xref: /freebsd/sys/dev/isp/isp.c (revision 5521ff5a4d1929056e7ffc982fac3341ca54df7c)
1 /* $FreeBSD$ */
2 /*
3  * Machine and OS Independent (well, as best as possible)
4  * code for the Qlogic ISP SCSI adapters.
5  *
6  * Copyright (c) 1997, 1998, 1999, 2000, 2001 by Matthew Jacob
7  * Feral Software
8  * All rights reserved.
9  *
10  * Redistribution and use in source and binary forms, with or without
11  * modification, are permitted provided that the following conditions
12  * are met:
13  * 1. Redistributions of source code must retain the above copyright
14  *    notice immediately at the beginning of the file, without modification,
15  *    this list of conditions, and the following disclaimer.
16  * 2. The name of the author may not be used to endorse or promote products
17  *    derived from this software without specific prior written permission.
18  *
19  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
20  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
21  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
22  * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE FOR
23  * ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
24  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
25  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
26  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
27  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
28  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
29  * SUCH DAMAGE.
30  */
31 
32 /*
33  * Inspiration and ideas about this driver are from Erik Moe's Linux driver
34  * (qlogicisp.c) and Dave Miller's SBus version of same (qlogicisp.c). Some
35  * ideas dredged from the Solaris driver.
36  */
37 
38 /*
39  * Include header file appropriate for platform we're building on.
40  */
41 
42 #ifdef	__NetBSD__
43 #include <dev/ic/isp_netbsd.h>
44 #endif
45 #ifdef	__FreeBSD__
46 #include <dev/isp/isp_freebsd.h>
47 #endif
48 #ifdef	__OpenBSD__
49 #include <dev/ic/isp_openbsd.h>
50 #endif
51 #ifdef	__linux__
52 #include "isp_linux.h"
53 #endif
54 #ifdef	__svr4__
55 #include "isp_solaris.h"
56 #endif
57 
58 /*
59  * General defines
60  */
61 
62 #define	MBOX_DELAY_COUNT	1000000 / 100
63 
64 /*
65  * Local static data
66  */
67 static const char warnlun[] =
68     "WARNING- cannot determine Expanded LUN capability- limiting to one LUN";
69 static const char portshift[] =
70     "Target %d Loop ID 0x%x (Port 0x%x) => Loop 0x%x (Port 0x%x)";
71 static const char portdup[] =
72     "Target %d duplicates Target %d- killing off both";
73 static const char retained[] =
74     "Retaining Loop ID 0x%x for Target %d (Port 0x%x)";
75 static const char lretained[] =
76     "Retained login of Target %d (Loop ID 0x%x) Port 0x%x";
77 static const char plogout[] =
78     "Logging out Target %d at Loop ID 0x%x (Port 0x%x)";
79 static const char plogierr[] =
80     "Command Error in PLOGI for Port 0x%x (0x%x)";
81 static const char nopdb[] =
82     "Could not get PDB for Device @ Port 0x%x";
83 static const char pdbmfail1[] =
84     "PDB Loop ID info for Device @ Port 0x%x does not match up (0x%x)";
85 static const char pdbmfail2[] =
86     "PDB Port info for Device @ Port 0x%x does not match up (0x%x)";
87 static const char ldumped[] =
88     "Target %d (Loop ID 0x%x) Port 0x%x dumped after login info mismatch";
89 static const char notresp[] =
90   "Not RESPONSE in RESPONSE Queue (type 0x%x) @ idx %d (next %d) nlooked %d";
91 static const char xact1[] =
92     "HBA attempted queued transaction with disconnect not set for %d.%d.%d";
93 static const char xact2[] =
94     "HBA attempted queued transaction to target routine %d on target %d bus %d";
95 static const char xact3[] =
96     "HBA attempted queued cmd for %d.%d.%d when queueing disabled";
97 static const char pskip[] =
98     "SCSI phase skipped for target %d.%d.%d";
99 static const char topology[] =
100     "Loop ID %d, AL_PA 0x%x, Port ID 0x%x, Loop State 0x%x, Topology '%s'";
101 static const char finmsg[] =
102     "(%d.%d.%d): FIN dl%d resid %d STS 0x%x SKEY %c XS_ERR=0x%x";
103 /*
104  * Local function prototypes.
105  */
106 static int isp_parse_async __P((struct ispsoftc *, int));
107 static int isp_handle_other_response
108 __P((struct ispsoftc *, ispstatusreq_t *, u_int16_t *));
109 static void isp_parse_status
110 __P((struct ispsoftc *, ispstatusreq_t *, XS_T *));
111 static void isp_fastpost_complete __P((struct ispsoftc *, u_int16_t));
112 static void isp_scsi_init __P((struct ispsoftc *));
113 static void isp_scsi_channel_init __P((struct ispsoftc *, int));
114 static void isp_fibre_init __P((struct ispsoftc *));
115 static void isp_mark_getpdb_all __P((struct ispsoftc *));
116 static int isp_getmap __P((struct ispsoftc *, fcpos_map_t *));
117 static int isp_getpdb __P((struct ispsoftc *, int, isp_pdb_t *));
118 static u_int64_t isp_get_portname __P((struct ispsoftc *, int, int));
119 static int isp_fclink_test __P((struct ispsoftc *, int));
120 static char *isp2100_fw_statename __P((int));
121 static int isp_pdb_sync __P((struct ispsoftc *));
122 static int isp_scan_loop __P((struct ispsoftc *));
123 static int isp_scan_fabric __P((struct ispsoftc *));
124 static void isp_register_fc4_type __P((struct ispsoftc *));
125 static void isp_fw_state __P((struct ispsoftc *));
126 static void isp_mboxcmd __P((struct ispsoftc *, mbreg_t *, int));
127 
128 static void isp_update __P((struct ispsoftc *));
129 static void isp_update_bus __P((struct ispsoftc *, int));
130 static void isp_setdfltparm __P((struct ispsoftc *, int));
131 static int isp_read_nvram __P((struct ispsoftc *));
132 static void isp_rdnvram_word __P((struct ispsoftc *, int, u_int16_t *));
133 static void isp_parse_nvram_1020 __P((struct ispsoftc *, u_int8_t *));
134 static void isp_parse_nvram_1080 __P((struct ispsoftc *, int, u_int8_t *));
135 static void isp_parse_nvram_12160 __P((struct ispsoftc *, int, u_int8_t *));
136 static void isp_parse_nvram_2100 __P((struct ispsoftc *, u_int8_t *));
137 
138 /*
139  * Reset Hardware.
140  *
141  * Hit the chip over the head, download new f/w if available and set it running.
142  *
143  * Locking done elsewhere.
144  */
145 void
146 isp_reset(struct ispsoftc *isp)
147 {
148 	mbreg_t mbs;
149 	int loops, i, touched, dodnld = 1;
150 	char *revname = "????";
151 
152 	isp->isp_state = ISP_NILSTATE;
153 
154 
155 	/*
156 	 * Basic types (SCSI, FibreChannel and PCI or SBus)
157 	 * have been set in the MD code. We figure out more
158 	 * here.
159 	 *
160 	 * After we've fired this chip up, zero out the conf1 register
161 	 * for SCSI adapters and do other settings for the 2100.
162 	 */
163 
164 	/*
165 	 * Get the current running firmware revision out of the
166 	 * chip before we hit it over the head (if this is our
167 	 * first time through). Note that we store this as the
168 	 * 'ROM' firmware revision- which it may not be. In any
169 	 * case, we don't really use this yet, but we may in
170 	 * the future.
171 	 */
172 	if ((touched = isp->isp_touched) == 0) {
173 		/*
174 		 * First see whether or not we're sitting in the ISP PROM.
175 		 * If we've just been reset, we'll have the string "ISP   "
176 		 * spread through outgoing mailbox registers 1-3.
177 		 */
178 		if (ISP_READ(isp, OUTMAILBOX1) != 0x4953 ||
179 		    ISP_READ(isp, OUTMAILBOX2) != 0x5020 ||
180 		    ISP_READ(isp, OUTMAILBOX3) != 0x2020) {
181 			/*
182 			 * Just in case it was paused...
183 			 */
184 			ISP_WRITE(isp, HCCR, HCCR_CMD_RELEASE);
185 			mbs.param[0] = MBOX_ABOUT_FIRMWARE;
186 			isp_mboxcmd(isp, &mbs, MBOX_COMMAND_ERROR);
187 			/*
188 			 * This *shouldn't* fail.....
189 			 */
190 			if (mbs.param[0] == MBOX_COMMAND_COMPLETE) {
191 				isp->isp_romfw_rev[0] = mbs.param[1];
192 				isp->isp_romfw_rev[1] = mbs.param[2];
193 				isp->isp_romfw_rev[2] = mbs.param[3];
194 			}
195 		}
196 		isp->isp_touched = 1;
197 	}
198 
199 	DISABLE_INTS(isp);
200 
201 	/*
202 	 * Put the board into PAUSE mode (so we can read the SXP registers
203 	 * or write FPM/FBM registers).
204 	 */
205 	ISP_WRITE(isp, HCCR, HCCR_CMD_PAUSE);
206 
207 	if (IS_FC(isp)) {
208 		switch (isp->isp_type) {
209 		case ISP_HA_FC_2100:
210 			revname = "2100";
211 			break;
212 		case ISP_HA_FC_2200:
213 			revname = "2200";
214 			break;
215 		case ISP_HA_FC_2300:
216 			revname = "2300";
217 			break;
218 		default:
219 			break;
220 		}
221 		/*
222 		 * While we're paused, reset the FPM module and FBM fifos.
223 		 */
224 		ISP_WRITE(isp, BIU2100_CSR, BIU2100_FPM0_REGS);
225 		ISP_WRITE(isp, FPM_DIAG_CONFIG, FPM_SOFT_RESET);
226 		ISP_WRITE(isp, BIU2100_CSR, BIU2100_FB_REGS);
227 		ISP_WRITE(isp, FBM_CMD, FBMCMD_FIFO_RESET_ALL);
228 		ISP_WRITE(isp, BIU2100_CSR, BIU2100_RISC_REGS);
229 	} else if (IS_1240(isp)) {
230 		sdparam *sdp = isp->isp_param;
231 		revname = "1240";
232 		isp->isp_clock = 60;
233 		sdp->isp_ultramode = 1;
234 		sdp++;
235 		sdp->isp_ultramode = 1;
236 		/*
237 		 * XXX: Should probably do some bus sensing.
238 		 */
239 	} else if (IS_ULTRA2(isp)) {
240 		static const char m[] = "bus %d is in %s Mode";
241 		u_int16_t l;
242 		sdparam *sdp = isp->isp_param;
243 
244 		isp->isp_clock = 100;
245 
246 		if (IS_1280(isp))
247 			revname = "1280";
248 		else if (IS_1080(isp))
249 			revname = "1080";
250 		else if (IS_12160(isp))
251 			revname = "12160";
252 		else
253 			revname = "<UNKLVD>";
254 
255 		l = ISP_READ(isp, SXP_PINS_DIFF) & ISP1080_MODE_MASK;
256 		switch (l) {
257 		case ISP1080_LVD_MODE:
258 			sdp->isp_lvdmode = 1;
259 			isp_prt(isp, ISP_LOGCONFIG, m, 0, "LVD");
260 			break;
261 		case ISP1080_HVD_MODE:
262 			sdp->isp_diffmode = 1;
263 			isp_prt(isp, ISP_LOGCONFIG, m, 0, "Differential");
264 			break;
265 		case ISP1080_SE_MODE:
266 			sdp->isp_ultramode = 1;
267 			isp_prt(isp, ISP_LOGCONFIG, m, 0, "Single-Ended");
268 			break;
269 		default:
270 			isp_prt(isp, ISP_LOGERR,
271 			    "unknown mode on bus %d (0x%x)", 0, l);
272 			break;
273 		}
274 
275 		if (IS_DUALBUS(isp)) {
276 			sdp++;
277 			l = ISP_READ(isp, SXP_PINS_DIFF|SXP_BANK1_SELECT);
278 			l &= ISP1080_MODE_MASK;
279 			switch(l) {
280 			case ISP1080_LVD_MODE:
281 				sdp->isp_lvdmode = 1;
282 				isp_prt(isp, ISP_LOGCONFIG, m, 1, "LVD");
283 				break;
284 			case ISP1080_HVD_MODE:
285 				sdp->isp_diffmode = 1;
286 				isp_prt(isp, ISP_LOGCONFIG,
287 				    m, 1, "Differential");
288 				break;
289 			case ISP1080_SE_MODE:
290 				sdp->isp_ultramode = 1;
291 				isp_prt(isp, ISP_LOGCONFIG,
292 				    m, 1, "Single-Ended");
293 				break;
294 			default:
295 				isp_prt(isp, ISP_LOGERR,
296 				    "unknown mode on bus %d (0x%x)", 1, l);
297 				break;
298 			}
299 		}
300 	} else {
301 		sdparam *sdp = isp->isp_param;
302 		i = ISP_READ(isp, BIU_CONF0) & BIU_CONF0_HW_MASK;
303 		switch (i) {
304 		default:
305 			isp_prt(isp, ISP_LOGALL, "Unknown Chip Type 0x%x", i);
306 			/* FALLTHROUGH */
307 		case 1:
308 			revname = "1020";
309 			isp->isp_type = ISP_HA_SCSI_1020;
310 			isp->isp_clock = 40;
311 			break;
312 		case 2:
313 			/*
314 			 * Some 1020A chips are Ultra Capable, but don't
315 			 * run the clock rate up for that unless told to
316 			 * do so by the Ultra Capable bits being set.
317 			 */
318 			revname = "1020A";
319 			isp->isp_type = ISP_HA_SCSI_1020A;
320 			isp->isp_clock = 40;
321 			break;
322 		case 3:
323 			revname = "1040";
324 			isp->isp_type = ISP_HA_SCSI_1040;
325 			isp->isp_clock = 60;
326 			break;
327 		case 4:
328 			revname = "1040A";
329 			isp->isp_type = ISP_HA_SCSI_1040A;
330 			isp->isp_clock = 60;
331 			break;
332 		case 5:
333 			revname = "1040B";
334 			isp->isp_type = ISP_HA_SCSI_1040B;
335 			isp->isp_clock = 60;
336 			break;
337 		case 6:
338 			revname = "1040C";
339 			isp->isp_type = ISP_HA_SCSI_1040C;
340 			isp->isp_clock = 60;
341                         break;
342 		}
343 		/*
344 		 * Now, while we're at it, gather info about ultra
345 		 * and/or differential mode.
346 		 */
347 		if (ISP_READ(isp, SXP_PINS_DIFF) & SXP_PINS_DIFF_MODE) {
348 			isp_prt(isp, ISP_LOGCONFIG, "Differential Mode");
349 			sdp->isp_diffmode = 1;
350 		} else {
351 			sdp->isp_diffmode = 0;
352 		}
353 		i = ISP_READ(isp, RISC_PSR);
354 		if (isp->isp_bustype == ISP_BT_SBUS) {
355 			i &= RISC_PSR_SBUS_ULTRA;
356 		} else {
357 			i &= RISC_PSR_PCI_ULTRA;
358 		}
359 		if (i != 0) {
360 			isp_prt(isp, ISP_LOGCONFIG, "Ultra Mode Capable");
361 			sdp->isp_ultramode = 1;
362 			/*
363 			 * If we're in Ultra Mode, we have to be 60Mhz clock-
364 			 * even for the SBus version.
365 			 */
366 			isp->isp_clock = 60;
367 		} else {
368 			sdp->isp_ultramode = 0;
369 			/*
370 			 * Clock is known. Gronk.
371 			 */
372 		}
373 
374 		/*
375 		 * Machine dependent clock (if set) overrides
376 		 * our generic determinations.
377 		 */
378 		if (isp->isp_mdvec->dv_clock) {
379 			if (isp->isp_mdvec->dv_clock < isp->isp_clock) {
380 				isp->isp_clock = isp->isp_mdvec->dv_clock;
381 			}
382 		}
383 
384 	}
385 
386 	/*
387 	 * Clear instrumentation
388 	 */
389 	isp->isp_intcnt = isp->isp_intbogus = 0;
390 
391 	/*
392 	 * Do MD specific pre initialization
393 	 */
394 	ISP_RESET0(isp);
395 
396 again:
397 
398 	/*
399 	 * Hit the chip over the head with hammer,
400 	 * and give the ISP a chance to recover.
401 	 */
402 
403 	if (IS_SCSI(isp)) {
404 		ISP_WRITE(isp, BIU_ICR, BIU_ICR_SOFT_RESET);
405 		/*
406 		 * A slight delay...
407 		 */
408 		USEC_DELAY(100);
409 
410 		/*
411 		 * Clear data && control DMA engines.
412 		 */
413 		ISP_WRITE(isp, CDMA_CONTROL,
414 		    DMA_CNTRL_CLEAR_CHAN | DMA_CNTRL_RESET_INT);
415 		ISP_WRITE(isp, DDMA_CONTROL,
416 		    DMA_CNTRL_CLEAR_CHAN | DMA_CNTRL_RESET_INT);
417 
418 
419 	} else {
420 		ISP_WRITE(isp, BIU2100_CSR, BIU2100_SOFT_RESET);
421 		/*
422 		 * A slight delay...
423 		 */
424 		USEC_DELAY(100);
425 
426 		/*
427 		 * Clear data && control DMA engines.
428 		 */
429 		ISP_WRITE(isp, CDMA2100_CONTROL,
430 			DMA_CNTRL2100_CLEAR_CHAN | DMA_CNTRL2100_RESET_INT);
431 		ISP_WRITE(isp, TDMA2100_CONTROL,
432 			DMA_CNTRL2100_CLEAR_CHAN | DMA_CNTRL2100_RESET_INT);
433 		ISP_WRITE(isp, RDMA2100_CONTROL,
434 			DMA_CNTRL2100_CLEAR_CHAN | DMA_CNTRL2100_RESET_INT);
435 	}
436 
437 	/*
438 	 * Wait for ISP to be ready to go...
439 	 */
440 	loops = MBOX_DELAY_COUNT;
441 	for (;;) {
442 		if (IS_SCSI(isp)) {
443 			if (!(ISP_READ(isp, BIU_ICR) & BIU_ICR_SOFT_RESET))
444 				break;
445 		} else {
446 			if (!(ISP_READ(isp, BIU2100_CSR) & BIU2100_SOFT_RESET))
447 				break;
448 		}
449 		USEC_DELAY(100);
450 		if (--loops < 0) {
451 			ISP_DUMPREGS(isp, "chip reset timed out");
452 			return;
453 		}
454 	}
455 
456 	/*
457 	 * After we've fired this chip up, zero out the conf1 register
458 	 * for SCSI adapters and other settings for the 2100.
459 	 */
460 
461 	if (IS_SCSI(isp)) {
462 		ISP_WRITE(isp, BIU_CONF1, 0);
463 	} else {
464 		ISP_WRITE(isp, BIU2100_CSR, 0);
465 	}
466 
467 	/*
468 	 * Reset RISC Processor
469 	 */
470 	ISP_WRITE(isp, HCCR, HCCR_CMD_RESET);
471 	USEC_DELAY(100);
472 	/* Clear semaphore register (just to be sure) */
473 	ISP_WRITE(isp, BIU_SEMA, 0);
474 
475 	/*
476 	 * Establish some initial burst rate stuff.
477 	 * (only for the 1XX0 boards). This really should
478 	 * be done later after fetching from NVRAM.
479 	 */
480 	if (IS_SCSI(isp)) {
481 		u_int16_t tmp = isp->isp_mdvec->dv_conf1;
482 		/*
483 		 * Busted FIFO. Turn off all but burst enables.
484 		 */
485 		if (isp->isp_type == ISP_HA_SCSI_1040A) {
486 			tmp &= BIU_BURST_ENABLE;
487 		}
488 		ISP_SETBITS(isp, BIU_CONF1, tmp);
489 		if (tmp & BIU_BURST_ENABLE) {
490 			ISP_SETBITS(isp, CDMA_CONF, DMA_ENABLE_BURST);
491 			ISP_SETBITS(isp, DDMA_CONF, DMA_ENABLE_BURST);
492 		}
493 #ifdef	PTI_CARDS
494 		if (((sdparam *) isp->isp_param)->isp_ultramode) {
495 			while (ISP_READ(isp, RISC_MTR) != 0x1313) {
496 				ISP_WRITE(isp, RISC_MTR, 0x1313);
497 				ISP_WRITE(isp, HCCR, HCCR_CMD_STEP);
498 			}
499 		} else {
500 			ISP_WRITE(isp, RISC_MTR, 0x1212);
501 		}
502 		/*
503 		 * PTI specific register
504 		 */
505 		ISP_WRITE(isp, RISC_EMB, DUAL_BANK)
506 #else
507 		ISP_WRITE(isp, RISC_MTR, 0x1212);
508 #endif
509 	} else {
510 		ISP_WRITE(isp, RISC_MTR2100, 0x1212);
511 		if (IS_2200(isp) || IS_2300(isp)) {
512 			ISP_WRITE(isp, HCCR, HCCR_2X00_DISABLE_PARITY_PAUSE);
513 		}
514 	}
515 
516 	ISP_WRITE(isp, HCCR, HCCR_CMD_RELEASE); /* release paused processor */
517 
518 	/*
519 	 * Do MD specific post initialization
520 	 */
521 	ISP_RESET1(isp);
522 
523 	/*
524 	 * Wait for everything to finish firing up...
525 	 */
526 	loops = MBOX_DELAY_COUNT;
527 	while (ISP_READ(isp, OUTMAILBOX0) == MBOX_BUSY) {
528 		USEC_DELAY(100);
529 		if (--loops < 0) {
530 			isp_prt(isp, ISP_LOGERR,
531 			    "MBOX_BUSY never cleared on reset");
532 			return;
533 		}
534 	}
535 
536 	/*
537 	 * Up until this point we've done everything by just reading or
538 	 * setting registers. From this point on we rely on at least *some*
539 	 * kind of firmware running in the card.
540 	 */
541 
542 	/*
543 	 * Do some sanity checking.
544 	 */
545 	mbs.param[0] = MBOX_NO_OP;
546 	isp_mboxcmd(isp, &mbs, MBLOGALL);
547 	if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
548 		return;
549 	}
550 
551 	if (IS_SCSI(isp)) {
552 		mbs.param[0] = MBOX_MAILBOX_REG_TEST;
553 		mbs.param[1] = 0xdead;
554 		mbs.param[2] = 0xbeef;
555 		mbs.param[3] = 0xffff;
556 		mbs.param[4] = 0x1111;
557 		mbs.param[5] = 0xa5a5;
558 		isp_mboxcmd(isp, &mbs, MBLOGALL);
559 		if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
560 			return;
561 		}
562 		if (mbs.param[1] != 0xdead || mbs.param[2] != 0xbeef ||
563 		    mbs.param[3] != 0xffff || mbs.param[4] != 0x1111 ||
564 		    mbs.param[5] != 0xa5a5) {
565 			isp_prt(isp, ISP_LOGERR,
566 			    "Register Test Failed (0x%x 0x%x 0x%x 0x%x 0x%x)",
567 			    mbs.param[1], mbs.param[2], mbs.param[3],
568 			    mbs.param[4], mbs.param[5]);
569 			return;
570 		}
571 
572 	}
573 
574 	/*
575 	 * Download new Firmware, unless requested not to do so.
576 	 * This is made slightly trickier in some cases where the
577 	 * firmware of the ROM revision is newer than the revision
578 	 * compiled into the driver. So, where we used to compare
579 	 * versions of our f/w and the ROM f/w, now we just see
580 	 * whether we have f/w at all and whether a config flag
581 	 * has disabled our download.
582 	 */
583 	if ((isp->isp_mdvec->dv_ispfw == NULL) ||
584 	    (isp->isp_confopts & ISP_CFG_NORELOAD)) {
585 		dodnld = 0;
586 	}
587 
588 	if (dodnld) {
589 		u_int16_t fwlen  = isp->isp_mdvec->dv_ispfw[3];
590 		for (i = 0; i < fwlen; i++) {
591 			mbs.param[0] = MBOX_WRITE_RAM_WORD;
592 			mbs.param[1] = ISP_CODE_ORG + i;
593 			mbs.param[2] = isp->isp_mdvec->dv_ispfw[i];
594 			isp_mboxcmd(isp, &mbs, MBLOGNONE);
595 			if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
596 				isp_prt(isp, ISP_LOGERR,
597 				    "F/W download failed at word %d", i);
598 				dodnld = 0;
599 				goto again;
600 			}
601 		}
602 
603 		/*
604 		 * Verify that it downloaded correctly.
605 		 */
606 		mbs.param[0] = MBOX_VERIFY_CHECKSUM;
607 		mbs.param[1] = ISP_CODE_ORG;
608 		isp_mboxcmd(isp, &mbs, MBLOGNONE);
609 		if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
610 			isp_prt(isp, ISP_LOGERR, "Ram Checksum Failure");
611 			return;
612 		}
613 		isp->isp_loaded_fw = 1;
614 	} else {
615 		isp->isp_loaded_fw = 0;
616 		isp_prt(isp, ISP_LOGDEBUG2, "skipping f/w download");
617 	}
618 
619 	/*
620 	 * Now start it rolling.
621 	 *
622 	 * If we didn't actually download f/w,
623 	 * we still need to (re)start it.
624 	 */
625 
626 	mbs.param[0] = MBOX_EXEC_FIRMWARE;
627 	mbs.param[1] = ISP_CODE_ORG;
628 	isp_mboxcmd(isp, &mbs, MBLOGNONE);
629 	/* give it a chance to start */
630 	USEC_SLEEP(isp, 500);
631 
632 	if (IS_SCSI(isp)) {
633 		/*
634 		 * Set CLOCK RATE, but only if asked to.
635 		 */
636 		if (isp->isp_clock) {
637 			mbs.param[0] = MBOX_SET_CLOCK_RATE;
638 			mbs.param[1] = isp->isp_clock;
639 			isp_mboxcmd(isp, &mbs, MBLOGALL);
640 			/* we will try not to care if this fails */
641 		}
642 	}
643 
644 	mbs.param[0] = MBOX_ABOUT_FIRMWARE;
645 	isp_mboxcmd(isp, &mbs, MBLOGALL);
646 	if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
647 		return;
648 	}
649 	isp_prt(isp, ISP_LOGCONFIG,
650 	    "Board Revision %s, %s F/W Revision %d.%d.%d", revname,
651 	    dodnld? "loaded" : "resident", mbs.param[1], mbs.param[2],
652 	    mbs.param[3]);
653 	if (IS_FC(isp)) {
654 		isp_prt(isp, ISP_LOGCONFIG, "Firmware Attributes = 0x%x",
655 		    mbs.param[6]);
656 		if (ISP_READ(isp, BIU2100_CSR) & BIU2100_PCI64) {
657 			isp_prt(isp, ISP_LOGCONFIG,
658 			    "Installed in 64-Bit PCI slot");
659 		}
660 	}
661 
662 	isp->isp_fwrev[0] = mbs.param[1];
663 	isp->isp_fwrev[1] = mbs.param[2];
664 	isp->isp_fwrev[2] = mbs.param[3];
665 	if (isp->isp_romfw_rev[0] || isp->isp_romfw_rev[1] ||
666 	    isp->isp_romfw_rev[2]) {
667 		isp_prt(isp, ISP_LOGCONFIG, "Last F/W revision was %d.%d.%d",
668 		    isp->isp_romfw_rev[0], isp->isp_romfw_rev[1],
669 		    isp->isp_romfw_rev[2]);
670 	}
671 
672 	mbs.param[0] = MBOX_GET_FIRMWARE_STATUS;
673 	isp_mboxcmd(isp, &mbs, MBLOGALL);
674 	if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
675 		return;
676 	}
677 	isp->isp_maxcmds = mbs.param[2];
678 	isp_prt(isp, ISP_LOGINFO,
679 	    "%d max I/O commands supported", mbs.param[2]);
680 	isp_fw_state(isp);
681 
682 	/*
683 	 * Set up DMA for the request and result mailboxes.
684 	 */
685 	if (ISP_MBOXDMASETUP(isp) != 0) {
686 		isp_prt(isp, ISP_LOGERR, "Cannot setup DMA");
687 		return;
688 	}
689 	isp->isp_state = ISP_RESETSTATE;
690 
691 	/*
692 	 * Okay- now that we have new firmware running, we now (re)set our
693 	 * notion of how many luns we support. This is somewhat tricky because
694 	 * if we haven't loaded firmware, we don't have an easy way of telling
695 	 * how many luns we support.
696 	 *
697 	 * We'll make a simplifying assumption- if we loaded firmware, we
698 	 * are running with expanded lun firmware, otherwise not.
699 	 *
700 	 * Expanded lun firmware gives you 32 luns for SCSI cards and
701 	 * 65536 luns for Fibre Channel cards.
702 	 *
703 	 * Because the lun is in a a different position in the Request Queue
704 	 * Entry structure for Fibre Channel with expanded lun firmware, we
705 	 * can only support one lun (lun zero) when we don't know what kind
706 	 * of firmware we're running.
707 	 *
708 	 * Note that we only do this once (the first time thru isp_reset)
709 	 * because we may be called again after firmware has been loaded once
710 	 * and released.
711 	 */
712 	if (touched == 0) {
713 		if (dodnld) {
714 			if (IS_SCSI(isp)) {
715 				isp->isp_maxluns = 32;
716 			} else {
717 				isp->isp_maxluns = 65536;
718 			}
719 		} else {
720 			if (IS_SCSI(isp)) {
721 				isp->isp_maxluns = 8;
722 			} else {
723 				isp_prt(isp, ISP_LOGALL, warnlun);
724 				isp->isp_maxluns = 1;
725 			}
726 		}
727 	}
728 }
729 
730 /*
731  * Initialize Parameters of Hardware to a known state.
732  *
733  * Locks are held before coming here.
734  */
735 
736 void
737 isp_init(struct ispsoftc *isp)
738 {
739 	/*
740 	 * Must do this first to get defaults established.
741 	 */
742 	isp_setdfltparm(isp, 0);
743 	if (IS_DUALBUS(isp)) {
744 		isp_setdfltparm(isp, 1);
745 	}
746 	if (IS_FC(isp)) {
747 		isp_fibre_init(isp);
748 	} else {
749 		isp_scsi_init(isp);
750 	}
751 }
752 
753 static void
754 isp_scsi_init(struct ispsoftc *isp)
755 {
756 	sdparam *sdp_chan0, *sdp_chan1;
757 	mbreg_t mbs;
758 
759 	sdp_chan0 = isp->isp_param;
760 	sdp_chan1 = sdp_chan0;
761 	if (IS_DUALBUS(isp)) {
762 		sdp_chan1++;
763 	}
764 
765 	/*
766 	 * If we have no role (neither target nor initiator), return.
767 	 */
768 	if (isp->isp_role == ISP_ROLE_NONE) {
769 		return;
770 	}
771 
772 	/* First do overall per-card settings. */
773 
774 	/*
775 	 * If we have fast memory timing enabled, turn it on.
776 	 */
777 	if (sdp_chan0->isp_fast_mttr) {
778 		ISP_WRITE(isp, RISC_MTR, 0x1313);
779 	}
780 
781 	/*
782 	 * Set Retry Delay and Count.
783 	 * You set both channels at the same time.
