Controlling Access At The Switch; Controlling Access At The Server Or Storage Device - McDATA 316095-B21 - StorageWorks Edge Switch 2/24 User Manual

Controlling Access
at the Switch
Controlling Access
at the Server or
Storage Device
A port binding feature is available on switches and directors that
allows you to "bind" a specific switch or director port to the world
wide name (WWN) of an attached device for exclusive
communication. This Port Binding feature is available through the
the Port Binding command, under the Security menu (see
on page 5-33).
Port Binding
Features available at the server or storage device can add methods
beyond zoning to increase network security measures, differentiate
between operating systems, and prevent data loss or corruption by
controlling access between devices or between separate user groups
(such as engineering or human resources).
Server-level access control is called persistent binding. Persistent
binding uses configuration information stored on the server and is
implemented through the server's host bus adapter (HBA) driver.
The process binds a server device name to a specific Fibre Channel
storage volume or logical unit number (LUN), through a specific
HBA and storage port WWN. In essence, this feature creates a reliable
route across the fabric that sustains the small computer system
interface (SCSI) connection between a server and storage device.
For persistent binding:
• Each server HBA is explicitly bound to a storage volume or LUN,
and access is explicitly authorized (access is blocked by default).
• The process is compatible with open system interconnection (OSI)
standards. The following are supported:
— Different operating systems and applications.
— Different storage volume managers and file systems.
— Different fabric devices, including disk drives, tape drives,
and tape libraries.
• If the server is rebooted, the server-to-storage connection is
automatically re-established.
• The connection is bound to a storage port WWN. If the fiber-optic
cable is disconnected from the storage port, the server-to-storage
connection is automatically re-established when the port cable is
reconnected. The connection is also automatically re-established
if the storage port is cabled through a different managed product
port.
Understanding Zoning
Configuring
Configuring Zoning
4
4-5