Table of Contents
Advertisement
Introduction to McDATA Multi-Protocol Products
1
Security Features
McDATA Products in a SAN Environment - Planning Manual
1-28
— Eclipse-series SAN routers - Intelligent ports that support IP
network connectivity are not assigned BB_Credits. However,
the ports provide approximately 96 megabytes (MB) of
Transmission Control Protocol (TCP) packet buffering per
transmission direction. TCP output buffering absorbs fabric
data to ensure Fibre Channel BB_Credits are not exhausted.
Up to eight MB of buffering can be allocated to any single
iFCP or iSCSI session.
•
Port binding - Directors and fabric switches support an optional
feature that binds an attached Fibre Channel device to a specified
product port through the device's WWN.
NOTE: SAN routers support port binding only for R_Ports.
SAN management and Element Manager applications offer the
following security features for McDATA switching products.
Products or product classes that do not support a security feature
are noted.
•
Password protection - Users must provide a user name and
password to log in to the management server and access all
managed products. Administrators can configure user names
and passwords for up to 16 users, and can authorize or prohibit
specific management permissions for each user.
•
Remote user restrictions - Remote user access to all managed
products is either disabled or restricted to configured IP
addresses.
•
SNMP workstation restrictions - Remote users on SNMP
workstations can only access management information base
(MIB) variables managed by the product SNMP agent. SNMP
workstations must belong to SNMP communities configured
through the Element Manager application. If configured, the
agent can send authorization failure traps when unauthorized
SNMP workstations attempt to access a managed product.
•
Port blocking - System administrators can restrict device access
by blocking or unblocking any director or fabric switch port
through the associated Element Manager application.
NOTE: SAN routers do not support port blocking.
Advertisement
Table of Contents
