HP StorageWorks 2/140 FW 07.00.00/HAFM SW 08.06.00 McDATA Products in a SAN En - Page 278

Task 16: Plan Zone Sets for Multiple Products (Optional), No Zone Synchronization

Page 278 highlights

Configuration Planning Tasks 6 Task 16: Plan Zone Sets for Multiple Products (Optional) If name server zoning is to be implemented, carefully plan the characteristics and security objectives (separation of operating systems, data sets user groups, devices, or processes) of zone members, zones and zone sets. If a fabric topology or routed SAN is implemented, zoning is configured on a fabric-wide or SAN-wide basis. Planning for zoned configurations must be carefully coordinated with planning the topology. The following factors should be considered when planning to implement name server zoning: • Zone members specified by port number or WWN - Consider if zoning is to be implemented by port number or WWN. Because changes to a port connections or fiber-optic cable configurations may disrupt zone operation, zoning by WWN is recommended. NOTE: SAN routers do not support port number zoning. • Zoning implications for a multiswitch fabric - To ensure zoning is consistent across a multiswitch fabric, directors and fabric switches must have compatible operating parameters and unique domain IDs, the active zone set name must be consistent, and zones with the same name must have identical elements. • Zoning implications for a routed SAN - A zone policy must be established that specifies how zone information is synchronized between a SAN router and attached fabrics. Zone policy options are No Zone Synchronization (device zoning is controlled at the fabric level) or Append IPS Zones (device zoning control is shared between a SAN router and the fabric). • Server and storage device access control - In addition to zoning, consider implementing server-level access control (persistent binding) and storage-level access control. Consider purchasing and enabling the SANtegrity Authentication and SANtegrity Binding features to work in conjunction with name server zoning to provide additional data security in a complex and multi-OEM environment. Planning and implementing zones and zone sets is a complex and difficult task, especially for multiswitch fabrics. Obtain planning assistance from McDATA's professional services organization before implementing a zoning feature. 6-30 McDATA Products in a SAN Environment - Planning Manual

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230
  • 231
  • 232
  • 233
  • 234
  • 235
  • 236
  • 237
  • 238
  • 239
  • 240
  • 241
  • 242
  • 243
  • 244
  • 245
  • 246
  • 247
  • 248
  • 249
  • 250
  • 251
  • 252
  • 253
  • 254
  • 255
  • 256
  • 257
  • 258
  • 259
  • 260
  • 261
  • 262
  • 263
  • 264
  • 265
  • 266
  • 267
  • 268
  • 269
  • 270
  • 271
  • 272
  • 273
  • 274
  • 275
  • 276
  • 277
  • 278
  • 279
  • 280
  • 281
  • 282
  • 283
  • 284
  • 285
  • 286
  • 287
  • 288
  • 289
  • 290
  • 291
  • 292
  • 293
  • 294
  • 295
  • 296
  • 297
  • 298
  • 299
  • 300
  • 301
  • 302
  • 303
  • 304
  • 305
  • 306
  • 307
  • 308
  • 309
  • 310
  • 311
  • 312
  • 313
  • 314
  • 315
  • 316
  • 317
  • 318
  • 319
  • 320
  • 321
  • 322

6
6-30
McDATA Products in a SAN Environment - Planning Manual
Configuration Planning Tasks
Task 16: Plan Zone Sets for Multiple Products (Optional)
If name server zoning is to be implemented, carefully plan the
characteristics and security objectives (separation of operating
systems, data sets user groups, devices, or processes) of zone
members, zones and zone sets.
If a fabric topology or routed SAN is implemented, zoning is
configured on a fabric-wide or SAN-wide basis. Planning for zoned
configurations must be carefully coordinated with planning the
topology. The following factors should be considered when planning
to implement name server zoning:
Zone members specified by port number or WWN
- Consider if
zoning is to be implemented by port number or WWN. Because
changes to a port connections or fiber-optic cable configurations
may disrupt zone operation, zoning by WWN is recommended.
NOTE:
SAN routers do not support port number zoning.
Zoning implications for a multiswitch fabric
- To ensure zoning
is consistent across a multiswitch fabric, directors and fabric
switches must have compatible operating parameters and unique
domain IDs, the active zone set name must be consistent, and
zones with the same name must have identical elements.
Zoning implications for a routed SAN
- A zone policy must be
established that specifies how zone information is synchronized
between a SAN router and attached fabrics. Zone policy options
are
No Zone Synchronization
(device zoning is controlled at the
fabric level) or
Append IPS Zones
(device zoning control is
shared between a SAN router and the fabric).
Server and storage device access control
- In addition to zoning,
consider implementing server-level access control (persistent
binding) and storage-level access control.
Consider purchasing and enabling the SANtegrity Authentication
and SANtegrity Binding features to work in conjunction with name
server zoning to provide additional data security in a complex and
multi-OEM environment. Planning and implementing zones and
zone sets is a complex and difficult task, especially for multiswitch
fabrics. Obtain planning assistance from McDATA’s professional
services organization before implementing a zoning feature.