Pass Your Riverbed 599-01 Exam Easy!

Riverbed 599-01 (Riverbed Certified Solutions Professional - Storage Delivery) exam dumps vce, practice test questions, study guide & video training course to study and pass quickly and easily. Riverbed 599-01 Riverbed Certified Solutions Professional - Storage Delivery exam dumps & practice test questions and answers. You need avanset vce exam simulator in order to study the Riverbed 599-01 certification exam dumps & Riverbed 599-01 practice test questions in vce format.

A Foundational Guide to the 599-01 Exam and Brocade SAN Technology

The 599-01 Exam, a key assessment in the Brocade certification path, is designed for technical professionals who implement, manage, and support enterprise Storage Area Network (SAN) environments. This exam specifically validates the knowledge and skills required to work with Brocade SAN hardware and the Fabric OS (FOS). Passing this exam signifies that an individual possesses the core competencies to handle the complexities of a modern Fibre Channel fabric, from initial setup and configuration to ongoing administration and basic troubleshooting. It is a benchmark for expertise in a critical area of data center infrastructure.

Preparing for the 599-01 Exam requires a comprehensive understanding of both the theoretical principles of storage networking and the practical application of those principles using Brocade's suite of tools and commands. The curriculum is structured to ensure that certified professionals can build and maintain resilient, high-performance SANs that meet the demanding requirements of enterprise applications. This certification is highly regarded in the industry, as it demonstrates a proven ability to manage the storage networks that form the backbone of many corporate data centers.

This series will serve as an in-depth guide to the topics and concepts covered in the 599-01 Exam. We will explore the fundamentals of SAN technology, delve into the specifics of Brocade's architecture, and cover the essential administrative tasks that are the focus of the exam. Whether you are a seasoned storage administrator looking to formalize your skills or an IT professional seeking to enter the specialized field of storage networking, this guide will provide a structured roadmap to the knowledge needed to succeed.

While specific exam codes and versions evolve, the foundational principles of Fibre Channel and SAN administration remain remarkably consistent. The knowledge associated with the 599-01 Exam is timeless and provides the essential skill set for anyone responsible for the health and performance of an enterprise storage fabric. It is an investment in a career dedicated to managing the world's most critical data.

Understanding Storage Area Networks (SANs)

Before diving into the specifics of the 599-01 Exam, it is crucial to have a solid understanding of what a Storage Area Network (SAN) is. A SAN is a dedicated, high-speed network that provides block-level access to storage devices. Unlike a Local Area Network (LAN) where servers access files, a SAN provides servers with access to storage volumes (LUNs) as if they were locally attached disks. This creates a highly flexible and scalable storage infrastructure.

The primary purpose of a SAN is to decouple the storage from the individual servers. In a traditional setup, a server's storage is internal or directly attached, which creates isolated islands of storage. This is inefficient and difficult to manage. A SAN consolidates storage into a central pool that can be shared and allocated to any server on the network as needed. This centralization simplifies management, improves storage utilization, and enhances data protection capabilities.

SANs are known for their high performance and low latency, which is why they are the standard for business-critical, block-based applications like large databases and high-transaction-volume financial systems. The technology that underpins this performance is typically Fibre Channel, a protocol specifically designed for storage networking. The 599-01 Exam is centered on the skills needed to build and manage these high-performance Fibre Channel SANs using Brocade equipment.

The key components of a SAN include the servers (initiators), the storage arrays (targets), and the SAN fabric itself. The fabric is the network of switches and directors that connects the servers to the storage. The administrator's job, and the focus of the 599-01 Exam, is to manage this fabric to ensure that the right servers can communicate with the right storage in a secure and efficient manner.

The Role of Fibre Channel in Enterprise Storage

Fibre Channel (FC) is the predominant protocol used in enterprise Storage Area Networks and is the core technology covered in the 599-01 Exam. It is a high-speed data transfer protocol that was specifically designed to meet the demands of block-level storage traffic. Unlike Ethernet, which was designed for general-purpose networking, Fibre Channel was built from the ground up to deliver high-throughput, low-latency, and lossless data transmission, which are all critical requirements for storage.

One of the key features of the Fibre Channel protocol is its reliability. It has built-in mechanisms for flow control that prevent network congestion and ensure that data frames are not dropped. This "lossless" nature is vital for storage protocols like SCSI, which assume a reliable transport layer and do not have robust mechanisms to handle packet loss. This is a major reason why Fibre Channel is preferred over standard Ethernet for many mission-critical storage applications.

