IBM SAN384B-2, Installation, Service And User Manual

Page: 41 / 190

Software features
The Fabric OS allows any Fibre Channel-compliant device to attach to the switches
as long as it conforms to the device login, name service, and related Fibre Channel
standards. Each operating environment requires that a Fibre Channel host bus
adapter (HBA) be available with a standards-compliant driver for correct interface
to the fabric.
Fabric OS consists of a set of embedded applications running on top of an
embedded Linux operating system kernel. These applications include:
v Name server
v Alias server
v
Zone server
v Simple Network Management Protocol (SNMP) agent
v
SMI-S compliant API
v Syslog auditing
v
RCS (Reliable Commit Service)
v NTP
v
Tasks to manage address assignment, routing, link initialization, fabric
initialization, link shutdown, chassis shutdown, and the user interface.
v FICON
®
with CUP Activation (optional feature), providing in-band management
of the supported SAN b-type switch and director products by system
automation for z/OS from IBM System z10 EC, z10 BC, z9 EC, z9 BC, zSeries
990, 900, 890, and 880 servers.
v FICON Accelerator (optional feature), which is designed to support secure
high-speed data movement between multiple locations
Security
The list below highlights some of the key security features available for the
SAN384B-2 and for other enterprise-class products running Fabric OS 7.0.1 or later.
v
DH-CHAP
v SSHv2 (using AES, 3DES, RSA)
v HTTPS (using AES)
v
SNPMv3
v FC-SP
v
Secure RPC
v Secure file copy (SCP)
v
Telnet disable
v Telnet timeout
v
IP filters (block listeners)
v Secure passwords (centralized control through RADIUS/CHAP)
v
Multiple user accounts (MUAs). Up to 255.
v
Role-based access controls (RBACs)
v Administrative domains/Virtual fabrics
v
Boot PROM password reset
v Password hardening policies
v
Upfront login in Web Tools
v Login banner
Chapter 1. Introduction
9
|