xref: /freebsd-14.2/sys/dev/isp/isp.c (revision 88d74af5)
1 /* $FreeBSD$ */
2 /*
3  * Machine and OS Independent (well, as best as possible)
4  * code for the Qlogic ISP SCSI adapters.
5  *
6  * Copyright (c) 1997, 1998, 1999, 2000, 2001 by Matthew Jacob
7  * Feral Software
8  * All rights reserved.
9  *
10  * Redistribution and use in source and binary forms, with or without
11  * modification, are permitted provided that the following conditions
12  * are met:
13  * 1. Redistributions of source code must retain the above copyright
14  *    notice immediately at the beginning of the file, without modification,
15  *    this list of conditions, and the following disclaimer.
16  * 2. The name of the author may not be used to endorse or promote products
17  *    derived from this software without specific prior written permission.
18  *
19  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
20  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
21  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
22  * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE FOR
23  * ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
24  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
25  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
26  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
27  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
28  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
29  * SUCH DAMAGE.
30  */
31 
32 /*
33  * Inspiration and ideas about this driver are from Erik Moe's Linux driver
34  * (qlogicisp.c) and Dave Miller's SBus version of same (qlogicisp.c). Some
35  * ideas dredged from the Solaris driver.
36  */
37 
38 /*
39  * Include header file appropriate for platform we're building on.
40  */
41 
42 #ifdef	__NetBSD__
43 #include <dev/ic/isp_netbsd.h>
44 #endif
45 #ifdef	__FreeBSD__
46 #include <dev/isp/isp_freebsd.h>
47 #endif
48 #ifdef	__OpenBSD__
49 #include <dev/ic/isp_openbsd.h>
50 #endif
51 #ifdef	__linux__
52 #include "isp_linux.h"
53 #endif
54 #ifdef	__svr4__
55 #include "isp_solaris.h"
56 #endif
57 
58 /*
59  * General defines
60  */
61 
62 #define	MBOX_DELAY_COUNT	1000000 / 100
63 
64 /*
65  * Local static data
66  */
67 static const char warnlun[] =
68     "WARNING- cannot determine Expanded LUN capability- limiting to one LUN";
69 static const char portshift[] =
70     "Target %d Loop ID 0x%x (Port 0x%x) => Loop 0x%x (Port 0x%x)";
71 static const char portdup[] =
72     "Target %d duplicates Target %d- killing off both";
73 static const char retained[] =
74     "Retaining Loop ID 0x%x for Target %d (Port 0x%x)";
75 static const char lretained[] =
76     "Retained login of Target %d (Loop ID 0x%x) Port 0x%x";
77 static const char plogout[] =
78     "Logging out Target %d at Loop ID 0x%x (Port 0x%x)";
79 static const char plogierr[] =
80     "Command Error in PLOGI for Port 0x%x (0x%x)";
81 static const char nopdb[] =
82     "Could not get PDB for Device @ Port 0x%x";
83 static const char pdbmfail1[] =
84     "PDB Loop ID info for Device @ Port 0x%x does not match up (0x%x)";
85 static const char pdbmfail2[] =
86     "PDB Port info for Device @ Port 0x%x does not match up (0x%x)";
87 static const char ldumped[] =
88     "Target %d (Loop ID 0x%x) Port 0x%x dumped after login info mismatch";
89 static const char notresp[] =
90   "Not RESPONSE in RESPONSE Queue (type 0x%x) @ idx %d (next %d) nlooked %d";
91 static const char xact1[] =
92     "HBA attempted queued transaction with disconnect not set for %d.%d.%d";
93 static const char xact2[] =
94     "HBA attempted queued transaction to target routine %d on target %d bus %d";
95 static const char xact3[] =
96     "HBA attempted queued cmd for %d.%d.%d when queueing disabled";
97 static const char pskip[] =
98     "SCSI phase skipped for target %d.%d.%d";
99 static const char topology[] =
100     "Loop ID %d, AL_PA 0x%x, Port ID 0x%x, Loop State 0x%x, Topology '%s'";
101 static const char finmsg[] =
102     "(%d.%d.%d): FIN dl%d resid %d STS 0x%x SKEY %c XS_ERR=0x%x";
103 /*
104  * Local function prototypes.
105  */
106 static int isp_parse_async __P((struct ispsoftc *, int));
107 static int isp_handle_other_response
108 __P((struct ispsoftc *, ispstatusreq_t *, u_int16_t *));
109 static void isp_parse_status
110 __P((struct ispsoftc *, ispstatusreq_t *, XS_T *));
111 static void isp_fastpost_complete __P((struct ispsoftc *, u_int16_t));
112 static void isp_scsi_init __P((struct ispsoftc *));
113 static void isp_scsi_channel_init __P((struct ispsoftc *, int));
114 static void isp_fibre_init __P((struct ispsoftc *));
115 static void isp_mark_getpdb_all __P((struct ispsoftc *));
116 static int isp_getmap __P((struct ispsoftc *, fcpos_map_t *));
117 static int isp_getpdb __P((struct ispsoftc *, int, isp_pdb_t *));
118 static u_int64_t isp_get_portname __P((struct ispsoftc *, int, int));
119 static int isp_fclink_test __P((struct ispsoftc *, int));
120 static char *isp2100_fw_statename __P((int));
121 static int isp_pdb_sync __P((struct ispsoftc *));
122 static int isp_scan_loop __P((struct ispsoftc *));
123 static int isp_scan_fabric __P((struct ispsoftc *));
124 static void isp_register_fc4_type __P((struct ispsoftc *));
125 static void isp_fw_state __P((struct ispsoftc *));
126 static void isp_mboxcmd __P((struct ispsoftc *, mbreg_t *, int));
127 
128 static void isp_update __P((struct ispsoftc *));
129 static void isp_update_bus __P((struct ispsoftc *, int));
130 static void isp_setdfltparm __P((struct ispsoftc *, int));
131 static int isp_read_nvram __P((struct ispsoftc *));
132 static void isp_rdnvram_word __P((struct ispsoftc *, int, u_int16_t *));
133 static void isp_parse_nvram_1020 __P((struct ispsoftc *, u_int8_t *));
134 static void isp_parse_nvram_1080 __P((struct ispsoftc *, int, u_int8_t *));
135 static void isp_parse_nvram_12160 __P((struct ispsoftc *, int, u_int8_t *));
136 static void isp_parse_nvram_2100 __P((struct ispsoftc *, u_int8_t *));
137 
138 /*
139  * Reset Hardware.
140  *
141  * Hit the chip over the head, download new f/w if available and set it running.
142  *
143  * Locking done elsewhere.
144  */
145 void
146 isp_reset(struct ispsoftc *isp)
147 {
148 	mbreg_t mbs;
149 	int loops, i, touched, dodnld = 1;
150 	char *revname = "????";
151 
152 	isp->isp_state = ISP_NILSTATE;
153 
154 
155 	/*
156 	 * Basic types (SCSI, FibreChannel and PCI or SBus)
157 	 * have been set in the MD code. We figure out more
158 	 * here.
159 	 *
160 	 * After we've fired this chip up, zero out the conf1 register
161 	 * for SCSI adapters and do other settings for the 2100.
162 	 */
163 
164 	/*
165 	 * Get the current running firmware revision out of the
166 	 * chip before we hit it over the head (if this is our
167 	 * first time through). Note that we store this as the
168 	 * 'ROM' firmware revision- which it may not be. In any
169 	 * case, we don't really use this yet, but we may in
170 	 * the future.
171 	 */
172 	if ((touched = isp->isp_touched) == 0) {
173 		/*
174 		 * First see whether or not we're sitting in the ISP PROM.
175 		 * If we've just been reset, we'll have the string "ISP   "
176 		 * spread through outgoing mailbox registers 1-3.
177 		 */
178 		if (ISP_READ(isp, OUTMAILBOX1) != 0x4953 ||
179 		    ISP_READ(isp, OUTMAILBOX2) != 0x5020 ||
180 		    ISP_READ(isp, OUTMAILBOX3) != 0x2020) {
181 			/*
182 			 * Just in case it was paused...
183 			 */
184 			ISP_WRITE(isp, HCCR, HCCR_CMD_RELEASE);
185 			mbs.param[0] = MBOX_ABOUT_FIRMWARE;
186 			isp_mboxcmd(isp, &mbs, MBOX_COMMAND_ERROR);
187 			/*
188 			 * This *shouldn't* fail.....
189 			 */
190 			if (mbs.param[0] == MBOX_COMMAND_COMPLETE) {
191 				isp->isp_romfw_rev[0] = mbs.param[1];
192 				isp->isp_romfw_rev[1] = mbs.param[2];
193 				isp->isp_romfw_rev[2] = mbs.param[3];
194 			}
195 		}
196 		isp->isp_touched = 1;
197 	}
198 
199 	DISABLE_INTS(isp);
200 
201 	/*
202 	 * Put the board into PAUSE mode (so we can read the SXP registers
203 	 * or write FPM/FBM registers).
204 	 */
205 	ISP_WRITE(isp, HCCR, HCCR_CMD_PAUSE);
206 
207 	if (IS_FC(isp)) {
208 		switch (isp->isp_type) {
209 		case ISP_HA_FC_2100:
210 			revname = "2100";
211 			break;
212 		case ISP_HA_FC_2200:
213 			revname = "2200";
214 			break;
215 		case ISP_HA_FC_2300:
216 			revname = "2300";
217 			break;
218 		default:
219 			break;
220 		}
221 		/*
222 		 * While we're paused, reset the FPM module and FBM fifos.
223 		 */
224 		ISP_WRITE(isp, BIU2100_CSR, BIU2100_FPM0_REGS);
225 		ISP_WRITE(isp, FPM_DIAG_CONFIG, FPM_SOFT_RESET);
226 		ISP_WRITE(isp, BIU2100_CSR, BIU2100_FB_REGS);
227 		ISP_WRITE(isp, FBM_CMD, FBMCMD_FIFO_RESET_ALL);
228 		ISP_WRITE(isp, BIU2100_CSR, BIU2100_RISC_REGS);
229 	} else if (IS_1240(isp)) {
230 		sdparam *sdp = isp->isp_param;
231 		revname = "1240";
232 		isp->isp_clock = 60;
233 		sdp->isp_ultramode = 1;
234 		sdp++;
235 		sdp->isp_ultramode = 1;
236 		/*
237 		 * XXX: Should probably do some bus sensing.
238 		 */
239 	} else if (IS_ULTRA2(isp)) {
240 		static const char m[] = "bus %d is in %s Mode";
241 		u_int16_t l;
242 		sdparam *sdp = isp->isp_param;
243 
244 		isp->isp_clock = 100;
245 
246 		if (IS_1280(isp))
247 			revname = "1280";
248 		else if (IS_1080(isp))
249 			revname = "1080";
250 		else if (IS_12160(isp))
251 			revname = "12160";
252 		else
253 			revname = "<UNKLVD>";
254 
255 		l = ISP_READ(isp, SXP_PINS_DIFF) & ISP1080_MODE_MASK;
256 		switch (l) {
257 		case ISP1080_LVD_MODE:
258 			sdp->isp_lvdmode = 1;
259 			isp_prt(isp, ISP_LOGCONFIG, m, 0, "LVD");
260 			break;
261 		case ISP1080_HVD_MODE:
262 			sdp->isp_diffmode = 1;
263 			isp_prt(isp, ISP_LOGCONFIG, m, 0, "Differential");
264 			break;
265 		case ISP1080_SE_MODE:
266 			sdp->isp_ultramode = 1;
267 			isp_prt(isp, ISP_LOGCONFIG, m, 0, "Single-Ended");
268 			break;
269 		default:
270 			isp_prt(isp, ISP_LOGERR,
271 			    "unknown mode on bus %d (0x%x)", 0, l);
272 			break;
273 		}
274 
275 		if (IS_DUALBUS(isp)) {
276 			sdp++;
277 			l = ISP_READ(isp, SXP_PINS_DIFF|SXP_BANK1_SELECT);
278 			l &= ISP1080_MODE_MASK;
279 			switch(l) {
280 			case ISP1080_LVD_MODE:
281 				sdp->isp_lvdmode = 1;
282 				isp_prt(isp, ISP_LOGCONFIG, m, 1, "LVD");
283 				break;
284 			case ISP1080_HVD_MODE:
285 				sdp->isp_diffmode = 1;
286 				isp_prt(isp, ISP_LOGCONFIG,
287 				    m, 1, "Differential");
288 				break;
289 			case ISP1080_SE_MODE:
290 				sdp->isp_ultramode = 1;
291 				isp_prt(isp, ISP_LOGCONFIG,
292 				    m, 1, "Single-Ended");
293 				break;
294 			default:
295 				isp_prt(isp, ISP_LOGERR,
296 				    "unknown mode on bus %d (0x%x)", 1, l);
297 				break;
298 			}
299 		}
300 	} else {
301 		sdparam *sdp = isp->isp_param;
302 		i = ISP_READ(isp, BIU_CONF0) & BIU_CONF0_HW_MASK;
303 		switch (i) {
304 		default:
305 			isp_prt(isp, ISP_LOGALL, "Unknown Chip Type 0x%x", i);
306 			/* FALLTHROUGH */
307 		case 1:
308 			revname = "1020";
309 			isp->isp_type = ISP_HA_SCSI_1020;
310 			isp->isp_clock = 40;
311 			break;
312 		case 2:
313 			/*
314 			 * Some 1020A chips are Ultra Capable, but don't
315 			 * run the clock rate up for that unless told to
316 			 * do so by the Ultra Capable bits being set.
317 			 */
318 			revname = "1020A";
319 			isp->isp_type = ISP_HA_SCSI_1020A;
320 			isp->isp_clock = 40;
321 			break;
322 		case 3:
323 			revname = "1040";
324 			isp->isp_type = ISP_HA_SCSI_1040;
325 			isp->isp_clock = 60;
326 			break;
327 		case 4:
328 			revname = "1040A";
329 			isp->isp_type = ISP_HA_SCSI_1040A;
330 			isp->isp_clock = 60;
331 			break;
332 		case 5:
333 			revname = "1040B";
334 			isp->isp_type = ISP_HA_SCSI_1040B;
335 			isp->isp_clock = 60;
336 			break;
337 		case 6:
338 			revname = "1040C";
339 			isp->isp_type = ISP_HA_SCSI_1040C;
340 			isp->isp_clock = 60;
341                         break;
342 		}
343 		/*
344 		 * Now, while we're at it, gather info about ultra
345 		 * and/or differential mode.
346 		 */
347 		if (ISP_READ(isp, SXP_PINS_DIFF) & SXP_PINS_DIFF_MODE) {
348 			isp_prt(isp, ISP_LOGCONFIG, "Differential Mode");
349 			sdp->isp_diffmode = 1;
350 		} else {
351 			sdp->isp_diffmode = 0;
352 		}
353 		i = ISP_READ(isp, RISC_PSR);
354 		if (isp->isp_bustype == ISP_BT_SBUS) {
355 			i &= RISC_PSR_SBUS_ULTRA;
356 		} else {
357 			i &= RISC_PSR_PCI_ULTRA;
358 		}
359 		if (i != 0) {
360 			isp_prt(isp, ISP_LOGCONFIG, "Ultra Mode Capable");
361 			sdp->isp_ultramode = 1;
362 			/*
363 			 * If we're in Ultra Mode, we have to be 60Mhz clock-
364 			 * even for the SBus version.
365 			 */
366 			isp->isp_clock = 60;
367 		} else {
368 			sdp->isp_ultramode = 0;
369 			/*
370 			 * Clock is known. Gronk.
371 			 */
372 		}
373 
374 		/*
375 		 * Machine dependent clock (if set) overrides
376 		 * our generic determinations.
377 		 */
378 		if (isp->isp_mdvec->dv_clock) {
379 			if (isp->isp_mdvec->dv_clock < isp->isp_clock) {
380 				isp->isp_clock = isp->isp_mdvec->dv_clock;
381 			}
382 		}
383 
384 	}
385 
386 	/*
387 	 * Clear instrumentation
388 	 */
389 	isp->isp_intcnt = isp->isp_intbogus = 0;
390 
391 	/*
392 	 * Do MD specific pre initialization
393 	 */
394 	ISP_RESET0(isp);
395 
396 again:
397 
398 	/*
399 	 * Hit the chip over the head with hammer,
400 	 * and give the ISP a chance to recover.
401 	 */
402 
403 	if (IS_SCSI(isp)) {
404 		ISP_WRITE(isp, BIU_ICR, BIU_ICR_SOFT_RESET);
405 		/*
406 		 * A slight delay...
407 		 */
408 		USEC_DELAY(100);
409 
410 		/*
411 		 * Clear data && control DMA engines.
412 		 */
413 		ISP_WRITE(isp, CDMA_CONTROL,
414 		    DMA_CNTRL_CLEAR_CHAN | DMA_CNTRL_RESET_INT);
415 		ISP_WRITE(isp, DDMA_CONTROL,
416 		    DMA_CNTRL_CLEAR_CHAN | DMA_CNTRL_RESET_INT);
417 
418 
419 	} else {
420 		ISP_WRITE(isp, BIU2100_CSR, BIU2100_SOFT_RESET);
421 		/*
422 		 * A slight delay...
423 		 */
424 		USEC_DELAY(100);
425 
426 		/*
427 		 * Clear data && control DMA engines.
428 		 */
429 		ISP_WRITE(isp, CDMA2100_CONTROL,
430 			DMA_CNTRL2100_CLEAR_CHAN | DMA_CNTRL2100_RESET_INT);
431 		ISP_WRITE(isp, TDMA2100_CONTROL,
432 			DMA_CNTRL2100_CLEAR_CHAN | DMA_CNTRL2100_RESET_INT);
433 		ISP_WRITE(isp, RDMA2100_CONTROL,
434 			DMA_CNTRL2100_CLEAR_CHAN | DMA_CNTRL2100_RESET_INT);
435 	}
436 
437 	/*
438 	 * Wait for ISP to be ready to go...
439 	 */
440 	loops = MBOX_DELAY_COUNT;
441 	for (;;) {
442 		if (IS_SCSI(isp)) {
443 			if (!(ISP_READ(isp, BIU_ICR) & BIU_ICR_SOFT_RESET))
444 				break;
445 		} else {
446 			if (!(ISP_READ(isp, BIU2100_CSR) & BIU2100_SOFT_RESET))
447 				break;
448 		}
449 		USEC_DELAY(100);
450 		if (--loops < 0) {
451 			ISP_DUMPREGS(isp, "chip reset timed out");
452 			return;
453 		}
454 	}
455 
456 	/*
457 	 * After we've fired this chip up, zero out the conf1 register
458 	 * for SCSI adapters and other settings for the 2100.
459 	 */
460 
461 	if (IS_SCSI(isp)) {
462 		ISP_WRITE(isp, BIU_CONF1, 0);
463 	} else {
464 		ISP_WRITE(isp, BIU2100_CSR, 0);
465 	}
466 
467 	/*
468 	 * Reset RISC Processor
469 	 */
470 	ISP_WRITE(isp, HCCR, HCCR_CMD_RESET);
471 	USEC_DELAY(100);
472 	/* Clear semaphore register (just to be sure) */
473 	ISP_WRITE(isp, BIU_SEMA, 0);
474 
475 	/*
476 	 * Establish some initial burst rate stuff.
477 	 * (only for the 1XX0 boards). This really should
478 	 * be done later after fetching from NVRAM.
479 	 */
480 	if (IS_SCSI(isp)) {
481 		u_int16_t tmp = isp->isp_mdvec->dv_conf1;
482 		/*
483 		 * Busted FIFO. Turn off all but burst enables.
484 		 */
485 		if (isp->isp_type == ISP_HA_SCSI_1040A) {
486 			tmp &= BIU_BURST_ENABLE;
487 		}
488 		ISP_SETBITS(isp, BIU_CONF1, tmp);
489 		if (tmp & BIU_BURST_ENABLE) {
490 			ISP_SETBITS(isp, CDMA_CONF, DMA_ENABLE_BURST);
491 			ISP_SETBITS(isp, DDMA_CONF, DMA_ENABLE_BURST);
492 		}
493 #ifdef	PTI_CARDS
494 		if (((sdparam *) isp->isp_param)->isp_ultramode) {
495 			while (ISP_READ(isp, RISC_MTR) != 0x1313) {
496 				ISP_WRITE(isp, RISC_MTR, 0x1313);
497 				ISP_WRITE(isp, HCCR, HCCR_CMD_STEP);
498 			}
499 		} else {
500 			ISP_WRITE(isp, RISC_MTR, 0x1212);
501 		}
502 		/*
503 		 * PTI specific register
504 		 */
505 		ISP_WRITE(isp, RISC_EMB, DUAL_BANK)
506 #else
507 		ISP_WRITE(isp, RISC_MTR, 0x1212);
508 #endif
509 	} else {
510 		ISP_WRITE(isp, RISC_MTR2100, 0x1212);
511 		if (IS_2200(isp) || IS_2300(isp)) {
512 			ISP_WRITE(isp, HCCR, HCCR_2X00_DISABLE_PARITY_PAUSE);
513 		}
514 	}
515 
516 	ISP_WRITE(isp, HCCR, HCCR_CMD_RELEASE); /* release paused processor */
517 
518 	/*
519 	 * Do MD specific post initialization
520 	 */
521 	ISP_RESET1(isp);
522 
523 	/*
524 	 * Wait for everything to finish firing up...
525 	 */
526 	loops = MBOX_DELAY_COUNT;
527 	while (ISP_READ(isp, OUTMAILBOX0) == MBOX_BUSY) {
528 		USEC_DELAY(100);
529 		if (--loops < 0) {
530 			isp_prt(isp, ISP_LOGERR,
531 			    "MBOX_BUSY never cleared on reset");
532 			return;
533 		}
534 	}
535 
536 	/*
537 	 * Up until this point we've done everything by just reading or
538 	 * setting registers. From this point on we rely on at least *some*
539 	 * kind of firmware running in the card.
540 	 */
541 
542 	/*
543 	 * Do some sanity checking.
544 	 */
545 	mbs.param[0] = MBOX_NO_OP;
546 	isp_mboxcmd(isp, &mbs, MBLOGALL);
547 	if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
548 		return;
549 	}
550 
551 	if (IS_SCSI(isp)) {
552 		mbs.param[0] = MBOX_MAILBOX_REG_TEST;
553 		mbs.param[1] = 0xdead;
554 		mbs.param[2] = 0xbeef;
555 		mbs.param[3] = 0xffff;
556 		mbs.param[4] = 0x1111;
557 		mbs.param[5] = 0xa5a5;
558 		isp_mboxcmd(isp, &mbs, MBLOGALL);
559 		if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
560 			return;
561 		}
562 		if (mbs.param[1] != 0xdead || mbs.param[2] != 0xbeef ||
563 		    mbs.param[3] != 0xffff || mbs.param[4] != 0x1111 ||
564 		    mbs.param[5] != 0xa5a5) {
565 			isp_prt(isp, ISP_LOGERR,
566 			    "Register Test Failed (0x%x 0x%x 0x%x 0x%x 0x%x)",
567 			    mbs.param[1], mbs.param[2], mbs.param[3],
568 			    mbs.param[4], mbs.param[5]);
569 			return;
570 		}
571 
572 	}
573 
574 	/*
575 	 * Download new Firmware, unless requested not to do so.
576 	 * This is made slightly trickier in some cases where the
577 	 * firmware of the ROM revision is newer than the revision
578 	 * compiled into the driver. So, where we used to compare
579 	 * versions of our f/w and the ROM f/w, now we just see
580 	 * whether we have f/w at all and whether a config flag
581 	 * has disabled our download.
582 	 */
583 	if ((isp->isp_mdvec->dv_ispfw == NULL) ||
584 	    (isp->isp_confopts & ISP_CFG_NORELOAD)) {
585 		dodnld = 0;
586 	}
587 
588 	if (dodnld) {
589 		u_int16_t fwlen  = isp->isp_mdvec->dv_ispfw[3];
590 		for (i = 0; i < fwlen; i++) {
591 			mbs.param[0] = MBOX_WRITE_RAM_WORD;
592 			mbs.param[1] = ISP_CODE_ORG + i;
593 			mbs.param[2] = isp->isp_mdvec->dv_ispfw[i];
594 			isp_mboxcmd(isp, &mbs, MBLOGNONE);
595 			if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
596 				isp_prt(isp, ISP_LOGERR,
597 				    "F/W download failed at word %d", i);
598 				dodnld = 0;
599 				goto again;
600 			}
601 		}
602 
603 		/*
604 		 * Verify that it downloaded correctly.
605 		 */
606 		mbs.param[0] = MBOX_VERIFY_CHECKSUM;
607 		mbs.param[1] = ISP_CODE_ORG;
608 		isp_mboxcmd(isp, &mbs, MBLOGNONE);
609 		if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
610 			isp_prt(isp, ISP_LOGERR, "Ram Checksum Failure");
611 			return;
612 		}
613 		isp->isp_loaded_fw = 1;
614 	} else {
615 		isp->isp_loaded_fw = 0;
616 		isp_prt(isp, ISP_LOGDEBUG2, "skipping f/w download");
617 	}
618 
619 	/*
620 	 * Now start it rolling.
621 	 *
622 	 * If we didn't actually download f/w,
623 	 * we still need to (re)start it.
624 	 */
625 
626 	mbs.param[0] = MBOX_EXEC_FIRMWARE;
627 	mbs.param[1] = ISP_CODE_ORG;
628 	isp_mboxcmd(isp, &mbs, MBLOGNONE);
629 	/* give it a chance to start */
630 	USEC_SLEEP(isp, 500);
631 
632 	if (IS_SCSI(isp)) {
633 		/*
634 		 * Set CLOCK RATE, but only if asked to.
635 		 */
636 		if (isp->isp_clock) {
637 			mbs.param[0] = MBOX_SET_CLOCK_RATE;
638 			mbs.param[1] = isp->isp_clock;
639 			isp_mboxcmd(isp, &mbs, MBLOGALL);
640 			/* we will try not to care if this fails */
641 		}
642 	}
643 
644 	mbs.param[0] = MBOX_ABOUT_FIRMWARE;
645 	isp_mboxcmd(isp, &mbs, MBLOGALL);
646 	if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
647 		return;
648 	}
649 	isp_prt(isp, ISP_LOGCONFIG,
650 	    "Board Revision %s, %s F/W Revision %d.%d.%d", revname,
651 	    dodnld? "loaded" : "resident", mbs.param[1], mbs.param[2],
652 	    mbs.param[3]);
653 	if (IS_FC(isp)) {
654 		isp_prt(isp, ISP_LOGCONFIG, "Firmware Attributes = 0x%x",
655 		    mbs.param[6]);
656 		if (ISP_READ(isp, BIU2100_CSR) & BIU2100_PCI64) {
657 			isp_prt(isp, ISP_LOGCONFIG,
658 			    "Installed in 64-Bit PCI slot");
659 		}
660 	}
661 
662 	isp->isp_fwrev[0] = mbs.param[1];
663 	isp->isp_fwrev[1] = mbs.param[2];
664 	isp->isp_fwrev[2] = mbs.param[3];
665 	if (isp->isp_romfw_rev[0] || isp->isp_romfw_rev[1] ||
666 	    isp->isp_romfw_rev[2]) {
667 		isp_prt(isp, ISP_LOGCONFIG, "Last F/W revision was %d.%d.%d",
668 		    isp->isp_romfw_rev[0], isp->isp_romfw_rev[1],
669 		    isp->isp_romfw_rev[2]);
670 	}
671 
672 	mbs.param[0] = MBOX_GET_FIRMWARE_STATUS;
673 	isp_mboxcmd(isp, &mbs, MBLOGALL);
674 	if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
675 		return;
676 	}
677 	isp->isp_maxcmds = mbs.param[2];
678 	isp_prt(isp, ISP_LOGINFO,
679 	    "%d max I/O commands supported", mbs.param[2]);
680 	isp_fw_state(isp);
681 
682 	/*
683 	 * Set up DMA for the request and result mailboxes.
684 	 */
685 	if (ISP_MBOXDMASETUP(isp) != 0) {
686 		isp_prt(isp, ISP_LOGERR, "Cannot setup DMA");
687 		return;
688 	}
689 	isp->isp_state = ISP_RESETSTATE;
690 
691 	/*
692 	 * Okay- now that we have new firmware running, we now (re)set our
693 	 * notion of how many luns we support. This is somewhat tricky because
694 	 * if we haven't loaded firmware, we don't have an easy way of telling
695 	 * how many luns we support.
696 	 *
697 	 * We'll make a simplifying assumption- if we loaded firmware, we
698 	 * are running with expanded lun firmware, otherwise not.
699 	 *
700 	 * Expanded lun firmware gives you 32 luns for SCSI cards and
701 	 * 65536 luns for Fibre Channel cards.
702 	 *
703 	 * Because the lun is in a a different position in the Request Queue
704 	 * Entry structure for Fibre Channel with expanded lun firmware, we
705 	 * can only support one lun (lun zero) when we don't know what kind
706 	 * of firmware we're running.
707 	 *
708 	 * Note that we only do this once (the first time thru isp_reset)
709 	 * because we may be called again after firmware has been loaded once
710 	 * and released.
711 	 */
712 	if (touched == 0) {
713 		if (dodnld) {
714 			if (IS_SCSI(isp)) {
715 				isp->isp_maxluns = 32;
716 			} else {
717 				isp->isp_maxluns = 65536;
718 			}
719 		} else {
720 			if (IS_SCSI(isp)) {
721 				isp->isp_maxluns = 8;
722 			} else {
723 				isp_prt(isp, ISP_LOGALL, warnlun);
724 				isp->isp_maxluns = 1;
725 			}
726 		}
727 	}
728 }
729 
730 /*
731  * Initialize Parameters of Hardware to a known state.
732  *
733  * Locks are held before coming here.
734  */
735 
736 void
737 isp_init(struct ispsoftc *isp)
738 {
739 	/*
740 	 * Must do this first to get defaults established.
741 	 */
742 	isp_setdfltparm(isp, 0);
743 	if (IS_DUALBUS(isp)) {
744 		isp_setdfltparm(isp, 1);
745 	}
746 	if (IS_FC(isp)) {
747 		isp_fibre_init(isp);
748 	} else {
749 		isp_scsi_init(isp);
750 	}
751 }
752 
753 static void
754 isp_scsi_init(struct ispsoftc *isp)
755 {
756 	sdparam *sdp_chan0, *sdp_chan1;
757 	mbreg_t mbs;
758 
759 	sdp_chan0 = isp->isp_param;
760 	sdp_chan1 = sdp_chan0;
761 	if (IS_DUALBUS(isp)) {
762 		sdp_chan1++;
763 	}
764 
765 	/*
766 	 * If we have no role (neither target nor initiator), return.
767 	 */
768 	if (isp->isp_role == ISP_ROLE_NONE) {
769 		return;
770 	}
771 
772 	/* First do overall per-card settings. */
773 
774 	/*
775 	 * If we have fast memory timing enabled, turn it on.
776 	 */
777 	if (sdp_chan0->isp_fast_mttr) {
778 		ISP_WRITE(isp, RISC_MTR, 0x1313);
779 	}
780 
781 	/*
782 	 * Set Retry Delay and Count.
783 	 * You set both channels at the same time.