The Fibre Channel protocol defines a set of services, known as Fabric Services, that provide the intelligence for the SAN. These services, which run on the SAN switches, handle tasks like discovering devices on the network, managing security and access control (zoning), and routing traffic between different parts of the fabric. A deep understanding of these fabric services is a major component of the knowledge required for the 599-01 Exam.

The protocol also defines a specific set of port types and a well-defined login process that allows devices to join the fabric in an orderly fashion. It uses a unique addressing scheme based on World Wide Names (WWNs), which are hard-coded into the Fibre Channel adapters. This entire ecosystem is designed for the singular purpose of providing a robust and high-performance network for storage.

Who Should Pursue the 599-01 Exam?

The 599-01 Exam is designed for a specific group of IT professionals who are deeply involved in the design, implementation, and management of data center infrastructure. The primary audience for this certification is the Storage Administrator or SAN Administrator. These are the individuals who are responsible for the day-to-day health and operation of the storage area network. Their tasks include configuring switches, managing zoning, monitoring performance, and troubleshooting connectivity issues.

Another key audience is the Systems Engineer or Infrastructure Architect. These professionals are often responsible for the high-level design of the data center. They need to have a deep understanding of SAN technology to design a storage network that is resilient, scalable, and meets the performance requirements of the business's applications. The 599-01 Exam provides the detailed knowledge they need to make informed architectural decisions about the SAN fabric.

Implementation specialists and technical support personnel who work for hardware vendors, system integrators, or consulting firms also form a major part of the target audience. These individuals are responsible for deploying new Brocade SANs at customer sites or for providing technical support for existing installations. The 599-01 Exam validates that they have the required skills to perform these roles effectively and to represent their company as a certified expert.

In essence, any IT professional whose role requires them to have more than a superficial understanding of enterprise storage networking would benefit from pursuing the knowledge of the 599-01 Exam. It is for the hands-on practitioner who needs to be able to confidently navigate the command-line interface of a Brocade switch and to make the critical configuration choices that ensure the stability and performance of the storage infrastructure.

Exam Structure and Key Domains

To effectively prepare for the 599-01 Exam, it is essential to understand its structure and the key knowledge domains it covers. The exam is typically composed of a set of multiple-choice questions that must be answered within a specific time limit. The questions are designed to test not only factual recall of concepts and commands but also the ability to apply that knowledge to solve practical, scenario-based problems.

The exam syllabus is generally broken down into several major domains. The first, and most fundamental, domain is SAN and Fibre Channel Fundamentals. This section covers the basic theory of storage networking, including the principles of the Fibre Channel protocol, the different network topologies, and the roles of the various components in a SAN. This ensures that the candidate has a solid theoretical foundation before moving on to the product-specific topics.

A very large and important domain is Brocade Switch and Fabric Administration. This is the core of the 599-01 Exam and covers the practical, hands-on skills of managing a Brocade SAN. This includes everything from the initial switch setup and configuration to the management of user accounts, the configuration of Inter-Switch Links (ISLs) to connect switches together, and the implementation of zoning to control access between servers and storage.

Another key domain is Monitoring and Troubleshooting. This section tests the candidate's ability to use the various tools and commands provided by Brocade's Fabric OS to monitor the health and performance of the SAN. It also covers the basic methodology for troubleshooting common issues, such as device connectivity problems, performance degradation, and fabric segmentation. A working knowledge of key diagnostic commands is essential for this domain.

Finally, advanced topics such as security, routing, and long-distance connectivity may also be covered. By understanding the scope of these key domains, a candidate can create a structured and comprehensive study plan for the 599-01 Exam.

Core Brocade Technologies

The 599-01 Exam is centered on the technologies developed by Brocade (now part of Broadcom), a long-time leader in the Fibre Channel networking industry. A candidate must be familiar with the core components of the Brocade technology stack. This starts with the hardware itself, which is broadly categorized into two types: switches and directors.

Brocade switches are the fundamental building blocks of most SAN fabrics. They are fixed-port devices that are used to connect servers and storage arrays. They can be used as standalone switches in small environments or can be connected together to create a larger, multi-switch fabric. The 599-01 Exam requires a deep understanding of how to configure and manage these switches.

