HP A7533A HP StorageWorks Fabric OS 6.1.1 administrator guide (5697-0235, Dece - Page 256
Access control with discovery domains
![]() |
UPC - 829160830858
View all HP A7533A manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 256 highlights
Figure 22 shows an iSCSI gateway that has three iSCSI VTs and two iSCSI initiators. iS C S I initiator A iqn.2003-11.c om.mic ros oft: win2k-s n-192168101 iS C S I virtual targets (V T s ) VT 1 iqn.2002-12.com.brocade:10: 00:00:05:1e:aa:bb:cc IP Network VT 2 iqn.2002-12.c om.broc ade: 10: 00: 00: 05: 1e: c c : bb: aa VT 3 iqn.2002-12.c om.broc ade: 10: 00: 00: 05: 1e: bb: c c : aa iS C S I initiator B iiqn.2003-11.c om.mic ros oft: win2k-s n-192168102 Figure 22 IQN example iS C S I gateway s ervic e You may create a different IQN prefix using the iscsiSwCfg --modifygw -t command. The prefix portion may be used to identify companies or organizations (e.g., Microsoft). Your organization may suggest or require a specific format for the prefix portion of the IQN. Changing and displaying the IQN prefix 1. Connect and log in to the switch. 2. Issue the iscsiSwCfg --modifygw -t command, where is the value you want to use as the IQN prefix to change the IQN prefix: switch:admin>iscsiswcfg --modifygw -t iqn.2007-10.com.brocade The operation completed successfully 3. Issue the iscsiSwCfg --showgw command to display the IQN prefix. switch:admin> iscsiswcfg --showgw Target name is: iqn.2007-10.com.brocade The operation completed successfully Access control with discovery domains You can limit access to iSCSI VTs using a discovery domain (DD), a group of the iSCSI initiators and iSCSI VTs. The iSCSI initiators can access only the iSCSI VTs that are in the same discovery domain. Discovery domains are grouped together in a discovery domain set (DDSet). The active discovery domain set enforces the fabric-wide iSCSI VT access. Only the DDs in the active DDSet are enforced. You can create multiple discovery domain sets but only one set can be active at a time. It is also possible to present a single iSCSI portal IP address to the iSCSI initiator when the default iSCSI port configuration is in effect, and connection redirection is disabled on the blade. The following figure shows a discovery domain set (DDSet 1), which contains two discovery domains (DD1 and DD2). When DDSet 1 is active, iSCSI initiator A can access only iSCSI VT 1 and iSCSI initiator B can access only VT 2 and VT 3. 256 iSCSI Gateway services
![](/manual_guide/products/hewlettpackard-ae370a-hp-storageworks-fabric-os-611-administrator-guide-56970235-2009-a28315e/256.png)