784 	 */
785 	mbs.param[0] = MBOX_SET_RETRY_COUNT;
786 	mbs.param[1] = sdp_chan0->isp_retry_count;
787 	mbs.param[2] = sdp_chan0->isp_retry_delay;
788 	mbs.param[6] = sdp_chan1->isp_retry_count;
789 	mbs.param[7] = sdp_chan1->isp_retry_delay;
790 
791 	isp_mboxcmd(isp, &mbs, MBLOGALL);
792 	if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
793 		return;
794 	}
795 
796 	/*
797 	 * Set ASYNC DATA SETUP time. This is very important.
798 	 */
799 	mbs.param[0] = MBOX_SET_ASYNC_DATA_SETUP_TIME;
800 	mbs.param[1] = sdp_chan0->isp_async_data_setup;
801 	mbs.param[2] = sdp_chan1->isp_async_data_setup;
802 	isp_mboxcmd(isp, &mbs, MBLOGALL);
803 	if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
804 		return;
805 	}
806 
807 	/*
808 	 * Set ACTIVE Negation State.
809 	 */
810 	mbs.param[0] = MBOX_SET_ACT_NEG_STATE;
811 	mbs.param[1] =
812 	    (sdp_chan0->isp_req_ack_active_neg << 4) |
813 	    (sdp_chan0->isp_data_line_active_neg << 5);
814 	mbs.param[2] =
815 	    (sdp_chan1->isp_req_ack_active_neg << 4) |
816 	    (sdp_chan1->isp_data_line_active_neg << 5);
817 
818 	isp_mboxcmd(isp, &mbs, MBLOGNONE);
819 	if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
820 		isp_prt(isp, ISP_LOGERR,
821 		    "failed to set active negation state (%d,%d), (%d,%d)",
822 		    sdp_chan0->isp_req_ack_active_neg,
823 		    sdp_chan0->isp_data_line_active_neg,
824 		    sdp_chan1->isp_req_ack_active_neg,
825 		    sdp_chan1->isp_data_line_active_neg);
826 		/*
827 		 * But don't return.
828 		 */
829 	}
830 
831 	/*
832 	 * Set the Tag Aging limit
833 	 */
834 	mbs.param[0] = MBOX_SET_TAG_AGE_LIMIT;
835 	mbs.param[1] = sdp_chan0->isp_tag_aging;
836 	mbs.param[2] = sdp_chan1->isp_tag_aging;
837 	isp_mboxcmd(isp, &mbs, MBLOGALL);
838 	if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
839 		isp_prt(isp, ISP_LOGERR, "failed to set tag age limit (%d,%d)",
840 		    sdp_chan0->isp_tag_aging, sdp_chan1->isp_tag_aging);
841 		return;
842 	}
843 
844 	/*
845 	 * Set selection timeout.
846 	 */
847 	mbs.param[0] = MBOX_SET_SELECT_TIMEOUT;
848 	mbs.param[1] = sdp_chan0->isp_selection_timeout;
849 	mbs.param[2] = sdp_chan1->isp_selection_timeout;
850 	isp_mboxcmd(isp, &mbs, MBLOGALL);
851 	if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
852 		return;
853 	}
854 
855 	/* now do per-channel settings */
856 	isp_scsi_channel_init(isp, 0);
857 	if (IS_DUALBUS(isp))
858 		isp_scsi_channel_init(isp, 1);
859 
860 	/*
861 	 * Now enable request/response queues
862 	 */
863 
864 	mbs.param[0] = MBOX_INIT_RES_QUEUE;
865 	mbs.param[1] = RESULT_QUEUE_LEN(isp);
866 	mbs.param[2] = DMA_MSW(isp->isp_result_dma);
867 	mbs.param[3] = DMA_LSW(isp->isp_result_dma);
868 	mbs.param[4] = 0;
869 	mbs.param[5] = 0;
870 	isp_mboxcmd(isp, &mbs, MBLOGALL);
871 	if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
872 		return;
873 	}
874 	isp->isp_residx = mbs.param[5];
875 
876 	mbs.param[0] = MBOX_INIT_REQ_QUEUE;
877 	mbs.param[1] = RQUEST_QUEUE_LEN(isp);
878 	mbs.param[2] = DMA_MSW(isp->isp_rquest_dma);
879 	mbs.param[3] = DMA_LSW(isp->isp_rquest_dma);
880 	mbs.param[4] = 0;
881 	isp_mboxcmd(isp, &mbs, MBLOGALL);
882 	if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
883 		return;
884 	}
885 	isp->isp_reqidx = isp->isp_reqodx = mbs.param[4];
886 
887 	/*
888 	 * Turn on Fast Posting, LVD transitions
889 	 *
890 	 * Ultra2 F/W always has had fast posting (and LVD transitions)
891 	 *
892 	 * Ultra and older (i.e., SBus) cards may not. It's just safer
893 	 * to assume not for them.
894 	 */
895 
896 	mbs.param[0] = MBOX_SET_FW_FEATURES;
897 	mbs.param[1] = 0;
898 	if (IS_ULTRA2(isp))
899 		mbs.param[1] |= FW_FEATURE_LVD_NOTIFY;
900 	if (IS_ULTRA2(isp) || IS_1240(isp))
901 		mbs.param[1] |= FW_FEATURE_FAST_POST;
902 	if (mbs.param[1] != 0) {
903 		u_int16_t sfeat = mbs.param[1];
904 		isp_mboxcmd(isp, &mbs, MBLOGALL);
905 		if (mbs.param[0] == MBOX_COMMAND_COMPLETE) {
906 			isp_prt(isp, ISP_LOGINFO,
907 			    "Enabled FW features (0x%x)", sfeat);
908 		}
909 	}
910 
911 	/*
912 	 * Let the outer layers decide whether to issue a SCSI bus reset.
913 	 */
914 	isp->isp_state = ISP_INITSTATE;
915 }
916 
917 static void
918 isp_scsi_channel_init(struct ispsoftc *isp, int channel)
919 {
920 	sdparam *sdp;
921 	mbreg_t mbs;
922 	int tgt;
923 
924 	sdp = isp->isp_param;
925 	sdp += channel;
926 
927 	/*
928 	 * Set (possibly new) Initiator ID.
929 	 */
930 	mbs.param[0] = MBOX_SET_INIT_SCSI_ID;
931 	mbs.param[1] = (channel << 7) | sdp->isp_initiator_id;
932 	isp_mboxcmd(isp, &mbs, MBLOGALL);
933 	if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
934 		return;
935 	}
936 	isp_prt(isp, ISP_LOGINFO, "Initiator ID is %d on Channel %d",
937 	    sdp->isp_initiator_id, channel);
938 
939 
940 	/*
941 	 * Set current per-target parameters to a safe minimum.
942 	 */
943 	for (tgt = 0; tgt < MAX_TARGETS; tgt++) {
944 		int lun;
945 		u_int16_t sdf;
946 
947 		if (sdp->isp_devparam[tgt].dev_enable == 0) {
948 			continue;
949 		}
950 #ifndef	ISP_TARGET_MODE
951 		if (tgt == sdp->isp_initiator_id) {
952 			sdf = DPARM_DEFAULT;
953 		} else {
954 			sdf = DPARM_SAFE_DFLT;
955 			/*
956 			 * It is not quite clear when this changed over so that
957 			 * we could force narrow and async for 1000/1020 cards,
958 			 * but assume that this is only the case for loaded
959 			 * firmware.
960 			 */
961 			if (isp->isp_loaded_fw) {
962 				sdf |= DPARM_NARROW | DPARM_ASYNC;
963 			}
964 		}
965 #else
966 		/*
967 		 * The !$*!)$!$)* f/w uses the same index into some
968 		 * internal table to decide how to respond to negotiations,
969 		 * so if we've said "let's be safe" for ID X, and ID X
970 		 * selects *us*, the negotiations will back to 'safe'
971 		 * (as in narrow/async). What the f/w *should* do is
972 		 * use the initiator id settings to decide how to respond.
973 		 */
974 		sdf = DPARM_DEFAULT;
975 #endif
976 		mbs.param[0] = MBOX_SET_TARGET_PARAMS;
977 		mbs.param[1] = (channel << 15) | (tgt << 8);
978 		mbs.param[2] = sdf;
979 		if ((sdf & DPARM_SYNC) == 0) {
980 			mbs.param[3] = 0;
981 		} else {
982 			mbs.param[3] =
983 			    (sdp->isp_devparam[tgt].sync_offset << 8) |
984 			    (sdp->isp_devparam[tgt].sync_period);
985 		}
986 		isp_prt(isp, ISP_LOGDEBUG0,
987 		    "bus %d set tgt %d flags 0x%x off 0x%x period 0x%x",
988 		    channel, tgt, mbs.param[2], mbs.param[3] >> 8,
989 		    mbs.param[3] & 0xff);
990 		isp_mboxcmd(isp, &mbs, MBLOGNONE);
991 		if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
992 			sdf = DPARM_SAFE_DFLT;
993 			mbs.param[0] = MBOX_SET_TARGET_PARAMS;
994 			mbs.param[1] = (tgt << 8) | (channel << 15);
995 			mbs.param[2] = sdf;
996 			mbs.param[3] = 0;
997 			isp_mboxcmd(isp, &mbs, MBLOGALL);
998 			if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
999 				continue;
1000 			}
1001 		}
1002 
1003 		/*
1004 		 * We don't update any information directly from the f/w
1005 		 * because we need to run at least one command to cause a
1006 		 * new state to be latched up. So, we just assume that we
1007 		 * converge to the values we just had set.
1008 		 *
1009 		 * Ensure that we don't believe tagged queuing is enabled yet.
1010 		 * It turns out that sometimes the ISP just ignores our
1011 		 * attempts to set parameters for devices that it hasn't
1012 		 * seen yet.
1013 		 */
1014 		sdp->isp_devparam[tgt].cur_dflags = sdf & ~DPARM_TQING;
1015 		for (lun = 0; lun < (int) isp->isp_maxluns; lun++) {
1016 			mbs.param[0] = MBOX_SET_DEV_QUEUE_PARAMS;
1017 			mbs.param[1] = (channel << 15) | (tgt << 8) | lun;
1018 			mbs.param[2] = sdp->isp_max_queue_depth;
1019 			mbs.param[3] = sdp->isp_devparam[tgt].exc_throttle;
1020 			isp_mboxcmd(isp, &mbs, MBLOGALL);
1021 			if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
1022 				break;
1023 			}
1024 		}
1025 	}
1026 	for (tgt = 0; tgt < MAX_TARGETS; tgt++) {
1027 		if (sdp->isp_devparam[tgt].dev_refresh) {
1028 			isp->isp_sendmarker |= (1 << channel);
1029 			isp->isp_update |= (1 << channel);
1030 			break;
1031 		}
1032 	}
1033 }
1034 
1035 /*
1036  * Fibre Channel specific initialization.
1037  *
1038  * Locks are held before coming here.
1039  */
1040 static void
1041 isp_fibre_init(struct ispsoftc *isp)
1042 {
1043 	fcparam *fcp;
1044 	isp_icb_t *icbp;
1045 	mbreg_t mbs;
1046 	int loopid;
1047 	u_int64_t nwwn, pwwn;
1048 
1049 	fcp = isp->isp_param;
1050 
1051 	/*
1052 	 * Do this *before* initializing the firmware.
1053 	 */
1054 	isp_mark_getpdb_all(isp);
1055 	fcp->isp_fwstate = FW_CONFIG_WAIT;
1056 	fcp->isp_loopstate = LOOP_NIL;
1057 
1058 	/*
1059 	 * If we have no role (neither target nor initiator), return.
1060 	 */
1061 	if (isp->isp_role == ISP_ROLE_NONE) {
1062 		return;
1063 	}
1064 
1065 	loopid = DEFAULT_LOOPID(isp);
1066 	icbp = (isp_icb_t *) fcp->isp_scratch;
1067 	MEMZERO(icbp, sizeof (*icbp));
1068 
1069 	icbp->icb_version = ICB_VERSION1;
1070 
1071 	/*
1072 	 * Firmware Options are either retrieved from NVRAM or
1073 	 * are patched elsewhere. We check them for sanity here
1074 	 * and make changes based on board revision, but otherwise
1075 	 * let others decide policy.
1076 	 */
1077 
1078 	/*
1079 	 * If this is a 2100 < revision 5, we have to turn off FAIRNESS.
1080 	 */
1081 	if ((isp->isp_type == ISP_HA_FC_2100) && isp->isp_revision < 5) {
1082 		fcp->isp_fwoptions &= ~ICBOPT_FAIRNESS;
1083 	}
1084 
1085 	/*
1086 	 * We have to use FULL LOGIN even though it resets the loop too much
1087 	 * because otherwise port database entries don't get updated after
1088 	 * a LIP- this is a known f/w bug for 2100 f/w less than 1.17.0.
1089 	 */
1090 	if (ISP_FW_REVX(isp->isp_fwrev) < ISP_FW_REV(1, 17, 0)) {
1091 		fcp->isp_fwoptions |= ICBOPT_FULL_LOGIN;
1092 	}
1093 
1094 	/*
1095 	 * Insist on Port Database Update Async notifications
1096 	 */
1097 	fcp->isp_fwoptions |= ICBOPT_PDBCHANGE_AE;
1098 
1099 
1100 	/*
1101 	 * Make sure that target role reflects into fwoptions.
1102 	 */
1103 	if (isp->isp_role & ISP_ROLE_TARGET) {
1104 		fcp->isp_fwoptions |= ICBOPT_TGT_ENABLE;
1105 	} else {
1106 		fcp->isp_fwoptions &= ~ICBOPT_TGT_ENABLE;
1107 	}
1108 
1109 	/*
1110 	 * Propagate all of this into the ICB structure.
1111 	 */
1112 	icbp->icb_fwoptions = fcp->isp_fwoptions;
1113 	icbp->icb_maxfrmlen = fcp->isp_maxfrmlen;
1114 	if (icbp->icb_maxfrmlen < ICB_MIN_FRMLEN ||
1115 	    icbp->icb_maxfrmlen > ICB_MAX_FRMLEN) {
1116 		isp_prt(isp, ISP_LOGERR,
1117 		    "bad frame length (%d) from NVRAM- using %d",
1118 		    fcp->isp_maxfrmlen, ICB_DFLT_FRMLEN);
1119 		icbp->icb_maxfrmlen = ICB_DFLT_FRMLEN;
1120 	}
1121 	icbp->icb_maxalloc = fcp->isp_maxalloc;
1122 	if (icbp->icb_maxalloc < 1) {
1123 		isp_prt(isp, ISP_LOGERR,
1124 		    "bad maximum allocation (%d)- using 16", fcp->isp_maxalloc);
1125 		icbp->icb_maxalloc = 16;
1126 	}
1127 	icbp->icb_execthrottle = fcp->isp_execthrottle;
1128 	if (icbp->icb_execthrottle < 1) {
1129 		isp_prt(isp, ISP_LOGERR,
1130 		    "bad execution throttle of %d- using 16",
1131 		    fcp->isp_execthrottle);
1132 		icbp->icb_execthrottle = ICB_DFLT_THROTTLE;
1133 	}
1134 	icbp->icb_retry_delay = fcp->isp_retry_delay;
1135 	icbp->icb_retry_count = fcp->isp_retry_count;
1136 	icbp->icb_hardaddr = loopid;
1137 	/*
1138 	 * Right now we just set extended options to prefer point-to-point
1139 	 * over loop based upon some soft config options.
1140 	 */
1141 	if (IS_2200(isp) || IS_2300(isp)) {
1142 		icbp->icb_fwoptions |= ICBOPT_EXTENDED;
1143 		/*
1144 		 * Prefer or force Point-To-Point instead Loop?
1145 		 */
1146 		switch(isp->isp_confopts & ISP_CFG_PORT_PREF) {
1147 		case ISP_CFG_NPORT:
1148 			icbp->icb_xfwoptions = ICBXOPT_PTP_2_LOOP;
1149 			break;
1150 		case ISP_CFG_NPORT_ONLY:
1151 			icbp->icb_xfwoptions = ICBXOPT_PTP_ONLY;
1152 			break;
1153 		case ISP_CFG_LPORT_ONLY:
1154 			icbp->icb_xfwoptions = ICBXOPT_LOOP_ONLY;
1155 			break;
1156 		default:
1157 			icbp->icb_xfwoptions = ICBXOPT_LOOP_2_PTP;
1158 			break;
1159 		}
1160 	}
1161 	icbp->icb_logintime = 60;	/* 60 second login timeout */
1162 
1163 	nwwn = ISP_NODEWWN(isp);
1164 	pwwn = ISP_PORTWWN(isp);
1165 	if (nwwn && pwwn) {
1166 		icbp->icb_fwoptions |= ICBOPT_BOTH_WWNS;
1167 		MAKE_NODE_NAME_FROM_WWN(icbp->icb_nodename, nwwn);
1168 		MAKE_NODE_NAME_FROM_WWN(icbp->icb_portname, pwwn);
1169 		isp_prt(isp, ISP_LOGDEBUG1,
1170 		    "Setting ICB Node 0x%08x%08x Port 0x%08x%08x",
1171 		    ((u_int32_t) (nwwn >> 32)),
1172 		    ((u_int32_t) (nwwn & 0xffffffff)),
1173 		    ((u_int32_t) (pwwn >> 32)),
1174 		    ((u_int32_t) (pwwn & 0xffffffff)));
1175 	} else {
1176 		isp_prt(isp, ISP_LOGDEBUG1, "Not using any WWNs");
1177 		icbp->icb_fwoptions &= ~(ICBOPT_BOTH_WWNS|ICBOPT_FULL_LOGIN);
1178 	}
1179 	icbp->icb_rqstqlen = RQUEST_QUEUE_LEN(isp);
1180 	icbp->icb_rsltqlen = RESULT_QUEUE_LEN(isp);
1181 	icbp->icb_rqstaddr[RQRSP_ADDR0015] = DMA_LSW(isp->isp_rquest_dma);
1182 	icbp->icb_rqstaddr[RQRSP_ADDR1631] = DMA_MSW(isp->isp_rquest_dma);
1183 	icbp->icb_respaddr[RQRSP_ADDR0015] = DMA_LSW(isp->isp_result_dma);
1184 	icbp->icb_respaddr[RQRSP_ADDR1631] = DMA_MSW(isp->isp_result_dma);
1185 	isp_prt(isp, ISP_LOGDEBUG1,
1186 	    "isp_fibre_init: fwoptions 0x%x", fcp->isp_fwoptions);
1187 	ISP_SWIZZLE_ICB(isp, icbp);
1188 
1189 
1190 	/*
1191 	 * Init the firmware
1192 	 */
1193 	mbs.param[0] = MBOX_INIT_FIRMWARE;
1194 	mbs.param[1] = 0;
1195 	mbs.param[2] = DMA_MSW(fcp->isp_scdma);
1196 	mbs.param[3] = DMA_LSW(fcp->isp_scdma);
1197 	mbs.param[4] = 0;
1198 	mbs.param[5] = 0;
1199 	mbs.param[6] = 0;
1200 	mbs.param[7] = 0;
1201 	isp_mboxcmd(isp, &mbs, MBLOGALL);
1202 	if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
1203 		return;
1204 	}
1205 	isp->isp_reqidx = isp->isp_reqodx = 0;
1206 	isp->isp_residx = 0;
1207 	isp->isp_sendmarker = 1;
1208 
1209 	/*
1210 	 * Whatever happens, we're now committed to being here.
1211 	 */
1212 	isp->isp_state = ISP_INITSTATE;
1213 }
1214 
1215 /*
1216  * Fibre Channel Support- get the port database for the id.
1217  *
1218  * Locks are held before coming here. Return 0 if success,
1219  * else failure.
1220  */
1221 
1222 static int
1223 isp_getmap(struct ispsoftc *isp, fcpos_map_t *map)
1224 {
1225 	fcparam *fcp = (fcparam *) isp->isp_param;
1226 	mbreg_t mbs;
1227 
1228 	mbs.param[0] = MBOX_GET_FC_AL_POSITION_MAP;
1229 	mbs.param[1] = 0;
1230 	mbs.param[2] = DMA_MSW(fcp->isp_scdma);
1231 	mbs.param[3] = DMA_LSW(fcp->isp_scdma);
1232 	/*
1233 	 * Unneeded. For the 2100, except for initializing f/w, registers
1234 	 * 4/5 have to not be written to.
1235 	 *	mbs.param[4] = 0;
1236 	 *	mbs.param[5] = 0;
1237 	 *
1238 	 */
1239 	mbs.param[6] = 0;
1240 	mbs.param[7] = 0;
1241 	isp_mboxcmd(isp, &mbs, MBLOGALL & ~MBOX_COMMAND_PARAM_ERROR);
1242 	if (mbs.param[0] == MBOX_COMMAND_COMPLETE) {
1243 		MEMCPY(map, fcp->isp_scratch, sizeof (fcpos_map_t));
1244 		map->fwmap = mbs.param[1] != 0;
1245 		return (0);
1246 	}
1247 	return (-1);
1248 }
1249 
1250 static void
1251 isp_mark_getpdb_all(struct ispsoftc *isp)
1252 {
1253 	fcparam *fcp = (fcparam *) isp->isp_param;
1254 	int i;
1255 	for (i = 0; i < MAX_FC_TARG; i++) {
1256 		fcp->portdb[i].valid = fcp->portdb[i].fabric_dev = 0;
1257 	}
1258 }
1259 
1260 static int
1261 isp_getpdb(struct ispsoftc *isp, int id, isp_pdb_t *pdbp)
1262 {
1263 	fcparam *fcp = (fcparam *) isp->isp_param;
1264 	mbreg_t mbs;
1265 
1266 	mbs.param[0] = MBOX_GET_PORT_DB;
1267 	mbs.param[1] = id << 8;
1268 	mbs.param[2] = DMA_MSW(fcp->isp_scdma);
1269 	mbs.param[3] = DMA_LSW(fcp->isp_scdma);
1270 	/*
1271 	 * Unneeded. For the 2100, except for initializing f/w, registers
1272 	 * 4/5 have to not be written to.
1273 	 *	mbs.param[4] = 0;
1274 	 *	mbs.param[5] = 0;
1275 	 *
1276 	 */
1277 	mbs.param[6] = 0;
1278 	mbs.param[7] = 0;
1279 	isp_mboxcmd(isp, &mbs, MBLOGALL & ~MBOX_COMMAND_PARAM_ERROR);
1280 	if (mbs.param[0] == MBOX_COMMAND_COMPLETE) {
1281 		ISP_UNSWIZZLE_AND_COPY_PDBP(isp, pdbp, fcp->isp_scratch);
1282 		return (0);
1283 	}
1284 	return (-1);
1285 }
1286 
1287 static u_int64_t
1288 isp_get_portname(struct ispsoftc *isp, int loopid, int nodename)
1289 {
1290 	u_int64_t wwn = 0;
1291 	mbreg_t mbs;
1292 
1293 	mbs.param[0] = MBOX_GET_PORT_NAME;
1294 	mbs.param[1] = loopid << 8;
1295 	if (nodename)
1296 		mbs.param[1] |= 1;
1297 	isp_mboxcmd(isp, &mbs, MBLOGALL & ~MBOX_COMMAND_PARAM_ERROR);
1298 	if (mbs.param[0] == MBOX_COMMAND_COMPLETE) {
1299 		wwn =
1300 		    (((u_int64_t)(mbs.param[2] & 0xff)) << 56) |
1301 		    (((u_int64_t)(mbs.param[2] >> 8))	<< 48) |
1302 		    (((u_int64_t)(mbs.param[3] & 0xff))	<< 40) |
1303 		    (((u_int64_t)(mbs.param[3] >> 8))	<< 32) |
1304 		    (((u_int64_t)(mbs.param[6] & 0xff))	<< 24) |
1305 		    (((u_int64_t)(mbs.param[6] >> 8))	<< 16) |
1306 		    (((u_int64_t)(mbs.param[7] & 0xff))	<<  8) |
1307 		    (((u_int64_t)(mbs.param[7] >> 8)));
1308 	}
1309 	return (wwn);
1310 }
1311 
1312 /*
1313  * Make sure we have good FC link and know our Loop ID.
1314  */
1315 
1316 static int
1317 isp_fclink_test(struct ispsoftc *isp, int usdelay)
1318 {
1319 	static char *toponames[] = {
1320 		"Private Loop",
1321 		"FL Port",
1322 		"N-Port to N-Port",
1323 		"F Port",
1324 		"F Port (no FLOGI_ACC response)"
1325 	};
1326 	mbreg_t mbs;
1327 	int count, check_for_fabric;
1328 	u_int8_t lwfs;
1329 	fcparam *fcp;
1330 	struct lportdb *lp;
1331 	isp_pdb_t pdb;
1332 
1333 	fcp = isp->isp_param;
1334 
1335 	/*
1336 	 * XXX: Here is where we would start a 'loop dead' timeout
1337 	 */
1338 
1339 	/*
1340 	 * Wait up to N microseconds for F/W to go to a ready state.
1341 	 */
1342 	lwfs = FW_CONFIG_WAIT;
1343 	count = 0;
1344 	while (count < usdelay) {
1345 		u_int64_t enano;
1346 		u_int32_t wrk;
1347 		NANOTIME_T hra, hrb;
1348 
1349 		GET_NANOTIME(&hra);
1350 		isp_fw_state(isp);
1351 		if (lwfs != fcp->isp_fwstate) {
1352 			isp_prt(isp, ISP_LOGINFO, "Firmware State <%s->%s>",
1353 			    isp2100_fw_statename((int)lwfs),
1354 			    isp2100_fw_statename((int)fcp->isp_fwstate));
1355 			lwfs = fcp->isp_fwstate;
1356 		}
1357 		if (fcp->isp_fwstate == FW_READY) {
1358 			break;
1359 		}
1360 		GET_NANOTIME(&hrb);
1361 
1362 		/*
1363 		 * Get the elapsed time in nanoseconds.
1364 		 * Always guaranteed to be non-zero.
1365 		 */
1366 		enano = NANOTIME_SUB(&hrb, &hra);
1367 
1368 		isp_prt(isp, ISP_LOGDEBUG1,
1369 		    "usec%d: 0x%lx->0x%lx enano 0x%x%08x",
1370 		    count, (long) GET_NANOSEC(&hra), (long) GET_NANOSEC(&hrb),
1371 		    (u_int32_t)(enano >> 32), (u_int32_t)(enano & 0xffffffff));
1372 
1373 		/*
1374 		 * If the elapsed time is less than 1 millisecond,
1375 		 * delay a period of time up to that millisecond of
1376 		 * waiting.
1377 		 *
1378 		 * This peculiar code is an attempt to try and avoid
1379 		 * invoking u_int64_t math support functions for some
1380 		 * platforms where linkage is a problem.
1381 		 */
1382 		if (enano < (1000 * 1000)) {
1383 			count += 1000;
1384 			enano = (1000 * 1000) - enano;
1385 			while (enano > (u_int64_t) 4000000000U) {
1386 				USEC_SLEEP(isp, 4000000);
1387 				enano -= (u_int64_t) 4000000000U;
1388 			}
1389 			wrk = enano;
1390 			wrk /= 1000;
1391 			USEC_SLEEP(isp, wrk);
1392 		} else {
1393 			while (enano > (u_int64_t) 4000000000U) {
1394 				count += 4000000;
1395 				enano -= (u_int64_t) 4000000000U;
1396 			}
1397 			wrk = enano;
1398 			count += (wrk / 1000);
1399 		}
1400 	}
1401 
1402 	/*
1403 	 * If we haven't gone to 'ready' state, return.
1404 	 */
1405 	if (fcp->isp_fwstate != FW_READY) {
1406 		return (-1);
1407 	}
1408 
1409 	/*
1410 	 * Get our Loop ID (if possible). We really need to have it.
1411 	 */
1412 	mbs.param[0] = MBOX_GET_LOOP_ID;
1413 	isp_mboxcmd(isp, &mbs, MBLOGALL);
1414 	if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
1415 		return (-1);
1416 	}
1417 	fcp->isp_loopid = mbs.param[1];
1418 	if (IS_2200(isp) || IS_2300(isp)) {
1419 		int topo = (int) mbs.param[6];
1420 		if (topo < TOPO_NL_PORT || topo > TOPO_PTP_STUB)
1421 			topo = TOPO_PTP_STUB;
1422 		fcp->isp_topo = topo;
1423 	} else {
1424 		fcp->isp_topo = TOPO_NL_PORT;
1425 	}
1426 	fcp->isp_portid = fcp->isp_alpa = mbs.param[2] & 0xff;
1427 
1428 	/*
1429 	 * Check to see if we're on a fabric by trying to see if we
1430 	 * can talk to the fabric name server. This can be a bit
1431 	 * tricky because if we're a 2100, we should check always
1432 	 * (in case we're connected to an server doing aliasing).
1433 	 */
1434 	fcp->isp_onfabric = 0;
1435 
1436 	if (IS_2100(isp))
1437 		check_for_fabric = 1;
1438 	else if (fcp->isp_topo == TOPO_FL_PORT || fcp->isp_topo == TOPO_F_PORT)
1439 		check_for_fabric = 1;
1440 	else
1441 		check_for_fabric = 0;
1442 
1443 	if (check_for_fabric && isp_getpdb(isp, FL_PORT_ID, &pdb) == 0) {
1444 		int loopid = FL_PORT_ID;
1445 		if (IS_2100(isp)) {
1446 			fcp->isp_topo = TOPO_FL_PORT;
1447 		}
1448 
1449 		if (BITS2WORD(pdb.pdb_portid_bits) == 0) {
1450 			/*
1451 			 * Crock.
1452 			 */
1453 			fcp->isp_topo = TOPO_NL_PORT;
1454 			goto not_on_fabric;
1455 		}
1456 		fcp->isp_portid = mbs.param[2] | ((int) mbs.param[3] << 16);
1457 
1458 		/*
1459 		 * Save the Fabric controller's port database entry.
1460 		 */
1461 		lp = &fcp->portdb[loopid];
1462 		lp->node_wwn =
1463 		    (((u_int64_t)pdb.pdb_nodename[0]) << 56) |
1464 		    (((u_int64_t)pdb.pdb_nodename[1]) << 48) |
1465 		    (((u_int64_t)pdb.pdb_nodename[2]) << 40) |
1466 		    (((u_int64_t)pdb.pdb_nodename[3]) << 32) |
1467 		    (((u_int64_t)pdb.pdb_nodename[4]) << 24) |
1468 		    (((u_int64_t)pdb.pdb_nodename[5]) << 16) |
1469 		    (((u_int64_t)pdb.pdb_nodename[6]) <<  8) |
1470 		    (((u_int64_t)pdb.pdb_nodename[7]));
1471 		lp->port_wwn =
1472 		    (((u_int64_t)pdb.pdb_portname[0]) << 56) |
1473 		    (((u_int64_t)pdb.pdb_portname[1]) << 48) |
1474 		    (((u_int64_t)pdb.pdb_portname[2]) << 40) |
1475 		    (((u_int64_t)pdb.pdb_portname[3]) << 32) |
1476 		    (((u_int64_t)pdb.pdb_portname[4]) << 24) |
1477 		    (((u_int64_t)pdb.pdb_portname[5]) << 16) |
1478 		    (((u_int64_t)pdb.pdb_portname[6]) <<  8) |
1479 		    (((u_int64_t)pdb.pdb_portname[7]));
1480 		lp->roles =
1481 		    (pdb.pdb_prli_svc3 & SVC3_ROLE_MASK) >> SVC3_ROLE_SHIFT;
1482 		lp->portid = BITS2WORD(pdb.pdb_portid_bits);
1483 		lp->loopid = pdb.pdb_loopid;
1484 		lp->loggedin = lp->valid = 1;
1485 		fcp->isp_onfabric = 1;
1486 		(void) isp_async(isp, ISPASYNC_PROMENADE, &loopid);
1487 		isp_register_fc4_type(isp);
1488 	} else {
1489 not_on_fabric:
1490 		fcp->isp_onfabric = 0;
1491 		fcp->portdb[FL_PORT_ID].valid = 0;
1492 	}
1493 
1494 	isp_prt(isp, ISP_LOGINFO, topology, fcp->isp_loopid, fcp->isp_alpa,
1495 	    fcp->isp_portid, fcp->isp_loopstate, toponames[fcp->isp_topo]);
1496 
1497 	/*
1498 	 * Announce ourselves, too. This involves synthesizing an entry.
