NetBackup IT Analytics Data Collector Installation Guide for Fabric Manager

The following are the prerequisites to collect for Switch Details probe: TCP port 22 (all SAN switches)

1. Use IP address of the principal switch only - one principal switch per policy while configuring the Brocade policy.

2. The following list of commands must be accessible:

   fabricshow, lscfg --show -n, switchshow, dnsConfig -show, bannershow, uptime, portshow -i %min-index%-%max-index% -f, ipaddrshow, chassisshow, trunkshow, fanshow, psshow, sfpshow -all, nsshow -t, zoneshow, configure -show, fabricPrincipal --show, sensorshow, haShow, firmwareshow, islshow, errdump, agshow, ag -show, licenseshow, configshow, mapsdb -show, seccertmgmt show -cert https, ldapcfg -show, userconfig --show -a, seccertutil show, license -show

3. Minimum role required is switchadmin with default permissions for all RBAC classes for the Home LF and Chassis Roles:

   	Home LF Role	Chassis Role	Remarks
   Option-1	switchadmin (default RBAC)	switchadmin (default RBAC)	Works for most deployments, excluding AD and User config data collection (ldapcfg - show & userconfig --show -a will not work and data collection will end with warnings)
   Option-2	switchadmin (default RBAC)	admin (default RBAC)	Required for deployments, excluding User config data collection (userconfig --show -a will not work and data collection will end with warnings).
   Option-3	admin (default RBAC)	admin (default RBAC)	Covers complete data collection (all commands will be executed, without warnings)

4. If a physical switch chassis is shared between multiple fabrics, create a single NetBackup IT Analytics Data Collector policy (including single principal switch) to avoid overlap. For example, the usplsansw510 & usplsansw520 are considered "shared" physical chassis.

The following are the prerequisites to collect FC Port Statistics using SNMP: UDP port 161 must be accessible from the Data Collector:

1. This account must have a home Virtual Fabric and access to a list of Virtual Fabric IDs.

   • The minimum role required is switchadmin with default set of permissions for all RBAC classes.

   • It is possible to leverage the switchadmin or admin user configured for Switch details data collection as long as that user exists on all switches within the fabric (if shared, all fabrics), it has necessary SNMP privileges assigned and the username matches the SNMP v3 account.

2. This account name must match the SNMP V3 username (= SNMP v3 account mentioned in the below section) and comes in addition to the CLI/SSH account used by Switch details probe.

3. To retrieve FC Port Statistics from Brocade virtual fabrics / virtual switches:

   • Create a dedicated CLI user account with a role such that it has access to all virtual fabrics.

     • Add the user with the command:

       userconfig --add <snmp_user> -r <role> -l <list_of_virtual_fabric_ids> -h <home_fabric> -c <chassis_role>

     • If the user already exists, use:

       userconfig --addlf <snmp_user> -l <list_of_virtual_fabrics_ids> -r <role>

4. Configure SNMP (Version 1, 2c or 3) on all the switches:

   • Set the IP address or Subnet in the SNMP access control on all the switches.

   • Configure SNMP v3 account on all the switches.

   • Security Level of v3 (AuthNoPriv, noAuthNoPriv)

5. The following OIDs must be accessible to the SNMP user:

   OIDs for IF-MIB		ifIndex, ifHCOutOctets, ifHCInOctets
   OIDs for FCMGMT-MID		connUnitPortIndex, connUnitPortStatIndex, connUnitPortNodeWwn, connUnitPortStatCountFBSYFrames, connUnitPortStatCountPBSYFrames, connUnitPortStatCountFRJTFrames, connUnitPortStatCountPRJTFrames, connUnitPortStatCountClass1RxFrames, connUnitPortStatCountClass2RxFrames, connUnitPortStatCountClass3RxFrames, connUnitPortStatCountClass3Discards, connUnitPortStatCountRxMulticastObjects, connUnitPortStatCountTxMulticastObjects, connUnitPortStatCountRxLinkResets, connUnitPortStatCountTxLinkResets, connUnitPortStatCountRxOfflineSequences, connUnitPortStatCountTxOfflineSequences, connUnitPortStatCountLinkFailures, connUnitPortStatCountTxObjects, connUnitPortStatCountInvalidCRC, connUnitPortStatCountInvalidTxWords, connUnitPortStatCountPrimitiveSequenceProtocolErrors, connUnitPortStatCountLossofSignal, connUnitPortStatCountLossofSynchronization, connUnitPortStatCountInvalidOrderedSets, connUnitPortStatCountFramesTooLong, connUnitPortStatCountFramesTruncated, connUnitPortStatCountAddressErrors, connUnitPortStatCountDelimiterErrors, connUnitPortStatCountRxObjects, connUnitPortStatCountEncodingDisparityErrors, connUnitPortStatCountBBCreditZero, connUnitPortStatCountInputBuffersFull
   OIDs for SW-MIB		swFCPortIndex, swConnUnitBadEOF, swConnUnitLCRX, swFCPortTxWords, swFCPortRxWords, swFCPortTxFrames, swFCPortRxFrames, swFCPortTooManyRdys, swFCPortNoTxCredits, swFCPortRxEncInFrs, swFCPortRxCrcs, swFCPortRxTruncs, swFCPortRxTooLongs, swFCPortRxBadEofs, swFCPortRxEncOutFrs, swFCPortC3Discards, swFCPortMcastTimedOuts

6. Access to MIBs can be checked using snmpconfig --show mibcapability command as follows:

   • snmpconfig -snmpconfig --show snmpv3 shows the configured user with auth and priv protocol.

   • snmpconfig-show accesscontrol shows access list configuration.

   • snmpconfig --set accesscontrol asks prompts to update accesscontrol list and add collector IP or subnet.

   • snmpconfig -show mibcapability must show sw-mib, if-mib, and fcmgmt-mib as enabled.