Configuring zoning on a Cisco FC switch

You must assign the switch ports to separate zones to isolate storage (HBA) and controller (FC-VI) traffic.

1. Clear the existing zones and zoneset if present.
   1. Determine which zones and zonesets are active: show zoneset active
      Example

      FC_switch_A_1# show zoneset active
      
      FC_switch_B_1# show zoneset active

   2. Disable the active zonesets identified in the previous step: no zoneset activate name zoneset_name vsan vsan_id
      Example
      The following example shows two zonesets being disabled:

      • ZoneSet_A on FC_switch_A_1 in VSAN 10
      • ZoneSet_B on FC_switch_B_1 in VSAN 20

      FC_switch_A_1# no zoneset activate name ZoneSet_A vsan 10
      
      FC_switch_B_1# no zoneset activate name ZoneSet_B vsan 20

   3. After all zonesets are deactivated, clear the zone database: clear zone database zone-name
      Example

      FC_switch_A_1# clear zone database 10
      FC_switch_A_1# copy running-config startup-config
      
      FC_switch_B_1# clear zone database 20
      FC_switch_B_1# copy running-config startup-config

2. Obtain the switch worldwide name (WWN): show wwn switch
3. Configure the basic zone settings:
   1. Set the default zoning policy to deny: no system default zone default-zone permit
   2. Enable the full zone distribution: system default zone distribute full
   3. Set the default zoning policy for each VSAN: no zone default-zone permit vsanid
   4. Set the default full zone distribution for each VSAN: zoneset distribute full vsanid
      Example

      FC_switch_A_1# conf t
      FC_switch_A_1(config)# no system default zone default-zone permit
      FC_switch_A_1(config)# system default zone distribute full
      FC_switch_A_1(config)# no zone default-zone permit 10
      FC_switch_A_1(config)# no zone default-zone permit 20
      FC_switch_A_1(config)# zoneset distribute full vsan 10
      FC_switch_A_1(config)# zoneset distribute full vsan 20
      FC_switch_A_1(config)# end
      FC_switch_A_1# copy running-config startup-config
      
      FC_switch_B_1# conf t
      FC_switch_B_1(config)# no system default zone default-zone permit
      FC_switch_B_1(config)# system default zone distribute full
      FC_switch_B_1(config)# no zone default-zone permit 10
      FC_switch_B_1(config)# no zone default-zone permit 20
      FC_switch_B_1(config)# zoneset distribute full vsan 10
      FC_switch_B_1(config)# zoneset distribute full vsan 20
      FC_switch_B_1(config)# end
      FC_switch_B_1# copy running-config startup-config

4. Create storage zones and add the storage ports to it.

   These steps only need to be performed on one switch in each fabric.

   Each storage zone contains the HBA initiator ports from all controllers and one single port connecting an FC-to-SAS bridge. Each zone has 9 members.

   1. Create the storage zones by entering the following command: zone name STOR_zone-name vsan vsanid
   2. Add storage ports to the zone by entering the following command: member STOR_zone-name
   3. Activate the zone set by entering the following command: zoneset activate name STOR_zonenameesetname vsan vsanid
   Example

   FC_switch_A_1# conf t
   FC_switch_A_1(config)# zone name STOR_Zone_1_20_25 vsan 20
   FC_switch_A_1(config-zone)# member interface fc1/5 swwn 20:00:00:05:9b:24:cb:78
   FC_switch_A_1(config-zone)# member interface fc1/9 swwn 20:00:00:05:9b:24:cb:78
   FC_switch_A_1(config-zone)# member interface fc1/17 swwn 20:00:00:05:9b:24:cb:78
   FC_switch_A_1(config-zone)# member interface fc1/21 swwn 20:00:00:05:9b:24:cb:78
   FC_switch_A_1(config-zone)# member interface fc1/5 swwn 20:00:00:05:9b:24:12:99
   FC_switch_A_1(config-zone)# member interface fc1/9 swwn 20:00:00:05:9b:24:12:99
   FC_switch_A_1(config-zone)# member interface fc1/17 swwn 20:00:00:05:9b:24:12:99
   FC_switch_A_1(config-zone)# member interface fc1/21 swwn 20:00:00:05:9b:24:12:99
   FC_switch_A_1(config-zone)# member interface fc1/25 swwn 20:00:00:05:9b:24:cb:78
   FC_switch_A_1(config-zone)# end
   FC_switch_A_1# copy running-config startup-config

5. Create an FCVI zone set and add the FCVI ports to it:
   These steps only need to be performed on one switch in the fabric.
   1. Create the FCVI zone set by entering the following command:zoneset name FCVI_zonesetname vsan vsanid
   2. Add FCVI zones to the zone set by entering the following command: member FCVI_zonename
   3. Activate the zone set by entering the following command: zoneset activate name FCVI_zonesetname vsan vsanid
   Example

   FC_switch_A_1# conf t
   FC_switch_A_1(config)# zoneset name FCVI_Zoneset_1_20 vsan 20
   FC_switch_A_1(config-zoneset)# member FCVI_Zone_1_20_25
   FC_switch_A_1(config-zoneset)# member FCVI_Zone_1_20_29
       ...
   FC_switch_A_1(config-zoneset)# exit
   FC_switch_A_1(config)# zoneset activate name FCVI_ZoneSet_1_20 vsan 20
   FC_switch_A_1(config)# exit
   FC_switch_A_1# copy running-config startup-config

6. Verify the zoning:show zone
7. Repeat the previous steps on the second FC switch fabric.