Brocade directors are a class of larger, modular, and more resilient switches that are designed for the core of large enterprise SANs. They have no single point of failure and are built for the highest levels of availability and performance. While the day-to-day management is similar to the smaller switches, directors have more advanced features, and a conceptual understanding of their role is important.

The software that runs on all of this hardware is the Fabric Operating System, or FOS. FOS is the embedded operating system that provides all the intelligence for the SAN. It implements the Fibre Channel fabric services, the security features, the management interfaces, and all the advanced capabilities of the platform. The 599-01 Exam is, in essence, a test of a professional's proficiency in using and managing Fabric OS.

Why SAN Expertise Remains Critical

In an era of rapid technological change, with the rise of cloud computing and hyper-converged infrastructure, one might wonder about the relevance of a specialized skill set like Brocade SAN administration. However, the expertise validated by the 599-01 Exam remains incredibly critical for a simple reason: the world's most important and performance-sensitive applications still run on dedicated, high-performance storage infrastructure.

Large enterprises in sectors like finance, healthcare, and telecommunications rely on mission-critical database systems that demand the absolute highest levels of performance and reliability. For these block-based workloads, Fibre Channel SANs continue to be the gold standard. The lossless, low-latency, and high-throughput nature of a dedicated SAN is often a non-negotiable requirement for these business-critical applications.

Furthermore, while some workloads are moving to the cloud, many organizations are adopting a hybrid cloud strategy. This means that they will continue to maintain a significant on-premises data center footprint for the foreseeable future. This on-premises infrastructure will almost certainly include a SAN to support their core applications. This creates a sustained demand for skilled SAN administrators who can manage, maintain, and troubleshoot this critical infrastructure.

The skills learned while preparing for the 599-01 Exam are also conceptually valuable. Understanding the principles of a storage fabric, block-level access, and data path management provides a deep foundation that is useful even when working with newer technologies. The problems that SANs were designed to solve—storage consolidation, performance, and availability—are universal challenges in IT.

Beginning Your Preparation Journey

Starting the journey to prepare for the 599-01 Exam requires a structured and disciplined approach. The first and most important step is to obtain the official exam objectives and study guide. These documents will provide the definitive blueprint for the exam, detailing all the topics that are covered and their relative importance. This should be the foundation of your study plan, used as a checklist to ensure you cover all the necessary material.

Once you have the syllabus, the next step is to gather your study resources. This should include a mix of theoretical materials and hands-on tools. For theory, look for official courseware, textbooks, and technical documentation related to Brocade Fabric OS. These materials will provide the detailed explanations of the concepts, protocols, and features that you will be tested on.

The most critical component of your preparation, however, will be hands-on practice. It is nearly impossible to pass an exam like the 599-01 Exam with theoretical knowledge alone. You must get experience with the command-line interface (CLI) and the web management tools of Fabric OS. If you do not have access to physical hardware, you can look for virtual lab environments or switch simulators that allow you to practice the configuration and troubleshooting commands in a safe environment.

Finally, create a realistic study schedule. Allocate specific time blocks for each topic in the exam objectives. A good approach is to read about a topic first and then immediately follow up with a hands-on lab session to reinforce what you have learned. A consistent approach that combines reading, practice, and regular review is the proven formula for success on the 599-01 Exam.

The Brocade Switch and Director Portfolio

To master the concepts of the 599-01 Exam, a solid understanding of the Brocade hardware portfolio is essential. Brocade, now a part of Broadcom, offers two main classes of Fibre Channel networking devices: switches and directors. While both are used to build a Storage Area Network (SAN) fabric, they are designed for different roles and scale points. A candidate for the exam must understand the key differences between these two hardware types and their appropriate use cases.

Brocade switches are the most common building blocks of a SAN. They are fixed-configuration devices, meaning they come with a set number of ports. They are typically used at the edge of the fabric to connect servers (hosts) and storage arrays. In smaller environments, a single switch might constitute the entire SAN. In larger environments, multiple switches are connected together to form a larger fabric. The 599-01 Exam places a heavy emphasis on the configuration and management of these departmental and enterprise-class switches.

Brocade directors, on the other hand, are designed for the core of the network in large, mission-critical enterprise environments. Directors are modular, chassis-based systems. They have a passive backplane and slots for redundant components, including control processors, core routing blades, and port blades. This modular design provides extremely high levels of availability, as there is no single point of failure. A director can also scale to support hundreds or even thousands of ports, providing massive connectivity.

