HP A7533A HP StorageWorks Fabric OS 6.1.1 administrator guide (5697-0235, Dece - Page 271

Discovery domain and domain set configuration

Page 271 highlights

3. Issue the iscsiCfg --commit all command to commit the changes to the database. If the LUN deletion is one of several configuration changes, you may want to see "Committing the iSCSI-related configuration" on page 274 for extra detail on the commit process. Displaying the iSCSI virtual target LUN map 1. Connect and log in to the switch. 2. Issue the iscsiCfg --show lun command: switch:admin> iscsicfg --show lun Number of targets found: 2 Target: iqn.2006-10.com.example:disk001 Number of LUN Maps: 2 FC WWN Virtual LUN(s) 21:00:00:04:cf:e7:73:7e 0 2f:ff:00:06:2b:0d:12:99 1-2 Physical LUN(s) 0 0-1 Target: iqn.2002-10.com.brocade:21:00:00:04:cf:e7:74:cf Number of LUN Maps: 1 FC WWN Virtual LUN(s) Physical LUN(s) 21:00:00:04:cf:e7:74:cf 0 Displaying iSCSI VT state and status 0x0000000000000000 The following information can be displayed for each iSCSI VT: • Name-IQN for the iSCSI VT. • State-Whether the FC target is online or offline. • Status-Whether the iSCSI VT has been defined (configuration completed but not committed) or is committed (active and available to iSCSI initiators). • Authentication method-Indicates CHAP if authentication is enabled for the iSCSI VT. 1. Connect and log in to the switch. 2. Issue the iscsiCfg --show tgt command with the -v option to display the iSCSI VTs: switch:admin> iscsicfg --show tgt -v Number of records found: 2 Name: iqn.2006-10.com.example-disk001 State/Status: Online/Defined Auth. Method: None Name: iqn.2002-10.com.brocade:21:00:00:04:cf:e7:74:cf State/Status: Online/Defined Auth. Method: None Discovery domain and domain set configuration Discovery domains and discovery domain sets can be used to configure access control between iSCSI initiators and iSCSI VTs manually. A discovery domain (DD) controls iSCSI initiator access to iSCSI VTs. A DD is a group of iSCSI initiators and iSCSI VTs identified by IQNs. The iSCSI initiators can access only the iSCSI VTs that are in the DD to which they are assigned. When there are no discovery domains, all iSCSI initiators can access all iSCSI VTs. If iSNS (internet storage name service) is enabled, configure access control on the iSNS server; discovery domains and discovery domain sets configured in Fabric OS are not supported if the iSNS service is enabled on the fabric. You can create four discovery domain sets (DDSets), but only one set can be enforced at a time. Discovery domain sets allow you to enable and disable fabric-wide iSCSI VT access with a single command. An enabled DDSet is enforced fabric-wide. In a deployment with an active DDSet, only iSCSI initiators in an enforced DD can access iSCSI VT in the same DD. Fabric OS 6.1.x administrator guide 271

