HP Cisco MDS 9216 Cisco MDS 9000 Family CLI Configuration Guide, Release 3.x ( - Page 567

Send documentation comments to [email protected] 23 C H A P T E R Configuring and Managing Zones Zoning enables you to set up access control between storage devices or user groups. If you have administrator privileges in your fabric, you can create zones to increase network security and to prevent data loss or corruption. Zoning is enforced by examining the source-destination ID field. Advanced zoning capabilities specified in the FC-GS-4 and FC-SW-3 standards are provided. You can use either the existing basic zoning capabilities or the advanced, standards-compliant zoning capabilities. This chapter includes the following sections: • About Zoning, page 23-1 • Zone Configuration, page 23-6 • Zone Sets, page 23-7 • Zone Set Distribution, page 23-13 • Zone Set Duplication, page 23-16 • Advanced Zone Attributes, page 23-18 • Displaying Zone Information, page 23-24 • Enhanced Zoning, page 23-30 • Compacting the Zone Database for Downgrading, page 23-40 • Zone and Zone Set Analysis, page 23-40 • Default Settings, page 23-41 Note Table 19-1 on page 19-4 lists the differences between zones and VSANs. About Zoning Zoning has the following features: • A zone consists of multiple zone members. - Members in a zone can access each other; members in different zones cannot access each other. - If zoning is not activated, all devices are members of the default zone. - If zoning is activated, any device that is not in an active zone (a zone that is part of an active zone set) is a member of the default zone. OL-16184-01, Cisco MDS SAN-OS Release 3.x Cisco MDS 9000 Family CLI Configuration Guide 23-1