1499 	 */
1500 	if (fcp->isp_iid_set == 0) {
1501 		fcp->isp_iid_set = 1;
1502 		fcp->isp_iid = fcp->isp_loopid;
1503 		lp = &fcp->portdb[fcp->isp_iid];
1504 	} else {
1505 		lp = &fcp->portdb[fcp->isp_iid];
1506 		if (fcp->isp_portid != lp->portid ||
1507 		    fcp->isp_loopid != lp->loopid ||
1508 		    fcp->isp_nodewwn != ISP_NODEWWN(isp) ||
1509 		    fcp->isp_portwwn != ISP_PORTWWN(isp)) {
1510 			lp->valid = 0;
1511 			count = fcp->isp_iid;
1512 			(void) isp_async(isp, ISPASYNC_PROMENADE, &count);
1513 		}
1514 	}
1515 	lp->loopid = fcp->isp_loopid;
1516 	lp->portid = fcp->isp_portid;
1517 	lp->node_wwn = ISP_NODEWWN(isp);
1518 	lp->port_wwn = ISP_PORTWWN(isp);
1519 	switch (isp->isp_role) {
1520 	case ISP_ROLE_NONE:
1521 		lp->roles = 0;
1522 		break;
1523 	case ISP_ROLE_TARGET:
1524 		lp->roles = SVC3_TGT_ROLE >> SVC3_ROLE_SHIFT;
1525 		break;
1526 	case ISP_ROLE_INITIATOR:
1527 		lp->roles = SVC3_INI_ROLE >> SVC3_ROLE_SHIFT;
1528 		break;
1529 	case ISP_ROLE_BOTH:
1530 		lp->roles = (SVC3_INI_ROLE|SVC3_TGT_ROLE) >> SVC3_ROLE_SHIFT;
1531 		break;
1532 	}
1533 	lp->loggedin = lp->valid = 1;
1534 	count = fcp->isp_iid;
1535 	(void) isp_async(isp, ISPASYNC_PROMENADE, &count);
1536 	return (0);
1537 }
1538 
1539 static char *
1540 isp2100_fw_statename(int state)
1541 {
1542 	switch(state) {
1543 	case FW_CONFIG_WAIT:	return "Config Wait";
1544 	case FW_WAIT_AL_PA:	return "Waiting for AL_PA";
1545 	case FW_WAIT_LOGIN:	return "Wait Login";
1546 	case FW_READY:		return "Ready";
1547 	case FW_LOSS_OF_SYNC:	return "Loss Of Sync";
1548 	case FW_ERROR:		return "Error";
1549 	case FW_REINIT:		return "Re-Init";
1550 	case FW_NON_PART:	return "Nonparticipating";
1551 	default:		return "?????";
1552 	}
1553 }
1554 
1555 /*
1556  * Synchronize our soft copy of the port database with what the f/w thinks
1557  * (with a view toward possibly for a specific target....)
1558  */
1559 
1560 static int
1561 isp_pdb_sync(struct ispsoftc *isp)
1562 {
1563 	struct lportdb *lp;
1564 	fcparam *fcp = isp->isp_param;
1565 	isp_pdb_t pdb;
1566 	int loopid, base, lim;
1567 
1568 	/*
1569 	 * Make sure we're okay for doing this right now.
1570 	 */
1571 	if (fcp->isp_loopstate != LOOP_PDB_RCVD &&
1572 	    fcp->isp_loopstate != LOOP_FSCAN_DONE &&
1573 	    fcp->isp_loopstate != LOOP_LSCAN_DONE) {
1574 		return (-1);
1575 	}
1576 
1577 	if (fcp->isp_topo == TOPO_FL_PORT || fcp->isp_topo == TOPO_NL_PORT ||
1578 	    fcp->isp_topo == TOPO_N_PORT) {
1579 		if (fcp->isp_loopstate < LOOP_LSCAN_DONE) {
1580 			if (isp_scan_loop(isp) != 0) {
1581 				return (-1);
1582 			}
1583 		}
1584 	}
1585 	fcp->isp_loopstate = LOOP_SYNCING_PDB;
1586 
1587 	/*
1588 	 * If we get this far, we've settled our differences with the f/w
1589 	 * (for local loop device) and we can say that the loop state is ready.
1590 	 */
1591 
1592 	if (fcp->isp_topo == TOPO_NL_PORT) {
1593 		fcp->loop_seen_once = 1;
1594 		fcp->isp_loopstate = LOOP_READY;
1595 		return (0);
1596 	}
1597 
1598 	/*
1599 	 * Find all Fabric Entities that didn't make it from one scan to the
1600 	 * next and let the world know they went away. Scan the whole database.
1601 	 */
1602 	for (lp = &fcp->portdb[0]; lp < &fcp->portdb[MAX_FC_TARG]; lp++) {
1603 		if (lp->was_fabric_dev && lp->fabric_dev == 0) {
1604 			loopid = lp - fcp->portdb;
1605 			lp->valid = 0;	/* should already be set */
1606 			(void) isp_async(isp, ISPASYNC_PROMENADE, &loopid);
1607 			MEMZERO((void *) lp, sizeof (*lp));
1608 			continue;
1609 		}
1610 		lp->was_fabric_dev = lp->fabric_dev;
1611 	}
1612 
1613 	if (fcp->isp_topo == TOPO_FL_PORT)
1614 		base = FC_SNS_ID+1;
1615 	else
1616 		base = 0;
1617 
1618 	if (fcp->isp_topo == TOPO_N_PORT)
1619 		lim = 1;
1620 	else
1621 		lim = MAX_FC_TARG;
1622 
1623 	/*
1624 	 * Now log in any fabric devices that the outer layer has
1625 	 * left for us to see. This seems the most sane policy
1626 	 * for the moment.
1627 	 */
1628 	for (lp = &fcp->portdb[base]; lp < &fcp->portdb[lim]; lp++) {
1629 		u_int32_t portid;
1630 		mbreg_t mbs;
1631 
1632 		loopid = lp - fcp->portdb;
1633 		if (loopid >= FL_PORT_ID && loopid <= FC_SNS_ID) {
1634 			continue;
1635 		}
1636 
1637 		/*
1638 		 * Anything here?
1639 		 */
1640 		if (lp->port_wwn == 0) {
1641 			continue;
1642 		}
1643 
1644 		/*
1645 		 * Don't try to log into yourself.
1646 		 */
1647 		if ((portid = lp->portid) == fcp->isp_portid) {
1648 			continue;
1649 		}
1650 
1651 
1652 		/*
1653 		 * If we'd been logged in- see if we still are and we haven't
1654 		 * changed. If so, no need to log ourselves out, etc..
1655 		 *
1656 		 * Unfortunately, our charming Qlogic f/w has decided to
1657 		 * return a valid port database entry for a fabric device
1658 		 * that has, in fact, gone away. And it hangs trying to
1659 		 * log it out.
1660 		 */
1661 		if (lp->loggedin &&
1662 		    isp_getpdb(isp, lp->loopid, &pdb) == 0) {
1663 			int nrole;
1664 			u_int64_t nwwnn, nwwpn;
1665 			nwwnn =
1666 			    (((u_int64_t)pdb.pdb_nodename[0]) << 56) |
1667 			    (((u_int64_t)pdb.pdb_nodename[1]) << 48) |
1668 			    (((u_int64_t)pdb.pdb_nodename[2]) << 40) |
1669 			    (((u_int64_t)pdb.pdb_nodename[3]) << 32) |
1670 			    (((u_int64_t)pdb.pdb_nodename[4]) << 24) |
1671 			    (((u_int64_t)pdb.pdb_nodename[5]) << 16) |
1672 			    (((u_int64_t)pdb.pdb_nodename[6]) <<  8) |
1673 			    (((u_int64_t)pdb.pdb_nodename[7]));
1674 			nwwpn =
1675 			    (((u_int64_t)pdb.pdb_portname[0]) << 56) |
1676 			    (((u_int64_t)pdb.pdb_portname[1]) << 48) |
1677 			    (((u_int64_t)pdb.pdb_portname[2]) << 40) |
1678 			    (((u_int64_t)pdb.pdb_portname[3]) << 32) |
1679 			    (((u_int64_t)pdb.pdb_portname[4]) << 24) |
1680 			    (((u_int64_t)pdb.pdb_portname[5]) << 16) |
1681 			    (((u_int64_t)pdb.pdb_portname[6]) <<  8) |
1682 			    (((u_int64_t)pdb.pdb_portname[7]));
1683 			nrole = (pdb.pdb_prli_svc3 & SVC3_ROLE_MASK) >>
1684 			    SVC3_ROLE_SHIFT;
1685 			if (pdb.pdb_loopid == lp->loopid && lp->portid ==
1686 			    (u_int32_t) BITS2WORD(pdb.pdb_portid_bits) &&
1687 			    nwwnn == lp->node_wwn && nwwpn == lp->port_wwn &&
1688 			    lp->roles == nrole && lp->force_logout == 0) {
1689 				lp->loggedin = lp->valid = 1;
1690 				isp_prt(isp, ISP_LOGINFO, lretained,
1691 				    (int) (lp - fcp->portdb),
1692 				    (int) lp->loopid, lp->portid);
1693 				continue;
1694 			}
1695 		}
1696 
1697 		lp->force_logout = 0;
1698 
1699 		if (fcp->isp_fwstate != FW_READY ||
1700 		    fcp->isp_loopstate != LOOP_SYNCING_PDB) {
1701 			return (-1);
1702 		}
1703 
1704 		/*
1705 		 * Force a logout if we were logged in.
1706 		 */
1707 		if (lp->loggedin) {
1708 			if (isp_getpdb(isp, lp->loopid, &pdb) == 0) {
1709 				mbs.param[0] = MBOX_FABRIC_LOGOUT;
1710 				mbs.param[1] = lp->loopid << 8;
1711 				mbs.param[2] = 0;
1712 				mbs.param[3] = 0;
1713 				isp_mboxcmd(isp, &mbs, MBLOGNONE);
1714 				lp->loggedin = 0;
1715 				isp_prt(isp, ISP_LOGINFO, plogout,
1716 				    (int) (lp - fcp->portdb), lp->loopid,
1717 				    lp->portid);
1718 			}
1719 			lp->loggedin = 0;
1720 			if (fcp->isp_fwstate != FW_READY ||
1721 			    fcp->isp_loopstate != LOOP_SYNCING_PDB) {
1722 				return (-1);
1723 			}
1724 		}
1725 
1726 		/*
1727 		 * And log in....
1728 		 */
1729 		loopid = lp - fcp->portdb;
1730 		lp->loopid = FL_PORT_ID;
1731 		do {
1732 			mbs.param[0] = MBOX_FABRIC_LOGIN;
1733 			mbs.param[1] = loopid << 8;
1734 			mbs.param[2] = portid >> 16;
1735 			mbs.param[3] = portid & 0xffff;
1736 			if (IS_2200(isp) || IS_2300(isp)) {
1737 				/* only issue a PLOGI if not logged in */
1738 				mbs.param[1] |= 0x1;
1739 			}
1740 			isp_mboxcmd(isp, &mbs, MBLOGALL & ~(MBOX_LOOP_ID_USED |
1741 			    MBOX_PORT_ID_USED | MBOX_COMMAND_ERROR));
1742 			if (fcp->isp_fwstate != FW_READY ||
1743 			    fcp->isp_loopstate != LOOP_SYNCING_PDB) {
1744 				return (-1);
1745 			}
1746 			switch (mbs.param[0]) {
1747 			case MBOX_LOOP_ID_USED:
1748 				/*
1749 				 * Try the next available loop id.
1750 				 */
1751 				loopid++;
1752 				break;
1753 			case MBOX_PORT_ID_USED:
1754 				/*
1755 				 * This port is already logged in.
1756 				 * Snaffle the loop id it's using if it's
1757 				 * nonzero, otherwise we're hosed.
1758 				 */
1759 				if (mbs.param[1] != 0) {
1760 					loopid = mbs.param[1];
1761 					isp_prt(isp, ISP_LOGINFO, retained,
1762 					    loopid, (int) (lp - fcp->portdb),
1763 					    lp->portid);
1764 				} else {
1765 					loopid = MAX_FC_TARG;
1766 					break;
1767 				}
1768 				/* FALLTHROUGH */
1769 			case MBOX_COMMAND_COMPLETE:
1770 				lp->loggedin = 1;
1771 				lp->loopid = loopid;
1772 				break;
1773 			case MBOX_COMMAND_ERROR:
1774 				isp_prt(isp, ISP_LOGINFO, plogierr,
1775 				    portid, mbs.param[1]);
1776 				/* FALLTHROUGH */
1777 			case MBOX_ALL_IDS_USED: /* We're outta IDs */
1778 			default:
1779 				loopid = MAX_FC_TARG;
1780 				break;
1781 			}
1782 		} while (lp->loopid == FL_PORT_ID && loopid < MAX_FC_TARG);
1783 
1784 		/*
1785 		 * If we get here and we haven't set a Loop ID,
1786 		 * we failed to log into this device.
1787 		 */
1788 
1789 		if (lp->loopid == FL_PORT_ID) {
1790 			lp->loopid = 0;
1791 			continue;
1792 		}
1793 
1794 		/*
1795 		 * Make sure we can get the approriate port information.
1796 		 */
1797 		if (isp_getpdb(isp, lp->loopid, &pdb) != 0) {
1798 			isp_prt(isp, ISP_LOGWARN, nopdb, lp->portid);
1799 			goto dump_em;
1800 		}
1801 
1802 		if (fcp->isp_fwstate != FW_READY ||
1803 		    fcp->isp_loopstate != LOOP_SYNCING_PDB) {
1804 			return (-1);
1805 		}
1806 
1807 		if (pdb.pdb_loopid != lp->loopid) {
1808 			isp_prt(isp, ISP_LOGWARN, pdbmfail1,
1809 			    lp->portid, pdb.pdb_loopid);
1810 			goto dump_em;
1811 		}
1812 
1813 		if (lp->portid != (u_int32_t) BITS2WORD(pdb.pdb_portid_bits)) {
1814 			isp_prt(isp, ISP_LOGWARN, pdbmfail2,
1815 			    lp->portid, BITS2WORD(pdb.pdb_portid_bits));
1816 			goto dump_em;
1817 		}
1818 
1819 		lp->roles =
1820 		    (pdb.pdb_prli_svc3 & SVC3_ROLE_MASK) >> SVC3_ROLE_SHIFT;
1821 		lp->node_wwn =
1822 		    (((u_int64_t)pdb.pdb_nodename[0]) << 56) |
1823 		    (((u_int64_t)pdb.pdb_nodename[1]) << 48) |
1824 		    (((u_int64_t)pdb.pdb_nodename[2]) << 40) |
1825 		    (((u_int64_t)pdb.pdb_nodename[3]) << 32) |
1826 		    (((u_int64_t)pdb.pdb_nodename[4]) << 24) |
1827 		    (((u_int64_t)pdb.pdb_nodename[5]) << 16) |
1828 		    (((u_int64_t)pdb.pdb_nodename[6]) <<  8) |
1829 		    (((u_int64_t)pdb.pdb_nodename[7]));
1830 		lp->port_wwn =
1831 		    (((u_int64_t)pdb.pdb_portname[0]) << 56) |
1832 		    (((u_int64_t)pdb.pdb_portname[1]) << 48) |
1833 		    (((u_int64_t)pdb.pdb_portname[2]) << 40) |
1834 		    (((u_int64_t)pdb.pdb_portname[3]) << 32) |
1835 		    (((u_int64_t)pdb.pdb_portname[4]) << 24) |
1836 		    (((u_int64_t)pdb.pdb_portname[5]) << 16) |
1837 		    (((u_int64_t)pdb.pdb_portname[6]) <<  8) |
1838 		    (((u_int64_t)pdb.pdb_portname[7]));
1839 		/*
1840 		 * Check to make sure this all makes sense.
1841 		 */
1842 		if (lp->node_wwn && lp->port_wwn) {
1843 			lp->valid = 1;
1844 			loopid = lp - fcp->portdb;
1845 			(void) isp_async(isp, ISPASYNC_PROMENADE, &loopid);
1846 			continue;
1847 		}
1848 dump_em:
1849 		lp->valid = 0;
1850 		isp_prt(isp, ISP_LOGINFO,
1851 		    ldumped, loopid, lp->loopid, lp->portid);
1852 		mbs.param[0] = MBOX_FABRIC_LOGOUT;
1853 		mbs.param[1] = lp->loopid << 8;
1854 		mbs.param[2] = 0;
1855 		mbs.param[3] = 0;
1856 		isp_mboxcmd(isp, &mbs, MBLOGNONE);
1857 		if (fcp->isp_fwstate != FW_READY ||
1858 		    fcp->isp_loopstate != LOOP_SYNCING_PDB) {
1859 			return (-1);
1860 		}
1861 	}
1862 	/*
1863 	 * If we get here, we've for sure seen not only a valid loop
1864 	 * but know what is or isn't on it, so mark this for usage
1865 	 * in isp_start.
1866 	 */
1867 	fcp->loop_seen_once = 1;
1868 	fcp->isp_loopstate = LOOP_READY;
1869 	return (0);
1870 }
1871 
1872 static int
1873 isp_scan_loop(struct ispsoftc *isp)
1874 {
1875 	struct lportdb *lp;
1876 	fcparam *fcp = isp->isp_param;
1877 	isp_pdb_t pdb;
1878 	int loopid, lim, hival;
1879 
1880 	switch (fcp->isp_topo) {
1881 	case TOPO_NL_PORT:
1882 		hival = FL_PORT_ID;
1883 		break;
1884 	case TOPO_N_PORT:
1885 		hival = 2;
1886 		break;
1887 	case TOPO_FL_PORT:
1888 		hival = FC_PORT_ID;
1889 		break;
1890 	default:
1891 		fcp->isp_loopstate = LOOP_LSCAN_DONE;
1892 		return (0);
1893 	}
1894 	fcp->isp_loopstate = LOOP_SCANNING_LOOP;
1895 
1896 	/*
1897 	 * make sure the temp port database is clean...
1898 	 */
1899 	MEMZERO((void *)fcp->tport, sizeof (fcp->tport));
1900 
1901 	/*
1902 	 * Run through the local loop ports and get port database info
1903 	 * for each loop ID.
1904 	 *
1905 	 * There's a somewhat unexplained situation where the f/w passes back
1906 	 * the wrong database entity- if that happens, just restart (up to
1907 	 * FL_PORT_ID times).
1908 	 */
1909 	for (lim = loopid = 0; loopid < hival; loopid++) {
1910 		lp = &fcp->tport[loopid];
1911 
1912 		/*
1913 		 * Don't even try for ourselves...
1914 	 	 */
1915 		if (loopid == fcp->isp_loopid)
1916 			continue;
1917 
1918 		lp->node_wwn = isp_get_portname(isp, loopid, 1);
1919 		if (fcp->isp_loopstate < LOOP_SCANNING_LOOP)
1920 			return (-1);
1921 		if (lp->node_wwn == 0)
1922 			continue;
1923 		lp->port_wwn = isp_get_portname(isp, loopid, 0);
1924 		if (fcp->isp_loopstate < LOOP_SCANNING_LOOP)
1925 			return (-1);
1926 		if (lp->port_wwn == 0) {
1927 			lp->node_wwn = 0;
1928 			continue;
1929 		}
1930 
1931 		/*
1932 		 * Get an entry....
1933 		 */
1934 		if (isp_getpdb(isp, loopid, &pdb) != 0) {
1935 			if (fcp->isp_loopstate < LOOP_SCANNING_LOOP)
1936 				return (-1);
1937 			continue;
1938 		}
1939 		if (fcp->isp_loopstate < LOOP_SCANNING_LOOP) {
1940 			return (-1);
1941 		}
1942 
1943 		/*
1944 		 * If the returned database element doesn't match what we
1945 		 * asked for, restart the process entirely (up to a point...).
1946 		 */
1947 		if (pdb.pdb_loopid != loopid) {
1948 			loopid = 0;
1949 			if (lim++ < hival) {
1950 				continue;
1951 			}
1952 			isp_prt(isp, ISP_LOGWARN,
1953 			    "giving up on synchronizing the port database");
1954 			return (-1);
1955 		}
1956 
1957 		/*
1958 		 * Save the pertinent info locally.
1959 		 */
1960 		lp->node_wwn =
1961 		    (((u_int64_t)pdb.pdb_nodename[0]) << 56) |
1962 		    (((u_int64_t)pdb.pdb_nodename[1]) << 48) |
1963 		    (((u_int64_t)pdb.pdb_nodename[2]) << 40) |
1964 		    (((u_int64_t)pdb.pdb_nodename[3]) << 32) |
1965 		    (((u_int64_t)pdb.pdb_nodename[4]) << 24) |
1966 		    (((u_int64_t)pdb.pdb_nodename[5]) << 16) |
1967 		    (((u_int64_t)pdb.pdb_nodename[6]) <<  8) |
1968 		    (((u_int64_t)pdb.pdb_nodename[7]));
1969 		lp->port_wwn =
1970 		    (((u_int64_t)pdb.pdb_portname[0]) << 56) |
1971 		    (((u_int64_t)pdb.pdb_portname[1]) << 48) |
1972 		    (((u_int64_t)pdb.pdb_portname[2]) << 40) |
1973 		    (((u_int64_t)pdb.pdb_portname[3]) << 32) |
1974 		    (((u_int64_t)pdb.pdb_portname[4]) << 24) |
1975 		    (((u_int64_t)pdb.pdb_portname[5]) << 16) |
1976 		    (((u_int64_t)pdb.pdb_portname[6]) <<  8) |
1977 		    (((u_int64_t)pdb.pdb_portname[7]));
1978 		lp->roles =
1979 		    (pdb.pdb_prli_svc3 & SVC3_ROLE_MASK) >> SVC3_ROLE_SHIFT;
1980 		lp->portid = BITS2WORD(pdb.pdb_portid_bits);
1981 		lp->loopid = pdb.pdb_loopid;
1982 	}
1983 
1984 	/*
1985 	 * Mark all of the permanent local loop database entries as invalid
1986 	 * (except our own entry).
1987 	 */
1988 	for (loopid = 0; loopid < hival; loopid++) {
1989 		if (loopid == fcp->isp_iid) {
1990 			fcp->portdb[loopid].valid = 1;
1991 			fcp->portdb[loopid].loopid = fcp->isp_loopid;
1992 			continue;
1993 		}
1994 		fcp->portdb[loopid].valid = 0;
1995 	}
1996 
1997 	/*
1998 	 * Now merge our local copy of the port database into our saved copy.
1999 	 * Notify the outer layers of new devices arriving.
2000 	 */
2001 	for (loopid = 0; loopid < hival; loopid++) {
2002 		int i;
2003 
2004 		/*
2005 		 * If we don't have a non-zero Port WWN, we're not here.
2006 		 */
2007 		if (fcp->tport[loopid].port_wwn == 0) {
2008 			continue;
2009 		}
2010 
2011 		/*
2012 		 * Skip ourselves.
2013 		 */
2014 		if (loopid == fcp->isp_iid) {
2015 			continue;
2016 		}
2017 
2018 		/*
2019 		 * For the purposes of deciding whether this is the
2020 		 * 'same' device or not, we only search for an identical
2021 		 * Port WWN. Node WWNs may or may not be the same as
2022 		 * the Port WWN, and there may be multiple different
2023 		 * Port WWNs with the same Node WWN. It would be chaos
2024 		 * to have multiple identical Port WWNs, so we don't
2025 		 * allow that.
2026 		 */
2027 
2028 		for (i = 0; i < hival; i++) {
2029 			int j;
2030 			if (fcp->portdb[i].port_wwn == 0)
2031 				continue;
2032 			if (fcp->portdb[i].port_wwn !=
2033 			    fcp->tport[loopid].port_wwn)
2034 				continue;
2035 			/*
2036 			 * We found this WWN elsewhere- it's changed
2037 			 * loopids then. We don't change it's actual
2038 			 * position in our cached port database- we
2039 			 * just change the actual loop ID we'd use.
2040 			 */
2041 			if (fcp->portdb[i].loopid != loopid) {
2042 				isp_prt(isp, ISP_LOGINFO, portshift, i,
2043 				    fcp->portdb[i].loopid,
2044 				    fcp->portdb[i].portid, loopid,
2045 				    fcp->tport[loopid].portid);
2046 			}
2047 			fcp->portdb[i].portid = fcp->tport[loopid].portid;
2048 			fcp->portdb[i].loopid = loopid;
2049 			fcp->portdb[i].valid = 1;
2050 			fcp->portdb[i].roles = fcp->tport[loopid].roles;
2051 
2052 			/*
2053 			 * Now make sure this Port WWN doesn't exist elsewhere
2054 			 * in the port database.
2055 			 */
2056 			for (j = i+1; j < hival; j++) {
2057 				if (fcp->portdb[i].port_wwn !=
2058 				    fcp->portdb[j].port_wwn) {
2059 					continue;
2060 				}
2061 				isp_prt(isp, ISP_LOGWARN, portdup, j, i);
2062 				/*
2063 				 * Invalidate the 'old' *and* 'new' ones.
2064 				 * This is really harsh and not quite right,
2065 				 * but if this happens, we really don't know
2066 				 * who is what at this point.
2067 				 */
2068 				fcp->portdb[i].valid = 0;
2069 				fcp->portdb[j].valid = 0;
2070 			}
2071 			break;
2072 		}
2073 
2074 		/*
2075 		 * If we didn't traverse the entire port database,
2076 		 * then we found (and remapped) an existing entry.
2077 		 * No need to notify anyone- go for the next one.
2078 		 */
2079 		if (i < hival) {
2080 			isp_prt(isp, ISP_LOGINFO, retained,
2081 			    fcp->portdb[i].loopid, i, fcp->portdb[i].portid);
2082 			continue;
2083 		}
2084 
2085 		/*
2086 		 * We've not found this Port WWN anywhere. It's a new entry.
2087 		 * See if we can leave it where it is (with target == loopid).
2088 		 */
2089 		if (fcp->portdb[loopid].port_wwn != 0) {
2090 			for (lim = 0; lim < hival; lim++) {
2091 				if (fcp->portdb[lim].port_wwn == 0)
2092 					break;
2093 			}
2094 			/* "Cannot Happen" */
2095 			if (lim == hival) {
2096 				isp_prt(isp, ISP_LOGWARN, "Remap Overflow");
2097 				continue;
2098 			}
2099 			i = lim;
2100 		} else {
2101 			i = loopid;
2102 		}
2103 
2104 		/*
2105 		 * NB:	The actual loopid we use here is loopid- we may
2106 		 *	in fact be at a completely different index (target).
2107 		 */
2108 		fcp->portdb[i].loopid = loopid;
2109 		fcp->portdb[i].port_wwn = fcp->tport[loopid].port_wwn;
2110 		fcp->portdb[i].node_wwn = fcp->tport[loopid].node_wwn;
2111 		fcp->portdb[i].roles = fcp->tport[loopid].roles;
2112 		fcp->portdb[i].portid = fcp->tport[loopid].portid;
2113 		fcp->portdb[i].valid = 1;
2114 
2115 		/*
2116 		 * Tell the outside world we've arrived.
2117 		 */
2118 		(void) isp_async(isp, ISPASYNC_PROMENADE, &i);
2119 	}
2120 
2121 	/*
2122 	 * Now find all previously used targets that are now invalid and
2123 	 * notify the outer layers that they're gone.
2124 	 */
2125 	for (lp = &fcp->portdb[0]; lp < &fcp->portdb[hival]; lp++) {
2126 		if (lp->valid || lp->port_wwn == 0) {
2127 			continue;
2128 		}
2129 
2130 		/*
2131 		 * Tell the outside world we've gone
2132 		 * away and erase our pdb entry.
2133 		 *
2134 		 */
2135 		loopid = lp - fcp->portdb;
2136 		(void) isp_async(isp, ISPASYNC_PROMENADE, &loopid);
2137 		MEMZERO((void *) lp, sizeof (*lp));
2138 	}
2139 	fcp->isp_loopstate = LOOP_LSCAN_DONE;
2140 	return (0);
2141 }
2142 
2143 static int
2144 isp_scan_fabric(struct ispsoftc *isp)
2145 {
2146 	fcparam *fcp = isp->isp_param;
2147 	u_int32_t portid, first_portid;
2148 	sns_screq_t *reqp;
2149 	sns_scrsp_t *resp;
2150 	mbreg_t mbs;
2151 	int hicap, first_portid_seen;
2152 
2153 	if (fcp->isp_onfabric == 0) {
2154 		fcp->isp_loopstate = LOOP_FSCAN_DONE;
2155 		return (0);
2156 	}
2157 
2158 	reqp = (sns_screq_t *) fcp->isp_scratch;
2159 	resp = (sns_scrsp_t *) (&((char *)fcp->isp_scratch)[0x100]);
2160 	/*
2161 	 * Since Port IDs are 24 bits, we can check against having seen
2162 	 * anything yet with this value.
2163 	 */
2164 	first_portid = portid = fcp->isp_portid;
2165 	fcp->isp_loopstate = LOOP_SCANNING_FABRIC;
2166 
2167 	for (first_portid_seen = hicap = 0; hicap < 65535; hicap++) {
2168 		MEMZERO((void *) reqp, SNS_GAN_REQ_SIZE);
2169 		reqp->snscb_rblen = SNS_GAN_RESP_SIZE >> 1;
2170 		reqp->snscb_addr[RQRSP_ADDR0015] =
2171 			DMA_LSW(fcp->isp_scdma + 0x100);
2172 		reqp->snscb_addr[RQRSP_ADDR1631] =
2173 			DMA_MSW(fcp->isp_scdma + 0x100);
2174 		reqp->snscb_sblen = 6;
2175 		reqp->snscb_data[0] = SNS_GAN;
2176 		reqp->snscb_data[4] = portid & 0xffff;
2177 		reqp->snscb_data[5] = (portid >> 16) & 0xff;
2178 		ISP_SWIZZLE_SNS_REQ(isp, reqp);
2179 		mbs.param[0] = MBOX_SEND_SNS;
2180 		mbs.param[1] = SNS_GAN_REQ_SIZE >> 1;
2181 		mbs.param[2] = DMA_MSW(fcp->isp_scdma);
2182 		mbs.param[3] = DMA_LSW(fcp->isp_scdma);
2183 		mbs.param[6] = 0;
2184 		mbs.param[7] = 0;
2185 		isp_mboxcmd(isp, &mbs, MBLOGALL);
2186 		if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
2187 			if (fcp->isp_loopstate == LOOP_SCANNING_FABRIC) {
2188 				fcp->isp_loopstate = LOOP_PDB_RCVD;
2189 			}
2190 			return (-1);
2191 		}
2192 		if (fcp->isp_fwstate != FW_READY ||
2193 		    fcp->isp_loopstate < LOOP_SCANNING_FABRIC) {
2194 			return (-1);
2195 		}
2196 		ISP_UNSWIZZLE_SNS_RSP(isp, resp, SNS_GAN_RESP_SIZE >> 1);
2197 		portid = (((u_int32_t) resp->snscb_port_id[0]) << 16) |
2198 		    (((u_int32_t) resp->snscb_port_id[1]) << 8) |
2199 		    (((u_int32_t) resp->snscb_port_id[2]));
2200 		(void) isp_async(isp, ISPASYNC_FABRIC_DEV, resp);
2201 		if (first_portid == portid) {
2202 			fcp->isp_loopstate = LOOP_FSCAN_DONE;
2203 			return (0);
2204 		}
2205 	}
2206 
2207 	isp_prt(isp, ISP_LOGWARN, "broken fabric nameserver...*wheeze*...");
2208 
2209 	/*
2210 	 * We either have a broken name server or a huge fabric if we get here.