784 	 */
785 	mbs.param[0] = MBOX_SET_RETRY_COUNT;
786 	mbs.param[1] = sdp_chan0->isp_retry_count;
787 	mbs.param[2] = sdp_chan0->isp_retry_delay;
788 	mbs.param[6] = sdp_chan1->isp_retry_count;
789 	mbs.param[7] = sdp_chan1->isp_retry_delay;
790 
791 	isp_mboxcmd(isp, &mbs, MBLOGALL);
792 	if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
793 		return;
794 	}
795 
796 	/*
797 	 * Set ASYNC DATA SETUP time. This is very important.
798 	 */
799 	mbs.param[0] = MBOX_SET_ASYNC_DATA_SETUP_TIME;
800 	mbs.param[1] = sdp_chan0->isp_async_data_setup;
801 	mbs.param[2] = sdp_chan1->isp_async_data_setup;
802 	isp_mboxcmd(isp, &mbs, MBLOGALL);
803 	if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
804 		return;
805 	}
806 
807 	/*
808 	 * Set ACTIVE Negation State.
809 	 */
810 	mbs.param[0] = MBOX_SET_ACT_NEG_STATE;
811 	mbs.param[1] =
812 	    (sdp_chan0->isp_req_ack_active_neg << 4) |
813 	    (sdp_chan0->isp_data_line_active_neg << 5);
814 	mbs.param[2] =
815 	    (sdp_chan1->isp_req_ack_active_neg << 4) |
816 	    (sdp_chan1->isp_data_line_active_neg << 5);
817 
818 	isp_mboxcmd(isp, &mbs, MBLOGNONE);
819 	if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
820 		isp_prt(isp, ISP_LOGERR,
821 		    "failed to set active negation state (%d,%d), (%d,%d)",
822 		    sdp_chan0->isp_req_ack_active_neg,
823 		    sdp_chan0->isp_data_line_active_neg,
824 		    sdp_chan1->isp_req_ack_active_neg,
825 		    sdp_chan1->isp_data_line_active_neg);
826 		/*
827 		 * But don't return.
828 		 */
829 	}
830 
831 	/*
832 	 * Set the Tag Aging limit
833 	 */
834 	mbs.param[0] = MBOX_SET_TAG_AGE_LIMIT;
835 	mbs.param[1] = sdp_chan0->isp_tag_aging;
836 	mbs.param[2] = sdp_chan1->isp_tag_aging;
837 	isp_mboxcmd(isp, &mbs, MBLOGALL);
838 	if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
839 		isp_prt(isp, ISP_LOGERR, "failed to set tag age limit (%d,%d)",
840 		    sdp_chan0->isp_tag_aging, sdp_chan1->isp_tag_aging);
841 		return;
842 	}
843 
844 	/*
845 	 * Set selection timeout.
846 	 */
847 	mbs.param[0] = MBOX_SET_SELECT_TIMEOUT;
848 	mbs.param[1] = sdp_chan0->isp_selection_timeout;
849 	mbs.param[2] = sdp_chan1->isp_selection_timeout;
850 	isp_mboxcmd(isp, &mbs, MBLOGALL);
851 	if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
852 		return;
853 	}
854 
855 	/* now do per-channel settings */
856 	isp_scsi_channel_init(isp, 0);
857 	if (IS_DUALBUS(isp))
858 		isp_scsi_channel_init(isp, 1);
859 
860 	/*
861 	 * Now enable request/response queues
862 	 */
863 
864 	mbs.param[0] = MBOX_INIT_RES_QUEUE;
865 	mbs.param[1] = RESULT_QUEUE_LEN(isp);
866 	mbs.param[2] = DMA_MSW(isp->isp_result_dma);
867 	mbs.param[3] = DMA_LSW(isp->isp_result_dma);
868 	mbs.param[4] = 0;
869 	mbs.param[5] = 0;
870 	isp_mboxcmd(isp, &mbs, MBLOGALL);
871 	if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
872 		return;
873 	}
874 	isp->isp_residx = mbs.param[5];
875 
876 	mbs.param[0] = MBOX_INIT_REQ_QUEUE;
877 	mbs.param[1] = RQUEST_QUEUE_LEN(isp);
878 	mbs.param[2] = DMA_MSW(isp->isp_rquest_dma);
879 	mbs.param[3] = DMA_LSW(isp->isp_rquest_dma);
880 	mbs.param[4] = 0;
881 	isp_mboxcmd(isp, &mbs, MBLOGALL);
882 	if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
883 		return;
884 	}
885 	isp->isp_reqidx = isp->isp_reqodx = mbs.param[4];
886 
887 	/*
888 	 * Turn on Fast Posting, LVD transitions
889 	 *
890 	 * Ultra2 F/W always has had fast posting (and LVD transitions)
891 	 *
892 	 * Ultra and older (i.e., SBus) cards may not. It's just safer
893 	 * to assume not for them.
894 	 */
895 
896 	mbs.param[0] = MBOX_SET_FW_FEATURES;
897 	mbs.param[1] = 0;
898 	if (IS_ULTRA2(isp))
899 		mbs.param[1] |= FW_FEATURE_LVD_NOTIFY;
900 	if (IS_ULTRA2(isp) || IS_1240(isp))
901 		mbs.param[1] |= FW_FEATURE_FAST_POST;
902 	if (mbs.param[1] != 0) {
903 		u_int16_t sfeat = mbs.param[1];
904 		isp_mboxcmd(isp, &mbs, MBLOGALL);
905 		if (mbs.param[0] == MBOX_COMMAND_COMPLETE) {
906 			isp_prt(isp, ISP_LOGINFO,
907 			    "Enabled FW features (0x%x)", sfeat);
908 		}
909 	}
910 
911 	/*
912 	 * Let the outer layers decide whether to issue a SCSI bus reset.
913 	 */
914 	isp->isp_state = ISP_INITSTATE;
915 }
916 
917 static void
918 isp_scsi_channel_init(struct ispsoftc *isp, int channel)
919 {
920 	sdparam *sdp;
921 	mbreg_t mbs;
922 	int tgt;
923 
924 	sdp = isp->isp_param;
925 	sdp += channel;
926 
927 	/*
928 	 * Set (possibly new) Initiator ID.
929 	 */
930 	mbs.param[0] = MBOX_SET_INIT_SCSI_ID;
931 	mbs.param[1] = (channel << 7) | sdp->isp_initiator_id;
932 	isp_mboxcmd(isp, &mbs, MBLOGALL);
933 	if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
934 		return;
935 	}
936 	isp_prt(isp, ISP_LOGINFO, "Initiator ID is %d on Channel %d",
937 	    sdp->isp_initiator_id, channel);
938 
939 
940 	/*
941 	 * Set current per-target parameters to a safe minimum.
942 	 */
943 	for (tgt = 0; tgt < MAX_TARGETS; tgt++) {
944 		int lun;
945 		u_int16_t sdf;
946 
947 		if (sdp->isp_devparam[tgt].dev_enable == 0) {
948 			continue;
949 		}
950 #ifndef	ISP_TARGET_MODE
951 		if (tgt == sdp->isp_initiator_id) {
952 			sdf = DPARM_DEFAULT;
953 		} else {
954 			sdf = DPARM_SAFE_DFLT;
955 			/*
956 			 * It is not quite clear when this changed over so that
957 			 * we could force narrow and async for 1000/1020 cards,
958 			 * but assume that this is only the case for loaded
959 			 * firmware.
960 			 */
961 			if (isp->isp_loaded_fw) {
962 				sdf |= DPARM_NARROW | DPARM_ASYNC;
963 			}
964 		}
965 #else
966 		/*
967 		 * The !$*!)$!$)* f/w uses the same index into some
968 		 * internal table to decide how to respond to negotiations,
969 		 * so if we've said "let's be safe" for ID X, and ID X
970 		 * selects *us*, the negotiations will back to 'safe'
971 		 * (as in narrow/async). What the f/w *should* do is
972 		 * use the initiator id settings to decide how to respond.
973 		 */
974 		sdf = DPARM_DEFAULT;
975 #endif
976 		mbs.param[0] = MBOX_SET_TARGET_PARAMS;
977 		mbs.param[1] = (channel << 15) | (tgt << 8);
978 		mbs.param[2] = sdf;
979 		if ((sdf & DPARM_SYNC) == 0) {
980 			mbs.param[3] = 0;
981 		} else {
982 			mbs.param[3] =
983 			    (sdp->isp_devparam[tgt].sync_offset << 8) |
984 			    (sdp->isp_devparam[tgt].sync_period);
985 		}
986 		isp_prt(isp, ISP_LOGDEBUG0,
987 		    "bus %d set tgt %d flags 0x%x off 0x%x period 0x%x",
988 		    channel, tgt, mbs.param[2], mbs.param[3] >> 8,
989 		    mbs.param[3] & 0xff);
990 		isp_mboxcmd(isp, &mbs, MBLOGNONE);
991 		if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
992 			sdf = DPARM_SAFE_DFLT;
993 			mbs.param[0] = MBOX_SET_TARGET_PARAMS;
994 			mbs.param[1] = (tgt << 8) | (channel << 15);
995 			mbs.param[2] = sdf;
996 			mbs.param[3] = 0;
997 			isp_mboxcmd(isp, &mbs, MBLOGALL);
998 			if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
999 				continue;
1000 			}
1001 		}
1002 
1003 		/*
1004 		 * We don't update any information directly from the f/w
1005 		 * because we need to run at least one command to cause a
1006 		 * new state to be latched up. So, we just assume that we
1007 		 * converge to the values we just had set.
1008 		 *
1009 		 * Ensure that we don't believe tagged queuing is enabled yet.
1010 		 * It turns out that sometimes the ISP just ignores our
1011 		 * attempts to set parameters for devices that it hasn't
1012 		 * seen yet.
1013 		 */
1014 		sdp->isp_devparam[tgt].cur_dflags = sdf & ~DPARM_TQING;
1015 		for (lun = 0; lun < (int) isp->isp_maxluns; lun++) {
1016 			mbs.param[0] = MBOX_SET_DEV_QUEUE_PARAMS;
1017 			mbs.param[1] = (channel << 15) | (tgt << 8) | lun;
1018 			mbs.param[2] = sdp->isp_max_queue_depth;
1019 			mbs.param[3] = sdp->isp_devparam[tgt].exc_throttle;
1020 			isp_mboxcmd(isp, &mbs, MBLOGALL);
1021 			if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
1022 				break;
1023 			}
1024 		}
1025 	}
1026 	for (tgt = 0; tgt < MAX_TARGETS; tgt++) {
1027 		if (sdp->isp_devparam[tgt].dev_refresh) {
1028 			isp->isp_sendmarker |= (1 << channel);
1029 			isp->isp_update |= (1 << channel);
1030 			break;
1031 		}
1032 	}
1033 }
1034 
1035 /*
1036  * Fibre Channel specific initialization.
1037  *
1038  * Locks are held before coming here.
1039  */
1040 static void
1041 isp_fibre_init(struct ispsoftc *isp)
1042 {
1043 	fcparam *fcp;
1044 	isp_icb_t *icbp;
1045 	mbreg_t mbs;
1046 	int loopid;
1047 	u_int64_t nwwn, pwwn;
1048 
1049 	fcp = isp->isp_param;
1050 
1051 	/*
1052 	 * Do this *before* initializing the firmware.
1053 	 */
1054 	isp_mark_getpdb_all(isp);
1055 	fcp->isp_fwstate = FW_CONFIG_WAIT;
1056 	fcp->isp_loopstate = LOOP_NIL;
1057 
1058 	/*
1059 	 * If we have no role (neither target nor initiator), return.
1060 	 */
1061 	if (isp->isp_role == ISP_ROLE_NONE) {
1062 		return;
1063 	}
1064 
1065 	loopid = DEFAULT_LOOPID(isp);
1066 	icbp = (isp_icb_t *) fcp->isp_scratch;
1067 	MEMZERO(icbp, sizeof (*icbp));
1068 
1069 	icbp->icb_version = ICB_VERSION1;
1070 
1071 	/*
1072 	 * Firmware Options are either retrieved from NVRAM or
1073 	 * are patched elsewhere. We check them for sanity here
1074 	 * and make changes based on board revision, but otherwise
1075 	 * let others decide policy.
1076 	 */
1077 
1078 	/*
1079 	 * If this is a 2100 < revision 5, we have to turn off FAIRNESS.
1080 	 */
1081 	if ((isp->isp_type == ISP_HA_FC_2100) && isp->isp_revision < 5) {
1082 		fcp->isp_fwoptions &= ~ICBOPT_FAIRNESS;
1083 	}
1084 
1085 	/*
1086 	 * We have to use FULL LOGIN even though it resets the loop too much
1087 	 * because otherwise port database entries don't get updated after
1088 	 * a LIP- this is a known f/w bug for 2100 f/w less than 1.17.0.
1089 	 */
1090 	if (ISP_FW_REVX(isp->isp_fwrev) < ISP_FW_REV(1, 17, 0)) {
1091 		fcp->isp_fwoptions |= ICBOPT_FULL_LOGIN;
1092 	}
1093 
1094 	/*
1095 	 * Insist on Port Database Update Async notifications
1096 	 */
1097 	fcp->isp_fwoptions |= ICBOPT_PDBCHANGE_AE;
1098 
1099 
1100 	/*
1101 	 * Make sure that target role reflects into fwoptions.
1102 	 */
1103 	if (isp->isp_role & ISP_ROLE_TARGET) {
1104 		fcp->isp_fwoptions |= ICBOPT_TGT_ENABLE;
1105 	} else {
1106 		fcp->isp_fwoptions &= ~ICBOPT_TGT_ENABLE;
1107 	}
1108 
1109 	/*
1110 	 * Propagate all of this into the ICB structure.
1111 	 */
1112 	icbp->icb_fwoptions = fcp->isp_fwoptions;
1113 	icbp->icb_maxfrmlen = fcp->isp_maxfrmlen;
1114 	if (icbp->icb_maxfrmlen < ICB_MIN_FRMLEN ||
1115 	    icbp->icb_maxfrmlen > ICB_MAX_FRMLEN) {
1116 		isp_prt(isp, ISP_LOGERR,
1117 		    "bad frame length (%d) from NVRAM- using %d",
1118 		    fcp->isp_maxfrmlen, ICB_DFLT_FRMLEN);
1119 		icbp->icb_maxfrmlen = ICB_DFLT_FRMLEN;
1120 	}
1121 	icbp->icb_maxalloc = fcp->isp_maxalloc;
1122 	if (icbp->icb_maxalloc < 1) {
1123 		isp_prt(isp, ISP_LOGERR,
1124 		    "bad maximum allocation (%d)- using 16", fcp->isp_maxalloc);
1125 		icbp->icb_maxalloc = 16;
1126 	}
1127 	icbp->icb_execthrottle = fcp->isp_execthrottle;
1128 	if (icbp->icb_execthrottle < 1) {
1129 		isp_prt(isp, ISP_LOGERR,
1130 		    "bad execution throttle of %d- using 16",
1131 		    fcp->isp_execthrottle);
1132 		icbp->icb_execthrottle = ICB_DFLT_THROTTLE;
1133 	}
1134 	icbp->icb_retry_delay = fcp->isp_retry_delay;
1135 	icbp->icb_retry_count = fcp->isp_retry_count;
1136 	icbp->icb_hardaddr = loopid;
1137 	/*
1138 	 * Right now we just set extended options to prefer point-to-point
1139 	 * over loop based upon some soft config options.
1140 	 */
1141 	if (IS_2200(isp) || IS_2300(isp)) {
1142 		icbp->icb_fwoptions |= ICBOPT_EXTENDED;
1143 		/*
1144 		 * Prefer or force Point-To-Point instead Loop?
1145 		 */
1146 		switch(isp->isp_confopts & ISP_CFG_PORT_PREF) {
1147 		case ISP_CFG_NPORT:
1148 			icbp->icb_xfwoptions = ICBXOPT_PTP_2_LOOP;
1149 			break;
1150 		case ISP_CFG_NPORT_ONLY:
1151 			icbp->icb_xfwoptions = ICBXOPT_PTP_ONLY;
1152 			break;
1153 		case ISP_CFG_LPORT_ONLY:
1154 			icbp->icb_xfwoptions = ICBXOPT_LOOP_ONLY;
1155 			break;
1156 		default:
1157 			icbp->icb_xfwoptions = ICBXOPT_LOOP_2_PTP;
1158 			break;
1159 		}
1160 	}
1161 	icbp->icb_logintime = 60;	/* 60 second login timeout */
1162 
1163 	nwwn = ISP_NODEWWN(isp);
1164 	pwwn = ISP_PORTWWN(isp);
1165 	if (nwwn && pwwn) {
1166 		icbp->icb_fwoptions |= ICBOPT_BOTH_WWNS;
1167 		MAKE_NODE_NAME_FROM_WWN(icbp->icb_nodename, nwwn);
1168 		MAKE_NODE_NAME_FROM_WWN(icbp->icb_portname, pwwn);
1169 		isp_prt(isp, ISP_LOGDEBUG1,
1170 		    "Setting ICB Node 0x%08x%08x Port 0x%08x%08x",
1171 		    ((u_int32_t) (nwwn >> 32)),
1172 		    ((u_int32_t) (nwwn & 0xffffffff)),
1173 		    ((u_int32_t) (pwwn >> 32)),
1174 		    ((u_int32_t) (pwwn & 0xffffffff)));
1175 	} else {
1176 		isp_prt(isp, ISP_LOGDEBUG1, "Not using any WWNs");
1177 		icbp->icb_fwoptions &= ~(ICBOPT_BOTH_WWNS|ICBOPT_FULL_LOGIN);
1178 	}
1179 	icbp->icb_rqstqlen = RQUEST_QUEUE_LEN(isp);
1180 	icbp->icb_rsltqlen = RESULT_QUEUE_LEN(isp);
1181 	icbp->icb_rqstaddr[RQRSP_ADDR0015] = DMA_LSW(isp->isp_rquest_dma);
1182 	icbp->icb_rqstaddr[RQRSP_ADDR1631] = DMA_MSW(isp->isp_rquest_dma);
1183 	icbp->icb_respaddr[RQRSP_ADDR0015] = DMA_LSW(isp->isp_result_dma);
1184 	icbp->icb_respaddr[RQRSP_ADDR1631] = DMA_MSW(isp->isp_result_dma);
1185 	isp_prt(isp, ISP_LOGDEBUG1,
1186 	    "isp_fibre_init: fwoptions 0x%x", fcp->isp_fwoptions);
1187 	ISP_SWIZZLE_ICB(isp, icbp);
1188 
1189 
1190 	/*
1191 	 * Init the firmware
1192 	 */
1193 	mbs.param[0] = MBOX_INIT_FIRMWARE;
1194 	mbs.param[1] = 0;
1195 	mbs.param[2] = DMA_MSW(fcp->isp_scdma);
1196 	mbs.param[3] = DMA_LSW(fcp->isp_scdma);
1197 	mbs.param[4] = 0;
1198 	mbs.param[5] = 0;
1199 	mbs.param[6] = 0;
1200 	mbs.param[7] = 0;
1201 	isp_mboxcmd(isp, &mbs, MBLOGALL);
1202 	if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
1203 		return;
1204 	}
1205 	isp->isp_reqidx = isp->isp_reqodx = 0;
1206 	isp->isp_residx = 0;
1207 	isp->isp_sendmarker = 1;
1208 
1209 	/*
1210 	 * Whatever happens, we're now committed to being here.
1211 	 */
1212 	isp->isp_state = ISP_INITSTATE;
1213 }
1214 
1215 /*
1216  * Fibre Channel Support- get the port database for the id.
1217  *
1218  * Locks are held before coming here. Return 0 if success,
1219  * else failure.
1220  */
1221 
1222 static int
1223 isp_getmap(struct ispsoftc *isp, fcpos_map_t *map)
1224 {
1225 	fcparam *fcp = (fcparam *) isp->isp_param;
1226 	mbreg_t mbs;
1227 
1228 	mbs.param[0] = MBOX_GET_FC_AL_POSITION_MAP;
1229 	mbs.param[1] = 0;
1230 	mbs.param[2] = DMA_MSW(fcp->isp_scdma);
1231 	mbs.param[3] = DMA_LSW(fcp->isp_scdma);
1232 	/*
1233 	 * Unneeded. For the 2100, except for initializing f/w, registers
1234 	 * 4/5 have to not be written to.
1235 	 *	mbs.param[4] = 0;
1236 	 *	mbs.param[5] = 0;
1237 	 *
1238 	 */
1239 	mbs.param[6] = 0;
1240 	mbs.param[7] = 0;
1241 	isp_mboxcmd(isp, &mbs, MBLOGALL & ~MBOX_COMMAND_PARAM_ERROR);
1242 	if (mbs.param[0] == MBOX_COMMAND_COMPLETE) {
1243 		MEMCPY(map, fcp->isp_scratch, sizeof (fcpos_map_t));
1244 		map->fwmap = mbs.param[1] != 0;
1245 		return (0);
1246 	}
1247 	return (-1);
1248 }
1249 
1250 static void
1251 isp_mark_getpdb_all(struct ispsoftc *isp)
1252 {
1253 	fcparam *fcp = (fcparam *) isp->isp_param;
1254 	int i;
1255 	for (i = 0; i < MAX_FC_TARG; i++) {
1256 		fcp->portdb[i].valid = fcp->portdb[i].fabric_dev = 0;
1257 	}
1258 }
1259 
1260 static int
1261 isp_getpdb(struct ispsoftc *isp, int id, isp_pdb_t *pdbp)
1262 {
1263 	fcparam *fcp = (fcparam *) isp->isp_param;
1264 	mbreg_t mbs;
1265 
1266 	mbs.param[0] = MBOX_GET_PORT_DB;
1267 	mbs.param[1] = id << 8;
1268 	mbs.param[2] = DMA_MSW(fcp->isp_scdma);
1269 	mbs.param[3] = DMA_LSW(fcp->isp_scdma);
1270 	/*
1271 	 * Unneeded. For the 2100, except for initializing f/w, registers
1272 	 * 4/5 have to not be written to.
1273 	 *	mbs.param[4] = 0;
1274 	 *	mbs.param[5] = 0;
1275 	 *
1276 	 */
1277 	mbs.param[6] = 0;
1278 	mbs.param[7] = 0;
1279 	isp_mboxcmd(isp, &mbs, MBLOGALL & ~MBOX_COMMAND_PARAM_ERROR);
1280 	if (mbs.param[0] == MBOX_COMMAND_COMPLETE) {
1281 		ISP_UNSWIZZLE_AND_COPY_PDBP(isp, pdbp, fcp->isp_scratch);
1282 		return (0);
1283 	}
1284 	return (-1);
1285 }
1286 
1287 static u_int64_t
1288 isp_get_portname(struct ispsoftc *isp, int loopid, int nodename)
1289 {
1290 	u_int64_t wwn = 0;
1291 	mbreg_t mbs;
1292 
1293 	mbs.param[0] = MBOX_GET_PORT_NAME;
1294 	mbs.param[1] = loopid << 8;
1295 	if (nodename)
1296 		mbs.param[1] |= 1;
1297 	isp_mboxcmd(isp, &mbs, MBLOGALL & ~MBOX_COMMAND_PARAM_ERROR);
1298 	if (mbs.param[0] == MBOX_COMMAND_COMPLETE) {
1299 		wwn =
1300 		    (((u_int64_t)(mbs.param[2] & 0xff)) << 56) |
1301 		    (((u_int64_t)(mbs.param[2] >> 8))	<< 48) |
1302 		    (((u_int64_t)(mbs.param[3] & 0xff))	<< 40) |
1303 		    (((u_int64_t)(mbs.param[3] >> 8))	<< 32) |
1304 		    (((u_int64_t)(mbs.param[6] & 0xff))	<< 24) |
1305 		    (((u_int64_t)(mbs.param[6] >> 8))	<< 16) |
1306 		    (((u_int64_t)(mbs.param[7] & 0xff))	<<  8) |
1307 		    (((u_int64_t)(mbs.param[7] >> 8)));
1308 	}
1309 	return (wwn);
1310 }
1311 
1312 /*
1313  * Make sure we have good FC link and know our Loop ID.
1314  */
1315 
1316 static int
1317 isp_fclink_test(struct ispsoftc *isp, int usdelay)
1318 {
1319 	static char *toponames[] = {
1320 		"Private Loop",
1321 		"FL Port",
1322 		"N-Port to N-Port",
1323 		"F Port",
1324 		"F Port (no FLOGI_ACC response)"
1325 	};
1326 	mbreg_t mbs;
1327 	int count, check_for_fabric;
1328 	u_int8_t lwfs;
1329 	fcparam *fcp;
1330 	struct lportdb *lp;
1331 	isp_pdb_t pdb;
1332 
1333 	fcp = isp->isp_param;
1334 
1335 	/*
1336 	 * XXX: Here is where we would start a 'loop dead' timeout
1337 	 */
1338 
1339 	/*
1340 	 * Wait up to N microseconds for F/W to go to a ready state.
1341 	 */
1342 	lwfs = FW_CONFIG_WAIT;
1343 	count = 0;
1344 	while (count < usdelay) {
1345 		u_int64_t enano;
1346 		u_int32_t wrk;
1347 		NANOTIME_T hra, hrb;
1348 
1349 		GET_NANOTIME(&hra);
1350 		isp_fw_state(isp);
1351 		if (lwfs != fcp->isp_fwstate) {
1352 			isp_prt(isp, ISP_LOGINFO, "Firmware State <%s->%s>",
1353 			    isp2100_fw_statename((int)lwfs),
1354 			    isp2100_fw_statename((int)fcp->isp_fwstate));
1355 			lwfs = fcp->isp_fwstate;
1356 		}
1357 		if (fcp->isp_fwstate == FW_READY) {
1358 			break;
1359 		}
1360 		GET_NANOTIME(&hrb);
1361 
1362 		/*
1363 		 * Get the elapsed time in nanoseconds.
1364 		 * Always guaranteed to be non-zero.
1365 		 */
1366 		enano = NANOTIME_SUB(&hrb, &hra);
1367 
1368 		isp_prt(isp, ISP_LOGDEBUG1,
1369 		    "usec%d: 0x%lx->0x%lx enano 0x%x%08x",
1370 		    count, (long) GET_NANOSEC(&hra), (long) GET_NANOSEC(&hrb),
1371 		    (u_int32_t)(enano >> 32), (u_int32_t)(enano & 0xffffffff));
1372 
1373 		/*
1374 		 * If the elapsed time is less than 1 millisecond,
1375 		 * delay a period of time up to that millisecond of
1376 		 * waiting.
1377 		 *
1378 		 * This peculiar code is an attempt to try and avoid
1379 		 * invoking u_int64_t math support functions for some
1380 		 * platforms where linkage is a problem.
1381 		 */
1382 		if (enano < (1000 * 1000)) {
1383 			count += 1000;
1384 			enano = (1000 * 1000) - enano;
1385 			while (enano > (u_int64_t) 4000000000U) {
1386 				USEC_SLEEP(isp, 4000000);
1387 				enano -= (u_int64_t) 4000000000U;
1388 			}
1389 			wrk = enano;
1390 			wrk /= 1000;
1391 			USEC_SLEEP(isp, wrk);
1392 		} else {
1393 			while (enano > (u_int64_t) 4000000000U) {
1394 				count += 4000000;
1395 				enano -= (u_int64_t) 4000000000U;
1396 			}
1397 			wrk = enano;
1398 			count += (wrk / 1000);
1399 		}
1400 	}
1401 
1402 	/*
1403 	 * If we haven't gone to 'ready' state, return.
1404 	 */
1405 	if (fcp->isp_fwstate != FW_READY) {
1406 		return (-1);
1407 	}
1408 
1409 	/*
1410 	 * Get our Loop ID (if possible). We really need to have it.
1411 	 */
1412 	mbs.param[0] = MBOX_GET_LOOP_ID;
1413 	isp_mboxcmd(isp, &mbs, MBLOGALL);
1414 	if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
1415 		return (-1);
1416 	}
1417 	fcp->isp_loopid = mbs.param[1];
1418 	if (IS_2200(isp) || IS_2300(isp)) {
1419 		int topo = (int) mbs.param[6];
1420 		if (topo < TOPO_NL_PORT || topo > TOPO_PTP_STUB)
1421 			topo = TOPO_PTP_STUB;
1422 		fcp->isp_topo = topo;
1423 	} else {
1424 		fcp->isp_topo = TOPO_NL_PORT;
1425 	}
1426 	fcp->isp_portid = fcp->isp_alpa = mbs.param[2] & 0xff;
1427 
1428 	/*
1429 	 * Check to see if we're on a fabric by trying to see if we
1430 	 * can talk to the fabric name server. This can be a bit
1431 	 * tricky because if we're a 2100, we should check always
1432 	 * (in case we're connected to an server doing aliasing).
1433 	 */
1434 	fcp->isp_onfabric = 0;
1435 
1436 	if (IS_2100(isp))
1437 		check_for_fabric = 1;
1438 	else if (fcp->isp_topo == TOPO_FL_PORT || fcp->isp_topo == TOPO_F_PORT)
1439 		check_for_fabric = 1;
1440 	else
1441 		check_for_fabric = 0;
1442 
1443 	if (check_for_fabric && isp_getpdb(isp, FL_PORT_ID, &pdb) == 0) {
1444 		int loopid = FL_PORT_ID;
1445 		if (IS_2100(isp)) {
1446 			fcp->isp_topo = TOPO_FL_PORT;
1447 		}
1448 
1449 		if (BITS2WORD(pdb.pdb_portid_bits) == 0) {
1450 			/*
1451 			 * Crock.
1452 			 */
1453 			fcp->isp_topo = TOPO_NL_PORT;
1454 			goto not_on_fabric;
1455 		}
1456 		fcp->isp_portid = mbs.param[2] | ((int) mbs.param[3] << 16);
1457 
1458 		/*
1459 		 * Save the Fabric controller's port database entry.
1460 		 */
1461 		lp = &fcp->portdb[loopid];
1462 		lp->node_wwn =
1463 		    (((u_int64_t)pdb.pdb_nodename[0]) << 56) |
1464 		    (((u_int64_t)pdb.pdb_nodename[1]) << 48) |
1465 		    (((u_int64_t)pdb.pdb_nodename[2]) << 40) |
1466 		    (((u_int64_t)pdb.pdb_nodename[3]) << 32) |
1467 		    (((u_int64_t)pdb.pdb_nodename[4]) << 24) |
1468 		    (((u_int64_t)pdb.pdb_nodename[5]) << 16) |
1469 		    (((u_int64_t)pdb.pdb_nodename[6]) <<  8) |
1470 		    (((u_int64_t)pdb.pdb_nodename[7]));
1471 		lp->port_wwn =
1472 		    (((u_int64_t)pdb.pdb_portname[0]) << 56) |
1473 		    (((u_int64_t)pdb.pdb_portname[1]) << 48) |
1474 		    (((u_int64_t)pdb.pdb_portname[2]) << 40) |
1475 		    (((u_int64_t)pdb.pdb_portname[3]) << 32) |
1476 		    (((u_int64_t)pdb.pdb_portname[4]) << 24) |
1477 		    (((u_int64_t)pdb.pdb_portname[5]) << 16) |
1478 		    (((u_int64_t)pdb.pdb_portname[6]) <<  8) |
1479 		    (((u_int64_t)pdb.pdb_portname[7]));
1480 		lp->roles =
1481 		    (pdb.pdb_prli_svc3 & SVC3_ROLE_MASK) >> SVC3_ROLE_SHIFT;
1482 		lp->portid = BITS2WORD(pdb.pdb_portid_bits);
1483 		lp->loopid = pdb.pdb_loopid;
1484 		lp->loggedin = lp->valid = 1;
1485 		fcp->isp_onfabric = 1;
1486 		(void) isp_async(isp, ISPASYNC_PROMENADE, &loopid);
1487 		isp_register_fc4_type(isp);
1488 	} else {
1489 not_on_fabric:
1490 		fcp->isp_onfabric = 0;
1491 		fcp->portdb[FL_PORT_ID].valid = 0;
1492 	}
1493 
1494 	isp_prt(isp, ISP_LOGINFO, topology, fcp->isp_loopid, fcp->isp_alpa,
1495 	    fcp->isp_portid, fcp->isp_loopstate, toponames[fcp->isp_topo]);
1496 
1497 	/*
1498 	 * Announce ourselves, too. This involves synthesizing an entry.
