HP StorageWorks Advanced Web Tools 7.4.X Administrator Guide (AA-RVHFC-TE, September 2005)

56 Managing zoning
Zoning and MP Routers
Any device or zone member connected to the fabric can be included in one or more zones. Zone members
within a zone can communicate only with other zone members in the same zone.
After zoning is enabled, if a device is not explicitly defined in a zone, that device is isolated and is
inaccessible to other devices in the fabric.
Zone members are grouped into zones, and zones are grouped into a zone configuration. Zones can
overlap; that is, a zone member can belong to more than one zone, and a fabric can have multiple zones.
You can create multiple zone configurations, but only one configuration can be enabled in the fabric at a
time.
Figure 19 shows a sample zone configuration with the following characteristics:
Loop1 is not a member of any zone and is therefore inaccessible to other devices in the fabric.
Loop2 is a member of both the Red Zone and the Green Zone. Both Server1 and Server3 can access
Loop2, but Server1 and Server3 cannot access each other.
Server2 cannot access Loop2 or either of Server1 or Server3. Server2 can access the RAID device.
The RAID device is a member of both the Blue Zone and the Green Zone. The RAID device can be
accessed by Server2 and Server3, but cannot be accessed by Server1.
Figure 19 Sample zone configuration
A zone member can be specified using a domain, port pair, a node WWN, or a port WWN.
NOTE: Use port WWNs for Fibre Channel-attached nodes with Fibre Channel router LSAN zones.
Zoning enforcement
Two basic zoning enforcement mechanisms are used: one is called software zoning or soft zoning and the
other is called hardware zoning or hard zoning.
HP Zoning software limits access to data by segmenting a fabric into virtual private SANs. Soft zoning
prevents hosts from discovering unauthorized target devices, while hard zoning prevents a host from ever
accessing a device it is not authorized to access.
The MP Router supports both soft and hard zoning, although only one is functional at a time. The Zone
Server distributes the soft zoning information to the Name Server and the allowed S_ID/D_ID pairs to the
appropriate ports for hard zoning. If the number of S_ID/D_ID pairs in a configuration is more than 1000,
hard zoning switches over to soft zoning. XPath OS hard zoning can coexist with other implementations of
hard zoning.
-%2'
/RRS
*UHHQ=RQH
5HG=RQH
%OXH=RQH
6HUYHU
5$,'
6HUYHU
6HUYHU
+36WRUDJH:RUNV
6ZLWFK
)DEULF
/RRS