HP A7533A HP StorageWorks Fabric OS 6.1.x administrator guide (5697-0234, Nove - Page 252
Access control with discovery domains
UPC - 829160830858
View all HP A7533A manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 252 highlights
The following figure shows an iSCSI gateway that has three iSCSI VTs and two iSCSI initiators. iS C S I initiator A iqn.2003-11.c om.mic ros oft: win2k-s n-192168101 iS C S I virtual targets (V T s ) VT 1 iqn.2002-12.com.brocade:10: 00:00:05:1e:aa:bb:cc IP Network VT 2 iqn.2002-12.c om.broc ade: 10: 00: 00: 05: 1e: c c : bb: aa VT 3 iqn.2002-12.c om.broc ade: 10: 00: 00: 05: 1e: bb: c c : aa iS C S I initiator B iiqn.2003-11.c om.mic ros oft: win2k-s n-192168102 Figure 20 IQN example iS C S I gateway s ervic e You may create a different IQN prefix using the iscsiSwCfg - -modifygw -t command. The prefix portion may be used to identify companies or organizations (e.g., Microsoft, etc.). Your organization may suggest or require a specific format for the prefix portion of the IQN. Changing and displaying the IQN prefix 1. Connect and log in to the switch. 2. Enter the iscsiSwCfg - -modifygw -t command, where is the value you want to use as the IQN prefix to change the IQN prefix. switch:admin>iscsiswcfg --modifygw -t iqn.2007-10.com.brocade The operation completed successfully 3. Enter the iscsiSwCfg - -showgw command to display the IQN prefix. switch:admin> iscsiswcfg --showgw Target name is: iqn.2007-10.com.brocade The operation completed successfully Access control with discovery domains You can limit access to iSCSI VTs using a discovery domain (DD), a group of the iSCSI initiators and iSCSI VTs. The iSCSI initiators can access only the iSCSI VTs that are in the same discovery domain. Discovery domains are grouped together in a discovery domain set (DDSet). The active discovery domain set enforces the fabric-wide iSCSI VT access. Only the DDs in the active DDSet are enforced. You can create multiple discovery domain sets but only one set can be active at a time. It is also possible to present a single iSCSI portal IP address to the iSCSI initiator when the default iSCSI port configuration is in effect, and connection redirection is disabled on the blade. The following figure shows a discovery domain set (DDSet 1), which contains two discovery domains (DD1 and DD2). When DDSet 1 is active, iSCSI initiator A can access only iSCSI VT 1 and iSCSI initiator B can access only VT 2 and VT 3. 252 iSCSI Gateway services