Advanced Vsan Membership For Iscsi Hosts; Iscsi Access Control - HP Cisco MDS 9216 - Fabric Switch Configuration Manual

Configuring iSCSI
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
Figure 50-23
Host A
(VSAN X)
iSCSI iSCSI
Host B
iSCSI iSCSI
Host C
iSCSI iSCSI
Host A's virtual Fibre Channel N port will be added to VSAN X because of explicit membership for the
initiator. The virtual host-B and host-C N ports do not have any explicit membership configuration so
they will inherit the iSCSI interface VSAN membership and be part of VSAN Y.

Advanced VSAN Membership for iSCSI Hosts

An iSCSI host can be a member of multiple VSANs. In this case multiple virtual Fibre Channel hosts
are created, one in each VSAN in which the iSCSI host is a member. This configuration is useful when
certain resources such as Fibre Channel tape devices need to be shared among different VSANs.

iSCSI Access Control

Two mechanisms of access control are available for iSCSI devices.
•
•
Depending on the initiator mode used to present the iSCSI hosts in the Fibre Channel fabric, either or
both the access control mechanisms can be used.
The topics included in this section are:
•
•
•
Cisco MDS 9000 Family CLI Configuration Guide
50-24
VSAN Membership for iSCSI Interfaces
MDS
IP
network
iSCSI interface 1/1
port VSAN = Y
Fibre Channel zoning-based access control
iSCSI ACL-based access control
Fibre Channel Zoning-Based Access Control, page 50-25
iSCSI-Based Access Control, page 50-26
Enforcing Access Control, page 50-27
VSAN X
Virtual
Host A
VSAN Y
Virtual
Virtual
Host B
Host C
Chapter 50
VSAN X
T1
VSAN Y
T2
OL-16184-01, Cisco MDS SAN-OS Release 3.x
Configuring iSCSI