3
Using Zoning
Zone Enforcement
Hardware Enforced Zones
Software Enforced Zones
When zoning is disabled, devices can communicate without regard to zone restrictions. When
zoning is enabled, zoning is enforced throughout the fabric and devices can communicate only
within their zones.
FC Entry Switch 8B, FC Switch 8B, and FC 16B products can maintain any number of zone
configurations; however, only up to one zone configuration can be enabled, or enforced, at a time.
Because multiple configurations reside in the switch, you can switch from one configuration to
another as events dictate. For example, you can write a script to set up a pre-specified zone
configuration to be enabled at certain times of the day; or, in the event of a disaster, you can quickly
enable a defined configuration to implement your disaster policy.
Zone configurations can be:
Defined
Effective
3-2
In a hardware enforced zone, all zone members are specified as either switch
ports or WWN, but not both. Any number of ports or WWNs in the fabric can be
configured to the zone. When a zone member is specified by port number or
WWN, the individual device port or WWN is included in the zone. If WWNs are
used exclusively in a zone, new devices can be attached without regard to
physical location. In hard zones, switch hardware ensures that there is no data
transferred between unauthorized zone members. However, devices can transfer
data between ports within the same zone. Consequently, hard zoning provides the
highest level of security.
In a software enforced zone, at least one zone member is specified by WWN and
one member is specified as a port. In this way, you have a mixed zone that is
software enforced. When a device logs in, it queries the name server for devices
within the fabric. If zoning is in effect, only the devices in the same zone(s) are
returned. Other devices are hidden from the name server query reply.
Software enforced zones are created when a combination of WWNs and ports are
used. When using software enforced zones, the switch does not control data
transfer and there is no guarantee of data being transferred from unauthorized
zone members. Use software zoning where flexibility and security are ensured by
the cooperating hosts.
This is the complete set of all zone objects that have been defined in the
fabric. When zone objects are defined, the information initially resides in
RAM; it must be saved to ensure that it is saved to flash memory and is not
lost during:
•
new zone configuration
•
power down
•
reboot
•
fastboot
•
power cycles
This is the zone configuration that is enabled (active). It resides in RAM; it
must be saved to ensure that it is not lost during power down.
Any changes replicate to all switches in the fabric when the configuration
is enabled or saved.
Zoning User's Guide
페이지 인쇄