Inter-VSAN routing with NAT
    1.
    发明授权
    Inter-VSAN routing with NAT 有权
    具有NAT的VSAN间路由

    公开(公告)号:US07644179B1

    公开(公告)日:2010-01-05

    申请号:US11292684

    申请日:2005-12-01

    摘要: Disclosed are apparatus and methods for facilitating communication between two devices from two different VSANs by propagating each device's presence from a first VSAN to the other device's different VSAN using a network address translation (NAT) mechanism. For instance, a first device, such as a host H1, from VSAN_A is allowed to access data from a second device, such as disk D1, of VSAN_B by propagating D1's presence into VSAN_A and H1's presence into VSAN_B. This awareness is accomplished by propagating an identifier for each device into the edge VSAN of the other device, as well as into any transit VSAN. So as to not duplicate identifiers in any one of the VSANs, a device's presence is propagated into a particular VSAN by assigning an unused domain for use by such device in the particular VSAN.

    摘要翻译: 公开了通过使用网络地址转换(NAT)机制将每个设备的存在从第一VSAN传播到另一设备的不同VSAN来促进来自两个不同VSAN的两个设备之间的通信的装置和方法。 例如,允许来自VSAN_A的第一设备,例如主机H1,通过将D1的存在传播到VSAN_A和H1存在于VSAN_B中来访问来自VSAN_B的第二设备(例如盘D1)的数据。 该感知通过将每个设备的标识符传播到另一设备的边缘VSAN以及任何传输VSAN来实现。 为了不在任何一个VSAN中重复标识符,设备的存在通过分配一个未使用的域来传播到特定的VSAN中,供特定VSAN中的这种设备使用。

    Dynamic inter-VSAN topology discovery
    2.
    发明授权
    Dynamic inter-VSAN topology discovery 有权
    动态VSAN拓扑发现

    公开(公告)号:US07890654B1

    公开(公告)日:2011-02-15

    申请号:US11303239

    申请日:2005-12-15

    摘要: Disclosed are apparatus and methods for discovering topology in a storage area network having a plurality of VSANs in a network fabric is disclosed. The VSANs include a first VSAN having a plurality of network devices. The method includes the following operations: (a) defining a first one of the network devices of the first VSAN as a Topology Update (TU) Owner, wherein the other network devices of the first VSAN are not defined as TU Owners, (b) at the first network device, receiving data that indicates a topology change in the first VSAN, (c) at the first network device, generating or updating one or more TU database(s) for the plurality of VSANs of the network fabric based on the received topology change, and (d) the first network device causing the topology change to be propagated in the form of a Topology Update across the network fabric to network devices in the plurality of VSANs of such network fabric.

    摘要翻译: 公开了一种用于在具有网络结构中的多个VSAN的存储区域网络中发现拓扑的装置和方法。 VSAN包括具有多个网络设备的第一VSAN。 该方法包括以下操作:(a)将第一VSAN的网络设备中的第一个定义为拓扑更新(TU)所有者,其中第一VSAN的其他网络设备不被定义为TU所有者,(b) 在所述第一网络设备处,接收指示所述第一VSAN中的拓扑变化的数据,(c)在所述第一网络设备处,基于所述第一网络设备生成或更新所述网络结构的所述多个VSAN的一个或多个TU数据库, 接收的拓扑变化,以及(d)导致拓扑变化的第一网络设备以拓扑更新的形式通过网络结构传播到这种网络结构的多个VSAN中的网络设备。

    Hard zoning on NPIV proxy/NPV devices
    4.
    发明授权
    Hard zoning on NPIV proxy/NPV devices 有权
    NPIV代理/ NPV设备上的硬分区

    公开(公告)号:US08775580B2

    公开(公告)日:2014-07-08

    申请号:US12507624

    申请日:2009-07-22

    IPC分类号: G06F15/177

    摘要: Techniques are disclosed for zoning information to be shared with an NPIV proxy device or an NPV device such as a blade switch in a blade chassis. Doing so allows the NPV device to enforce zoning locally for the attached server blades and virtualized systems. The NPV device may learn zoning rules using Fiber Channel name server queries and registered state change notifications. Additionally, the NPV device may snoop name server queries to retrieve zoning information (or state change messages) without using the zoning change protocols and without consuming a Fiber Channel domain from the Fiber Channel fabric.

    摘要翻译: 公开了用于分区信息以与NPIV代理设备或NPV设备共享的技术,例如刀片机箱中的刀片交换机。 这样做可以使NPV设备在本地为所连接的服务器刀片和虚拟化系统强制分区。 NPV设备可以使用光纤通道名称服务器查询和注册状态更改通知来学习分区规则。 此外,NPV设备可以窥探名称服务器查询以检索分区信息(或状态改变消息),而不使用分区更改协议,而不消耗光纤通道结构中的光纤通道域。

    Optimizing fibre channel zoneset configuration and activation
    6.
    发明授权
    Optimizing fibre channel zoneset configuration and activation 有权
    优化光纤通道区域配置和激活

    公开(公告)号:US08700751B2

    公开(公告)日:2014-04-15

    申请号:US12509415

    申请日:2009-07-24

    IPC分类号: G06F15/16

    CPC分类号: H04L49/10

    摘要: In an example embodiment, a new qualifier is added to members in a Fiber Channel zone to specify whether each member is a target or initiator and in another embodiment a time-range attribute is added to a zone in the zoneset. When the zoneset is applied the number of ACL entries that must be programmed is reduced from k×(k−1) entries to 2(k−1) entries for a zone with k members where k−1 members are of one type (e.g. initiators) and one of the members is of a different type (e.g., a tape device). The time-range attribute is enforced by zone server software and enhances security by, for example, limiting access to sensitive data to specified times. In another embodiment, an incremental zoneset activation protocol is implemented where a hash of a zoneset is created by a switch updating the zoneset and the hash and ID of the switch updating the zoneset are sent to all other switches in the fabric when the zoneset is propagated. The hash and switch ID are stored in persistent storage at all switches in the fabric. When a target zoneset is updated by a source switch only the incremental change is propagated to other switches in the fabric along with the hash and switch ID of the target zoneset. Each switch checks a received hash and switch ID against its stored hash and switch ID to assure that the stored local zoneset is the same as the target zoneset before applying the incremental change.

    摘要翻译: 在示例实施例中,将新限定词添加到光纤通道区域中的成员以指定每个成员是目标还是发起者,并且在另一实施例中,将时间范围属性添加到区域集中的区域。 当应用区域组时,必须编程的ACL条目的数目从k×(k-1)个条目减少到具有k个成员的一个类型的k个成员的区域的2(k-1)个条目(例如 启动器),并且其中一个成员是不同类型(例如,磁带设备)。 时间范围属性由区域服务器软件实施,并通过例如将访问敏感数据限制到指定时间来增强安全性。 在另一个实施例中,实现增量区域集激活协议,其中由更新区域集合的交换机创建区域集合的散列,并且当区域组传播时,更新区域集合的交换机的ID被发送到结构中的所有其他交换机 。 散列和交换机ID存储在结构中所有交换机的持久存储器中。 当目标区域集由源交换机更新时,增量更改将传播到结构中的其他交换机以及目标区段集的散列和交换机ID。 每个交换机根据其存储的散列和交换机ID检查接收的散列和交换机ID,以确保在应用增量更改之前,存储的本地区域集与目标区段集相同。