Introduction of icic-config storage fc-zone zone-masking command tool

The icic-config storage fc-zone zone-masking command is used to create a list of target (storage provider) WWPNs that are zoned, or not, with the initiator NPIV WWNs from IBM Z or LinuxONE® LPAR.

Location

The command can be found under /usr/bin/ of the management node.

/usr/bin/icic-config

Prerequisites

The storage provider should have been added into the IBM Cloud Infrastructure Center, already. The zone masking should be setup prior to any volumes attached in the IBM Cloud Infrastructure Center.

Common usage scenarios

  1. After connecting a fabric to the storage provider, you only want specified target (storage provider) WWPNs instead of all the WWPNs that are zoned with the source NPIV WWNs of a virtual machine. Use the icic-config storage fc-zone zone-masking --allowlist command to configure the allowlist.

  2. After connecting a fabric to storage provider, you do not want specified target (storage provider) WWPNs that are zoned with the source NPIV WWNs of a virtual machine. Use the icic-config storage fc-zone zone-masking --blocklist command to configure the blocklist.

Note

  1. When there is both an allowlist and a blocklist for a storage provider, the allowlist supersedes the blocklist. That means, the blocklist is not taking effect when there is also an allowlist for the same storage provider. The blocklist is taking effect when there is no allowlist for the same storage provider.

  2. The corresponding storage provider service must be restarted to pick up the configuration changes. If not, add --restart when configuring the zone-masking.

Invocation examples

An example of configuring allowlist for a storage provider (ds8k60c1)

[root@kvmcore206 ~]# icic-config storage fc-zone zone-masking --storageHost ds8k60c1 --allowlist 5005076306085388 5005076306135388 --add --restart
Checking configuration file on management node:
Arguments ['5005076306135388', '5005076306085388'] has been successfully added to the configuration: icic_target_wwpn_allowlist.
 Previous values: None
 New values: 5005076306085388,5005076306135388
Restart of openstack-cinder-volume-ds8k60c1 service requested.

An example of show allowlist for a storage provider (ds8k60c1)

[root@kvmcore206 ~]# icic-config storage fc-zone zone-masking --storageHost ds8k60c1 --allowlist
Checking configuration file on management node:
Current icic_target_wwpn_allowlist values: 5005076306085388,5005076306135388

An example of remove port in allowlist for a storage provider (ds8k60c1)

[root@kvmcore206 ~]# icic-config storage fc-zone zone-masking --storageHost ds8k60c1 --allowlist 5005076306085388 --remove --restart
Checking configuration file on management node:
Arguments ['5005076306085388'] has been successfully removed from the configuration: icic_target_wwpn_allowlist
 Previous values: 5005076306085388,5005076306135388
 New values: 5005076306135388
Restart of openstack-cinder-volume-ds8k60c1 service requested.

An example of configuring blocklist for a storage provider (ds8k60c1)

[root@kvmcore206 ~]# icic-config storage fc-zone zone-masking --storageHost ds8k60c1 --blocklist 5005076306085388 --add --restart
Checking configuration file on management node:
Arguments ['5005076306085388'] has been successfully added to the configuration: icic_target_wwpn_blocklist.
 Previous values: None
 New values: 5005076306085388
Restart of openstack-cinder-volume-ds8k60c1 service requested.

An example of show blocklist for a storage provider (ds8k60c1)

[root@kvmcore206 ~]# icic-config storage fc-zone zone-masking --storageHost ds8k60c1 --blocklist
Checking configuration file on management node:
Current icic_target_wwpn_blocklist values: 5005076306085388

An example of remove blocklist for a storage provider (ds8k60c1)

[root@kvmcore206 ~]# icic-config storage fc-zone zone-masking --storageHost ds8k60c1 --blocklist 5005076306085388 --remove --restart
Checking configuration file on management node:
No arguments are left, configuration: icic_target_wwpn_blocklist will be removed.
Restart of openstack-cinder-volume-ds8k60c1 service requested.