HP StorageWorks 8/80 HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 266

Discovery domain and domain set configuration

Page 266 highlights

Displaying the iSCSI virtual target LUN map 1. Connect and log in to the switch. 2. Enter the iscsiCfg --show lun command: switch:admin> iscsicfg --show lun Number of targets found: 2 Target: iqn.2006-10.com.example:disk001 Number of LUN Maps: 2 FC WWN Virtual LUN(s) 21:00:00:04:cf:e7:73:7e 0 2f:ff:00:06:2b:0d:12:99 1-2 Physical LUN(s) 0 0-1 Target: iqn.2002-10.com.brocade:21:00:00:04:cf:e7:74:cf Number of LUN Maps: 1 FC WWN Virtual LUN(s) Physical LUN(s) 21:00:00:04:cf:e7:74:cf 0 0x0000000000000000 Displaying iSCSI VT state and status The following information can be displayed for each iSCSI VT: • Name-IQN for the iSCSI VT. • State-Whether the FC target is online or offline. • Status-Whether the iSCSI VT has been defined (configuration completed but not committed) or is committed (active and available to iSCSI initiators). • Authentication method-Indicates CHAP if authentication is enabled for the iSCSI VT. 1. Connect and log in to the switch. 2. Enter the iscsiCfg --show tgt command with the -v option to display the iSCSI VTs: switch:admin> iscsicfg --show tgt -v Number of records found: 2 Name: iqn.2006-10.com.example-disk001 State/Status: Online/Defined Auth. Method: None Name: iqn.2002-10.com.brocade:21:00:00:04:cf:e7:74:cf State/Status: Online/Defined Auth. Method: None Discovery domain and domain set configuration Discovery domains and discovery domain sets can be used to configure access control between iSCSI initiators and iSCSI VTs manually. A discovery domain (DD) controls iSCSI initiator access to iSCSI VTs. A DD is a group of iSCSI initiators and iSCSI VTs identified by IQNs. The iSCSI initiators can access only the iSCSI VTs that are in the DD to which they are assigned. When there are no discovery domains, all iSCSI initiators can access all iSCSI VTs. If iSNS (internet storage name service) is enabled, then configure access control on the iSNS server; discovery domains and discovery domain sets configured in Fabric OS are not supported if the iSNS service is enabled on the fabric. You can create four discovery domain sets (DDSets), but only one set can be enforced at a time. Discovery domain sets allow you to enable and disable fabric-wide iSCSI VT access with a single command. An enabled DDSet is enforced fabric-wide. In a deployment with an active DDSet, only iSCSI initiators in an enforced DD can access iSCSI VT in the same DD. If you do not configure either discovery domains or iSNS for access control, then any iSCSI initiator on the IP network can access all iSCSI VTs (and therefore all FC targets) in the fabric. 266 iSCSI Gateway services

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230
  • 231
  • 232
  • 233
  • 234
  • 235
  • 236
  • 237
  • 238
  • 239
  • 240
  • 241
  • 242
  • 243
  • 244
  • 245
  • 246
  • 247
  • 248
  • 249
  • 250
  • 251
  • 252
  • 253
  • 254
  • 255
  • 256
  • 257
  • 258
  • 259
  • 260
  • 261
  • 262
  • 263
  • 264
  • 265
  • 266
  • 267
  • 268
  • 269
  • 270
  • 271
  • 272
  • 273
  • 274
  • 275
  • 276
  • 277
  • 278
  • 279
  • 280
  • 281
  • 282
  • 283
  • 284
  • 285
  • 286
  • 287
  • 288
  • 289
  • 290
  • 291
  • 292
  • 293
  • 294
  • 295
  • 296
  • 297
  • 298
  • 299
  • 300
  • 301
  • 302
  • 303
  • 304
  • 305
  • 306
  • 307
  • 308
  • 309
  • 310
  • 311
  • 312
  • 313
  • 314
  • 315
  • 316
  • 317
  • 318
  • 319
  • 320
  • 321
  • 322
  • 323
  • 324
  • 325
  • 326
  • 327
  • 328
  • 329
  • 330
  • 331
  • 332
  • 333
  • 334
  • 335
  • 336
  • 337
  • 338
  • 339
  • 340
  • 341
  • 342
  • 343
  • 344
  • 345
  • 346
  • 347
  • 348
  • 349
  • 350
  • 351
  • 352
  • 353
  • 354
  • 355
  • 356
  • 357
  • 358
  • 359
  • 360
  • 361
  • 362
  • 363
  • 364
  • 365
  • 366
  • 367
  • 368
  • 369
  • 370
  • 371
  • 372
  • 373
  • 374
  • 375
  • 376
  • 377
  • 378
  • 379
  • 380
  • 381
  • 382
  • 383
  • 384
  • 385
  • 386
  • 387
  • 388
  • 389
  • 390
  • 391
  • 392
  • 393
  • 394
  • 395
  • 396
  • 397
  • 398
  • 399
  • 400
  • 401
  • 402
  • 403
  • 404
  • 405
  • 406
  • 407
  • 408
  • 409
  • 410
  • 411
  • 412
  • 413
  • 414
  • 415
  • 416
  • 417
  • 418
  • 419
  • 420
  • 421
  • 422
  • 423
  • 424
  • 425
  • 426
  • 427
  • 428
  • 429
  • 430
  • 431
  • 432
  • 433
  • 434
  • 435
  • 436
  • 437
  • 438
  • 439
  • 440
  • 441
  • 442
  • 443
  • 444
  • 445
  • 446
  • 447
  • 448
  • 449
  • 450
  • 451
  • 452
  • 453
  • 454
  • 455
  • 456
  • 457
  • 458
  • 459
  • 460
  • 461
  • 462
  • 463
  • 464
  • 465
  • 466
  • 467
  • 468
  • 469
  • 470
  • 471
  • 472
  • 473
  • 474
  • 475
  • 476
  • 477
  • 478
  • 479
  • 480
  • 481
  • 482
  • 483
  • 484
  • 485
  • 486
  • 487
  • 488
  • 489
  • 490
  • 491
  • 492

