HP Storage Essentials SRM 6.0 User Guide for Enterprise Edition and Standard Edition SRM Software (July 2008)

Provisioning Manager554
• When creating a host security group, if you provide a volume, but not an initiator, the host
security group is created, but the volume is part of the Default Group, not the group you created.
This occurs because until a volume is assigned to a host security group with an initiator, it is
visible to all initiators and is assigned to the Default Group. To assign a volume to a specific host
security group, you must add an initiator to that host security group.
• If you create an host security group for a Unix host on an LSI array, you must use SANtricity to
change the host mode of the host security group to Linux in order to be compatible with the Unix
host. If you do not, the Unix host will show a large number of LUN numbers available. You must
use SANtricity to change the host mode because it is not possible to select the host mode when
creating an host security group on an LSI array. The host security group will be created with the
Windows NT host mode by default if it is not manually changed.
Host Security Groups on EMC Symmetrix Storage Systems
Keep in mind the following rules for host security groups on EMC Symmetrix Storage Systems.
• If LUN security is not turned on for an FA port, all volumes assigned to the FC port are visible to
hosts that are on the SAN and have been zoned by the SAN. All volumes assigned to the FC
port appear in the mapped category.
• When you create a host security group on a Symmetrix storage system, you are creating LUN
mapping and masking in one step. In the native tools for Symmetrix storage systems, you will not
see the host security group you created by using the management server. Instead you will see a
volume bound to a port and a masked LUN bound to a host in the native tools.
• Host security group is associated with individual ports
• Host security groups only allow one initiator for host security masking.
• To create a host security group, you must specify a port, initiator and a volume.
• Every port has a LUN host security group, even if no LUNs are defined for that port. To bind a
LUN to a port, edit the host security group and add the desired LUN to a port.
• You can also add LUNs to a Mask host security group. To add initiators, you need to create the
host security group.
Host Security Groups on HDS Storage Systems
Keep in mind the following rules for host security groups on HDS storage systems.
• FC port contains only volumes but no initiators (HBA WWN) assignment, the management
server displays these volumes as unmapped since no external host can see these volumes yet.
• You can have zero to multiple initiators in a host security group
• You can have zero to multiple volumes in a host security group.
• A host security group can be on only one port on the array. You can have host security groups
with the same name, as long as they are on different ports.
• Host security groups appear in the native tool for HDS storage systems. In the logical view, the
host security groups are listed by LDEV; in the physical view, they are listed by port.
• In the native tool for HDS storage systems, host security groups are referred to as a host security
domain.
• For more information about host security group names, see ”Host Security Group Names on
HDS Storage Systems” on page 566.