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230
  • 231
  • 232
  • 233
  • 234
  • 235
  • 236
  • 237
  • 238
  • 239
  • 240
  • 241
  • 242
  • 243
  • 244
  • 245
  • 246
  • 247
  • 248
  • 249
  • 250
  • 251
  • 252
  • 253
  • 254
  • 255
  • 256
  • 257
  • 258
  • 259
  • 260
  • 261
  • 262
  • 263
  • 264
  • 265
  • 266
  • 267
  • 268
  • 269
  • 270
  • 271
  • 272
  • 273
  • 274
  • 275
  • 276
  • 277
  • 278
  • 279
  • 280
  • 281
  • 282
  • 283
  • 284
  • 285
  • 286
  • 287
  • 288
  • 289
  • 290
  • 291
  • 292
  • 293
  • 294
  • 295
  • 296
  • 297
  • 298
  • 299
  • 300
  • 301
  • 302
  • 303
  • 304
  • 305
  • 306
  • 307
  • 308
  • 309
  • 310
  • 311
  • 312
  • 313
  • 314
  • 315
  • 316
  • 317
  • 318
  • 319
  • 320
  • 321
  • 322
  • 323
  • 324
  • 325
  • 326
  • 327
  • 328
  • 329
  • 330
  • 331
  • 332
  • 333
  • 334
  • 335
  • 336
  • 337
  • 338
  • 339
  • 340
  • 341
  • 342
  • 343
  • 344
  • 345
  • 346
  • 347
  • 348
  • 349
  • 350
  • 351
  • 352
  • 353
  • 354
  • 355
  • 356
  • 357
  • 358
  • 359
  • 360
  • 361
  • 362
  • 363
  • 364
  • 365
  • 366
  • 367
  • 368
  • 369
  • 370
  • 371
  • 372
  • 373
  • 374
  • 375
  • 376
  • 377
  • 378
  • 379
  • 380
  • 381
  • 382
  • 383
  • 384
  • 385
  • 386
  • 387
  • 388
  • 389
  • 390
  • 391
  • 392
  • 393
  • 394
  • 395
  • 396
  • 397
  • 398
  • 399
  • 400
  • 401
  • 402
  • 403
  • 404
  • 405
  • 406
  • 407
  • 408
  • 409
  • 410
  • 411
  • 412
  • 413
  • 414
  • 415
  • 416
  • 417
  • 418
  • 419
  • 420
  • 421
  • 422
  • 423
  • 424
  • 425
  • 426
  • 427
  • 428
  • 429
  • 430
  • 431
  • 432
  • 433
  • 434
  • 435
  • 436
  • 437
  • 438
  • 439
  • 440
  • 441
  • 442
  • 443
  • 444
  • 445
  • 446
  • 447
  • 448
  • 449
  • 450
  • 451
  • 452
  • 453
  • 454
  • 455
  • 456
  • 457
  • 458
  • 459
  • 460
  • 461
  • 462
  • 463
  • 464
  • 465
  • 466
  • 467
  • 468
  • 469
  • 470
  • 471
  • 472
  • 473
  • 474
  • 475
  • 476
  • 477
  • 478
  • 479
  • 480
  • 481
  • 482
  • 483
  • 484
  • 485
  • 486
  • 487
  • 488
  • 489
  • 490
  • 491
  • 492
  • 493
  • 494
  • 495
  • 496

Fabric OS 6.1.x administrator guide
271
3.
Issue the
iscsiCfg --commit all
command to commit the changes to the database. If the LUN
deletion is one of several configuration changes, you may want to see ”
Committing the iSCSI-related
configuration
” on page 274 for extra detail on the commit process.
Displaying the iSCSI virtual target LUN map
1.
Connect and log in to the switch.
2.
Issue the
iscsiCfg --show lun
command:
switch:admin>
iscsicfg --show lun
Number of targets found: 2
Target: iqn.2006-10.com.example:disk001
Number of LUN Maps: 2
FC WWN
Virtual LUN(s)
Physical LUN(s)
21:00:00:04:cf:e7:73:7e
0
0
2f:ff:00:06:2b:0d:12:99
1-2
0-1
Target: iqn.2002-10.com.brocade:21:00:00:04:cf:e7:74:cf
Number of LUN Maps: 1
FC WWN
Virtual LUN(s)
Physical LUN(s)
21:00:00:04:cf:e7:74:cf
0
0x0000000000000000
Displaying iSCSI VT state and status
The following information can be displayed for each iSCSI VT:
Name
—IQN for the iSCSI VT.
State
—Whether the FC target is online or offline.
Status
—Whether the iSCSI VT has been defined (configuration completed but not committed) or is
committed (active and available to iSCSI initiators).
Authentication method
—Indicates CHAP if authentication is enabled for the iSCSI VT.
1.
Connect and log in to the switch.
2.
Issue the
iscsiCfg --show tgt
command with the
-v
option to display the iSCSI VTs:
switch:admin>
iscsicfg --show tgt -v
Number of records found: 2
Name: iqn.2006-10.com.example-disk001
State/Status: Online/Defined
Auth. Method: None
Name: iqn.2002-10.com.brocade:21:00:00:04:cf:e7:74:cf
State/Status: Online/Defined
Auth. Method: None
Discovery domain and domain set configuration
Discovery domains and discovery domain sets can be used to configure access control between iSCSI
initiators and iSCSI VTs manually.
A discovery domain (DD) controls iSCSI initiator access to iSCSI VTs. A DD is a group of iSCSI
initiators
and iSCSI VTs identified by IQNs. The iSCSI initiators can access only the iSCSI VTs that are in the DD to
which they are assigned. When there are no discovery domains, all iSCSI initiators can access all iSCSI
VTs.
If iSNS (internet storage name service) is enabled, configure access control on the iSNS server; discovery
domains and discovery domain sets configured in Fabric OS are not supported if the iSNS service is
enabled on the fabric.
You can create four discovery domain sets (DDSets),
but only one set can be enforced at a time
. Discovery
domain sets allow you to enable and disable fabric-wide iSCSI VT access with a single command.
An enabled DDSet is enforced fabric-wide. In a deployment with an active DDSet, only iSCSI initiators in
an enforced DD can access iSCSI VT in the same DD.