatform .

Installing Brocade iSCSI Gateway Manager on a Linux

Platform

Notes:

If you have a previous version of the gateway manager installed, you must remove the previous version before upgrading your gateway manager system.

To install and run gateway manager, you must have the JAVA Runtime Environment(JRE) installed on the management s ation. The JRE is can be downloaded from thet Internet: http://java.sun.com . Brocade iSCSI Gateway Manager will not run if thecorrect version of the JRE is not properly installed on the host machine.

When accessing gateway manage through a Web browser, gateway manager must ber installed under your system’s Web server documents root. The ga eway manager URL ist in the fo m:r

http://ip of host terminal or host name/ iSCSI Gateway Manager /index html

To install gateway manager on a Linux platform:

1. Copy the zip file iSCSI_Gateway_Manager_X.X.X.X.zip to the destination directory,referred to as .

2. Go to the and unpack the zip file using the command:

unzip iSCSI_Gateway_Manager_X.X.X.X.zip

3. Set Java environment variable SP_JAVA_HOME to be the location of your JAVA runtimeenvironment (JRE) or SDK package.

4. In RedHat, add the following two lines to /etc/profile:

NMS_JAVA_HOME=/root/Java/jre-1_5_06# my Java home dir. . .export NMS_JAVA_HOME

5. Log Out.

6. Log In.

http://java.sun.com/http://ip/http://ip/http://java.sun.com/


35/120


Running Brocade iSCSI Gateway Manager Server

To run gateway manager server on a Linux platform:

1. Go to / Brocade iSCSI Gateway Manager /server.

2.

Add execute permissions to the script runServer.sh using the commands:

chmod 777 runServer.sh

3. Run the script runserver sh.

Running Brocade iSCSI Gateway Manager Client

To run gateway manager client on a Linux platform:

1.

Go to / Brocade iSCSI Gateway Manager.

2. Add execute permissions to the script runClient.sh using the command:

chmod 777 runClient.sh

3. Run the script runclient sh.


36/120



37/120

Brocade iSCSI Gateway Operations 3-1Publication Number: 53-1000203-01

Chapter 3

Brocade iSCSI Gateway Operations

Brocade iSCSI Gateway Manager communicates with the gateway via the gatewaymanagement port IP address. The gateway communicates with hosts via iSCSI portals whichare configured via the gateway manager. Brocade iSCSI Gateway Manager automaticallydiscovers all disks and LUNs connected to the gateway storage ports. The gateway managerenables multi-cluster management.

Initial Brocade iSCSI Gateway Manager Configuration

The Brocade iSCSI Gateway has a default IP Address of 10.11.12.123. This allows you to setinitial startup parameters via a telnet session.

Assigning a Management IP Address

The management IP address can be set via:

RS-232 port

Telnet session

Telnet/SSH Connection

To initialize the gateway via telnet/SSH session:

1. Change your computer’s IP Address to anything on the same subnet 10.11.12.*

2.

Connect to the management port on the gateway.3. Telnet to 10.11.12.123.

4. Enter Username and Password: admin.

You will be asked to accept or change the default values for:

1. IP Address.

2. IP Mask.

3. Management port (eth1).

4. Default gateway name. This name will appear in the Brocade iSCSI Gateway Manager

Navigation Pane. If you don’t enter a name, gateway manager will use the IP address.This name can be changed later via the Brocade iSCSI Gateway Properties tab if there isonly one gateway present.

RS232 Serial C onnection

To initialize the gateway via an RS-232 serial connection:

1. Connect the cable to the appropriate port on the management server, and open aTerminal session. Set the following parameters in the terminal:Bits per second = 115200, Flow Control = None, Emulation = Autodetect.


38/120

Figure 3-1. Terminal Properties

2. Enter Username and Password: admin.

3. Set the IP Address.

4. Set the IP Mask.

5. Set the management port (eth1).

6. Set the gateway name. This name will appear in the gateway manager Navigation Pane. Ifyou don’t enter a name, gateway manager will use the IP address. This name can bechanged later via the Brocade iSCSI Gateway Properties tab if there is only one gatewaypresent.

Brocade iSCSI Gateway Manager User Login Profiles

The default user name and password for gateway manager is admin.

Notes:

Once you add a user profile, the default username and password is erased.

The password must be 5-12 characters.

The username must be 1-20 characters.

To set a user profile:

1. From the gateway manager toolbar, select Admin > Users…



39/120

Figure 3-2. Admin Menu

The Users window opens.

2. Click Add.

The Add User dialog box opens.

3. Enter the user name and password in the appropriate fields.

4. Click OK.

The Add User dialog box closes. The new user name now appears in the Users window.You can sort the user names by clicking the sort arrow.

