Santegrity Binding - McDATA StorageWorks 2/140 - Director Switch Planning Manual

SANtegrity Binding

Enterprise Fabric
Mode
— Authorization errors.
— Authentication errors.
— Management application user connections.
Use of the SANtegrity Authentication feature in conjunction with
other security provisions must be carefully planned and coordinated.
For additional information, refer to
planning assistance from McDATA's professional services
organization before implementing the feature.
SANtegrity Binding is a feature that enhances data security in large
and complex SANs comprised of numerous fabrics and devices
provided by multiple OEMs, SANs that intermix FCP and FICON
protocols, and FICON-cascaded high-integrity SANs. The feature
allows or prohibits director or switch attachment to fabrics (fabric
binding) and Fibre Channel device attachment to directors or
switches (switch binding). The SANtegrity Binding feature includes:
• Fabric binding - Using fabric binding, administrators allow only
specified directors or fabric switches to attach to specified fabrics
in a SAN. This provides security from accidental fabric merges or
disruption, particularly in environments that use patch panels for
centralizing fibers and physical connections. This feature is
enabled through the SAN management application.
• Switch binding - Using switch binding, administrators allow
only specified devices and fabric elements to connect to specified
director or fabric switch ports. This provides security in
environments that include a large number of devices by ensuring
only the intended set of devices attach to a director or switch. This
feature is enabled through the Element Manager application.
Although Enterprise Fabric Mode is not a keyed feature, it is integral to
SANtegrity Binding operation. Enterprise Fabric Mode must be
enabled through the SAN management application before fabric
binding and switch binding can operate. Enterprise Fabric Mode also
enables the following parameters:
Physical Planning Considerations
Security Best Practices. Obtain
Physical Planning Considerations
5
5-19