9

Click here to load reader

Cisco San Flash

Embed Size (px)

Citation preview

Page 1: Cisco San Flash

Cisco SAN

When granting restricted access to statically configure iSCSI targets, which 3 things can identify iSCSI initiators? iSCSI node name, IPv4 address and SNM, IPv6 address

What are 3 reasons why a line card module doesn't come online? available port-indices aren't contiguous, insufficient power, insufficient port indices

Why would the fcanalyzer command be used? to non-disruptively capture and decode FC control frames

Which services are supported by AAA configuration Telnet, SSH, FM and DM logins

Which 2 switches are used in small and medium environments? 9124 and 9222i

Which 2nd generation FC module offers 4Gbps full rate on all ports? 12-port 1/2/4Gbps FC module

Which switch has non-field replaceable fans? 9124

Which protocol provides in-band management? IPFC

What is a benefit of using FabMan Software Install Wizard over CLI software upgrade? Upgrading multiple switches in a single procedure

Which 2 options can be used to enable flex-attach when auto-assignment is used? global across all NPV switches and per interface/interface range

What type of information can the Cisco Fabric Analyzer capture and decode? control traffic from anywhere on a switch

At which 2 options can an RMON event manifest itself? log entry, SNMP trap

What should you do if two switches are connected and an E-port doesn't come up due to domain isolation? statically put the domain in VSAN 1 and disruptively restart VSAN 1

What will happen if you are doing an install all and there will be a disruptive impact? Since the data flow will be interrupted, applications should be placed in a paused and consistent state during the upgrade.

What command is used by the Fabric Analyzer to display only SCSI protocol traffic for the whole switch and display to the console? fcanalyzer display-filter fcp-command

What two things need to be configured on a switch to use a PAA? set port speed to corresponding value with PAA setting, put the port in SD mode

What command will enable remote access management using Telnet? int mgmt0, ip address aa.bb.cc.dd. Mm.mm.mm.mm telnet server enable

Page 2: Cisco San Flash

How is encapsulation done in FCIP? an FC frame is encapsulated into an IP packet

What command enables connectivity to a mgmt VSAN via 10.0.0.10 when IPFC in-band management is used?IP route 0.0.0.0 0.0.0.0 10.0.0.10

What command configures VLAN 100 on GE2/1 through which iSCSI servers connect to FC targets?interface GE2/1.100

What ACL permits traffic from 10.0.0.1 to 192.168.20.2 only ip access-list ACL1, permit IP 10.0.0.1 0.0.0.0 192.168.20.2 0.0.0.0

What do you need to create custom reports to monitor MDS switches and the overall health of the SAN? Fabman server with performance manager

What information must be entered in setup mode admin password

Which 2 options do you need to deploy to interconnect MDS (SAN) to Nexus (LAN)? FC expansion module and FC license package

What do you do to connect Nexus 5000 to FC SAN with core PID0 without disruption to existing network? Interop 2 on nexus 5000

What interop mode allows replacement of existing McData with MDS as nondisruptively as possible?interop 4

What must be changed when connecting MDS switch to existing Mcdata switch using interop 4?MDS sWWN must be configured using McData OUI

How do you connect MDS switches to existing Brocade SAN and maintain the existing multivendor SAN and use standard interop mode? Domain IDS between 97 and 127 must be used

Which interop mode allows connection between MDS and Brocade SAN with core pid 0? interop 2

What command allows MDS to connect to Brocade and McData in interop 1 Domain ID =100

What do you need, along with the sWWN needs to be changed in order to connect and MDS switch with a McData at interop 4? Domain ID needs to be between 1 and 31

You have connected an MDS to a McData using VSAN100 using McData OUI, deployed static domain 10 and changed VSAN 10 to interop 4, why is there no connectivity? VSAN 100 needs to be unsuspended

A 9222i is connected to a SAN of 5 32-port brocades. You use interop 3, created vsan 10, and configured fc1/1 as an E-port. There is still no connectivity. Why? BB credits on the 9222i should be set to 16

What should be applied to FC1/1 of a 48-port 8GB/s module if the interface will be an ISL and provide connectivity over a DWDN network? It must be an E or TE-port

What should be verified on an MDS to perform fabric merge without disruption?The Domain IDs shouldn't overlap

Page 3: Cisco San Flash

Which 2 MDS features allow fabric-wide consistent and VSAN independent configurations of zoning information? CFS and Device aliases

When FCIP tunnels traverse the Internet, and IPSEC Is used on the 9222i, what additional license needs to be applied? Enterprise license

If a domain is isolated due to domain overlap what can be done? See if the Domain ID needs to be changed.