1499 	 */
1500 	if (fcp->isp_iid_set == 0) {
1501 		fcp->isp_iid_set = 1;
1502 		fcp->isp_iid = fcp->isp_loopid;
1503 		lp = &fcp->portdb[fcp->isp_iid];
1504 	} else {
1505 		lp = &fcp->portdb[fcp->isp_iid];
1506 		if (fcp->isp_portid != lp->portid ||
1507 		    fcp->isp_loopid != lp->loopid ||
1508 		    fcp->isp_nodewwn != ISP_NODEWWN(isp) ||
1509 		    fcp->isp_portwwn != ISP_PORTWWN(isp)) {
1510 			lp->valid = 0;
1511 			count = fcp->isp_iid;
1512 			(void) isp_async(isp, ISPASYNC_PROMENADE, &count);
1513 		}
1514 	}
1515 	lp->loopid = fcp->isp_loopid;
1516 	lp->portid = fcp->isp_portid;
1517 	lp->node_wwn = ISP_NODEWWN(isp);
1518 	lp->port_wwn = ISP_PORTWWN(isp);
1519 	switch (isp->isp_role) {
1520 	case ISP_ROLE_NONE:
1521 		lp->roles = 0;
1522 		break;
1523 	case ISP_ROLE_TARGET:
1524 		lp->roles = SVC3_TGT_ROLE >> SVC3_ROLE_SHIFT;
1525 		break;
1526 	case ISP_ROLE_INITIATOR:
1527 		lp->roles = SVC3_INI_ROLE >> SVC3_ROLE_SHIFT;
1528 		break;
1529 	case ISP_ROLE_BOTH:
1530 		lp->roles = (SVC3_INI_ROLE|SVC3_TGT_ROLE) >> SVC3_ROLE_SHIFT;
1531 		break;
1532 	}
1533 	lp->loggedin = lp->valid = 1;
1534 	count = fcp->isp_iid;
1535 	(void) isp_async(isp, ISPASYNC_PROMENADE, &count);
1536 	return (0);
1537 }
1538 
1539 static char *
1540 isp2100_fw_statename(int state)
1541 {
1542 	switch(state) {
1543 	case FW_CONFIG_WAIT:	return "Config Wait";
1544 	case FW_WAIT_AL_PA:	return "Waiting for AL_PA";
1545 	case FW_WAIT_LOGIN:	return "Wait Login";
1546 	case FW_READY:		return "Ready";
1547 	case FW_LOSS_OF_SYNC:	return "Loss Of Sync";
1548 	case FW_ERROR:		return "Error";
1549 	case FW_REINIT:		return "Re-Init";
1550 	case FW_NON_PART:	return "Nonparticipating";
1551 	default:		return "?????";
1552 	}
1553 }
1554 
1555 /*
1556  * Synchronize our soft copy of the port database with what the f/w thinks
1557  * (with a view toward possibly for a specific target....)
1558  */
1559 
1560 static int
1561 isp_pdb_sync(struct ispsoftc *isp)
1562 {
1563 	struct lportdb *lp;
1564 	fcparam *fcp = isp->isp_param;
1565 	isp_pdb_t pdb;
1566 	int loopid, base, lim;
1567 
1568 	/*
1569 	 * Make sure we're okay for doing this right now.
1570 	 */
1571 	if (fcp->isp_loopstate != LOOP_PDB_RCVD &&
1572 	    fcp->isp_loopstate != LOOP_FSCAN_DONE &&
1573 	    fcp->isp_loopstate != LOOP_LSCAN_DONE) {
1574 		return (-1);
1575 	}
1576 
1577 	if (fcp->isp_topo == TOPO_FL_PORT || fcp->isp_topo == TOPO_NL_PORT ||
1578 	    fcp->isp_topo == TOPO_N_PORT) {
1579 		if (fcp->isp_loopstate < LOOP_LSCAN_DONE) {
1580 			if (isp_scan_loop(isp) != 0) {
1581 				return (-1);
1582 			}
1583 		}
1584 	}
1585 	fcp->isp_loopstate = LOOP_SYNCING_PDB;
1586 
1587 	/*
1588 	 * If we get this far, we've settled our differences with the f/w
1589 	 * (for local loop device) and we can say that the loop state is ready.
1590 	 */
1591 
1592 	if (fcp->isp_topo == TOPO_NL_PORT) {
1593 		fcp->loop_seen_once = 1;
1594 		fcp->isp_loopstate = LOOP_READY;
1595 		return (0);
1596 	}
1597 
1598 	/*
1599 	 * Find all Fabric Entities that didn't make it from one scan to the
1600 	 * next and let the world know they went away. Scan the whole database.
1601 	 */
1602 	for (lp = &fcp->portdb[0]; lp < &fcp->portdb[MAX_FC_TARG]; lp++) {
1603 		if (lp->was_fabric_dev && lp->fabric_dev == 0) {
1604 			loopid = lp - fcp->portdb;
1605 			lp->valid = 0;	/* should already be set */
1606 			(void) isp_async(isp, ISPASYNC_PROMENADE, &loopid);
1607 			MEMZERO((void *) lp, sizeof (*lp));
1608 			continue;
1609 		}
1610 		lp->was_fabric_dev = lp->fabric_dev;
1611 	}
1612 
1613 	if (fcp->isp_topo == TOPO_FL_PORT)
1614 		base = FC_SNS_ID+1;
1615 	else
1616 		base = 0;
1617 
1618 	if (fcp->isp_topo == TOPO_N_PORT)
1619 		lim = 1;
1620 	else
1621 		lim = MAX_FC_TARG;
1622 
1623 	/*
1624 	 * Now log in any fabric devices that the outer layer has
1625 	 * left for us to see. This seems the most sane policy
1626 	 * for the moment.
1627 	 */
1628 	for (lp = &fcp->portdb[base]; lp < &fcp->portdb[lim]; lp++) {
1629 		u_int32_t portid;
1630 		mbreg_t mbs;
1631 
1632 		loopid = lp - fcp->portdb;
1633 		if (loopid >= FL_PORT_ID && loopid <= FC_SNS_ID) {
1634 			continue;
1635 		}
1636 
1637 		/*
1638 		 * Anything here?
1639 		 */
1640 		if (lp->port_wwn == 0) {
1641 			continue;
1642 		}
1643 
1644 		/*
1645 		 * Don't try to log into yourself.
1646 		 */
1647 		if ((portid = lp->portid) == fcp->isp_portid) {
1648 			continue;
1649 		}
1650 
1651 
1652 		/*
1653 		 * If we'd been logged in- see if we still are and we haven't
1654 		 * changed. If so, no need to log ourselves out, etc..
1655 		 *
1656 		 * Unfortunately, our charming Qlogic f/w has decided to
1657 		 * return a valid port database entry for a fabric device
1658 		 * that has, in fact, gone away. And it hangs trying to
1659 		 * log it out.
1660 		 */
1661 		if (lp->loggedin &&
1662 		    isp_getpdb(isp, lp->loopid, &pdb) == 0) {
1663 			int nrole;
1664 			u_int64_t nwwnn, nwwpn;
1665 			nwwnn =
1666 			    (((u_int64_t)pdb.pdb_nodename[0]) << 56) |
1667 			    (((u_int64_t)pdb.pdb_nodename[1]) << 48) |
1668 			    (((u_int64_t)pdb.pdb_nodename[2]) << 40) |
1669 			    (((u_int64_t)pdb.pdb_nodename[3]) << 32) |
1670 			    (((u_int64_t)pdb.pdb_nodename[4]) << 24) |
1671 			    (((u_int64_t)pdb.pdb_nodename[5]) << 16) |
1672 			    (((u_int64_t)pdb.pdb_nodename[6]) <<  8) |
1673 			    (((u_int64_t)pdb.pdb_nodename[7]));
1674 			nwwpn =
1675 			    (((u_int64_t)pdb.pdb_portname[0]) << 56) |
1676 			    (((u_int64_t)pdb.pdb_portname[1]) << 48) |
1677 			    (((u_int64_t)pdb.pdb_portname[2]) << 40) |
1678 			    (((u_int64_t)pdb.pdb_portname[3]) << 32) |
1679 			    (((u_int64_t)pdb.pdb_portname[4]) << 24) |
1680 			    (((u_int64_t)pdb.pdb_portname[5]) << 16) |
1681 			    (((u_int64_t)pdb.pdb_portname[6]) <<  8) |
1682 			    (((u_int64_t)pdb.pdb_portname[7]));
1683 			nrole = (pdb.pdb_prli_svc3 & SVC3_ROLE_MASK) >>
1684 			    SVC3_ROLE_SHIFT;
1685 			if (pdb.pdb_loopid == lp->loopid && lp->portid ==
1686 			    (u_int32_t) BITS2WORD(pdb.pdb_portid_bits) &&
1687 			    nwwnn == lp->node_wwn && nwwpn == lp->port_wwn &&
1688 			    lp->roles == nrole && lp->force_logout == 0) {
1689 				lp->loggedin = lp->valid = 1;
1690 				isp_prt(isp, ISP_LOGINFO, lretained,
1691 				    (int) (lp - fcp->portdb),
1692 				    (int) lp->loopid, lp->portid);
1693 				continue;
1694 			}
1695 		}
1696 
1697 		lp->force_logout = 0;
1698 
1699 		if (fcp->isp_fwstate != FW_READY ||
1700 		    fcp->isp_loopstate != LOOP_SYNCING_PDB) {
1701 			return (-1);
1702 		}
1703 
1704 		/*
1705 		 * Force a logout if we were logged in.
1706 		 */
1707 		if (lp->loggedin) {
1708 			if (isp_getpdb(isp, lp->loopid, &pdb) == 0) {
1709 				mbs.param[0] = MBOX_FABRIC_LOGOUT;
1710 				mbs.param[1] = lp->loopid << 8;
1711 				mbs.param[2] = 0;
1712 				mbs.param[3] = 0;
1713 				isp_mboxcmd(isp, &mbs, MBLOGNONE);
1714 				lp->loggedin = 0;
1715 				isp_prt(isp, ISP_LOGINFO, plogout,
1716 				    (int) (lp - fcp->portdb), lp->loopid,
1717 				    lp->portid);
1718 			}
1719 			lp->loggedin = 0;
1720 			if (fcp->isp_fwstate != FW_READY ||
1721 			    fcp->isp_loopstate != LOOP_SYNCING_PDB) {
1722 				return (-1);
1723 			}
1724 		}
1725 
1726 		/*
1727 		 * And log in....
1728 		 */
1729 		loopid = lp - fcp->portdb;
1730 		lp->loopid = FL_PORT_ID;
1731 		do {
1732 			mbs.param[0] = MBOX_FABRIC_LOGIN;
1733 			mbs.param[1] = loopid << 8;
1734 			mbs.param[2] = portid >> 16;
1735 			mbs.param[3] = portid & 0xffff;
1736 			if (IS_2200(isp) || IS_2300(isp)) {
1737 				/* only issue a PLOGI if not logged in */
1738 				mbs.param[1] |= 0x1;
1739 			}
1740 			isp_mboxcmd(isp, &mbs, MBLOGALL & ~(MBOX_LOOP_ID_USED |
1741 			    MBOX_PORT_ID_USED | MBOX_COMMAND_ERROR));
1742 			if (fcp->isp_fwstate != FW_READY ||
1743 			    fcp->isp_loopstate != LOOP_SYNCING_PDB) {
1744 				return (-1);
1745 			}
1746 			switch (mbs.param[0]) {
1747 			case MBOX_LOOP_ID_USED:
1748 				/*
1749 				 * Try the next available loop id.
1750 				 */
1751 				loopid++;
1752 				break;
1753 			case MBOX_PORT_ID_USED:
1754 				/*
1755 				 * This port is already logged in.
1756 				 * Snaffle the loop id it's using if it's
1757 				 * nonzero, otherwise we're hosed.
1758 				 */
1759 				if (mbs.param[1] != 0) {
1760 					loopid = mbs.param[1];
1761 					isp_prt(isp, ISP_LOGINFO, retained,
1762 					    loopid, (int) (lp - fcp->portdb),
1763 					    lp->portid);
1764 				} else {
1765 					loopid = MAX_FC_TARG;
1766 					break;
1767 				}
1768 				/* FALLTHROUGH */
1769 			case MBOX_COMMAND_COMPLETE:
1770 				lp->loggedin = 1;
1771 				lp->loopid = loopid;
1772 				break;
1773 			case MBOX_COMMAND_ERROR:
1774 				isp_prt(isp, ISP_LOGINFO, plogierr,
1775 				    portid, mbs.param[1]);
1776 				/* FALLTHROUGH */
1777 			case MBOX_ALL_IDS_USED: /* We're outta IDs */
1778 			default:
1779 				loopid = MAX_FC_TARG;
1780 				break;
1781 			}
1782 		} while (lp->loopid == FL_PORT_ID && loopid < MAX_FC_TARG);
1783 
1784 		/*
1785 		 * If we get here and we haven't set a Loop ID,
1786 		 * we failed to log into this device.
1787 		 */
1788 
1789 		if (lp->loopid == FL_PORT_ID) {
1790 			lp->loopid = 0;
1791 			continue;
1792 		}
1793 
1794 		/*
1795 		 * Make sure we can get the approriate port information.
1796 		 */
1797 		if (isp_getpdb(isp, lp->loopid, &pdb) != 0) {
1798 			isp_prt(isp, ISP_LOGWARN, nopdb, lp->portid);
1799 			goto dump_em;
1800 		}
1801 
1802 		if (fcp->isp_fwstate != FW_READY ||
1803 		    fcp->isp_loopstate != LOOP_SYNCING_PDB) {
1804 			return (-1);
1805 		}
1806 
1807 		if (pdb.pdb_loopid != lp->loopid) {
1808 			isp_prt(isp, ISP_LOGWARN, pdbmfail1,
1809 			    lp->portid, pdb.pdb_loopid);
1810 			goto dump_em;
1811 		}
1812 
1813 		if (lp->portid != (u_int32_t) BITS2WORD(pdb.pdb_portid_bits)) {
1814 			isp_prt(isp, ISP_LOGWARN, pdbmfail2,
1815 			    lp->portid, BITS2WORD(pdb.pdb_portid_bits));
1816 			goto dump_em;
1817 		}
1818 
1819 		lp->roles =
1820 		    (pdb.pdb_prli_svc3 & SVC3_ROLE_MASK) >> SVC3_ROLE_SHIFT;
1821 		lp->node_wwn =
1822 		    (((u_int64_t)pdb.pdb_nodename[0]) << 56) |
1823 		    (((u_int64_t)pdb.pdb_nodename[1]) << 48) |
1824 		    (((u_int64_t)pdb.pdb_nodename[2]) << 40) |
1825 		    (((u_int64_t)pdb.pdb_nodename[3]) << 32) |
1826 		    (((u_int64_t)pdb.pdb_nodename[4]) << 24) |
1827 		    (((u_int64_t)pdb.pdb_nodename[5]) << 16) |
1828 		    (((u_int64_t)pdb.pdb_nodename[6]) <<  8) |
1829 		    (((u_int64_t)pdb.pdb_nodename[7]));
1830 		lp->port_wwn =
1831 		    (((u_int64_t)pdb.pdb_portname[0]) << 56) |
1832 		    (((u_int64_t)pdb.pdb_portname[1]) << 48) |
1833 		    (((u_int64_t)pdb.pdb_portname[2]) << 40) |
1834 		    (((u_int64_t)pdb.pdb_portname[3]) << 32) |
1835 		    (((u_int64_t)pdb.pdb_portname[4]) << 24) |
1836 		    (((u_int64_t)pdb.pdb_portname[5]) << 16) |
1837 		    (((u_int64_t)pdb.pdb_portname[6]) <<  8) |
1838 		    (((u_int64_t)pdb.pdb_portname[7]));
1839 		/*
1840 		 * Check to make sure this all makes sense.
1841 		 */
1842 		if (lp->node_wwn && lp->port_wwn) {
1843 			lp->valid = 1;
1844 			loopid = lp - fcp->portdb;
1845 			(void) isp_async(isp, ISPASYNC_PROMENADE, &loopid);
1846 			continue;
1847 		}
1848 dump_em:
1849 		lp->valid = 0;
1850 		isp_prt(isp, ISP_LOGINFO,
1851 		    ldumped, loopid, lp->loopid, lp->portid);
1852 		mbs.param[0] = MBOX_FABRIC_LOGOUT;
1853 		mbs.param[1] = lp->loopid << 8;
1854 		mbs.param[2] = 0;
1855 		mbs.param[3] = 0;
1856 		isp_mboxcmd(isp, &mbs, MBLOGNONE);
1857 		if (fcp->isp_fwstate != FW_READY ||
1858 		    fcp->isp_loopstate != LOOP_SYNCING_PDB) {
1859 			return (-1);
1860 		}
1861 	}
1862 	/*
1863 	 * If we get here, we've for sure seen not only a valid loop
1864 	 * but know what is or isn't on it, so mark this for usage
1865 	 * in isp_start.
1866 	 */
1867 	fcp->loop_seen_once = 1;
1868 	fcp->isp_loopstate = LOOP_READY;
1869 	return (0);
1870 }
1871 
1872 static int
1873 isp_scan_loop(struct ispsoftc *isp)
1874 {
1875 	struct lportdb *lp;
1876 	fcparam *fcp = isp->isp_param;
1877 	isp_pdb_t pdb;
1878 	int loopid, lim, hival;
1879 
1880 	switch (fcp->isp_topo) {
1881 	case TOPO_NL_PORT:
1882 		hival = FL_PORT_ID;
1883 		break;
1884 	case TOPO_N_PORT:
1885 		hival = 2;
1886 		break;
1887 	case TOPO_FL_PORT:
1888 		hival = FC_PORT_ID;
1889 		break;
1890 	default:
1891 		fcp->isp_loopstate = LOOP_LSCAN_DONE;
1892 		return (0);
1893 	}
1894 	fcp->isp_loopstate = LOOP_SCANNING_LOOP;
1895 
1896 	/*
1897 	 * make sure the temp port database is clean...
1898 	 */
1899 	MEMZERO((void *)fcp->tport, sizeof (fcp->tport));
1900 
1901 	/*
1902 	 * Run through the local loop ports and get port database info
1903 	 * for each loop ID.
1904 	 *
1905 	 * There's a somewhat unexplained situation where the f/w passes back
1906 	 * the wrong database entity- if that happens, just restart (up to
1907 	 * FL_PORT_ID times).
1908 	 */
1909 	for (lim = loopid = 0; loopid < hival; loopid++) {
1910 		lp = &fcp->tport[loopid];
1911 
1912 		/*
1913 		 * Don't even try for ourselves...
1914 	 	 */
1915 		if (loopid == fcp->isp_loopid)
1916 			continue;
1917 
1918 		lp->node_wwn = isp_get_portname(isp, loopid, 1);
1919 		if (fcp->isp_loopstate < LOOP_SCANNING_LOOP)
1920 			return (-1);
1921 		if (lp->node_wwn == 0)
1922 			continue;
1923 		lp->port_wwn = isp_get_portname(isp, loopid, 0);
1924 		if (fcp->isp_loopstate < LOOP_SCANNING_LOOP)
1925 			return (-1);
1926 		if (lp->port_wwn == 0) {
1927 			lp->node_wwn = 0;
1928 			continue;
1929 		}
1930 
1931 		/*
1932 		 * Get an entry....
1933 		 */
1934 		if (isp_getpdb(isp, loopid, &pdb) != 0) {
1935 			if (fcp->isp_loopstate < LOOP_SCANNING_LOOP)
1936 				return (-1);
1937 			continue;
1938 		}
1939 		if (fcp->isp_loopstate < LOOP_SCANNING_LOOP) {
1940 			return (-1);
1941 		}
1942 
1943 		/*
1944 		 * If the returned database element doesn't match what we
1945 		 * asked for, restart the process entirely (up to a point...).
1946 		 */
1947 		if (pdb.pdb_loopid != loopid) {
1948 			loopid = 0;
1949 			if (lim++ < hival) {
1950 				continue;
1951 			}
1952 			isp_prt(isp, ISP_LOGWARN,
1953 			    "giving up on synchronizing the port database");
1954 			return (-1);
1955 		}
1956 
1957 		/*
1958 		 * Save the pertinent info locally.
1959 		 */
1960 		lp->node_wwn =
1961 		    (((u_int64_t)pdb.pdb_nodename[0]) << 56) |
1962 		    (((u_int64_t)pdb.pdb_nodename[1]) << 48) |
1963 		    (((u_int64_t)pdb.pdb_nodename[2]) << 40) |
1964 		    (((u_int64_t)pdb.pdb_nodename[3]) << 32) |
1965 		    (((u_int64_t)pdb.pdb_nodename[4]) << 24) |
1966 		    (((u_int64_t)pdb.pdb_nodename[5]) << 16) |
1967 		    (((u_int64_t)pdb.pdb_nodename[6]) <<  8) |
1968 		    (((u_int64_t)pdb.pdb_nodename[7]));
1969 		lp->port_wwn =
1970 		    (((u_int64_t)pdb.pdb_portname[0]) << 56) |
1971 		    (((u_int64_t)pdb.pdb_portname[1]) << 48) |
1972 		    (((u_int64_t)pdb.pdb_portname[2]) << 40) |
1973 		    (((u_int64_t)pdb.pdb_portname[3]) << 32) |
1974 		    (((u_int64_t)pdb.pdb_portname[4]) << 24) |
1975 		    (((u_int64_t)pdb.pdb_portname[5]) << 16) |
1976 		    (((u_int64_t)pdb.pdb_portname[6]) <<  8) |
1977 		    (((u_int64_t)pdb.pdb_portname[7]));
1978 		lp->roles =
1979 		    (pdb.pdb_prli_svc3 & SVC3_ROLE_MASK) >> SVC3_ROLE_SHIFT;
1980 		lp->portid = BITS2WORD(pdb.pdb_portid_bits);
1981 		lp->loopid = pdb.pdb_loopid;
1982 	}
1983 
1984 	/*
1985 	 * Mark all of the permanent local loop database entries as invalid
1986 	 * (except our own entry).
1987 	 */
1988 	for (loopid = 0; loopid < hival; loopid++) {
1989 		if (loopid == fcp->isp_iid) {
1990 			fcp->portdb[loopid].valid = 1;
1991 			fcp->portdb[loopid].loopid = fcp->isp_loopid;
1992 			continue;
1993 		}
1994 		fcp->portdb[loopid].valid = 0;
1995 	}
1996 
1997 	/*
1998 	 * Now merge our local copy of the port database into our saved copy.
1999 	 * Notify the outer layers of new devices arriving.
2000 	 */
2001 	for (loopid = 0; loopid < hival; loopid++) {
2002 		int i;
2003 
2004 		/*
2005 		 * If we don't have a non-zero Port WWN, we're not here.
2006 		 */
2007 		if (fcp->tport[loopid].port_wwn == 0) {
2008 			continue;
2009 		}
2010 
2011 		/*
2012 		 * Skip ourselves.
2013 		 */
2014 		if (loopid == fcp->isp_iid) {
2015 			continue;
2016 		}
2017 
2018 		/*
2019 		 * For the purposes of deciding whether this is the
2020 		 * 'same' device or not, we only search for an identical
2021 		 * Port WWN. Node WWNs may or may not be the same as
2022 		 * the Port WWN, and there may be multiple different
2023 		 * Port WWNs with the same Node WWN. It would be chaos
2024 		 * to have multiple identical Port WWNs, so we don't
2025 		 * allow that.
2026 		 */
2027 
2028 		for (i = 0; i < hival; i++) {
2029 			int j;
2030 			if (fcp->portdb[i].port_wwn == 0)
2031 				continue;
2032 			if (fcp->portdb[i].port_wwn !=
2033 			    fcp->tport[loopid].port_wwn)
2034 				continue;
2035 			/*
2036 			 * We found this WWN elsewhere- it's changed
2037 			 * loopids then. We don't change it's actual
2038 			 * position in our cached port database- we
2039 			 * just change the actual loop ID we'd use.
2040 			 */
2041 			if (fcp->portdb[i].loopid != loopid) {
2042 				isp_prt(isp, ISP_LOGINFO, portshift, i,
2043 				    fcp->portdb[i].loopid,
2044 				    fcp->portdb[i].portid, loopid,
2045 				    fcp->tport[loopid].portid);
2046 			}
2047 			fcp->portdb[i].portid = fcp->tport[loopid].portid;
2048 			fcp->portdb[i].loopid = loopid;
2049 			fcp->portdb[i].valid = 1;
2050 			fcp->portdb[i].roles = fcp->tport[loopid].roles;
2051 
2052 			/*
2053 			 * Now make sure this Port WWN doesn't exist elsewhere
2054 			 * in the port database.
2055 			 */
2056 			for (j = i+1; j < hival; j++) {
2057 				if (fcp->portdb[i].port_wwn !=
2058 				    fcp->portdb[j].port_wwn) {
2059 					continue;
2060 				}
2061 				isp_prt(isp, ISP_LOGWARN, portdup, j, i);
2062 				/*
2063 				 * Invalidate the 'old' *and* 'new' ones.
2064 				 * This is really harsh and not quite right,
2065 				 * but if this happens, we really don't know
2066 				 * who is what at this point.
2067 				 */
2068 				fcp->portdb[i].valid = 0;
2069 				fcp->portdb[j].valid = 0;
2070 			}
2071 			break;
2072 		}
2073 
2074 		/*
2075 		 * If we didn't traverse the entire port database,
2076 		 * then we found (and remapped) an existing entry.
2077 		 * No need to notify anyone- go for the next one.
2078 		 */
2079 		if (i < hival) {
2080 			isp_prt(isp, ISP_LOGINFO, retained,
2081 			    fcp->portdb[i].loopid, i, fcp->portdb[i].portid);
2082 			continue;
2083 		}
2084 
2085 		/*
2086 		 * We've not found this Port WWN anywhere. It's a new entry.
2087 		 * See if we can leave it where it is (with target == loopid).
2088 		 */
2089 		if (fcp->portdb[loopid].port_wwn != 0) {
2090 			for (lim = 0; lim < hival; lim++) {
2091 				if (fcp->portdb[lim].port_wwn == 0)
2092 					break;
2093 			}
2094 			/* "Cannot Happen" */
2095 			if (lim == hival) {
2096 				isp_prt(isp, ISP_LOGWARN, "Remap Overflow");
2097 				continue;
2098 			}
2099 			i = lim;
2100 		} else {
2101 			i = loopid;
2102 		}
2103 
2104 		/*
2105 		 * NB:	The actual loopid we use here is loopid- we may
2106 		 *	in fact be at a completely different index (target).
2107 		 */
2108 		fcp->portdb[i].loopid = loopid;
2109 		fcp->portdb[i].port_wwn = fcp->tport[loopid].port_wwn;
2110 		fcp->portdb[i].node_wwn = fcp->tport[loopid].node_wwn;
2111 		fcp->portdb[i].roles = fcp->tport[loopid].roles;
2112 		fcp->portdb[i].portid = fcp->tport[loopid].portid;
2113 		fcp->portdb[i].valid = 1;
2114 
2115 		/*
2116 		 * Tell the outside world we've arrived.
2117 		 */
2118 		(void) isp_async(isp, ISPASYNC_PROMENADE, &i);
2119 	}
2120 
2121 	/*
2122 	 * Now find all previously used targets that are now invalid and
2123 	 * notify the outer layers that they're gone.
2124 	 */
2125 	for (lp = &fcp->portdb[0]; lp < &fcp->portdb[hival]; lp++) {
2126 		if (lp->valid || lp->port_wwn == 0) {
2127 			continue;
2128 		}
2129 
2130 		/*
2131 		 * Tell the outside world we've gone
2132 		 * away and erase our pdb entry.
2133 		 *
2134 		 */
2135 		loopid = lp - fcp->portdb;
2136 		(void) isp_async(isp, ISPASYNC_PROMENADE, &loopid);
2137 		MEMZERO((void *) lp, sizeof (*lp));
2138 	}
2139 	fcp->isp_loopstate = LOOP_LSCAN_DONE;
2140 	return (0);
2141 }
2142 
2143 static int
2144 isp_scan_fabric(struct ispsoftc *isp)
2145 {
2146 	fcparam *fcp = isp->isp_param;
2147 	u_int32_t portid, first_portid;
2148 	sns_screq_t *reqp;
2149 	sns_scrsp_t *resp;
2150 	mbreg_t mbs;
2151 	int hicap, first_portid_seen;
2152 
2153 	if (fcp->isp_onfabric == 0) {
2154 		fcp->isp_loopstate = LOOP_FSCAN_DONE;
2155 		return (0);
2156 	}
2157 
2158 	reqp = (sns_screq_t *) fcp->isp_scratch;
2159 	resp = (sns_scrsp_t *) (&((char *)fcp->isp_scratch)[0x100]);
2160 	/*
2161 	 * Since Port IDs are 24 bits, we can check against having seen
2162 	 * anything yet with this value.
2163 	 */
2164 	first_portid = portid = fcp->isp_portid;
2165 	fcp->isp_loopstate = LOOP_SCANNING_FABRIC;
2166 
2167 	for (first_portid_seen = hicap = 0; hicap < 65535; hicap++) {
2168 		MEMZERO((void *) reqp, SNS_GAN_REQ_SIZE);
2169 		reqp->snscb_rblen = SNS_GAN_RESP_SIZE >> 1;
2170 		reqp->snscb_addr[RQRSP_ADDR0015] =
2171 			DMA_LSW(fcp->isp_scdma + 0x100);
2172 		reqp->snscb_addr[RQRSP_ADDR1631] =
2173 			DMA_MSW(fcp->isp_scdma + 0x100);
2174 		reqp->snscb_sblen = 6;
2175 		reqp->snscb_data[0] = SNS_GAN;
2176 		reqp->snscb_data[4] = portid & 0xffff;
2177 		reqp->snscb_data[5] = (portid >> 16) & 0xff;
2178 		ISP_SWIZZLE_SNS_REQ(isp, reqp);
2179 		mbs.param[0] = MBOX_SEND_SNS;
2180 		mbs.param[1] = SNS_GAN_REQ_SIZE >> 1;
2181 		mbs.param[2] = DMA_MSW(fcp->isp_scdma);
2182 		mbs.param[3] = DMA_LSW(fcp->isp_scdma);
2183 		mbs.param[6] = 0;
2184 		mbs.param[7] = 0;
2185 		isp_mboxcmd(isp, &mbs, MBLOGALL);
2186 		if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
2187 			if (fcp->isp_loopstate == LOOP_SCANNING_FABRIC) {
2188 				fcp->isp_loopstate = LOOP_PDB_RCVD;
2189 			}
2190 			return (-1);
2191 		}
2192 		if (fcp->isp_fwstate != FW_READY ||
2193 		    fcp->isp_loopstate < LOOP_SCANNING_FABRIC) {
2194 			return (-1);
2195 		}
2196 		ISP_UNSWIZZLE_SNS_RSP(isp, resp, SNS_GAN_RESP_SIZE >> 1);
2197 		portid = (((u_int32_t) resp->snscb_port_id[0]) << 16) |
2198 		    (((u_int32_t) resp->snscb_port_id[1]) << 8) |
2199 		    (((u_int32_t) resp->snscb_port_id[2]));
2200 		(void) isp_async(isp, ISPASYNC_FABRIC_DEV, resp);
2201 		if (first_portid == portid) {
2202 			fcp->isp_loopstate = LOOP_FSCAN_DONE;
2203 			return (0);
2204 		}
2205 	}
2206 
2207 	isp_prt(isp, ISP_LOGWARN, "broken fabric nameserver...*wheeze*...");
2208 
2209 	/*
2210 	 * We either have a broken name server or a huge fabric if we get here.
