.Part 5 Storage Security Best Practices and Support Information HP SAN Design Reference Guide 785355-001

Zoning by application
Zoning by application configures multiple, sometimes incompatible, operating systems into the
same zones. This method allows the potential for disruptions among servers, such as a web server
disrupting a data warehouse server. A zone with a large number of members is susceptible to
more administrative errors, such as distribution of RSCNs to a larger group than necessary.
Zoning by port allocation
Avoid zoning by port allocation unless you have strictly enforced processes for port and device
allocation in the fabric.
There is no consequence for the change of WWN when a storage port, server HBA, or tape drive
is replaced. If the new device connects to the original port, it continues to have the same access
rights. You can preassociate switch ports with storage ports, and therefore control the
server-to-storage ratio. This technique prevents overloading of a storage port by allowing you to
limit the number of servers that are allowed access.
EBS zoning
For EBS zoning recommendations, see the HP Enterprise Backup Solution Design Guide, available
at http://h18004.www1.hp.com/products/storageworks/ebs/documentation.html.
Zone naming
When naming zones:
• Configure and test small zones that are a subset of the larger SAN.
• Use meaningful names for zones and zone member aliases.
• Use a consistent naming scheme for all components.
• Before making zoning changes, save the current configuration.
• If possible, do not make zoning changes when a switch in the fabric is temporarily unavailable.
Naming by identifier type
Define zone member names by using one of the following naming conventions:
• Domain ID and port number
Use the switch domain ID and port number to identify zone members. The zone definition
remains intact when an HBA or controller is replaced by another with a different WWN.
However, when a device is moved to a different port in the fabric, it is no longer a member
of the zone.
• WWN
Use the device WWN to uniquely identify zone members. The zone definition remains intact
when the device is moved to a different port or switch in the fabric. However, if an HBA is
replaced by another with a different WWN, you must update the zone definition.
• WWN with domain ID and port number
Use the switch domain ID, port number, and WWN to identify zone members.
Case sensitivity of fabric identifiers
To define an alias naming scheme, consider the case sensitivity of fabric identifiers:
• Case sensitive—Switch alias names
• Not case sensitive—Device connection names
Case sensitivity example
Zoning 389