Zoning Switches for Fiber Channel Storage There are many things you must consider when getting ready to zone for SAN connections. You first have to decide how granular you want to be and how secure as well. There are two basic types of zoning, either zoning based off of the WWN of the device (MAC address for you Ethernet network guys) or port based on the switch (much like vlans, again for you Ethernet guys). When you use the zoning off of WWN you get a greater range of flexibility. See the whole switch can use the configuration file so if you say 1234 can see 5678 than the port doesn't matter so if you move device 1234 from physical port 2 to physical port 5 it will still have the same access rights. Down side is that just like MAC spoofing you can perform WWN spoofing thus gaining access to zones you shouldn't see. When you use the zoning of the ports you get a tighter control of what can see what but less flexibility. Here you would say that port 2 can see port 10. Now if you move the device in the same as above from port 2 to port 5, this device will no longer be able to see its partner. The up side to this as opposed to the down side from above is that you can't spoof a physical port unless you are standing in the room at the switch. Now when it comes time to doing the zoning itself you have a couple more choices to make if you are using multiple devices to a single device. In this situation (referenced in the attached video) you have multiple servers with the same ...
Thursday, January 31, 2013
How To Zone Brocade Switch for Use with Fiber Channel Storage
How To Zone Brocade Switch for Use with Fiber Channel Storage Tube. Duration : 2.85 Mins.
Zoning Switches for Fiber Channel Storage There are many things you must consider when getting ready to zone for SAN connections. You first have to decide how granular you want to be and how secure as well. There are two basic types of zoning, either zoning based off of the WWN of the device (MAC address for you Ethernet network guys) or port based on the switch (much like vlans, again for you Ethernet guys). When you use the zoning off of WWN you get a greater range of flexibility. See the whole switch can use the configuration file so if you say 1234 can see 5678 than the port doesn't matter so if you move device 1234 from physical port 2 to physical port 5 it will still have the same access rights. Down side is that just like MAC spoofing you can perform WWN spoofing thus gaining access to zones you shouldn't see. When you use the zoning of the ports you get a tighter control of what can see what but less flexibility. Here you would say that port 2 can see port 10. Now if you move the device in the same as above from port 2 to port 5, this device will no longer be able to see its partner. The up side to this as opposed to the down side from above is that you can't spoof a physical port unless you are standing in the room at the switch. Now when it comes time to doing the zoning itself you have a couple more choices to make if you are using multiple devices to a single device. In this situation (referenced in the attached video) you have multiple servers with the same ...
Zoning Switches for Fiber Channel Storage There are many things you must consider when getting ready to zone for SAN connections. You first have to decide how granular you want to be and how secure as well. There are two basic types of zoning, either zoning based off of the WWN of the device (MAC address for you Ethernet network guys) or port based on the switch (much like vlans, again for you Ethernet guys). When you use the zoning off of WWN you get a greater range of flexibility. See the whole switch can use the configuration file so if you say 1234 can see 5678 than the port doesn't matter so if you move device 1234 from physical port 2 to physical port 5 it will still have the same access rights. Down side is that just like MAC spoofing you can perform WWN spoofing thus gaining access to zones you shouldn't see. When you use the zoning of the ports you get a tighter control of what can see what but less flexibility. Here you would say that port 2 can see port 10. Now if you move the device in the same as above from port 2 to port 5, this device will no longer be able to see its partner. The up side to this as opposed to the down side from above is that you can't spoof a physical port unless you are standing in the room at the switch. Now when it comes time to doing the zoning itself you have a couple more choices to make if you are using multiple devices to a single device. In this situation (referenced in the attached video) you have multiple servers with the same ...
Subscribe to:
Post Comments (Atom)
0 comments:
Post a Comment