Advanced Vsan Membership For Iscsi Hosts; Iscsi Access Control - Cisco MDS 9000 series Configuration Manual

Chapter 4 Configuring iSCSI
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
•
•
Figure 4-12
Host A
(VSAN X)
iSCSI iSCSI
Host B
iSCSI iSCSI
Host C
iSCSI iSCSI
Host A's virtual Fibre Channel N port will be added to VSAN X because of explicit membership for the
initiator. The virtual host-B and host-C N ports do not have any explicit membership configuration so
they will inherit the iSCSI interface VSAN membership and be part of VSAN Y.

Advanced VSAN Membership for iSCSI Hosts

An iSCSI host can be a member of multiple VSANs. In this case, multiple virtual Fibre Channel hosts
are created, one in each VSAN in which the iSCSI host is a member. This configuration is useful when
certain resources such as Fibre Channel tape devices need to be shared among different VSANs.

iSCSI Access Control

Two mechanisms of access control are available for iSCSI devices:
•
•
Depending on the initiator mode used to present the iSCSI hosts in the Fibre Channel fabric, either or
both the access control mechanisms can be used.
The following topics are included in this section:
•
•
•
OL-19525-01,Cisco MDS NX-OS Release 4.2(1)
iSCSI initiator host A has explicit VSAN membership to VSAN X.
Three iSCSI initiators (host A, host B, and host C) C connect to iSCSI interface 1/1.
VSAN Membership for iSCSI Interfaces
MDS
IP
network
iSCSI interface 1/1
port VSAN = Y
Fibre Channel zoning-based access control
iSCSI ACL-based access control
Fibre Channel Zoning-Based Access Control, page 4-20
iSCSI-Based Access Control, page 4-21
Enforcing Access Control, page 4-22
VSAN X
Virtual
Host A
VSAN Y
Virtual
Virtual
Host B
Host C
Cisco MDS 9000 Family NX-OS IP Services Configuration Guide
VSAN X
T1
VSAN Y
T2
Configuring iSCSI
4-19