Chapter 5 Basic Functions
5.2 Security
■
External Authentication
External Authentication uses the user account information (user name, password, and role name) that is
registered on an external authentication server.
●
RADIUS authentication
Use of the Remote Authentication Dial-In User Service (RADIUS) protocol enables the consolidation of
authentication information for remote access.
An authentication request is sent to the RADIUS authentication server that is outside the ETERNUS system
network. The authentication method can be selected from CHAP and PAP. Two RADIUS authentication
servers can be connected to balance user account information and to create a redundant configuration.
The RADIUS server authenticates the user and responds with the ETERNUS DX Disk storage system role(s)
identified by the Vendor Specific Attribute (VSA).
5.2.3
Host Affinity
The host affinity function prevents data from being damaged due to inadvertent storage access.
By defining a server that can access the volume, security can be ensured when multiple servers are connected.
A server can access the volume by associating the server that is allowed to access the volume with the volume.
Volumes that are accessed can be set for each host interface port.
54
ETERNUS DX80 S2/DX90 S2 Disk storage system Overview
Copyright 2013 FUJITSU LIMITED
P3AM-4812-11ENZ0