Brocade Fabric OS Administrators Guide (Supporting Fabric OS v7.3.0) User Manual
Page 43

Date & Time Message
Wed May 23 03:39:37 2012 root, console, firmwaredownload
Using fosexec to run commands on remote switches or domains
The fosexec command allows you to run Fabric OS commands on remote switches or domains across
the fabric. Both the local and remote switches must be configured to send and receive remote
command execution. You do not need to log in to the remote switch locally. The outputs of the
commands are displayed in the local switch. The commands that you run using fosexec are also
captured in the CLI history and audit logs of the remote switch.
The fosexec feature is a configurable feature. Using the configure command, you can configure the
fosexec feature. The fosexec feature is off by default. The fosexec feature must be on in both the
sending and receiving switches or domains. The configuration is checked when sending any fosexec
request to a remote switch and also when receiving such a request from a remote switch. You can
execute this command on either a specific switch or domain or all the switches or domains in the fabric.
For specific domain or switch, you must input the Domain ID (DID).
The configure command has the following option under Configure CLI - Fabric Parameters section to
enable or disable the remote fosexec feature:
sw_85:root> configure
Not all options will be available on an enabled switch.
To disable the switch, use the "switchDisable" command.
Configure...
Fabric parameters (yes, y, no, n): [no] y
WWN Based persistent PID (yes, y, no, n): [no]
Location ID: (0..4) [0]
High Integrity Fabric Mode (yes, y, no, n): [no]
Edge Hold Time(Low(80ms), Medium(220ms), High(500ms), UserDefined(80-500ms):
(80..500)
[220]
Remote Fosexec feature: (on, off): [off] on
D-Port Parameters (yes, y, no, n): [no] 2014/02/10-12:39:49, [CONF-1043], 1815, FID
128, INFO,
sw_85, Fabric Configuration Parameter Remote Fosexec feature changed to enabled
Zoning Operation parameters (yes, y, no, n): [no]
Commands executed via remote fosexec is captured in clihistory and audit logs of
remote switch
The fosexec syntax is given below:
fosexec –-domain DID –cmd "cmd [args]"
fosexec –-domain all –cmd “cmd [args]”
When nested quotes or strings must be provided, instead of using nested quotes, precede the string
with an escape character or backward slash with quotes, as shown in the following example:
fosexec --domain all -cmd "CLIname --set \"SWAT Setup\""
The fosexec command has the following limitations:
• Requires Fabric OS 7.3.0 or later on both the local and remote domains/switches.
• Remote execution is allowed based on RBAC checks/permissions for the remote domain role. The
RBAC persmission denied messaged is displayed for unsupported commands.
• Can be executed only by users with the fabricadmin, admin, or root role/privilege and RBAC
permissions.
• Does not work during remote domain/switch HA fail-over or reboot.
• Command syntax must match the command syntax supported by the remote switch.
• Commands with parameters specific to a switch/pizza box or chassis such as slot/port are not
supported with the all option.
• Does not support interactive commands that require inputs in the middle of execution.
Using fosexec to run commands on remote switches or domains
Fabric OS Administrators Guide
43
53-1003130-01