While the day-to-day administration via Fabric OS is very similar for both switches and directors, the 599-01 Exam requires an understanding of the architectural differences. You should know that directors are used for the SAN backbone due to their high reliability and port density, while fixed-port switches are typically used for connecting end devices. This knowledge is crucial for designing and understanding large-scale SAN topologies.

Deep Dive into Fabric OS (FOS)

The intelligence and functionality of every Brocade switch and director are provided by its embedded operating system, known as Fabric OS or FOS. A deep and practical understanding of FOS is the absolute heart of the 599-01 Exam. FOS is a purpose-built, real-time operating system that is designed specifically for the demands of a high-performance, lossless storage network. It is responsible for everything from the low-level Fibre Channel frame switching to the high-level management and security services.

FOS implements all the standard Fibre Channel fabric services that are essential for the operation of a SAN. This includes the Simple Name Server (SNS), which acts as a directory service, allowing devices to discover each other on the fabric. It also includes the Fabric Zone Server, which enforces the zoning configuration to control which devices are allowed to communicate with each other. A candidate for the 599-01 Exam must have a detailed understanding of these core services.

Management of a switch running FOS is typically done through one of two interfaces: the command-line interface (CLI) or a graphical web-based tool. The CLI is a powerful, text-based interface that is accessed via SSH or a serial console connection. It provides access to every single configuration and monitoring feature of the OS. Proficiency with the CLI is a non-negotiable skill for a SAN administrator and is heavily tested on the 599-01 Exam.

The web-based tool provides a graphical user interface for performing common administrative tasks. While it can be more intuitive for beginners, the CLI is often faster and more powerful for experienced administrators, and it is also essential for scripting and automation. A well-rounded professional, as validated by the 599-01 Exam, should be comfortable using both interfaces to manage the Fabric OS environment.

Understanding Port Types and Functionality

A fundamental concept in Fibre Channel networking, and a key topic for the 599-01 Exam, is the different types of ports that exist on a switch and on the end devices. The behavior of a port determines its role in the fabric and how it communicates with other devices. The Fabric OS automatically determines the port type based on what is connected to it, but a SAN administrator must understand the meaning of each type to interpret the switch's status and troubleshoot connectivity issues.

The most common port type on an end device, like a server's Host Bus Adapter (HBA) or a storage array port, is an N_Port (Node Port). When an N_Port connects to a switch, the switch port it connects to becomes an F_Port (Fabric Port). The connection between a server (N_Port) and the fabric (F_Port) is the fundamental link that allows a device to access the SAN.

When you connect two switches together to create a larger fabric, the ports on each end of the connection become E_Ports (Expansion Ports). The link between two E_Ports is called an Inter-Switch Link, or ISL. ISLs are used to pass traffic between the switches and to merge the two switches into a single, logical fabric with a unified set of fabric services. The 599-01 Exam requires a solid understanding of how to form and manage ISLs.

There are other, more specialized port types as well. For example, a G_Port is a generic port state before it has been determined whether it will be an F_Port or an E_Port. A U_Port is a universal port that can be configured to act as various other port types. Understanding how to view the port status on a switch and identify the port types (e.g., using the switchshow command) is a basic but critical diagnostic skill.

Fabric Services: The Heart of the SAN

A Fibre Channel SAN is not just a collection of dumb switches that forward frames. The fabric itself is an intelligent entity, and this intelligence is provided by a set of standardized processes known as Fabric Services. These services run on the switches and provide the essential coordination and management functions that allow the SAN to operate. A deep understanding of the key Fabric Services was a core requirement for the 599-01 Exam.

The most fundamental of these is the Simple Name Server, or SNS. The Name Server acts as a central directory for the entire fabric. When a device logs into the fabric, it registers itself with the Name Server, providing information like its World Wide Port Name (WWPN) and the Fibre Channel services it supports. Other devices can then query the Name Server to discover the addresses of the devices they need to communicate with. Without the Name Server, devices would not be able to find each other.

Another critical service is the Fabric Zone Server. The Zone Server is responsible for enforcing the security policy of the fabric, which is defined by the zoning configuration. Zoning is the mechanism used to control which servers can see which storage devices. The Zone Server maintains the active zoneset and ensures that only devices within the same zone are allowed to communicate. This is the primary security mechanism in a SAN, and the 599-01 Exam tests it extensively.

