HP Surestore 64 FW 05.01.00 and SW 07.01.00 HP StorageWorks Embedded Web Serve - Page 58

Controlling Access at the Switch, Controlling Access at the Server or Storage Device, Binding

Page 58 highlights

Configuring Zones Controlling Access at the Switch A port binding feature is available on switches and directors that allows you to bind a specific switch or director port to the WWN of an attached device for exclusive communication. This Port Binding feature is available through the Port Binding tab, which is under the Security tab of the Configure page view. Controlling Access at the Server or Storage Device Features available at the server or storage device can add methods, beyond zoning, to increase network security measures, differentiate between operating systems, and prevent data loss or corruption by controlling access between devices or between separate user groups (such as engineering or human resources). Server-level access control is called persistent binding. Persistent binding uses configuration information stored on the server and is implemented through the server's host bus adapter (HBA) driver. The process binds a server device name to a specific Fibre Channel storage volume or logical unit number (LUN), through a specific HBA and storage port WWN. In essence, this feature creates a reliable route across the fabric that sustains the small computer system interface (SCSI) connection between a server and storage device. For persistent binding: ■ Each server HBA is explicitly bound to a storage volume or LUN, and access is explicitly authorized (access is blocked by default). ■ The process is compatible with open system interconnection (OSI) standards. The following are transparently supported: - Different operating systems and applications. - Different storage volume managers and file systems. - Different fabric devices, including disk drives, tape drives, and tape libraries. ■ If the server is rebooted, the server-to-storage connection is automatically re-established. ■ The connection is bound to a storage port WWN. If the fiber-optic cable is disconnected from the storage port, the server-to-storage connection is automatically re-established when the port cable is reconnected. The connection is also automatically re-established if the storage port is cabled through a different managed product port. 58 Embedded Web Server User Guide

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146

Configuring Zones
58
Embedded Web Server User Guide
Controlling Access at the Switch
A port binding feature is available on switches and directors that allows you to
bind
a specific switch or director port to the WWN of an attached device for
exclusive communication. This Port Binding feature is available through the
Port
Binding
tab, which is under the
Security
tab of the
Configure
page view.
Controlling Access at the Server or Storage Device
Features available at the server or storage device can add methods, beyond zoning,
to increase network security measures, differentiate between operating systems,
and prevent data loss or corruption by controlling access between devices or
between separate user groups (such as engineering or human resources).
Server-level access control is called persistent binding. Persistent binding uses
configuration information stored on the server and is implemented through the
server’s host bus adapter (HBA) driver. The process binds a server device name to
a specific Fibre Channel storage volume or logical unit number (LUN), through a
specific HBA and storage port WWN. In essence, this feature creates a reliable
route across the fabric that sustains the small computer system interface (SCSI)
connection between a server and storage device.
For persistent binding:
Each server HBA is explicitly bound to a storage volume or LUN, and access
is explicitly authorized (access is blocked by default).
The process is compatible with open system interconnection (OSI) standards.
The following are transparently supported:
Different operating systems and applications.
Different storage volume managers and file systems.
Different fabric devices, including disk drives, tape drives, and tape
libraries.
If the server is rebooted, the server-to-storage connection is automatically
re-established.
The connection is bound to a storage port WWN. If the fiber-optic cable is
disconnected from the storage port, the server-to-storage connection is
automatically re-established when the port cable is reconnected. The
connection is also automatically re-established if the storage port is cabled
through a different managed product port.