Release Notes

17 Dell Virtual Storage Manager: Installation Considerations and Local Data Protection | 2079-BP-V-VSM
The access controls for volumes created with VSM can be done in two ways:
• Have VSM auto-generate an access control policy or access control list (ACL).
For PS Series groups running firmware 7.0 and above, VSM will assign an Access Control Policy that contains
the IQNs of the servers contained in the cluster or server selected on the Hardware Resource step. If no
existing Access Control Policy meets these requirements, a new Access Control Policy will be created. For more
information on Access Control Policies and Access Control Lists, see the PS Series technical report titled,
Access Control Policies.
For PS Series groups running firmware prior to 7.0, VSM will create a traditional Access Control List (ACL) on
the volume that contains the IQNs of the servers contained in the cluster or server selected on the Hardware
Resource step. It is important to note the ACL are limited to sixteen entries.
• Where auto-generating an access controls is not preferred, an ACL can be manually created.
Manually created ACLs can consist of up to sixteen entries containing the CHAP user name, IP address, or IQN
to reflect servers that should be permitted access, and can be saved as a template for future re-use.
2.5.3 Access controls for Virtual Volumes datastores
vSphere 6.0 introduces the vVol datastore which is a logical space on the array known as a Storage Container where the
virtual machines are placed. Storage Containers differ from traditional VMFS datastores in that a file system is not
used. Instead, virtual machines are directly using volumes on the SAN.
Access controls for storage containers are handled at the protocol endpoint using the steps below.
1. Click PS Groups, and then select the group with the protocol endpoint that a host or cluster will access.
2. In the Manage tab, click Protocol Endpoint.
3. Select the host that needs to be accessed and click Allow. Alternatively, select a cluster and click Allow All.