2211 	 */
2212 	fcp->isp_loopstate = LOOP_FSCAN_DONE;
2213 	return (0);
2214 }
2215 
2216 static void
2217 isp_register_fc4_type(struct ispsoftc *isp)
2218 {
2219 	fcparam *fcp = isp->isp_param;
2220 	sns_screq_t *reqp;
2221 	mbreg_t mbs;
2222 
2223 	reqp = (sns_screq_t *) fcp->isp_scratch;
2224 	MEMZERO((void *) reqp, SNS_RFT_REQ_SIZE);
2225 	reqp->snscb_rblen = SNS_RFT_RESP_SIZE >> 1;
2226 	reqp->snscb_addr[RQRSP_ADDR0015] = DMA_LSW(fcp->isp_scdma + 0x100);
2227 	reqp->snscb_addr[RQRSP_ADDR1631] = DMA_MSW(fcp->isp_scdma + 0x100);
2228 	reqp->snscb_sblen = 22;
2229 	reqp->snscb_data[0] = SNS_RFT;
2230 	reqp->snscb_data[4] = fcp->isp_portid & 0xffff;
2231 	reqp->snscb_data[5] = (fcp->isp_portid >> 16) & 0xff;
2232 	reqp->snscb_data[6] = 0x100;	/* SCS - FCP */
2233 #if	0
2234 	reqp->snscb_data[6] |= 20;	/* ISO/IEC 8802-2 LLC/SNAP */
2235 #endif
2236 	ISP_SWIZZLE_SNS_REQ(isp, reqp);
2237 	mbs.param[0] = MBOX_SEND_SNS;
2238 	mbs.param[1] = SNS_RFT_REQ_SIZE >> 1;
2239 	mbs.param[2] = DMA_MSW(fcp->isp_scdma);
2240 	mbs.param[3] = DMA_LSW(fcp->isp_scdma);
2241 	mbs.param[6] = 0;
2242 	mbs.param[7] = 0;
2243 	isp_mboxcmd(isp, &mbs, MBLOGALL);
2244 	if (mbs.param[0] == MBOX_COMMAND_COMPLETE) {
2245 		isp_prt(isp, ISP_LOGDEBUG0, "Register FC4 types succeeded");
2246 	}
2247 }
2248 
2249 /*
2250  * Start a command. Locking is assumed done in the caller.
2251  */
2252 
2253 int
2254 isp_start(XS_T *xs)
2255 {
2256 	struct ispsoftc *isp;
2257 	u_int16_t iptr, optr, handle;
2258 	union {
2259 		ispreq_t *_reqp;
2260 		ispreqt2_t *_t2reqp;
2261 	} _u;
2262 #define	reqp	_u._reqp
2263 #define	t2reqp	_u._t2reqp
2264 #define	UZSIZE	max(sizeof (ispreq_t), sizeof (ispreqt2_t))
2265 	int target, i;
2266 
2267 	XS_INITERR(xs);
2268 	isp = XS_ISP(xs);
2269 
2270 	/*
2271 	 * Check to make sure we're supporting initiator role.
2272 	 */
2273 	if ((isp->isp_role & ISP_ROLE_INITIATOR) == 0) {
2274 		XS_SETERR(xs, HBA_SELTIMEOUT);
2275 		return (CMD_COMPLETE);
2276 	}
2277 
2278 	/*
2279 	 * Now make sure we're running.
2280 	 */
2281 
2282 	if (isp->isp_state != ISP_RUNSTATE) {
2283 		isp_prt(isp, ISP_LOGERR, "Adapter not at RUNSTATE");
2284 		XS_SETERR(xs, HBA_BOTCH);
2285 		return (CMD_COMPLETE);
2286 	}
2287 
2288 	/*
2289 	 * Check command CDB length, etc.. We really are limited to 16 bytes
2290 	 * for Fibre Channel, but can do up to 44 bytes in parallel SCSI,
2291 	 * but probably only if we're running fairly new firmware (we'll
2292 	 * let the old f/w choke on an extended command queue entry).
2293 	 */
2294 
2295 	if (XS_CDBLEN(xs) > (IS_FC(isp)? 16 : 44) || XS_CDBLEN(xs) == 0) {
2296 		isp_prt(isp, ISP_LOGERR,
2297 		    "unsupported cdb length (%d, CDB[0]=0x%x)",
2298 		    XS_CDBLEN(xs), XS_CDBP(xs)[0] & 0xff);
2299 		XS_SETERR(xs, HBA_BOTCH);
2300 		return (CMD_COMPLETE);
2301 	}
2302 
2303 	/*
2304 	 * Check to see whether we have good firmware state still or
2305 	 * need to refresh our port database for this target.
2306 	 */
2307 	target = XS_TGT(xs);
2308 	if (IS_FC(isp)) {
2309 		fcparam *fcp = isp->isp_param;
2310 		struct lportdb *lp;
2311 #ifdef	HANDLE_LOOPSTATE_IN_OUTER_LAYERS
2312 		if (fcp->isp_fwstate != FW_READY ||
2313 		    fcp->isp_loopstate != LOOP_READY) {
2314 			return (CMD_RQLATER);
2315 		}
2316 
2317 		/*
2318 		 * If we're not on a Fabric, we can't have a target
2319 		 * above FL_PORT_ID-1.
2320 		 *
2321 		 * If we're on a fabric and *not* connected as an F-port,
2322 		 * we can't have a target less than FC_SNS_ID+1. This
2323 		 * keeps us from having to sort out the difference between
2324 		 * local public loop devices and those which we might get
2325 		 * from a switch's database.
2326 		 */
2327 		if (fcp->isp_onfabric == 0) {
2328 			if (target >= FL_PORT_ID) {
2329 				XS_SETERR(xs, HBA_SELTIMEOUT);
2330 				return (CMD_COMPLETE);
2331 			}
2332 		} else {
2333 			if (target >= FL_PORT_ID && target <= FC_SNS_ID) {
2334 				XS_SETERR(xs, HBA_SELTIMEOUT);
2335 				return (CMD_COMPLETE);
2336 			}
2337 			if (fcp->isp_topo != TOPO_F_PORT &&
2338 			    target < FL_PORT_ID) {
2339 				XS_SETERR(xs, HBA_SELTIMEOUT);
2340 				return (CMD_COMPLETE);
2341 			}
2342 		}
2343 #else
2344 		/*
2345 		 * Check for f/w being in ready state. If the f/w
2346 		 * isn't in ready state, then we don't know our
2347 		 * loop ID and the f/w hasn't completed logging
2348 		 * into all targets on the loop. If this is the
2349 		 * case, then bounce the command. We pretend this is
2350 		 * a SELECTION TIMEOUT error if we've never gone to
2351 		 * FW_READY state at all- in this case we may not
2352 		 * be hooked to a loop at all and we shouldn't hang
2353 		 * the machine for this. Otherwise, defer this command
2354 		 * until later.
2355 		 */
2356 		if (fcp->isp_fwstate != FW_READY) {
2357 			/*
2358 			 * Give ourselves at most a 250ms delay.
2359 			 */
2360 			if (isp_fclink_test(isp, 250000)) {
2361 				XS_SETERR(xs, HBA_SELTIMEOUT);
2362 				if (fcp->loop_seen_once) {
2363 					return (CMD_RQLATER);
2364 				} else {
2365 					return (CMD_COMPLETE);
2366 				}
2367 			}
2368 		}
2369 
2370 		/*
2371 		 * If we're not on a Fabric, we can't have a target
2372 		 * above FL_PORT_ID-1.
2373 		 *
2374 		 * If we're on a fabric and *not* connected as an F-port,
2375 		 * we can't have a target less than FC_SNS_ID+1. This
2376 		 * keeps us from having to sort out the difference between
2377 		 * local public loop devices and those which we might get
2378 		 * from a switch's database.
2379 		 */
2380 		if (fcp->isp_onfabric == 0) {
2381 			if (target >= FL_PORT_ID) {
2382 				XS_SETERR(xs, HBA_SELTIMEOUT);
2383 				return (CMD_COMPLETE);
2384 			}
2385 		} else {
2386 			if (target >= FL_PORT_ID && target <= FC_SNS_ID) {
2387 				XS_SETERR(xs, HBA_SELTIMEOUT);
2388 				return (CMD_COMPLETE);
2389 			}
2390 			if (fcp->isp_topo != TOPO_F_PORT &&
2391 			    target < FL_PORT_ID) {
2392 				XS_SETERR(xs, HBA_SELTIMEOUT);
2393 				return (CMD_COMPLETE);
2394 			}
2395 		}
2396 
2397 		/*
2398 		 * If our loop state is such that we haven't yet received
2399 		 * a "Port Database Changed" notification (after a LIP or
2400 		 * a Loop Reset or firmware initialization), then defer
2401 		 * sending commands for a little while, but only if we've
2402 		 * seen a valid loop at one point (otherwise we can get
2403 		 * stuck at initialization time).
2404 		 */
2405 		if (fcp->isp_loopstate < LOOP_PDB_RCVD) {
2406 			XS_SETERR(xs, HBA_SELTIMEOUT);
2407 			if (fcp->loop_seen_once) {
2408 				return (CMD_RQLATER);
2409 			} else {
2410 				return (CMD_COMPLETE);
2411 			}
2412 		}
2413 
2414 		/*
2415 		 * If we're in the middle of loop or fabric scanning
2416 		 * or merging the port databases, retry this command later.
2417 		 */
2418 		if (fcp->isp_loopstate == LOOP_SCANNING_FABRIC ||
2419 		    fcp->isp_loopstate == LOOP_SCANNING_LOOP ||
2420 		    fcp->isp_loopstate == LOOP_SYNCING_PDB) {
2421 			return (CMD_RQLATER);
2422 		}
2423 
2424 		/*
2425 		 * If our loop state is now such that we've just now
2426 		 * received a Port Database Change notification, then
2427 		 * we have to go off and (re)scan the fabric. We back
2428 		 * out and try again later if this doesn't work.
2429 		 */
2430 		if (fcp->isp_loopstate == LOOP_PDB_RCVD && fcp->isp_onfabric) {
2431 			if (isp_scan_fabric(isp)) {
2432 				return (CMD_RQLATER);
2433 			}
2434 			if (fcp->isp_fwstate != FW_READY ||
2435 			    fcp->isp_loopstate < LOOP_PDB_RCVD) {
2436 				return (CMD_RQLATER);
2437 			}
2438 		}
2439 
2440 		/*
2441 		 * If our loop state is now such that we've just now
2442 		 * received a Port Database Change notification, then
2443 		 * we have to go off and (re)synchronize our port
2444 		 * database.
2445 		 */
2446 		if (fcp->isp_loopstate < LOOP_READY) {
2447 			if (isp_pdb_sync(isp)) {
2448 				return (CMD_RQLATER);
2449 			}
2450 			if (fcp->isp_fwstate != FW_READY ||
2451 			    fcp->isp_loopstate != LOOP_READY) {
2452 				return (CMD_RQLATER);
2453 			}
2454 		}
2455 
2456 		/*
2457 		 * XXX: Here's were we would cancel any loop_dead flag
2458 		 * XXX: also cancel in dead_loop timeout that's running
2459 		 */
2460 #endif
2461 
2462 		/*
2463 		 * Now check whether we should even think about pursuing this.
2464 		 */
2465 		lp = &fcp->portdb[target];
2466 		if (lp->valid == 0) {
2467 			XS_SETERR(xs, HBA_SELTIMEOUT);
2468 			return (CMD_COMPLETE);
2469 		}
2470 		if ((lp->roles & (SVC3_TGT_ROLE >> SVC3_ROLE_SHIFT)) == 0) {
2471 			isp_prt(isp, ISP_LOGDEBUG2,
2472 			    "Target %d does not have target service", target);
2473 			XS_SETERR(xs, HBA_SELTIMEOUT);
2474 			return (CMD_COMPLETE);
2475 		}
2476 		/*
2477 		 * Now turn target into what the actual Loop ID is.
2478 		 */
2479 		target = lp->loopid;
2480 	}
2481 
2482 	/*
2483 	 * Next check to see if any HBA or Device
2484 	 * parameters need to be updated.
2485 	 */
2486 	if (isp->isp_update != 0) {
2487 		isp_update(isp);
2488 	}
2489 
2490 	if (isp_getrqentry(isp, &iptr, &optr, (void **) &reqp)) {
2491 		isp_prt(isp, ISP_LOGDEBUG0, "Request Queue Overflow");
2492 		XS_SETERR(xs, HBA_BOTCH);
2493 		return (CMD_EAGAIN);
2494 	}
2495 
2496 	/*
2497 	 * Now see if we need to synchronize the ISP with respect to anything.
2498 	 * We do dual duty here (cough) for synchronizing for busses other
2499 	 * than which we got here to send a command to.
2500 	 */
2501 	if (isp->isp_sendmarker) {
2502 		u_int8_t n = (IS_DUALBUS(isp)? 2: 1);
2503 		/*
2504 		 * Check ports to send markers for...
2505 		 */
2506 		for (i = 0; i < n; i++) {
2507 			if ((isp->isp_sendmarker & (1 << i)) == 0) {
2508 				continue;
2509 			}
2510 			MEMZERO((void *) reqp, sizeof (*reqp));
2511 			reqp->req_header.rqs_entry_count = 1;
2512 			reqp->req_header.rqs_entry_type = RQSTYPE_MARKER;
2513 			reqp->req_modifier = SYNC_ALL;
2514 			reqp->req_target = i << 7;	/* insert bus number */
2515 			ISP_SWIZZLE_REQUEST(isp, reqp);
2516 			ISP_ADD_REQUEST(isp, iptr);
2517 
2518 			if (isp_getrqentry(isp, &iptr, &optr, (void **)&reqp)) {
2519 				isp_prt(isp, ISP_LOGDEBUG0,
2520 				    "Request Queue Overflow+");
2521 				XS_SETERR(xs, HBA_BOTCH);
2522 				return (CMD_EAGAIN);
2523 			}
2524 		}
2525 	}
2526 
2527 	MEMZERO((void *) reqp, UZSIZE);
2528 	reqp->req_header.rqs_entry_count = 1;
2529 	if (IS_FC(isp)) {
2530 		reqp->req_header.rqs_entry_type = RQSTYPE_T2RQS;
2531 	} else {
2532 		if (XS_CDBLEN(xs) > 12)
2533 			reqp->req_header.rqs_entry_type = RQSTYPE_CMDONLY;
2534 		else
2535 			reqp->req_header.rqs_entry_type = RQSTYPE_REQUEST;
2536 	}
2537 	reqp->req_header.rqs_flags = 0;
2538 	reqp->req_header.rqs_seqno = 0;
2539 	if (IS_FC(isp)) {
2540 		/*
2541 		 * See comment in isp_intr
2542 		 */
2543 		XS_RESID(xs) = 0;
2544 
2545 		/*
2546 		 * Fibre Channel always requires some kind of tag.
2547 		 * The Qlogic drivers seem be happy not to use a tag,
2548 		 * but this breaks for some devices (IBM drives).
2549 		 */
2550 		if (XS_TAG_P(xs)) {
2551 			t2reqp->req_flags = XS_TAG_TYPE(xs);
2552 		} else {
2553 			/*
2554 			 * If we don't know what tag to use, use HEAD OF QUEUE
2555 			 * for Request Sense or Ordered (for safety's sake).
2556 			 */
2557 			if (XS_CDBP(xs)[0] == 0x3)	/* REQUEST SENSE */
2558 				t2reqp->req_flags = REQFLAG_HTAG;
2559 			else
2560 				t2reqp->req_flags = REQFLAG_OTAG;
2561 		}
2562 	} else {
2563 		sdparam *sdp = (sdparam *)isp->isp_param;
2564 		if ((sdp->isp_devparam[target].cur_dflags & DPARM_TQING) &&
2565 		    XS_TAG_P(xs)) {
2566 			reqp->req_flags = XS_TAG_TYPE(xs);
2567 		}
2568 	}
2569 	reqp->req_target = target | (XS_CHANNEL(xs) << 7);
2570 	if (IS_SCSI(isp)) {
2571 		reqp->req_lun_trn = XS_LUN(xs);
2572 		reqp->req_cdblen = XS_CDBLEN(xs);
2573 	} else {
2574 		if (isp->isp_maxluns > 16)
2575 			t2reqp->req_scclun = XS_LUN(xs);
2576 		else
2577 			t2reqp->req_lun_trn = XS_LUN(xs);
2578 	}
2579 	MEMCPY(reqp->req_cdb, XS_CDBP(xs), XS_CDBLEN(xs));
2580 
2581 	reqp->req_time = XS_TIME(xs) / 1000;
2582 	if (reqp->req_time == 0 && XS_TIME(xs))
2583 		reqp->req_time = 1;
2584 
2585 	/*
2586 	 * Always give a bit more leeway to commands after a bus reset.
2587 	 * XXX: DOES NOT DISTINGUISH WHICH PORT MAY HAVE BEEN SYNCED
2588 	 */
2589 	if (isp->isp_sendmarker && reqp->req_time < 5) {
2590 		reqp->req_time = 5;
2591 	}
2592 	if (isp_save_xs(isp, xs, &handle)) {
2593 		isp_prt(isp, ISP_LOGDEBUG1, "out of xflist pointers");
2594 		XS_SETERR(xs, HBA_BOTCH);
2595 		return (CMD_EAGAIN);
2596 	}
2597 	reqp->req_handle = handle;
2598 	/*
2599 	 * Set up DMA and/or do any bus swizzling of the request entry
2600 	 * so that the Qlogic F/W understands what is being asked of it.
2601  	*/
2602 	i = ISP_DMASETUP(isp, xs, reqp, &iptr, optr);
2603 	if (i != CMD_QUEUED) {
2604 		isp_destroy_handle(isp, handle);
2605 		/*
2606 		 * dmasetup sets actual error in packet, and
2607 		 * return what we were given to return.
2608 		 */
2609 		return (i);
2610 	}
2611 	XS_SETERR(xs, HBA_NOERROR);
2612 	isp_prt(isp, ISP_LOGDEBUG2,
2613 	    "START cmd for %d.%d.%d cmd 0x%x datalen %ld",
2614 	    XS_CHANNEL(xs), target, XS_LUN(xs), XS_CDBP(xs)[0],
2615 	    (long) XS_XFRLEN(xs));
2616 	ISP_ADD_REQUEST(isp, iptr);
2617 	isp->isp_nactive++;
2618 	if (isp->isp_sendmarker)
2619 		isp->isp_sendmarker = 0;
2620 	return (CMD_QUEUED);
2621 #undef	reqp
2622 #undef	t2reqp
2623 }
2624 
2625 /*
2626  * isp control
2627  * Locks (ints blocked) assumed held.
2628  */
2629 
2630 int
2631 isp_control(struct ispsoftc *isp, ispctl_t ctl, void *arg)
2632 {
2633 	XS_T *xs;
2634 	mbreg_t mbs;
2635 	int bus, tgt;
2636 	u_int16_t handle;
2637 
2638 	switch (ctl) {
2639 	default:
2640 		isp_prt(isp, ISP_LOGERR, "Unknown Control Opcode 0x%x", ctl);
2641 		break;
2642 
2643 	case ISPCTL_RESET_BUS:
2644 		/*
2645 		 * Issue a bus reset.
2646 		 */
2647 		mbs.param[0] = MBOX_BUS_RESET;
2648 		mbs.param[2] = 0;
2649 		if (IS_SCSI(isp)) {
2650 			mbs.param[1] =
2651 			    ((sdparam *) isp->isp_param)->isp_bus_reset_delay;
2652 			if (mbs.param[1] < 2)
2653 				mbs.param[1] = 2;
2654 			bus = *((int *) arg);
2655 			if (IS_DUALBUS(isp))
2656 				mbs.param[2] = bus;
2657 		} else {
2658 			mbs.param[1] = 10;
2659 			bus = 0;
2660 		}
2661 		isp->isp_sendmarker |= (1 << bus);
2662 		isp_mboxcmd(isp, &mbs, MBLOGALL);
2663 		if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
2664 			break;
2665 		}
2666 		isp_prt(isp, ISP_LOGINFO,
2667 		    "driver initiated bus reset of bus %d", bus);
2668 		return (0);
2669 
2670 	case ISPCTL_RESET_DEV:
2671 		tgt = (*((int *) arg)) & 0xffff;
2672 		bus = (*((int *) arg)) >> 16;
2673 		mbs.param[0] = MBOX_ABORT_TARGET;
2674 		mbs.param[1] = (tgt << 8) | (bus << 15);
2675 		mbs.param[2] = 3;	/* 'delay', in seconds */
2676 		isp_mboxcmd(isp, &mbs, MBLOGALL);
2677 		if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
2678 			break;
2679 		}
2680 		isp_prt(isp, ISP_LOGINFO,
2681 		    "Target %d on Bus %d Reset Succeeded", tgt, bus);
2682 		isp->isp_sendmarker |= (1 << bus);
2683 		return (0);
2684 
2685 	case ISPCTL_ABORT_CMD:
2686 		xs = (XS_T *) arg;
2687 		tgt = XS_TGT(xs);
2688 		handle = isp_find_handle(isp, xs);
2689 		if (handle == 0) {
2690 			isp_prt(isp, ISP_LOGWARN,
2691 			    "cannot find handle for command to abort");
2692 			break;
2693 		}
2694 		bus = XS_CHANNEL(xs);
2695 		mbs.param[0] = MBOX_ABORT;
2696 		if (IS_FC(isp)) {
2697 			if (isp->isp_maxluns > 16) {
2698 				mbs.param[1] = tgt << 8;
2699 				mbs.param[4] = 0;
2700 				mbs.param[5] = 0;
2701 				mbs.param[6] = XS_LUN(xs);
2702 			} else {
2703 				mbs.param[1] = tgt << 8 | XS_LUN(xs);
2704 			}
2705 		} else {
2706 			mbs.param[1] =
2707 			    (bus << 15) | (XS_TGT(xs) << 8) | XS_LUN(xs);
2708 		}
2709 		mbs.param[3] = 0;
2710 		mbs.param[2] = handle;
2711 		isp_mboxcmd(isp, &mbs, MBLOGALL & ~MBOX_COMMAND_ERROR);
2712 		if (mbs.param[0] == MBOX_COMMAND_COMPLETE) {
2713 			return (0);
2714 		}
2715 		/*
2716 		 * XXX: Look for command in the REQUEST QUEUE. That is,
2717 		 * XXX: It hasen't been picked up by firmware yet.
2718 		 */
2719 		break;
2720 
2721 	case ISPCTL_UPDATE_PARAMS:
2722 
2723 		isp_update(isp);
2724 		return (0);
2725 
2726 	case ISPCTL_FCLINK_TEST:
2727 
2728 		if (IS_FC(isp)) {
2729 			int usdelay = (arg)? *((int *) arg) : 250000;
2730 			return (isp_fclink_test(isp, usdelay));
2731 		}
2732 		break;
2733 
2734 	case ISPCTL_SCAN_FABRIC:
2735 
2736 		if (IS_FC(isp)) {
2737 			return (isp_scan_fabric(isp));
2738 		}
2739 		break;
2740 
2741 	case ISPCTL_SCAN_LOOP:
2742 
2743 		if (IS_FC(isp)) {
2744 			return (isp_scan_loop(isp));
2745 		}
2746 		break;
2747 
2748 	case ISPCTL_PDB_SYNC:
2749 
2750 		if (IS_FC(isp)) {
2751 			return (isp_pdb_sync(isp));
2752 		}
2753 		break;
2754 
2755 	case ISPCTL_SEND_LIP:
2756 
2757 		if (IS_FC(isp)) {
2758 			mbs.param[0] = MBOX_INIT_LIP;
2759 			isp_mboxcmd(isp, &mbs, MBLOGALL);
2760 			if (mbs.param[0] == MBOX_COMMAND_COMPLETE) {
2761 				return (0);
2762 			}
2763 		}
2764 		break;
2765 
2766 	case ISPCTL_GET_POSMAP:
2767 
2768 		if (IS_FC(isp) && arg) {
2769 			return (isp_getmap(isp, arg));
2770 		}
2771 		break;
2772 
2773 	case ISPCTL_RUN_MBOXCMD:
2774 
2775 		isp_mboxcmd(isp, arg, MBLOGALL);
2776 		return(0);
2777 
2778 #ifdef	ISP_TARGET_MODE
2779 	case ISPCTL_TOGGLE_TMODE:
2780 	{
2781 
2782 		/*
2783 		 * We don't check/set against role here- that's the
2784 		 * responsibility for the outer layer to coordinate.
2785 		 */
2786 		if (IS_SCSI(isp)) {
2787 			int param = *(int *)arg;
2788 			mbs.param[0] = MBOX_ENABLE_TARGET_MODE;
2789 			mbs.param[1] = param & 0xffff;
2790 			mbs.param[2] = param >> 16;
2791 			isp_mboxcmd(isp, &mbs, MBLOGALL);
2792 			if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
2793 				break;
2794 			}
2795 		}
2796 		return (0);
2797 	}
2798 #endif
2799 	}
2800 	return (-1);
2801 }
2802 
2803 /*
2804  * Interrupt Service Routine(s).
2805  *
2806  * External (OS) framework has done the appropriate locking,
2807  * and the locking will be held throughout this function.
2808  */
2809 
2810 /*
2811  * Limit our stack depth by sticking with the max likely number
2812  * of completions on a request queue at any one time.
2813  */
2814 #define	MAX_REQUESTQ_COMPLETIONS	32
2815 
2816 int
2817 isp_intr(void *arg)
2818 {
2819 	struct ispsoftc *isp = arg;
2820 	XS_T *complist[MAX_REQUESTQ_COMPLETIONS], *xs;
2821 	u_int16_t iptr, optr, isr, sema, junk;
2822 	int i, nlooked = 0, ndone = 0;
2823 
2824 	if (IS_2100(isp)) {
2825 		i = 0;
2826 		do {
2827 			isr = ISP_READ(isp, BIU_ISR);
2828 			junk = ISP_READ(isp, BIU_ISR);
2829 		} while (isr != junk && ++i < 1000);
2830 		if (isr != junk) {
2831 			isp_prt(isp, ISP_LOGWARN,
2832 			    "isr unsteady (%x, %x)", isr, junk);
2833 		}
2834 		i = 0;
2835 		do {
2836 			sema = ISP_READ(isp, BIU_SEMA);
2837 			junk = ISP_READ(isp, BIU_SEMA);
2838 		} while (sema != junk && ++i < 1000);
2839 		if (sema != junk) {
2840 			isp_prt(isp, ISP_LOGWARN,
2841 			    "sema unsteady (%x, %x)", sema, junk);
2842 		}
2843 	} else {
2844 		isr = ISP_READ(isp, BIU_ISR);
2845 		sema = ISP_READ(isp, BIU_SEMA);
2846 	}
2847 	isp_prt(isp, ISP_LOGDEBUG3, "isp_intr isr %x sem %x", isr, sema);
2848 	isr &= INT_PENDING_MASK(isp);
2849 	sema &= BIU_SEMA_LOCK;
2850 	isp->isp_intcnt++;
2851 	if (isr == 0 && sema == 0) {
2852 		isp->isp_intbogus++;
2853 		return (0);
2854 	}
2855 
2856 	if (sema) {
2857 		u_int16_t mbox;
2858 
2859 		if (IS_2100(isp)) {
2860 			i = 0;
2861 			do {
2862 				mbox = ISP_READ(isp, OUTMAILBOX0);
2863 				junk = ISP_READ(isp, OUTMAILBOX0);;
2864 			} while (junk != mbox && ++i < 1000);
2865 			if (mbox != junk) {
2866 				isp_prt(isp, ISP_LOGWARN,
2867 				    "mailbox0 unsteady (%x, %x)", mbox, junk);
2868 				ISP_WRITE(isp, BIU_SEMA, 0);
2869 				ISP_WRITE(isp, HCCR, HCCR_CMD_CLEAR_RISC_INT);
2870 				return (1);
2871 			}
2872 		} else {
2873 			mbox = ISP_READ(isp, OUTMAILBOX0);
2874 		}
2875 		if (mbox & 0x4000) {
2876 			int obits, i = 0;
2877 			if ((obits = isp->isp_mboxbsy) != 0) {
2878 				isp->isp_mboxtmp[i++] = mbox;
2879 				for (i = 1; i < MAX_MAILBOX; i++) {
2880 					if ((obits & (1 << i)) == 0) {
2881 						continue;
2882 					}
2883 					isp->isp_mboxtmp[i] =
2884 					    ISP_READ(isp, MBOX_OFF(i));
2885 				}
2886 				MBOX_NOTIFY_COMPLETE(isp);
2887 			} else {
2888 				isp_prt(isp, ISP_LOGWARN,
2889 				    "Mbox Command Async (0x%x) with no waiters",
2890 				    mbox);
2891 			}
2892 		} else {
2893 			int fhandle = isp_parse_async(isp, (int) mbox);
2894 			isp_prt(isp, ISP_LOGDEBUG2, "Async Mbox 0x%x", mbox);
2895 			if (fhandle > 0) {
2896 				isp_fastpost_complete(isp, (u_int16_t) fhandle);
2897 			}
2898 		}
2899 		if (IS_FC(isp) || isp->isp_state != ISP_RUNSTATE) {
2900 			ISP_WRITE(isp, BIU_SEMA, 0);
2901 			ISP_WRITE(isp, HCCR, HCCR_CMD_CLEAR_RISC_INT);
2902 			return (1);
2903 		}
2904 	}
2905 
2906 	/*
2907 	 * We can't be getting this now.
2908 	 */
2909 	if (isp->isp_state != ISP_RUNSTATE) {
2910 		isp_prt(isp, ISP_LOGWARN,
2911 		    "interrupt (isr=%x, sema=%x) when not ready", isr, sema);
2912 		ISP_WRITE(isp, INMAILBOX5, ISP_READ(isp, OUTMAILBOX5));
2913 		ISP_WRITE(isp, HCCR, HCCR_CMD_CLEAR_RISC_INT);
2914 		ISP_WRITE(isp, BIU_SEMA, 0);
2915 		return (1);
2916 	}
2917 
2918 	/*
2919 	 * You *must* read OUTMAILBOX5 prior to clearing the RISC interrupt.