2211 	 */
2212 	fcp->isp_loopstate = LOOP_FSCAN_DONE;
2213 	return (0);
2214 }
2215 
2216 static void
2217 isp_register_fc4_type(struct ispsoftc *isp)
2218 {
2219 	fcparam *fcp = isp->isp_param;
2220 	sns_screq_t *reqp;
2221 	mbreg_t mbs;
2222 
2223 	reqp = (sns_screq_t *) fcp->isp_scratch;
2224 	MEMZERO((void *) reqp, SNS_RFT_REQ_SIZE);
2225 	reqp->snscb_rblen = SNS_RFT_RESP_SIZE >> 1;
2226 	reqp->snscb_addr[RQRSP_ADDR0015] = DMA_LSW(fcp->isp_scdma + 0x100);
2227 	reqp->snscb_addr[RQRSP_ADDR1631] = DMA_MSW(fcp->isp_scdma + 0x100);
2228 	reqp->snscb_sblen = 22;
2229 	reqp->snscb_data[0] = SNS_RFT;
2230 	reqp->snscb_data[4] = fcp->isp_portid & 0xffff;
2231 	reqp->snscb_data[5] = (fcp->isp_portid >> 16) & 0xff;
2232 	reqp->snscb_data[6] = 0x100;	/* SCS - FCP */
2233 #if	0
2234 	reqp->snscb_data[6] |= 20;	/* ISO/IEC 8802-2 LLC/SNAP */
2235 #endif
2236 	ISP_SWIZZLE_SNS_REQ(isp, reqp);
2237 	mbs.param[0] = MBOX_SEND_SNS;
2238 	mbs.param[1] = SNS_RFT_REQ_SIZE >> 1;
2239 	mbs.param[2] = DMA_MSW(fcp->isp_scdma);
2240 	mbs.param[3] = DMA_LSW(fcp->isp_scdma);
2241 	mbs.param[6] = 0;
2242 	mbs.param[7] = 0;
2243 	isp_mboxcmd(isp, &mbs, MBLOGALL);
2244 	if (mbs.param[0] == MBOX_COMMAND_COMPLETE) {
2245 		isp_prt(isp, ISP_LOGDEBUG0, "Register FC4 types succeeded");
2246 	}
2247 }
2248 
2249 /*
2250  * Start a command. Locking is assumed done in the caller.
2251  */
2252 
2253 int
2254 isp_start(XS_T *xs)
2255 {
2256 	struct ispsoftc *isp;
2257 	u_int16_t iptr, optr, handle;
2258 	union {
2259 		ispreq_t *_reqp;
2260 		ispreqt2_t *_t2reqp;
2261 	} _u;
2262 #define	reqp	_u._reqp
2263 #define	t2reqp	_u._t2reqp
2264 #define	UZSIZE	max(sizeof (ispreq_t), sizeof (ispreqt2_t))
2265 	int target, i;
2266 
2267 	XS_INITERR(xs);
2268 	isp = XS_ISP(xs);
2269 
2270 	/*
2271 	 * Check to make sure we're supporting initiator role.
2272 	 */
2273 	if ((isp->isp_role & ISP_ROLE_INITIATOR) == 0) {
2274 		XS_SETERR(xs, HBA_SELTIMEOUT);
2275 		return (CMD_COMPLETE);
2276 	}
2277 
2278 	/*
2279 	 * Now make sure we're running.
2280 	 */
2281 
2282 	if (isp->isp_state != ISP_RUNSTATE) {
2283 		isp_prt(isp, ISP_LOGERR, "Adapter not at RUNSTATE");
2284 		XS_SETERR(xs, HBA_BOTCH);
2285 		return (CMD_COMPLETE);
2286 	}
2287 
2288 	/*
2289 	 * Check command CDB length, etc.. We really are limited to 16 bytes
2290 	 * for Fibre Channel, but can do up to 44 bytes in parallel SCSI,
2291 	 * but probably only if we're running fairly new firmware (we'll
2292 	 * let the old f/w choke on an extended command queue entry).
2293 	 */
2294 
2295 	if (XS_CDBLEN(xs) > (IS_FC(isp)? 16 : 44) || XS_CDBLEN(xs) == 0) {
2296 		isp_prt(isp, ISP_LOGERR,
2297 		    "unsupported cdb length (%d, CDB[0]=0x%x)",
2298 		    XS_CDBLEN(xs), XS_CDBP(xs)[0] & 0xff);
2299 		XS_SETERR(xs, HBA_BOTCH);
2300 		return (CMD_COMPLETE);
2301 	}
2302 
2303 	/*
2304 	 * Check to see whether we have good firmware state still or
2305 	 * need to refresh our port database for this target.
2306 	 */
2307 	target = XS_TGT(xs);
2308 	if (IS_FC(isp)) {
2309 		fcparam *fcp = isp->isp_param;
2310 		struct lportdb *lp;
2311 #ifdef	HANDLE_LOOPSTATE_IN_OUTER_LAYERS
2312 		if (fcp->isp_fwstate != FW_READY ||
2313 		    fcp->isp_loopstate != LOOP_READY) {
2314 			return (CMD_RQLATER);
2315 		}
2316 
2317 		/*
2318 		 * If we're not on a Fabric, we can't have a target
2319 		 * above FL_PORT_ID-1.
2320 		 *
2321 		 * If we're on a fabric and *not* connected as an F-port,
2322 		 * we can't have a target less than FC_SNS_ID+1. This
2323 		 * keeps us from having to sort out the difference between
2324 		 * local public loop devices and those which we might get
2325 		 * from a switch's database.
2326 		 */
2327 		if (fcp->isp_onfabric == 0) {
2328 			if (target >= FL_PORT_ID) {
2329 				XS_SETERR(xs, HBA_SELTIMEOUT);
2330 				return (CMD_COMPLETE);
2331 			}
2332 		} else {
2333 			if (target >= FL_PORT_ID && target <= FC_SNS_ID) {
2334 				XS_SETERR(xs, HBA_SELTIMEOUT);
2335 				return (CMD_COMPLETE);
2336 			}
2337 			if (fcp->isp_topo != TOPO_F_PORT &&
2338 			    target < FL_PORT_ID) {
2339 				XS_SETERR(xs, HBA_SELTIMEOUT);
2340 				return (CMD_COMPLETE);
2341 			}
2342 		}
2343 #else
2344 		/*
2345 		 * Check for f/w being in ready state. If the f/w
2346 		 * isn't in ready state, then we don't know our
2347 		 * loop ID and the f/w hasn't completed logging
2348 		 * into all targets on the loop. If this is the
2349 		 * case, then bounce the command. We pretend this is
2350 		 * a SELECTION TIMEOUT error if we've never gone to
2351 		 * FW_READY state at all- in this case we may not
2352 		 * be hooked to a loop at all and we shouldn't hang
2353 		 * the machine for this. Otherwise, defer this command
2354 		 * until later.
2355 		 */
2356 		if (fcp->isp_fwstate != FW_READY) {
2357 			/*
2358 			 * Give ourselves at most a 250ms delay.
2359 			 */
2360 			if (isp_fclink_test(isp, 250000)) {
2361 				XS_SETERR(xs, HBA_SELTIMEOUT);
2362 				if (fcp->loop_seen_once) {
2363 					return (CMD_RQLATER);
2364 				} else {
2365 					return (CMD_COMPLETE);
2366 				}
2367 			}
2368 		}
2369 
2370 		/*
2371 		 * If we're not on a Fabric, we can't have a target
2372 		 * above FL_PORT_ID-1.
2373 		 *
2374 		 * If we're on a fabric and *not* connected as an F-port,
2375 		 * we can't have a target less than FC_SNS_ID+1. This
2376 		 * keeps us from having to sort out the difference between
2377 		 * local public loop devices and those which we might get
2378 		 * from a switch's database.
2379 		 */
2380 		if (fcp->isp_onfabric == 0) {
2381 			if (target >= FL_PORT_ID) {
2382 				XS_SETERR(xs, HBA_SELTIMEOUT);
2383 				return (CMD_COMPLETE);
2384 			}
2385 		} else {
2386 			if (target >= FL_PORT_ID && target <= FC_SNS_ID) {
2387 				XS_SETERR(xs, HBA_SELTIMEOUT);
2388 				return (CMD_COMPLETE);
2389 			}
2390 			if (fcp->isp_topo != TOPO_F_PORT &&
2391 			    target < FL_PORT_ID) {
2392 				XS_SETERR(xs, HBA_SELTIMEOUT);
2393 				return (CMD_COMPLETE);
2394 			}
2395 		}
2396 
2397 		/*
2398 		 * If our loop state is such that we haven't yet received
2399 		 * a "Port Database Changed" notification (after a LIP or
2400 		 * a Loop Reset or firmware initialization), then defer
2401 		 * sending commands for a little while, but only if we've
2402 		 * seen a valid loop at one point (otherwise we can get
2403 		 * stuck at initialization time).
2404 		 */
2405 		if (fcp->isp_loopstate < LOOP_PDB_RCVD) {
2406 			XS_SETERR(xs, HBA_SELTIMEOUT);
2407 			if (fcp->loop_seen_once) {
2408 				return (CMD_RQLATER);
2409 			} else {
2410 				return (CMD_COMPLETE);
2411 			}
2412 		}
2413 
2414 		/*
2415 		 * If we're in the middle of loop or fabric scanning
2416 		 * or merging the port databases, retry this command later.
2417 		 */
2418 		if (fcp->isp_loopstate == LOOP_SCANNING_FABRIC ||
2419 		    fcp->isp_loopstate == LOOP_SCANNING_LOOP ||
2420 		    fcp->isp_loopstate == LOOP_SYNCING_PDB) {
2421 			return (CMD_RQLATER);
2422 		}
2423 
2424 		/*
2425 		 * If our loop state is now such that we've just now
2426 		 * received a Port Database Change notification, then
2427 		 * we have to go off and (re)scan the fabric. We back
2428 		 * out and try again later if this doesn't work.
2429 		 */
2430 		if (fcp->isp_loopstate == LOOP_PDB_RCVD && fcp->isp_onfabric) {
2431 			if (isp_scan_fabric(isp)) {
2432 				return (CMD_RQLATER);
2433 			}
2434 			if (fcp->isp_fwstate != FW_READY ||
2435 			    fcp->isp_loopstate < LOOP_PDB_RCVD) {
2436 				return (CMD_RQLATER);
2437 			}
2438 		}
2439 
2440 		/*
2441 		 * If our loop state is now such that we've just now
2442 		 * received a Port Database Change notification, then
2443 		 * we have to go off and (re)synchronize our port
2444 		 * database.
2445 		 */
2446 		if (fcp->isp_loopstate < LOOP_READY) {
2447 			if (isp_pdb_sync(isp)) {
2448 				return (CMD_RQLATER);
2449 			}
2450 			if (fcp->isp_fwstate != FW_READY ||
2451 			    fcp->isp_loopstate != LOOP_READY) {
2452 				return (CMD_RQLATER);
2453 			}
2454 		}
2455 
2456 		/*
2457 		 * XXX: Here's were we would cancel any loop_dead flag
2458 		 * XXX: also cancel in dead_loop timeout that's running
2459 		 */
2460 #endif
2461 
2462 		/*
2463 		 * Now check whether we should even think about pursuing this.
2464 		 */
2465 		lp = &fcp->portdb[target];
2466 		if (lp->valid == 0) {
2467 			XS_SETERR(xs, HBA_SELTIMEOUT);
2468 			return (CMD_COMPLETE);
2469 		}
2470 		if ((lp->roles & (SVC3_TGT_ROLE >> SVC3_ROLE_SHIFT)) == 0) {
2471 			isp_prt(isp, ISP_LOGDEBUG2,
2472 			    "Target %d does not have target service", target);
2473 			XS_SETERR(xs, HBA_SELTIMEOUT);
2474 			return (CMD_COMPLETE);
2475 		}
2476 		/*
2477 		 * Now turn target into what the actual Loop ID is.
2478 		 */
2479 		target = lp->loopid;
2480 	}
2481 
2482 	/*
2483 	 * Next check to see if any HBA or Device
2484 	 * parameters need to be updated.
2485 	 */
2486 	if (isp->isp_update != 0) {
2487 		isp_update(isp);
2488 	}
2489 
2490 	if (isp_getrqentry(isp, &iptr, &optr, (void **) &reqp)) {
2491 		isp_prt(isp, ISP_LOGDEBUG0, "Request Queue Overflow");
2492 		XS_SETERR(xs, HBA_BOTCH);
2493 		return (CMD_EAGAIN);
2494 	}
2495 
2496 	/*
2497 	 * Now see if we need to synchronize the ISP with respect to anything.
2498 	 * We do dual duty here (cough) for synchronizing for busses other
2499 	 * than which we got here to send a command to.
2500 	 */
2501 	if (isp->isp_sendmarker) {
2502 		u_int8_t n = (IS_DUALBUS(isp)? 2: 1);
2503 		/*
2504 		 * Check ports to send markers for...
2505 		 */
2506 		for (i = 0; i < n; i++) {
2507 			if ((isp->isp_sendmarker & (1 << i)) == 0) {
2508 				continue;
2509 			}
2510 			MEMZERO((void *) reqp, sizeof (*reqp));
2511 			reqp->req_header.rqs_entry_count = 1;
2512 			reqp->req_header.rqs_entry_type = RQSTYPE_MARKER;
2513 			reqp->req_modifier = SYNC_ALL;
2514 			reqp->req_target = i << 7;	/* insert bus number */
2515 			ISP_SWIZZLE_REQUEST(isp, reqp);
2516 			ISP_ADD_REQUEST(isp, iptr);
2517 
2518 			if (isp_getrqentry(isp, &iptr, &optr, (void **)&reqp)) {
2519 				isp_prt(isp, ISP_LOGDEBUG0,
2520 				    "Request Queue Overflow+");
2521 				XS_SETERR(xs, HBA_BOTCH);
2522 				return (CMD_EAGAIN);
2523 			}
2524 		}
2525 	}
2526 
2527 	MEMZERO((void *) reqp, UZSIZE);
2528 	reqp->req_header.rqs_entry_count = 1;
2529 	if (IS_FC(isp)) {
2530 		reqp->req_header.rqs_entry_type = RQSTYPE_T2RQS;
2531 	} else {
2532 		if (XS_CDBLEN(xs) > 12)
2533 			reqp->req_header.rqs_entry_type = RQSTYPE_CMDONLY;
2534 		else
2535 			reqp->req_header.rqs_entry_type = RQSTYPE_REQUEST;
2536 	}
2537 	reqp->req_header.rqs_flags = 0;
2538 	reqp->req_header.rqs_seqno = 0;
2539 	if (IS_FC(isp)) {
2540 		/*
2541 		 * See comment in isp_intr
2542 		 */
2543 		XS_RESID(xs) = 0;
2544 
2545 		/*
2546 		 * Fibre Channel always requires some kind of tag.
2547 		 * The Qlogic drivers seem be happy not to use a tag,
2548 		 * but this breaks for some devices (IBM drives).
2549 		 */
2550 		if (XS_TAG_P(xs)) {
2551 			t2reqp->req_flags = XS_TAG_TYPE(xs);
2552 		} else {
2553 			/*
2554 			 * If we don't know what tag to use, use HEAD OF QUEUE
2555 			 * for Request Sense or Ordered (for safety's sake).
2556 			 */
2557 			if (XS_CDBP(xs)[0] == 0x3)	/* REQUEST SENSE */
2558 				t2reqp->req_flags = REQFLAG_HTAG;
2559 			else
2560 				t2reqp->req_flags = REQFLAG_OTAG;
2561 		}
2562 	} else {
2563 		sdparam *sdp = (sdparam *)isp->isp_param;
2564 		sdp += XS_CHANNEL(xs);
2565 		if ((sdp->isp_devparam[target].cur_dflags & DPARM_TQING) &&
2566 		    XS_TAG_P(xs)) {
2567 			reqp->req_flags = XS_TAG_TYPE(xs);
2568 		}
2569 	}
2570 	reqp->req_target = target | (XS_CHANNEL(xs) << 7);
2571 	if (IS_SCSI(isp)) {
2572 		reqp->req_lun_trn = XS_LUN(xs);
2573 		reqp->req_cdblen = XS_CDBLEN(xs);
2574 	} else {
2575 		if (isp->isp_maxluns > 16)
2576 			t2reqp->req_scclun = XS_LUN(xs);
2577 		else
2578 			t2reqp->req_lun_trn = XS_LUN(xs);
2579 	}
2580 	MEMCPY(reqp->req_cdb, XS_CDBP(xs), XS_CDBLEN(xs));
2581 
2582 	reqp->req_time = XS_TIME(xs) / 1000;
2583 	if (reqp->req_time == 0 && XS_TIME(xs))
2584 		reqp->req_time = 1;
2585 
2586 	/*
2587 	 * Always give a bit more leeway to commands after a bus reset.
2588 	 * XXX: DOES NOT DISTINGUISH WHICH PORT MAY HAVE BEEN SYNCED
2589 	 */
2590 	if (isp->isp_sendmarker && reqp->req_time < 5) {
2591 		reqp->req_time = 5;
2592 	}
2593 	if (isp_save_xs(isp, xs, &handle)) {
2594 		isp_prt(isp, ISP_LOGDEBUG1, "out of xflist pointers");
2595 		XS_SETERR(xs, HBA_BOTCH);
2596 		return (CMD_EAGAIN);
2597 	}
2598 	reqp->req_handle = handle;
2599 	/*
2600 	 * Set up DMA and/or do any bus swizzling of the request entry
2601 	 * so that the Qlogic F/W understands what is being asked of it.
2602  	*/
2603 	i = ISP_DMASETUP(isp, xs, reqp, &iptr, optr);
2604 	if (i != CMD_QUEUED) {
2605 		isp_destroy_handle(isp, handle);
2606 		/*
2607 		 * dmasetup sets actual error in packet, and
2608 		 * return what we were given to return.
2609 		 */
2610 		return (i);
2611 	}
2612 	XS_SETERR(xs, HBA_NOERROR);
2613 	isp_prt(isp, ISP_LOGDEBUG2,
2614 	    "START cmd for %d.%d.%d cmd 0x%x datalen %ld",
2615 	    XS_CHANNEL(xs), target, XS_LUN(xs), XS_CDBP(xs)[0],
2616 	    (long) XS_XFRLEN(xs));
2617 	ISP_ADD_REQUEST(isp, iptr);
2618 	isp->isp_nactive++;
2619 	if (isp->isp_sendmarker)
2620 		isp->isp_sendmarker = 0;
2621 	return (CMD_QUEUED);
2622 #undef	reqp
2623 #undef	t2reqp
2624 }
2625 
2626 /*
2627  * isp control
2628  * Locks (ints blocked) assumed held.
2629  */
2630 
2631 int
2632 isp_control(struct ispsoftc *isp, ispctl_t ctl, void *arg)
2633 {
2634 	XS_T *xs;
2635 	mbreg_t mbs;
2636 	int bus, tgt;
2637 	u_int16_t handle;
2638 
2639 	switch (ctl) {
2640 	default:
2641 		isp_prt(isp, ISP_LOGERR, "Unknown Control Opcode 0x%x", ctl);
2642 		break;
2643 
2644 	case ISPCTL_RESET_BUS:
2645 		/*
2646 		 * Issue a bus reset.
2647 		 */
2648 		mbs.param[0] = MBOX_BUS_RESET;
2649 		mbs.param[2] = 0;
2650 		if (IS_SCSI(isp)) {
2651 			mbs.param[1] =
2652 			    ((sdparam *) isp->isp_param)->isp_bus_reset_delay;
2653 			if (mbs.param[1] < 2)
2654 				mbs.param[1] = 2;
2655 			bus = *((int *) arg);
2656 			if (IS_DUALBUS(isp))
2657 				mbs.param[2] = bus;
2658 		} else {
2659 			mbs.param[1] = 10;
2660 			bus = 0;
2661 		}
2662 		isp->isp_sendmarker |= (1 << bus);
2663 		isp_mboxcmd(isp, &mbs, MBLOGALL);
2664 		if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
2665 			break;
2666 		}
2667 		isp_prt(isp, ISP_LOGINFO,
2668 		    "driver initiated bus reset of bus %d", bus);
2669 		return (0);
2670 
2671 	case ISPCTL_RESET_DEV:
2672 		tgt = (*((int *) arg)) & 0xffff;
2673 		bus = (*((int *) arg)) >> 16;
2674 		mbs.param[0] = MBOX_ABORT_TARGET;
2675 		mbs.param[1] = (tgt << 8) | (bus << 15);
2676 		mbs.param[2] = 3;	/* 'delay', in seconds */
2677 		isp_mboxcmd(isp, &mbs, MBLOGALL);
2678 		if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
2679 			break;
2680 		}
2681 		isp_prt(isp, ISP_LOGINFO,
2682 		    "Target %d on Bus %d Reset Succeeded", tgt, bus);
2683 		isp->isp_sendmarker |= (1 << bus);
2684 		return (0);
2685 
2686 	case ISPCTL_ABORT_CMD:
2687 		xs = (XS_T *) arg;
2688 		tgt = XS_TGT(xs);
2689 		handle = isp_find_handle(isp, xs);
2690 		if (handle == 0) {
2691 			isp_prt(isp, ISP_LOGWARN,
2692 			    "cannot find handle for command to abort");
2693 			break;
2694 		}
2695 		bus = XS_CHANNEL(xs);
2696 		mbs.param[0] = MBOX_ABORT;
2697 		if (IS_FC(isp)) {
2698 			if (isp->isp_maxluns > 16) {
2699 				mbs.param[1] = tgt << 8;
2700 				mbs.param[4] = 0;
2701 				mbs.param[5] = 0;
2702 				mbs.param[6] = XS_LUN(xs);
2703 			} else {
2704 				mbs.param[1] = tgt << 8 | XS_LUN(xs);
2705 			}
2706 		} else {
2707 			mbs.param[1] =
2708 			    (bus << 15) | (XS_TGT(xs) << 8) | XS_LUN(xs);
2709 		}
2710 		mbs.param[3] = 0;
2711 		mbs.param[2] = handle;
2712 		isp_mboxcmd(isp, &mbs, MBLOGALL & ~MBOX_COMMAND_ERROR);
2713 		if (mbs.param[0] == MBOX_COMMAND_COMPLETE) {
2714 			return (0);
2715 		}
2716 		/*
2717 		 * XXX: Look for command in the REQUEST QUEUE. That is,
2718 		 * XXX: It hasen't been picked up by firmware yet.
2719 		 */
2720 		break;
2721 
2722 	case ISPCTL_UPDATE_PARAMS:
2723 
2724 		isp_update(isp);
2725 		return (0);
2726 
2727 	case ISPCTL_FCLINK_TEST:
2728 
2729 		if (IS_FC(isp)) {
2730 			int usdelay = (arg)? *((int *) arg) : 250000;
2731 			return (isp_fclink_test(isp, usdelay));
2732 		}
2733 		break;
2734 
2735 	case ISPCTL_SCAN_FABRIC:
2736 
2737 		if (IS_FC(isp)) {
2738 			return (isp_scan_fabric(isp));
2739 		}
2740 		break;
2741 
2742 	case ISPCTL_SCAN_LOOP:
2743 
2744 		if (IS_FC(isp)) {
2745 			return (isp_scan_loop(isp));
2746 		}
2747 		break;
2748 
2749 	case ISPCTL_PDB_SYNC:
2750 
2751 		if (IS_FC(isp)) {
2752 			return (isp_pdb_sync(isp));
2753 		}
2754 		break;
2755 
2756 	case ISPCTL_SEND_LIP:
2757 
2758 		if (IS_FC(isp)) {
2759 			mbs.param[0] = MBOX_INIT_LIP;
2760 			isp_mboxcmd(isp, &mbs, MBLOGALL);
2761 			if (mbs.param[0] == MBOX_COMMAND_COMPLETE) {
2762 				return (0);
2763 			}
2764 		}
2765 		break;
2766 
2767 	case ISPCTL_GET_POSMAP:
2768 
2769 		if (IS_FC(isp) && arg) {
2770 			return (isp_getmap(isp, arg));
2771 		}
2772 		break;
2773 
2774 	case ISPCTL_RUN_MBOXCMD:
2775 
2776 		isp_mboxcmd(isp, arg, MBLOGALL);
2777 		return(0);
2778 
2779 #ifdef	ISP_TARGET_MODE
2780 	case ISPCTL_TOGGLE_TMODE:
2781 	{
2782 
2783 		/*
2784 		 * We don't check/set against role here- that's the
2785 		 * responsibility for the outer layer to coordinate.
2786 		 */
2787 		if (IS_SCSI(isp)) {
2788 			int param = *(int *)arg;
2789 			mbs.param[0] = MBOX_ENABLE_TARGET_MODE;
2790 			mbs.param[1] = param & 0xffff;
2791 			mbs.param[2] = param >> 16;
2792 			isp_mboxcmd(isp, &mbs, MBLOGALL);
2793 			if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
2794 				break;
2795 			}
2796 		}
2797 		return (0);
2798 	}
2799 #endif
2800 	}
2801 	return (-1);
2802 }
2803 
2804 /*
2805  * Interrupt Service Routine(s).
2806  *
2807  * External (OS) framework has done the appropriate locking,
2808  * and the locking will be held throughout this function.
2809  */
2810 
2811 /*
2812  * Limit our stack depth by sticking with the max likely number
2813  * of completions on a request queue at any one time.
2814  */
2815 #define	MAX_REQUESTQ_COMPLETIONS	32
2816 
2817 int
2818 isp_intr(void *arg)
2819 {
2820 	struct ispsoftc *isp = arg;
2821 	XS_T *complist[MAX_REQUESTQ_COMPLETIONS], *xs;
2822 	u_int16_t iptr, optr, isr, sema, junk;
2823 	int i, nlooked = 0, ndone = 0;
2824 
2825 	if (IS_2100(isp)) {
2826 		i = 0;
2827 		do {
2828 			isr = ISP_READ(isp, BIU_ISR);
2829 			junk = ISP_READ(isp, BIU_ISR);
2830 		} while (isr != junk && ++i < 1000);
2831 		if (isr != junk) {
2832 			isp_prt(isp, ISP_LOGWARN,
2833 			    "isr unsteady (%x, %x)", isr, junk);
2834 		}
2835 		i = 0;
2836 		do {
2837 			sema = ISP_READ(isp, BIU_SEMA);
2838 			junk = ISP_READ(isp, BIU_SEMA);
2839 		} while (sema != junk && ++i < 1000);
2840 		if (sema != junk) {
2841 			isp_prt(isp, ISP_LOGWARN,
2842 			    "sema unsteady (%x, %x)", sema, junk);
2843 		}
2844 	} else {
2845 		isr = ISP_READ(isp, BIU_ISR);
2846 		sema = ISP_READ(isp, BIU_SEMA);
2847 	}
2848 	isp_prt(isp, ISP_LOGDEBUG3, "isp_intr isr %x sem %x", isr, sema);
2849 	isr &= INT_PENDING_MASK(isp);
2850 	sema &= BIU_SEMA_LOCK;
2851 	isp->isp_intcnt++;
2852 	if (isr == 0 && sema == 0) {
2853 		isp->isp_intbogus++;
2854 		return (0);
2855 	}
2856 
2857 	if (sema) {
2858 		u_int16_t mbox;
2859 
2860 		if (IS_2100(isp)) {
2861 			i = 0;
2862 			do {
2863 				mbox = ISP_READ(isp, OUTMAILBOX0);
2864 				junk = ISP_READ(isp, OUTMAILBOX0);;
2865 			} while (junk != mbox && ++i < 1000);
2866 			if (mbox != junk) {
2867 				isp_prt(isp, ISP_LOGWARN,
2868 				    "mailbox0 unsteady (%x, %x)", mbox, junk);
2869 				ISP_WRITE(isp, BIU_SEMA, 0);
2870 				ISP_WRITE(isp, HCCR, HCCR_CMD_CLEAR_RISC_INT);
2871 				return (1);
2872 			}
2873 		} else {
2874 			mbox = ISP_READ(isp, OUTMAILBOX0);
2875 		}
2876 		if (mbox & 0x4000) {
2877 			int obits, i = 0;
2878 			if ((obits = isp->isp_mboxbsy) != 0) {
2879 				isp->isp_mboxtmp[i++] = mbox;
2880 				for (i = 1; i < MAX_MAILBOX; i++) {
2881 					if ((obits & (1 << i)) == 0) {
2882 						continue;
2883 					}
2884 					isp->isp_mboxtmp[i] =
2885 					    ISP_READ(isp, MBOX_OFF(i));
2886 				}
2887 				MBOX_NOTIFY_COMPLETE(isp);
2888 			} else {
2889 				isp_prt(isp, ISP_LOGWARN,
2890 				    "Mbox Command Async (0x%x) with no waiters",
2891 				    mbox);
2892 			}
2893 		} else {
2894 			int fhandle = isp_parse_async(isp, (int) mbox);
2895 			isp_prt(isp, ISP_LOGDEBUG2, "Async Mbox 0x%x", mbox);
2896 			if (fhandle > 0) {
2897 				isp_fastpost_complete(isp, (u_int16_t) fhandle);
2898 			}
2899 		}
2900 		if (IS_FC(isp) || isp->isp_state != ISP_RUNSTATE) {
2901 			ISP_WRITE(isp, BIU_SEMA, 0);
2902 			ISP_WRITE(isp, HCCR, HCCR_CMD_CLEAR_RISC_INT);
2903 			return (1);
2904 		}
2905 	}
2906 
2907 	/*
2908 	 * We can't be getting this now.
2909 	 */
2910 	if (isp->isp_state != ISP_RUNSTATE) {
2911 		isp_prt(isp, ISP_LOGWARN,
2912 		    "interrupt (isr=%x, sema=%x) when not ready", isr, sema);
2913 		WRITE_RESPONSE_QUEUE_IN_POINTER(isp,
2914 		    READ_RESPONSE_QUEUE_OUT_POINTER(isp));
2915 		ISP_WRITE(isp, HCCR, HCCR_CMD_CLEAR_RISC_INT);
2916 		ISP_WRITE(isp, BIU_SEMA, 0);
2917 		return (1);
2918 	}
2919 
2920 	/*
2921 	 * You *must* read the Response Queue Out Pointer
2922 	 * prior to clearing the RISC interrupt.
