Table of Contents
Advertisement
Chapter 35
Configuring iSCSI
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m .
Figure 35-12 VSAN Membership for iSCSI Interfaces
Host A
(VSAN X)
iSCSI
iSCSI
Host B
iSCSI
iSCSI
Host C
iSCSI
iSCSI
Host A's virtual Fibre Channel N port will be added to VSAN X because of explicit membership for the
initiator. The virtual host-B and host-C N ports do not have any explicit membership configuration so
will inherit the iSCSI interface VSAN membership and be part of VSAN Y.
Advanced VSAN membership for iSCSI hosts
An iSCSI host can be a member of multiple VSANs. In this case multiple virtual Fibre Channel host are
created, one in each VSAN in which the iSCSI host is a member. This configuration is useful when
certain resources such as Fibre Channel tape devices need to be shared among different VSANs.
iSCSI Access Control
Two mechanisms of access control are available for iSCSI devices.
•
•
Depending on the initiator mode used to present the iSCSI hosts in the Fibre Channel Fabric, either or
both the access control mechanisms can be used.
Fibre Channel Zoning Based Access Control
SAN-OS VSAN and zoning concepts has been extended to cover both Fibre Channel devices and iSCSI
devices. Zoning is the standard access control mechanism for Fibre Channel devices which is applied
within the context of a VSAN. Fibre Channel zoning has been extended to support iSCSI devices and
their extension has the advantage of having a uniform, flexible access control mechanism across the
whole SAN.
OL-6973-03, Cisco MDS SAN-OS Release 2.x
MDS
IP
network
iSCSI interface 1/1
port VSAN = Y
Fibre Channel based zoning access control
iSCSI ACL-based access control
VSAN X
Virtual
Host A
VSAN Y
Virtual
Virtual
Host B
Host C
Cisco MDS 9000 Family Configuration Guide
VSAN X
T1
VSAN Y
T2
Configuring iSCSI
35-19
Advertisement
Table of Contents
