Archive for May, 2010

SCADA

SCADA – Supervisory Control And Data Acquisition.

It’s a control system, a computer system for monitoring and process control. The process can be an infrastructure such as electrical power transmission and distribution.

SCADA is not a specific technology or protocol but refers to a type of application where data is collected from a system in order to control that system.

SCADA Functions:
1. Data Acquisition
2. Data Communication
3. Data Presentation
4. Control

SCADA System Components:

IEEE MAC Address

Section 9.2 of IEEE 802-2001 specification describes the 48-bit universal LAN MAC address, Media Access Control address (Hardware Network Address). The first 24 bits, starting from bit 0 (LSB) to bit 23, is the Organization Unique Identifier (OUI) and is assigned by IEEE if the 2nd LSB (U/L) is set to 0.

• If bit 0 (I/G) is set to 0 then the MAC address is an individual address, identify the destination address as an individual address.
• If bit 0 (I/G) is set to 1 then the MAC address is identify as one or more destination address, broadcast address.
• If bit 1 (2nd bit) is set to 0 then the MAC address is Universally administered address (IEEE).
• If bit 1 (2nd bit) is set to 1 then the MAC address is been locally administered.

Cisco Nexus 5000 Cheat Sheet

Misc. Nexus 5000 tasks

Configuring Dynamic Link Aggregation (LACP) 802.1ad

First, turn on the LACP feature/module
In configuration mode
1. feature lacp

On the interfaces to be bound
1. Interface eth [slot/port]
2. Channel-group [number] mode active/passive
Active is advertising Aggregation
Passive is willing to do Aggregation
3. Interface portchannel [number]
4. Whatever interface commands you want to run
Ex. int eth1/30,31,32
Channel-group 1 mode active
Int portchannel1
Switchport mode access

Configuring Static Aggregation
Same as above except with command “channel-group 1 mode on”

Finding the port a host is connected when what you know is the MAC address
show mac-address-table
Displays CAM table information

show mac-address-table address [macaddress]
ex. show mac-address-table address 001a.34d3.21ff

Connecting an initiator for FCoE traffic
1. interface ethernet [slot/port]
ex. interface ethernet 1/20
goes into interface configuration mode
1a. Set the priority-flow-control mode and fcoe mode
priority-flow-control mode [on|auto]
fcoe mode [on|auto]

2. no shutdown
Turns ethernet port on
3. interface vfc [port]
ex. interface vfc 20
Goes into virtual fc interface configuration mode
4. bind interface ethernet [slot/port]
ex. bind interface ethernet 1/20
Binds ethernet interface to the virtual fibrechannel port
5. no shutdown
Turns virtual fibrechannelsport on

Changing priority group of FCoE traffic
1. class-map class-fcoe
Calls up the fcoe traffic object class
2. match cos [0…7]
changes the priority group to the one specified

Selecting a range of ports for configuration
int [fibrechannel|Ethernet|vfc] [slot/starting.port] – [end.port]
ex. int fibrechannel 3/1 – 4
Goes into configuration mode fibrechannel ports 3/1 to 3/4

Commands done in interface range configuration mode

Changing speed (fibrechannel)
switchport speed [1000|2000|4000|auto]
ex. switchport speed 2000
sets fibrechannel speed to 2gigabits per second

Bringing port up and down
shutdown
shuts the port off
no shutdown
turns the port on

Setting up zone/zonesets

1. Create zone in virtual storage network 1
Zone name [name] vsan 1

2. Add members to zone
Member [PWWN, FCAlias]

3. Add zone to zoneset
Zoneset name

Activating Zoneset

Zoneset activate name [zonesetname] vsan [vsan#]

Creating FC-Aliases

Enabling display of debug and log messages

terminal monitor

terminal no monitor
Disables display of debug and log messages

Configuring SPAN (Switch Port ANalyzer) Data replication from port to port
Very handy for when wireshark is not working properly
Such as in 2003 and trying to see FCOE traffic
This is how you replicate data from vfc 20/1 and send it to Ethernet 1/31. Done on Nexus 5020

The following set up only allows Ethernet traffic to be replicated, no FC traffic ie, no FLOGI, PLOGI SCSI. It will replicate data from the vfc 20/1 interface and send it to eth1/31:

monitor session 1
destination interface eth1/31
source interface vfc 20/1

In order to replicate the FC traffic on this link, the Ethernet port cannot be bound in a Virtual Interface Group (vig). And in interface configuration, the port has to be cofigured as a SPAN destination as below:

Interface eth1/31
Switchport monitor