.SAN design reference guide Vol. 1-5 785350-001

Resource protection.................................................................................................372
Data protection......................................................................................................373
Security validation..................................................................................................374
Storage security best practices...........................................................................................374
Assessing security risks.................................................................................................374
Managing organizational risks.................................................................................374
Data security implementations..................................................................................374
HP storage security solutions..............................................................................................375
C-series Storage Media Encryption................................................................................375
C-series SAN-OS security.............................................................................................376
C-series IP SAN security...............................................................................................377
B-series Encryption Switch and Encryption FC Blade security.............................................377
B-series Fabric OS security............................................................................................378
Resource protection.................................................................................................378
Data protection......................................................................................................380
Security validation..................................................................................................381
Key management........................................................................................................381
22 Best practices...................................................................................383
SAN planning.................................................................................................................383
Design specification.........................................................................................................383
SAN topology.................................................................................................................384
Multi-fabric SANs........................................................................................................384
SAN and fabric monitoring..........................................................................................384
Failover protection.......................................................................................................384
Data access patterns...................................................................................................385
ISL ratio.....................................................................................................................385
Incremental SAN expansion.........................................................................................385
SAN configuration ..........................................................................................................385
Fibre Channel switch configuration................................................................................386
Server setup...............................................................................................................386
Storage system configuration........................................................................................386
Storage-based LUN masking.............................................................................................386
Zoning...........................................................................................................................387
Zoning enforcement.....................................................................................................387
Zoning guidelines.......................................................................................................387
Zoning by operating system.....................................................................................388
Zoning by HBA......................................................................................................388
Zoning by HBA port................................................................................................388
Zoning by NPIV port...............................................................................................388
Zoning with 3PAR persistent ports.............................................................................388
Zoning by application.............................................................................................389
Zoning by port allocation........................................................................................389
EBS zoning................................................................................................................389
Zone naming..............................................................................................................389
Naming by identifier type........................................................................................389
Case sensitivity of fabric identifiers............................................................................389
Server naming.......................................................................................................390
Storage system naming...........................................................................................390
FCoE switch configuration quick-setup instructions.................................................................390
HP 5820 FCoE Converged Network Switch quick setup....................................................390
2408 FCoE Converged Network Switch and DC SAN Director Switch 10/24 FCoE Blade
quick setup.................................................................................................................393
HP C-series Nexus 5010/5020 Converged Network Switch and Cisco 5548UP/5596UP
Converged Network Switch quick setup..........................................................................395
Contents 13