HP StorageWorks LUN Security XP Extension user guide Part number: T1760-96002 Second edition: December 2005
Legal and notice information © Copyright 2005 Hewlett-Packard Development Company, L.P. Confidential computer software. Valid license from HP required for possession, use or copying. Consistent with FAR 12.211 and 12.212, Commercial Computer Software, Computer Software Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government under vendor’s standard commercial license. The information contained herein is subject to change without notice.
Contents About this guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 Intended audience . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Prerequisites. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Firmware versions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Related documentation . . . . . . . . . . . . . .
About this guide This guide provides information about the following: • ”Assigning access attributes to logical volumes” on page 9 • ”Restricting read and write operations” on page 9 • ”Using LUN Security XP Extension with other products” on page 10 • ”Starting LUN Security XP Extension” on page 13 • ”Using LUN Security XP Extension” on page 18 • ”Troubleshooting LUN Security XP Extension” on page 21 Intended audience This guide is intended for customers and HP-authorized service providers with knowledge o
• HP StorageWorks LUN Configuration and Security Manager XP User Guide for the XP10000/XP12000 You can find these documents at http://www.hp.com/support/rwc/manuals. Document conventions and symbols Table 2 Document conventions Blue text: Table 1 Cross-reference links and e-mail addresses Blue, underlined text: (http://www.hp.
Subscription service HP strongly recommends that customers register online using the Subscriber's choice web site: http://www.hp.com/go/e-updates. Subscribing to this service provides you with e-mail updates on the latest product enhancements, newest driver versions, and firmware documentation updates as well as instant access to numerous other product resources. After subscribing, locate your products by selecting Business support and then Storage under Product Category.
1 LUN Security XP Extension for the XP128/XP1024/XP10000/XP12000 HP StorageWorks LUN Security XP Extension protects data on an XP disk array from I/O operations performed on open systems hosts. You can use LUN Security XP Extension to assign an access attribute to each logical volume. If you use LUN Security XP Extension, you can use a logical volume as a read-only volume and protect a logical volume against read and write operations.
• Protect: Open systems hosts cannot access the logical volume. Open systems hosts cannot perform read or write operations on the logical volume. Continuous Access XP and BC XP cannot copy data to or from logical volumes that have the Protect attribute. Figure 1 shows access attributes for logical volumes 00, 01, and 02. The access attribute of logical volume 03 is Can't Guard, which means you cannot assign any access attribute to the logical volume.
• Logical volumes that do not exist • Logical volumes configured as command devices • NAS system volumes, which are also called system LUs • NAS user volumes, which are also called user LUs • Logical volumes expanded by the Just-in-Time function • External LUs • Flex Copy XP volumes • Logical volumes to which paths are defined from iSCSI ports • Logical volumes specified as Continuous Access XP • Logical volumes specified as Continuous Access XP Journal or journal volumes • Logical volumes specified as BC X
• Cache LUN XP: If you use Cache LUN XP to set a VMA to the volumes, part of the user data might not be cached because VMA data is cached. When you use Cache LUN XP to set a VMA to the volume, check the Cache LUN XP settings and change them if necessary. For more information about changing Cache LUN XP settings, see the HP StorageWorks Cache LUN XP User Guide for the specific disk array.
license capacity for both logical volumes A and B. Therefore, LUN Security XP Extension needs 4 GB of license capacity. Figure 2 Calculating license capacity NOTE: If you do not change the logical volumes’ default access attribute, which is Read/Write, you do not need extra license capacity. For example, in Figure 2, if you set VMA on logical volumes A and B when they do not form a pair, 2 GB of license capacity is enough.
2. Click the LUN Security Extension button . The LUN Security XP Extension pane appears. Figure 4 LUN Security XP Extension pane To implement changes for LUN Security XP Extension, you must be in Modify mode. • If you are using Command View XP or XP Remote Web Console, only one user at a time can be in Modify mode.
