Santegrity Binding - HP 316095-B21 - StorageWorks Edge Switch 2/24 Planning Manual

Physical Planning Considerations
Table 3: Types of User Rights
Product Administrator
System Administrator
Maintenance
The system administrator can also use the HAFM application to assign remote
workstation access to directors and switches. Remote sessions can be allowed for
anyone on a customer intranet, disallowed completely, or restricted to specific
workstations. Remote users must log in to the HAFM application with a user name
and password, just as when logging in to the local HAFM appliance. Passwords
are encrypted when sent across the network. By entering workstation IP addresses
at the HAFM application, administrators can allow access from all user
workstations or only from specific workstations.
For access through the Web server interface, the system administrator provides IP
addresses of products to authorized users, assigns access usernames, and controls
associated passwords.

SANtegrity Binding

SANtegrity Binding is a feature that enhances data security in large and complex
SANs that have numerous fabrics and devices provided by multiple original
equipment manufacturers (OEMs), SANs that intermix FCP and FICON
protocols, and FICON-cascaded high-integrity SANs. The feature allows or
prohibits director or switch attachment to fabrics (fabric binding) and Fibre
Channel device attachment to directors or switches (switch binding). The
SANtegrity binding feature includes:
148
User Right
Fabric binding — Using the fabric binding feature, an administrator allows
only specified directors or switches to attach to specified fabrics in a SAN.
This provides security from accidental fabric merges or potential fabric
disruption, particularly in environments that use patch panels for centralizing
fibers and physical connections. This feature is managed through the HAFM
Manager application.
Operator Access Allowed
The product administrator can make control and
configuration changes through the
application.
The system administrator can make control and
configuration changes, define users and passwords, and
add or remove products through the
The maintenance operator can perform product control
and configuration changes through the
application and perform diagnostics, maintenance
functions, firmware loads, and data collection.
Element Manager
HAFM
application.
Element Manager
SAN High Availability Planning Guide