Configure FCoE Zoning

보통레벨 2수동 검토cisco-nxos

설명

Cisco uses a construction called a "VSAN" (analagous to a VLAN) which is used to restrict access between hosts and SAN resources. In restrictive cases, a typical VSAN will include two entries for the two host FCoE interfaces, and two entries for the SAN Controller interfaces (usually an FCoE SAN will have at least two). CIS assessment: Manual. Reported as SKIP with review instructions.

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

CIS assessment: Manual. switch# sho vsan 101 vsan 101 information name:HOST_X_SAN_Y state:active interoperability mode:default loadbalancing:src-id/dst-id/oxid operational state:down switch# sho vsan membership vsan 1 interfaces: vsan 100 interfaces: vsan 101 interfaces: vfc1001 vfc1002 vsan 4079(evfp_isolated_vsan) interfaces: vsan 4094(isolated_vsan) interfaces: switch# sho int vfc 1001 vfc1001 is down (Administratively down) Bound MAC is 00:01:0b:00:00:02 Hardware is Ethernet Port WWN is 23:e8:8c:60:4f:a6:29:bf Admin port mode is F, trunk mode is on snmp ...

조치 방법

조치 방식: 가이드 또는 인프라 패치

! Create a VSAN. Give it a meaningful name vsan database vsan 101 vsan 101 name HOST_X_SAN_Y Create Virtual Fiber Channel Interfaces. interface vfc 1001 bind mac-address 00:01:0b:00:00:02 int vfc 1002 bind mac-address 00:01:0b:00:00:08 int vfc 1003 bind interface e 1/4 Add VFC interfaces to the VSAN vsan database vsan 101 interface vfc 1001 vsan 101 interface vfc 1002 vsan 101 interface vfc 1003

속성

운영 체제: 모두
태그: cisco-nxosnetworkhardening
참고 자료: CIS Cisco NX-OS Benchmark v1.2.0 - 3.5.2 Configure FCoE Zoning