Other important services include the Fabric Controller, which is responsible for allocating fabric addresses to devices, and the Management Server, which provides an interface for external management applications. These services all work together, with a principal switch in the fabric being elected to maintain the master copy of the service information. A SAN administrator must understand the role of these services to effectively manage and troubleshoot the fabric.

The Fabric Login (FLOGI) Process

For any device to participate in the Storage Area Network, it must first successfully log in to the fabric. This process, known as a Fabric Login or FLOGI, is a well-defined and critical sequence of events. Understanding the steps of the FLOGI process was an important troubleshooting concept for the 599-01 Exam, as a failure during this process is a common cause of connectivity issues. The FLOGI is how an end device (an N_Port) establishes a session with the switch (an F_Port).

The process begins when a server's Host Bus Adapter (HBA) is powered on or its link to the switch is enabled. The HBA sends a FLOGI frame to the switch. This initial frame contains important information about the HBA, including its World Wide Node Name (WWNN) and its World Wide Port Name (WWPN). These are the unique, permanent identifiers for the device and its port.

The switch, upon receiving the FLOGI, responds with an ACC (Accept) frame. This frame contains the 24-bit Fibre Channel address that the switch has assigned to the device for this session. This address is used for all subsequent routing of frames within the fabric. The switch also provides the device with information about the fabric's operating parameters.

After the initial Fabric Login is complete, the device must then register with the Fabric Name Server. This is done through a process called PLRI (Process Login), where the device sends a registration request to the well-known address of the Name Server. The Name Server then adds the device's information (its WWPN and assigned fabric address) to its database. Only after this registration is complete can the device be discovered by and communicate with other devices in the fabric. A failure at any of these stages would be a key area to investigate for the 599-01 Exam.

Principles of Inter-Switch Links (ISLs) and Trunking

In any but the smallest SANs, you will need to connect multiple switches together to provide enough ports for all your servers and storage devices. The connection between two switches is called an Inter-Switch Link, or ISL. The ability to correctly configure and manage ISLs is a fundamental skill for a SAN administrator and a key topic for the 599-01 Exam. When an ISL is successfully formed between two switches, they merge to become a single, larger, logical fabric.

When you connect a cable between two switch ports, the ports will negotiate to become E_Ports (Expansion Ports), and the link will become an ISL. Once the ISL is up, the two switches will exchange their configuration information, including their zoning databases and name server information. One switch will be elected as the principal switch for the fabric, and it will be responsible for maintaining the master copy of the fabric's configuration and distributing it to all other switches.

To provide high availability and increased bandwidth, it is a common best practice to have multiple physical links between the same two switches. Brocade's Fabric OS has a feature called "trunking" that can logically bundle these multiple parallel ISLs into a single, high-bandwidth logical link. The trunking feature will automatically load-balance traffic across all the physical links in the trunk.

If one of the physical links in the trunk fails, the traffic will be automatically and non-disruptively re-routed over the remaining healthy links. This provides a high degree of resiliency. The 599-01 Exam required a candidate to know how to configure and verify the status of an ISL trunk. This is a crucial technology for building scalable and fault-tolerant SAN backbones.

Virtual Fabrics and Logical Switches

As SANs grew in size and complexity, the need arose for a way to logically partition a single physical SAN infrastructure into multiple, isolated virtual SANs. Brocade provides this capability through its Virtual Fabrics feature. This is an advanced concept, but a foundational understanding of its purpose and function was relevant for the 599-01 Exam. Virtual Fabrics allow a large physical director or a group of switches to be carved up into multiple, independent logical fabrics.

Each logical fabric created by this feature has its own completely separate set of fabric services. This means each logical fabric has its own name server, its own zone server, and its own unique Fabric ID. The devices in one logical fabric are completely unaware of and isolated from the devices in another logical fabric, even though they may be physically connected to the same hardware chassis. This provides a very high level of security and administrative separation.

This is particularly useful in multi-tenant environments, where a service provider might want to offer SAN services to multiple different customers from the same physical infrastructure. It is also useful within a single large enterprise to create separate SANs for different environments, such as production, development, and testing, or for different business units. This logical separation simplifies management and prevents a problem in one logical fabric from affecting another.