2923 	 */
2924 	optr = isp->isp_residx;
2925 
2926 	if (IS_2100(isp)) {
2927 		i = 0;
2928 		do {
2929 			iptr = READ_RESPONSE_QUEUE_OUT_POINTER(isp);
2930 			junk = READ_RESPONSE_QUEUE_OUT_POINTER(isp);
2931 		} while (junk != iptr && ++i < 1000);
2932 
2933 		if (iptr != junk) {
2934 			ISP_WRITE(isp, HCCR, HCCR_CMD_CLEAR_RISC_INT);
2935 			isp_prt(isp, ISP_LOGWARN,
2936 			    "mailbox5 unsteady (%x, %x)", iptr, junk);
2937 			return (1);
2938 		}
2939 	} else {
2940 		iptr = READ_RESPONSE_QUEUE_OUT_POINTER(isp);
2941 	}
2942 
2943 	if (sema) {
2944 		ISP_WRITE(isp, BIU_SEMA, 0);
2945 	}
2946 	ISP_WRITE(isp, HCCR, HCCR_CMD_CLEAR_RISC_INT);
2947 
2948 	if (optr == iptr && sema == 0) {
2949 		/*
2950 		 * There are a lot of these- reasons unknown- mostly on
2951 		 * faster Alpha machines.
2952 		 *
2953 		 * I tried delaying after writing HCCR_CMD_CLEAR_RISC_INT to
2954 		 * make sure the old interrupt went away (to avoid 'ringing'
2955 		 * effects), but that didn't stop this from occurring.
2956 		 */
2957 		junk = ISP_READ(isp, BIU_ISR);
2958 		isp_prt(isp, ISP_LOGDEBUG2,
2959 		    "bogus intr- isr %x (%x) iptr %x optr %x",
2960 		    isr, junk, iptr, optr);
2961 		isp->isp_intbogus++;
2962 	}
2963 
2964 	while (optr != iptr) {
2965 		ispstatusreq_t *sp;
2966 		u_int16_t oop;
2967 		int buddaboom = 0;
2968 
2969 		sp = (ispstatusreq_t *) ISP_QUEUE_ENTRY(isp->isp_result, optr);
2970 		oop = optr;
2971 		optr = ISP_NXT_QENTRY(optr, RESULT_QUEUE_LEN(isp));
2972 		nlooked++;
2973 		/*
2974 		 * Do any appropriate unswizzling of what the Qlogic f/w has
2975 		 * written into memory so it makes sense to us. This is a
2976 		 * per-platform thing. Also includes any memory barriers.
2977 		 */
2978 		ISP_UNSWIZZLE_RESPONSE(isp, sp, oop);
2979 		if (sp->req_header.rqs_entry_type != RQSTYPE_RESPONSE) {
2980 			if (isp_handle_other_response(isp, sp, &optr) == 0) {
2981 				MEMZERO(sp, sizeof (isphdr_t));
2982 				continue;
2983 			}
2984 			/*
2985 			 * It really has to be a bounced request just copied
2986 			 * from the request queue to the response queue. If
2987 			 * not, something bad has happened.
2988 			 */
2989 			if (sp->req_header.rqs_entry_type != RQSTYPE_REQUEST) {
2990 				isp_prt(isp, ISP_LOGERR, notresp,
2991 				    sp->req_header.rqs_entry_type, oop, optr,
2992 				    nlooked);
2993 				if (isp->isp_dblev & ISP_LOGDEBUG0) {
2994 					isp_print_bytes(isp, "Queue Entry",
2995 					    QENTRY_LEN, sp);
2996 				}
2997 				MEMZERO(sp, sizeof (isphdr_t));
2998 				continue;
2999 			}
3000 			buddaboom = 1;
3001 		}
3002 
3003 		if (sp->req_header.rqs_flags & 0xf) {
3004 #define	_RQS_OFLAGS	\
3005 	~(RQSFLAG_CONTINUATION|RQSFLAG_FULL|RQSFLAG_BADHEADER|RQSFLAG_BADPACKET)
3006 			if (sp->req_header.rqs_flags & RQSFLAG_CONTINUATION) {
3007 				isp_prt(isp, ISP_LOGWARN,
3008 				    "continuation segment");
3009 				WRITE_RESPONSE_QUEUE_IN_POINTER(isp, optr);
3010 				continue;
3011 			}
3012 			if (sp->req_header.rqs_flags & RQSFLAG_FULL) {
3013 				isp_prt(isp, ISP_LOGDEBUG1,
3014 				    "internal queues full");
3015 				/*
3016 				 * We'll synthesize a QUEUE FULL message below.
3017 				 */
3018 			}
3019 			if (sp->req_header.rqs_flags & RQSFLAG_BADHEADER) {
3020 				isp_prt(isp, ISP_LOGERR,  "bad header flag");
3021 				buddaboom++;
3022 			}
3023 			if (sp->req_header.rqs_flags & RQSFLAG_BADPACKET) {
3024 				isp_prt(isp, ISP_LOGERR, "bad request packet");
3025 				buddaboom++;
3026 			}
3027 			if (sp->req_header.rqs_flags & _RQS_OFLAGS) {
3028 				isp_prt(isp, ISP_LOGERR,
3029 				    "unknown flags (0x%x) in response",
3030 				    sp->req_header.rqs_flags);
3031 				buddaboom++;
3032 			}
3033 #undef	_RQS_OFLAGS
3034 		}
3035 		if (sp->req_handle > isp->isp_maxcmds || sp->req_handle < 1) {
3036 			MEMZERO(sp, sizeof (isphdr_t));
3037 			isp_prt(isp, ISP_LOGERR,
3038 			    "bad request handle %d (type 0x%x, flags 0x%x)",
3039 			    sp->req_handle, sp->req_header.rqs_entry_type,
3040 			    sp->req_header.rqs_flags);
3041 			WRITE_RESPONSE_QUEUE_IN_POINTER(isp, optr);
3042 			continue;
3043 		}
3044 		xs = isp_find_xs(isp, sp->req_handle);
3045 		if (xs == NULL) {
3046 			MEMZERO(sp, sizeof (isphdr_t));
3047 			isp_prt(isp, ISP_LOGERR,
3048 			    "cannot find handle 0x%x in xflist",
3049 			    sp->req_handle);
3050 			WRITE_RESPONSE_QUEUE_IN_POINTER(isp, optr);
3051 			continue;
3052 		}
3053 		isp_destroy_handle(isp, sp->req_handle);
3054 		if (sp->req_status_flags & RQSTF_BUS_RESET) {
3055 			isp->isp_sendmarker |= (1 << XS_CHANNEL(xs));
3056 		}
3057 		if (buddaboom) {
3058 			XS_SETERR(xs, HBA_BOTCH);
3059 		}
3060 
3061 		if (IS_FC(isp) && (sp->req_scsi_status & RQCS_SV)) {
3062 			/*
3063 			 * Fibre Channel F/W doesn't say we got status
3064 			 * if there's Sense Data instead. I guess they
3065 			 * think it goes w/o saying.
3066 			 */
3067 			sp->req_state_flags |= RQSF_GOT_STATUS;
3068 		}
3069 		if (sp->req_state_flags & RQSF_GOT_STATUS) {
3070 			*XS_STSP(xs) = sp->req_scsi_status & 0xff;
3071 		}
3072 
3073 		switch (sp->req_header.rqs_entry_type) {
3074 		case RQSTYPE_RESPONSE:
3075 			XS_SET_STATE_STAT(isp, xs, sp);
3076 			isp_parse_status(isp, sp, xs);
3077 			if ((XS_NOERR(xs) || XS_ERR(xs) == HBA_NOERROR) &&
3078 			    (*XS_STSP(xs) == SCSI_BUSY)) {
3079 				XS_SETERR(xs, HBA_TGTBSY);
3080 			}
3081 			if (IS_SCSI(isp)) {
3082 				XS_RESID(xs) = sp->req_resid;
3083 				if ((sp->req_state_flags & RQSF_GOT_STATUS) &&
3084 				    (*XS_STSP(xs) == SCSI_CHECK) &&
3085 				    (sp->req_state_flags & RQSF_GOT_SENSE)) {
3086 					XS_SAVE_SENSE(xs, sp);
3087 				}
3088 				/*
3089 				 * A new synchronous rate was negotiated for
3090 				 * this target. Mark state such that we'll go
3091 				 * look up that which has changed later.
3092 				 */
3093 				if (sp->req_status_flags & RQSTF_NEGOTIATION) {
3094 					int t = XS_TGT(xs);
3095 					sdparam *sdp = isp->isp_param;
3096 					sdp += XS_CHANNEL(xs);
3097 					sdp->isp_devparam[t].dev_refresh = 1;
3098 					isp->isp_update |=
3099 					    (1 << XS_CHANNEL(xs));
3100 				}
3101 			} else {
3102 				if (sp->req_status_flags & RQSF_XFER_COMPLETE) {
3103 					XS_RESID(xs) = 0;
3104 				} else if (sp->req_scsi_status & RQCS_RESID) {
3105 					XS_RESID(xs) = sp->req_resid;
3106 				} else {
3107 					XS_RESID(xs) = 0;
3108 				}
3109 				if ((sp->req_state_flags & RQSF_GOT_STATUS) &&
3110 				    (*XS_STSP(xs) == SCSI_CHECK) &&
3111 				    (sp->req_scsi_status & RQCS_SV)) {
3112 					XS_SAVE_SENSE(xs, sp);
3113 					/* solely for the benefit of debug */
3114 					sp->req_state_flags |= RQSF_GOT_SENSE;
3115 				}
3116 			}
3117 			isp_prt(isp, ISP_LOGDEBUG2,
3118 			   "asked for %ld got resid %ld", (long) XS_XFRLEN(xs),
3119 			   (long) sp->req_resid);
3120 			break;
3121 		case RQSTYPE_REQUEST:
3122 			if (sp->req_header.rqs_flags & RQSFLAG_FULL) {
3123 				/*
3124 				 * Force Queue Full status.
3125 				 */
3126 				*XS_STSP(xs) = SCSI_QFULL;
3127 				XS_SETERR(xs, HBA_NOERROR);
3128 			} else if (XS_NOERR(xs)) {
3129 				XS_SETERR(xs, HBA_BOTCH);
3130 			}
3131 			XS_RESID(xs) = XS_XFRLEN(xs);
3132 			break;
3133 		default:
3134 			isp_prt(isp, ISP_LOGWARN,
3135 			    "unhandled response queue type 0x%x",
3136 			    sp->req_header.rqs_entry_type);
3137 			if (XS_NOERR(xs)) {
3138 				XS_SETERR(xs, HBA_BOTCH);
3139 			}
3140 			break;
3141 		}
3142 
3143 		/*
3144 		 * Free any dma resources. As a side effect, this may
3145 		 * also do any cache flushing necessary for data coherence.			 */
3146 		if (XS_XFRLEN(xs)) {
3147 			ISP_DMAFREE(isp, xs, sp->req_handle);
3148 		}
3149 
3150 		if (((isp->isp_dblev & (ISP_LOGDEBUG2|ISP_LOGDEBUG3))) ||
3151 		    ((isp->isp_dblev & ISP_LOGDEBUG1) && ((!XS_NOERR(xs)) ||
3152 		    (*XS_STSP(xs) != SCSI_GOOD)))) {
3153 			char skey;
3154 			if (sp->req_state_flags & RQSF_GOT_SENSE) {
3155 				skey = XS_SNSKEY(xs) & 0xf;
3156 				if (skey < 10)
3157 					skey += '0';
3158 				else
3159 					skey += 'a' - 10;
3160 			} else if (*XS_STSP(xs) == SCSI_CHECK) {
3161 				skey = '?';
3162 			} else {
3163 				skey = '.';
3164 			}
3165 			isp_prt(isp, ISP_LOGALL, finmsg, XS_CHANNEL(xs),
3166 			    XS_TGT(xs), XS_LUN(xs), XS_XFRLEN(xs), XS_RESID(xs),
3167 			    *XS_STSP(xs), skey, XS_ERR(xs));
3168 		}
3169 
3170 		if (isp->isp_nactive > 0)
3171 		    isp->isp_nactive--;
3172 		complist[ndone++] = xs;	/* defer completion call until later */
3173 		MEMZERO(sp, sizeof (isphdr_t));
3174 		if (ndone == MAX_REQUESTQ_COMPLETIONS) {
3175 			break;
3176 		}
3177 	}
3178 
3179 	/*
3180 	 * If we looked at any commands, then it's valid to find out
3181 	 * what the outpointer is. It also is a trigger to update the
3182 	 * ISP's notion of what we've seen so far.
3183 	 */
3184 	if (nlooked) {
3185 		WRITE_RESPONSE_QUEUE_IN_POINTER(isp, optr);
3186 		isp->isp_reqodx = READ_REQUEST_QUEUE_OUT_POINTER(isp);
3187 	}
3188 
3189 	isp->isp_residx = optr;
3190 	for (i = 0; i < ndone; i++) {
3191 		xs = complist[i];
3192 		if (xs) {
3193 			isp_done(xs);
3194 		}
3195 	}
3196 	return (1);
3197 }
3198 
3199 /*
3200  * Support routines.
3201  */
3202 
3203 static int
3204 isp_parse_async(struct ispsoftc *isp, int mbox)
3205 {
3206 	int bus;
3207 	u_int16_t fast_post_handle = 0;
3208 
3209 	if (IS_DUALBUS(isp)) {
3210 		bus = ISP_READ(isp, OUTMAILBOX6);
3211 	} else {
3212 		bus = 0;
3213 	}
3214 
3215 	switch (mbox) {
3216 	case ASYNC_BUS_RESET:
3217 		isp->isp_sendmarker |= (1 << bus);
3218 #ifdef	ISP_TARGET_MODE
3219 		isp_target_async(isp, bus, mbox);
3220 #endif
3221 		isp_async(isp, ISPASYNC_BUS_RESET, &bus);
3222 		break;
3223 	case ASYNC_SYSTEM_ERROR:
3224 		isp_async(isp, ISPASYNC_FW_CRASH, NULL);
3225 		/* no point continuing after this */
3226 		return (-1);
3227 
3228 	case ASYNC_RQS_XFER_ERR:
3229 		isp_prt(isp, ISP_LOGERR, "Request Queue Transfer Error");
3230 		break;
3231 
3232 	case ASYNC_RSP_XFER_ERR:
3233 		isp_prt(isp, ISP_LOGERR, "Response Queue Transfer Error");
3234 		break;
3235 
3236 	case ASYNC_QWAKEUP:
3237 		/*
3238 		 * We've just been notified that the Queue has woken up.
3239 		 * We don't need to be chatty about this- just unlatch things
3240 		 * and move on.
3241 		 */
3242 		mbox = READ_REQUEST_QUEUE_OUT_POINTER(isp);
3243 		break;
3244 
3245 	case ASYNC_TIMEOUT_RESET:
3246 		isp_prt(isp, ISP_LOGWARN,
3247 		    "timeout initiated SCSI bus reset of bus %d", bus);
3248 		isp->isp_sendmarker |= (1 << bus);
3249 #ifdef	ISP_TARGET_MODE
3250 		isp_target_async(isp, bus, mbox);
3251 #endif
3252 		break;
3253 
3254 	case ASYNC_DEVICE_RESET:
3255 		isp_prt(isp, ISP_LOGINFO, "device reset on bus %d", bus);
3256 		isp->isp_sendmarker |= (1 << bus);
3257 #ifdef	ISP_TARGET_MODE
3258 		isp_target_async(isp, bus, mbox);
3259 #endif
3260 		break;
3261 
3262 	case ASYNC_EXTMSG_UNDERRUN:
3263 		isp_prt(isp, ISP_LOGWARN, "extended message underrun");
3264 		break;
3265 
3266 	case ASYNC_SCAM_INT:
3267 		isp_prt(isp, ISP_LOGINFO, "SCAM interrupt");
3268 		break;
3269 
3270 	case ASYNC_HUNG_SCSI:
3271 		isp_prt(isp, ISP_LOGERR,
3272 		    "stalled SCSI Bus after DATA Overrun");
3273 		/* XXX: Need to issue SCSI reset at this point */
3274 		break;
3275 
3276 	case ASYNC_KILLED_BUS:
3277 		isp_prt(isp, ISP_LOGERR, "SCSI Bus reset after DATA Overrun");
3278 		break;
3279 
3280 	case ASYNC_BUS_TRANSIT:
3281 		mbox = ISP_READ(isp, OUTMAILBOX2);
3282 		switch (mbox & 0x1c00) {
3283 		case SXP_PINS_LVD_MODE:
3284 			isp_prt(isp, ISP_LOGINFO, "Transition to LVD mode");
3285 			SDPARAM(isp)->isp_diffmode = 0;
3286 			SDPARAM(isp)->isp_ultramode = 0;
3287 			SDPARAM(isp)->isp_lvdmode = 1;
3288 			break;
3289 		case SXP_PINS_HVD_MODE:
3290 			isp_prt(isp, ISP_LOGINFO,
3291 			    "Transition to Differential mode");
3292 			SDPARAM(isp)->isp_diffmode = 1;
3293 			SDPARAM(isp)->isp_ultramode = 0;
3294 			SDPARAM(isp)->isp_lvdmode = 0;
3295 			break;
3296 		case SXP_PINS_SE_MODE:
3297 			isp_prt(isp, ISP_LOGINFO,
3298 			    "Transition to Single Ended mode");
3299 			SDPARAM(isp)->isp_diffmode = 0;
3300 			SDPARAM(isp)->isp_ultramode = 1;
3301 			SDPARAM(isp)->isp_lvdmode = 0;
3302 			break;
3303 		default:
3304 			isp_prt(isp, ISP_LOGWARN,
3305 			    "Transition to Unknown Mode 0x%x", mbox);
3306 			break;
3307 		}
3308 		/*
3309 		 * XXX: Set up to renegotiate again!
3310 		 */
3311 		/* Can only be for a 1080... */
3312 		isp->isp_sendmarker |= (1 << bus);
3313 		break;
3314 
3315 	case ASYNC_CMD_CMPLT:
3316 		fast_post_handle = ISP_READ(isp, OUTMAILBOX1);
3317 		isp_prt(isp, ISP_LOGDEBUG3, "fast post completion of %u",
3318 		    fast_post_handle);
3319 		break;
3320 
3321 	case ASYNC_CTIO_DONE:
3322 #ifdef	ISP_TARGET_MODE
3323 		/*
3324 		 * Bus gets overloaded with the handle. Dual bus
3325 		 * cards don't put bus# into the handle.
3326 		 */
3327 		bus = (ISP_READ(isp, OUTMAILBOX2) << 16) |
3328 		    ISP_READ(isp, OUTMAILBOX1);
3329 		isp_target_async(isp, bus, mbox);
3330 #else
3331 		isp_prt(isp, ISP_LOGINFO, "Fast Posting CTIO done");
3332 #endif
3333 		break;
3334 
3335 	case ASYNC_LIP_OCCURRED:
3336 		FCPARAM(isp)->isp_lipseq =
3337 		    ISP_READ(isp, OUTMAILBOX1);
3338 		FCPARAM(isp)->isp_fwstate = FW_CONFIG_WAIT;
3339 		FCPARAM(isp)->isp_loopstate = LOOP_LIP_RCVD;
3340 		isp->isp_sendmarker = 1;
3341 		isp_mark_getpdb_all(isp);
3342 		isp_async(isp, ISPASYNC_LIP, NULL);
3343 #ifdef	ISP_TARGET_MODE
3344 		isp_target_async(isp, bus, mbox);
3345 #endif
3346 		/*
3347 		 * We've had problems with data corruption occuring on
3348 		 * commands that complete (with no apparent error) after
3349 		 * we receive a LIP. This has been observed mostly on
3350 		 * Local Loop topologies. To be safe, let's just mark
3351 		 * all active commands as dead.
3352 		 */
3353 		if (FCPARAM(isp)->isp_topo == TOPO_NL_PORT ||
3354 		    FCPARAM(isp)->isp_topo == TOPO_FL_PORT) {
3355 			int i, j;
3356 			for (i = j = 0; i < isp->isp_maxcmds; i++) {
3357 				XS_T *xs;
3358 				xs = isp->isp_xflist[i];
3359 				if (xs != NULL) {
3360 					j++;
3361 					XS_SETERR(xs, HBA_BUSRESET);
3362 				}
3363 			}
3364 			if (j) {
3365 				isp_prt(isp, ISP_LOGERR,
3366 				    "LIP destroyed %d active commands", j);
3367 			}
3368 		}
3369 		break;
3370 
3371 	case ASYNC_LOOP_UP:
3372 		isp->isp_sendmarker = 1;
3373 		FCPARAM(isp)->isp_fwstate = FW_CONFIG_WAIT;
3374 		FCPARAM(isp)->isp_loopstate = LOOP_LIP_RCVD;
3375 		isp_mark_getpdb_all(isp);
3376 		isp_async(isp, ISPASYNC_LOOP_UP, NULL);
3377 #ifdef	ISP_TARGET_MODE
3378 		isp_target_async(isp, bus, mbox);
3379 #endif
3380 		break;
3381 
3382 	case ASYNC_LOOP_DOWN:
3383 		isp->isp_sendmarker = 1;
3384 		FCPARAM(isp)->isp_fwstate = FW_CONFIG_WAIT;
3385 		FCPARAM(isp)->isp_loopstate = LOOP_NIL;
3386 		isp_mark_getpdb_all(isp);
3387 		isp_async(isp, ISPASYNC_LOOP_DOWN, NULL);
3388 #ifdef	ISP_TARGET_MODE
3389 		isp_target_async(isp, bus, mbox);
3390 #endif
3391 		break;
3392 
3393 	case ASYNC_LOOP_RESET:
3394 		isp->isp_sendmarker = 1;
3395 		FCPARAM(isp)->isp_fwstate = FW_CONFIG_WAIT;
3396 		FCPARAM(isp)->isp_loopstate = LOOP_NIL;
3397 		isp_mark_getpdb_all(isp);
3398 		isp_async(isp, ISPASYNC_LOOP_RESET, NULL);
3399 #ifdef	ISP_TARGET_MODE
3400 		isp_target_async(isp, bus, mbox);
3401 #endif
3402 		break;
3403 
3404 	case ASYNC_PDB_CHANGED:
3405 		isp->isp_sendmarker = 1;
3406 		FCPARAM(isp)->isp_loopstate = LOOP_PDB_RCVD;
3407 		isp_mark_getpdb_all(isp);
3408 		isp_async(isp, ISPASYNC_CHANGE_NOTIFY, ISPASYNC_CHANGE_PDB);
3409 		break;
3410 
3411 	case ASYNC_CHANGE_NOTIFY:
3412 		/*
3413 		 * Not correct, but it will force us to rescan the loop.
3414 		 */
3415 		FCPARAM(isp)->isp_loopstate = LOOP_PDB_RCVD;
3416 		isp_mark_getpdb_all(isp);
3417 		isp_async(isp, ISPASYNC_CHANGE_NOTIFY, ISPASYNC_CHANGE_SNS);
3418 		break;
3419 
3420 	case ASYNC_PTPMODE:
3421 		if (FCPARAM(isp)->isp_onfabric)
3422 			FCPARAM(isp)->isp_topo = TOPO_F_PORT;
3423 		else
3424 			FCPARAM(isp)->isp_topo = TOPO_N_PORT;
3425 		isp_mark_getpdb_all(isp);
3426 		isp->isp_sendmarker = 1;
3427 		FCPARAM(isp)->isp_fwstate = FW_CONFIG_WAIT;
3428 		FCPARAM(isp)->isp_loopstate = LOOP_LIP_RCVD;
3429 		isp_async(isp, ISPASYNC_CHANGE_NOTIFY, ISPASYNC_CHANGE_OTHER);
3430 #ifdef	ISP_TARGET_MODE
3431 		isp_target_async(isp, bus, mbox);
3432 #endif
3433 		isp_prt(isp, ISP_LOGINFO, "Point-to-Point mode");
3434 		break;
3435 
3436 	case ASYNC_CONNMODE:
3437 		mbox = ISP_READ(isp, OUTMAILBOX1);
3438 		isp_mark_getpdb_all(isp);
3439 		switch (mbox) {
3440 		case ISP_CONN_LOOP:
3441 			isp_prt(isp, ISP_LOGINFO,
3442 			    "Point-to-Point -> Loop mode");
3443 			break;
3444 		case ISP_CONN_PTP:
3445 			isp_prt(isp, ISP_LOGINFO,
3446 			    "Loop -> Point-to-Point mode");
3447 			break;
3448 		case ISP_CONN_BADLIP:
3449 			isp_prt(isp, ISP_LOGWARN,
3450 			    "Point-to-Point -> Loop mode (BAD LIP)");
3451 			break;
3452 		case ISP_CONN_FATAL:
3453 			isp_prt(isp, ISP_LOGERR, "FATAL CONNECTION ERROR");
3454 			isp_reinit(isp);
3455 #ifdef	ISP_TARGET_MODE
3456 			isp_target_async(isp, bus, ASYNC_SYSTEM_ERROR);
3457 #endif
3458 			/* no point continuing after this */
3459 			return (-1);
3460 		case ISP_CONN_LOOPBACK:
3461 			isp_prt(isp, ISP_LOGWARN,
3462 			    "Looped Back in Point-to-Point mode");
3463 			break;
3464 		default:
3465 			isp_prt(isp, ISP_LOGWARN,
3466 			    "Unknown connection mode (0x%x)", mbox);
3467 			break;
3468 		}
3469 		isp_async(isp, ISPASYNC_CHANGE_NOTIFY, ISPASYNC_CHANGE_OTHER);
3470 		isp->isp_sendmarker = 1;
3471 		FCPARAM(isp)->isp_fwstate = FW_CONFIG_WAIT;
3472 		FCPARAM(isp)->isp_loopstate = LOOP_LIP_RCVD;
3473 		break;
3474 
3475 	default:
3476 		isp_prt(isp, ISP_LOGWARN, "Unknown Async Code 0x%x", mbox);
3477 		break;
3478 	}
3479 	return (fast_post_handle);
3480 }
3481 
3482 /*
3483  * Handle other response entries. A pointer to the request queue output
3484  * index is here in case we want to eat several entries at once, although
3485  * this is not used currently.
