Chapter 4. Initial configuration 121
4. You are prompted to confirm the action, click Yes to proceed. The self-signed certificate is 
generated immediately. Close the browser and wait approximately 2 minutes before 
reconnecting to the management GUI. 
4.6  Configuring local Fibre Channel port masking
This section provides information about configuring local port masking of Fibre Channel ports 
in a clustered system.
With Fibre Channel port masking, you control the use of Fibre Channel ports. You can control 
whether the ports are used to communicate to other nodes within the same local system, and 
if they are used to communicate to nodes in partnered systems. Fibre Channel port masking 
does not affect host or storage traffic. It is applied only to node-to-node communications 
within a system and replication between systems.
The setup of Fibre Channel port masks is useful when you have more than four Fibre 
Channel ports on any node in the system because it saves setting up many SAN zones on 
your switches. Fibre Channel I/O ports are logical ports, which can exist on Fibre Channel 
platform ports or on FCoE platform ports. B using a combination of port masking and fabric 
zoning, you can ensure that the number of logins per node is not more than the supported 
limit. If a canister receives more than 16 logins from another node, it causes node error 860.
4.6.1  Planning for local port masking
The system has two Fibre Channel port masks. The local port mask controls connectivity to 
other nodes in the same system, and the partner port mask control connectivity to nodes in 
remote, partnered systems. By default, all ports are enabled for both local and partner 
connectivity.
The port masks apply to all nodes on a system. It is not possible to have different port mask 
on different nodes of the same cluster. However, you do not have to have the same port mask 
on partnered systems.
A port mask is a string of zeros and ones. The last digit in the string represents port one. The 
previous digits represent ports two, three, and so on. If the digit for a port is set to “1”, the port 
is enabled for the specific type of communication, and the system attempts to send and 
receive traffic on that port. If it is “0”, the system does not send or receive traffic on the port. If 
not enough digits are in the configuration string to set a value for the specific port, that port is 
disabled for traffic.
For example, if the local port mask is set to 101101 on a node with eight Fibre Channel ports, 
ports 1, 3, 4 and 6 can connect to other nodes in the system. Ports 2, 5, 7, and 8 do not have 
connections. On a node in the system with four Fibre Channel ports, ports 1, 3, and 4 can 
connect to other nodes in the system.
Note: This section applies to local port masking only. For more information about 
configuring the partner port mask for intercluster node communications, see 11.6.4, 
“Remote copy intercluster communication” on page 519.
Note: The use of the lsfabric command shows all of the paths that are possible in IBM 
Spectrum Virtualize (as defined by zoning) independent of their usage. Therefore, the 
command output includes paths that are used because of port masking.