HP StorageWorks 2/24 FW 07.00.00/HAFM SW 08.06.00 McDATA Products in a SAN Env - Page 237

SANtegrity Binding, PDCM arrays, Hardware-enforced zoning, The SANtegrity Binding feature is

Page 237 highlights

Physical Planning Considerations 5 2. SANtegrity Binding - The SANtegrity Binding feature is recommended for large and complex SANs with fabrics and devices provided by multiple OEMs or that intermix FCP and FICON protocols. The feature is required for FICON-cascaded high-integrity SANs. SANtegrity Binding includes: - Fabric binding (configured and enabled through the SAN management application) that allows only user-specified directors or switches to attach to specified fabrics in a SAN. - Switch binding (configured and enabled through the Element Manager application) that allows only user-specified devices and fabric elements to connect to specified director or fabric switch ports. SANtegrity Binding explicitly prohibits connections that are not user configured (unauthorized ISLs or device connections do not initialize and devices do not log in), and takes precedence over allowed connectivity in PDCM arrays, allowed connectivity through hard or soft zoning, preferred path configurations, or device-level access control. 3. PDCM arrays - In FICON environments, connectivity control is configured and managed at the director or fabric switch level using a PDCM array, where a user specifies which logical port addresses are allowed or prohibited from connecting with each other, including E_Port connectivity. Port-to-port connectivity is hardware enforced at each fabric element, and explicitly prohibited connections take precedence over allowed connectivity through hard or soft zoning, preferred path configurations, or device-level access control. However, a connection allowed through a PDCM array may be prohibited through SANtegrity Binding. 4. Hardware-enforced zoning - The function of hard zoning is to ensure route tables are programmed at each fabric element that explicitly allow devices to communicate only if the devices are in the same zone. Zoning configurations are hardware-enforced at each fabric element source port. Hard zoning impacts devices only and does not prohibit E_Port (ISL) connectivity. Devices in common zones can be prohibited from communicating through SANtegrity Binding or PDCM arrays, but hard zoning takes precedence over preferred path configurations, allowed connectivity through soft zoning, or device-level access control. Physical Planning Considerations 5-31

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230
  • 231
  • 232
  • 233
  • 234
  • 235
  • 236
  • 237
  • 238
  • 239
  • 240
  • 241
  • 242
  • 243
  • 244
  • 245
  • 246
  • 247
  • 248
  • 249
  • 250
  • 251
  • 252
  • 253
  • 254
  • 255
  • 256
  • 257
  • 258
  • 259
  • 260
  • 261
  • 262
  • 263
  • 264
  • 265
  • 266
  • 267
  • 268
  • 269
  • 270
  • 271
  • 272
  • 273
  • 274
  • 275
  • 276
  • 277
  • 278
  • 279
  • 280
  • 281
  • 282
  • 283
  • 284
  • 285
  • 286
  • 287
  • 288
  • 289
  • 290
  • 291
  • 292
  • 293
  • 294
  • 295
  • 296
  • 297
  • 298
  • 299
  • 300
  • 301
  • 302
  • 303
  • 304
  • 305
  • 306
  • 307
  • 308
  • 309
  • 310
  • 311
  • 312
  • 313
  • 314
  • 315
  • 316
  • 317
  • 318
  • 319
  • 320
  • 321
  • 322

5
Physical Planning Considerations
5-31
Physical Planning Considerations
2.
SANtegrity Binding -
The SANtegrity Binding feature is
recommended for large and complex SANs with fabrics and
devices provided by multiple OEMs or that intermix FCP and
FICON protocols. The feature is required for FICON-cascaded
high-integrity SANs. SANtegrity Binding includes:
Fabric binding (configured and enabled through the SAN
management application) that allows only user-specified
directors or switches to attach to specified fabrics in a SAN.
Switch binding (configured and enabled through the Element
Manager application) that allows only user-specified devices
and fabric elements to connect to specified director or fabric
switch ports.
SANtegrity Binding explicitly prohibits connections that are not
user configured (unauthorized ISLs or device connections
do not
initialize and devices
do not
log in), and takes precedence over
allowed connectivity in PDCM arrays, allowed connectivity
through hard or soft zoning, preferred path configurations, or
device-level access control.
3.
PDCM arrays -
In FICON environments, connectivity control is
configured and managed at the director or fabric switch level
using a PDCM array, where a user specifies which logical port
addresses are allowed or prohibited from connecting with each
other, including E_Port connectivity.
Port-to-port connectivity is hardware enforced at each fabric
element, and explicitly prohibited connections take precedence
over allowed connectivity through hard or soft zoning, preferred
path configurations, or device-level access control. However, a
connection allowed through a PDCM array may be prohibited
through SANtegrity Binding.
4.
Hardware-enforced zoning -
The function of hard zoning is to
ensure route tables are programmed at each fabric element that
explicitly allow devices to communicate
only
if the devices are in
the same zone. Zoning configurations are hardware-enforced at
each fabric element source port. Hard zoning impacts devices
only and does not prohibit E_Port (ISL) connectivity.
Devices in common zones can be prohibited from communicating
through SANtegrity Binding or PDCM arrays, but hard zoning
takes precedence over preferred path configurations, allowed
connectivity through soft zoning, or device-level access control.