Figure 3-3. Users Window

Brocade iSCSI Gateway Cluster Configuration

A cluster is a group of FC storage units and switches that function as one unit, providing highavailability in the event of gateway failover.

Brocade iSCSI Gateway Manager enables you to make a cluster from two gateways andconfigure both at the same time. Additionally, a cluster can be made by adding a newgateway to an already configured stand-alone gateway and then synchronizing the cluster.



40/120


Note:

This section details the steps necessary for configuring a single, stand-alone gateway.When additional steps must be taken for cluster configuration, they are noted.

Adding a New Brocade iSCSI Gateway

All stand-alone gateways must be added to the gateway manager.

To add a new gateway:

1. In the Navigation pane, right click on Brocade iSCSI Gateway Manager and select New >Brocade iSCSI Gateway.

Figure 3-4. New Brocade iSCSI Gateway Menu

The New Brocade iSCSI Gateway dialog box opens.

2. Enter the Brocade iSCSI Gateway configuration parameters in the dialog box.

Note:

The IP address is mandatory. The remaining fields contain default values.

Figure 3-5. New Brocade iSCSI Gateway


41/120

Table 3-1. Brocade iSCSI Gateway Management Parameters

Parameter Definition

IP Address IP address of the management interface configured on gateway duringinitial setup.

Mask IP mask for the management interface

SNMP UDP Port UDP port on which SNMP manager-agent communications run

TRAP UDP Port UDP port on which the SNMP agent will issue traps

Read Community Defined group granted read access to data

Write Community Defined group granted write access to data

Timeout Time in milliseconds before an SNMP session is considered closed.

Number of Retries Number of times to try to re-establish an active SNMP session

SNMP Version SNMP protocol version being used to establish gateway managercommunications with the specified gateway

3.

The new gateway appears in the Navigation pane and is represented by two entities:a “virtual entity” and a “physical entity”. The menu options differ for the two differenttypes of entities. The virtual entity is referred to as “cluster level”.

Figure 3-6 Brocade iSCSI Gateway Entity (Cluster Level).



42/120

Figure 3-7. Brocade iSCSI Gateway Physical Entity

Setting Brocade iSCSI Gateway Properties

You can change gateway properties via the different tabs in the Properties window (Figure 3-9).

To display gateway properties:

1. In the Navigation pane, right click on the Brocade iSCSI Gateway and select Properties.

Figure 3-8. Properties (Brocade iSCSI Gateway Menu)

The gateway Properties dialog box opens displaying different tabs.

2. Toggle between these tabs to configure the different gateway properties.



43/120

Figure 3-9. Brocade iSCSI Gateway Properties

Date and Time

You can set the local date and time on a gateway.

Note:

Alarms are time-stamped according to the computer clock that is running the BrocadeiSCSI Gateway Manager server.

To set Brocade iSCSI Gateway date and time:

1. In the Navigation pane, right click on the Brocade iSCSI Gateway on which you want toadd a network port IP address and select Properties…

The gateway Properties dialog box opens (Figure 3-9).

Table 3-2. General Tab


Name Name of the gateway

Contact Contact person for technical support

Location Location of the contact person

Mgmt IP Address IP address of the gateway management interface

Mgmt Mask IP mask for the management interface

Last Reset Date and time since the last gateway reset

Date Local date



44/120



Time Local time

Status Connection status of the gateway

Description Description of gateway hardware and software

Figure 3-10. Setting the Brocade iSCSI Gateway Date

2. Select the year, month and day for the gateway.

3. Select the hour, minutes and seconds.

4. Select AM or PM. Select AM for morning, PM for evening (12:00 AM=midnight, 12:00PM=noon).

5. Click OK.

IP Address

To enable a host to communicate with the Brocade iSCSI Gateway using iSCSI protocol, anIP address must be assigned to the device. After adding an IP address, configure an iSCSIportal on the IP address (see Portals).

Each interface can have multiple IP addresses assigned to it.

Each gateway has two 1Gb Ethernet interfaces.


45/120


Note:

If you are adding a network port IP address in a cluster, assign the IP address as active onone gateway and inactive on the second gateway. In the event of a gateway failover, thesecond gateway will activate its inactive IP addresses and begin exposing the IP address'

target LUNs.

To add network IP addresses:

1. In the Navigation pane, right click on the Brocade iSCSI Gateway on which you want toadd a network port IP address and select Properties…


2. Toggle to the IP tab.

3. Click Add.

4.

The Add IP dialog box opens (Figure 3-11).5. Enter the network port IP values and click OK.

The new network port IP address is listed in the IP tab.

6. Click OK.

Cluster Note:

If you are working in a cluster, ano her Add IP dialog box will open, this t me for thet i second Brocade iSCSI Gateway.