The core of the Virtual Fabrics feature is the creation of "logical switches." An administrator can define a logical switch and then assign a set of physical ports from the chassis to that logical switch. That logical switch then functions as a completely independent Brocade switch. The ability to understand this powerful virtualization capability was a key part of the advanced architectural knowledge related to the 599-01 Exam.

Architectural Concepts for the 599-01 Exam

To succeed in the architectural portion of the 599-01 Exam, a candidate must be able to synthesize their knowledge of the individual components into a coherent understanding of SAN design principles. This involves moving beyond the "what" and understanding the "why" of the Brocade architecture. A key principle is that of a "single fabric." The goal of connecting switches with ISLs is to create one large, unified fabric that can be managed from a single point.

Another key principle is high availability. A well-designed SAN has no single points of failure. This is achieved through redundancy at every level. Servers should have at least two connections to the fabric, each going to a different switch. Storage arrays should also have redundant connections. The switches themselves should be connected with multiple, trunked ISLs. In the core of the network, director-class hardware is used for its inherent fault tolerance.

The principle of scalability is also central. A SAN architecture should be able to grow with the needs of the business. The Brocade architecture allows for this by allowing an administrator to start with a single switch and then add more switches to the fabric as needed. The use of directors in the core and smaller switches at the edge creates a tiered design that can scale to support thousands of devices.

Finally, the principle of security and isolation is fundamental. The default behavior of a fabric is to allow any device to see any other device. The use of zoning is the primary mechanism for partitioning the fabric and enforcing a "least privilege" model, where a server can only see the storage that it has been explicitly granted access to. A deep understanding of these architectural principles was a key requirement for the 599-01 Exam.

Introduction to Fabric Management Tools

A core part of the knowledge tested in the 599-01 Exam is a proficiency with the tools used to manage a Brocade fabric. An administrator needs to be able to connect to the switches, view their status, and perform the necessary configuration tasks. Brocade's Fabric OS (FOS) provides two primary interfaces for management: a powerful command-line interface (CLI) and a graphical user interface (GUI) called Web Tools. A well-rounded administrator should be comfortable working with both.

The command-line interface is the most powerful and comprehensive management tool. It is accessed through a secure shell (SSH) connection or a direct serial console connection to the switch. The CLI provides access to every single configuration and diagnostic feature of FOS. For many experienced administrators, the CLI is the preferred tool because it is fast, efficient, and highly scriptable. A significant portion of the 599-01 Exam is focused on the knowledge of key CLI commands.

Web Tools is a web-based graphical interface that is built into the switch itself. It can be accessed by pointing a web browser to the switch's IP address. Web Tools provides an intuitive, point-and-click interface for performing common administrative tasks, such as managing zones, viewing port status, and monitoring switch health. It can be particularly useful for visualizing the fabric topology and for generating reports.

While Web Tools is user-friendly, the CLI is essential for advanced troubleshooting and for automation. A common workflow is to use Web Tools for high-level monitoring and visualization, and then to use the CLI for detailed configuration and diagnostics. For the 599-01 Exam, a candidate must have a solid, practical knowledge of both interfaces to be fully prepared for the scenario-based questions that may be presented.

The Importance of Zoning

Zoning is arguably the most important administrative task in a Storage Area Network, and it is a topic of paramount importance for the 599-01 Exam. Zoning is the primary mechanism for controlling access and enhancing security within a SAN fabric. By default, in an un-zoned fabric, any device that logs into the fabric can discover and potentially access any other device. This is known as a "fabric of initiators and targets." This open configuration is highly insecure and is not used in any production environment.

The purpose of zoning is to partition the fabric into logical subsets of devices. A "zone" is a group of devices that are allowed to communicate with each other. Devices that are not in the same zone cannot see or access each other, even though they are physically connected to the same fabric. This is the fundamental principle of SAN security. It prevents a server from accidentally or maliciously accessing a storage volume (LUN) that does not belong to it, which could lead to catastrophic data corruption.

Zoning provides a "least privilege" security model. A typical zone will contain the World Wide Port Names (WWPNs) of one server's Host Bus Adapters (HBAs) and the WWPNs of the specific storage array ports that it needs to access. By creating these small, specific zones, an administrator ensures that each server can only see its own designated storage and nothing else.

This partitioning not only enhances security but also simplifies management. It reduces the amount of traffic related to device discovery and state change notifications within the fabric. A deep and thorough understanding of the "why" behind zoning, as well as the "how" of its implementation, is an absolute prerequisite for passing the 599-01 Exam.

