IBM SAN768B-2, Руководство пользователя

Страница: 38 / 228

Software features
The Fabric OS allows any Fibre Channel-compliant device to attach to the switches
as long as it conforms to the device login, name service, and related Fibre Channel
standards. Each operating environment requires that a Fibre Channel host bus
adapter (HBA) be available with a standards-compliant driver for correct interface
to the fabric.
Fabric OS consists of a set of embedded applications running on top of an
embedded Linux operating system kernel. Some of these applications include:
v Name server
v
Alias server
v
Zone server
v
Simple Network Management Protocol (SNMP) agent
v
SMI-S compliant API
v
Syslog auditing
v
RCS (Reliable Commit Service)
v NTP
v
Tasks to manage address assignment, routing, link initialization, fabric
initialization, link shutdown, chassis shutdown, and the user interface.
v FICON
®
with CUP Activation (optional feature), providing in-band management
of the supported SAN b-type switch and director products by system
automation for z/OS from IBM System z10 EC, z10 BC, z9 EC, z9 BC, zSeries
990, 900, 890, and 880 servers.
v
FICON Accelerator (optional feature), which is designed to support secure
high-speed data movement between multiple locations
Security
The list below highlights some of the key security features available for the
SAN768B-2 and for other switches running Fabric OS 7.0.1 or later.
v
DH-CHAP
v SSHv2 (using AES, 3DES, RSA)
v
HTTPS (using AES)
v
SNPMv3
v
FC-SP
v
Secure RPC
v
Secure file copy (SCP)
v
Telnet disable
v
Telnet timeout
v
IP filters (block listeners)
v Secure passwords (centralized control through RADIUS/CHAP)
v
Multiple user accounts (MUAs). Up to 255.
v
Role-based access controls (RBACs)
v
Administrative domains/Virtual fabrics
v
Boot PROM password reset
v
Password hardening policies
v
Upfront login in Web Tools
v
Login banner
10
SAN768B-2 Installation, Service, and User Guide