Only the interface will be configurable. Click OK to configure the IP address on

the second gateway. Click Cancel to configure the IP on only the first gateway.In the event of failover, the inactivate IP addresses are activated on thefunctioning gateway to take over target LUN exposure. The IP address’s activitywill be shown as switched.


46/120

Figure 3-11. Add Network Port IP Parameters

Table 3-3. Network Port Parameters

Parameter Description

IP Address IP address of interface

IP Mask IP mask of interface

Activity activity status of IP address

Interface Interface alias

To delete network IP addresses:

1. In the Navigation pane, right click on the gateway on which you want to delete anetwork port IP address and select Properties…


2. Toggle to the IP tab.

3. Click the IP address you want to delete.

4. Click Delete.

5. A dialog box opens asking you to confirm the delete (Figure 3-11).

Figure 3-12. Delete IP Address

6. Click Yes.

The IP Address is deleted.



47/120


Portals

A portal is the combination of an interface IP address and a TCP port. You must assign iSCSIportals to enable iSCSI communication between an iSCSI initiator and iSCSI target.

Note:

In a cluster, you must assign TCP ports for each of the Brocade iSCSI GatewayIP addresses.

If an inactive IP address does not have an assigned TCP port, the IP addresswill not function during gateway failover.

To add an iSCSI portal:

1. In the Navigation pane, right click on the Brocade iSCSI Gateway and select Properties…


2. Toggle to the Portals tab.

3. Click Add.

The Add Portal dialog box opens.

4. Select the IP address from the drop-down menu of existing IP address and enter the portnumber. Click OK.

The IP Address is added to the gateway Properties tab.

5. If you are working in a cluster, a second Add Portal dialog box opens for the secondgateway. The IP address and port numbers are already listed and cannot be changed.

Cluster Note:

When you add an iSCSI po al to a Brocade iSCSI Gateway in a cluster, you need to addrt the por al to the second ga eway as well. In the event of a gateway failover, this allowst t the second gateway to begin expos ng the failed gateway’s target LUNs through thei portal.


48/120

Figure 3-13. Portal Values

Table 3-4. Portal Parameters


IP Address User-assigned IP address of an interface

Port TCP port through which the iSCSI protocol passes (usually 3260)

To delete an iSCSI portal:



2. Toggle to the Portals tab.

3. Select desired portal and click Delete.

A dialog box appears asking if you want to delete selected portals. Click Yes to confirmdelete.

IP Routing

To enable communications between the gateway and IP networks located outside thegateway LAN, you must configure IP routing paths for each external network port.

Each Brocade iSCSI Gateway can have only one IP route designated to a specificexternal network, even if there is more than one possible physical path to that network.

Cluster Note:

In a cluster, an IP route must be added to both iSCSI Gateways. In he event of a gatewayt failover, the second gateway will be able to establish communications through he routet and expose the failed gateway’s target LUNs.



49/120


To add an IP route:



2. Toggle to the IP Route tab.

3. Click Add.

The Add IP Route dialog box opens.

Figure 3-14. Add IP Route Dialog Box

4. Enter the routing values (see Table 3-5).

5. You can configure a default gateway for each port, including the management port, forrouting all traffic not otherwise specified in the gateway routing table by using 0.0.0.0for the IP address.

6. Click OK. The Add IP Route dialog box closes. The new IP route is listed in the IP

Route tab.

Table 3-5: IP Routing Parameters


Destination IP Address

IP address of destination networkUse the IP address 0.0.0.0 to create a default gateway

Destination IP Mask IP mask of destination network

Gateway IP address of gateway router

Interface Network interface to open route through


50/120

Cluster Note:

If you are wo king in a cluster, a second Add IP Route dialog box opens for the secondr gateway. The destination IP address and mask as well as the gateway are already listedcannot be changed. Only the network interface port is editable.

In the event o a gateway fai over, the second gateway will be able to establish f lcommunications through he route and expose the fai ed gateway’s target LUNs.t l

Click OK to add the route to the second gateway or Cancel to exclude theroute from the second gateway in the cluster.

Creating a New Cluster

Brocade iSCSI Gateway Manager enables you to easily configure network port IP addresses,iSCSI portals and IP routes simultaneously on both gateways in the cluster.

To add a new cluster from two new gateways:

1. In the Navigation pane, right click on Brocade iSCSI Gateway Manager and select New >Cluster…

Figure 3-15. New Cluster Menu

The New Cluster dialog box opens.



51/120

Figure 3-16 New Cluster Dialog Box.

2. Enter the new cluster alias. Click OK.

3. Add gateways to the cluster (refer to Adding a New )

Brocade ISCSI Gateway Mgr v326 Admin Guide

Documents