3486  */
3487 
3488 static int
3489 isp_handle_other_response(struct ispsoftc *isp,
3490     ispstatusreq_t *sp, u_int16_t *optrp)
3491 {
3492 	switch (sp->req_header.rqs_entry_type) {
3493 	case RQSTYPE_STATUS_CONT:
3494 		isp_prt(isp, ISP_LOGINFO, "Ignored Continuation Response");
3495 		return (0);
3496 	case RQSTYPE_ATIO:
3497 	case RQSTYPE_CTIO:
3498 	case RQSTYPE_ENABLE_LUN:
3499 	case RQSTYPE_MODIFY_LUN:
3500 	case RQSTYPE_NOTIFY:
3501 	case RQSTYPE_NOTIFY_ACK:
3502 	case RQSTYPE_CTIO1:
3503 	case RQSTYPE_ATIO2:
3504 	case RQSTYPE_CTIO2:
3505 	case RQSTYPE_CTIO3:
3506 #ifdef	ISP_TARGET_MODE
3507 		return (isp_target_notify(isp, sp, optrp));
3508 #else
3509 		optrp = optrp;
3510 		/* FALLTHROUGH */
3511 #endif
3512 	case RQSTYPE_REQUEST:
3513 	default:
3514 		if (isp_async(isp, ISPASYNC_UNHANDLED_RESPONSE, sp)) {
3515 			return (0);
3516 		}
3517 		isp_prt(isp, ISP_LOGWARN, "Unhandled Response Type 0x%x",
3518 		    sp->req_header.rqs_entry_type);
3519 		return (-1);
3520 	}
3521 }
3522 
3523 static void
3524 isp_parse_status(struct ispsoftc *isp, ispstatusreq_t *sp, XS_T *xs)
3525 {
3526 	switch (sp->req_completion_status & 0xff) {
3527 	case RQCS_COMPLETE:
3528 		if (XS_NOERR(xs)) {
3529 			XS_SETERR(xs, HBA_NOERROR);
3530 		}
3531 		return;
3532 
3533 	case RQCS_INCOMPLETE:
3534 		if ((sp->req_state_flags & RQSF_GOT_TARGET) == 0) {
3535 			isp_prt(isp, ISP_LOGDEBUG1,
3536 			    "Selection Timeout for %d.%d.%d",
3537 			    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs));
3538 			if (XS_NOERR(xs)) {
3539 				XS_SETERR(xs, HBA_SELTIMEOUT);
3540 			}
3541 			return;
3542 		}
3543 		isp_prt(isp, ISP_LOGERR,
3544 		    "command incomplete for %d.%d.%d, state 0x%x",
3545 		    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs),
3546 		    sp->req_state_flags);
3547 		break;
3548 
3549 	case RQCS_DMA_ERROR:
3550 		isp_prt(isp, ISP_LOGERR, "DMA error for command on %d.%d.%d",
3551 		    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs));
3552 		break;
3553 
3554 	case RQCS_TRANSPORT_ERROR:
3555 	{
3556 		char buf[172];
3557 		buf[0] = 0;
3558 		STRNCAT(buf, "states=>", sizeof buf);
3559 		if (sp->req_state_flags & RQSF_GOT_BUS) {
3560 			STRNCAT(buf, " GOT_BUS", sizeof buf);
3561 		}
3562 		if (sp->req_state_flags & RQSF_GOT_TARGET) {
3563 			STRNCAT(buf, " GOT_TGT", sizeof buf);
3564 		}
3565 		if (sp->req_state_flags & RQSF_SENT_CDB) {
3566 			STRNCAT(buf, " SENT_CDB", sizeof buf);
3567 		}
3568 		if (sp->req_state_flags & RQSF_XFRD_DATA) {
3569 			STRNCAT(buf, " XFRD_DATA", sizeof buf);
3570 		}
3571 		if (sp->req_state_flags & RQSF_GOT_STATUS) {
3572 			STRNCAT(buf, " GOT_STS", sizeof buf);
3573 		}
3574 		if (sp->req_state_flags & RQSF_GOT_SENSE) {
3575 			STRNCAT(buf, " GOT_SNS", sizeof buf);
3576 		}
3577 		if (sp->req_state_flags & RQSF_XFER_COMPLETE) {
3578 			STRNCAT(buf, " XFR_CMPLT", sizeof buf);
3579 		}
3580 		STRNCAT(buf, "\nstatus=>", sizeof buf);
3581 		if (sp->req_status_flags & RQSTF_DISCONNECT) {
3582 			STRNCAT(buf, " Disconnect", sizeof buf);
3583 		}
3584 		if (sp->req_status_flags & RQSTF_SYNCHRONOUS) {
3585 			STRNCAT(buf, " Sync_xfr", sizeof buf);
3586 		}
3587 		if (sp->req_status_flags & RQSTF_PARITY_ERROR) {
3588 			STRNCAT(buf, " Parity", sizeof buf);
3589 		}
3590 		if (sp->req_status_flags & RQSTF_BUS_RESET) {
3591 			STRNCAT(buf, " Bus_Reset", sizeof buf);
3592 		}
3593 		if (sp->req_status_flags & RQSTF_DEVICE_RESET) {
3594 			STRNCAT(buf, " Device_Reset", sizeof buf);
3595 		}
3596 		if (sp->req_status_flags & RQSTF_ABORTED) {
3597 			STRNCAT(buf, " Aborted", sizeof buf);
3598 		}
3599 		if (sp->req_status_flags & RQSTF_TIMEOUT) {
3600 			STRNCAT(buf, " Timeout", sizeof buf);
3601 		}
3602 		if (sp->req_status_flags & RQSTF_NEGOTIATION) {
3603 			STRNCAT(buf, " Negotiation", sizeof buf);
3604 		}
3605 		isp_prt(isp, ISP_LOGERR, "%s", buf);
3606 		isp_prt(isp, ISP_LOGERR, "transport error for %d.%d.%d:\n%s",
3607 		    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs), buf);
3608 		break;
3609 	}
3610 	case RQCS_RESET_OCCURRED:
3611 		isp_prt(isp, ISP_LOGWARN,
3612 		    "bus reset destroyed command for %d.%d.%d",
3613 		    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs));
3614 		isp->isp_sendmarker |= (1 << XS_CHANNEL(xs));
3615 		if (XS_NOERR(xs)) {
3616 			XS_SETERR(xs, HBA_BUSRESET);
3617 		}
3618 		return;
3619 
3620 	case RQCS_ABORTED:
3621 		isp_prt(isp, ISP_LOGERR, "command aborted for %d.%d.%d",
3622 		    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs));
3623 		isp->isp_sendmarker |= (1 << XS_CHANNEL(xs));
3624 		if (XS_NOERR(xs)) {
3625 			XS_SETERR(xs, HBA_ABORTED);
3626 		}
3627 		return;
3628 
3629 	case RQCS_TIMEOUT:
3630 		isp_prt(isp, ISP_LOGWARN, "command timed out for %d.%d.%d",
3631 		    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs));
3632 		if (XS_NOERR(xs)) {
3633 			XS_SETERR(xs, HBA_CMDTIMEOUT);
3634 		}
3635 		return;
3636 
3637 	case RQCS_DATA_OVERRUN:
3638 		XS_RESID(xs) = sp->req_resid;
3639 		isp_prt(isp, ISP_LOGERR, "data overrun for command on %d.%d.%d",
3640 		    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs));
3641 		if (XS_NOERR(xs)) {
3642 			XS_SETERR(xs, HBA_DATAOVR);
3643 		}
3644 		return;
3645 
3646 	case RQCS_COMMAND_OVERRUN:
3647 		isp_prt(isp, ISP_LOGERR,
3648 		    "command overrun for command on %d.%d.%d",
3649 		    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs));
3650 		break;
3651 
3652 	case RQCS_STATUS_OVERRUN:
3653 		isp_prt(isp, ISP_LOGERR,
3654 		    "status overrun for command on %d.%d.%d",
3655 		    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs));
3656 		break;
3657 
3658 	case RQCS_BAD_MESSAGE:
3659 		isp_prt(isp, ISP_LOGERR,
3660 		    "msg not COMMAND COMPLETE after status %d.%d.%d",
3661 		    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs));
3662 		break;
3663 
3664 	case RQCS_NO_MESSAGE_OUT:
3665 		isp_prt(isp, ISP_LOGERR,
3666 		    "No MESSAGE OUT phase after selection on %d.%d.%d",
3667 		    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs));
3668 		break;
3669 
3670 	case RQCS_EXT_ID_FAILED:
3671 		isp_prt(isp, ISP_LOGERR, "EXTENDED IDENTIFY failed %d.%d.%d",
3672 		    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs));
3673 		break;
3674 
3675 	case RQCS_IDE_MSG_FAILED:
3676 		isp_prt(isp, ISP_LOGERR,
3677 		    "INITIATOR DETECTED ERROR rejected by %d.%d.%d",
3678 		    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs));
3679 		break;
3680 
3681 	case RQCS_ABORT_MSG_FAILED:
3682 		isp_prt(isp, ISP_LOGERR, "ABORT OPERATION rejected by %d.%d.%d",
3683 		    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs));
3684 		break;
3685 
3686 	case RQCS_REJECT_MSG_FAILED:
3687 		isp_prt(isp, ISP_LOGERR, "MESSAGE REJECT rejected by %d.%d.%d",
3688 		    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs));
3689 		break;
3690 
3691 	case RQCS_NOP_MSG_FAILED:
3692 		isp_prt(isp, ISP_LOGERR, "NOP rejected by %d.%d.%d",
3693 		    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs));
3694 		break;
3695 
3696 	case RQCS_PARITY_ERROR_MSG_FAILED:
3697 		isp_prt(isp, ISP_LOGERR,
3698 		    "MESSAGE PARITY ERROR rejected by %d.%d.%d",
3699 		    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs));
3700 		break;
3701 
3702 	case RQCS_DEVICE_RESET_MSG_FAILED:
3703 		isp_prt(isp, ISP_LOGWARN,
3704 		    "BUS DEVICE RESET rejected by %d.%d.%d",
3705 		    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs));
3706 		break;
3707 
3708 	case RQCS_ID_MSG_FAILED:
3709 		isp_prt(isp, ISP_LOGERR, "IDENTIFY rejected by %d.%d.%d",
3710 		    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs));
3711 		break;
3712 
3713 	case RQCS_UNEXP_BUS_FREE:
3714 		isp_prt(isp, ISP_LOGERR, "%d.%d.%d had an unexpected bus free",
3715 		    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs));
3716 		break;
3717 
3718 	case RQCS_DATA_UNDERRUN:
3719 		XS_RESID(xs) = sp->req_resid;
3720 		if (XS_NOERR(xs)) {
3721 			XS_SETERR(xs, HBA_NOERROR);
3722 		}
3723 		return;
3724 
3725 	case RQCS_XACT_ERR1:
3726 		isp_prt(isp, ISP_LOGERR, xact1, XS_CHANNEL(xs),
3727 		    XS_TGT(xs), XS_LUN(xs));
3728 		break;
3729 
3730 	case RQCS_XACT_ERR2:
3731 		isp_prt(isp, ISP_LOGERR, xact2,
3732 		    XS_LUN(xs), XS_TGT(xs), XS_CHANNEL(xs));
3733 		break;
3734 
3735 	case RQCS_XACT_ERR3:
3736 		isp_prt(isp, ISP_LOGERR, xact3,
3737 		    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs));
3738 		break;
3739 
3740 	case RQCS_BAD_ENTRY:
3741 		isp_prt(isp, ISP_LOGERR, "Invalid IOCB entry type detected");
3742 		break;
3743 
3744 	case RQCS_QUEUE_FULL:
3745 		isp_prt(isp, ISP_LOGDEBUG1,
3746 		    "internal queues full for %d.%d.%d status 0x%x", XS_TGT(xs),
3747 		    XS_LUN(xs), XS_CHANNEL(xs), *XS_STSP(xs));
3748 		/*
3749 		 * If QFULL or some other status byte is set, then this
3750 		 * isn't an error, per se.
3751 		 */
3752 		if (*XS_STSP(xs) != SCSI_GOOD && XS_NOERR(xs)) {
3753 			XS_SETERR(xs, HBA_NOERROR);
3754 			return;
3755 		}
3756 		break;
3757 
3758 	case RQCS_PHASE_SKIPPED:
3759 		isp_prt(isp, ISP_LOGERR, pskip,
3760 		    XS_TGT(xs), XS_LUN(xs), XS_CHANNEL(xs));
3761 		break;
3762 
3763 	case RQCS_ARQS_FAILED:
3764 		isp_prt(isp, ISP_LOGERR,
3765 		    "Auto Request Sense failed for %d.%d.%d",
3766 		    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs));
3767 		if (XS_NOERR(xs)) {
3768 			XS_SETERR(xs, HBA_ARQFAIL);
3769 		}
3770 		return;
3771 
3772 	case RQCS_WIDE_FAILED:
3773 		isp_prt(isp, ISP_LOGERR,
3774 		    "Wide Negotiation failed for %d.%d.%d",
3775 		    XS_TGT(xs), XS_LUN(xs), XS_CHANNEL(xs));
3776 		if (IS_SCSI(isp)) {
3777 			sdparam *sdp = isp->isp_param;
3778 			sdp += XS_CHANNEL(xs);
3779 			sdp->isp_devparam[XS_TGT(xs)].dev_flags &= ~DPARM_WIDE;
3780 			sdp->isp_devparam[XS_TGT(xs)].dev_update = 1;
3781 			isp->isp_update |= (1 << XS_CHANNEL(xs));
3782 		}
3783 		if (XS_NOERR(xs)) {
3784 			XS_SETERR(xs, HBA_NOERROR);
3785 		}
3786 		return;
3787 
3788 	case RQCS_SYNCXFER_FAILED:
3789 		isp_prt(isp, ISP_LOGERR,
3790 		    "SDTR Message failed for target %d.%d.%d",
3791 		    XS_TGT(xs), XS_LUN(xs), XS_CHANNEL(xs));
3792 		if (IS_SCSI(isp)) {
3793 			sdparam *sdp = isp->isp_param;
3794 			sdp += XS_CHANNEL(xs);
3795 			sdp->isp_devparam[XS_TGT(xs)].dev_flags &= ~DPARM_SYNC;
3796 			sdp->isp_devparam[XS_TGT(xs)].dev_update = 1;
3797 			isp->isp_update |= (1 << XS_CHANNEL(xs));
3798 		}
3799 		break;
3800 
3801 	case RQCS_LVD_BUSERR:
3802 		isp_prt(isp, ISP_LOGERR,
3803 		    "Bad LVD condition while talking to %d.%d.%d",
3804 		    XS_TGT(xs), XS_LUN(xs), XS_CHANNEL(xs));
3805 		break;
3806 
3807 	case RQCS_PORT_UNAVAILABLE:
3808 		/*
3809 		 * No such port on the loop. Moral equivalent of SELTIMEO
3810 		 */
3811 		isp_prt(isp, ISP_LOGINFO,
3812 		    "Port Unavailable for target %d", XS_TGT(xs));
3813 		if (XS_NOERR(xs)) {
3814 			XS_SETERR(xs, HBA_SELTIMEOUT);
3815 		}
3816 		return;
3817 	case RQCS_PORT_LOGGED_OUT:
3818 		/*
3819 		 * It was there (maybe)- treat as a selection timeout.
3820 		 */
3821 		isp_prt(isp, ISP_LOGINFO,
3822 		    "port logout for target %d", XS_TGT(xs));
3823 		if (XS_NOERR(xs)) {
3824 			XS_SETERR(xs, HBA_SELTIMEOUT);
3825 		}
3826 		return;
3827 
3828 	case RQCS_PORT_CHANGED:
3829 		isp_prt(isp, ISP_LOGWARN,
3830 		    "port changed for target %d", XS_TGT(xs));
3831 		if (XS_NOERR(xs)) {
3832 			XS_SETERR(xs, HBA_SELTIMEOUT);
3833 		}
3834 		return;
3835 
3836 	case RQCS_PORT_BUSY:
3837 		isp_prt(isp, ISP_LOGWARN,
3838 		    "port busy for target %d", XS_TGT(xs));
3839 		if (XS_NOERR(xs)) {
3840 			XS_SETERR(xs, HBA_TGTBSY);
3841 		}
3842 		return;
3843 
3844 	default:
3845 		isp_prt(isp, ISP_LOGERR, "Unknown Completion Status 0x%x",
3846 		    sp->req_completion_status);
3847 		break;
3848 	}
3849 	if (XS_NOERR(xs)) {
3850 		XS_SETERR(xs, HBA_BOTCH);
3851 	}
3852 }
3853 
3854 static void
3855 isp_fastpost_complete(struct ispsoftc *isp, u_int16_t fph)
3856 {
3857 	XS_T *xs;
3858 
3859 	if (fph == 0) {
3860 		return;
3861 	}
3862 	xs = isp_find_xs(isp, fph);
3863 	if (xs == NULL) {
3864 		isp_prt(isp, ISP_LOGWARN,
3865 		    "Command for fast post handle 0x%x not found", fph);
3866 		return;
3867 	}
3868 	isp_destroy_handle(isp, fph);
3869 
3870 	/*
3871 	 * Since we don't have a result queue entry item,
3872 	 * we must believe that SCSI status is zero and
3873 	 * that all data transferred.
3874 	 */
3875 	XS_SET_STATE_STAT(isp, xs, NULL);
3876 	XS_RESID(xs) = 0;
3877 	*XS_STSP(xs) = SCSI_GOOD;
3878 	if (XS_XFRLEN(xs)) {
3879 		ISP_DMAFREE(isp, xs, fph);
3880 	}
3881 	if (isp->isp_nactive)
3882 		isp->isp_nactive--;
3883 	isp_done(xs);
3884 }
3885 
3886 #define	HIBYT(x)			((x) >> 0x8)
3887 #define	LOBYT(x)			((x)  & 0xff)
3888 #define	ISPOPMAP(a, b)			(((a) << 8) | (b))
3889 static u_int16_t mbpscsi[] = {
3890 	ISPOPMAP(0x01, 0x01),	/* 0x00: MBOX_NO_OP */
3891 	ISPOPMAP(0x1f, 0x01),	/* 0x01: MBOX_LOAD_RAM */
3892 	ISPOPMAP(0x03, 0x01),	/* 0x02: MBOX_EXEC_FIRMWARE */
3893 	ISPOPMAP(0x1f, 0x01),	/* 0x03: MBOX_DUMP_RAM */
3894 	ISPOPMAP(0x07, 0x07),	/* 0x04: MBOX_WRITE_RAM_WORD */
3895 	ISPOPMAP(0x03, 0x07),	/* 0x05: MBOX_READ_RAM_WORD */
3896 	ISPOPMAP(0x3f, 0x3f),	/* 0x06: MBOX_MAILBOX_REG_TEST */
3897 	ISPOPMAP(0x03, 0x07),	/* 0x07: MBOX_VERIFY_CHECKSUM	*/
3898 	ISPOPMAP(0x01, 0x4f),	/* 0x08: MBOX_ABOUT_FIRMWARE */
3899 	ISPOPMAP(0x00, 0x00),	/* 0x09: */
3900 	ISPOPMAP(0x00, 0x00),	/* 0x0a: */
3901 	ISPOPMAP(0x00, 0x00),	/* 0x0b: */
3902 	ISPOPMAP(0x00, 0x00),	/* 0x0c: */
3903 	ISPOPMAP(0x00, 0x00),	/* 0x0d: */
3904 	ISPOPMAP(0x01, 0x05),	/* 0x0e: MBOX_CHECK_FIRMWARE */
3905 	ISPOPMAP(0x00, 0x00),	/* 0x0f: */
3906 	ISPOPMAP(0x1f, 0x1f),	/* 0x10: MBOX_INIT_REQ_QUEUE */
3907 	ISPOPMAP(0x3f, 0x3f),	/* 0x11: MBOX_INIT_RES_QUEUE */
3908 	ISPOPMAP(0x0f, 0x0f),	/* 0x12: MBOX_EXECUTE_IOCB */
3909 	ISPOPMAP(0x03, 0x03),	/* 0x13: MBOX_WAKE_UP	*/
3910 	ISPOPMAP(0x01, 0x3f),	/* 0x14: MBOX_STOP_FIRMWARE */
3911 	ISPOPMAP(0x0f, 0x0f),	/* 0x15: MBOX_ABORT */
3912 	ISPOPMAP(0x03, 0x03),	/* 0x16: MBOX_ABORT_DEVICE */
3913 	ISPOPMAP(0x07, 0x07),	/* 0x17: MBOX_ABORT_TARGET */
3914 	ISPOPMAP(0x07, 0x07),	/* 0x18: MBOX_BUS_RESET */
3915 	ISPOPMAP(0x03, 0x07),	/* 0x19: MBOX_STOP_QUEUE */
3916 	ISPOPMAP(0x03, 0x07),	/* 0x1a: MBOX_START_QUEUE */
3917 	ISPOPMAP(0x03, 0x07),	/* 0x1b: MBOX_SINGLE_STEP_QUEUE */
3918 	ISPOPMAP(0x03, 0x07),	/* 0x1c: MBOX_ABORT_QUEUE */
3919 	ISPOPMAP(0x03, 0x4f),	/* 0x1d: MBOX_GET_DEV_QUEUE_STATUS */
3920 	ISPOPMAP(0x00, 0x00),	/* 0x1e: */
3921 	ISPOPMAP(0x01, 0x07),	/* 0x1f: MBOX_GET_FIRMWARE_STATUS */
3922 	ISPOPMAP(0x01, 0x07),	/* 0x20: MBOX_GET_INIT_SCSI_ID */
3923 	ISPOPMAP(0x01, 0x07),	/* 0x21: MBOX_GET_SELECT_TIMEOUT */
3924 	ISPOPMAP(0x01, 0xc7),	/* 0x22: MBOX_GET_RETRY_COUNT	*/
3925 	ISPOPMAP(0x01, 0x07),	/* 0x23: MBOX_GET_TAG_AGE_LIMIT */
3926 	ISPOPMAP(0x01, 0x03),	/* 0x24: MBOX_GET_CLOCK_RATE */
3927 	ISPOPMAP(0x01, 0x07),	/* 0x25: MBOX_GET_ACT_NEG_STATE */
3928 	ISPOPMAP(0x01, 0x07),	/* 0x26: MBOX_GET_ASYNC_DATA_SETUP_TIME */
3929 	ISPOPMAP(0x01, 0x07),	/* 0x27: MBOX_GET_PCI_PARAMS */
3930 	ISPOPMAP(0x03, 0x4f),	/* 0x28: MBOX_GET_TARGET_PARAMS */
3931 	ISPOPMAP(0x03, 0x0f),	/* 0x29: MBOX_GET_DEV_QUEUE_PARAMS */
3932 	ISPOPMAP(0x01, 0x07),	/* 0x2a: MBOX_GET_RESET_DELAY_PARAMS */
3933 	ISPOPMAP(0x00, 0x00),	/* 0x2b: */
3934 	ISPOPMAP(0x00, 0x00),	/* 0x2c: */
3935 	ISPOPMAP(0x00, 0x00),	/* 0x2d: */
3936 	ISPOPMAP(0x00, 0x00),	/* 0x2e: */
3937 	ISPOPMAP(0x00, 0x00),	/* 0x2f: */
3938 	ISPOPMAP(0x03, 0x03),	/* 0x30: MBOX_SET_INIT_SCSI_ID */
3939 	ISPOPMAP(0x07, 0x07),	/* 0x31: MBOX_SET_SELECT_TIMEOUT */
3940 	ISPOPMAP(0xc7, 0xc7),	/* 0x32: MBOX_SET_RETRY_COUNT	*/
3941 	ISPOPMAP(0x07, 0x07),	/* 0x33: MBOX_SET_TAG_AGE_LIMIT */
3942 	ISPOPMAP(0x03, 0x03),	/* 0x34: MBOX_SET_CLOCK_RATE */
3943 	ISPOPMAP(0x07, 0x07),	/* 0x35: MBOX_SET_ACT_NEG_STATE */
3944 	ISPOPMAP(0x07, 0x07),	/* 0x36: MBOX_SET_ASYNC_DATA_SETUP_TIME */
3945 	ISPOPMAP(0x07, 0x07),	/* 0x37: MBOX_SET_PCI_CONTROL_PARAMS */
3946 	ISPOPMAP(0x4f, 0x4f),	/* 0x38: MBOX_SET_TARGET_PARAMS */
3947 	ISPOPMAP(0x0f, 0x0f),	/* 0x39: MBOX_SET_DEV_QUEUE_PARAMS */
3948 	ISPOPMAP(0x07, 0x07),	/* 0x3a: MBOX_SET_RESET_DELAY_PARAMS */
3949 	ISPOPMAP(0x00, 0x00),	/* 0x3b: */
3950 	ISPOPMAP(0x00, 0x00),	/* 0x3c: */
3951 	ISPOPMAP(0x00, 0x00),	/* 0x3d: */
3952 	ISPOPMAP(0x00, 0x00),	/* 0x3e: */
3953 	ISPOPMAP(0x00, 0x00),	/* 0x3f: */
3954 	ISPOPMAP(0x01, 0x03),	/* 0x40: MBOX_RETURN_BIOS_BLOCK_ADDR */
3955 	ISPOPMAP(0x3f, 0x01),	/* 0x41: MBOX_WRITE_FOUR_RAM_WORDS */
3956 	ISPOPMAP(0x03, 0x07),	/* 0x42: MBOX_EXEC_BIOS_IOCB */
3957 	ISPOPMAP(0x00, 0x00),	/* 0x43: */
3958 	ISPOPMAP(0x00, 0x00),	/* 0x44: */
3959 	ISPOPMAP(0x03, 0x03),	/* 0x45: SET SYSTEM PARAMETER */
3960 	ISPOPMAP(0x01, 0x03),	/* 0x46: GET SYSTEM PARAMETER */
3961 	ISPOPMAP(0x00, 0x00),	/* 0x47: */
3962 	ISPOPMAP(0x01, 0xcf),	/* 0x48: GET SCAM CONFIGURATION */
3963 	ISPOPMAP(0xcf, 0xcf),	/* 0x49: SET SCAM CONFIGURATION */
3964 	ISPOPMAP(0x03, 0x03),	/* 0x4a: MBOX_SET_FIRMWARE_FEATURES */
3965 	ISPOPMAP(0x01, 0x03),	/* 0x4b: MBOX_GET_FIRMWARE_FEATURES */
3966 	ISPOPMAP(0x00, 0x00),	/* 0x4c: */
3967 	ISPOPMAP(0x00, 0x00),	/* 0x4d: */
3968 	ISPOPMAP(0x00, 0x00),	/* 0x4e: */
3969 	ISPOPMAP(0x00, 0x00),	/* 0x4f: */
3970 	ISPOPMAP(0xdf, 0xdf),	/* 0x50: LOAD RAM A64 */
3971 	ISPOPMAP(0xdf, 0xdf),	/* 0x51: DUMP RAM A64 */
3972 	ISPOPMAP(0xdf, 0xdf),	/* 0x52: INITIALIZE REQUEST QUEUE A64 */
3973 	ISPOPMAP(0xff, 0xff),	/* 0x53: INITIALIZE RESPONSE QUEUE A64 */
3974 	ISPOPMAP(0xcf, 0xff),	/* 0x54: EXECUTE IOCB A64 */
3975 	ISPOPMAP(0x07, 0x01),	/* 0x55: ENABLE TARGET MODE */
3976 	ISPOPMAP(0x03, 0x0f),	/* 0x56: GET TARGET STATUS */
3977 	ISPOPMAP(0x00, 0x00),	/* 0x57: */
3978 	ISPOPMAP(0x00, 0x00),	/* 0x58: */
3979 	ISPOPMAP(0x00, 0x00),	/* 0x59: */
3980 	ISPOPMAP(0x03, 0x03),	/* 0x5a: SET DATA OVERRUN RECOVERY MODE */
3981 	ISPOPMAP(0x01, 0x03),	/* 0x5b: GET DATA OVERRUN RECOVERY MODE */
3982 	ISPOPMAP(0x0f, 0x0f),	/* 0x5c: SET HOST DATA */
3983 	ISPOPMAP(0x01, 0x01)	/* 0x5d: GET NOST DATA */
3984 };
3985 
3986 #ifndef	ISP_STRIPPED
3987 static char *scsi_mbcmd_names[] = {
3988 	"NO-OP",
3989 	"LOAD RAM",
3990 	"EXEC FIRMWARE",
3991 	"DUMP RAM",
3992 	"WRITE RAM WORD",
3993 	"READ RAM WORD",
3994 	"MAILBOX REG TEST",
3995 	"VERIFY CHECKSUM",
3996 	"ABOUT FIRMWARE",
3997 	NULL,
3998 	NULL,
3999 	NULL,
4000 	NULL,
4001 	NULL,
4002 	"CHECK FIRMWARE",
4003 	NULL,
4004 	"INIT REQUEST QUEUE",
4005 	"INIT RESULT QUEUE",
4006 	"EXECUTE IOCB",
4007 	"WAKE UP",
4008 	"STOP FIRMWARE",
4009 	"ABORT",
4010 	"ABORT DEVICE",
4011 	"ABORT TARGET",
4012 	"BUS RESET",
4013 	"STOP QUEUE",
4014 	"START QUEUE",
4015 	"SINGLE STEP QUEUE",
4016 	"ABORT QUEUE",
4017 	"GET DEV QUEUE STATUS",
4018 	NULL,
4019 	"GET FIRMWARE STATUS",
4020 	"GET INIT SCSI ID",
4021 	"GET SELECT TIMEOUT",
4022 	"GET RETRY COUNT",
4023 	"GET TAG AGE LIMIT",
4024 	"GET CLOCK RATE",
4025 	"GET ACT NEG STATE",
4026 	"GET ASYNC DATA SETUP TIME",
4027 	"GET PCI PARAMS",
4028 	"GET TARGET PARAMS",
4029 	"GET DEV QUEUE PARAMS",
4030 	"GET RESET DELAY PARAMS",
4031 	NULL,
4032 	NULL,
4033 	NULL,
4034 	NULL,
4035 	NULL,
4036 	"SET INIT SCSI ID",
4037 	"SET SELECT TIMEOUT",
4038 	"SET RETRY COUNT",
4039 	"SET TAG AGE LIMIT",
4040 	"SET CLOCK RATE",
4041 	"SET ACT NEG STATE",
4042 	"SET ASYNC DATA SETUP TIME",
4043 	"SET PCI CONTROL PARAMS",
4044 	"SET TARGET PARAMS",
4045 	"SET DEV QUEUE PARAMS",
4046 	"SET RESET DELAY PARAMS",
4047 	NULL,
4048 	NULL,
4049 	NULL,
4050 	NULL,
4051 	NULL,
4052 	"RETURN BIOS BLOCK ADDR",
4053 	"WRITE FOUR RAM WORDS",
4054 	"EXEC BIOS IOCB",
4055 	NULL,
4056 	NULL,
4057 	"SET SYSTEM PARAMETER",
4058 	"GET SYSTEM PARAMETER",
4059 	NULL,
4060 	"GET SCAM CONFIGURATION",
4061 	"SET SCAM CONFIGURATION",
4062 	"SET FIRMWARE FEATURES",
4063 	"GET FIRMWARE FEATURES",
4064 	NULL,
4065 	NULL,
4066 	NULL,
4067 	NULL,
4068 	"LOAD RAM A64",
4069 	"DUMP RAM A64",
4070 	"INITIALIZE REQUEST QUEUE A64",
4071 	"INITIALIZE RESPONSE QUEUE A64",
4072 	"EXECUTE IOCB A64",
4073 	"ENABLE TARGET MODE",
4074 	"GET TARGET MODE STATE",
4075 	NULL,
4076 	NULL,
4077 	NULL,
4078 	"SET DATA OVERRUN RECOVERY MODE",
4079 	"GET DATA OVERRUN RECOVERY MODE",
4080 	"SET HOST DATA",
4081 	"GET NOST DATA",
4082 };
4083 #endif
4084 
4085 static u_int16_t mbpfc[] = {
4086 	ISPOPMAP(0x01, 0x01),	/* 0x00: MBOX_NO_OP */
4087 	ISPOPMAP(0x1f, 0x01),	/* 0x01: MBOX_LOAD_RAM */
4088 	ISPOPMAP(0x03, 0x01),	/* 0x02: MBOX_EXEC_FIRMWARE */
4089 	ISPOPMAP(0xdf, 0x01),	/* 0x03: MBOX_DUMP_RAM */
4090 	ISPOPMAP(0x07, 0x07),	/* 0x04: MBOX_WRITE_RAM_WORD */
4091 	ISPOPMAP(0x03, 0x07),	/* 0x05: MBOX_READ_RAM_WORD */
4092 	ISPOPMAP(0xff, 0xff),	/* 0x06: MBOX_MAILBOX_REG_TEST */
4093 	ISPOPMAP(0x03, 0x05),	/* 0x07: MBOX_VERIFY_CHECKSUM	*/
4094 	ISPOPMAP(0x01, 0x0f),	/* 0x08: MBOX_ABOUT_FIRMWARE */
4095 	ISPOPMAP(0xdf, 0x01),	/* 0x09: LOAD RAM */
4096 	ISPOPMAP(0xdf, 0x01),	/* 0x0a: DUMP RAM */
4097 	ISPOPMAP(0x00, 0x00),	/* 0x0b: */
4098 	ISPOPMAP(0x00, 0x00),	/* 0x0c: */
4099 	ISPOPMAP(0x00, 0x00),	/* 0x0d: */
4100 	ISPOPMAP(0x01, 0x05),	/* 0x0e: MBOX_CHECK_FIRMWARE */
4101 	ISPOPMAP(0x00, 0x00),	/* 0x0f: */
4102 	ISPOPMAP(0x1f, 0x11),	/* 0x10: MBOX_INIT_REQ_QUEUE */
4103 	ISPOPMAP(0x2f, 0x21),	/* 0x11: MBOX_INIT_RES_QUEUE */
4104 	ISPOPMAP(0x0f, 0x01),	/* 0x12: MBOX_EXECUTE_IOCB */
