Brocade

This guide covers Brocade platforms running FabricOS, Enhanced Fabric OS, FastIron, IronWare, NOS (Network Operating System), Vyatta, the 6910 access switch, and SLX-OS.

FabricOS

FabricOS runs on Brocade Fibre Channel SAN switches and directors, such as the 300, 6505/6510, and DCX families.

Create a backup account. Create a dedicated netwatch-backup account with the built-in read-only user role using the FabricOS account management commands or Web Tools. The user role can display the switch configuration; the admin role is not required. In Virtual Fabrics environments, give the account access to all logical switches you want captured.

Enable SSH access. SSH is enabled by default on FabricOS management interfaces. If you use the platform's IP filter policies, permit TCP port 22 from the collector's IP address.

Enhanced Fabric OS

Enhanced Fabric OS covers legacy SAN switches running the enhanced/older FabricOS lineage.

Create a backup account. Create (or dedicate) a read-only account in the switch's account management; on releases with fixed accounts, use the built-in user login. Configuration display does not require admin rights on these platforms.

Enable SSH access. Enable SSH in the management settings if the firmware supports it; otherwise Telnet is the fallback on the oldest releases. Restrict management access to the collector's IP where the firmware provides IP filtering.

FastIron

FastIron runs on the campus switching families, including the ICX series and legacy FCX/FGS/FLS switches.

Create a backup account. Privilege level 5 is FastIron's read-only level and can run show commands, including displaying the running configuration:

configure terminal
username netwatch-backup privilege 5 password <password>
aaa authentication login default local

Enable SSH access. Generate a host key to enable the SSH server:

crypto key generate rsa modulus 2048

FastIron supports restricting SSH sources with an access group — apply a numbered ACL that permits only the collector's IP to the SSH service.

Notes. If a show command is refused at the read-only level on your release, supply the enable (super-user) password to QUARK as well.

IronWare

IronWare runs on the carrier and data-center routing platforms, including NetIron MLX/XMR, CER/CES, and legacy BigIron chassis.

Create a backup account. The AAA model matches FastIron: create a netwatch-backup local user at the read-only privilege level (level 5) with local login authentication enabled, using the same command style shown above for FastIron. Displaying the running configuration works from the read-only level on most releases; keep the enable password available in case your release restricts it.

Enable SSH access. Generate the SSH host key to enable the server and use the platform's SSH access group / management ACL support to permit only the collector's IP.

NOS (Network Operating System)

NOS runs on the VDX data-center switches.

Create a backup account. NOS is role-based: create a dedicated netwatch-backup account and assign the built-in read-only user role, which can display the running configuration. The admin role is not required.

Enable SSH access. SSH is enabled by default on the management interface. In VCS fabric mode, connect to the fabric's virtual/management address (or the principal switch) so the fabric-wide configuration is captured. Restrict SSH to the collector's IP with your management ACLs.

Vyatta

Vyatta runs on the Brocade Vyatta / 5600 vRouter software routers.

Create a backup account. Create an operator-level user — operators can view the configuration but not change it:

configure
set system login user netwatch-backup authentication plaintext-password <password>
set system login user netwatch-backup level operator
commit
save

Enable SSH access. Enable the SSH service if it is not already configured:

configure
set service ssh
commit
save

Restrict access to the collector's IP with the router's firewall rules applied to the local (management) interface.

6910

The Brocade 6910 is a compact Ethernet access/demarcation switch with its own software image.

Create a backup account. Create a dedicated netwatch-backup user in the switch's local user settings. Displaying the full configuration requires the privileged/administrator level on this platform, so assign the highest privilege level or supply the privileged-mode password to QUARK.

Enable SSH access. Enable the SSH server in the management settings (generate host keys if prompted) and restrict management sources to the collector's IP where the firmware supports an allowed-manager list.

SLX-OS

SLX-OS runs on the SLX 9000-series routers and switches.

Create a backup account. SLX-OS uses role-based access like NOS: create a netwatch-backup account with the built-in read-only user role, which can display the running configuration without admin rights.

Enable SSH access. SSH is enabled by default on the management interface. Restrict access to the collector's IP using the platform's management ACL support or surrounding network policy.

Enable backup in Netwatch

Once the device is prepared, open its host in Netwatch (Data collection > Hosts) and add the Config Backup macros — the supported status flag, the model code for this platform, and the credentials you created. See Getting started for the full macro list and values.