Advanced Vsan Membership For Iscsi Hosts; Iscsi Access Control - Cisco AP776A - Nexus Converged Network Switch 5020 Configuration Manual

Cisco mds 9000 family cli configuration guide - release 4.x (ol-18084-01, february 2009)

Hide thumbs Also See for AP776A - Nexus Converged Network Switch 5020:

Table of Contents

Configuring iSCSI

S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m

Figure 43-12

Host A's virtual Fibre Channel N port will be added to VSAN X because of explicit membership for the

initiator. The virtual host-B and host-C N ports do not have any explicit membership configuration so

they will inherit the iSCSI interface VSAN membership and be part of VSAN Y.

Advanced VSAN Membership for iSCSI Hosts

An iSCSI host can be a member of multiple VSANs. In this case multiple virtual Fibre Channel hosts

are created, one in each VSAN in which the iSCSI host is a member. This configuration is useful when

certain resources such as Fibre Channel tape devices need to be shared among different VSANs.

Two mechanisms of access control are available for iSCSI devices:

Depending on the initiator mode used to present the iSCSI hosts in the Fibre Channel fabric, either or

both the access control mechanisms can be used.

The following topics are included in this section:

OL-18084-01, Cisco MDS NX-OS Release 4.x

iSCSI initiator host A has explicit VSAN membership to VSAN X.

Three iSCSI initiators (host A, host B, and host C) C connect to iSCSI interface 1/1.

VSAN Membership for iSCSI Interfaces

iSCSI interface 1/1

port VSAN = Y

Fibre Channel zoning-based access control

iSCSI ACL-based access control

Fibre Channel Zoning-Based Access Control, page 43-20

iSCSI-Based Access Control, page 43-21

Enforcing Access Control, page 43-22

Cisco MDS 9000 Family CLI Configuration Guide

Configuring iSCSI

Show Quick Links

Table of Contents