Brocade Communications Systems 8/80 Manuel de service Page 66
- Page / 133
- Table des matières
- MARQUE LIVRES
Noté. / 5. Basé sur avis des utilisateurs
42 Fabric Watch Administrator’s Guide
53-1002153-01
Security monitoring guidelines and default settings
6
Security monitoring guidelines and default settings
The Security class monitors all attempts to breach your SAN security, helping you fine-tune your
security measures.
Security class areas
Table 5 lists Product Name areas in the Security class and describes what each area indicates.
Although it is recommended that you leave the entire Security class in its default state (no alerts),
you can configure the Security class using the thConfig command.
Security monitoring default settings
Use the Security class default settings shown in Table 6 for area and notification configuration.
There is no reason to alter the default settings.
TABLE 5 Security class areas
Area Description
DCC violations (DV) An unauthorized device attempts to log in to a secure fabric.
HTTP violations (HV) A browser access request reaches a secure switch from an unauthorized IP address.
Illegal command (IV) Commands permitted only to the primary Fibre Channel Switch (FCS) are executed on
another switch.
Incompatible security
DB (ISB)
Secure switches with different version stamps have been detected.
Login violations (LV) Login violations which occur when a secure fabric detects a login failure.
Invalid Certifications (IC)
No-FCS (NF) The switch has lost contact with the primary FCS.
SCC violations (SV) SCC violations which occur when an unauthorized switch tries to join a secure fabric.
The WWN of the unauthorized switch appears in the ERRLOG.
SLAP failures (FSLAP) SLAP failures which occur when packets try to pass from a nonsecure switch to a
secure fabric.
Telnet violations (TV) Telnet violations which occur when a Telnet connection request reaches a secure
switch from an unauthorized IP address.
TS out of sync (TS) Time Server (TS) which occur when an out-of-synchronization error has been detected.
- PRIMERGY 1
- 本書をお読みになる前に 2
- Document History 5
- Contents 7
- Chapter 7 Port Monitoring 10
- Chapter 8 System Monitoring 10
- About This Document 17
- What’s new in this document 19
- Document conventions 20
- Additional information 21
- Getting technical help 22
- Document feedback 23
- Fabric Watch 25
- Fabric Watch overview 26
- Role-based access control 26
- Fabric Watch licensing 26
- Monitoring 27
- Event behavior configuration 28
- Time base configuration 28
- Alert configuration 28
- Post-processing of messages 28
- Switch monitoring components 29
- Security monitoring 30
- SFP monitoring 30
- Port monitoring 30
- Port persistence 31
- Port fencing 31
- Logical switch support 32
- Fabric Watch event settings 33
- Triggered event behavior 34
- E-mail alert 35
- SNMP traps 35
- Fabric Watch audit messages 36
- Data values 37
- Fabric Watch Thresholds 39
- In-between buffer values 40
- Audit and RASlog messages 40
- Time bases 41
- Threshold triggers 42
- Fabric Watch alarm behavior 43
- Elements 46
- Class Description 47
- Fabric Watch Activation 49
- FIGURE 6 Example OID tree 53
- Fabric Watch Configuration 55
- Disabling an e-mail alert 58
- Enabling an e-mail alert 58
- Sending a test e-mail message 59
- Notification configuration 60
- FW: Alarms are enabled 61
- Area Description 64
- Fabric class default settings 65
- Security class areas 66
- Threshold state 67
- SFP class areas 69
- • Send an SNMP alarm 72
- • Log a RASlog message 72
- • Send an e-mail alert 72
- Configuration recommendation 73
- 16 Gbps and QSFP monitoring 74
- Monitoring the SFP and QSFP 75
- Security classes 78
- Port Monitoring 81
- Port class default settings 83
- Port configuration 84
- Port type: physical port 85
- E_Port class default settings 88
- • Area: Loss of Signal Count 90
- • Area: Link Reset 90
- Port fencing configuration 95
- Port fencing requirements 96
- Enabling port fencing 96
- Disabling port fencing 96
- • Link Reset (Fabric OS only) 97
- • Security (M-EOS) 97
- 53-1002153-01 100
- System Monitoring 101
- Resource class settings 103
- Using the nosave command 104
- Environment class settings 105
- CPU and memory 106
- Switch monitoring 107
- Switch status policy planning 108
- FRU monitoring 109
- FRU class areas 110
- Configuring FRUs 110
- Recommended FRU settings 111
- In this chapter 113
- System Monitor 114
- Configuring threshold traits 115
- Configuring threshold alarms 116
- Configuring alarms for FRUs 118
- Configuring alarm filters 118
- Displaying alarms 119
- E-mail notification 120
- Disabling the e-mail alert 121
- Fabric Watch Reports 123
- Switch Health report 125
- Switch Status Policy report 126
- Port Detail report 127
- Report item Description 128
- CA92344-0161-01 133
Produits connexes et manuels pour Commutateurs de réseau Brocade Communications Systems 8/80
(21 pages)© 2020, manymanuals.fr. Tous droits réservés | 0.758 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Commentaires sur ces manuels