When AIX hosts use FC storage, which option ensures the AIX server has connectivity under any condition, even if the MDS switch reboots? Statically assigned FCID

What can be done to ensure that rogue FC switches from connecting to an FC fabric? fabric binding

Which approach should be used to deploy strict logon security on login to host and storage devices?FC port security

In an FC network with iSCSI attached servers and clients in multiple IP networks using a 9222i as an IP gateway. How do you prevent clients from attaching to different iSCSI targets used by other servers? dedicate one Gige interface for servers and restrict those iSCSI targets advertising to the Gige interface

How do you prevent man in the middle attacks? IPSEC

What is the effect of enabling the VSAN scope 500? User is excluded from VSAN 500 only

You have enabled directed requests during Radius AAA. What should the user do in order to authenticate against a specific server? specify username@servername during Telnet login

What is required in order to use the SAN extension tuner tool? SAN extension license

Which option will give you a better compression ration when FCIP compression is used over a slow FC link? MTU size 2300 compression mode 3

IP ACLs can be attached to which two interfaces? VSAN and MGMT0

What are 4 valid protocols for copying software to an MDS switch? SCP, TFTP, FTP, and SFTP

When an ISL is established between a non-Cisco and an E_port on an MDS switch, what is true about the interop behavior between them? Exchange-based load balancing is supported in all interops, only E-ports can connect to non MDS, The non-Cisco switch must have matching FC timers with the VSAN containing the Cisco E-port

Which 2 security protocols are supported in Cisco iSCSI? IPSec and CHAP

What type of port allows a host to join a fabric? F_port

What do you need to know in order to avoid fragmentation when using FCIP? smallest MTU in the path

Page 4: Cisco San Flash

What are 2 environments suggest the use of FCIP write acceleration? PortChannel links between sites and applications that support multiple outstanding I/Os

A host is unable to access the SAN after HBA replacement. Which switch configurations could be preventing access? Port security

When Deploying FC connections from a secure central office to less secure branch offices, which security features allow disabling branch office management ports and still maintain TCP/IP based SAN management utilities? Overlay VSAN

Which 2 logging statements are true? Syslog level (0-7) 0 is most urgent. Callhome level (0-9) 9 is most urgent. Accounting logs can be stored locally and sent to remote AAA servers

Select the correct list of tasks to configure remote spanning (6) 1) create VSAN interface 2) Enable FC tunnel 3) Initiate FC tunnel 4) Configure ST port on source 5) Configure SD port on dest 6)Configure RSPAN session on source switch

MDS switches use what 3 technologies to protect against unauthorized management access?SNMPv3, SSH, RBAC

What is a benefit of enhanced zoning? Fabric is locked during configuration changes

Which 2 options from the tools menu are used to verify connectivity and latency to an FC end device? End-to-End connectivity and FCPing

What 2 commands must be executed in order to change dynamically assigned DID 5 to statically assigned DID 10 for VSAN 10? fcdomain 10 static vsan 10, fcdomain restart disruptive 10

What do you need to know to avoid packet fragmentation in FCIP? smallest MTU in the path

For purposes of granting restricted access to statically config iSCSI virtual targets, what 3 things can identify iSCSI initiators? iSCSI node name, IPv4 address and SNM, IPv6 address

A customer with multiple vendors establishes an ISL between a non-Cisco E-port and an MDS switch. What 3 things are true about interop behavior? Exchange-based load balancing is supported in all interops, only E-ports can connect to non MDS, The non-Cisco switch must have matching FC timers with the VSAN containing the Cisco E-port

Which license is required to implement LUN zoning? Enterprise license

Which FabMan debugging tool compares the current config with a previously saved config?Fabric Configuration Analysis

When configuring an inter-VSAN routing topology, what type of WWN is used? sWWN

In a multi-switch fabric with switches A and B, zoneset 1 is created and activated on switch A and zoneset 2 is later created on switch B. What happens with zoneset 2 is activated? Zoneset 2 becomes the active zoneset for both switches

Page 5: Cisco San Flash

You are implementing an FCIP solution to extend SAN between data centers. There are 2 metro Enet paths between them. How do you specify primary and secondary paths for each FCIP tunnel?