2920 	 */
2921 	optr = isp->isp_residx;
2922 
2923 	if (IS_2100(isp)) {
2924 		i = 0;
2925 		do {
2926 			iptr = ISP_READ(isp, OUTMAILBOX5);
2927 			junk = ISP_READ(isp, OUTMAILBOX5);
2928 		} while (junk != iptr && ++i < 1000);
2929 
2930 		if (iptr != junk) {
2931 			ISP_WRITE(isp, HCCR, HCCR_CMD_CLEAR_RISC_INT);
2932 			isp_prt(isp, ISP_LOGWARN,
2933 			    "mailbox5 unsteady (%x, %x)", iptr, junk);
2934 			return (1);
2935 		}
2936 	} else {
2937 		iptr = ISP_READ(isp, OUTMAILBOX5);
2938 	}
2939 
2940 	if (sema) {
2941 		ISP_WRITE(isp, BIU_SEMA, 0);
2942 	}
2943 	ISP_WRITE(isp, HCCR, HCCR_CMD_CLEAR_RISC_INT);
2944 
2945 	if (optr == iptr && sema == 0) {
2946 		/*
2947 		 * There are a lot of these- reasons unknown- mostly on
2948 		 * faster Alpha machines.
2949 		 *
2950 		 * I tried delaying after writing HCCR_CMD_CLEAR_RISC_INT to
2951 		 * make sure the old interrupt went away (to avoid 'ringing'
2952 		 * effects), but that didn't stop this from occurring.
2953 		 */
2954 		junk = ISP_READ(isp, BIU_ISR);
2955 		isp_prt(isp, ISP_LOGDEBUG2,
2956 		    "bogus intr- isr %x (%x) iptr %x optr %x",
2957 		    isr, junk, iptr, optr);
2958 		isp->isp_intbogus++;
2959 	}
2960 
2961 	while (optr != iptr) {
2962 		ispstatusreq_t *sp;
2963 		u_int16_t oop;
2964 		int buddaboom = 0;
2965 
2966 		sp = (ispstatusreq_t *) ISP_QUEUE_ENTRY(isp->isp_result, optr);
2967 		oop = optr;
2968 		optr = ISP_NXT_QENTRY(optr, RESULT_QUEUE_LEN(isp));
2969 		nlooked++;
2970 		/*
2971 		 * Do any appropriate unswizzling of what the Qlogic f/w has
2972 		 * written into memory so it makes sense to us. This is a
2973 		 * per-platform thing. Also includes any memory barriers.
2974 		 */
2975 		ISP_UNSWIZZLE_RESPONSE(isp, sp, oop);
2976 		if (sp->req_header.rqs_entry_type != RQSTYPE_RESPONSE) {
2977 			if (isp_handle_other_response(isp, sp, &optr) == 0) {
2978 				MEMZERO(sp, sizeof (isphdr_t));
2979 				continue;
2980 			}
2981 			/*
2982 			 * It really has to be a bounced request just copied
2983 			 * from the request queue to the response queue. If
2984 			 * not, something bad has happened.
2985 			 */
2986 			if (sp->req_header.rqs_entry_type != RQSTYPE_REQUEST) {
2987 				isp_prt(isp, ISP_LOGERR, notresp,
2988 				    sp->req_header.rqs_entry_type, oop, optr,
2989 				    nlooked);
2990 				if (isp->isp_dblev & ISP_LOGDEBUG0) {
2991 					isp_print_bytes(isp, "Queue Entry",
2992 					    QENTRY_LEN, sp);
2993 				}
2994 				MEMZERO(sp, sizeof (isphdr_t));
2995 				continue;
2996 			}
2997 			buddaboom = 1;
2998 		}
2999 
3000 		if (sp->req_header.rqs_flags & 0xf) {
3001 #define	_RQS_OFLAGS	\
3002 	~(RQSFLAG_CONTINUATION|RQSFLAG_FULL|RQSFLAG_BADHEADER|RQSFLAG_BADPACKET)
3003 			if (sp->req_header.rqs_flags & RQSFLAG_CONTINUATION) {
3004 				isp_prt(isp, ISP_LOGWARN,
3005 				    "continuation segment");
3006 				ISP_WRITE(isp, INMAILBOX5, optr);
3007 				continue;
3008 			}
3009 			if (sp->req_header.rqs_flags & RQSFLAG_FULL) {
3010 				isp_prt(isp, ISP_LOGDEBUG1,
3011 				    "internal queues full");
3012 				/*
3013 				 * We'll synthesize a QUEUE FULL message below.
3014 				 */
3015 			}
3016 			if (sp->req_header.rqs_flags & RQSFLAG_BADHEADER) {
3017 				isp_prt(isp, ISP_LOGERR,  "bad header flag");
3018 				buddaboom++;
3019 			}
3020 			if (sp->req_header.rqs_flags & RQSFLAG_BADPACKET) {
3021 				isp_prt(isp, ISP_LOGERR, "bad request packet");
3022 				buddaboom++;
3023 			}
3024 			if (sp->req_header.rqs_flags & _RQS_OFLAGS) {
3025 				isp_prt(isp, ISP_LOGERR,
3026 				    "unknown flags (0x%x) in response",
3027 				    sp->req_header.rqs_flags);
3028 				buddaboom++;
3029 			}
3030 #undef	_RQS_OFLAGS
3031 		}
3032 		if (sp->req_handle > isp->isp_maxcmds || sp->req_handle < 1) {
3033 			MEMZERO(sp, sizeof (isphdr_t));
3034 			isp_prt(isp, ISP_LOGERR,
3035 			    "bad request handle %d (type 0x%x, flags 0x%x)",
3036 			    sp->req_handle, sp->req_header.rqs_entry_type,
3037 			    sp->req_header.rqs_flags);
3038 			ISP_WRITE(isp, INMAILBOX5, optr);
3039 			continue;
3040 		}
3041 		xs = isp_find_xs(isp, sp->req_handle);
3042 		if (xs == NULL) {
3043 			MEMZERO(sp, sizeof (isphdr_t));
3044 			isp_prt(isp, ISP_LOGERR,
3045 			    "cannot find handle 0x%x in xflist",
3046 			    sp->req_handle);
3047 			ISP_WRITE(isp, INMAILBOX5, optr);
3048 			continue;
3049 		}
3050 		isp_destroy_handle(isp, sp->req_handle);
3051 		if (sp->req_status_flags & RQSTF_BUS_RESET) {
3052 			isp->isp_sendmarker |= (1 << XS_CHANNEL(xs));
3053 		}
3054 		if (buddaboom) {
3055 			XS_SETERR(xs, HBA_BOTCH);
3056 		}
3057 
3058 		if (IS_FC(isp) && (sp->req_scsi_status & RQCS_SV)) {
3059 			/*
3060 			 * Fibre Channel F/W doesn't say we got status
3061 			 * if there's Sense Data instead. I guess they
3062 			 * think it goes w/o saying.
3063 			 */
3064 			sp->req_state_flags |= RQSF_GOT_STATUS;
3065 		}
3066 		if (sp->req_state_flags & RQSF_GOT_STATUS) {
3067 			*XS_STSP(xs) = sp->req_scsi_status & 0xff;
3068 		}
3069 
3070 		switch (sp->req_header.rqs_entry_type) {
3071 		case RQSTYPE_RESPONSE:
3072 			XS_SET_STATE_STAT(isp, xs, sp);
3073 			isp_parse_status(isp, sp, xs);
3074 			if ((XS_NOERR(xs) || XS_ERR(xs) == HBA_NOERROR) &&
3075 			    (*XS_STSP(xs) == SCSI_BUSY)) {
3076 				XS_SETERR(xs, HBA_TGTBSY);
3077 			}
3078 			if (IS_SCSI(isp)) {
3079 				XS_RESID(xs) = sp->req_resid;
3080 				if ((sp->req_state_flags & RQSF_GOT_STATUS) &&
3081 				    (*XS_STSP(xs) == SCSI_CHECK) &&
3082 				    (sp->req_state_flags & RQSF_GOT_SENSE)) {
3083 					XS_SAVE_SENSE(xs, sp);
3084 				}
3085 				/*
3086 				 * A new synchronous rate was negotiated for
3087 				 * this target. Mark state such that we'll go
3088 				 * look up that which has changed later.
3089 				 */
3090 				if (sp->req_status_flags & RQSTF_NEGOTIATION) {
3091 					int t = XS_TGT(xs);
3092 					sdparam *sdp = isp->isp_param;
3093 					sdp += XS_CHANNEL(xs);
3094 					sdp->isp_devparam[t].dev_refresh = 1;
3095 					isp->isp_update |=
3096 					    (1 << XS_CHANNEL(xs));
3097 				}
3098 			} else {
3099 				if (sp->req_status_flags & RQSF_XFER_COMPLETE) {
3100 					XS_RESID(xs) = 0;
3101 				} else if (sp->req_scsi_status & RQCS_RESID) {
3102 					XS_RESID(xs) = sp->req_resid;
3103 				} else {
3104 					XS_RESID(xs) = 0;
3105 				}
3106 				if ((sp->req_state_flags & RQSF_GOT_STATUS) &&
3107 				    (*XS_STSP(xs) == SCSI_CHECK) &&
3108 				    (sp->req_scsi_status & RQCS_SV)) {
3109 					XS_SAVE_SENSE(xs, sp);
3110 					/* solely for the benefit of debug */
3111 					sp->req_state_flags |= RQSF_GOT_SENSE;
3112 				}
3113 			}
3114 			isp_prt(isp, ISP_LOGDEBUG2,
3115 			   "asked for %ld got resid %ld", (long) XS_XFRLEN(xs),
3116 			   (long) sp->req_resid);
3117 			break;
3118 		case RQSTYPE_REQUEST:
3119 			if (sp->req_header.rqs_flags & RQSFLAG_FULL) {
3120 				/*
3121 				 * Force Queue Full status.
3122 				 */
3123 				*XS_STSP(xs) = SCSI_QFULL;
3124 				XS_SETERR(xs, HBA_NOERROR);
3125 			} else if (XS_NOERR(xs)) {
3126 				XS_SETERR(xs, HBA_BOTCH);
3127 			}
3128 			XS_RESID(xs) = XS_XFRLEN(xs);
3129 			break;
3130 		default:
3131 			isp_prt(isp, ISP_LOGWARN,
3132 			    "unhandled response queue type 0x%x",
3133 			    sp->req_header.rqs_entry_type);
3134 			if (XS_NOERR(xs)) {
3135 				XS_SETERR(xs, HBA_BOTCH);
3136 			}
3137 			break;
3138 		}
3139 
3140 		/*
3141 		 * Free any dma resources. As a side effect, this may
3142 		 * also do any cache flushing necessary for data coherence.			 */
3143 		if (XS_XFRLEN(xs)) {
3144 			ISP_DMAFREE(isp, xs, sp->req_handle);
3145 		}
3146 
3147 		if (((isp->isp_dblev & (ISP_LOGDEBUG2|ISP_LOGDEBUG3))) ||
3148 		    ((isp->isp_dblev & ISP_LOGDEBUG1) && ((!XS_NOERR(xs)) ||
3149 		    (*XS_STSP(xs) != SCSI_GOOD)))) {
3150 			char skey;
3151 			if (sp->req_state_flags & RQSF_GOT_SENSE) {
3152 				skey = XS_SNSKEY(xs) & 0xf;
3153 				if (skey < 10)
3154 					skey += '0';
3155 				else
3156 					skey += 'a' - 10;
3157 			} else if (*XS_STSP(xs) == SCSI_CHECK) {
3158 				skey = '?';
3159 			} else {
3160 				skey = '.';
3161 			}
3162 			isp_prt(isp, ISP_LOGALL, finmsg, XS_CHANNEL(xs),
3163 			    XS_TGT(xs), XS_LUN(xs), XS_XFRLEN(xs), XS_RESID(xs),
3164 			    *XS_STSP(xs), skey, XS_ERR(xs));
3165 		}
3166 
3167 		if (isp->isp_nactive > 0)
3168 		    isp->isp_nactive--;
3169 		complist[ndone++] = xs;	/* defer completion call until later */
3170 		MEMZERO(sp, sizeof (isphdr_t));
3171 		if (ndone == MAX_REQUESTQ_COMPLETIONS) {
3172 			break;
3173 		}
3174 	}
3175 
3176 	/*
3177 	 * If we looked at any commands, then it's valid to find out
3178 	 * what the outpointer is. It also is a trigger to update the
3179 	 * ISP's notion of what we've seen so far.
3180 	 */
3181 	if (nlooked) {
3182 		ISP_WRITE(isp, INMAILBOX5, optr);
3183 		isp->isp_reqodx = ISP_READ(isp, OUTMAILBOX4);
3184 	}
3185 
3186 	isp->isp_residx = optr;
3187 	for (i = 0; i < ndone; i++) {
3188 		xs = complist[i];
3189 		if (xs) {
3190 			isp_done(xs);
3191 		}
3192 	}
3193 	return (1);
3194 }
3195 
3196 /*
3197  * Support routines.
3198  */
3199 
3200 static int
3201 isp_parse_async(struct ispsoftc *isp, int mbox)
3202 {
3203 	int bus;
3204 	u_int16_t fast_post_handle = 0;
3205 
3206 	if (IS_DUALBUS(isp)) {
3207 		bus = ISP_READ(isp, OUTMAILBOX6);
3208 	} else {
3209 		bus = 0;
3210 	}
3211 
3212 	switch (mbox) {
3213 	case ASYNC_BUS_RESET:
3214 		isp->isp_sendmarker |= (1 << bus);
3215 #ifdef	ISP_TARGET_MODE
3216 		isp_target_async(isp, bus, mbox);
3217 #endif
3218 		isp_async(isp, ISPASYNC_BUS_RESET, &bus);
3219 		break;
3220 	case ASYNC_SYSTEM_ERROR:
3221 		mbox = ISP_READ(isp, OUTMAILBOX1);
3222 		isp_prt(isp, ISP_LOGERR,
3223 		    "Internal Firmware Error @ RISC Addr 0x%x", mbox);
3224 		ISP_DUMPREGS(isp, "Firmware Error");
3225 		isp_reinit(isp);
3226 #ifdef	ISP_TARGET_MODE
3227 		isp_target_async(isp, bus, ASYNC_SYSTEM_ERROR);
3228 #endif
3229 		/* no point continuing after this */
3230 		return (-1);
3231 
3232 	case ASYNC_RQS_XFER_ERR:
3233 		isp_prt(isp, ISP_LOGERR, "Request Queue Transfer Error");
3234 		break;
3235 
3236 	case ASYNC_RSP_XFER_ERR:
3237 		isp_prt(isp, ISP_LOGERR, "Response Queue Transfer Error");
3238 		break;
3239 
3240 	case ASYNC_QWAKEUP:
3241 		/*
3242 		 * We've just been notified that the Queue has woken up.
3243 		 * We don't need to be chatty about this- just unlatch things
3244 		 * and move on.
3245 		 */
3246 		mbox = ISP_READ(isp, OUTMAILBOX4);
3247 		break;
3248 
3249 	case ASYNC_TIMEOUT_RESET:
3250 		isp_prt(isp, ISP_LOGWARN,
3251 		    "timeout initiated SCSI bus reset of bus %d", bus);
3252 		isp->isp_sendmarker |= (1 << bus);
3253 #ifdef	ISP_TARGET_MODE
3254 		isp_target_async(isp, bus, mbox);
3255 #endif
3256 		break;
3257 
3258 	case ASYNC_DEVICE_RESET:
3259 		isp_prt(isp, ISP_LOGINFO, "device reset on bus %d", bus);
3260 		isp->isp_sendmarker |= (1 << bus);
3261 #ifdef	ISP_TARGET_MODE
3262 		isp_target_async(isp, bus, mbox);
3263 #endif
3264 		break;
3265 
3266 	case ASYNC_EXTMSG_UNDERRUN:
3267 		isp_prt(isp, ISP_LOGWARN, "extended message underrun");
3268 		break;
3269 
3270 	case ASYNC_SCAM_INT:
3271 		isp_prt(isp, ISP_LOGINFO, "SCAM interrupt");
3272 		break;
3273 
3274 	case ASYNC_HUNG_SCSI:
3275 		isp_prt(isp, ISP_LOGERR,
3276 		    "stalled SCSI Bus after DATA Overrun");
3277 		/* XXX: Need to issue SCSI reset at this point */
3278 		break;
3279 
3280 	case ASYNC_KILLED_BUS:
3281 		isp_prt(isp, ISP_LOGERR, "SCSI Bus reset after DATA Overrun");
3282 		break;
3283 
3284 	case ASYNC_BUS_TRANSIT:
3285 		mbox = ISP_READ(isp, OUTMAILBOX2);
3286 		switch (mbox & 0x1c00) {
3287 		case SXP_PINS_LVD_MODE:
3288 			isp_prt(isp, ISP_LOGINFO, "Transition to LVD mode");
3289 			SDPARAM(isp)->isp_diffmode = 0;
3290 			SDPARAM(isp)->isp_ultramode = 0;
3291 			SDPARAM(isp)->isp_lvdmode = 1;
3292 			break;
3293 		case SXP_PINS_HVD_MODE:
3294 			isp_prt(isp, ISP_LOGINFO,
3295 			    "Transition to Differential mode");
3296 			SDPARAM(isp)->isp_diffmode = 1;
3297 			SDPARAM(isp)->isp_ultramode = 0;
3298 			SDPARAM(isp)->isp_lvdmode = 0;
3299 			break;
3300 		case SXP_PINS_SE_MODE:
3301 			isp_prt(isp, ISP_LOGINFO,
3302 			    "Transition to Single Ended mode");
3303 			SDPARAM(isp)->isp_diffmode = 0;
3304 			SDPARAM(isp)->isp_ultramode = 1;
3305 			SDPARAM(isp)->isp_lvdmode = 0;
3306 			break;
3307 		default:
3308 			isp_prt(isp, ISP_LOGWARN,
3309 			    "Transition to Unknown Mode 0x%x", mbox);
3310 			break;
3311 		}
3312 		/*
3313 		 * XXX: Set up to renegotiate again!
3314 		 */
3315 		/* Can only be for a 1080... */
3316 		isp->isp_sendmarker |= (1 << bus);
3317 		break;
3318 
3319 	case ASYNC_CMD_CMPLT:
3320 		fast_post_handle = ISP_READ(isp, OUTMAILBOX1);
3321 		isp_prt(isp, ISP_LOGDEBUG3, "fast post completion of %u",
3322 		    fast_post_handle);
3323 		break;
3324 
3325 	case ASYNC_CTIO_DONE:
3326 #ifdef	ISP_TARGET_MODE
3327 		/*
3328 		 * Bus gets overloaded with the handle. Dual bus
3329 		 * cards don't put bus# into the handle.
3330 		 */
3331 		bus = (ISP_READ(isp, OUTMAILBOX2) << 16) |
3332 		    ISP_READ(isp, OUTMAILBOX1);
3333 		isp_target_async(isp, bus, mbox);
3334 #else
3335 		isp_prt(isp, ISP_LOGINFO, "Fast Posting CTIO done");
3336 #endif
3337 		break;
3338 
3339 	case ASYNC_LIP_OCCURRED:
3340 		FCPARAM(isp)->isp_lipseq =
3341 		    ISP_READ(isp, OUTMAILBOX1);
3342 		FCPARAM(isp)->isp_fwstate = FW_CONFIG_WAIT;
3343 		FCPARAM(isp)->isp_loopstate = LOOP_LIP_RCVD;
3344 		isp->isp_sendmarker = 1;
3345 		isp_mark_getpdb_all(isp);
3346 		isp_async(isp, ISPASYNC_LIP, NULL);
3347 #ifdef	ISP_TARGET_MODE
3348 		isp_target_async(isp, bus, mbox);
3349 #endif
3350 		break;
3351 
3352 	case ASYNC_LOOP_UP:
3353 		isp->isp_sendmarker = 1;
3354 		FCPARAM(isp)->isp_fwstate = FW_CONFIG_WAIT;
3355 		FCPARAM(isp)->isp_loopstate = LOOP_LIP_RCVD;
3356 		isp_mark_getpdb_all(isp);
3357 		isp_async(isp, ISPASYNC_LOOP_UP, NULL);
3358 #ifdef	ISP_TARGET_MODE
3359 		isp_target_async(isp, bus, mbox);
3360 #endif
3361 		break;
3362 
3363 	case ASYNC_LOOP_DOWN:
3364 		isp->isp_sendmarker = 1;
3365 		FCPARAM(isp)->isp_fwstate = FW_CONFIG_WAIT;
3366 		FCPARAM(isp)->isp_loopstate = LOOP_NIL;
3367 		isp_mark_getpdb_all(isp);
3368 		isp_async(isp, ISPASYNC_LOOP_DOWN, NULL);
3369 #ifdef	ISP_TARGET_MODE
3370 		isp_target_async(isp, bus, mbox);
3371 #endif
3372 		break;
3373 
3374 	case ASYNC_LOOP_RESET:
3375 		isp->isp_sendmarker = 1;
3376 		FCPARAM(isp)->isp_fwstate = FW_CONFIG_WAIT;
3377 		FCPARAM(isp)->isp_loopstate = LOOP_NIL;
3378 		isp_mark_getpdb_all(isp);
3379 		isp_async(isp, ISPASYNC_LOOP_RESET, NULL);
3380 #ifdef	ISP_TARGET_MODE
3381 		isp_target_async(isp, bus, mbox);
3382 #endif
3383 		break;
3384 
3385 	case ASYNC_PDB_CHANGED:
3386 		isp->isp_sendmarker = 1;
3387 		FCPARAM(isp)->isp_loopstate = LOOP_PDB_RCVD;
3388 		isp_mark_getpdb_all(isp);
3389 		isp_async(isp, ISPASYNC_CHANGE_NOTIFY, ISPASYNC_CHANGE_PDB);
3390 		break;
3391 
3392 	case ASYNC_CHANGE_NOTIFY:
3393 		/*
3394 		 * Not correct, but it will force us to rescan the loop.
3395 		 */
3396 		FCPARAM(isp)->isp_loopstate = LOOP_PDB_RCVD;
3397 		isp_mark_getpdb_all(isp);
3398 		isp_async(isp, ISPASYNC_CHANGE_NOTIFY, ISPASYNC_CHANGE_SNS);
3399 		break;
3400 
3401 	case ASYNC_PTPMODE:
3402 		if (FCPARAM(isp)->isp_onfabric)
3403 			FCPARAM(isp)->isp_topo = TOPO_F_PORT;
3404 		else
3405 			FCPARAM(isp)->isp_topo = TOPO_N_PORT;
3406 		isp_mark_getpdb_all(isp);
3407 		isp->isp_sendmarker = 1;
3408 		FCPARAM(isp)->isp_fwstate = FW_CONFIG_WAIT;
3409 		FCPARAM(isp)->isp_loopstate = LOOP_LIP_RCVD;
3410 		isp_async(isp, ISPASYNC_CHANGE_NOTIFY, ISPASYNC_CHANGE_OTHER);
3411 #ifdef	ISP_TARGET_MODE
3412 		isp_target_async(isp, bus, mbox);
3413 #endif
3414 		isp_prt(isp, ISP_LOGINFO, "Point-to-Point mode");
3415 		break;
3416 
3417 	case ASYNC_CONNMODE:
3418 		mbox = ISP_READ(isp, OUTMAILBOX1);
3419 		isp_mark_getpdb_all(isp);
3420 		switch (mbox) {
3421 		case ISP_CONN_LOOP:
3422 			isp_prt(isp, ISP_LOGINFO,
3423 			    "Point-to-Point -> Loop mode");
3424 			break;
3425 		case ISP_CONN_PTP:
3426 			isp_prt(isp, ISP_LOGINFO,
3427 			    "Loop -> Point-to-Point mode");
3428 			break;
3429 		case ISP_CONN_BADLIP:
3430 			isp_prt(isp, ISP_LOGWARN,
3431 			    "Point-to-Point -> Loop mode (BAD LIP)");
3432 			break;
3433 		case ISP_CONN_FATAL:
3434 			isp_prt(isp, ISP_LOGERR, "FATAL CONNECTION ERROR");
3435 			isp_reinit(isp);
3436 #ifdef	ISP_TARGET_MODE
3437 			isp_target_async(isp, bus, ASYNC_SYSTEM_ERROR);
3438 #endif
3439 			/* no point continuing after this */
3440 			return (-1);
3441 		case ISP_CONN_LOOPBACK:
3442 			isp_prt(isp, ISP_LOGWARN,
3443 			    "Looped Back in Point-to-Point mode");
3444 			break;
3445 		default:
3446 			isp_prt(isp, ISP_LOGWARN,
3447 			    "Unknown connection mode (0x%x)", mbox);
3448 			break;
3449 		}
3450 		isp_async(isp, ISPASYNC_CHANGE_NOTIFY, ISPASYNC_CHANGE_OTHER);
3451 		isp->isp_sendmarker = 1;
3452 		FCPARAM(isp)->isp_fwstate = FW_CONFIG_WAIT;
3453 		FCPARAM(isp)->isp_loopstate = LOOP_LIP_RCVD;
3454 		break;
3455 
3456 	default:
3457 		isp_prt(isp, ISP_LOGWARN, "Unknown Async Code 0x%x", mbox);
3458 		break;
3459 	}
3460 	return (fast_post_handle);
3461 }
3462 
3463 /*
3464  * Handle other response entries. A pointer to the request queue output
3465  * index is here in case we want to eat several entries at once, although
3466  * this is not used currently.