Configuring and Managing Zones and Zonesets

The practical implementation of zoning in a Brocade fabric, a core skill for the 599-01 Exam, involves working with three main types of objects: zones, aliases, and zonesets (also known as configurations). The administrator uses either the CLI or Web Tools to create and manage these objects. A methodical approach to this configuration is key to maintaining a secure and manageable SAN.

A "zone" is the fundamental object. It is simply a named container to which you add the members that you want to be able to communicate. The members of a zone are typically the World Wide Port Names (WWPNs) of the server HBAs and the storage ports. For example, you might create a zone named "WebServer1_to_StorageArrayA" and add the WWPNs of the WebServer1's HBAs and the WWPNs of the StorageArrayA's ports to it.

To make management easier, especially in large environments, it is a best practice to use "aliases." An alias is simply a user-friendly name that you can assign to a WWPN. For example, instead of working with a long and hard-to-remember WWPN like 10:00:00:05:1e:a1:b2:c3, you can create an alias for it called "WebServer1_HBA1." You can then add these easy-to-read aliases to your zones instead of the raw WWPNs. This makes the zone configuration much more understandable and less prone to errors.

Finally, a "zoneset" or "configuration" is a container for one or more zones. You group all the zones that you want to be active at the same time into a single zoneset. Only one zoneset can be active in the fabric at any given time. The process involves creating the zones, grouping them into a zoneset, and then activating that zoneset. This activation step is what makes the zoning rules take effect across the entire fabric. This entire workflow is a critical part of the 599-01 Exam curriculum.

World Wide Names (WWNs) and Their Role in Zoning

To understand zoning, one must first have a solid grasp of World Wide Names (WWNs), the unique identifiers used in a Fibre Channel network. This concept is fundamental to the 599-01 Exam. A WWN is a 64-bit address that is permanently burned into a Fibre Channel device by its manufacturer, much like a MAC address in an Ethernet network. Every device and port in the SAN has a unique WWN, ensuring that it can be uniquely identified anywhere in the world.

There are two types of WWNs. The World Wide Node Name (WWNN) is an identifier for a device as a whole. For example, a dual-port HBA in a server will have a single WWNN. The World Wide Port Name (WWPN), on the other hand, is a unique identifier for a specific port on a device. So, a dual-port HBA will have one WWNN but two distinct WWPNs, one for each port.

It is the World Wide Port Name (WWPN) that is the primary identifier used for zoning. When you create a zone, you are adding the WWPNs of the server ports and the storage ports that you want to allow to communicate. Using the WWPN for zoning is a best practice because it is tied to the physical port. This means that if you move a cable from one switch port to another, the zoning will still be effective because the device's WWPN has not changed.

The Brocade Fabric OS provides commands, such as nsfannyshow, that allow an administrator to see all the devices that have logged into the fabric and their corresponding WWPNs. This is how an administrator gathers the necessary WWPNs to create the zone configuration. A deep understanding of the role and format of WWNs is an essential piece of foundational knowledge for the 599-01 Exam.

Hard Zoning vs. Soft Zoning

When an administrator configures zoning in a Brocade fabric, they are, by default, using a method known as "hard zoning." The 599-01 Exam required an understanding of the difference between hard zoning and another, less common method called "soft zoning." This distinction relates to how the zoning rules are enforced by the fabric.

Hard zoning is enforced by the hardware of the switch itself. The switch's application-specific integrated circuits (ASICs) are programmed with the zoning rules. When a frame arrives at the switch, the hardware inspects the source and destination addresses of the frame and checks them against the active zoning configuration. If the communication is not permitted by any active zone, the hardware simply drops the frame. It never gets forwarded.

This hardware-level enforcement makes hard zoning extremely secure. There is no way for a device to bypass it. All Brocade switches use hard zoning by default, and it is the industry standard for all production SAN environments.

Soft zoning, on the other hand, is enforced by the software, specifically the Fabric Name Server. In a soft-zoned environment, the zoning rules are only used to control the results of Name Server queries. When a server asks the Name Server for a list of other devices in the fabric, the Name Server will only return the devices that are in the same zone as the requesting server. However, if a malicious or misconfigured server already knows the fabric address of a target and tries to send a frame to it directly, the switch will forward the frame. Soft zoning is considered insecure and is generally not used. The 599-01 Exam emphasized the security and best practice of using hard zoning.