Using FSPF costs on the switch

Which 3 things should be configured to allow telnet access? assign admin password, configure IP and SNM for mgmt0

After initial switch config, you notice ports connecting switches come up as E-Ports and not TE-Ports. What mistake did you make? Default switch port trunk mode is set to auto

What are 3 valid FC topologies? point to point, arbitrated loop, switched fabric

What are 3 attributes of a Cisco SET? only SCSI read/write commands are supported, SET initiators can only communicate with SET targets, SET requires SAN-OS 2.0 or higher and San Extension IP license

The call home feature provides what type of notification when critical events occur? E-mail

The Cisco Traffic Analyzer is required to gather historical data for what type of information? SCSI session data

What does this command do? Int vsan1, ip address 1.1.1.1 255.255.255.0, no shut Creates an IPFC interface

Which 3 upper-level protocols are supported by FC-4? HIPPI , SBCCS, and SCSI

What are 2 advantages to using static DIDs? facilitates troubleshooting and ensures persistent FCIDs will not change

What are 3 things that allow or enable non-disruptive upgrades? dual supervisors, the install-all command, installing a license

When you install an MDS switch and accept all installation defaults, what occurs? default port state is shut and default zone policy is deny

What are 3 CLI commands that allows viewing B2B credits? sh int fcx/y, sh int fcx/y counters, and sh int fcx/y bbcredit

What does an orange status LED indicate? The module is booting or running diagnostics

When installing the Port Analyzer Adaptor (PAA) how do you connect the FC port to the MDS switch?multimode fiber and LC to LC connector

Which module performs hardware compression using mode 1? MPS 14/2

What is the DID range for interop modes? 97 to 127

What 2 procedures should you perform to troubleshoot connectivity between a Windows host and SAN-attached storage? Check disk manager to see if the storage is available and check the Cisco Device Manager to verify that the HBA link is up

Page 6: Cisco San Flash

What command determines the number of frames exiting FC2/6? sh int counters br

Which command(s) disables CHAP for a specific interface? int g2/1, iSCSI authentication none

IVR can work with other vendor switches as long as MDS is set to interop 1. Where in the fabric can the non-MDS reside for successful IVR? edge switches

Which tool diagnoses protocol errors, credit starvation, and malformed or nonstandard frames or primitives on an FC network? External FC protocol analyzer

If your MDS director has 224 FC ports and 2 power supplies running on 110v, what may occur if one PS fails? there will be insufficient power for all modules, so some will be shut down.

what command sends system messages to a remote syslog server? logging server 192.168.0.198 facility SANlog

What protocol can be used in a multivendor environment to enable greater BW between MDS in interop and a non-Cisco FC switch? FSPF

If you want to set up a SPAN tunnel between switcha and switchb, which 3 things are needed?trunking must be enabled between switcha and switchb, VSAN interfaces must be

configured, IP routing must be enabled on each switch

What does this line mean in the running-config? Int vsan 1, ip addr 1.1.1.1 255.255.255.0, no shuta management VSAN on the switch

If a role to permit operations in multiple VSANs has been created for a VSAN admin, what is correct?The VSAN admin can change VSAN membership of F or FL ports among these VSANs.

"Error disabled - possible port channel misconfiguration" What 3 things should you verify in the port-channel configuration? 1. each switch on either side of the Port-Channel is connected to the same number of interfaces, 2. each ISL belongs to the same VSAN, 3. the links in the port-channel weren't changed after the port-channel was configured.

What are 3 characteristics of an SD port? 1. ignores b2b credits, 2. doesn't require a device or an analyzer to be physically connected, 3. port mode can't be changed if it is being used for a SPAN session

IF the optional slot is populated with a 16-port line card, which 2 FCIP security mechanisms can be used by a 9216i? VLAN trunking, IPSec encryption

Which MDS feature is defined by standards that enable various network monitors and console systems to exchange network monitoring data? RMON

Host1 and storage1 are in VSAN 10 and storage2 is in vsan 20. An IVR zoneset enabling host1 and storage 2 to communicate is enabled and host 1 lost connectivity to storage1. What happened? The default zone policy for vsan 10 is set to permit

What information does the sh flogi database command provide? verifies connectivity for attached devices

Page 7: Cisco San Flash

If you set up a session to the SD_Port to investigate a problem on an FC port and you want to check setup for the desired port, which command is used? sh span session