OPTIMIZING FIBRE CHANNEL ZONESET CONFIGURATION AND ACTIVATION
    1.
    发明申请
    OPTIMIZING FIBRE CHANNEL ZONESET CONFIGURATION AND ACTIVATION 有权
    优化光纤通道ZONESET配置和激活

    公开(公告)号:US20110022691A1

    公开(公告)日:2011-01-27

    申请号:US12509415

    申请日:2009-07-24

    IPC分类号: G06F15/177

    CPC分类号: H04L49/10

    摘要: In an example embodiment, a new qualifier is added to members in a Fibre Channel zone to specify whether each member is a target or initiator and in another embodiment a time-range attribute is added to a zone in the zoneset. When the zoneset is applied the number of ACL entries that must be programmed is reduced from k×(k−1) entries to 2(k−1) entries for a zone with k members where k−1 members are of one type (e.g. initiators) and one of the members is of a different type (e.g., a tape device). The time-range attribute is enforced by zone server software and enhances security by, for example, limiting access to sensitive data to specified times. In another embodiment, an incremental zoneset activation protocol is implemented where a hash of a zoneset is created by a switch updating the zoneset and the hash and ID of the switch updating the zoneset are sent to all other switches in the fabric when the zoneset is propagated. The hash and switch ID are stored in persistent storage at all switches in the fabric. When a target zoneset is updated by a source switch only the incremental change is propagated to other switches in the fabric along with the hash and switch ID of the target zoneset. Each switch checks a received hash and switch ID against its stored hash and switch ID to assure that the stored local zoneset is the same as the target zoneset before applying the incremental change.

    摘要翻译: 在示例实施例中,将新限定词添加到光纤通道区域中的成员以指定每个成员是目标还是发起者,并且在另一实施例中,将时间范围属性添加到区域集中的区域。 当应用区域组时,必须编程的ACL条目的数目从k×(k-1)个条目减少到具有k个成员的一个类型的k个成员的区域的2(k-1)个条目(例如 启动器),并且其中一个成员是不同类型(例如,磁带设备)。 时间范围属性由区域服务器软件实施,并通过例如将访问敏感数据限制到指定时间来增强安全性。 在另一个实施例中,实现增量区域集激活协议,其中由更新区域集合的交换机创建区域集合的散列,并且当区域组传播时,更新区域集合的交换机的ID被发送到结构中的所有其他交换机 。 散列和交换机ID存储在结构中所有交换机的持久存储器中。 当目标区域集由源交换机更新时,增量更改将传播到结构中的其他交换机以及目标区段集的散列和交换机ID。 每个交换机根据其存储的散列和交换机ID检查接收的散列和交换机ID,以确保在应用增量更改之前,存储的本地区域集与目标区段集相同。

    Optimizing fibre channel zoneset configuration and activation
    2.
    发明授权
    Optimizing fibre channel zoneset configuration and activation 有权
    优化光纤通道区域配置和激活

    公开(公告)号:US08700751B2

    公开(公告)日:2014-04-15

    申请号:US12509415

    申请日:2009-07-24

    IPC分类号: G06F15/16

    CPC分类号: H04L49/10

    摘要: In an example embodiment, a new qualifier is added to members in a Fiber Channel zone to specify whether each member is a target or initiator and in another embodiment a time-range attribute is added to a zone in the zoneset. When the zoneset is applied the number of ACL entries that must be programmed is reduced from k×(k−1) entries to 2(k−1) entries for a zone with k members where k−1 members are of one type (e.g. initiators) and one of the members is of a different type (e.g., a tape device). The time-range attribute is enforced by zone server software and enhances security by, for example, limiting access to sensitive data to specified times. In another embodiment, an incremental zoneset activation protocol is implemented where a hash of a zoneset is created by a switch updating the zoneset and the hash and ID of the switch updating the zoneset are sent to all other switches in the fabric when the zoneset is propagated. The hash and switch ID are stored in persistent storage at all switches in the fabric. When a target zoneset is updated by a source switch only the incremental change is propagated to other switches in the fabric along with the hash and switch ID of the target zoneset. Each switch checks a received hash and switch ID against its stored hash and switch ID to assure that the stored local zoneset is the same as the target zoneset before applying the incremental change.

