Trying to find and disable a switch WWN

[jimik]

Hello

I have an issue where my SAN nodes are logging around 300k logout/login messages per hour.

The bulk of these messages relate to a wwn starting with 21:fd:xx:xx:xx:xx:xx:xx but I cannot find this anywhere on the actual switch itself.

When running 'nsshow' from the switch CLI I can see that all responses have the same last 6 octets (ie xx:xx:xx:xx:xx:xx from above) but they begin with things tlike 20:01 20:08, etc.

This is obviously based on the Brocade portthat things are connected to.

For the life of me, I cannot find any reference to anything starting with 21:fd:..........

Ihave tried running the QLogic utility on my SAN nodes that run Win 2012 R2 but haven't been able to get that to work for some reason.

Ideally, I would like to identofy what this wwn refers to, whether it is necessary and (ultimately) how to fix and/or deactivte this from my SAN nodes.

Can someone point me in the right direction here as this is definitely having a performance impact.

Thank you

Jim

[alexey.stepanov]

Do you see anything in the fabriclog? Do you have NPIV and/or AG devices in your fabric?

[jimik]

Hi Alexey

To keep it simple we have a number of blade servers in a Dell blade chassis.
The first FC port in each blade goes through the 'A' Fiber switch on the chassis to the switch I am referring to through to the A SAN node.
All items are discrete and no fabrics have been created.
There is NPIV between the switch on the blade chassis and the standalone switch.
However almost all of the errors are between the SAN node and the switch, not the switch and the blade chassis.
Here is an excerpt of my fabriclog:

09:16:02.216420 SCN LR_PORT (0);g=0x36 D2,P0 D2,P0 23 NA
09:16:02.340892 SCN Port Online;g=0x36 D2,P0 D2,P1 23 NA
09:16:02.349139 Send ELP requesting VC RDY + ARB mode D2,P1 D2,P1 23 NA
09:16:02.349499 *ELP Send:rev=2,flow=1,flen=80,size=164 D2,P1 D2,P1 23 0x704
09:16:02.349611 TA_SCN Port Offline D2,P1 D2,P0 23 NA
09:16:02.354346 TA_SCN Port Offline D2,P0 D2,P0 23 NA
09:16:02.359802 SCN Port Offline;g=0x2e0 D2,P0 D2,P0 23 NA
09:16:02.359822 *Removing all nodes from port D2,P0 D2,P0 23 NA
09:16:07.947783 SCN LR_PORT (0);g=0x2e0 D2,P0 D2,P0 23 NA
09:16:08.080760 SCN Port Online;g=0x2e0 D2,P0 D2,P1 23 NA
09:16:08.087582 Send ELP requesting VC RDY + ARB mode D2,P1 D2,P1 23 NA
09:16:08.087942 *ELP Send:rev=2,flow=1,flen=80,size=164 D2,P1 D2,P1 23 0xa1c
09:16:08.088053 TA_SCN Port Offline D2,P1 D2,P0 23 NA
09:16:08.095257 TA_SCN Port Offline D2,P0 D2,P0 23 NA
09:16:08.100195 SCN Port Offline;g=0x2e2 D2,P0 D2,P0 23 NA
09:16:08.100215 *Removing all nodes from port D2,P0 D2,P0 23 NA
09:16:54.588456 SCN LR_PORT (0);g=0x2e2 D2,P0 D2,P0 23 NA
09:16:54.714253 TA_SCN Port Offline D2,P0 D2,P0 23 NA
09:18:08.765774 SCN LR_PORT (0);g=0x2de D2,P0 D2,P0 21 NA
09:18:08.900833 SCN Port Online;g=0x2de D2,P0 D2,P1 21 NA
09:18:08.906441 Send ELP requesting VC RDY + ARB mode D2,P1 D2,P1 21 NA
09:18:08.906804 *ELP Send:rev=2,flow=1,flen=80,size=164 D2,P1 D2,P1 21 0x75d
09:18:08.906916 TA_SCN Port Offline D2,P1 D2,P0 21 NA
09:18:08.914068 TA_SCN Port Offline D2,P0 D2,P0 21 NA
09:18:08.920319 SCN Port Offline;g=0x2e4 D2,P0 D2,P0 21 NA
09:18:08.920633 *Removing all nodes from port D2,P0 D2,P0 21 NA
09:38:34.546991 SCN LR_PORT (0);g=0x2e2 D2,P0 D2,P0 23 NA
09:38:34.680863 SCN Port Online;g=0x2e2 D2,P0 D2,P1 23 NA
09:38:34.685222 Send ELP requesting VC RDY + ARB mode D2,P1 D2,P1 23 NA
09:38:34.685753 *ELP Send:rev=2,flow=1,flen=80,size=164 D2,P1 D2,P1 23 0x44b
09:38:34.687450 ELP RJT Rcv, ct prfrm, no exp D2,P1 D2,P1 23 0x44b
09:38:34.688609 SCN LR_PORT (1);g=0x2e2 D2,P1 D2,P1 23 NA
09:38:34.728672 *Removing all nodes from port D2,P0 D2,P0 23 NA
09:38:34.728762 SCN Port F_PORT D2,P1 D2,P0 23 NA
Number of entries: 1024
Max number of entries: 1024

