FW 07.00.00/HAFM SW 08.06.00 McDATA Products in a SAN Environment Planning Manual (620-000124-500, April 2005)

Physical Planning Considerations

5-37

Physical Planning Considerations

SANtegrity

Authentication

SANtegrity Authentication is a feature that significantly enhances

and extends SAN data security by providing password safety; CHAP

or DHCHAP verification for fabric elements, management servers,

and devices; a PCP user database; CT authentication for the OSMS

interface; RADIUS server support; inband and out-of-band access

controls lists; encrypted SSH protocol; and security logging. For

additional information about the feature, refer to SANtegrity

Authentication.

SANtegrity Binding

SANtegrity Binding is a feature that significantly enhances SAN data

security. The feature includes:

• Fabric binding - This portion of the feature allows only specified

directors or fabric switches to attach to specified fabrics in a SAN.

• Switch binding - This portion of the feature allows only specified

devices and fabric elements to connect to specified director or

fabric switch ports.

• Enterprise Fabric Mode - Although Enterprise Fabric Mode is not a

keyed feature, it is required for SANtegrity Binding operation.

Enterprise Fabric Mode also enables the following parameters:

—Rerouting delay.

—Domain RSCNs.

— Insistent Domain_ID.

For additional information about the feature, refer to SANtegrity

Binding.

OpenTrunking

OpenTrunking is a feature that optimizes ISL bandwidth use in a

fabric environment. The feature monitors Fibre Channel data rates

(congestion and BB_Credit starvation) through multiple ISLs,

dynamically applies a Dijkstra FSPF networking algorithm to

calculate the optimum path between fabric elements, and load

balances Fibre Channel traffic (from congested links to uncongested

links) accordingly. OpenTrunking is shown in Figure 5-8.