NOTE: If two or more volumes are combined into a LUSE volume, LUN Security XP Extension counts the number of combined volumes as one. For example, if you combine five logical volumes into one LUSE volume, the number of volumes is one, not five. • LDEV#: Logical volume number and status icon (Table 3). If the # symbol appears to the right of a logical volume number, the logical volume is a Flex Copy XP volume. You cannot assign access attributes to Flex Copy XP volumes.
• - (hyphen): No mode is assigned by RAID Manager to the logical volume. You cannot use LUN Security XP Extension to change modes. Use RAID Manager to change modes. • LBA: If the logical volume is mapped to an external volume, this column displays the external volume’s capacity (for example, the connected external volume’s capacity). If the logical volume is not mapped to an external volume, this column displays a hyphen (-).
• Cancel button: Discards settings in the dialog box. Volume Detail dialog box This dialog box displays a list of logical volumes combined into a LUSE volume (see ”Viewing a list of logical volumes combined into a LUSE volume” on page 21). For more information about LUSE volumes, see the HP StorageWorks LUN Configuration and Security Manger XP User Guide for the specific disk array.
Using LUN Security XP Extension You must operate Command View XP or XP Remote Web Console in Modify mode to perform LUN Security XP Extension operations. Users in view mode can only view LUN Security XP Extension information. Changing logical volumes’ access attributes Before changing a logical volume’s access attribute, review ”Assigning access attributes to logical volumes” on page 9 and ”Using LUN Security XP Extension with other products” on page 10. 1.
NOTE: • Ena indicates Enable. Dis indicates Disable. • Ena -> Dis indicates the S-Vol column will change from Enable to Disable. • Dis -> Ena indicates the S-Vol column will change from Disable to Enable. Prohibiting changes to Read/Write volumes after the retention term ends You can use LUN Security XP Extension to ensure that Read Only and Protect volumes cannot be changed to Read/Write volumes after the retention term expires. 1.
NOTE: Disable appears in the S-Vol column in the LUN Security XP Extension pane. In some disk array copy software manuals, S-VOL Disable might appear. NOTE: To allow a logical volume to be specified as a secondary volume, right-click the logical volume, select S-Vol, and select Enable. Confirm that the logical volume is listed in blue italics, and click Apply.
4. Select VMA, and select Set. The logical volume appears in blue and italics. NOTE: If you cannot select VMA, you cannot set VMA to the logical volume. Ensure that the logical volume does not have an LU path. For more information about the conditions of the logical volumes that you cannot set VMA, see ”Using LUN Security XP Extension with other products” on page 10. 5. To set VMA to other logical volumes, repeat step 2 through step 4. If not, go to step 6.
Table 4 Troubleshooting LUN Security XP Extension (continued) Problem Solution The OFF -> ON or ON -> OFF button to the right of Expiration Lock is unavailable. You have made changes in the LUN Security XP Extension pane, but the changes have not been applied to the disk array. Nothing happens when you click the button. The changes you made are displayed in blue italics. If you cannot find the changes, scroll up and down in the volume list.
Index A I access attributes applications, closing other 10 changing 18 permissions 13 status icons 14 types of 9 Administrators 11 applications, closing other 10, 12 audience, documentation 5 Audit Lock.
retention term 15, 16, 18 settings 9 status icons 14 retention term changing 15 Expiration Lock settings 10 modifying 18 setting 16 S security access attributes 9, 10 LU paths, protecting 20 read-only data, creating 9 starting LUN Security XP Extension 13 status icons 14, 15 StorageAdmins 11 Subscriber’s choice, HP 7 S-VOLs Read/Write protection 19 settings, restrictions on 12 T technical support, HP 6 Term Setting dialog box 16 troubleshooting 21 V VMA capacity 15 license capacity 12, 13 restrictions on
Figures 1 2 3 4 5 6 7 Example of access attributes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Calculating license capacity . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Example of when you cannot create a pair . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . LUN Security XP Extension pane . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Term Setting dialog box . . . . . . . . .
Tables 1 2 3 4 Recommended and minimum firmware versions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 Document conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6 LUN Security XP Extension icons . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14 Troubleshooting LUN Security XP Extension . . . . . . . . . . . . . . . . . . . . . . . . . . .