3467  */
3468 
3469 static int
3470 isp_handle_other_response(struct ispsoftc *isp,
3471     ispstatusreq_t *sp, u_int16_t *optrp)
3472 {
3473 	switch (sp->req_header.rqs_entry_type) {
3474 	case RQSTYPE_STATUS_CONT:
3475 		isp_prt(isp, ISP_LOGINFO, "Ignored Continuation Response");
3476 		return (0);
3477 	case RQSTYPE_ATIO:
3478 	case RQSTYPE_CTIO:
3479 	case RQSTYPE_ENABLE_LUN:
3480 	case RQSTYPE_MODIFY_LUN:
3481 	case RQSTYPE_NOTIFY:
3482 	case RQSTYPE_NOTIFY_ACK:
3483 	case RQSTYPE_CTIO1:
3484 	case RQSTYPE_ATIO2:
3485 	case RQSTYPE_CTIO2:
3486 	case RQSTYPE_CTIO3:
3487 #ifdef	ISP_TARGET_MODE
3488 		return (isp_target_notify(isp, sp, optrp));
3489 #else
3490 		optrp = optrp;
3491 		/* FALLTHROUGH */
3492 #endif
3493 	case RQSTYPE_REQUEST:
3494 	default:
3495 		if (isp_async(isp, ISPASYNC_UNHANDLED_RESPONSE, sp)) {
3496 			return (0);
3497 		}
3498 		isp_prt(isp, ISP_LOGWARN, "Unhandled Response Type 0x%x",
3499 		    sp->req_header.rqs_entry_type);
3500 		return (-1);
3501 	}
3502 }
3503 
3504 static void
3505 isp_parse_status(struct ispsoftc *isp, ispstatusreq_t *sp, XS_T *xs)
3506 {
3507 	switch (sp->req_completion_status & 0xff) {
3508 	case RQCS_COMPLETE:
3509 		if (XS_NOERR(xs)) {
3510 			XS_SETERR(xs, HBA_NOERROR);
3511 		}
3512 		return;
3513 
3514 	case RQCS_INCOMPLETE:
3515 		if ((sp->req_state_flags & RQSF_GOT_TARGET) == 0) {
3516 			isp_prt(isp, ISP_LOGDEBUG1,
3517 			    "Selection Timeout for %d.%d.%d",
3518 			    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs));
3519 			if (XS_NOERR(xs)) {
3520 				XS_SETERR(xs, HBA_SELTIMEOUT);
3521 			}
3522 			return;
3523 		}
3524 		isp_prt(isp, ISP_LOGERR,
3525 		    "command incomplete for %d.%d.%d, state 0x%x",
3526 		    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs),
3527 		    sp->req_state_flags);
3528 		break;
3529 
3530 	case RQCS_DMA_ERROR:
3531 		isp_prt(isp, ISP_LOGERR, "DMA error for command on %d.%d.%d",
3532 		    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs));
3533 		break;
3534 
3535 	case RQCS_TRANSPORT_ERROR:
3536 	{
3537 		char buf[172];
3538 		buf[0] = 0;
3539 		STRNCAT(buf, "states=>", sizeof buf);
3540 		if (sp->req_state_flags & RQSF_GOT_BUS) {
3541 			STRNCAT(buf, " GOT_BUS", sizeof buf);
3542 		}
3543 		if (sp->req_state_flags & RQSF_GOT_TARGET) {
3544 			STRNCAT(buf, " GOT_TGT", sizeof buf);
3545 		}
3546 		if (sp->req_state_flags & RQSF_SENT_CDB) {
3547 			STRNCAT(buf, " SENT_CDB", sizeof buf);
3548 		}
3549 		if (sp->req_state_flags & RQSF_XFRD_DATA) {
3550 			STRNCAT(buf, " XFRD_DATA", sizeof buf);
3551 		}
3552 		if (sp->req_state_flags & RQSF_GOT_STATUS) {
3553 			STRNCAT(buf, " GOT_STS", sizeof buf);
3554 		}
3555 		if (sp->req_state_flags & RQSF_GOT_SENSE) {
3556 			STRNCAT(buf, " GOT_SNS", sizeof buf);
3557 		}
3558 		if (sp->req_state_flags & RQSF_XFER_COMPLETE) {
3559 			STRNCAT(buf, " XFR_CMPLT", sizeof buf);
3560 		}
3561 		STRNCAT(buf, "\nstatus=>", sizeof buf);
3562 		if (sp->req_status_flags & RQSTF_DISCONNECT) {
3563 			STRNCAT(buf, " Disconnect", sizeof buf);
3564 		}
3565 		if (sp->req_status_flags & RQSTF_SYNCHRONOUS) {
3566 			STRNCAT(buf, " Sync_xfr", sizeof buf);
3567 		}
3568 		if (sp->req_status_flags & RQSTF_PARITY_ERROR) {
3569 			STRNCAT(buf, " Parity", sizeof buf);
3570 		}
3571 		if (sp->req_status_flags & RQSTF_BUS_RESET) {
3572 			STRNCAT(buf, " Bus_Reset", sizeof buf);
3573 		}
3574 		if (sp->req_status_flags & RQSTF_DEVICE_RESET) {
3575 			STRNCAT(buf, " Device_Reset", sizeof buf);
3576 		}
3577 		if (sp->req_status_flags & RQSTF_ABORTED) {
3578 			STRNCAT(buf, " Aborted", sizeof buf);
3579 		}
3580 		if (sp->req_status_flags & RQSTF_TIMEOUT) {
3581 			STRNCAT(buf, " Timeout", sizeof buf);
3582 		}
3583 		if (sp->req_status_flags & RQSTF_NEGOTIATION) {
3584 			STRNCAT(buf, " Negotiation", sizeof buf);
3585 		}
3586 		isp_prt(isp, ISP_LOGERR, "%s", buf);
3587 		isp_prt(isp, ISP_LOGERR, "transport error for %d.%d.%d:\n%s",
3588 		    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs), buf);
3589 		break;
3590 	}
3591 	case RQCS_RESET_OCCURRED:
3592 		isp_prt(isp, ISP_LOGWARN,
3593 		    "bus reset destroyed command for %d.%d.%d",
3594 		    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs));
3595 		isp->isp_sendmarker |= (1 << XS_CHANNEL(xs));
3596 		if (XS_NOERR(xs)) {
3597 			XS_SETERR(xs, HBA_BUSRESET);
3598 		}
3599 		return;
3600 
3601 	case RQCS_ABORTED:
3602 		isp_prt(isp, ISP_LOGERR, "command aborted for %d.%d.%d",
3603 		    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs));
3604 		isp->isp_sendmarker |= (1 << XS_CHANNEL(xs));
3605 		if (XS_NOERR(xs)) {
3606 			XS_SETERR(xs, HBA_ABORTED);
3607 		}
3608 		return;
3609 
3610 	case RQCS_TIMEOUT:
3611 		isp_prt(isp, ISP_LOGWARN, "command timed out for %d.%d.%d",
3612 		    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs));
3613 		if (XS_NOERR(xs)) {
3614 			XS_SETERR(xs, HBA_CMDTIMEOUT);
3615 		}
3616 		return;
3617 
3618 	case RQCS_DATA_OVERRUN:
3619 		XS_RESID(xs) = sp->req_resid;
3620 		isp_prt(isp, ISP_LOGERR, "data overrun for command on %d.%d.%d",
3621 		    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs));
3622 		if (XS_NOERR(xs)) {
3623 			XS_SETERR(xs, HBA_DATAOVR);
3624 		}
3625 		return;
3626 
3627 	case RQCS_COMMAND_OVERRUN:
3628 		isp_prt(isp, ISP_LOGERR,
3629 		    "command overrun for command on %d.%d.%d",
3630 		    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs));
3631 		break;
3632 
3633 	case RQCS_STATUS_OVERRUN:
3634 		isp_prt(isp, ISP_LOGERR,
3635 		    "status overrun for command on %d.%d.%d",
3636 		    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs));
3637 		break;
3638 
3639 	case RQCS_BAD_MESSAGE:
3640 		isp_prt(isp, ISP_LOGERR,
3641 		    "msg not COMMAND COMPLETE after status %d.%d.%d",
3642 		    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs));
3643 		break;
3644 
3645 	case RQCS_NO_MESSAGE_OUT:
3646 		isp_prt(isp, ISP_LOGERR,
3647 		    "No MESSAGE OUT phase after selection on %d.%d.%d",
3648 		    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs));
3649 		break;
3650 
3651 	case RQCS_EXT_ID_FAILED:
3652 		isp_prt(isp, ISP_LOGERR, "EXTENDED IDENTIFY failed %d.%d.%d",
3653 		    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs));
3654 		break;
3655 
3656 	case RQCS_IDE_MSG_FAILED:
3657 		isp_prt(isp, ISP_LOGERR,
3658 		    "INITIATOR DETECTED ERROR rejected by %d.%d.%d",
3659 		    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs));
3660 		break;
3661 
3662 	case RQCS_ABORT_MSG_FAILED:
3663 		isp_prt(isp, ISP_LOGERR, "ABORT OPERATION rejected by %d.%d.%d",
3664 		    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs));
3665 		break;
3666 
3667 	case RQCS_REJECT_MSG_FAILED:
3668 		isp_prt(isp, ISP_LOGERR, "MESSAGE REJECT rejected by %d.%d.%d",
3669 		    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs));
3670 		break;
3671 
3672 	case RQCS_NOP_MSG_FAILED:
3673 		isp_prt(isp, ISP_LOGERR, "NOP rejected by %d.%d.%d",
3674 		    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs));
3675 		break;
3676 
3677 	case RQCS_PARITY_ERROR_MSG_FAILED:
3678 		isp_prt(isp, ISP_LOGERR,
3679 		    "MESSAGE PARITY ERROR rejected by %d.%d.%d",
3680 		    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs));
3681 		break;
3682 
3683 	case RQCS_DEVICE_RESET_MSG_FAILED:
3684 		isp_prt(isp, ISP_LOGWARN,
3685 		    "BUS DEVICE RESET rejected by %d.%d.%d",
3686 		    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs));
3687 		break;
3688 
3689 	case RQCS_ID_MSG_FAILED:
3690 		isp_prt(isp, ISP_LOGERR, "IDENTIFY rejected by %d.%d.%d",
3691 		    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs));
3692 		break;
3693 
3694 	case RQCS_UNEXP_BUS_FREE:
3695 		isp_prt(isp, ISP_LOGERR, "%d.%d.%d had an unexpected bus free",
3696 		    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs));
3697 		break;
3698 
3699 	case RQCS_DATA_UNDERRUN:
3700 		XS_RESID(xs) = sp->req_resid;
3701 		if (XS_NOERR(xs)) {
3702 			XS_SETERR(xs, HBA_NOERROR);
3703 		}
3704 		return;
3705 
3706 	case RQCS_XACT_ERR1:
3707 		isp_prt(isp, ISP_LOGERR, xact1, XS_CHANNEL(xs),
3708 		    XS_TGT(xs), XS_LUN(xs));
3709 		break;
3710 
3711 	case RQCS_XACT_ERR2:
3712 		isp_prt(isp, ISP_LOGERR, xact2,
3713 		    XS_LUN(xs), XS_TGT(xs), XS_CHANNEL(xs));
3714 		break;
3715 
3716 	case RQCS_XACT_ERR3:
3717 		isp_prt(isp, ISP_LOGERR, xact3, XS_TGT(xs),
3718 		    XS_LUN(xs), XS_CHANNEL(xs));
3719 		break;
3720 
3721 	case RQCS_BAD_ENTRY:
3722 		isp_prt(isp, ISP_LOGERR, "Invalid IOCB entry type detected");
3723 		break;
3724 
3725 	case RQCS_QUEUE_FULL:
3726 		isp_prt(isp, ISP_LOGDEBUG1,
3727 		    "internal queues full for %d.%d.%d status 0x%x", XS_TGT(xs),
3728 		    XS_LUN(xs), XS_CHANNEL(xs), *XS_STSP(xs));
3729 		/*
3730 		 * If QFULL or some other status byte is set, then this
3731 		 * isn't an error, per se.
3732 		 */
3733 		if (*XS_STSP(xs) != SCSI_GOOD && XS_NOERR(xs)) {
3734 			XS_SETERR(xs, HBA_NOERROR);
3735 			return;
3736 		}
3737 		break;
3738 
3739 	case RQCS_PHASE_SKIPPED:
3740 		isp_prt(isp, ISP_LOGERR, pskip,
3741 		    XS_TGT(xs), XS_LUN(xs), XS_CHANNEL(xs));
3742 		break;
3743 
3744 	case RQCS_ARQS_FAILED:
3745 		isp_prt(isp, ISP_LOGERR,
3746 		    "Auto Request Sense failed for %d.%d.%d",
3747 		    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs));
3748 		if (XS_NOERR(xs)) {
3749 			XS_SETERR(xs, HBA_ARQFAIL);
3750 		}
3751 		return;
3752 
3753 	case RQCS_WIDE_FAILED:
3754 		isp_prt(isp, ISP_LOGERR,
3755 		    "Wide Negotiation failed for %d.%d.%d",
3756 		    XS_TGT(xs), XS_LUN(xs), XS_CHANNEL(xs));
3757 		if (IS_SCSI(isp)) {
3758 			sdparam *sdp = isp->isp_param;
3759 			sdp += XS_CHANNEL(xs);
3760 			sdp->isp_devparam[XS_TGT(xs)].dev_flags &= ~DPARM_WIDE;
3761 			sdp->isp_devparam[XS_TGT(xs)].dev_update = 1;
3762 			isp->isp_update |= (1 << XS_CHANNEL(xs));
3763 		}
3764 		if (XS_NOERR(xs)) {
3765 			XS_SETERR(xs, HBA_NOERROR);
3766 		}
3767 		return;
3768 
3769 	case RQCS_SYNCXFER_FAILED:
3770 		isp_prt(isp, ISP_LOGERR,
3771 		    "SDTR Message failed for target %d.%d.%d",
3772 		    XS_TGT(xs), XS_LUN(xs), XS_CHANNEL(xs));
3773 		if (IS_SCSI(isp)) {
3774 			sdparam *sdp = isp->isp_param;
3775 			sdp += XS_CHANNEL(xs);
3776 			sdp->isp_devparam[XS_TGT(xs)].dev_flags &= ~DPARM_SYNC;
3777 			sdp->isp_devparam[XS_TGT(xs)].dev_update = 1;
3778 			isp->isp_update |= (1 << XS_CHANNEL(xs));
3779 		}
3780 		break;
3781 
3782 	case RQCS_LVD_BUSERR:
3783 		isp_prt(isp, ISP_LOGERR,
3784 		    "Bad LVD condition while talking to %d.%d.%d",
3785 		    XS_TGT(xs), XS_LUN(xs), XS_CHANNEL(xs));
3786 		break;
3787 
3788 	case RQCS_PORT_UNAVAILABLE:
3789 		/*
3790 		 * No such port on the loop. Moral equivalent of SELTIMEO
3791 		 */
3792 		isp_prt(isp, ISP_LOGINFO,
3793 		    "Port Unavailable for target %d", XS_TGT(xs));
3794 		if (XS_NOERR(xs)) {
3795 			XS_SETERR(xs, HBA_SELTIMEOUT);
3796 		}
3797 		return;
3798 	case RQCS_PORT_LOGGED_OUT:
3799 		/*
3800 		 * It was there (maybe)- treat as a selection timeout.
3801 		 */
3802 		isp_prt(isp, ISP_LOGINFO,
3803 		    "port logout for target %d", XS_TGT(xs));
3804 		if (XS_NOERR(xs)) {
3805 			XS_SETERR(xs, HBA_SELTIMEOUT);
3806 		}
3807 		return;
3808 
3809 	case RQCS_PORT_CHANGED:
3810 		isp_prt(isp, ISP_LOGWARN,
3811 		    "port changed for target %d", XS_TGT(xs));
3812 		if (XS_NOERR(xs)) {
3813 			XS_SETERR(xs, HBA_SELTIMEOUT);
3814 		}
3815 		return;
3816 
3817 	case RQCS_PORT_BUSY:
3818 		isp_prt(isp, ISP_LOGWARN,
3819 		    "port busy for target %d", XS_TGT(xs));
3820 		if (XS_NOERR(xs)) {
3821 			XS_SETERR(xs, HBA_TGTBSY);
3822 		}
3823 		return;
3824 
3825 	default:
3826 		isp_prt(isp, ISP_LOGERR, "Unknown Completion Status 0x%x",
3827 		    sp->req_completion_status);
3828 		break;
3829 	}
3830 	if (XS_NOERR(xs)) {
3831 		XS_SETERR(xs, HBA_BOTCH);
3832 	}
3833 }
3834 
3835 static void
3836 isp_fastpost_complete(struct ispsoftc *isp, u_int16_t fph)
3837 {
3838 	XS_T *xs;
3839 
3840 	if (fph == 0) {
3841 		return;
3842 	}
3843 	xs = isp_find_xs(isp, fph);
3844 	if (xs == NULL) {
3845 		isp_prt(isp, ISP_LOGWARN,
3846 		    "Command for fast post handle 0x%x not found", fph);
3847 		return;
3848 	}
3849 	isp_destroy_handle(isp, fph);
3850 
3851 	/*
3852 	 * Since we don't have a result queue entry item,
3853 	 * we must believe that SCSI status is zero and
3854 	 * that all data transferred.
3855 	 */
3856 	XS_SET_STATE_STAT(isp, xs, NULL);
3857 	XS_RESID(xs) = 0;
3858 	*XS_STSP(xs) = SCSI_GOOD;
3859 	if (XS_XFRLEN(xs)) {
3860 		ISP_DMAFREE(isp, xs, fph);
3861 	}
3862 	if (isp->isp_nactive)
3863 		isp->isp_nactive--;
3864 	isp_done(xs);
3865 }
3866 
3867 #define	HIBYT(x)			((x) >> 0x8)
3868 #define	LOBYT(x)			((x)  & 0xff)
3869 #define	ISPOPMAP(a, b)			(((a) << 8) | (b))
3870 static u_int16_t mbpscsi[] = {
3871 	ISPOPMAP(0x01, 0x01),	/* 0x00: MBOX_NO_OP */
3872 	ISPOPMAP(0x1f, 0x01),	/* 0x01: MBOX_LOAD_RAM */
3873 	ISPOPMAP(0x03, 0x01),	/* 0x02: MBOX_EXEC_FIRMWARE */
3874 	ISPOPMAP(0x1f, 0x01),	/* 0x03: MBOX_DUMP_RAM */
3875 	ISPOPMAP(0x07, 0x07),	/* 0x04: MBOX_WRITE_RAM_WORD */
3876 	ISPOPMAP(0x03, 0x07),	/* 0x05: MBOX_READ_RAM_WORD */
3877 	ISPOPMAP(0x3f, 0x3f),	/* 0x06: MBOX_MAILBOX_REG_TEST */
3878 	ISPOPMAP(0x03, 0x07),	/* 0x07: MBOX_VERIFY_CHECKSUM	*/
3879 	ISPOPMAP(0x01, 0x4f),	/* 0x08: MBOX_ABOUT_FIRMWARE */
3880 	ISPOPMAP(0x00, 0x00),	/* 0x09: */
3881 	ISPOPMAP(0x00, 0x00),	/* 0x0a: */
3882 	ISPOPMAP(0x00, 0x00),	/* 0x0b: */
3883 	ISPOPMAP(0x00, 0x00),	/* 0x0c: */
3884 	ISPOPMAP(0x00, 0x00),	/* 0x0d: */
3885 	ISPOPMAP(0x01, 0x05),	/* 0x0e: MBOX_CHECK_FIRMWARE */
3886 	ISPOPMAP(0x00, 0x00),	/* 0x0f: */
3887 	ISPOPMAP(0x1f, 0x1f),	/* 0x10: MBOX_INIT_REQ_QUEUE */
3888 	ISPOPMAP(0x3f, 0x3f),	/* 0x11: MBOX_INIT_RES_QUEUE */
3889 	ISPOPMAP(0x0f, 0x0f),	/* 0x12: MBOX_EXECUTE_IOCB */
3890 	ISPOPMAP(0x03, 0x03),	/* 0x13: MBOX_WAKE_UP	*/
3891 	ISPOPMAP(0x01, 0x3f),	/* 0x14: MBOX_STOP_FIRMWARE */
3892 	ISPOPMAP(0x0f, 0x0f),	/* 0x15: MBOX_ABORT */
3893 	ISPOPMAP(0x03, 0x03),	/* 0x16: MBOX_ABORT_DEVICE */
3894 	ISPOPMAP(0x07, 0x07),	/* 0x17: MBOX_ABORT_TARGET */
3895 	ISPOPMAP(0x07, 0x07),	/* 0x18: MBOX_BUS_RESET */
3896 	ISPOPMAP(0x03, 0x07),	/* 0x19: MBOX_STOP_QUEUE */
3897 	ISPOPMAP(0x03, 0x07),	/* 0x1a: MBOX_START_QUEUE */
3898 	ISPOPMAP(0x03, 0x07),	/* 0x1b: MBOX_SINGLE_STEP_QUEUE */
3899 	ISPOPMAP(0x03, 0x07),	/* 0x1c: MBOX_ABORT_QUEUE */
3900 	ISPOPMAP(0x03, 0x4f),	/* 0x1d: MBOX_GET_DEV_QUEUE_STATUS */
3901 	ISPOPMAP(0x00, 0x00),	/* 0x1e: */
3902 	ISPOPMAP(0x01, 0x07),	/* 0x1f: MBOX_GET_FIRMWARE_STATUS */
3903 	ISPOPMAP(0x01, 0x07),	/* 0x20: MBOX_GET_INIT_SCSI_ID */
3904 	ISPOPMAP(0x01, 0x07),	/* 0x21: MBOX_GET_SELECT_TIMEOUT */
3905 	ISPOPMAP(0x01, 0xc7),	/* 0x22: MBOX_GET_RETRY_COUNT	*/
3906 	ISPOPMAP(0x01, 0x07),	/* 0x23: MBOX_GET_TAG_AGE_LIMIT */
3907 	ISPOPMAP(0x01, 0x03),	/* 0x24: MBOX_GET_CLOCK_RATE */
3908 	ISPOPMAP(0x01, 0x07),	/* 0x25: MBOX_GET_ACT_NEG_STATE */
3909 	ISPOPMAP(0x01, 0x07),	/* 0x26: MBOX_GET_ASYNC_DATA_SETUP_TIME */
3910 	ISPOPMAP(0x01, 0x07),	/* 0x27: MBOX_GET_PCI_PARAMS */
3911 	ISPOPMAP(0x03, 0x4f),	/* 0x28: MBOX_GET_TARGET_PARAMS */
3912 	ISPOPMAP(0x03, 0x0f),	/* 0x29: MBOX_GET_DEV_QUEUE_PARAMS */
3913 	ISPOPMAP(0x01, 0x07),	/* 0x2a: MBOX_GET_RESET_DELAY_PARAMS */
3914 	ISPOPMAP(0x00, 0x00),	/* 0x2b: */
3915 	ISPOPMAP(0x00, 0x00),	/* 0x2c: */
3916 	ISPOPMAP(0x00, 0x00),	/* 0x2d: */
3917 	ISPOPMAP(0x00, 0x00),	/* 0x2e: */
3918 	ISPOPMAP(0x00, 0x00),	/* 0x2f: */
3919 	ISPOPMAP(0x03, 0x03),	/* 0x30: MBOX_SET_INIT_SCSI_ID */
3920 	ISPOPMAP(0x07, 0x07),	/* 0x31: MBOX_SET_SELECT_TIMEOUT */
3921 	ISPOPMAP(0xc7, 0xc7),	/* 0x32: MBOX_SET_RETRY_COUNT	*/
3922 	ISPOPMAP(0x07, 0x07),	/* 0x33: MBOX_SET_TAG_AGE_LIMIT */
3923 	ISPOPMAP(0x03, 0x03),	/* 0x34: MBOX_SET_CLOCK_RATE */
3924 	ISPOPMAP(0x07, 0x07),	/* 0x35: MBOX_SET_ACT_NEG_STATE */
3925 	ISPOPMAP(0x07, 0x07),	/* 0x36: MBOX_SET_ASYNC_DATA_SETUP_TIME */
3926 	ISPOPMAP(0x07, 0x07),	/* 0x37: MBOX_SET_PCI_CONTROL_PARAMS */
3927 	ISPOPMAP(0x4f, 0x4f),	/* 0x38: MBOX_SET_TARGET_PARAMS */
3928 	ISPOPMAP(0x0f, 0x0f),	/* 0x39: MBOX_SET_DEV_QUEUE_PARAMS */
3929 	ISPOPMAP(0x07, 0x07),	/* 0x3a: MBOX_SET_RESET_DELAY_PARAMS */
3930 	ISPOPMAP(0x00, 0x00),	/* 0x3b: */
3931 	ISPOPMAP(0x00, 0x00),	/* 0x3c: */
3932 	ISPOPMAP(0x00, 0x00),	/* 0x3d: */
3933 	ISPOPMAP(0x00, 0x00),	/* 0x3e: */
3934 	ISPOPMAP(0x00, 0x00),	/* 0x3f: */
3935 	ISPOPMAP(0x01, 0x03),	/* 0x40: MBOX_RETURN_BIOS_BLOCK_ADDR */
3936 	ISPOPMAP(0x3f, 0x01),	/* 0x41: MBOX_WRITE_FOUR_RAM_WORDS */
3937 	ISPOPMAP(0x03, 0x07),	/* 0x42: MBOX_EXEC_BIOS_IOCB */
3938 	ISPOPMAP(0x00, 0x00),	/* 0x43: */
3939 	ISPOPMAP(0x00, 0x00),	/* 0x44: */
3940 	ISPOPMAP(0x03, 0x03),	/* 0x45: SET SYSTEM PARAMETER */
3941 	ISPOPMAP(0x01, 0x03),	/* 0x46: GET SYSTEM PARAMETER */
3942 	ISPOPMAP(0x00, 0x00),	/* 0x47: */
3943 	ISPOPMAP(0x01, 0xcf),	/* 0x48: GET SCAM CONFIGURATION */
3944 	ISPOPMAP(0xcf, 0xcf),	/* 0x49: SET SCAM CONFIGURATION */
3945 	ISPOPMAP(0x03, 0x03),	/* 0x4a: MBOX_SET_FIRMWARE_FEATURES */
3946 	ISPOPMAP(0x01, 0x03),	/* 0x4b: MBOX_GET_FIRMWARE_FEATURES */
3947 	ISPOPMAP(0x00, 0x00),	/* 0x4c: */
3948 	ISPOPMAP(0x00, 0x00),	/* 0x4d: */
3949 	ISPOPMAP(0x00, 0x00),	/* 0x4e: */
3950 	ISPOPMAP(0x00, 0x00),	/* 0x4f: */
3951 	ISPOPMAP(0xdf, 0xdf),	/* 0x50: LOAD RAM A64 */
3952 	ISPOPMAP(0xdf, 0xdf),	/* 0x51: DUMP RAM A64 */
3953 	ISPOPMAP(0xdf, 0xdf),	/* 0x52: INITIALIZE REQUEST QUEUE A64 */
3954 	ISPOPMAP(0xff, 0xff),	/* 0x53: INITIALIZE RESPONSE QUEUE A64 */
3955 	ISPOPMAP(0xcf, 0xff),	/* 0x54: EXECUTE IOCB A64 */
3956 	ISPOPMAP(0x07, 0x01),	/* 0x55: ENABLE TARGET MODE */
3957 	ISPOPMAP(0x03, 0x0f),	/* 0x56: GET TARGET STATUS */
3958 	ISPOPMAP(0x00, 0x00),	/* 0x57: */
3959 	ISPOPMAP(0x00, 0x00),	/* 0x58: */
3960 	ISPOPMAP(0x00, 0x00),	/* 0x59: */
3961 	ISPOPMAP(0x03, 0x03),	/* 0x5a: SET DATA OVERRUN RECOVERY MODE */
3962 	ISPOPMAP(0x01, 0x03),	/* 0x5b: GET DATA OVERRUN RECOVERY MODE */
3963 	ISPOPMAP(0x0f, 0x0f),	/* 0x5c: SET HOST DATA */
3964 	ISPOPMAP(0x01, 0x01)	/* 0x5d: GET NOST DATA */
3965 };
3966 
3967 #ifndef	ISP_STRIPPED
3968 static char *scsi_mbcmd_names[] = {
3969 	"NO-OP",
3970 	"LOAD RAM",
3971 	"EXEC FIRMWARE",
3972 	"DUMP RAM",
3973 	"WRITE RAM WORD",
3974 	"READ RAM WORD",
3975 	"MAILBOX REG TEST",
3976 	"VERIFY CHECKSUM",
3977 	"ABOUT FIRMWARE",
3978 	NULL,
3979 	NULL,
3980 	NULL,
3981 	NULL,
3982 	NULL,
3983 	"CHECK FIRMWARE",
3984 	NULL,
3985 	"INIT REQUEST QUEUE",
3986 	"INIT RESULT QUEUE",
3987 	"EXECUTE IOCB",
3988 	"WAKE UP",
3989 	"STOP FIRMWARE",
3990 	"ABORT",
3991 	"ABORT DEVICE",
3992 	"ABORT TARGET",
3993 	"BUS RESET",
3994 	"STOP QUEUE",
3995 	"START QUEUE",
3996 	"SINGLE STEP QUEUE",
3997 	"ABORT QUEUE",
3998 	"GET DEV QUEUE STATUS",
3999 	NULL,
4000 	"GET FIRMWARE STATUS",
4001 	"GET INIT SCSI ID",
4002 	"GET SELECT TIMEOUT",
4003 	"GET RETRY COUNT",
4004 	"GET TAG AGE LIMIT",
4005 	"GET CLOCK RATE",
4006 	"GET ACT NEG STATE",
4007 	"GET ASYNC DATA SETUP TIME",
4008 	"GET PCI PARAMS",
4009 	"GET TARGET PARAMS",
4010 	"GET DEV QUEUE PARAMS",
4011 	"GET RESET DELAY PARAMS",
4012 	NULL,
4013 	NULL,
4014 	NULL,
4015 	NULL,
4016 	NULL,
4017 	"SET INIT SCSI ID",
4018 	"SET SELECT TIMEOUT",
4019 	"SET RETRY COUNT",
4020 	"SET TAG AGE LIMIT",
4021 	"SET CLOCK RATE",
4022 	"SET ACT NEG STATE",
4023 	"SET ASYNC DATA SETUP TIME",
4024 	"SET PCI CONTROL PARAMS",
4025 	"SET TARGET PARAMS",
4026 	"SET DEV QUEUE PARAMS",
4027 	"SET RESET DELAY PARAMS",
4028 	NULL,
4029 	NULL,
4030 	NULL,
4031 	NULL,
4032 	NULL,
4033 	"RETURN BIOS BLOCK ADDR",
4034 	"WRITE FOUR RAM WORDS",
4035 	"EXEC BIOS IOCB",
4036 	NULL,
4037 	NULL,
4038 	"SET SYSTEM PARAMETER",
4039 	"GET SYSTEM PARAMETER",
4040 	NULL,
4041 	"GET SCAM CONFIGURATION",
4042 	"SET SCAM CONFIGURATION",
4043 	"SET FIRMWARE FEATURES",
4044 	"GET FIRMWARE FEATURES",
4045 	NULL,
4046 	NULL,
4047 	NULL,
4048 	NULL,
4049 	"LOAD RAM A64",
4050 	"DUMP RAM A64",
4051 	"INITIALIZE REQUEST QUEUE A64",
4052 	"INITIALIZE RESPONSE QUEUE A64",
4053 	"EXECUTE IOCB A64",
4054 	"ENABLE TARGET MODE",
4055 	"GET TARGET MODE STATE",
4056 	NULL,
4057 	NULL,
4058 	NULL,
4059 	"SET DATA OVERRUN RECOVERY MODE",
4060 	"GET DATA OVERRUN RECOVERY MODE",
4061 	"SET HOST DATA",
4062 	"GET NOST DATA",
4063 };
4064 #endif
4065 
4066 static u_int16_t mbpfc[] = {
4067 	ISPOPMAP(0x01, 0x01),	/* 0x00: MBOX_NO_OP */
4068 	ISPOPMAP(0x1f, 0x01),	/* 0x01: MBOX_LOAD_RAM */
4069 	ISPOPMAP(0x03, 0x01),	/* 0x02: MBOX_EXEC_FIRMWARE */
4070 	ISPOPMAP(0xdf, 0x01),	/* 0x03: MBOX_DUMP_RAM */
4071 	ISPOPMAP(0x07, 0x07),	/* 0x04: MBOX_WRITE_RAM_WORD */
4072 	ISPOPMAP(0x03, 0x07),	/* 0x05: MBOX_READ_RAM_WORD */
4073 	ISPOPMAP(0xff, 0xff),	/* 0x06: MBOX_MAILBOX_REG_TEST */
4074 	ISPOPMAP(0x03, 0x05),	/* 0x07: MBOX_VERIFY_CHECKSUM	*/
4075 	ISPOPMAP(0x01, 0x0f),	/* 0x08: MBOX_ABOUT_FIRMWARE */
4076 	ISPOPMAP(0xdf, 0x01),	/* 0x09: LOAD RAM */
4077 	ISPOPMAP(0xdf, 0x01),	/* 0x0a: DUMP RAM */
4078 	ISPOPMAP(0x00, 0x00),	/* 0x0b: */
4079 	ISPOPMAP(0x00, 0x00),	/* 0x0c: */
4080 	ISPOPMAP(0x00, 0x00),	/* 0x0d: */
4081 	ISPOPMAP(0x01, 0x05),	/* 0x0e: MBOX_CHECK_FIRMWARE */
4082 	ISPOPMAP(0x00, 0x00),	/* 0x0f: */
4083 	ISPOPMAP(0x1f, 0x11),	/* 0x10: MBOX_INIT_REQ_QUEUE */
4084 	ISPOPMAP(0x2f, 0x21),	/* 0x11: MBOX_INIT_RES_QUEUE */
4085 	ISPOPMAP(0x0f, 0x01),	/* 0x12: MBOX_EXECUTE_IOCB */
