Configuring lun security – HP StorageWorks XP Remote Web Console Software User Manual
Page 9
the host. You do not need to restart the system when you add, change, or delete LU paths with
LUN Manager.
If a hardware failure (such as a CHA failure) occurs, there is a chance that some LU paths will be
disabled and some I/O operations stopped. To avoid such a situation, the system administrator
can define alternate LU paths; if one LU path fails, the alternate path takes over the host I/O.
For instructions on how to define LU paths, see
. For instructions on how to change LU
path settings, see
. For instructions on how to define alternate paths, see
NOTE:
•
In a Fibre Channel environment, up to 2,048 LU paths can be defined for one host group.
Up to 2,048 LU paths can be defined for one port.
•
You cannot define an LU path to volumes reserved by HP XP Auto LUN Software. For more
information about XP Auto LUN, See the HP XP24000/XP20000 Auto LUN Software User
Guide.
•
Up to 255 host groups can be created for one Fibre Channel port.
•
You cannot define an LU path to journal volumes.
•
You cannot define an LU path to pool volumes.
•
You cannot define an LU path to system disk volumes.
•
You cannot define an LU path to quorum disk volumes
Configuring LUN Security
To protect mission-critical data in your storage system from illegal access, you must apply security
policies to logical volumes. Use LUN Manager to enable LUN security on ports to safeguard LUs
from illegal access.
If a port has the External attribute, you cannot apply LUN security to the port.
If LUN security is enabled, host groups affect which host can access which LUs. Hosts can only
access LUs associated with the host group to which the hosts belong. The hosts cannot access LUs
associated with the other host groups. For example, hosts in the hp-ux host group cannot access
LUs associated with the windows host group. Also, hosts in the windows host group cannot access
LUs associated with the hp-ux host group.
In
, LUN security is enabled on port CL1-A. The two hosts in the hg-lnx host group can
only access the three LUs 00:00:00, 00:00:01, and 00:00:02. The two hosts in the hg-hpux host
group can only access the two LUs 00:02:01 and 00:02:02. The two hosts in the hg-solar host
group can only access the two LUs 00:01:05 and 00:01:06.
Figure 2 Enabling LUN Security
Configuring LUN Security
9