Brocade iSCSI Gateway Service Administrator's Guide (53-1000603-01, October 2007)

6 iSCSI Gateway Service Administrator’s Guide
53-1000603-01
Overview of iSCSI gateway service
1
FIGURE 6 IQN example
Controlling access to the iSCSI VT
You can limit access to iSCSI VTs using a discovery domain (DD), a group of the iSCSI initiators and
iSCSI VTs. The iSCSI initiators can access only the iSCSI VTs that are in the same discovery domain.
Discovery domains are grouped together in a discovery domain set (DDSet). The active discovery
domain set enforces the fabric-wide iSCSI VT access. Only the DDs in the active DDSet are
enforced. You can create multiple discovery domain sets but only one set can be active at a time.
It is also possible to present a single iSCSI portal IP address to the iSCSI initiator when the default
iSCSI port configuration is in effect, and connection redirection is disabled on the blade.
The following figure shows a discovery domain set (DDSet 1), which contains two discovery
domains (DD1 and DD2). When DDSet 1 is active, iSCSI initiator A can access only iSCSI VT 1 and
iSCSI initiator B can access only VT 2 and VT 3.
IP Network
iS CS I ga teway se rv ic e
iS CS I v irtual targe ts (V Ts )
iS CS I in itia tor A
iS CS I in itia tor B
VT 1
VT 2
VT 3
iiqn.2003-11. c o m.m ic r os oft: win2k -s n -192168102
iqn.2003-11. c o m.m ic r os oft: win2k -s n -192168101
iqn.2002-12. c o m. brocade :10: 00: 00:05:1e:aa :bb:cc
iqn.2002-12. c o m. brocade :10: 00: 00:05:1e:c c : bb:a a
iqn.2002-12. c o m. brocade :10: 00: 00:05:1e:bb: cc :a a