Controlling Access To The Iscsi Vt - Brocade Communications Systems A7533A - Brocade 4Gb SAN Switch Base Administrator's Manual

1
Overview of iSCSI gateway service
FIGURE 6

Controlling access to the iSCSI VT

You can limit access to iSCSI VTs using a discovery domain (DD), a group of the iSCSI initiators and
iSCSI VTs. The iSCSI initiators can access only the iSCSI VTs that are in the same discovery domain.
Discovery domains are grouped together in a discovery domain set (DDSet). The active discovery
domain set enforces the fabric-wide iSCSI VT access. Only the DDs in the active DDSet are
enforced. You can create multiple discovery domain sets but only one set can be active at a time.
It is also possible to present a single iSCSI portal IP address to the iSCSI initiator when the default
iSCSI port configuration is in effect, and connection redirection is disabled on the blade.
The following figure shows a discovery domain set (DDSet 1), which contains two discovery
domains (DD1 and DD2). When DDSet 1 is active, iSCSI initiator A can access only iSCSI VT 1 and
iSCSI initiator B can access only VT 2 and VT 3.
6
iS C S I initiator A
iqn.2003-11.c om.mic ros oft: win2k-s n-192168101
IP Network
iS C S I initiator B
iiqn.2003-11.c om.mic ros oft: win2k-s n-192168102
IQN example
iS C S I virtual targets (V T s )
V T 1
iqn.2002-12.c om.broc ade: 10: 00: 00: 05: 1e: aa: bb: c c
V T 2
iqn.2002-12.c om.broc ade: 10: 00: 00: 05: 1e: c c : bb: aa
V T 3
iqn.2002-12.c om.broc ade: 10: 00: 00: 05: 1e: bb: c c : aa
iS C S I gateway s ervic e
iSCSI Gateway Service Administrator's Guide
53-1000603-01