4105 	ISPOPMAP(0x03, 0x03),	/* 0x13: MBOX_WAKE_UP	*/
4106 	ISPOPMAP(0x01, 0xff),	/* 0x14: MBOX_STOP_FIRMWARE */
4107 	ISPOPMAP(0x4f, 0x01),	/* 0x15: MBOX_ABORT */
4108 	ISPOPMAP(0x07, 0x01),	/* 0x16: MBOX_ABORT_DEVICE */
4109 	ISPOPMAP(0x07, 0x01),	/* 0x17: MBOX_ABORT_TARGET */
4110 	ISPOPMAP(0x03, 0x03),	/* 0x18: MBOX_BUS_RESET */
4111 	ISPOPMAP(0x07, 0x05),	/* 0x19: MBOX_STOP_QUEUE */
4112 	ISPOPMAP(0x07, 0x05),	/* 0x1a: MBOX_START_QUEUE */
4113 	ISPOPMAP(0x07, 0x05),	/* 0x1b: MBOX_SINGLE_STEP_QUEUE */
4114 	ISPOPMAP(0x07, 0x05),	/* 0x1c: MBOX_ABORT_QUEUE */
4115 	ISPOPMAP(0x07, 0x03),	/* 0x1d: MBOX_GET_DEV_QUEUE_STATUS */
4116 	ISPOPMAP(0x00, 0x00),	/* 0x1e: */
4117 	ISPOPMAP(0x01, 0x07),	/* 0x1f: MBOX_GET_FIRMWARE_STATUS */
4118 	ISPOPMAP(0x01, 0x4f),	/* 0x20: MBOX_GET_LOOP_ID */
4119 	ISPOPMAP(0x00, 0x00),	/* 0x21: */
4120 	ISPOPMAP(0x01, 0x07),	/* 0x22: MBOX_GET_RETRY_COUNT	*/
4121 	ISPOPMAP(0x00, 0x00),	/* 0x23: */
4122 	ISPOPMAP(0x00, 0x00),	/* 0x24: */
4123 	ISPOPMAP(0x00, 0x00),	/* 0x25: */
4124 	ISPOPMAP(0x00, 0x00),	/* 0x26: */
4125 	ISPOPMAP(0x00, 0x00),	/* 0x27: */
4126 	ISPOPMAP(0x0f, 0x1),	/* 0x28: MBOX_GET_FIRMWARE_OPTIONS */
4127 	ISPOPMAP(0x03, 0x07),	/* 0x29: MBOX_GET_PORT_QUEUE_PARAMS */
4128 	ISPOPMAP(0x00, 0x00),	/* 0x2a: */
4129 	ISPOPMAP(0x00, 0x00),	/* 0x2b: */
4130 	ISPOPMAP(0x00, 0x00),	/* 0x2c: */
4131 	ISPOPMAP(0x00, 0x00),	/* 0x2d: */
4132 	ISPOPMAP(0x00, 0x00),	/* 0x2e: */
4133 	ISPOPMAP(0x00, 0x00),	/* 0x2f: */
4134 	ISPOPMAP(0x00, 0x00),	/* 0x30: */
4135 	ISPOPMAP(0x00, 0x00),	/* 0x31: */
4136 	ISPOPMAP(0x07, 0x07),	/* 0x32: MBOX_SET_RETRY_COUNT	*/
4137 	ISPOPMAP(0x00, 0x00),	/* 0x33: */
4138 	ISPOPMAP(0x00, 0x00),	/* 0x34: */
4139 	ISPOPMAP(0x00, 0x00),	/* 0x35: */
4140 	ISPOPMAP(0x00, 0x00),	/* 0x36: */
4141 	ISPOPMAP(0x00, 0x00),	/* 0x37: */
4142 	ISPOPMAP(0x0f, 0x01),	/* 0x38: MBOX_SET_FIRMWARE_OPTIONS */
4143 	ISPOPMAP(0x0f, 0x07),	/* 0x39: MBOX_SET_PORT_QUEUE_PARAMS */
4144 	ISPOPMAP(0x00, 0x00),	/* 0x3a: */
4145 	ISPOPMAP(0x00, 0x00),	/* 0x3b: */
4146 	ISPOPMAP(0x00, 0x00),	/* 0x3c: */
4147 	ISPOPMAP(0x00, 0x00),	/* 0x3d: */
4148 	ISPOPMAP(0x00, 0x00),	/* 0x3e: */
4149 	ISPOPMAP(0x00, 0x00),	/* 0x3f: */
4150 	ISPOPMAP(0x03, 0x01),	/* 0x40: MBOX_LOOP_PORT_BYPASS */
4151 	ISPOPMAP(0x03, 0x01),	/* 0x41: MBOX_LOOP_PORT_ENABLE */
4152 	ISPOPMAP(0x03, 0x07),	/* 0x42: MBOX_GET_RESOURCE_COUNTS */
4153 	ISPOPMAP(0x01, 0x01),	/* 0x43: MBOX_REQUEST_NON_PARTICIPATING_MODE */
4154 	ISPOPMAP(0x00, 0x00),	/* 0x44: */
4155 	ISPOPMAP(0x00, 0x00),	/* 0x45: */
4156 	ISPOPMAP(0x00, 0x00),	/* 0x46: */
4157 	ISPOPMAP(0xcf, 0x03),	/* 0x47: GET PORT_DATABASE ENHANCED */
4158 	ISPOPMAP(0x00, 0x00),	/* 0x48: */
4159 	ISPOPMAP(0x00, 0x00),	/* 0x49: */
4160 	ISPOPMAP(0x00, 0x00),	/* 0x4a: */
4161 	ISPOPMAP(0x00, 0x00),	/* 0x4b: */
4162 	ISPOPMAP(0x00, 0x00),	/* 0x4c: */
4163 	ISPOPMAP(0x00, 0x00),	/* 0x4d: */
4164 	ISPOPMAP(0x00, 0x00),	/* 0x4e: */
4165 	ISPOPMAP(0x00, 0x00),	/* 0x4f: */
4166 	ISPOPMAP(0x00, 0x00),	/* 0x50: */
4167 	ISPOPMAP(0x00, 0x00),	/* 0x51: */
4168 	ISPOPMAP(0x00, 0x00),	/* 0x52: */
4169 	ISPOPMAP(0x00, 0x00),	/* 0x53: */
4170 	ISPOPMAP(0xcf, 0x01),	/* 0x54: EXECUTE IOCB A64 */
4171 	ISPOPMAP(0x00, 0x00),	/* 0x55: */
4172 	ISPOPMAP(0x00, 0x00),	/* 0x56: */
4173 	ISPOPMAP(0x00, 0x00),	/* 0x57: */
4174 	ISPOPMAP(0x00, 0x00),	/* 0x58: */
4175 	ISPOPMAP(0x00, 0x00),	/* 0x59: */
4176 	ISPOPMAP(0x00, 0x00),	/* 0x5a: */
4177 	ISPOPMAP(0x00, 0x00),	/* 0x5b: */
4178 	ISPOPMAP(0x00, 0x00),	/* 0x5c: */
4179 	ISPOPMAP(0x00, 0x00),	/* 0x5d: */
4180 	ISPOPMAP(0x00, 0x00),	/* 0x5e: */
4181 	ISPOPMAP(0x00, 0x00),	/* 0x5f: */
4182 	ISPOPMAP(0xfd, 0x31),	/* 0x60: MBOX_INIT_FIRMWARE */
4183 	ISPOPMAP(0x00, 0x00),	/* 0x61: */
4184 	ISPOPMAP(0x01, 0x01),	/* 0x62: MBOX_INIT_LIP */
4185 	ISPOPMAP(0xcd, 0x03),	/* 0x63: MBOX_GET_FC_AL_POSITION_MAP */
4186 	ISPOPMAP(0xcf, 0x01),	/* 0x64: MBOX_GET_PORT_DB */
4187 	ISPOPMAP(0x07, 0x01),	/* 0x65: MBOX_CLEAR_ACA */
4188 	ISPOPMAP(0x07, 0x01),	/* 0x66: MBOX_TARGET_RESET */
4189 	ISPOPMAP(0x07, 0x01),	/* 0x67: MBOX_CLEAR_TASK_SET */
4190 	ISPOPMAP(0x07, 0x01),	/* 0x68: MBOX_ABORT_TASK_SET */
4191 	ISPOPMAP(0x01, 0x07),	/* 0x69: MBOX_GET_FW_STATE */
4192 	ISPOPMAP(0x03, 0xcf),	/* 0x6a: MBOX_GET_PORT_NAME */
4193 	ISPOPMAP(0xcf, 0x01),	/* 0x6b: MBOX_GET_LINK_STATUS */
4194 	ISPOPMAP(0x0f, 0x01),	/* 0x6c: MBOX_INIT_LIP_RESET */
4195 	ISPOPMAP(0x00, 0x00),	/* 0x6d: */
4196 	ISPOPMAP(0xcf, 0x03),	/* 0x6e: MBOX_SEND_SNS */
4197 	ISPOPMAP(0x0f, 0x07),	/* 0x6f: MBOX_FABRIC_LOGIN */
4198 	ISPOPMAP(0x03, 0x01),	/* 0x70: MBOX_SEND_CHANGE_REQUEST */
4199 	ISPOPMAP(0x03, 0x03),	/* 0x71: MBOX_FABRIC_LOGOUT */
4200 	ISPOPMAP(0x0f, 0x0f),	/* 0x72: MBOX_INIT_LIP_LOGIN */
4201 	ISPOPMAP(0x00, 0x00),	/* 0x73: */
4202 	ISPOPMAP(0x07, 0x01),	/* 0x74: LOGIN LOOP PORT */
4203 	ISPOPMAP(0xcf, 0x03),	/* 0x75: GET PORT/NODE NAME LIST */
4204 	ISPOPMAP(0x4f, 0x01),	/* 0x76: SET VENDOR ID */
4205 	ISPOPMAP(0xcd, 0x01),	/* 0x77: INITIALIZE IP MAILBOX */
4206 	ISPOPMAP(0x00, 0x00),	/* 0x78: */
4207 	ISPOPMAP(0x00, 0x00),	/* 0x79: */
4208 	ISPOPMAP(0x00, 0x00),	/* 0x7a: */
4209 	ISPOPMAP(0x00, 0x00),	/* 0x7b: */
4210 	ISPOPMAP(0x4f, 0x03),	/* 0x7c: Get ID List */
4211 	ISPOPMAP(0xcf, 0x01),	/* 0x7d: SEND LFA */
4212 	ISPOPMAP(0x07, 0x01)	/* 0x7e: Lun RESET */
4213 };
4214 
4215 #ifndef	ISP_STRIPPED
4216 static char *fc_mbcmd_names[] = {
4217 	"NO-OP",
4218 	"LOAD RAM",
4219 	"EXEC FIRMWARE",
4220 	"DUMP RAM",
4221 	"WRITE RAM WORD",
4222 	"READ RAM WORD",
4223 	"MAILBOX REG TEST",
4224 	"VERIFY CHECKSUM",
4225 	"ABOUT FIRMWARE",
4226 	"LOAD RAM",
4227 	"DUMP RAM",
4228 	NULL,
4229 	NULL,
4230 	NULL,
4231 	"CHECK FIRMWARE",
4232 	NULL,
4233 	"INIT REQUEST QUEUE",
4234 	"INIT RESULT QUEUE",
4235 	"EXECUTE IOCB",
4236 	"WAKE UP",
4237 	"STOP FIRMWARE",
4238 	"ABORT",
4239 	"ABORT DEVICE",
4240 	"ABORT TARGET",
4241 	"BUS RESET",
4242 	"STOP QUEUE",
4243 	"START QUEUE",
4244 	"SINGLE STEP QUEUE",
4245 	"ABORT QUEUE",
4246 	"GET DEV QUEUE STATUS",
4247 	NULL,
4248 	"GET FIRMWARE STATUS",
4249 	"GET LOOP ID",
4250 	NULL,
4251 	"GET RETRY COUNT",
4252 	NULL,
4253 	NULL,
4254 	NULL,
4255 	NULL,
4256 	NULL,
4257 	"GET FIRMWARE OPTIONS",
4258 	"GET PORT QUEUE PARAMS",
4259 	NULL,
4260 	NULL,
4261 	NULL,
4262 	NULL,
4263 	NULL,
4264 	NULL,
4265 	NULL,
4266 	NULL,
4267 	"SET RETRY COUNT",
4268 	NULL,
4269 	NULL,
4270 	NULL,
4271 	NULL,
4272 	NULL,
4273 	"SET FIRMWARE OPTIONS",
4274 	"SET PORT QUEUE PARAMS",
4275 	NULL,
4276 	NULL,
4277 	NULL,
4278 	NULL,
4279 	NULL,
4280 	NULL,
4281 	"LOOP PORT BYPASS",
4282 	"LOOP PORT ENABLE",
4283 	"GET RESOURCE COUNTS",
4284 	"REQUEST NON PARTICIPATING MODE",
4285 	NULL,
4286 	NULL,
4287 	NULL,
4288 	"GET PORT DATABASE,, ENHANCED",
4289 	NULL,
4290 	NULL,
4291 	NULL,
4292 	NULL,
4293 	NULL,
4294 	NULL,
4295 	NULL,
4296 	NULL,
4297 	NULL,
4298 	NULL,
4299 	NULL,
4300 	NULL,
4301 	"EXECUTE IOCB A64",
4302 	NULL,
4303 	NULL,
4304 	NULL,
4305 	NULL,
4306 	NULL,
4307 	NULL,
4308 	NULL,
4309 	NULL,
4310 	NULL,
4311 	NULL,
4312 	NULL,
4313 	"INIT FIRMWARE",
4314 	NULL,
4315 	"INIT LIP",
4316 	"GET FC-AL POSITION MAP",
4317 	"GET PORT DATABASE",
4318 	"CLEAR ACA",
4319 	"TARGET RESET",
4320 	"CLEAR TASK SET",
4321 	"ABORT TASK SET",
4322 	"GET FW STATE",
4323 	"GET PORT NAME",
4324 	"GET LINK STATUS",
4325 	"INIT LIP RESET",
4326 	NULL,
4327 	"SEND SNS",
4328 	"FABRIC LOGIN",
4329 	"SEND CHANGE REQUEST",
4330 	"FABRIC LOGOUT",
4331 	"INIT LIP LOGIN",
4332 	NULL,
4333 	"LOGIN LOOP PORT",
4334 	"GET PORT/NODE NAME LIST",
4335 	"SET VENDOR ID",
4336 	"INITIALIZE IP MAILBOX",
4337 	NULL,
4338 	NULL,
4339 	NULL,
4340 	NULL,
4341 	"Get ID List",
4342 	"SEND LFA",
4343 	"Lun RESET"
4344 };
4345 #endif
4346 
4347 static void
4348 isp_mboxcmd(struct ispsoftc *isp, mbreg_t *mbp, int logmask)
4349 {
4350 	char *cname, *xname, tname[16], mname[16];
4351 	unsigned int lim, ibits, obits, box, opcode;
4352 	u_int16_t *mcp;
4353 
4354 	if (IS_FC(isp)) {
4355 		mcp = mbpfc;
4356 		lim = (sizeof (mbpfc) / sizeof (mbpfc[0]));
4357 	} else {
4358 		mcp = mbpscsi;
4359 		lim = (sizeof (mbpscsi) / sizeof (mbpscsi[0]));
4360 	}
4361 
4362 	if ((opcode = mbp->param[0]) >= lim) {
4363 		mbp->param[0] = MBOX_INVALID_COMMAND;
4364 		isp_prt(isp, ISP_LOGERR, "Unknown Command 0x%x", opcode);
4365 		return;
4366 	}
4367 
4368 	ibits = HIBYT(mcp[opcode]) & NMBOX_BMASK(isp);
4369 	obits = LOBYT(mcp[opcode]) & NMBOX_BMASK(isp);
4370 
4371 	if (ibits == 0 && obits == 0) {
4372 		mbp->param[0] = MBOX_COMMAND_PARAM_ERROR;
4373 		isp_prt(isp, ISP_LOGERR, "no parameters for 0x%x", opcode);
4374 		return;
4375 	}
4376 
4377 	/*
4378 	 * Get exclusive usage of mailbox registers.
4379 	 */
4380 	MBOX_ACQUIRE(isp);
4381 
4382 	for (box = 0; box < MAX_MAILBOX; box++) {
4383 		if (ibits & (1 << box)) {
4384 			ISP_WRITE(isp, MBOX_OFF(box), mbp->param[box]);
4385 		}
4386 		isp->isp_mboxtmp[box] = mbp->param[box] = 0;
4387 	}
4388 
4389 	isp->isp_lastmbxcmd = opcode;
4390 
4391 	/*
4392 	 * We assume that we can't overwrite a previous command.
4393 	 */
4394 	isp->isp_mboxbsy = obits;
4395 
4396 	/*
4397 	 * Set Host Interrupt condition so that RISC will pick up mailbox regs.
4398 	 */
4399 	ISP_WRITE(isp, HCCR, HCCR_CMD_SET_HOST_INT);
4400 
4401 	/*
4402 	 * While we haven't finished the command, spin our wheels here.
4403 	 */
4404 	MBOX_WAIT_COMPLETE(isp);
4405 
4406 	/*
4407 	 * Copy back output registers.
4408 	 */
4409 	for (box = 0; box < MAX_MAILBOX; box++) {
4410 		if (obits & (1 << box)) {
4411 			mbp->param[box] = isp->isp_mboxtmp[box];
4412 		}
4413 	}
4414 
4415 	MBOX_RELEASE(isp);
4416 
4417 	if (logmask == 0 || opcode == MBOX_EXEC_FIRMWARE) {
4418 		return;
4419 	}
4420 #ifdef	ISP_STRIPPED
4421 	cname = NULL;
4422 #else
4423 	cname = (IS_FC(isp))? fc_mbcmd_names[opcode] : scsi_mbcmd_names[opcode];
4424 #endif
4425 	if (cname == NULL) {
4426 		cname = tname;
4427 		SNPRINTF(tname, sizeof tname, "opcode %x", opcode);
4428 	}
4429 
4430 	/*
4431 	 * Just to be chatty here...
4432 	 */
4433 	xname = NULL;
4434 	switch (mbp->param[0]) {
4435 	case MBOX_COMMAND_COMPLETE:
4436 		break;
4437 	case MBOX_INVALID_COMMAND:
4438 		if (logmask & MBLOGMASK(MBOX_COMMAND_COMPLETE))
4439 			xname = "INVALID COMMAND";
4440 		break;
4441 	case MBOX_HOST_INTERFACE_ERROR:
4442 		if (logmask & MBLOGMASK(MBOX_HOST_INTERFACE_ERROR))
4443 			xname = "HOST INTERFACE ERROR";
4444 		break;
4445 	case MBOX_TEST_FAILED:
4446 		if (logmask & MBLOGMASK(MBOX_TEST_FAILED))
4447 			xname = "TEST FAILED";
4448 		break;
4449 	case MBOX_COMMAND_ERROR:
4450 		if (logmask & MBLOGMASK(MBOX_COMMAND_ERROR))
4451 			xname = "COMMAND ERROR";
4452 		break;
4453 	case MBOX_COMMAND_PARAM_ERROR:
4454 		if (logmask & MBLOGMASK(MBOX_COMMAND_PARAM_ERROR))
4455 			xname = "COMMAND PARAMETER ERROR";
4456 		break;
4457 	case MBOX_LOOP_ID_USED:
4458 		if (logmask & MBLOGMASK(MBOX_LOOP_ID_USED))
4459 			xname = "LOOP ID ALREADY IN USE";
4460 		break;
4461 	case MBOX_PORT_ID_USED:
4462 		if (logmask & MBLOGMASK(MBOX_PORT_ID_USED))
4463 			xname = "PORT ID ALREADY IN USE";
4464 		break;
4465 	case MBOX_ALL_IDS_USED:
4466 		if (logmask & MBLOGMASK(MBOX_ALL_IDS_USED))
4467 			xname = "ALL LOOP IDS IN USE";
4468 		break;
4469 	case 0:		/* special case */
4470 		xname = "TIMEOUT";
4471 		break;
4472 	default:
4473 		SNPRINTF(mname, sizeof mname, "error 0x%x", mbp->param[0]);
4474 		xname = mname;
4475 		break;
4476 	}
4477 	if (xname)
4478 		isp_prt(isp, ISP_LOGALL, "Mailbox Command '%s' failed (%s)",
4479 		    cname, xname);
4480 }
4481 
4482 static void
4483 isp_fw_state(struct ispsoftc *isp)
4484 {
4485 	if (IS_FC(isp)) {
4486 		mbreg_t mbs;
4487 		fcparam *fcp = isp->isp_param;
4488 
4489 		mbs.param[0] = MBOX_GET_FW_STATE;
4490 		isp_mboxcmd(isp, &mbs, MBLOGALL);
4491 		if (mbs.param[0] == MBOX_COMMAND_COMPLETE) {
4492 			fcp->isp_fwstate = mbs.param[1];
4493 		}
4494 	}
4495 }
4496 
4497 static void
4498 isp_update(struct ispsoftc *isp)
4499 {
4500 	int bus, upmask;
4501 
4502 	for (bus = 0, upmask = isp->isp_update; upmask != 0; bus++) {
4503 		if (upmask & (1 << bus)) {
4504 			isp_update_bus(isp, bus);
4505 		}
4506 		upmask &= ~(1 << bus);
4507 	}
4508 }
4509 
4510 static void
4511 isp_update_bus(struct ispsoftc *isp, int bus)
4512 {
4513 	int tgt;
4514 	mbreg_t mbs;
4515 	sdparam *sdp;
4516 
4517 	isp->isp_update &= ~(1 << bus);
4518 	if (IS_FC(isp)) {
4519 		/*
4520 		 * There are no 'per-bus' settings for Fibre Channel.
4521 		 */
4522 		return;
4523 	}
4524 	sdp = isp->isp_param;
4525 	sdp += bus;
4526 
4527 	for (tgt = 0; tgt < MAX_TARGETS; tgt++) {
4528 		u_int16_t flags, period, offset;
4529 		int get;
4530 
4531 		if (sdp->isp_devparam[tgt].dev_enable == 0) {
4532 			sdp->isp_devparam[tgt].dev_update = 0;
4533 			sdp->isp_devparam[tgt].dev_refresh = 0;
4534 			isp_prt(isp, ISP_LOGDEBUG0,
4535 	 		    "skipping target %d bus %d update", tgt, bus);
4536 			continue;
4537 		}
4538 		/*
4539 		 * If the goal is to update the status of the device,
4540 		 * take what's in dev_flags and try and set the device
4541 		 * toward that. Otherwise, if we're just refreshing the
4542 		 * current device state, get the current parameters.
4543 		 */
4544 
4545 		/*
4546 		 * Refresh overrides set
4547 		 */
4548 		if (sdp->isp_devparam[tgt].dev_refresh) {
4549 			mbs.param[0] = MBOX_GET_TARGET_PARAMS;
4550 			sdp->isp_devparam[tgt].dev_refresh = 0;
4551 			get = 1;
4552 		} else if (sdp->isp_devparam[tgt].dev_update) {
4553 			mbs.param[0] = MBOX_SET_TARGET_PARAMS;
4554 			/*
4555 			 * Make sure dev_flags has "Renegotiate on Error"
4556 			 * on and "Freeze Queue on Error" off.
4557 			 */
4558 			sdp->isp_devparam[tgt].dev_flags |= DPARM_RENEG;
4559 			sdp->isp_devparam[tgt].dev_flags &= ~DPARM_QFRZ;
4560 
4561 			mbs.param[2] = sdp->isp_devparam[tgt].dev_flags;
4562 
4563 			/*
4564 			 * Insist that PARITY must be enabled
4565 			 * if SYNC or WIDE is enabled.
4566 			 */
4567 			if ((mbs.param[2] & (DPARM_SYNC|DPARM_WIDE)) != 0) {
4568 				mbs.param[2] |= DPARM_PARITY;
4569 			}
4570 
4571 			if ((mbs.param[2] & DPARM_SYNC) == 0) {
4572 				mbs.param[3] = 0;
4573 			} else {
4574 				mbs.param[3] =
4575 				    (sdp->isp_devparam[tgt].sync_offset << 8) |
4576 				    (sdp->isp_devparam[tgt].sync_period);
4577 			}
4578 			/*
4579 			 * A command completion later that has
4580 			 * RQSTF_NEGOTIATION set canl cause
4581 			 * the dev_refresh/announce cycle also.
4582 			 &
4583 			 *
4584 			 * Note: It is really important to update our current
4585 			 * flags with at least the state of TAG capabilities-
4586 			 * otherwise we might try and send a tagged command
4587 			 * when we have it all turned off. So change it here
4588 			 * to say that current already matches goal.
4589 			 */
4590 			sdp->isp_devparam[tgt].cur_dflags &= ~DPARM_TQING;
4591 			sdp->isp_devparam[tgt].cur_dflags |=
4592 			    (sdp->isp_devparam[tgt].dev_flags & DPARM_TQING);
4593 			isp_prt(isp, ISP_LOGDEBUG0,
4594 			    "bus %d set tgt %d flags 0x%x off 0x%x period 0x%x",
4595 			    bus, tgt, mbs.param[2], mbs.param[3] >> 8,
4596 			    mbs.param[3] & 0xff);
4597 			sdp->isp_devparam[tgt].dev_update = 0;
4598 			sdp->isp_devparam[tgt].dev_refresh = 1;
4599 			get = 0;
4600 		} else {
4601 			continue;
4602 		}
4603 		mbs.param[1] = (bus << 15) | (tgt << 8);
4604 		isp_mboxcmd(isp, &mbs, MBLOGALL);
4605 		if (get == 0) {
4606 			isp->isp_sendmarker |= (1 << bus);
4607 			continue;
4608 		}
4609 		flags = mbs.param[2];
4610 		period = mbs.param[3] & 0xff;
4611 		offset = mbs.param[3] >> 8;
4612 		sdp->isp_devparam[tgt].cur_dflags = flags;
4613 		sdp->isp_devparam[tgt].cur_period = period;
4614 		sdp->isp_devparam[tgt].cur_offset = offset;
4615 		get = (bus << 16) | tgt;
4616 		(void) isp_async(isp, ISPASYNC_NEW_TGT_PARAMS, &get);
4617 	}
4618 
4619 	for (tgt = 0; tgt < MAX_TARGETS; tgt++) {
4620 		if (sdp->isp_devparam[tgt].dev_update ||
4621 		    sdp->isp_devparam[tgt].dev_refresh) {
4622 			isp->isp_update |= (1 << bus);
4623 			break;
4624 		}
4625 	}
4626 }
4627 
4628 static void
4629 isp_setdfltparm(struct ispsoftc *isp, int channel)
4630 {
4631 	int tgt;
4632 	mbreg_t mbs;
4633 	sdparam *sdp;
4634 
4635 	if (IS_FC(isp)) {
4636 		fcparam *fcp = (fcparam *) isp->isp_param;
4637 		int nvfail;
4638 
4639 		fcp += channel;
4640 		if (fcp->isp_gotdparms) {
4641 			return;
4642 		}
4643 		fcp->isp_gotdparms = 1;
4644 		fcp->isp_maxfrmlen = ICB_DFLT_FRMLEN;
4645 		fcp->isp_maxalloc = ICB_DFLT_ALLOC;
4646 		fcp->isp_execthrottle = ISP_EXEC_THROTTLE;
4647 		fcp->isp_retry_delay = ICB_DFLT_RDELAY;
4648 		fcp->isp_retry_count = ICB_DFLT_RCOUNT;
4649 		/* Platform specific.... */
4650 		fcp->isp_loopid = DEFAULT_LOOPID(isp);
4651 		fcp->isp_nodewwn = DEFAULT_NODEWWN(isp);
4652 		fcp->isp_portwwn = DEFAULT_PORTWWN(isp);
4653 		fcp->isp_fwoptions = 0;
4654 		fcp->isp_fwoptions |= ICBOPT_FAIRNESS;
4655 		fcp->isp_fwoptions |= ICBOPT_PDBCHANGE_AE;
4656 		fcp->isp_fwoptions |= ICBOPT_HARD_ADDRESS;
4657 #ifndef	ISP_NO_FASTPOST_FC
4658 		fcp->isp_fwoptions |= ICBOPT_FAST_POST;
4659 #endif
4660 		if (isp->isp_confopts & ISP_CFG_FULL_DUPLEX)
4661 			fcp->isp_fwoptions |= ICBOPT_FULL_DUPLEX;
4662 
4663 		/*
4664 		 * Make sure this is turned off now until we get
4665 		 * extended options from NVRAM
4666 		 */
4667 		fcp->isp_fwoptions &= ~ICBOPT_EXTENDED;
4668 
4669 		/*
4670 		 * Now try and read NVRAM unless told to not do so.
4671 		 * This will set fcparam's isp_nodewwn && isp_portwwn.
4672 		 */
4673 		if ((isp->isp_confopts & ISP_CFG_NONVRAM) == 0) {
4674 		    	nvfail = isp_read_nvram(isp);
4675 			if (nvfail)
4676 				isp->isp_confopts |= ISP_CFG_NONVRAM;
4677 		} else {
4678 			nvfail = 1;
4679 		}
4680 		/*
4681 		 * Set node && port to override platform set defaults
4682 		 * unless the nvram read failed (or none was done),
4683 		 * or the platform code wants to use what had been
4684 		 * set in the defaults.
4685 		 */
4686 		if (nvfail || (isp->isp_confopts & ISP_CFG_OWNWWN)) {
4687 			isp_prt(isp, ISP_LOGCONFIG,
4688 			    "Using Node WWN 0x%08x%08x, Port WWN 0x%08x%08x",
4689 			    (u_int32_t) (DEFAULT_NODEWWN(isp) >> 32),
4690 			    (u_int32_t) (DEFAULT_NODEWWN(isp) & 0xffffffff),
4691 			    (u_int32_t) (DEFAULT_PORTWWN(isp) >> 32),
4692 			    (u_int32_t) (DEFAULT_PORTWWN(isp) & 0xffffffff));
4693 			isp->isp_confopts |= ISP_CFG_OWNWWN;
4694 			ISP_NODEWWN(isp) = DEFAULT_NODEWWN(isp);
4695 			ISP_PORTWWN(isp) = DEFAULT_PORTWWN(isp);
4696 		} else {
4697 			/*
4698 			 * We always start out with values derived
4699 			 * from NVRAM or our platform default.
4700 			 */
4701 			ISP_NODEWWN(isp) = fcp->isp_nodewwn;
4702 			ISP_PORTWWN(isp) = fcp->isp_portwwn;
4703 		}
4704 		return;
4705 	}
4706 
4707 	sdp = (sdparam *) isp->isp_param;
4708 	sdp += channel;
4709 
4710 	/*
4711 	 * Been there, done that, got the T-shirt...
4712 	 */
4713 	if (sdp->isp_gotdparms) {
4714 		return;
4715 	}
4716 	sdp->isp_gotdparms = 1;
4717 
4718 	/*
4719 	 * Establish some default parameters.
4720 	 */
4721 	sdp->isp_cmd_dma_burst_enable = 1;
4722 	sdp->isp_data_dma_burst_enabl = 1;
4723 	sdp->isp_fifo_threshold = 0;
4724 	sdp->isp_initiator_id = DEFAULT_IID(isp);
4725 	if (isp->isp_type >= ISP_HA_SCSI_1040) {
4726 		sdp->isp_async_data_setup = 9;
4727 	} else {
4728 		sdp->isp_async_data_setup = 6;
4729 	}
4730 	sdp->isp_selection_timeout = 250;
4731 	sdp->isp_max_queue_depth = MAXISPREQUEST(isp);
4732 	sdp->isp_tag_aging = 8;
4733 	sdp->isp_bus_reset_delay = 3;
4734 	sdp->isp_retry_count = 2;
4735 	sdp->isp_retry_delay = 2;
4736 
4737 	for (tgt = 0; tgt < MAX_TARGETS; tgt++) {
4738 		sdp->isp_devparam[tgt].exc_throttle = ISP_EXEC_THROTTLE;
4739 		sdp->isp_devparam[tgt].dev_enable = 1;
4740 	}
4741 
4742 	/*
4743 	 * If we've not been told to avoid reading NVRAM, try and read it.
4744 	 * If we're successful reading it, we can return since NVRAM will
4745 	 * tell us the right thing to do. Otherwise, establish some reasonable
4746 	 * defaults.
4747 	 */
4748 	if ((isp->isp_confopts & ISP_CFG_NONVRAM) == 0) {
4749 		if (isp_read_nvram(isp) == 0) {
4750 			return;
4751 		}
4752 	}
4753 
4754 	/*
4755 	 * Now try and see whether we have specific values for them.
4756 	 */
4757 	if ((isp->isp_confopts & ISP_CFG_NONVRAM) == 0) {
4758 		mbs.param[0] = MBOX_GET_ACT_NEG_STATE;
4759 		isp_mboxcmd(isp, &mbs, MBLOGNONE);
4760 		if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
4761 			sdp->isp_req_ack_active_neg = 1;
4762 			sdp->isp_data_line_active_neg = 1;
4763 		} else {
4764 			sdp->isp_req_ack_active_neg =
4765 			    (mbs.param[1+channel] >> 4) & 0x1;
4766 			sdp->isp_data_line_active_neg =
4767 			    (mbs.param[1+channel] >> 5) & 0x1;
4768 		}
4769 	}
4770 
4771 	isp_prt(isp, ISP_LOGDEBUG0,
4772 	    "defaulting bus %d REQ/ACK Active Negation is %d",
4773 	    channel, sdp->isp_req_ack_active_neg);
4774 	isp_prt(isp, ISP_LOGDEBUG0,
4775 	    "defaulting bus %d DATA Active Negation is %d",
4776 	    channel, sdp->isp_data_line_active_neg);
4777 
4778 	/*
4779 	 * The trick here is to establish a default for the default (honk!)
4780 	 * state (dev_flags). Then try and get the current status from
4781 	 * the card to fill in the current state. We don't, in fact, set
4782 	 * the default to the SAFE default state- that's not the goal state.