266
iSCSI Gateway services
Displaying the iSCSI virtual target LUN map
1.
Connect and log in to the switch.
2.
Enter the
iscsiCfg
--
show lun
command:
switch:admin>
iscsicfg --show lun
Number of targets found: 2
Target: iqn.2006-10.com.example:disk001
Number of LUN Maps: 2
FC WWN
Virtual LUN(s)
Physical LUN(s)
21:00:00:04:cf:e7:73:7e
0
0
2f:ff:00:06:2b:0d:12:99
1-2
0-1
Target: iqn.2002-10.com.brocade:21:00:00:04:cf:e7:74:cf
Number of LUN Maps: 1
FC WWN
Virtual LUN(s)
Physical LUN(s)
21:00:00:04:cf:e7:74:cf
0
0x0000000000000000
Displaying iSCSI VT state and status
The following information can be displayed for each iSCSI VT:
Name
—IQN for the iSCSI VT.
State
—Whether the FC target is online or offline.
Status
—Whether the iSCSI VT has been defined (configuration completed but not committed) or is
committed (active and available to iSCSI initiators).
Authentication method
—Indicates CHAP if authentication is enabled for the iSCSI VT.
1.
Connect and log in to the switch.
2.
Enter the
iscsiCfg
--
show tgt
command with the
-v
option to display the iSCSI VTs:
switch:admin>
iscsicfg --show tgt -v
Number of records found: 2
Name: iqn.2006-10.com.example-disk001
State/Status: Online/Defined
Auth. Method: None
Name: iqn.2002-10.com.brocade:21:00:00:04:cf:e7:74:cf
State/Status: Online/Defined
Auth. Method: None
Discovery domain and domain set configuration
Discovery domains and discovery domain sets can be used to configure access control between iSCSI
initiators and iSCSI VTs manually.
A discovery domain (DD) controls iSCSI initiator access to iSCSI VTs. A DD is a group of iSCSI
initiators
and iSCSI VTs identified by IQNs. The iSCSI initiators can access only the iSCSI VTs that are in the DD to
which they are assigned. When there are no discovery domains, all iSCSI initiators can access all iSCSI
VTs.
If iSNS (internet storage name service) is enabled, then configure access control on the iSNS server;
discovery domains and discovery domain sets configured in Fabric OS are not supported if the iSNS
service is enabled on the fabric.
You can create four discovery domain sets (DDSets),
but only one set can be enforced at a time
. Discovery
domain sets allow you to enable and disable fabric-wide iSCSI VT access with a single command.
An enabled DDSet is enforced fabric-wide. In a deployment with an active DDSet, only iSCSI initiators in
an enforced DD can access iSCSI VT in the same DD.
If you do not configure either discovery domains or iSNS for access control, then any iSCSI initiator on the
IP network can access all iSCSI VTs (and therefore all FC targets) in the fabric.