HP StorageWorks Fabric OS 6.2 administrator guide (5697-0016, May 2009)

Fabric OS 6.2 administrator guide 319
Number of records found: 2
Name: iqn.2006-10.com.example-disk001
State/Status: Online/Defined
Auth. Method: None
Name: iqn.2002-10.com.brocade:21:00:00:04:cf:e7:74:cf
State/Status: Online/Defined
Auth. Method: None
Discovery domain and domain set configuration
Discovery domains (DDs) and discovery domain sets can be used to configure access control between
iSCSI initiators and iSCSI VTs manually.
A DD controls iSCSI initiator access to iSCSI VTs. A DD is a group of iSCSI initiators and iSCSI VTs
identified by IQNs. The iSCSI initiators can access only the iSCSI VTs that are in the DD to which they are
assigned. When there are no discovery domains, all iSCSI initiators can access all iSCSI VTs.
If iSNS (internet Storage Name Service) is enabled, configure access control on the iSNS server; discovery
domains and discovery domain sets configured in Fabric OS are not supported if the iSNS service is
enabled on the fabric.
You can create four discovery domain sets (DDSets), but only one set can be enforced at a time. Discovery
domain sets allow you to enable and disable fabric-wide iSCSI VT access with a single command.
An enabled DDSet is enforced fabric-wide. In a deployment with an active DDSet, only iSCSI initiators in
an enforced DD can access iSCSI VT in the same DD.
If you do not configure either discovery domains or iSNS for access control, any iSCSI initiator on the IP
network can access all iSCSI VTs (and therefore all FC targets) in the fabric.
Displaying iSCSI initiator IQNs
All iSCSI components in a DD must be identified using IQNs. Fabric OS temporarily stores the IQNs and IP
addresses of iSCSI initiators that have logged in the gateway.
NOTE: If an iSCSI initiator has more than one IP address, only one of the IP addresses is displayed.
1. Connect and log in to the switch.
2. Enter the iscsiCfg
--show initiator command to display iSCSI initiator IQNs.
switch:admin> iscsicfg --show initiator
Number of records found: 1
Name IP Address
iqn.1991-05.com.microsoft:host001.brocade.com
30.0.30.11
Creating discovery domains
1. Connect and log in to the switch.
2. Enter the iscsiCfg
--create dd command with the -d option to define the discovery domain.
switch:admin> iscsicfg --create dd -d dd-host001 —m \
“iqn.1991-05.com.microsoft:host001.brocade.com,iqn.2006-10.com.example:d
isk001”
The operation completed successfully.
3. To verify, enter the iscsiCfg
--show dd command:
switch:admin> iscsicfg --show dd
Number of records found: 1