Chapter 3 Lan Switch Connection - Fujitsu ETERNUS Server Connection Manual

Chapter 3
• As with an FC-SAN, because of the large data flows (traffic volumes) the iSCSI LAN is
assumed to be a dedicated LAN separate from the business and management LANs, and
constructed with its own LAN switch.
• iSCSI LAN redundancy is achieved by the use of multipaths.
• For IP network security reasons too, it is useful to separate the iSCSI LAN (for data transfers)
and management LAN (for administration) to prevent cross-access between them (use of
VLAN to separate the LAN segments is recommended).
Example LAN switch connection configuration
A separate LAN segment is used for each
Server/Storage grouping. (*2)
Here, LAN ports 1, 2 and 10 comprise VLAN1,
while LAN ports 3 and 11 comprise VLAN2.
*1:
*2:
P3AM-4152-02ENZ0 ETERNUS Disk storage systems Server Connection Guide (iSCSI) for Linux
(SUSE Linux Enterprise Server)
LAN Switch Connection
[Business LAN]
LAN
card
#1
Business server A Business server B
LAN LAN LAN
card card card
#2 #3
1 2 3
LAN switch #1
LAN switches should not
[iSCSI LAN]
be inter-connected (*1)
10 11 12
LUN1 LUN2 LUN3
ETERNUS Disk storage system
In this system configuration, multipaths provide redundant connections between the servers and
storage system. LAN switches #1 and #2 provide physical separation of the network paths.
A separate LAN segment is provided in the LAN switch (using the switch VLAN function) for each
grouping of business servers and disk storage systems (equivalent to the FC zones).
LAN switch
LAN LAN
card card
#1 #1
Business server C
LAN LAN LAN
card card card
#2 #3 #2
1 2 3
LAN switch #2
[iSCSI LAN]
10 11
Management
LAN switch
LAN port
[Management LAN]
The iSCSI LAN and management
LAN segments are kept separate
in the iSCSI LAN switches, helping
maintain the security of each.
11
Business LAN
Similarly to FC-SAN, a
dedicated LAN is used for
iSCSI, not the business LAN.
#3
iSCSI LAN
12
Management LAN
Copyright 2010 FUJITSU LIMITED