4783 	 */
4784 	for (tgt = 0; tgt < MAX_TARGETS; tgt++) {
4785 		sdp->isp_devparam[tgt].cur_offset = 0;
4786 		sdp->isp_devparam[tgt].cur_period = 0;
4787 		sdp->isp_devparam[tgt].dev_flags = DPARM_DEFAULT;
4788 		sdp->isp_devparam[tgt].cur_dflags = 0;
4789 		/*
4790 		 * We default to Wide/Fast for versions less than a 1040
4791 		 * (unless it's SBus).
4792 		 */
4793 		if ((isp->isp_bustype == ISP_BT_SBUS &&
4794 		    isp->isp_type < ISP_HA_SCSI_1020A) ||
4795 		    (isp->isp_bustype == ISP_BT_PCI &&
4796 		    isp->isp_type < ISP_HA_SCSI_1040) ||
4797 		    (isp->isp_clock && isp->isp_clock < 60) ||
4798 		    (sdp->isp_ultramode == 0)) {
4799 			sdp->isp_devparam[tgt].sync_offset =
4800 			    ISP_10M_SYNCPARMS >> 8;
4801 			sdp->isp_devparam[tgt].sync_period =
4802 			    ISP_10M_SYNCPARMS & 0xff;
4803 		} else if (IS_ULTRA3(isp)) {
4804 			sdp->isp_devparam[tgt].sync_offset =
4805 			    ISP_80M_SYNCPARMS >> 8;
4806 			sdp->isp_devparam[tgt].sync_period =
4807 			    ISP_80M_SYNCPARMS & 0xff;
4808 		} else if (IS_ULTRA2(isp)) {
4809 			sdp->isp_devparam[tgt].sync_offset =
4810 			    ISP_40M_SYNCPARMS >> 8;
4811 			sdp->isp_devparam[tgt].sync_period =
4812 			    ISP_40M_SYNCPARMS & 0xff;
4813 		} else if (IS_1240(isp)) {
4814 			sdp->isp_devparam[tgt].sync_offset =
4815 			    ISP_20M_SYNCPARMS >> 8;
4816 			sdp->isp_devparam[tgt].sync_period =
4817 			    ISP_20M_SYNCPARMS & 0xff;
4818 		} else {
4819 			sdp->isp_devparam[tgt].sync_offset =
4820 			    ISP_20M_SYNCPARMS_1040 >> 8;
4821 			sdp->isp_devparam[tgt].sync_period =
4822 			    ISP_20M_SYNCPARMS_1040 & 0xff;
4823 		}
4824 
4825 		/*
4826 		 * Don't get current target parameters if we've been
4827 		 * told not to use NVRAM- it's really the same thing.
4828 		 */
4829 		if ((isp->isp_confopts & ISP_CFG_NONVRAM) == 0) {
4830 
4831 			mbs.param[0] = MBOX_GET_TARGET_PARAMS;
4832 			mbs.param[1] = tgt << 8;
4833 			isp_mboxcmd(isp, &mbs, MBLOGALL);
4834 			if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
4835 				continue;
4836 			}
4837 			sdp->isp_devparam[tgt].cur_dflags = mbs.param[2];
4838 			sdp->isp_devparam[tgt].dev_flags = mbs.param[2];
4839 			sdp->isp_devparam[tgt].cur_period = mbs.param[3] & 0xff;
4840 			sdp->isp_devparam[tgt].cur_offset = mbs.param[3] >> 8;
4841 
4842 			/*
4843 			 * The maximum period we can really see
4844 			 * here is 100 (decimal), or 400 ns.
4845 			 * For some unknown reason we sometimes
4846 			 * get back wildass numbers from the
4847 			 * boot device's parameters (alpha only).
4848 			 */
4849 			if ((mbs.param[3] & 0xff) <= 0x64) {
4850 				sdp->isp_devparam[tgt].sync_period =
4851 				    mbs.param[3] & 0xff;
4852 				sdp->isp_devparam[tgt].sync_offset =
4853 				    mbs.param[3] >> 8;
4854 			}
4855 
4856 			/*
4857 			 * It is not safe to run Ultra Mode with a clock < 60.
4858 			 */
4859 			if (((isp->isp_clock && isp->isp_clock < 60) ||
4860 			    (isp->isp_type < ISP_HA_SCSI_1020A)) &&
4861 			    (sdp->isp_devparam[tgt].sync_period <=
4862 			    (ISP_20M_SYNCPARMS & 0xff))) {
4863 				sdp->isp_devparam[tgt].sync_offset =
4864 				    ISP_10M_SYNCPARMS >> 8;
4865 				sdp->isp_devparam[tgt].sync_period =
4866 				    ISP_10M_SYNCPARMS & 0xff;
4867 			}
4868 		}
4869 		isp_prt(isp, ISP_LOGDEBUG0,
4870 		    "Initial bus %d tgt %d flags %x offset %x period %x",
4871 		    channel, tgt, sdp->isp_devparam[tgt].dev_flags,
4872 		    sdp->isp_devparam[tgt].sync_offset,
4873 		    sdp->isp_devparam[tgt].sync_period);
4874 	}
4875 }
4876 
4877 /*
4878  * Re-initialize the ISP and complete all orphaned commands
4879  * with a 'botched' notice. The reset/init routines should
4880  * not disturb an already active list of commands.
4881  *
4882  * Locks held prior to coming here.
4883  */
4884 
4885 void
4886 isp_reinit(struct ispsoftc *isp)
4887 {
4888 	XS_T *xs;
4889 	u_int16_t handle;
4890 
4891 	isp_reset(isp);
4892 	if (isp->isp_state != ISP_RESETSTATE) {
4893 		isp_prt(isp, ISP_LOGERR, "isp_reinit cannot reset card");
4894 		goto skip;
4895 	}
4896 	isp_init(isp);
4897 	if (isp->isp_role == ISP_ROLE_NONE) {
4898 		goto skip;
4899 	}
4900 	if (isp->isp_state == ISP_INITSTATE) {
4901 		isp->isp_state = ISP_RUNSTATE;
4902 	}
4903 	if (isp->isp_state != ISP_RUNSTATE) {
4904 		isp_prt(isp, ISP_LOGERR, "isp_reinit cannot restart card");
4905 	}
4906 skip:
4907 	isp->isp_nactive = 0;
4908 
4909 	for (handle = 1; (int) handle <= isp->isp_maxcmds; handle++) {
4910 		xs = isp_find_xs(isp, handle);
4911 		if (xs == NULL) {
4912 			continue;
4913 		}
4914 		isp_destroy_handle(isp, handle);
4915 		if (XS_XFRLEN(xs)) {
4916 			ISP_DMAFREE(isp, xs, handle);
4917 			XS_RESID(xs) = XS_XFRLEN(xs);
4918 		} else {
4919 			XS_RESID(xs) = 0;
4920 		}
4921 		XS_SETERR(xs, HBA_BUSRESET);
4922 		isp_done(xs);
4923 	}
4924 }
4925 
4926 /*
4927  * NVRAM Routines
4928  */
4929 static int
4930 isp_read_nvram(struct ispsoftc *isp)
4931 {
4932 	int i, amt;
4933 	u_int8_t csum, minversion;
4934 	union {
4935 		u_int8_t _x[ISP2100_NVRAM_SIZE];
4936 		u_int16_t _s[ISP2100_NVRAM_SIZE>>1];
4937 	} _n;
4938 #define	nvram_data	_n._x
4939 #define	nvram_words	_n._s
4940 
4941 	if (IS_FC(isp)) {
4942 		amt = ISP2100_NVRAM_SIZE;
4943 		minversion = 1;
4944 	} else if (IS_ULTRA2(isp)) {
4945 		amt = ISP1080_NVRAM_SIZE;
4946 		minversion = 0;
4947 	} else {
4948 		amt = ISP_NVRAM_SIZE;
4949 		minversion = 2;
4950 	}
4951 
4952 	/*
4953 	 * Just read the first two words first to see if we have a valid
4954 	 * NVRAM to continue reading the rest with.
4955 	 */
4956 	for (i = 0; i < 2; i++) {
4957 		isp_rdnvram_word(isp, i, &nvram_words[i]);
4958 	}
4959 	if (nvram_data[0] != 'I' || nvram_data[1] != 'S' ||
4960 	    nvram_data[2] != 'P') {
4961 		if (isp->isp_bustype != ISP_BT_SBUS) {
4962 			isp_prt(isp, ISP_LOGWARN, "invalid NVRAM header");
4963 			isp_prt(isp, ISP_LOGDEBUG0, "%x %x %x",
4964 			    nvram_data[0], nvram_data[1], nvram_data[2]);
4965 		}
4966 		return (-1);
4967 	}
4968 	for (i = 2; i < amt>>1; i++) {
4969 		isp_rdnvram_word(isp, i, &nvram_words[i]);
4970 	}
4971 	for (csum = 0, i = 0; i < amt; i++) {
4972 		csum += nvram_data[i];
4973 	}
4974 	if (csum != 0) {
4975 		isp_prt(isp, ISP_LOGWARN, "invalid NVRAM checksum");
4976 		return (-1);
4977 	}
4978 	if (ISP_NVRAM_VERSION(nvram_data) < minversion) {
4979 		isp_prt(isp, ISP_LOGWARN, "version %d NVRAM not understood",
4980 		    ISP_NVRAM_VERSION(nvram_data));
4981 		return (-1);
4982 	}
4983 
4984 	if (IS_ULTRA3(isp)) {
4985 		isp_parse_nvram_12160(isp, 0, nvram_data);
4986 		isp_parse_nvram_12160(isp, 1, nvram_data);
4987 	} else if (IS_1080(isp)) {
4988 		isp_parse_nvram_1080(isp, 0, nvram_data);
4989 	} else if (IS_1280(isp) || IS_1240(isp)) {
4990 		isp_parse_nvram_1080(isp, 0, nvram_data);
4991 		isp_parse_nvram_1080(isp, 1, nvram_data);
4992 	} else if (IS_SCSI(isp)) {
4993 		isp_parse_nvram_1020(isp, nvram_data);
4994 	} else {
4995 		isp_parse_nvram_2100(isp, nvram_data);
4996 	}
4997 	return (0);
4998 #undef	nvram_data
4999 #undef	nvram_words
5000 }
5001 
5002 static void
5003 isp_rdnvram_word(struct ispsoftc *isp, int wo, u_int16_t *rp)
5004 {
5005 	int i, cbits;
5006 	u_int16_t bit, rqst;
5007 
5008 	ISP_WRITE(isp, BIU_NVRAM, BIU_NVRAM_SELECT);
5009 	USEC_DELAY(2);
5010 	ISP_WRITE(isp, BIU_NVRAM, BIU_NVRAM_SELECT|BIU_NVRAM_CLOCK);
5011 	USEC_DELAY(2);
5012 
5013 	if (IS_FC(isp)) {
5014 		wo &= ((ISP2100_NVRAM_SIZE >> 1) - 1);
5015 		rqst = (ISP_NVRAM_READ << 8) | wo;
5016 		cbits = 10;
5017 	} else if (IS_ULTRA2(isp)) {
5018 		wo &= ((ISP1080_NVRAM_SIZE >> 1) - 1);
5019 		rqst = (ISP_NVRAM_READ << 8) | wo;
5020 		cbits = 10;
5021 	} else {
5022 		wo &= ((ISP_NVRAM_SIZE >> 1) - 1);
5023 		rqst = (ISP_NVRAM_READ << 6) | wo;
5024 		cbits = 8;
5025 	}
5026 
5027 	/*
5028 	 * Clock the word select request out...
5029 	 */
5030 	for (i = cbits; i >= 0; i--) {
5031 		if ((rqst >> i) & 1) {
5032 			bit = BIU_NVRAM_SELECT | BIU_NVRAM_DATAOUT;
5033 		} else {
5034 			bit = BIU_NVRAM_SELECT;
5035 		}
5036 		ISP_WRITE(isp, BIU_NVRAM, bit);
5037 		USEC_DELAY(2);
5038 		ISP_WRITE(isp, BIU_NVRAM, bit | BIU_NVRAM_CLOCK);
5039 		USEC_DELAY(2);
5040 		ISP_WRITE(isp, BIU_NVRAM, bit);
5041 		USEC_DELAY(2);
5042 	}
5043 	/*
5044 	 * Now read the result back in (bits come back in MSB format).
5045 	 */
5046 	*rp = 0;
5047 	for (i = 0; i < 16; i++) {
5048 		u_int16_t rv;
5049 		*rp <<= 1;
5050 		ISP_WRITE(isp, BIU_NVRAM, BIU_NVRAM_SELECT|BIU_NVRAM_CLOCK);
5051 		USEC_DELAY(2);
5052 		rv = ISP_READ(isp, BIU_NVRAM);
5053 		if (rv & BIU_NVRAM_DATAIN) {
5054 			*rp |= 1;
5055 		}
5056 		USEC_DELAY(2);
5057 		ISP_WRITE(isp, BIU_NVRAM, BIU_NVRAM_SELECT);
5058 		USEC_DELAY(2);
5059 	}
5060 	ISP_WRITE(isp, BIU_NVRAM, 0);
5061 	USEC_DELAY(2);
5062 	ISP_SWIZZLE_NVRAM_WORD(isp, rp);
5063 }
5064 
5065 static void
5066 isp_parse_nvram_1020(struct ispsoftc *isp, u_int8_t *nvram_data)
5067 {
5068 	int i;
5069 	sdparam *sdp = (sdparam *) isp->isp_param;
5070 
5071 	sdp->isp_fifo_threshold =
5072 		ISP_NVRAM_FIFO_THRESHOLD(nvram_data) |
5073 		(ISP_NVRAM_FIFO_THRESHOLD_128(nvram_data) << 2);
5074 
5075 	sdp->isp_initiator_id =
5076 		ISP_NVRAM_INITIATOR_ID(nvram_data);
5077 
5078 	sdp->isp_bus_reset_delay =
5079 		ISP_NVRAM_BUS_RESET_DELAY(nvram_data);
5080 
5081 	sdp->isp_retry_count =
5082 		ISP_NVRAM_BUS_RETRY_COUNT(nvram_data);
5083 
5084 	sdp->isp_retry_delay =
5085 		ISP_NVRAM_BUS_RETRY_DELAY(nvram_data);
5086 
5087 	sdp->isp_async_data_setup =
5088 		ISP_NVRAM_ASYNC_DATA_SETUP_TIME(nvram_data);
5089 
5090 	if (isp->isp_type >= ISP_HA_SCSI_1040) {
5091 		if (sdp->isp_async_data_setup < 9) {
5092 			sdp->isp_async_data_setup = 9;
5093 		}
5094 	} else {
5095 		if (sdp->isp_async_data_setup != 6) {
5096 			sdp->isp_async_data_setup = 6;
5097 		}
5098 	}
5099 
5100 	sdp->isp_req_ack_active_neg =
5101 		ISP_NVRAM_REQ_ACK_ACTIVE_NEGATION(nvram_data);
5102 
5103 	sdp->isp_data_line_active_neg =
5104 		ISP_NVRAM_DATA_LINE_ACTIVE_NEGATION(nvram_data);
5105 
5106 	sdp->isp_data_dma_burst_enabl =
5107 		ISP_NVRAM_DATA_DMA_BURST_ENABLE(nvram_data);
5108 
5109 	sdp->isp_cmd_dma_burst_enable =
5110 		ISP_NVRAM_CMD_DMA_BURST_ENABLE(nvram_data);
5111 
5112 	sdp->isp_tag_aging =
5113 		ISP_NVRAM_TAG_AGE_LIMIT(nvram_data);
5114 
5115 	sdp->isp_selection_timeout =
5116 		ISP_NVRAM_SELECTION_TIMEOUT(nvram_data);
5117 
5118 	sdp->isp_max_queue_depth =
5119 		ISP_NVRAM_MAX_QUEUE_DEPTH(nvram_data);
5120 
5121 	sdp->isp_fast_mttr = ISP_NVRAM_FAST_MTTR_ENABLE(nvram_data);
5122 	for (i = 0; i < MAX_TARGETS; i++) {
5123 		sdp->isp_devparam[i].dev_enable =
5124 			ISP_NVRAM_TGT_DEVICE_ENABLE(nvram_data, i);
5125 		sdp->isp_devparam[i].exc_throttle =
5126 			ISP_NVRAM_TGT_EXEC_THROTTLE(nvram_data, i);
5127 		sdp->isp_devparam[i].sync_offset =
5128 			ISP_NVRAM_TGT_SYNC_OFFSET(nvram_data, i);
5129 		sdp->isp_devparam[i].sync_period =
5130 			ISP_NVRAM_TGT_SYNC_PERIOD(nvram_data, i);
5131 
5132 		if (isp->isp_type < ISP_HA_SCSI_1040) {
5133 			/*
5134 			 * If we're not ultra, we can't possibly
5135 			 * be a shorter period than this.
5136 			 */
5137 			if (sdp->isp_devparam[i].sync_period < 0x19) {
5138 				sdp->isp_devparam[i].sync_period = 0x19;
5139 			}
5140 			if (sdp->isp_devparam[i].sync_offset > 0xc) {
5141 				sdp->isp_devparam[i].sync_offset = 0x0c;
5142 			}
5143 		} else {
5144 			if (sdp->isp_devparam[i].sync_offset > 0x8) {
5145 				sdp->isp_devparam[i].sync_offset = 0x8;
5146 			}
5147 		}
5148 		sdp->isp_devparam[i].dev_flags = 0;
5149 		if (ISP_NVRAM_TGT_RENEG(nvram_data, i))
5150 			sdp->isp_devparam[i].dev_flags |= DPARM_RENEG;
5151 		sdp->isp_devparam[i].dev_flags |= DPARM_ARQ;
5152 		if (ISP_NVRAM_TGT_TQING(nvram_data, i))
5153 			sdp->isp_devparam[i].dev_flags |= DPARM_TQING;
5154 		if (ISP_NVRAM_TGT_SYNC(nvram_data, i))
5155 			sdp->isp_devparam[i].dev_flags |= DPARM_SYNC;
5156 		if (ISP_NVRAM_TGT_WIDE(nvram_data, i))
5157 			sdp->isp_devparam[i].dev_flags |= DPARM_WIDE;
5158 		if (ISP_NVRAM_TGT_PARITY(nvram_data, i))
5159 			sdp->isp_devparam[i].dev_flags |= DPARM_PARITY;
5160 		if (ISP_NVRAM_TGT_DISC(nvram_data, i))
5161 			sdp->isp_devparam[i].dev_flags |= DPARM_DISC;
5162 		sdp->isp_devparam[i].cur_dflags = 0; /* we don't know */
5163 	}
5164 }
5165 
5166 static void
5167 isp_parse_nvram_1080(struct ispsoftc *isp, int bus, u_int8_t *nvram_data)
5168 {
5169 	int i;
5170 	sdparam *sdp = (sdparam *) isp->isp_param;
5171 	sdp += bus;
5172 
5173 	sdp->isp_fifo_threshold =
5174 	    ISP1080_NVRAM_FIFO_THRESHOLD(nvram_data);
5175 
5176 	sdp->isp_initiator_id =
5177 	    ISP1080_NVRAM_INITIATOR_ID(nvram_data, bus);
5178 
5179 	sdp->isp_bus_reset_delay =
5180 	    ISP1080_NVRAM_BUS_RESET_DELAY(nvram_data, bus);
5181 
5182 	sdp->isp_retry_count =
5183 	    ISP1080_NVRAM_BUS_RETRY_COUNT(nvram_data, bus);
5184 
5185 	sdp->isp_retry_delay =
5186 	    ISP1080_NVRAM_BUS_RETRY_DELAY(nvram_data, bus);
5187 
5188 	sdp->isp_async_data_setup =
5189 	    ISP1080_NVRAM_ASYNC_DATA_SETUP_TIME(nvram_data,
5190 	    bus);
5191 
5192 	sdp->isp_req_ack_active_neg =
5193 	    ISP1080_NVRAM_REQ_ACK_ACTIVE_NEGATION(nvram_data,
5194 	    bus);
5195 
5196 	sdp->isp_data_line_active_neg =
5197 	    ISP1080_NVRAM_DATA_LINE_ACTIVE_NEGATION(nvram_data,
5198 	    bus);
5199 
5200 	sdp->isp_data_dma_burst_enabl =
5201 	    ISP1080_NVRAM_BURST_ENABLE(nvram_data);
5202 
5203 	sdp->isp_cmd_dma_burst_enable =
5204 	    ISP1080_NVRAM_BURST_ENABLE(nvram_data);
5205 
5206 	sdp->isp_selection_timeout =
5207 	    ISP1080_NVRAM_SELECTION_TIMEOUT(nvram_data, bus);
5208 
5209 	sdp->isp_max_queue_depth =
5210 	     ISP1080_NVRAM_MAX_QUEUE_DEPTH(nvram_data, bus);
5211 
5212 	for (i = 0; i < MAX_TARGETS; i++) {
5213 		sdp->isp_devparam[i].dev_enable =
5214 		    ISP1080_NVRAM_TGT_DEVICE_ENABLE(nvram_data, i, bus);
5215 		sdp->isp_devparam[i].exc_throttle =
5216 			ISP1080_NVRAM_TGT_EXEC_THROTTLE(nvram_data, i, bus);
5217 		sdp->isp_devparam[i].sync_offset =
5218 			ISP1080_NVRAM_TGT_SYNC_OFFSET(nvram_data, i, bus);
5219 		sdp->isp_devparam[i].sync_period =
5220 			ISP1080_NVRAM_TGT_SYNC_PERIOD(nvram_data, i, bus);
5221 		sdp->isp_devparam[i].dev_flags = 0;
5222 		if (ISP1080_NVRAM_TGT_RENEG(nvram_data, i, bus))
5223 			sdp->isp_devparam[i].dev_flags |= DPARM_RENEG;
5224 		sdp->isp_devparam[i].dev_flags |= DPARM_ARQ;
5225 		if (ISP1080_NVRAM_TGT_TQING(nvram_data, i, bus))
5226 			sdp->isp_devparam[i].dev_flags |= DPARM_TQING;
5227 		if (ISP1080_NVRAM_TGT_SYNC(nvram_data, i, bus))
5228 			sdp->isp_devparam[i].dev_flags |= DPARM_SYNC;
5229 		if (ISP1080_NVRAM_TGT_WIDE(nvram_data, i, bus))
5230 			sdp->isp_devparam[i].dev_flags |= DPARM_WIDE;
5231 		if (ISP1080_NVRAM_TGT_PARITY(nvram_data, i, bus))
5232 			sdp->isp_devparam[i].dev_flags |= DPARM_PARITY;
5233 		if (ISP1080_NVRAM_TGT_DISC(nvram_data, i, bus))
5234 			sdp->isp_devparam[i].dev_flags |= DPARM_DISC;
5235 		sdp->isp_devparam[i].cur_dflags = 0;
5236 	}
5237 }
5238 
5239 static void
5240 isp_parse_nvram_12160(struct ispsoftc *isp, int bus, u_int8_t *nvram_data)
5241 {
5242 	sdparam *sdp = (sdparam *) isp->isp_param;
5243 	int i;
5244 
5245 	sdp += bus;
5246 
5247 	sdp->isp_fifo_threshold =
5248 	    ISP12160_NVRAM_FIFO_THRESHOLD(nvram_data);
5249 
5250 	sdp->isp_initiator_id =
5251 	    ISP12160_NVRAM_INITIATOR_ID(nvram_data, bus);
5252 
5253 	sdp->isp_bus_reset_delay =
5254 	    ISP12160_NVRAM_BUS_RESET_DELAY(nvram_data, bus);
5255 
5256 	sdp->isp_retry_count =
5257 	    ISP12160_NVRAM_BUS_RETRY_COUNT(nvram_data, bus);
5258 
5259 	sdp->isp_retry_delay =
5260 	    ISP12160_NVRAM_BUS_RETRY_DELAY(nvram_data, bus);
5261 
5262 	sdp->isp_async_data_setup =
5263 	    ISP12160_NVRAM_ASYNC_DATA_SETUP_TIME(nvram_data,
5264 	    bus);
5265 
5266 	sdp->isp_req_ack_active_neg =
5267 	    ISP12160_NVRAM_REQ_ACK_ACTIVE_NEGATION(nvram_data,
5268 	    bus);
5269 
5270 	sdp->isp_data_line_active_neg =
5271 	    ISP12160_NVRAM_DATA_LINE_ACTIVE_NEGATION(nvram_data,
5272 	    bus);
5273 
5274 	sdp->isp_data_dma_burst_enabl =
5275 	    ISP12160_NVRAM_BURST_ENABLE(nvram_data);
5276 
5277 	sdp->isp_cmd_dma_burst_enable =
5278 	    ISP12160_NVRAM_BURST_ENABLE(nvram_data);
5279 
5280 	sdp->isp_selection_timeout =
5281 	    ISP12160_NVRAM_SELECTION_TIMEOUT(nvram_data, bus);
5282 
5283 	sdp->isp_max_queue_depth =
5284 	     ISP12160_NVRAM_MAX_QUEUE_DEPTH(nvram_data, bus);
5285 
5286 	for (i = 0; i < MAX_TARGETS; i++) {
5287 		sdp->isp_devparam[i].dev_enable =
5288 		    ISP12160_NVRAM_TGT_DEVICE_ENABLE(nvram_data, i, bus);
5289 		sdp->isp_devparam[i].exc_throttle =
5290 			ISP12160_NVRAM_TGT_EXEC_THROTTLE(nvram_data, i, bus);
5291 		sdp->isp_devparam[i].sync_offset =
5292 			ISP12160_NVRAM_TGT_SYNC_OFFSET(nvram_data, i, bus);
5293 		sdp->isp_devparam[i].sync_period =
5294 			ISP12160_NVRAM_TGT_SYNC_PERIOD(nvram_data, i, bus);
5295 		sdp->isp_devparam[i].dev_flags = 0;
5296 		if (ISP12160_NVRAM_TGT_RENEG(nvram_data, i, bus))
5297 			sdp->isp_devparam[i].dev_flags |= DPARM_RENEG;
5298 		sdp->isp_devparam[i].dev_flags |= DPARM_ARQ;
5299 		if (ISP12160_NVRAM_TGT_TQING(nvram_data, i, bus))
5300 			sdp->isp_devparam[i].dev_flags |= DPARM_TQING;
5301 		if (ISP12160_NVRAM_TGT_SYNC(nvram_data, i, bus))
5302 			sdp->isp_devparam[i].dev_flags |= DPARM_SYNC;
5303 		if (ISP12160_NVRAM_TGT_WIDE(nvram_data, i, bus))
5304 			sdp->isp_devparam[i].dev_flags |= DPARM_WIDE;
5305 		if (ISP12160_NVRAM_TGT_PARITY(nvram_data, i, bus))
5306 			sdp->isp_devparam[i].dev_flags |= DPARM_PARITY;
5307 		if (ISP12160_NVRAM_TGT_DISC(nvram_data, i, bus))
5308 			sdp->isp_devparam[i].dev_flags |= DPARM_DISC;
5309 		sdp->isp_devparam[i].cur_dflags = 0;
5310 	}
5311 }
5312 
5313 static void
5314 isp_parse_nvram_2100(struct ispsoftc *isp, u_int8_t *nvram_data)
5315 {
5316 	fcparam *fcp = (fcparam *) isp->isp_param;
5317 	u_int64_t wwn;
5318 
5319 	/*
5320 	 * There is NVRAM storage for both Port and Node entities-
5321 	 * but the Node entity appears to be unused on all the cards
5322 	 * I can find. However, we should account for this being set
5323 	 * at some point in the future.
5324 	 *
5325 	 * Qlogic WWNs have an NAA of 2, but usually nothing shows up in
5326 	 * bits 48..60. In the case of the 2202, it appears that they do
5327 	 * use bit 48 to distinguish between the two instances on the card.
5328 	 * The 2204, which I've never seen, *probably* extends this method.
5329 	 */
5330 	wwn = ISP2100_NVRAM_PORT_NAME(nvram_data);
5331 	if (wwn) {
5332 		isp_prt(isp, ISP_LOGCONFIG, "NVRAM Port WWN 0x%08x%08x",
5333 		    (u_int32_t) (wwn >> 32), (u_int32_t) (wwn & 0xffffffff));
5334 		if ((wwn >> 60) == 0) {
5335 			wwn |= (((u_int64_t) 2)<< 60);
5336 		}
5337 	}
5338 	fcp->isp_portwwn = wwn;
5339 	wwn = ISP2100_NVRAM_NODE_NAME(nvram_data);
5340 	if (wwn) {
5341 		isp_prt(isp, ISP_LOGCONFIG, "NVRAM Node WWN 0x%08x%08x",
5342 		    (u_int32_t) (wwn >> 32), (u_int32_t) (wwn & 0xffffffff));
5343 		if ((wwn >> 60) == 0) {
5344 			wwn |= (((u_int64_t) 2)<< 60);
5345 		}
5346 	}
5347 	fcp->isp_nodewwn = wwn;
5348 
5349 	/*
5350 	 * Make sure we have both Node and Port as non-zero values.
5351 	 */
5352 	if (fcp->isp_nodewwn != 0 && fcp->isp_portwwn == 0) {
5353 		fcp->isp_portwwn = fcp->isp_nodewwn;
5354 	} else if (fcp->isp_nodewwn == 0 && fcp->isp_portwwn != 0) {
5355 		fcp->isp_nodewwn = fcp->isp_portwwn;
5356 	}
5357 
5358 	/*
5359 	 * Make the Node and Port values sane if they're NAA == 2.
5360 	 * This means to clear bits 48..56 for the Node WWN and
5361 	 * make sure that there's some non-zero value in 48..56
5362 	 * for the Port WWN.
5363 	 */
5364 	if (fcp->isp_nodewwn && fcp->isp_portwwn) {
5365 		if ((fcp->isp_nodewwn & (((u_int64_t) 0xfff) << 48)) != 0 &&
5366 		    (fcp->isp_nodewwn >> 60) == 2) {
5367 			fcp->isp_nodewwn &= ~((u_int64_t) 0xfff << 48);
5368 		}
5369 		if ((fcp->isp_portwwn & (((u_int64_t) 0xfff) << 48)) == 0 &&
5370 		    (fcp->isp_portwwn >> 60) == 2) {
5371 			fcp->isp_portwwn |= ((u_int64_t) 1 << 56);
5372 		}
5373 	}
5374 
5375 	fcp->isp_maxalloc =
5376 		ISP2100_NVRAM_MAXIOCBALLOCATION(nvram_data);
5377 	fcp->isp_maxfrmlen =
5378 		ISP2100_NVRAM_MAXFRAMELENGTH(nvram_data);
5379 	fcp->isp_retry_delay =
5380 		ISP2100_NVRAM_RETRY_DELAY(nvram_data);
5381 	fcp->isp_retry_count =
5382 		ISP2100_NVRAM_RETRY_COUNT(nvram_data);
5383 	fcp->isp_loopid =
5384 		ISP2100_NVRAM_HARDLOOPID(nvram_data);
5385 	fcp->isp_execthrottle =
5386 		ISP2100_NVRAM_EXECUTION_THROTTLE(nvram_data);
5387 	fcp->isp_fwoptions = ISP2100_NVRAM_OPTIONS(nvram_data);
5388 	isp_prt(isp, ISP_LOGDEBUG0,
5389 	    "fwoptions from nvram are 0x%x", fcp->isp_fwoptions);
5390 }
5391