> # FICON Configuration Files

> You can save up to 16 FICON configuration files on each FICON-enabled VSAN (in persistent storage). The file format is proprietary to IBM. These files can be read and written by IBM hosts using the in-band CUP protocol. Additionally, you can use the Cisco MDS CLI or DCNM-SAN applications to operate on these FICON configuration files.

> Note Multiple FICON configuration files with the same name can exist in the same switch, provided they reside in different VSANs. For example, you can create a configuration file named XYZ in both VSAN 1 and VSAN 3.

> When you enable the FICON feature in a VSAN, the switches always use the startup FICON configuration file, called IPL. This file is created with a default configuration as soon as FICON is enabled in a VSAN.

> Caution | When FICON is disabled on a VSAN, all the FICON configuration files are irretrievably lost.

> FICON configuration files contain the following configuration for each implemented port address:

> - Block
> - Prohibit mask
> - Port address name

> Note Normal configuration files used by Cisco MDS switches include FICON-enabled attributes for a VSAN, port number mapping for PortChannels and FCIP interfaces, port number to port address mapping, port and trunk allowed VSAN configuration for ports, in-order guarantee, static domain ID configuration, and fabric binding configuration.

> Only one user can access the configuration file at any given time:

> - If this file is being accessed by user 1, user 2 cannot access this file.
> - If user 2 does attempt to access this file, an error is issued to user 2.
> - If user 1 is inactive for more than 15 seconds, the file is automatically closed and available for use by any other permitted user.

> FICON configuration files can be accessed by any host, SNMP, or CLI user who is permitted to access the switch. The locking mechanism in the Cisco NX-OS software restricts access to one user at a time per file. This lock applies to newly created files and previously saved files. Before accessing any file, you must lock the file and obtain the file key. A new file key is used by the locking mechanism for each lock request. The key is discarded when the lock timeout of 15 seconds expires. The lock timeout value cannot be changed.

> Copyright 2010-2015, Cisco Systems, Inc. All rights reserved.