Implementing Fabric Security Policies

Beyond zoning, Brocade Fabric OS provides a number of other security features that can be used to harden the SAN environment. An understanding of these additional security mechanisms was a relevant topic for the 599-01 Exam, as a comprehensive security strategy involves multiple layers. These features help to protect the management interfaces of the switches and prevent unauthorized devices from connecting to the fabric.

One of the most important security features is the Switch Connection Control (SCC) policy. This feature is used to create an access control list of the WWNs of the switches that are allowed to form an Inter-Switch Link (ISL) and join the fabric. By creating a strict SCC policy, an administrator can prevent an unauthorized or "rogue" switch from being connected to the production SAN, which could be a major security breach.

Another key security mechanism is Device Connection Control (DCC). This is similar to SCC, but it operates at the end-device level. A DCC policy contains a list of the WWPNs of the server and storage devices that are authorized to connect to the fabric. If a device with a WWPN that is not on the list tries to log in to the fabric, its login will be rejected. This is a powerful feature for preventing unauthorized servers from gaining access to the storage network.

Additionally, administrators should implement security best practices for the management interfaces themselves. This includes disabling insecure protocols like Telnet in favor of SSH, configuring strong passwords for all user accounts, and using features like IP filtering to restrict which IP addresses are allowed to access the switch's management port. These layered security controls were an important part of the administrative knowledge base for the 599-01 Exam.

Role-Based Access Control (RBAC)

In any enterprise IT environment, it is a best practice to not give all administrators the same level of access. The principle of least privilege dictates that users should only have the permissions necessary to perform their specific job functions. Brocade Fabric OS supports this principle through a feature called Role-Based Access Control (RBAC). A solid understanding of RBAC was an important security and administration topic for the 599-01 Exam.

RBAC allows a senior administrator to create different "roles," each with a specific set of permissions. For example, you could create a "storage operator" role that has permission to view the status of the fabric and monitor performance but does not have permission to make any configuration changes. You could create another "zoning administrator" role that has full permissions to manage the zoning configuration but cannot change other switch settings.

Once these roles are defined, you can then create user accounts and assign them to one or more of these roles. This provides a very granular level of control over what each administrator is allowed to do on the switches. It is a vast improvement over the default model, which has a small number of fixed roles like "admin," "operator," and "user."

Implementing RBAC is a key part of securing the management of the SAN. It helps to prevent accidental or malicious configuration changes by limiting the capabilities of different users. It also provides a clear audit trail, as the actions of each user are logged under their own account. The ability to configure these custom roles and assign them to users was a key administrative skill related to the 599-01 Exam.

Core Administrative Tasks for the 599-01 Exam

To succeed on the 599-01 Exam, a candidate must be able to translate their conceptual knowledge into the performance of core administrative tasks. This is the practical, hands-on side of the job. The exam questions are often designed to test a candidate's ability to apply their knowledge to solve a real-world problem or to execute a common configuration task.

One of the most fundamental tasks is the initial setup of a new switch. This includes connecting to the switch's console port, running the initial setup script, configuring its IP address, setting the date and time, and creating the initial administrator accounts. This is the first step in integrating a new switch into the management network.

The most frequent and critical administrative task is the management of the zoning configuration. As has been discussed, this involves creating aliases, creating zones, adding them to a zoneset, and activating the zoneset. An administrator must be able to perform this entire workflow from start to finish, both to add new servers and storage and to decommission old ones. This is a daily or weekly activity in many large SAN environments.

Other core tasks include monitoring the health of the fabric. This means regularly using commands like switchshow to check the status of the switch and its ports, fabricshow to see the topology of the fabric, and checking the error logs for any potential issues. It also includes performing routine maintenance tasks like backing up the switch configuration and managing the firmware versions. A deep proficiency in these core tasks was the ultimate measure of readiness for the 599-01 Exam.

Go to testing centre with ease on our mind when you use Riverbed 599-01 vce exam dumps, practice test questions and answers. Riverbed 599-01 Riverbed Certified Solutions Professional - Storage Delivery certification practice test questions and answers, study guide, exam dumps and video training course in vce format to help you study with ease. Prepare with confidence and study using Riverbed 599-01 exam dumps & practice test questions and answers vce from ExamCollection.