fw 05.01.00 and sw 07.01.00 edge switch 2/24 product manager user guide

Optional Features

169Edge Switch 2/24 Product Manager User Guide

SANtegrity Binding Features

SANtegrity Binding includes a set of features that enhance security in Storage

Area Networks that contain a large and mixed group of fabrics and attached

devices. Through these features you can allow or prohibit switch attachment to

fabrics and device attachment to switches. These features are enabled by

purchasing a feature key, then enabling the key through the Configure Feature

Key dialog box. For general instructions in enabling a feature key, refer to

“Configure Feature Key” on page 119.

SANtegrity Binding features include:

■ Fabric Binding

■ Switch Binding

Enterprise Fabric Mode - Although this is not a keyed feature the SANtegrity

Fabric Binding and Switch Binding must be installed before you can use

Enterprise Fabric Mode function through the HAFM Fabrics menu.

Fabric Binding

This feature is managed through the Fabric Binding option, available through the

Fabrics menu in the HAFM when the Fabrics tab is selected. Using Fabric

Binding, you can allow specific switches to attach to specific fabrics in the SAN.

This provides security from accidental fabric merges and potential fabric

disruption when fabrics become segmented because they cannot merge.

Enable/Disable and Online State Functions

In order for Fabric Binding to function, specific operating parameters and optional

features must be enabled. Also, there are specific requirements for disabling these

parameters and features when the Director or Edge Switch is offline or online. Be

aware of the following:

■ Because switches are bound to a fabric by worldwide name (WWN) and

domain ID, the Insistent Domain ID option in the Configure Switch

Parameters dialog box is automatically enabled if Fabric Binding is enabled.

You cannot disable Insistent Domain ID while Fabric Binding is active and

the switch is online.

■ If Fabric Binding is enabled and the switch is online, you cannot disable

Insistent Domain ID.