HP Surestore 64 Planning Guide - Page 85

Factors to Consider When Implementing Zoning, Server and Storage-Level Access Control

Page 85 highlights

Factors to Consider When Implementing Zoning Consider the following factors when planning to implement zoning for one or more directors in the enterprise. In particular, consider the implications of zoning within a multiswitch fabric. • Reason(s) for zone implementation Determine if zoning is to be implemented for the enterprise. If so, evaluate if the purpose of zoning is to differentiate between operating systems, data sets, user groups, devices, processes, or some combination thereof. Plan the use of zone members, zones, and zone sets accordingly. • Zone members specified by port number or WWN Determine if zoning is to be implemented by port number or WWN. Changes to port connections or fiber-optic cable configurations disrupt zone operation and may incorrectly include or exclude a device from a zone. Zoning by WWN is recommended. However, if zoning is implemented by WWN, removal and replacement of a device HBA or Fibre Channel interface disrupts zone operation and may incorrectly include or exclude a device from a zone. Port zoning is not supported on open fabric mode. • Zoning implications for a multiswitch fabric For a multiswitch fabric, zoning is configured on a fabric-wide basis, and any change to the zoning configuration is applied to all switches in the fabric. To ensure zoning is consistent across a fabric, there can be no duplicate domain IDs, the active zone set name must be consistent, and zones with the same name must have identical elements. Ensure these rules are enforced when planning zones and zone sets, and carefully coordinate the zoning and multiswitch fabric tasks. Server and Storage-Level Access Control To enhance the access barriers and network security provided by zoning through the director, security measures for SANs should also be implemented at servers and storage devices. Security Provisions 71 Planning Considerations

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172

Security Provisions
71
Planning Considerations
Factors to Consider When Implementing Zoning
Consider the following factors when planning to implement zoning for one or more
directors in the enterprise. In particular, consider the implications of zoning within a
multiswitch fabric.
Reason(s) for zone implementation
Determine if zoning is to be implemented for the enterprise. If so, evaluate if the
purpose of zoning is to differentiate between operating systems, data sets, user groups,
devices, processes, or some combination thereof. Plan the use of zone members,
zones, and zone sets accordingly.
Zone members specified by port number or WWN
Determine if zoning is to be implemented by port number or WWN. Changes to port
connections or fiber-optic cable configurations disrupt zone operation and may
incorrectly include or exclude a device from a zone. Zoning by WWN is recommended.
However, if zoning is implemented by WWN, removal and replacement of a device HBA
or Fibre Channel interface disrupts zone operation and may incorrectly include or
exclude a device from a zone. Port zoning is not supported on open fabric mode.
Zoning implications for a multiswitch fabric
For a multiswitch fabric, zoning is configured on a fabric-wide basis, and any change to
the zoning configuration is applied to all switches in the fabric. To ensure zoning is
consistent across a fabric, there can be no duplicate domain IDs, the active zone set
name must be consistent, and zones with the same name must have identical elements.
Ensure these rules are enforced when planning zones and zone sets, and carefully
coordinate the zoning and multiswitch fabric tasks.
Server and Storage-Level Access Control
To enhance the access barriers and network security provided by zoning through the
director, security measures for SANs should also be implemented at servers and storage
devices.