HP StorageWorks 8/80 HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 306
Access control with discovery domains
View all HP StorageWorks 8/80 manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 306 highlights
iS C S I initiator A iqn.2003-11.c om.mic ros oft: win2k-s n-192168101 iS C S I virtual targets (V T s ) VT 1 iqn.2002-12.c om.broc ade: 10: 00: 00: 05: 1e: aa: bb: c c IP Network VT 2 iqn.2002-12.com.brocade: 10: 00: 00: 05: 1e: cc: bb: aa VT 3 iqn.2002-12.com.brocade: 10: 00: 00: 05: 1e: bb: cc: aa iS C S I initiator B iiqn.2003-11.c om.mic ros oft: win2k-s n-192168102 Figure 37 IQN example iS C S I gateway s ervic e You can create a different IQN prefix using the iscsiSwCfg - -modifygw -t command. The prefix portion may be used to identify companies or organizations (for example, HP, Microsoft, and so forth). Your organization may suggest or require a specific format for the prefix portion of the IQN. Changing and displaying the IQN prefix 1. Connect to and log in to the switch. 2. Enter the iscsiSwCfg - -modifygw -t command, where is the value you want to use as the IQN prefix to change the IQN prefix. switch:admin>iscsiswcfg --modifygw -t iqn.2007-10.com.brocade The operation completed successfully 3. Enter the iscsiSwCfg --showgw command to display the IQN prefix. switch:admin> iscsiswcfg --showgw Target name is: iqn.2007-10.com.brocade The operation completed successfully Access control with discovery domains You can limit access to iSCSI VTs using a discovery domain (DD), which is a group of the iSCSI initiators and iSCSI VTs. The iSCSI initiators can access only the iSCSI VTs that are in the same discovery domain. Discovery domains are grouped together in a discovery domain set (DDSet). The active discovery domain set enforces the fabric-wide iSCSI VT access. Only the DDs in the active DDSet are enforced. You can create multiple discovery domain sets but only one set can be active at a time. It is also possible to present a single iSCSI portal IP address to the iSCSI initiator when the default iSCSI port configuration is in effect and connection redirection is disabled on the blade. Figure 38 shows a discovery domain set (DDSet 1) that contains two discovery domains (DD1 and DD2). When DDSet 1 is active, iSCSI initiator A can access only iSCSI VT 1, and iSCSI initiator B can access only VT 2 and VT 3. 304 iSCSI gateway service