4086 	ISPOPMAP(0x03, 0x03),	/* 0x13: MBOX_WAKE_UP	*/
4087 	ISPOPMAP(0x01, 0xff),	/* 0x14: MBOX_STOP_FIRMWARE */
4088 	ISPOPMAP(0x4f, 0x01),	/* 0x15: MBOX_ABORT */
4089 	ISPOPMAP(0x07, 0x01),	/* 0x16: MBOX_ABORT_DEVICE */
4090 	ISPOPMAP(0x07, 0x01),	/* 0x17: MBOX_ABORT_TARGET */
4091 	ISPOPMAP(0x03, 0x03),	/* 0x18: MBOX_BUS_RESET */
4092 	ISPOPMAP(0x07, 0x05),	/* 0x19: MBOX_STOP_QUEUE */
4093 	ISPOPMAP(0x07, 0x05),	/* 0x1a: MBOX_START_QUEUE */
4094 	ISPOPMAP(0x07, 0x05),	/* 0x1b: MBOX_SINGLE_STEP_QUEUE */
4095 	ISPOPMAP(0x07, 0x05),	/* 0x1c: MBOX_ABORT_QUEUE */
4096 	ISPOPMAP(0x07, 0x03),	/* 0x1d: MBOX_GET_DEV_QUEUE_STATUS */
4097 	ISPOPMAP(0x00, 0x00),	/* 0x1e: */
4098 	ISPOPMAP(0x01, 0x07),	/* 0x1f: MBOX_GET_FIRMWARE_STATUS */
4099 	ISPOPMAP(0x01, 0x4f),	/* 0x20: MBOX_GET_LOOP_ID */
4100 	ISPOPMAP(0x00, 0x00),	/* 0x21: */
4101 	ISPOPMAP(0x01, 0x07),	/* 0x22: MBOX_GET_RETRY_COUNT	*/
4102 	ISPOPMAP(0x00, 0x00),	/* 0x23: */
4103 	ISPOPMAP(0x00, 0x00),	/* 0x24: */
4104 	ISPOPMAP(0x00, 0x00),	/* 0x25: */
4105 	ISPOPMAP(0x00, 0x00),	/* 0x26: */
4106 	ISPOPMAP(0x00, 0x00),	/* 0x27: */
4107 	ISPOPMAP(0x0f, 0x1),	/* 0x28: MBOX_GET_FIRMWARE_OPTIONS */
4108 	ISPOPMAP(0x03, 0x07),	/* 0x29: MBOX_GET_PORT_QUEUE_PARAMS */
4109 	ISPOPMAP(0x00, 0x00),	/* 0x2a: */
4110 	ISPOPMAP(0x00, 0x00),	/* 0x2b: */
4111 	ISPOPMAP(0x00, 0x00),	/* 0x2c: */
4112 	ISPOPMAP(0x00, 0x00),	/* 0x2d: */
4113 	ISPOPMAP(0x00, 0x00),	/* 0x2e: */
4114 	ISPOPMAP(0x00, 0x00),	/* 0x2f: */
4115 	ISPOPMAP(0x00, 0x00),	/* 0x30: */
4116 	ISPOPMAP(0x00, 0x00),	/* 0x31: */
4117 	ISPOPMAP(0x07, 0x07),	/* 0x32: MBOX_SET_RETRY_COUNT	*/
4118 	ISPOPMAP(0x00, 0x00),	/* 0x33: */
4119 	ISPOPMAP(0x00, 0x00),	/* 0x34: */
4120 	ISPOPMAP(0x00, 0x00),	/* 0x35: */
4121 	ISPOPMAP(0x00, 0x00),	/* 0x36: */
4122 	ISPOPMAP(0x00, 0x00),	/* 0x37: */
4123 	ISPOPMAP(0x0f, 0x01),	/* 0x38: MBOX_SET_FIRMWARE_OPTIONS */
4124 	ISPOPMAP(0x0f, 0x07),	/* 0x39: MBOX_SET_PORT_QUEUE_PARAMS */
4125 	ISPOPMAP(0x00, 0x00),	/* 0x3a: */
4126 	ISPOPMAP(0x00, 0x00),	/* 0x3b: */
4127 	ISPOPMAP(0x00, 0x00),	/* 0x3c: */
4128 	ISPOPMAP(0x00, 0x00),	/* 0x3d: */
4129 	ISPOPMAP(0x00, 0x00),	/* 0x3e: */
4130 	ISPOPMAP(0x00, 0x00),	/* 0x3f: */
4131 	ISPOPMAP(0x03, 0x01),	/* 0x40: MBOX_LOOP_PORT_BYPASS */
4132 	ISPOPMAP(0x03, 0x01),	/* 0x41: MBOX_LOOP_PORT_ENABLE */
4133 	ISPOPMAP(0x03, 0x07),	/* 0x42: MBOX_GET_RESOURCE_COUNTS */
4134 	ISPOPMAP(0x01, 0x01),	/* 0x43: MBOX_REQUEST_NON_PARTICIPATING_MODE */
4135 	ISPOPMAP(0x00, 0x00),	/* 0x44: */
4136 	ISPOPMAP(0x00, 0x00),	/* 0x45: */
4137 	ISPOPMAP(0x00, 0x00),	/* 0x46: */
4138 	ISPOPMAP(0xcf, 0x03),	/* 0x47: GET PORT_DATABASE ENHANCED */
4139 	ISPOPMAP(0x00, 0x00),	/* 0x48: */
4140 	ISPOPMAP(0x00, 0x00),	/* 0x49: */
4141 	ISPOPMAP(0x00, 0x00),	/* 0x4a: */
4142 	ISPOPMAP(0x00, 0x00),	/* 0x4b: */
4143 	ISPOPMAP(0x00, 0x00),	/* 0x4c: */
4144 	ISPOPMAP(0x00, 0x00),	/* 0x4d: */
4145 	ISPOPMAP(0x00, 0x00),	/* 0x4e: */
4146 	ISPOPMAP(0x00, 0x00),	/* 0x4f: */
4147 	ISPOPMAP(0x00, 0x00),	/* 0x50: */
4148 	ISPOPMAP(0x00, 0x00),	/* 0x51: */
4149 	ISPOPMAP(0x00, 0x00),	/* 0x52: */
4150 	ISPOPMAP(0x00, 0x00),	/* 0x53: */
4151 	ISPOPMAP(0xcf, 0x01),	/* 0x54: EXECUTE IOCB A64 */
4152 	ISPOPMAP(0x00, 0x00),	/* 0x55: */
4153 	ISPOPMAP(0x00, 0x00),	/* 0x56: */
4154 	ISPOPMAP(0x00, 0x00),	/* 0x57: */
4155 	ISPOPMAP(0x00, 0x00),	/* 0x58: */
4156 	ISPOPMAP(0x00, 0x00),	/* 0x59: */
4157 	ISPOPMAP(0x00, 0x00),	/* 0x5a: */
4158 	ISPOPMAP(0x00, 0x00),	/* 0x5b: */
4159 	ISPOPMAP(0x00, 0x00),	/* 0x5c: */
4160 	ISPOPMAP(0x00, 0x00),	/* 0x5d: */
4161 	ISPOPMAP(0x00, 0x00),	/* 0x5e: */
4162 	ISPOPMAP(0x00, 0x00),	/* 0x5f: */
4163 	ISPOPMAP(0xfd, 0x31),	/* 0x60: MBOX_INIT_FIRMWARE */
4164 	ISPOPMAP(0x00, 0x00),	/* 0x61: */
4165 	ISPOPMAP(0x01, 0x01),	/* 0x62: MBOX_INIT_LIP */
4166 	ISPOPMAP(0xcd, 0x03),	/* 0x63: MBOX_GET_FC_AL_POSITION_MAP */
4167 	ISPOPMAP(0xcf, 0x01),	/* 0x64: MBOX_GET_PORT_DB */
4168 	ISPOPMAP(0x07, 0x01),	/* 0x65: MBOX_CLEAR_ACA */
4169 	ISPOPMAP(0x07, 0x01),	/* 0x66: MBOX_TARGET_RESET */
4170 	ISPOPMAP(0x07, 0x01),	/* 0x67: MBOX_CLEAR_TASK_SET */
4171 	ISPOPMAP(0x07, 0x01),	/* 0x68: MBOX_ABORT_TASK_SET */
4172 	ISPOPMAP(0x01, 0x07),	/* 0x69: MBOX_GET_FW_STATE */
4173 	ISPOPMAP(0x03, 0xcf),	/* 0x6a: MBOX_GET_PORT_NAME */
4174 	ISPOPMAP(0xcf, 0x01),	/* 0x6b: MBOX_GET_LINK_STATUS */
4175 	ISPOPMAP(0x0f, 0x01),	/* 0x6c: MBOX_INIT_LIP_RESET */
4176 	ISPOPMAP(0x00, 0x00),	/* 0x6d: */
4177 	ISPOPMAP(0xcf, 0x03),	/* 0x6e: MBOX_SEND_SNS */
4178 	ISPOPMAP(0x0f, 0x07),	/* 0x6f: MBOX_FABRIC_LOGIN */
4179 	ISPOPMAP(0x03, 0x01),	/* 0x70: MBOX_SEND_CHANGE_REQUEST */
4180 	ISPOPMAP(0x03, 0x03),	/* 0x71: MBOX_FABRIC_LOGOUT */
4181 	ISPOPMAP(0x0f, 0x0f),	/* 0x72: MBOX_INIT_LIP_LOGIN */
4182 	ISPOPMAP(0x00, 0x00),	/* 0x73: */
4183 	ISPOPMAP(0x07, 0x01),	/* 0x74: LOGIN LOOP PORT */
4184 	ISPOPMAP(0xcf, 0x03),	/* 0x75: GET PORT/NODE NAME LIST */
4185 	ISPOPMAP(0x4f, 0x01),	/* 0x76: SET VENDOR ID */
4186 	ISPOPMAP(0xcd, 0x01),	/* 0x77: INITIALIZE IP MAILBOX */
4187 	ISPOPMAP(0x00, 0x00),	/* 0x78: */
4188 	ISPOPMAP(0x00, 0x00),	/* 0x79: */
4189 	ISPOPMAP(0x00, 0x00),	/* 0x7a: */
4190 	ISPOPMAP(0x00, 0x00),	/* 0x7b: */
4191 	ISPOPMAP(0x4f, 0x03),	/* 0x7c: Get ID List */
4192 	ISPOPMAP(0xcf, 0x01),	/* 0x7d: SEND LFA */
4193 	ISPOPMAP(0x07, 0x01)	/* 0x7e: Lun RESET */
4194 };
4195 
4196 #ifndef	ISP_STRIPPED
4197 static char *fc_mbcmd_names[] = {
4198 	"NO-OP",
4199 	"LOAD RAM",
4200 	"EXEC FIRMWARE",
4201 	"DUMP RAM",
4202 	"WRITE RAM WORD",
4203 	"READ RAM WORD",
4204 	"MAILBOX REG TEST",
4205 	"VERIFY CHECKSUM",
4206 	"ABOUT FIRMWARE",
4207 	"LOAD RAM",
4208 	"DUMP RAM",
4209 	NULL,
4210 	NULL,
4211 	NULL,
4212 	"CHECK FIRMWARE",
4213 	NULL,
4214 	"INIT REQUEST QUEUE",
4215 	"INIT RESULT QUEUE",
4216 	"EXECUTE IOCB",
4217 	"WAKE UP",
4218 	"STOP FIRMWARE",
4219 	"ABORT",
4220 	"ABORT DEVICE",
4221 	"ABORT TARGET",
4222 	"BUS RESET",
4223 	"STOP QUEUE",
4224 	"START QUEUE",
4225 	"SINGLE STEP QUEUE",
4226 	"ABORT QUEUE",
4227 	"GET DEV QUEUE STATUS",
4228 	NULL,
4229 	"GET FIRMWARE STATUS",
4230 	"GET LOOP ID",
4231 	NULL,
4232 	"GET RETRY COUNT",
4233 	NULL,
4234 	NULL,
4235 	NULL,
4236 	NULL,
4237 	NULL,
4238 	"GET FIRMWARE OPTIONS",
4239 	"GET PORT QUEUE PARAMS",
4240 	NULL,
4241 	NULL,
4242 	NULL,
4243 	NULL,
4244 	NULL,
4245 	NULL,
4246 	NULL,
4247 	NULL,
4248 	"SET RETRY COUNT",
4249 	NULL,
4250 	NULL,
4251 	NULL,
4252 	NULL,
4253 	NULL,
4254 	"SET FIRMWARE OPTIONS",
4255 	"SET PORT QUEUE PARAMS",
4256 	NULL,
4257 	NULL,
4258 	NULL,
4259 	NULL,
4260 	NULL,
4261 	NULL,
4262 	"LOOP PORT BYPASS",
4263 	"LOOP PORT ENABLE",
4264 	"GET RESOURCE COUNTS",
4265 	"REQUEST NON PARTICIPATING MODE",
4266 	NULL,
4267 	NULL,
4268 	NULL,
4269 	"GET PORT DATABASE,, ENHANCED",
4270 	NULL,
4271 	NULL,
4272 	NULL,
4273 	NULL,
4274 	NULL,
4275 	NULL,
4276 	NULL,
4277 	NULL,
4278 	NULL,
4279 	NULL,
4280 	NULL,
4281 	NULL,
4282 	"EXECUTE IOCB A64",
4283 	NULL,
4284 	NULL,
4285 	NULL,
4286 	NULL,
4287 	NULL,
4288 	NULL,
4289 	NULL,
4290 	NULL,
4291 	NULL,
4292 	NULL,
4293 	NULL,
4294 	"INIT FIRMWARE",
4295 	NULL,
4296 	"INIT LIP",
4297 	"GET FC-AL POSITION MAP",
4298 	"GET PORT DATABASE",
4299 	"CLEAR ACA",
4300 	"TARGET RESET",
4301 	"CLEAR TASK SET",
4302 	"ABORT TASK SET",
4303 	"GET FW STATE",
4304 	"GET PORT NAME",
4305 	"GET LINK STATUS",
4306 	"INIT LIP RESET",
4307 	NULL,
4308 	"SEND SNS",
4309 	"FABRIC LOGIN",
4310 	"SEND CHANGE REQUEST",
4311 	"FABRIC LOGOUT",
4312 	"INIT LIP LOGIN",
4313 	NULL,
4314 	"LOGIN LOOP PORT",
4315 	"GET PORT/NODE NAME LIST",
4316 	"SET VENDOR ID",
4317 	"INITIALIZE IP MAILBOX",
4318 	NULL,
4319 	NULL,
4320 	NULL,
4321 	NULL,
4322 	"Get ID List",
4323 	"SEND LFA",
4324 	"Lun RESET"
4325 };
4326 #endif
4327 
4328 static void
4329 isp_mboxcmd(struct ispsoftc *isp, mbreg_t *mbp, int logmask)
4330 {
4331 	char *cname, *xname, tname[16], mname[16];
4332 	unsigned int lim, ibits, obits, box, opcode;
4333 	u_int16_t *mcp;
4334 
4335 	if (IS_FC(isp)) {
4336 		mcp = mbpfc;
4337 		lim = (sizeof (mbpfc) / sizeof (mbpfc[0]));
4338 	} else {
4339 		mcp = mbpscsi;
4340 		lim = (sizeof (mbpscsi) / sizeof (mbpscsi[0]));
4341 	}
4342 
4343 	if ((opcode = mbp->param[0]) >= lim) {
4344 		mbp->param[0] = MBOX_INVALID_COMMAND;
4345 		isp_prt(isp, ISP_LOGERR, "Unknown Command 0x%x", opcode);
4346 		return;
4347 	}
4348 
4349 	ibits = HIBYT(mcp[opcode]) & NMBOX_BMASK(isp);
4350 	obits = LOBYT(mcp[opcode]) & NMBOX_BMASK(isp);
4351 
4352 	if (ibits == 0 && obits == 0) {
4353 		mbp->param[0] = MBOX_COMMAND_PARAM_ERROR;
4354 		isp_prt(isp, ISP_LOGERR, "no parameters for 0x%x", opcode);
4355 		return;
4356 	}
4357 
4358 	/*
4359 	 * Get exclusive usage of mailbox registers.
4360 	 */
4361 	MBOX_ACQUIRE(isp);
4362 
4363 	for (box = 0; box < MAX_MAILBOX; box++) {
4364 		if (ibits & (1 << box)) {
4365 			ISP_WRITE(isp, MBOX_OFF(box), mbp->param[box]);
4366 		}
4367 		isp->isp_mboxtmp[box] = mbp->param[box] = 0;
4368 	}
4369 
4370 	isp->isp_lastmbxcmd = opcode;
4371 
4372 	/*
4373 	 * We assume that we can't overwrite a previous command.
4374 	 */
4375 	isp->isp_mboxbsy = obits;
4376 
4377 	/*
4378 	 * Set Host Interrupt condition so that RISC will pick up mailbox regs.
4379 	 */
4380 	ISP_WRITE(isp, HCCR, HCCR_CMD_SET_HOST_INT);
4381 
4382 	/*
4383 	 * While we haven't finished the command, spin our wheels here.
4384 	 */
4385 	MBOX_WAIT_COMPLETE(isp);
4386 
4387 	/*
4388 	 * Copy back output registers.
4389 	 */
4390 	for (box = 0; box < MAX_MAILBOX; box++) {
4391 		if (obits & (1 << box)) {
4392 			mbp->param[box] = isp->isp_mboxtmp[box];
4393 		}
4394 	}
4395 
4396 	MBOX_RELEASE(isp);
4397 
4398 	if (logmask == 0 || opcode == MBOX_EXEC_FIRMWARE) {
4399 		return;
4400 	}
4401 #ifdef	ISP_STRIPPED
4402 	cname = NULL;
4403 #else
4404 	cname = (IS_FC(isp))? fc_mbcmd_names[opcode] : scsi_mbcmd_names[opcode];
4405 #endif
4406 	if (cname == NULL) {
4407 		cname = tname;
4408 		SNPRINTF(tname, sizeof tname, "opcode %x", opcode);
4409 	}
4410 
4411 	/*
4412 	 * Just to be chatty here...
4413 	 */
4414 	xname = NULL;
4415 	switch (mbp->param[0]) {
4416 	case MBOX_COMMAND_COMPLETE:
4417 		break;
4418 	case MBOX_INVALID_COMMAND:
4419 		if (logmask & MBLOGMASK(MBOX_COMMAND_COMPLETE))
4420 			xname = "INVALID COMMAND";
4421 		break;
4422 	case MBOX_HOST_INTERFACE_ERROR:
4423 		if (logmask & MBLOGMASK(MBOX_HOST_INTERFACE_ERROR))
4424 			xname = "HOST INTERFACE ERROR";
4425 		break;
4426 	case MBOX_TEST_FAILED:
4427 		if (logmask & MBLOGMASK(MBOX_TEST_FAILED))
4428 			xname = "TEST FAILED";
4429 		break;
4430 	case MBOX_COMMAND_ERROR:
4431 		if (logmask & MBLOGMASK(MBOX_COMMAND_ERROR))
4432 			xname = "COMMAND ERROR";
4433 		break;
4434 	case MBOX_COMMAND_PARAM_ERROR:
4435 		if (logmask & MBLOGMASK(MBOX_COMMAND_PARAM_ERROR))
4436 			xname = "COMMAND PARAMETER ERROR";
4437 		break;
4438 	case MBOX_LOOP_ID_USED:
4439 		if (logmask & MBLOGMASK(MBOX_LOOP_ID_USED))
4440 			xname = "LOOP ID ALREADY IN USE";
4441 		break;
4442 	case MBOX_PORT_ID_USED:
4443 		if (logmask & MBLOGMASK(MBOX_PORT_ID_USED))
4444 			xname = "PORT ID ALREADY IN USE";
4445 		break;
4446 	case MBOX_ALL_IDS_USED:
4447 		if (logmask & MBLOGMASK(MBOX_ALL_IDS_USED))
4448 			xname = "ALL LOOP IDS IN USE";
4449 		break;
4450 	case 0:		/* special case */
4451 		xname = "TIMEOUT";
4452 		break;
4453 	default:
4454 		SNPRINTF(mname, sizeof mname, "error 0x%x", mbp->param[0]);
4455 		xname = mname;
4456 		break;
4457 	}
4458 	if (xname)
4459 		isp_prt(isp, ISP_LOGALL, "Mailbox Command '%s' failed (%s)",
4460 		    cname, xname);
4461 }
4462 
4463 static void
4464 isp_fw_state(struct ispsoftc *isp)
4465 {
4466 	if (IS_FC(isp)) {
4467 		mbreg_t mbs;
4468 		fcparam *fcp = isp->isp_param;
4469 
4470 		mbs.param[0] = MBOX_GET_FW_STATE;
4471 		isp_mboxcmd(isp, &mbs, MBLOGALL);
4472 		if (mbs.param[0] == MBOX_COMMAND_COMPLETE) {
4473 			fcp->isp_fwstate = mbs.param[1];
4474 		}
4475 	}
4476 }
4477 
4478 static void
4479 isp_update(struct ispsoftc *isp)
4480 {
4481 	int bus, upmask;
4482 
4483 	for (bus = 0, upmask = isp->isp_update; upmask != 0; bus++) {
4484 		if (upmask & (1 << bus)) {
4485 			isp_update_bus(isp, bus);
4486 		}
4487 		upmask &= ~(1 << bus);
4488 	}
4489 }
4490 
4491 static void
4492 isp_update_bus(struct ispsoftc *isp, int bus)
4493 {
4494 	int tgt;
4495 	mbreg_t mbs;
4496 	sdparam *sdp;
4497 
4498 	isp->isp_update &= ~(1 << bus);
4499 	if (IS_FC(isp)) {
4500 		/*
4501 		 * There are no 'per-bus' settings for Fibre Channel.
4502 		 */
4503 		return;
4504 	}
4505 	sdp = isp->isp_param;
4506 	sdp += bus;
4507 
4508 	for (tgt = 0; tgt < MAX_TARGETS; tgt++) {
4509 		u_int16_t flags, period, offset;
4510 		int get;
4511 
4512 		if (sdp->isp_devparam[tgt].dev_enable == 0) {
4513 			sdp->isp_devparam[tgt].dev_update = 0;
4514 			sdp->isp_devparam[tgt].dev_refresh = 0;
4515 			isp_prt(isp, ISP_LOGDEBUG0,
4516 	 		    "skipping target %d bus %d update", tgt, bus);
4517 			continue;
4518 		}
4519 		/*
4520 		 * If the goal is to update the status of the device,
4521 		 * take what's in dev_flags and try and set the device
4522 		 * toward that. Otherwise, if we're just refreshing the
4523 		 * current device state, get the current parameters.
4524 		 */
4525 
4526 		/*
4527 		 * Refresh overrides set
4528 		 */
4529 		if (sdp->isp_devparam[tgt].dev_refresh) {
4530 			mbs.param[0] = MBOX_GET_TARGET_PARAMS;
4531 			sdp->isp_devparam[tgt].dev_refresh = 0;
4532 			get = 1;
4533 		} else if (sdp->isp_devparam[tgt].dev_update) {
4534 			mbs.param[0] = MBOX_SET_TARGET_PARAMS;
4535 			/*
4536 			 * Make sure dev_flags has "Renegotiate on Error"
4537 			 * on and "Freeze Queue on Error" off.
4538 			 */
4539 			sdp->isp_devparam[tgt].dev_flags |= DPARM_RENEG;
4540 			sdp->isp_devparam[tgt].dev_flags &= ~DPARM_QFRZ;
4541 
4542 			mbs.param[2] = sdp->isp_devparam[tgt].dev_flags;
4543 
4544 			/*
4545 			 * Insist that PARITY must be enabled
4546 			 * if SYNC or WIDE is enabled.
4547 			 */
4548 			if ((mbs.param[2] & (DPARM_SYNC|DPARM_WIDE)) != 0) {
4549 				mbs.param[2] |= DPARM_PARITY;
4550 			}
4551 
4552 			if ((mbs.param[2] & DPARM_SYNC) == 0) {
4553 				mbs.param[3] = 0;
4554 			} else {
4555 				mbs.param[3] =
4556 				    (sdp->isp_devparam[tgt].sync_offset << 8) |
4557 				    (sdp->isp_devparam[tgt].sync_period);
4558 			}
4559 			/*
4560 			 * A command completion later that has
4561 			 * RQSTF_NEGOTIATION set canl cause
4562 			 * the dev_refresh/announce cycle also.
4563 			 &
4564 			 *
4565 			 * Note: It is really important to update our current
4566 			 * flags with at least the state of TAG capabilities-
4567 			 * otherwise we might try and send a tagged command
4568 			 * when we have it all turned off. So change it here
4569 			 * to say that current already matches goal.
4570 			 */
4571 			sdp->isp_devparam[tgt].cur_dflags &= ~DPARM_TQING;
4572 			sdp->isp_devparam[tgt].cur_dflags |=
4573 			    (sdp->isp_devparam[tgt].dev_flags & DPARM_TQING);
4574 			isp_prt(isp, ISP_LOGDEBUG0,
4575 			    "bus %d set tgt %d flags 0x%x off 0x%x period 0x%x",
4576 			    bus, tgt, mbs.param[2], mbs.param[3] >> 8,
4577 			    mbs.param[3] & 0xff);
4578 			sdp->isp_devparam[tgt].dev_update = 0;
4579 			sdp->isp_devparam[tgt].dev_refresh = 1;
4580 			get = 0;
4581 		} else {
4582 			continue;
4583 		}
4584 		mbs.param[1] = (bus << 15) | (tgt << 8);
4585 		isp_mboxcmd(isp, &mbs, MBLOGALL);
4586 		if (get == 0) {
4587 			isp->isp_sendmarker |= (1 << bus);
4588 			continue;
4589 		}
4590 		flags = mbs.param[2];
4591 		period = mbs.param[3] & 0xff;
4592 		offset = mbs.param[3] >> 8;
4593 		sdp->isp_devparam[tgt].cur_dflags = flags;
4594 		sdp->isp_devparam[tgt].cur_period = period;
4595 		sdp->isp_devparam[tgt].cur_offset = offset;
4596 		get = (bus << 16) | tgt;
4597 		(void) isp_async(isp, ISPASYNC_NEW_TGT_PARAMS, &get);
4598 	}
4599 
4600 	for (tgt = 0; tgt < MAX_TARGETS; tgt++) {
4601 		if (sdp->isp_devparam[tgt].dev_update ||
4602 		    sdp->isp_devparam[tgt].dev_refresh) {
4603 			isp->isp_update |= (1 << bus);
4604 			break;
4605 		}
4606 	}
4607 }
4608 
4609 static void
4610 isp_setdfltparm(struct ispsoftc *isp, int channel)
4611 {
4612 	int tgt;
4613 	mbreg_t mbs;
4614 	sdparam *sdp;
4615 
4616 	if (IS_FC(isp)) {
4617 		fcparam *fcp = (fcparam *) isp->isp_param;
4618 		int nvfail;
4619 
4620 		fcp += channel;
4621 		if (fcp->isp_gotdparms) {
4622 			return;
4623 		}
4624 		fcp->isp_gotdparms = 1;
4625 		fcp->isp_maxfrmlen = ICB_DFLT_FRMLEN;
4626 		fcp->isp_maxalloc = ICB_DFLT_ALLOC;
4627 		fcp->isp_execthrottle = ISP_EXEC_THROTTLE;
4628 		fcp->isp_retry_delay = ICB_DFLT_RDELAY;
4629 		fcp->isp_retry_count = ICB_DFLT_RCOUNT;
4630 		/* Platform specific.... */
4631 		fcp->isp_loopid = DEFAULT_LOOPID(isp);
4632 		fcp->isp_nodewwn = DEFAULT_NODEWWN(isp);
4633 		fcp->isp_portwwn = DEFAULT_PORTWWN(isp);
4634 		fcp->isp_fwoptions = 0;
4635 		fcp->isp_fwoptions |= ICBOPT_FAIRNESS;
4636 		fcp->isp_fwoptions |= ICBOPT_PDBCHANGE_AE;
4637 		fcp->isp_fwoptions |= ICBOPT_HARD_ADDRESS;
4638 #ifndef	ISP_NO_FASTPOST_FC
4639 		fcp->isp_fwoptions |= ICBOPT_FAST_POST;
4640 #endif
4641 		if (isp->isp_confopts & ISP_CFG_FULL_DUPLEX)
4642 			fcp->isp_fwoptions |= ICBOPT_FULL_DUPLEX;
4643 
4644 		/*
4645 		 * Make sure this is turned off now until we get
4646 		 * extended options from NVRAM
4647 		 */
4648 		fcp->isp_fwoptions &= ~ICBOPT_EXTENDED;
4649 
4650 		/*
4651 		 * Now try and read NVRAM unless told to not do so.
4652 		 * This will set fcparam's isp_nodewwn && isp_portwwn.
4653 		 */
4654 		if ((isp->isp_confopts & ISP_CFG_NONVRAM) == 0) {
4655 		    	nvfail = isp_read_nvram(isp);
4656 			if (nvfail)
4657 				isp->isp_confopts |= ISP_CFG_NONVRAM;
4658 		} else {
4659 			nvfail = 1;
4660 		}
4661 		/*
4662 		 * Set node && port to override platform set defaults
4663 		 * unless the nvram read failed (or none was done),
4664 		 * or the platform code wants to use what had been
4665 		 * set in the defaults.
4666 		 */
4667 		if (nvfail || (isp->isp_confopts & ISP_CFG_OWNWWN)) {
4668 			isp_prt(isp, ISP_LOGCONFIG,
4669 			    "Using Node WWN 0x%08x%08x, Port WWN 0x%08x%08x",
4670 			    (u_int32_t) (DEFAULT_NODEWWN(isp) >> 32),
4671 			    (u_int32_t) (DEFAULT_NODEWWN(isp) & 0xffffffff),
4672 			    (u_int32_t) (DEFAULT_PORTWWN(isp) >> 32),
4673 			    (u_int32_t) (DEFAULT_PORTWWN(isp) & 0xffffffff));
4674 			isp->isp_confopts |= ISP_CFG_OWNWWN;
4675 			ISP_NODEWWN(isp) = DEFAULT_NODEWWN(isp);
4676 			ISP_PORTWWN(isp) = DEFAULT_PORTWWN(isp);
4677 		} else {
4678 			/*
4679 			 * We always start out with values derived
4680 			 * from NVRAM or our platform default.
4681 			 */
4682 			ISP_NODEWWN(isp) = fcp->isp_nodewwn;
4683 			ISP_PORTWWN(isp) = fcp->isp_portwwn;
4684 		}
4685 		return;
4686 	}
4687 
4688 	sdp = (sdparam *) isp->isp_param;
4689 	sdp += channel;
4690 
4691 	/*
4692 	 * Been there, done that, got the T-shirt...
4693 	 */
4694 	if (sdp->isp_gotdparms) {
4695 		return;
4696 	}
4697 	sdp->isp_gotdparms = 1;
4698 
4699 	/*
4700 	 * Establish some default parameters.
4701 	 */
4702 	sdp->isp_cmd_dma_burst_enable = 1;
4703 	sdp->isp_data_dma_burst_enabl = 1;
4704 	sdp->isp_fifo_threshold = 0;
4705 	sdp->isp_initiator_id = DEFAULT_IID(isp);
4706 	if (isp->isp_type >= ISP_HA_SCSI_1040) {
4707 		sdp->isp_async_data_setup = 9;
4708 	} else {
4709 		sdp->isp_async_data_setup = 6;
4710 	}
4711 	sdp->isp_selection_timeout = 250;
4712 	sdp->isp_max_queue_depth = MAXISPREQUEST(isp);
4713 	sdp->isp_tag_aging = 8;
4714 	sdp->isp_bus_reset_delay = 3;
4715 	sdp->isp_retry_count = 2;
4716 	sdp->isp_retry_delay = 2;
4717 
4718 	for (tgt = 0; tgt < MAX_TARGETS; tgt++) {
4719 		sdp->isp_devparam[tgt].exc_throttle = ISP_EXEC_THROTTLE;
4720 		sdp->isp_devparam[tgt].dev_enable = 1;
4721 	}
4722 
4723 	/*
4724 	 * If we've not been told to avoid reading NVRAM, try and read it.
4725 	 * If we're successful reading it, we can return since NVRAM will
4726 	 * tell us the right thing to do. Otherwise, establish some reasonable
4727 	 * defaults.
4728 	 */
4729 	if ((isp->isp_confopts & ISP_CFG_NONVRAM) == 0) {
4730 		if (isp_read_nvram(isp) == 0) {
4731 			return;
4732 		}
4733 	}
4734 
4735 	/*
4736 	 * Now try and see whether we have specific values for them.
4737 	 */
4738 	if ((isp->isp_confopts & ISP_CFG_NONVRAM) == 0) {
4739 		mbs.param[0] = MBOX_GET_ACT_NEG_STATE;
4740 		isp_mboxcmd(isp, &mbs, MBLOGNONE);
4741 		if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
4742 			sdp->isp_req_ack_active_neg = 1;
4743 			sdp->isp_data_line_active_neg = 1;
4744 		} else {
4745 			sdp->isp_req_ack_active_neg =
4746 			    (mbs.param[1+channel] >> 4) & 0x1;
4747 			sdp->isp_data_line_active_neg =
4748 			    (mbs.param[1+channel] >> 5) & 0x1;
4749 		}
4750 	}
4751 
4752 	isp_prt(isp, ISP_LOGDEBUG0,
4753 	    "defaulting bus %d REQ/ACK Active Negation is %d",
4754 	    channel, sdp->isp_req_ack_active_neg);
4755 	isp_prt(isp, ISP_LOGDEBUG0,
4756 	    "defaulting bus %d DATA Active Negation is %d",
4757 	    channel, sdp->isp_data_line_active_neg);
4758 
4759 	/*
4760 	 * The trick here is to establish a default for the default (honk!)
4761 	 * state (dev_flags). Then try and get the current status from
4762 	 * the card to fill in the current state. We don't, in fact, set
4763 	 * the default to the SAFE default state- that's not the goal state.