[jimik]

And here is the result of switchshow:

switchType: 32.0
switchState: Online
switchMode: Native
switchRole: Principal
switchDomain: 1
switchId: fffc01
switchWwn: 10:00:00:05:1e:02:3c:26
zoning: OFF
switchBeacon: OFF
FC Router: OFF
FC Router BB Fabric ID: 1
Address Mode: 0

Index Port Address Media Speed State Proto
==============================================
0 0 010000 id N4 Online FC F-Port 21:00:00:24:ff:67:92:c9
1 1 010100 id N4 Online FC F-Port 21:00:00:24:ff:67:92:cb
2 2 010200 id N4 Online FC F-Port 21:00:00:24:ff:67:92:ca
3 3 010300 id N4 Online FC F-Port 21:00:00:24:ff:67:92:8f
4 4 010400 id N4 Online FC F-Port 21:00:00:24:ff:67:92:8d
5 5 010500 id N4 No_Light FC
6 6 010600 id N4 No_Light FC
7 7 010700 id N4 No_Light FC
8 8 010800 id N4 Online FC F-Port 1 N Port + 2 NPIV public
9 9 010900 id N4 No_Light FC
10 10 010a00 id N4 Online FC F-Port 1 N Port + 2 NPIV public
11 11 010b00 id N4 No_Light FC
12 12 010c00 id N4 Online FC F-Port 1 N Port + 2 NPIV public
13 13 010d00 id N4 Online FC F-Port 1 N Port + 2 NPIV public
14 14 010e00 id N4 Online FC F-Port 20:16:00:05:1e:0d:bc:9d
15 15 010f00 id N4 Online FC F-Port 1 N Port + 1 NPIV public
16 16 011000 id N4 Online FC F-Port 20:16:00:05:1e:bd:45:b5
17 17 011100 id N4 Online FC F-Port 1 N Port + 2 NPIV public
18 18 011200 id N4 No_Light FC
19 19 011300 id N4 Online FC F-Port 20:15:00:05:1e:0d:bc:9d
20 20 011400 id N4 Online FC F-Port 1 N Port + 2 NPIV public
21 21 011500 id N4 No_Light FC
22 22 011600 id N4 No_Light FC
23 23 011700 id N4 Online FC F-Port 20:14:00:05:1e:bd:45:b5
24 24 011800 id N4 Online FC F-Port 21:00:00:1b:32:04:0d:ce
25 25 011900 id N4 Online FC F-Port 21:00:00:1b:32:84:c9:47
26 26 011a00 id N4 Online FC F-Port 21:00:00:1b:32:0f:46:f7
27 27 011b00 id N4 Online FC F-Port 21:00:00:1b:32:13:0d:a7
28 28 011c00 id N4 No_Light FC
29 29 011d00 id N4 No_Light FC
30 30 011e00 id N4 No_Light FC
31 31 011f00 id N4 No_Light FC

[alexey.stepanov]

Sorry I don't get your config from explanations...

Could you please also clarify if the switchshow and fabriclog above are collected on the same switch?

[jimik]

Yes both switchshow and fabricshow are from the same switch.

[alexey.stepanov]

Then I think I know what is wrong. See the fabriclog shows some activity on ports 21 and 23. But port 21 is offline on the switch.

[jimik]

Hi Alexey

I permanently disabled those ports, but I don't believe that was the issue.

My switch has a wwn of 10:00:00:05:1e:02:3c:26

All ports on the switch have a fabric port name of 21:xx:00:05:1e:02:3c:26 (from nsshow command)

The port/ww/whatever I am looking for has a wwn of 21:fd:00:05:1e:02:3c:26

This phantom wwn is attempting to login to my SAN at the rate of around 300k times per hour.

This is creating a lot of 'noise' on my SAN and affecting performance.

As a result, I am trying to figure out what this is and (if it can be done safely) disable it.

I had a feeling this may have something to do with the Name Server but have had no success in finding it.

Do you have any advice on this one?

Thank you

Jim

[alexey.stepanov]

Sorry, but I don't know. You are trying to use very new OS and apparently recent HBAs with the very old Brocade 4100 switch which is end of life for a few years now. Nobody tested this combination and thus the results are unpredictable.

[jimik]

Thank you Alexey.

I appreciate your effort.

Enjoy the rest of your day/night