Configure FCoE Zoning

Trung bìnhCấp 2Xem xét thủ côngcisco-nxos

Mô tả

Cisco uses a construction called a "VSAN" (analagous to a VLAN) which is used to restrict access between hosts and SAN resources. In restrictive cases, a typical VSAN will include two entries for the two host FCoE interfaces, and two entries for the SAN Controller interfaces (usually an FCoE SAN will have at least two). CIS assessment: Manual. Reported as SKIP with review instructions.

Cách kiểm tra

Phương pháp kiểm tra: Xem xét thủ công

Khuyến nghị này không thể kiểm tra tự động. Lần quét sẽ liệt kê mục này kèm hướng dẫn khi bạn truyền cờ --include-manual.

CIS assessment: Manual. switch# sho vsan 101 vsan 101 information name:HOST_X_SAN_Y state:active interoperability mode:default loadbalancing:src-id/dst-id/oxid operational state:down switch# sho vsan membership vsan 1 interfaces: vsan 100 interfaces: vsan 101 interfaces: vfc1001 vfc1002 vsan 4079(evfp_isolated_vsan) interfaces: vsan 4094(isolated_vsan) interfaces: switch# sho int vfc 1001 vfc1001 is down (Administratively down) Bound MAC is 00:01:0b:00:00:02 Hardware is Ethernet Port WWN is 23:e8:8c:60:4f:a6:29:bf Admin port mode is F, trunk mode is on snmp ...

Cách khắc phục

Phương pháp khắc phục: Hướng dẫn hoặc bản vá hạ tầng

! Create a VSAN. Give it a meaningful name vsan database vsan 101 vsan 101 name HOST_X_SAN_Y Create Virtual Fiber Channel Interfaces. interface vfc 1001 bind mac-address 00:01:0b:00:00:02 int vfc 1002 bind mac-address 00:01:0b:00:00:08 int vfc 1003 bind interface e 1/4 Add VFC interfaces to the VSAN vsan database vsan 101 interface vfc 1001 vsan 101 interface vfc 1002 vsan 101 interface vfc 1003

Thuộc tính

Hệ điều hành: Bất kỳ
Thẻ: cisco-nxosnetworkhardening
Tham chiếu: CIS Cisco NX-OS Benchmark v1.2.0 - 3.5.2 Configure FCoE Zoning