Data Center Fabric Manager Enterprise User Manual v10.3.X (53-1001357-01, November 2009)

370 DCFM Enterprise User Manual
53-1001357-01
Open systems tape pipelining
12
The following limitations apply to using IPsec:
• IPSec is not supported on 10GbE ports.
• IPsec-specific statistics are not supported.
• To change the configuration of a secure tunnel, you must delete the tunnel and recreate it.
• There is no RAS message support for IPsec.
• IPsec can only be configured on IPv4 based tunnels.
• Secure Tunnels cannot be defined with VLAN Tagged connections.
• For the 4 Gbps Router, Extension switch and blade:
- IPv6, NAT, and AH are not supported.
- You can only create a single secure tunnel on a port; you cannot create a nonsecure tunnel
on the same port as a secure tunnel.
- Jumbo frames are not supported.
Open systems tape pipelining
Open Systems Tape Pipelining (OSTP) can be used to enhance open systems SCSI tape write I/O
performance. To implement OSTP over FCIP, you must enable the following two features:
• FCIP Fastwrite and Tape Acceleration.
• FC Fastwrite.
FCIP Fastwrite and Tape Acceleration
When the FCIP link is the slowest part of the network, consider using FCIP Fastwrite and Tape Read
and Write Pipelining. FCIP Fastwrite and Tape Acceleration are two features that provide
accelerated speeds for read and write I/O over FCIP tunnels in some configurations:
• FCIP Fastwrite accelerates the SCSI write I/Os over FCIP.
• Tape Acceleration accelerates SCSI read and write I/Os to sequential devices (such as tape
drives) over FCIP, which reduces the number of round-trip times needed to complete the I/O
over the IP network and speeds up the process. To use Tape Acceleration, you must also
enable FCIP Fastwrite.
Both sides of an FCIP tunnel must have matching configurations for these features to work. FCIP
Fastwrite and Tape Acceleration are enabled by turning them on during the tunnel configuration
process. They are enabled on a per-FCIP tunnel basis.
HMAC A stronger MAC because it is a keyed hash inside a keyed hash.
SA Security Association is the collection of security parameters and authenticated keys that are
negotiated between IPsec peers.
Term Definition