Enable FSCP feature failed

[MENG YUAN HSIEH]

Hi experts,

We are try to enable fcsp feature. But console show "ERROR: service not found". What's problem is?

Best regards,

Meng-Yuan Hsieh (Nick)

[Walter Dey]

Hi Nick

Most likely the hardware you have doesn't support this feature !

Walter.

[MENG YUAN HSIEH]

Our device is MDS9250i. We can found FC-SP in data sheet.

[Walter Dey]

Is this a new license that you installed on this 9250i ?

If yes, I would open a TAC case

What is the output of

switch# show license brief

switch# show license usage ENTERPRISE_PKG

[MENG YUAN HSIEH]

[Walter Dey]

Hi Meng

Strange ! did you install the license ?

switch# install license bootflash:license_file.lic
Installing license ..done

[MENG YUAN HSIEH]

Is license problem?

[Walter Dey]

Q. Do I understand you correctly: you want Cisco TrustSec FC Link Encryption ?

If yes

http://www.cisco.com/c/en/us/td/docs/switches/datacenter/mds9000/sw/6_2/configuration/guides/security/nx-os/sec_cli_6-x/fctrstsec.html
The following modules are supported for the Cisco TrustSec FC Link Encryption feature:

    2/4/8/10/16 Gbps 48-ports Advanced Fibre Channel module (DS-X9448-768K9)
    32-port 8-Gbps Advanced Fibre Channel Switching module (DS-X9232-256K9)
    48-port 8-Gbps Advanced Fibre Channel Switching module (DS-X9248-256K9)
    1/2/4/8 Gbps 24-Port Fibre Channel switching module (DS-X9224-96K9)
    1/2/4/8 Gbps 48-Port Fibre Channel switching module (DS-X9248-96K9)
    1/2/4/8 Gbps 4/44-Port Fibre Channel switching module (DS-X9248-48K9)
    2/4/8/10/16 Gbps 96-ports Fibre Channel Switching Module (DS-C9396S-K9)

----------------------------------------------------------------------------------------------------------------------------------------------------------------

The Cisco MDS 9250i supports hardware-based IPsec encryption for secure transmission of sensitive data over extended
distances. Hardware enablement of IPsec helps ensure high throughput. Used together, hardware-based compression
and hardware-based encryption provide high-performance, highly secure SAN extension capabilities.

Comprehensive IPsec protocol suite delivers secure authentication, data integrity, and hardware-based encryption for
both FCIP and iSCSI deployments.

-----------------------------------------------------------------------------------------------------------------------------------------------------------------

eg. MDS 9700 supports FC link encryption, I think the 9250i doesn't, which would explain your issue.

https://www.hds.com/assets/pdf/cisco-mds-9700-48-port-fibre-channel-switching-module-datasheet.pdf
Cisco TrustSec®Fibre Channel link encryption,

[MENG YUAN HSIEH]

But datasheet show as below:

[Walter Dey]

To verify that the "Enterprise License" is properly installed, enable e.g. feature ivr, which requires this license as well.

switch(config)# feature ivr

[MENG YUAN HSIEH]

[Walter Dey]

This means Enterprise license is ok !

Which SAN-OS version ? It must be quite actual, 9250i is a newer platform.

I would simply open a TAC case !

Walter.

[Walter Dey]

Can you please do the CLI

(config)#feature ?

[MENG YUAN HSIEH]

Sorry for reply late.

[Walter Dey]

Looks like licensing is perfect !

Must be a trivial problem (or a very tricky one).

Do you see an error message in the log file ? (show logging log)

enable debugging (debug all) and check if (feature fcsp) gives you more error information.