DataDirect Networks S2A9550, Руководство пользователя, Страница: 39 / 118

Installation
DataDirect Networks S2A 9550 User Guide
27
- When asked to format the LUN, type:
y
<Enter>
NOTE : LUN format is a background process and you can start adding the next LUN as soon
as the format for the previous LUN has started.
2.3.11 Setting Security Levels
After you have formatted all the LUNs you need, you may define the users’ right of access
to the storage. There are two types of configurations: authorized user and host port
zoning.
The Authorized User configuration is highly recommended for use in a SAN environment
as your data is completely secured and no accidental plug-in is allowed to do damage such
as data deletion, LUN removal, and LUN format. The authorized users only have access
to “their own” and “allowed to share” data. Administrator can also restrict users’ access
to the host ports and their read/write privileges to the LUNs. Another advantage of this
configuration is that the users see the same LUN identification scheme regardless of the
host port connection.
The Host Port Zoning configuration gives the minimum level of security. The LUN
mappings change according to the host port connection. The read-only and read/write
privileges can be specified for each LUN.
The “place holder” LUN feature allows the S2A9550 administrator to map a zero-capacity
LUN to a host or group of hosts (via zoning or user authentication). The administrator can
then create a real LUN and map it to the host(s) to replace the “place holder” LUN in the
future. In most cases, the host does not have to reboot since it already mapped to the
“place holder” LUN.
NOTE : Support of place holder LUNs is dependent upon the operating system, the driver,
and the HBA.
2.3.11.1 User Authentication (Recommended for SAN Environment)
Each user connected to the S2A9550 is identified by its World Wide Name (WWN) and is
given a unique user ID number. The S2A9550 can store configuration for up to 512 users
and the security settings apply to all host ports.
Given below is an example for adding 2 users to a system containing 2 LUNs (numbered
0, 1). Each user has a dedicated LUN segment and internal LUN 1 is shared and “read-
only”. Both users see the shared LUN as LUN 0 and they see their own LUN segment as
LUN 1. User 1 has access to host ports 1 and 4 while User 2 only has access to host port 2.
Prior to adding any users, verify that no “anonymous” access is allowed to the system:
1.
Type: zoning
<Enter>
2.
Check that the LUN Zoning chart is empty (
Figure 2-13)
.