    摘要翻译: 在示例实施例中,将新限定词添加到光纤通道区域中的成员以指定每个成员是目标还是发起者,并且在另一实施例中,将时间范围属性添加到区域集中的区域。 当应用区域组时,必须编程的ACL条目的数目从k×(k-1)个条目减少到具有k个成员的一个类型的k个成员的区域的2(k-1)个条目(例如 启动器),并且其中一个成员是不同类型(例如,磁带设备)。 时间范围属性由区域服务器软件实施,并通过例如将访问敏感数据限制到指定时间来增强安全性。 在另一个实施例中,实现增量区域集激活协议,其中由更新区域集合的交换机创建区域集合的散列,并且当区域组传播时,更新区域集合的交换机的ID被发送到结构中的所有其他交换机 。 散列和交换机ID存储在结构中所有交换机的持久存储器中。 当目标区域集由源交换机更新时,增量更改将传播到结构中的其他交换机以及目标区段集的散列和交换机ID。 每个交换机根据其存储的散列和交换机ID检查接收的散列和交换机ID,以确保在应用增量更改之前,存储的本地区域集与目标区段集相同。

    Transparent device switchover in a storage area network
    3.
    发明申请
    Transparent device switchover in a storage area network 审中-公开
    透明设备在存储区域网络中切换

    公开(公告)号:US20080114961A1

    公开(公告)日:2008-05-15

    申请号:US11600486

    申请日:2006-11-15

    IPC分类号: G06F12/00

    摘要: Initiators and targets in a storage area network are presented as virtualized devices by a virtualization engine. An initiator accesses a virtualized target as though it was accessing a physical target. A target accesses a virtualized initiator as though it was accessing a physical initiator. A virtualization engine performs port World Wide Name (WWN) and FCID mapping to allow continued access to virtual initiators and virtual targets even if a particular physical initiator or physical target fails and the secondary is made active.

    摘要翻译: 存储区域网络中的启动器和目标由虚拟化引擎呈现为虚拟化设备。 启动器访问虚拟化目标,就像访问物理目标一样。 目标访问虚拟化启动器,就像访问物理启动器一样。 虚拟化引擎执行端口万维网(WWN)和FCID映射,以允许对虚拟启动器和虚拟目标的持续访问,即使特定的物理启动器或物理目标失败,并且辅助设备处于活动状态。

    Inter-VSAN routing with NAT
    5.
    发明授权
    Inter-VSAN routing with NAT 有权
    具有NAT的VSAN间路由

    公开(公告)号:US07644179B1

    公开(公告)日:2010-01-05

    申请号:US11292684

    申请日:2005-12-01

    摘要: Disclosed are apparatus and methods for facilitating communication between two devices from two different VSANs by propagating each device's presence from a first VSAN to the other device's different VSAN using a network address translation (NAT) mechanism. For instance, a first device, such as a host H1, from VSAN_A is allowed to access data from a second device, such as disk D1, of VSAN_B by propagating D1's presence into VSAN_A and H1's presence into VSAN_B. This awareness is accomplished by propagating an identifier for each device into the edge VSAN of the other device, as well as into any transit VSAN. So as to not duplicate identifiers in any one of the VSANs, a device's presence is propagated into a particular VSAN by assigning an unused domain for use by such device in the particular VSAN.

    摘要翻译: 公开了通过使用网络地址转换(NAT)机制将每个设备的存在从第一VSAN传播到另一设备的不同VSAN来促进来自两个不同VSAN的两个设备之间的通信的装置和方法。 例如,允许来自VSAN_A的第一设备,例如主机H1,通过将D1的存在传播到VSAN_A和H1存在于VSAN_B中来访问来自VSAN_B的第二设备(例如盘D1)的数据。 该感知通过将每个设备的标识符传播到另一设备的边缘VSAN以及任何传输VSAN来实现。 为了不在任何一个VSAN中重复标识符,设备的存在通过分配一个未使用的域来传播到特定的VSAN中,供特定VSAN中的这种设备使用。