switch#
switch# config terminal
switch(config)# no fcdomain fcid persistent vsan <1-4094>
switch(config)# fcinterop fcid-allocation flat
switch(config)# vsan database
switch(config-vsan-db)# vsan <1-4094> suspend
switch(config-vsan-db)# no vsan <1-4094> suspend
switch(config-vsan-db)# exit
switch(config)# fcdomain fcid persistent vsan <1-4094>
switch(config)# exit
switch# copy running-config startup-config
switch#
CISCO MDS 9000 STORAGE MEDIA ENCRYPTION (SME)
Overview
The SME solution is a comprehensive network-integrated encryption service with enterprise-class
key management that works transparently with existing and new SANs. The innovative network-
integrated solution has numerous advantages over competitive solutions available today:
SME installation and provisioning are both simple and non-disruptive. Unlike other
solutions, SME does not require rewiring or SAN reconfiguration.
Encryption engines are integrated on the MDS 9000 18/4-port Multiservice Module
(MSM-18/4) and the MDS 9222i Multiservice Fabric Switch, eliminating the need to
purchase and manage extra switch ports, cables, and applications.
Traffic from any virtual SAN (VSAN) can be encrypted using SME, enabling flexible,
automated load balancing through network traffic management across multiple SANs.
No additional software is required for provisioning, key, and user role management; SME
is integrated into Cisco Fabric Manager, therefore reducing operating expenses.
Features
SME is a standards-based encryption solution for heterogeneous tape libraries and virtual tape
libraries. SME is managed with Cisco Fabric Manager Web Client and a command-line interface
(CLI) for unified SAN management and security provisioning. SME includes the following
comprehensive built-in key management features:
Transparent Fabric Service
Encryption
SME Roles
Key Management
Clustering
FC Redirect
Server Based Discovery for Provisioning Tapes
Hardware Requirements
SME requires at least one MDS 9222i switch or MSM-18/4 module in each cluster. The SME
engines on the required modules provide the transparent encryption and compression services to
the hosts and storage devices. To take full advantage of the standard and advanced security levels,
a smart card reader is required.
13
MDS Multilayer Director & Multilayer Fabric Switches Release Notes
ページを印刷する