4764 	 */
4765 	for (tgt = 0; tgt < MAX_TARGETS; tgt++) {
4766 		sdp->isp_devparam[tgt].cur_offset = 0;
4767 		sdp->isp_devparam[tgt].cur_period = 0;
4768 		sdp->isp_devparam[tgt].dev_flags = DPARM_DEFAULT;
4769 		sdp->isp_devparam[tgt].cur_dflags = 0;
4770 		/*
4771 		 * We default to Wide/Fast for versions less than a 1040
4772 		 * (unless it's SBus).
4773 		 */
4774 		if ((isp->isp_bustype == ISP_BT_SBUS &&
4775 		    isp->isp_type < ISP_HA_SCSI_1020A) ||
4776 		    (isp->isp_bustype == ISP_BT_PCI &&
4777 		    isp->isp_type < ISP_HA_SCSI_1040) ||
4778 		    (isp->isp_clock && isp->isp_clock < 60) ||
4779 		    (sdp->isp_ultramode == 0)) {
4780 			sdp->isp_devparam[tgt].sync_offset =
4781 			    ISP_10M_SYNCPARMS >> 8;
4782 			sdp->isp_devparam[tgt].sync_period =
4783 			    ISP_10M_SYNCPARMS & 0xff;
4784 		} else if (IS_ULTRA3(isp)) {
4785 			sdp->isp_devparam[tgt].sync_offset =
4786 			    ISP_80M_SYNCPARMS >> 8;
4787 			sdp->isp_devparam[tgt].sync_period =
4788 			    ISP_80M_SYNCPARMS & 0xff;
4789 		} else if (IS_ULTRA2(isp)) {
4790 			sdp->isp_devparam[tgt].sync_offset =
4791 			    ISP_40M_SYNCPARMS >> 8;
4792 			sdp->isp_devparam[tgt].sync_period =
4793 			    ISP_40M_SYNCPARMS & 0xff;
4794 		} else if (IS_1240(isp)) {
4795 			sdp->isp_devparam[tgt].sync_offset =
4796 			    ISP_20M_SYNCPARMS >> 8;
4797 			sdp->isp_devparam[tgt].sync_period =
4798 			    ISP_20M_SYNCPARMS & 0xff;
4799 		} else {
4800 			sdp->isp_devparam[tgt].sync_offset =
4801 			    ISP_20M_SYNCPARMS_1040 >> 8;
4802 			sdp->isp_devparam[tgt].sync_period =
4803 			    ISP_20M_SYNCPARMS_1040 & 0xff;
4804 		}
4805 
4806 		/*
4807 		 * Don't get current target parameters if we've been
4808 		 * told not to use NVRAM- it's really the same thing.
4809 		 */
4810 		if ((isp->isp_confopts & ISP_CFG_NONVRAM) == 0) {
4811 
4812 			mbs.param[0] = MBOX_GET_TARGET_PARAMS;
4813 			mbs.param[1] = tgt << 8;
4814 			isp_mboxcmd(isp, &mbs, MBLOGALL);
4815 			if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
4816 				continue;
4817 			}
4818 			sdp->isp_devparam[tgt].cur_dflags = mbs.param[2];
4819 			sdp->isp_devparam[tgt].dev_flags = mbs.param[2];
4820 			sdp->isp_devparam[tgt].cur_period = mbs.param[3] & 0xff;
4821 			sdp->isp_devparam[tgt].cur_offset = mbs.param[3] >> 8;
4822 
4823 			/*
4824 			 * The maximum period we can really see
4825 			 * here is 100 (decimal), or 400 ns.
4826 			 * For some unknown reason we sometimes
4827 			 * get back wildass numbers from the
4828 			 * boot device's parameters (alpha only).
4829 			 */
4830 			if ((mbs.param[3] & 0xff) <= 0x64) {
4831 				sdp->isp_devparam[tgt].sync_period =
4832 				    mbs.param[3] & 0xff;
4833 				sdp->isp_devparam[tgt].sync_offset =
4834 				    mbs.param[3] >> 8;
4835 			}
4836 
4837 			/*
4838 			 * It is not safe to run Ultra Mode with a clock < 60.
4839 			 */
4840 			if (((isp->isp_clock && isp->isp_clock < 60) ||
4841 			    (isp->isp_type < ISP_HA_SCSI_1020A)) &&
4842 			    (sdp->isp_devparam[tgt].sync_period <=
4843 			    (ISP_20M_SYNCPARMS & 0xff))) {
4844 				sdp->isp_devparam[tgt].sync_offset =
4845 				    ISP_10M_SYNCPARMS >> 8;
4846 				sdp->isp_devparam[tgt].sync_period =
4847 				    ISP_10M_SYNCPARMS & 0xff;
4848 			}
4849 		}
4850 		isp_prt(isp, ISP_LOGDEBUG0,
4851 		    "Initial bus %d tgt %d flags %x offset %x period %x",
4852 		    channel, tgt, sdp->isp_devparam[tgt].dev_flags,
4853 		    sdp->isp_devparam[tgt].sync_offset,
4854 		    sdp->isp_devparam[tgt].sync_period);
4855 	}
4856 }
4857 
4858 /*
4859  * Re-initialize the ISP and complete all orphaned commands
4860  * with a 'botched' notice. The reset/init routines should
4861  * not disturb an already active list of commands.
4862  *
4863  * Locks held prior to coming here.
4864  */
4865 
4866 void
4867 isp_reinit(struct ispsoftc *isp)
4868 {
4869 	XS_T *xs;
4870 	u_int16_t handle;
4871 
4872 	isp_reset(isp);
4873 	if (isp->isp_state != ISP_RESETSTATE) {
4874 		isp_prt(isp, ISP_LOGERR, "isp_reinit cannot reset card");
4875 		goto skip;
4876 	}
4877 	isp_init(isp);
4878 	if (isp->isp_role == ISP_ROLE_NONE) {
4879 		goto skip;
4880 	}
4881 	if (isp->isp_state == ISP_INITSTATE) {
4882 		isp->isp_state = ISP_RUNSTATE;
4883 	}
4884 	if (isp->isp_state != ISP_RUNSTATE) {
4885 		isp_prt(isp, ISP_LOGERR, "isp_reinit cannot restart card");
4886 	}
4887 skip:
4888 	isp->isp_nactive = 0;
4889 
4890 	for (handle = 1; (int) handle <= isp->isp_maxcmds; handle++) {
4891 		xs = isp_find_xs(isp, handle);
4892 		if (xs == NULL) {
4893 			continue;
4894 		}
4895 		isp_destroy_handle(isp, handle);
4896 		if (XS_XFRLEN(xs)) {
4897 			ISP_DMAFREE(isp, xs, handle);
4898 			XS_RESID(xs) = XS_XFRLEN(xs);
4899 		} else {
4900 			XS_RESID(xs) = 0;
4901 		}
4902 		XS_SETERR(xs, HBA_BUSRESET);
4903 		isp_done(xs);
4904 	}
4905 }
4906 
4907 /*
4908  * NVRAM Routines
4909  */
4910 static int
4911 isp_read_nvram(struct ispsoftc *isp)
4912 {
4913 	int i, amt;
4914 	u_int8_t csum, minversion;
4915 	union {
4916 		u_int8_t _x[ISP2100_NVRAM_SIZE];
4917 		u_int16_t _s[ISP2100_NVRAM_SIZE>>1];
4918 	} _n;
4919 #define	nvram_data	_n._x
4920 #define	nvram_words	_n._s
4921 
4922 	if (IS_FC(isp)) {
4923 		amt = ISP2100_NVRAM_SIZE;
4924 		minversion = 1;
4925 	} else if (IS_ULTRA2(isp)) {
4926 		amt = ISP1080_NVRAM_SIZE;
4927 		minversion = 0;
4928 	} else {
4929 		amt = ISP_NVRAM_SIZE;
4930 		minversion = 2;
4931 	}
4932 
4933 	/*
4934 	 * Just read the first two words first to see if we have a valid
4935 	 * NVRAM to continue reading the rest with.
4936 	 */
4937 	for (i = 0; i < 2; i++) {
4938 		isp_rdnvram_word(isp, i, &nvram_words[i]);
4939 	}
4940 	if (nvram_data[0] != 'I' || nvram_data[1] != 'S' ||
4941 	    nvram_data[2] != 'P') {
4942 		if (isp->isp_bustype != ISP_BT_SBUS) {
4943 			isp_prt(isp, ISP_LOGWARN, "invalid NVRAM header");
4944 			isp_prt(isp, ISP_LOGDEBUG0, "%x %x %x",
4945 			    nvram_data[0], nvram_data[1], nvram_data[2]);
4946 		}
4947 		return (-1);
4948 	}
4949 	for (i = 2; i < amt>>1; i++) {
4950 		isp_rdnvram_word(isp, i, &nvram_words[i]);
4951 	}
4952 	for (csum = 0, i = 0; i < amt; i++) {
4953 		csum += nvram_data[i];
4954 	}
4955 	if (csum != 0) {
4956 		isp_prt(isp, ISP_LOGWARN, "invalid NVRAM checksum");
4957 		return (-1);
4958 	}
4959 	if (ISP_NVRAM_VERSION(nvram_data) < minversion) {
4960 		isp_prt(isp, ISP_LOGWARN, "version %d NVRAM not understood",
4961 		    ISP_NVRAM_VERSION(nvram_data));
4962 		return (-1);
4963 	}
4964 
4965 	if (IS_ULTRA3(isp)) {
4966 		isp_parse_nvram_12160(isp, 0, nvram_data);
4967 		isp_parse_nvram_12160(isp, 1, nvram_data);
4968 	} else if (IS_1080(isp)) {
4969 		isp_parse_nvram_1080(isp, 0, nvram_data);
4970 	} else if (IS_1280(isp) || IS_1240(isp)) {
4971 		isp_parse_nvram_1080(isp, 0, nvram_data);
4972 		isp_parse_nvram_1080(isp, 1, nvram_data);
4973 	} else if (IS_SCSI(isp)) {
4974 		isp_parse_nvram_1020(isp, nvram_data);
4975 	} else {
4976 		isp_parse_nvram_2100(isp, nvram_data);
4977 	}
4978 	return (0);
4979 #undef	nvram_data
4980 #undef	nvram_words
4981 }
4982 
4983 static void
4984 isp_rdnvram_word(struct ispsoftc *isp, int wo, u_int16_t *rp)
4985 {
4986 	int i, cbits;
4987 	u_int16_t bit, rqst;
4988 
4989 	ISP_WRITE(isp, BIU_NVRAM, BIU_NVRAM_SELECT);
4990 	USEC_DELAY(2);
4991 	ISP_WRITE(isp, BIU_NVRAM, BIU_NVRAM_SELECT|BIU_NVRAM_CLOCK);
4992 	USEC_DELAY(2);
4993 
4994 	if (IS_FC(isp)) {
4995 		wo &= ((ISP2100_NVRAM_SIZE >> 1) - 1);
4996 		rqst = (ISP_NVRAM_READ << 8) | wo;
4997 		cbits = 10;
4998 	} else if (IS_ULTRA2(isp)) {
4999 		wo &= ((ISP1080_NVRAM_SIZE >> 1) - 1);
5000 		rqst = (ISP_NVRAM_READ << 8) | wo;
5001 		cbits = 10;
5002 	} else {
5003 		wo &= ((ISP_NVRAM_SIZE >> 1) - 1);
5004 		rqst = (ISP_NVRAM_READ << 6) | wo;
5005 		cbits = 8;
5006 	}
5007 
5008 	/*
5009 	 * Clock the word select request out...
5010 	 */
5011 	for (i = cbits; i >= 0; i--) {
5012 		if ((rqst >> i) & 1) {
5013 			bit = BIU_NVRAM_SELECT | BIU_NVRAM_DATAOUT;
5014 		} else {
5015 			bit = BIU_NVRAM_SELECT;
5016 		}
5017 		ISP_WRITE(isp, BIU_NVRAM, bit);
5018 		USEC_DELAY(2);
5019 		ISP_WRITE(isp, BIU_NVRAM, bit | BIU_NVRAM_CLOCK);
5020 		USEC_DELAY(2);
5021 		ISP_WRITE(isp, BIU_NVRAM, bit);
5022 		USEC_DELAY(2);
5023 	}
5024 	/*
5025 	 * Now read the result back in (bits come back in MSB format).
5026 	 */
5027 	*rp = 0;
5028 	for (i = 0; i < 16; i++) {
5029 		u_int16_t rv;
5030 		*rp <<= 1;
5031 		ISP_WRITE(isp, BIU_NVRAM, BIU_NVRAM_SELECT|BIU_NVRAM_CLOCK);
5032 		USEC_DELAY(2);
5033 		rv = ISP_READ(isp, BIU_NVRAM);
5034 		if (rv & BIU_NVRAM_DATAIN) {
5035 			*rp |= 1;
5036 		}
5037 		USEC_DELAY(2);
5038 		ISP_WRITE(isp, BIU_NVRAM, BIU_NVRAM_SELECT);
5039 		USEC_DELAY(2);
5040 	}
5041 	ISP_WRITE(isp, BIU_NVRAM, 0);
5042 	USEC_DELAY(2);
5043 	ISP_SWIZZLE_NVRAM_WORD(isp, rp);
5044 }
5045 
5046 static void
5047 isp_parse_nvram_1020(struct ispsoftc *isp, u_int8_t *nvram_data)
5048 {
5049 	int i;
5050 	sdparam *sdp = (sdparam *) isp->isp_param;
5051 
5052 	sdp->isp_fifo_threshold =
5053 		ISP_NVRAM_FIFO_THRESHOLD(nvram_data) |
5054 		(ISP_NVRAM_FIFO_THRESHOLD_128(nvram_data) << 2);
5055 
5056 	sdp->isp_initiator_id =
5057 		ISP_NVRAM_INITIATOR_ID(nvram_data);
5058 
5059 	sdp->isp_bus_reset_delay =
5060 		ISP_NVRAM_BUS_RESET_DELAY(nvram_data);
5061 
5062 	sdp->isp_retry_count =
5063 		ISP_NVRAM_BUS_RETRY_COUNT(nvram_data);
5064 
5065 	sdp->isp_retry_delay =
5066 		ISP_NVRAM_BUS_RETRY_DELAY(nvram_data);
5067 
5068 	sdp->isp_async_data_setup =
5069 		ISP_NVRAM_ASYNC_DATA_SETUP_TIME(nvram_data);
5070 
5071 	if (isp->isp_type >= ISP_HA_SCSI_1040) {
5072 		if (sdp->isp_async_data_setup < 9) {
5073 			sdp->isp_async_data_setup = 9;
5074 		}
5075 	} else {
5076 		if (sdp->isp_async_data_setup != 6) {
5077 			sdp->isp_async_data_setup = 6;
5078 		}
5079 	}
5080 
5081 	sdp->isp_req_ack_active_neg =
5082 		ISP_NVRAM_REQ_ACK_ACTIVE_NEGATION(nvram_data);
5083 
5084 	sdp->isp_data_line_active_neg =
5085 		ISP_NVRAM_DATA_LINE_ACTIVE_NEGATION(nvram_data);
5086 
5087 	sdp->isp_data_dma_burst_enabl =
5088 		ISP_NVRAM_DATA_DMA_BURST_ENABLE(nvram_data);
5089 
5090 	sdp->isp_cmd_dma_burst_enable =
5091 		ISP_NVRAM_CMD_DMA_BURST_ENABLE(nvram_data);
5092 
5093 	sdp->isp_tag_aging =
5094 		ISP_NVRAM_TAG_AGE_LIMIT(nvram_data);
5095 
5096 	sdp->isp_selection_timeout =
5097 		ISP_NVRAM_SELECTION_TIMEOUT(nvram_data);
5098 
5099 	sdp->isp_max_queue_depth =
5100 		ISP_NVRAM_MAX_QUEUE_DEPTH(nvram_data);
5101 
5102 	sdp->isp_fast_mttr = ISP_NVRAM_FAST_MTTR_ENABLE(nvram_data);
5103 	for (i = 0; i < MAX_TARGETS; i++) {
5104 		sdp->isp_devparam[i].dev_enable =
5105 			ISP_NVRAM_TGT_DEVICE_ENABLE(nvram_data, i);
5106 		sdp->isp_devparam[i].exc_throttle =
5107 			ISP_NVRAM_TGT_EXEC_THROTTLE(nvram_data, i);
5108 		sdp->isp_devparam[i].sync_offset =
5109 			ISP_NVRAM_TGT_SYNC_OFFSET(nvram_data, i);
5110 		sdp->isp_devparam[i].sync_period =
5111 			ISP_NVRAM_TGT_SYNC_PERIOD(nvram_data, i);
5112 
5113 		if (isp->isp_type < ISP_HA_SCSI_1040) {
5114 			/*
5115 			 * If we're not ultra, we can't possibly
5116 			 * be a shorter period than this.
5117 			 */
5118 			if (sdp->isp_devparam[i].sync_period < 0x19) {
5119 				sdp->isp_devparam[i].sync_period = 0x19;
5120 			}
5121 			if (sdp->isp_devparam[i].sync_offset > 0xc) {
5122 				sdp->isp_devparam[i].sync_offset = 0x0c;
5123 			}
5124 		} else {
5125 			if (sdp->isp_devparam[i].sync_offset > 0x8) {
5126 				sdp->isp_devparam[i].sync_offset = 0x8;
5127 			}
5128 		}
5129 		sdp->isp_devparam[i].dev_flags = 0;
5130 		if (ISP_NVRAM_TGT_RENEG(nvram_data, i))
5131 			sdp->isp_devparam[i].dev_flags |= DPARM_RENEG;
5132 		sdp->isp_devparam[i].dev_flags |= DPARM_ARQ;
5133 		if (ISP_NVRAM_TGT_TQING(nvram_data, i))
5134 			sdp->isp_devparam[i].dev_flags |= DPARM_TQING;
5135 		if (ISP_NVRAM_TGT_SYNC(nvram_data, i))
5136 			sdp->isp_devparam[i].dev_flags |= DPARM_SYNC;
5137 		if (ISP_NVRAM_TGT_WIDE(nvram_data, i))
5138 			sdp->isp_devparam[i].dev_flags |= DPARM_WIDE;
5139 		if (ISP_NVRAM_TGT_PARITY(nvram_data, i))
5140 			sdp->isp_devparam[i].dev_flags |= DPARM_PARITY;
5141 		if (ISP_NVRAM_TGT_DISC(nvram_data, i))
5142 			sdp->isp_devparam[i].dev_flags |= DPARM_DISC;
5143 		sdp->isp_devparam[i].cur_dflags = 0; /* we don't know */
5144 	}
5145 }
5146 
5147 static void
5148 isp_parse_nvram_1080(struct ispsoftc *isp, int bus, u_int8_t *nvram_data)
5149 {
5150 	int i;
5151 	sdparam *sdp = (sdparam *) isp->isp_param;
5152 	sdp += bus;
5153 
5154 	sdp->isp_fifo_threshold =
5155 	    ISP1080_NVRAM_FIFO_THRESHOLD(nvram_data);
5156 
5157 	sdp->isp_initiator_id =
5158 	    ISP1080_NVRAM_INITIATOR_ID(nvram_data, bus);
5159 
5160 	sdp->isp_bus_reset_delay =
5161 	    ISP1080_NVRAM_BUS_RESET_DELAY(nvram_data, bus);
5162 
5163 	sdp->isp_retry_count =
5164 	    ISP1080_NVRAM_BUS_RETRY_COUNT(nvram_data, bus);
5165 
5166 	sdp->isp_retry_delay =
5167 	    ISP1080_NVRAM_BUS_RETRY_DELAY(nvram_data, bus);
5168 
5169 	sdp->isp_async_data_setup =
5170 	    ISP1080_NVRAM_ASYNC_DATA_SETUP_TIME(nvram_data,
5171 	    bus);
5172 
5173 	sdp->isp_req_ack_active_neg =
5174 	    ISP1080_NVRAM_REQ_ACK_ACTIVE_NEGATION(nvram_data,
5175 	    bus);
5176 
5177 	sdp->isp_data_line_active_neg =
5178 	    ISP1080_NVRAM_DATA_LINE_ACTIVE_NEGATION(nvram_data,
5179 	    bus);
5180 
5181 	sdp->isp_data_dma_burst_enabl =
5182 	    ISP1080_NVRAM_BURST_ENABLE(nvram_data);
5183 
5184 	sdp->isp_cmd_dma_burst_enable =
5185 	    ISP1080_NVRAM_BURST_ENABLE(nvram_data);
5186 
5187 	sdp->isp_selection_timeout =
5188 	    ISP1080_NVRAM_SELECTION_TIMEOUT(nvram_data, bus);
5189 
5190 	sdp->isp_max_queue_depth =
5191 	     ISP1080_NVRAM_MAX_QUEUE_DEPTH(nvram_data, bus);
5192 
5193 	for (i = 0; i < MAX_TARGETS; i++) {
5194 		sdp->isp_devparam[i].dev_enable =
5195 		    ISP1080_NVRAM_TGT_DEVICE_ENABLE(nvram_data, i, bus);
5196 		sdp->isp_devparam[i].exc_throttle =
5197 			ISP1080_NVRAM_TGT_EXEC_THROTTLE(nvram_data, i, bus);
5198 		sdp->isp_devparam[i].sync_offset =
5199 			ISP1080_NVRAM_TGT_SYNC_OFFSET(nvram_data, i, bus);
5200 		sdp->isp_devparam[i].sync_period =
5201 			ISP1080_NVRAM_TGT_SYNC_PERIOD(nvram_data, i, bus);
5202 		sdp->isp_devparam[i].dev_flags = 0;
5203 		if (ISP1080_NVRAM_TGT_RENEG(nvram_data, i, bus))
5204 			sdp->isp_devparam[i].dev_flags |= DPARM_RENEG;
5205 		sdp->isp_devparam[i].dev_flags |= DPARM_ARQ;
5206 		if (ISP1080_NVRAM_TGT_TQING(nvram_data, i, bus))
5207 			sdp->isp_devparam[i].dev_flags |= DPARM_TQING;
5208 		if (ISP1080_NVRAM_TGT_SYNC(nvram_data, i, bus))
5209 			sdp->isp_devparam[i].dev_flags |= DPARM_SYNC;
5210 		if (ISP1080_NVRAM_TGT_WIDE(nvram_data, i, bus))
5211 			sdp->isp_devparam[i].dev_flags |= DPARM_WIDE;
5212 		if (ISP1080_NVRAM_TGT_PARITY(nvram_data, i, bus))
5213 			sdp->isp_devparam[i].dev_flags |= DPARM_PARITY;
5214 		if (ISP1080_NVRAM_TGT_DISC(nvram_data, i, bus))
5215 			sdp->isp_devparam[i].dev_flags |= DPARM_DISC;
5216 		sdp->isp_devparam[i].cur_dflags = 0;
5217 	}
5218 }
5219 
5220 static void
5221 isp_parse_nvram_12160(struct ispsoftc *isp, int bus, u_int8_t *nvram_data)
5222 {
5223 	sdparam *sdp = (sdparam *) isp->isp_param;
5224 	int i;
5225 
5226 	sdp += bus;
5227 
5228 	sdp->isp_fifo_threshold =
5229 	    ISP12160_NVRAM_FIFO_THRESHOLD(nvram_data);
5230 
5231 	sdp->isp_initiator_id =
5232 	    ISP12160_NVRAM_INITIATOR_ID(nvram_data, bus);
5233 
5234 	sdp->isp_bus_reset_delay =
5235 	    ISP12160_NVRAM_BUS_RESET_DELAY(nvram_data, bus);
5236 
5237 	sdp->isp_retry_count =
5238 	    ISP12160_NVRAM_BUS_RETRY_COUNT(nvram_data, bus);
5239 
5240 	sdp->isp_retry_delay =
5241 	    ISP12160_NVRAM_BUS_RETRY_DELAY(nvram_data, bus);
5242 
5243 	sdp->isp_async_data_setup =
5244 	    ISP12160_NVRAM_ASYNC_DATA_SETUP_TIME(nvram_data,
5245 	    bus);
5246 
5247 	sdp->isp_req_ack_active_neg =
5248 	    ISP12160_NVRAM_REQ_ACK_ACTIVE_NEGATION(nvram_data,
5249 	    bus);
5250 
5251 	sdp->isp_data_line_active_neg =
5252 	    ISP12160_NVRAM_DATA_LINE_ACTIVE_NEGATION(nvram_data,
5253 	    bus);
5254 
5255 	sdp->isp_data_dma_burst_enabl =
5256 	    ISP12160_NVRAM_BURST_ENABLE(nvram_data);
5257 
5258 	sdp->isp_cmd_dma_burst_enable =
5259 	    ISP12160_NVRAM_BURST_ENABLE(nvram_data);
5260 
5261 	sdp->isp_selection_timeout =
5262 	    ISP12160_NVRAM_SELECTION_TIMEOUT(nvram_data, bus);
5263 
5264 	sdp->isp_max_queue_depth =
5265 	     ISP12160_NVRAM_MAX_QUEUE_DEPTH(nvram_data, bus);
5266 
5267 	for (i = 0; i < MAX_TARGETS; i++) {
5268 		sdp->isp_devparam[i].dev_enable =
5269 		    ISP12160_NVRAM_TGT_DEVICE_ENABLE(nvram_data, i, bus);
5270 		sdp->isp_devparam[i].exc_throttle =
5271 			ISP12160_NVRAM_TGT_EXEC_THROTTLE(nvram_data, i, bus);
5272 		sdp->isp_devparam[i].sync_offset =
5273 			ISP12160_NVRAM_TGT_SYNC_OFFSET(nvram_data, i, bus);
5274 		sdp->isp_devparam[i].sync_period =
5275 			ISP12160_NVRAM_TGT_SYNC_PERIOD(nvram_data, i, bus);
5276 		sdp->isp_devparam[i].dev_flags = 0;
5277 		if (ISP12160_NVRAM_TGT_RENEG(nvram_data, i, bus))
5278 			sdp->isp_devparam[i].dev_flags |= DPARM_RENEG;
5279 		sdp->isp_devparam[i].dev_flags |= DPARM_ARQ;
5280 		if (ISP12160_NVRAM_TGT_TQING(nvram_data, i, bus))
5281 			sdp->isp_devparam[i].dev_flags |= DPARM_TQING;
5282 		if (ISP12160_NVRAM_TGT_SYNC(nvram_data, i, bus))
5283 			sdp->isp_devparam[i].dev_flags |= DPARM_SYNC;
5284 		if (ISP12160_NVRAM_TGT_WIDE(nvram_data, i, bus))
5285 			sdp->isp_devparam[i].dev_flags |= DPARM_WIDE;
5286 		if (ISP12160_NVRAM_TGT_PARITY(nvram_data, i, bus))
5287 			sdp->isp_devparam[i].dev_flags |= DPARM_PARITY;
5288 		if (ISP12160_NVRAM_TGT_DISC(nvram_data, i, bus))
5289 			sdp->isp_devparam[i].dev_flags |= DPARM_DISC;
5290 		sdp->isp_devparam[i].cur_dflags = 0;
5291 	}
5292 }
5293 
5294 static void
5295 isp_parse_nvram_2100(struct ispsoftc *isp, u_int8_t *nvram_data)
5296 {
5297 	fcparam *fcp = (fcparam *) isp->isp_param;
5298 	u_int64_t wwn;
5299 
5300 	/*
5301 	 * There is NVRAM storage for both Port and Node entities-
5302 	 * but the Node entity appears to be unused on all the cards
5303 	 * I can find. However, we should account for this being set
5304 	 * at some point in the future.
5305 	 *
5306 	 * Qlogic WWNs have an NAA of 2, but usually nothing shows up in
5307 	 * bits 48..60. In the case of the 2202, it appears that they do
5308 	 * use bit 48 to distinguish between the two instances on the card.
5309 	 * The 2204, which I've never seen, *probably* extends this method.
5310 	 */
5311 	wwn = ISP2100_NVRAM_PORT_NAME(nvram_data);
5312 	if (wwn) {
5313 		isp_prt(isp, ISP_LOGCONFIG, "NVRAM Port WWN 0x%08x%08x",
5314 		    (u_int32_t) (wwn >> 32), (u_int32_t) (wwn & 0xffffffff));
5315 		if ((wwn >> 60) == 0) {
5316 			wwn |= (((u_int64_t) 2)<< 60);
5317 		}
5318 	}
5319 	fcp->isp_portwwn = wwn;
5320 	wwn = ISP2100_NVRAM_NODE_NAME(nvram_data);
5321 	if (wwn) {
5322 		isp_prt(isp, ISP_LOGCONFIG, "NVRAM Node WWN 0x%08x%08x",
5323 		    (u_int32_t) (wwn >> 32), (u_int32_t) (wwn & 0xffffffff));
5324 		if ((wwn >> 60) == 0) {
5325 			wwn |= (((u_int64_t) 2)<< 60);
5326 		}
5327 	}
5328 	fcp->isp_nodewwn = wwn;
5329 
5330 	/*
5331 	 * Make sure we have both Node and Port as non-zero values.
5332 	 */
5333 	if (fcp->isp_nodewwn != 0 && fcp->isp_portwwn == 0) {
5334 		fcp->isp_portwwn = fcp->isp_nodewwn;
5335 	} else if (fcp->isp_nodewwn == 0 && fcp->isp_portwwn != 0) {
5336 		fcp->isp_nodewwn = fcp->isp_portwwn;
5337 	}
5338 
5339 	/*
5340 	 * Make the Node and Port values sane if they're NAA == 2.
5341 	 * This means to clear bits 48..56 for the Node WWN and
5342 	 * make sure that there's some non-zero value in 48..56
5343 	 * for the Port WWN.
5344 	 */
5345 	if (fcp->isp_nodewwn && fcp->isp_portwwn) {
5346 		if ((fcp->isp_nodewwn & (((u_int64_t) 0xfff) << 48)) != 0 &&
5347 		    (fcp->isp_nodewwn >> 60) == 2) {
5348 			fcp->isp_nodewwn &= ~((u_int64_t) 0xfff << 48);
5349 		}
5350 		if ((fcp->isp_portwwn & (((u_int64_t) 0xfff) << 48)) == 0 &&
5351 		    (fcp->isp_portwwn >> 60) == 2) {
5352 			fcp->isp_portwwn |= ((u_int64_t) 1 << 56);
5353 		}
5354 	}
5355 
5356 	fcp->isp_maxalloc =
5357 		ISP2100_NVRAM_MAXIOCBALLOCATION(nvram_data);
5358 	fcp->isp_maxfrmlen =
5359 		ISP2100_NVRAM_MAXFRAMELENGTH(nvram_data);
5360 	fcp->isp_retry_delay =
5361 		ISP2100_NVRAM_RETRY_DELAY(nvram_data);
5362 	fcp->isp_retry_count =
5363 		ISP2100_NVRAM_RETRY_COUNT(nvram_data);
5364 	fcp->isp_loopid =
5365 		ISP2100_NVRAM_HARDLOOPID(nvram_data);
5366 	fcp->isp_execthrottle =
5367 		ISP2100_NVRAM_EXECUTION_THROTTLE(nvram_data);
5368 	fcp->isp_fwoptions = ISP2100_NVRAM_OPTIONS(nvram_data);
5369 	isp_prt(isp, ISP_LOGDEBUG0,
5370 	    "fwoptions from nvram are 0x%x", fcp->isp_fwoptions);
5371 }
5372