Manuel d'utilisation / d'entretien du produit XP20000 du fabricant HP (Hewlett-Packard)
Aller à la page of 76
HP S to r age W or ks XP2 4000/XP20000 V olume S ec ur it y Us er's Gui de Abstract This doc ument de scr ibes and pr o vi des instru ctions f or conf igur ing and perfor ming V olume S ecur ity operati ons on the HP stor age s y stem .
Legal and notice information © Cop yr ight 2008- 2009 Hew lett-P ack ard De velopment C ompan y , L .P . Conf idential co mputer softw are . V alid li cense fr om HP r equired f or posse ssion , use or cop ying . Consis tent with F AR 12 .211 and 12 .
C on ten ts 1 Ov ervi e w of V olume Sec ur ity ............................................................... 7 Ove r v ie w ............................................................................................................................
Locating P or ts thr ough Whic h Hosts C an Acces s V olume s ........................................................ 45 Locating S ecur ity Gro ups that Co ntain a Spec if ied V olume ....................................................... 45 Locating Ho sts in a Sec urity Gr oup that C ontains a S pecif ied V olume .
F igur es Sec urity Ex ample 1 ................................................................................................. 10 1 Sec urity Ex ample 2 ................................................................................................
T able s Ac r ony ms and Abbr e vi ations .................................................................................... 73 1 6.
1 Ov er vie w of V olum e Sec ur it y Unless o therwise s pecif ied , the ter m stor age s ys tem in this guide r ef ers to the f ollo wing disk ar ra y s: • HP Sto rage W orks XP2 4000 Disk Arr a y.
r efer r ed to as S - V OLs, or sour ce v olumes . Secondary volumes ar e often r e ferr ed to a s T- V OLs, or tar get vo lumes. Ove r v iew o f V olume S ecur ity 8.
2 About V olum e Sec ur it y Operations Ov erv ie w of V olume Sec ur it y F uncti ons The V olume Sec ur ity feature pr ot ects data in y our stor age s ys tem fr om I/O oper ati ons perfor med at mainfr ame hos ts.
• The v olume lde v4 is accessible onl y fr om hos t4 because lde v4 and hos t4 are r egist ered in the same access gr ou p . • The v olume lde v5 does not belong t o any acce ss gr oups . F or this r eason , hosts in acce ss gr oups cannot acces s ldev5 .
Figur e 2 Security Example 2 If no ports ar e regis ter ed in a host gr oup , ho sts in the hos t grou p can access v olumes v ia ports to whi ch the ho sts ar e connected .
vo lumes ( vo l_A and vol_B ) in a pool gr ou p, all the mainf rame h osts connect ed to y our stor age s ys tem w ill be unable to access v ol_A and v ol_B . T o registe r volume s in a pool gro up , yo u must c reat e an LDEV gr oup , r egister the v olumes in the LDEV gr oup , and then r egiste r the LDEV gro up in the desir ed pool gr oup .
When appl y ing sec urity , mak e sure that y our s ecur ity settings ar e corr ect . If incorr ec t secur ity settings ar e made, the s y stem w ill be diff ic ult or impos sible to contr ol .
• 3 3 90-9 , 3 3 90-9A, 33 90 -9B, 3 3 9 0 -9C • 3 3 90-L, 3 3 9 0 -L A, 3 3 90 -LB, 3 39 0 -L C • 3 3 90-M, 3 3 90 -MA, 3 3 90-MB, 3 3 90-MC • PCB types: V olume Secur ity supports the follo .
3 Using th e V olum e Sec ur it y GUI This c hapter e xplains V olume Sec urity w indow and di alog bo xes . T he V olume Sec ur it y W indo w The V olume Sec ur ity windo w ( F igur e 4 ) appears w hen y ou start V olume Sec urity . This w indo w is the starting point f or all the V olume Sec urity oper ations .
Figur e 4 The V olume Security Windo w Description Item Displa ys the sec ur ity , hos t, and LDEV gr oup s assigned to eac h LDK C def ined on the stor age s yst em. F or det ails see “ Sec urity Gr oup T r ee ” on page 16. Security Group tree Displa ys the type , model , SEQNUMBER , L ogical P ar tition (LP AR) and ve ndor of each host .
• Double-clic k Sec urity Gr oup and a list of s ecur ity gro ups appear s. T hen select a ho st gr oup or LDEV gr oup in that sec ur ity group . • Double-clic k Host Gr oup and a lis t of host gr ou ps appears . Then s elect a spec if ic hos t gr oup .
Description Icon Indicate s that the secur ity settings in this sec urity gr oup ar e cur re ntly disabled . If y ou enable the sec urity settings , this secur ity gro up is clas sified a s an access gr oup . Also , v olumes in this sec urity gr oup can be used a s secondary volumes (i .
Figur e 6 Hosts T able Description Column A sequen tial number as soci ated w ith a host (or c hannel ext ender). No. T ype and model number o f a host (or a c hannel e xtender). T ype/Mod el Node ID of a hos t (or a channel e xtender ) . SEQNUMBER The logi cal partition number of a h ost .
Figur e 7 LDEV table Description Column The v olume ID (in hex adec imal fr om 00 to FF) NO TE: A vo lume ID ending in # (f or e xam ple , 00#) indica tes , the v olume is an e xter nal vo lume.
Figur e 8 The Add/Change Security Group Dialog Box Description Item Indicate s the selected LDK C number . LDK C Desc ripti ve inf ormati on about the sec ur ity groups in the LDK C. • Security indicates w hether the sec urity settings in the s ecur ity grou p are Enabled o r Disabled.
Description Item When c reating a ne w sec urity gr oup , yo u enter the name of the s ecur ity group in this Enter Security Group te xt box . When r enaming an e xis ting secur ity grou p, y ou se lect the sec urity gr oup in the Security Group List table and then ent er a new name .
Description Item When se ttings of the selected s ecur ity grou ps are c hanged, c lic k Change to make the c hanges appear in the Sec urity Gr oup L ist table . Change Applie s settings in the Add/Change S ecur ity Grou p dialog bo x to the V olume Sec ur ity windo w , and then clo ses the dialog bo x .
Figur e 9 The Add/Change Host Group Dialog Bo x Description Item Indicate s the selected LDK C number . LDK C A list of ho st gr oups in the LDK C. Host Gr oup L ist When c reating a ne w hos t grou p, y ou ente r the name of the host gr oup in this Enter Ho st Group te xt bo x.
Description Item This butto n applies settings in the A dd/Change Host Gr ou p dialog box t o the V olume Sec urity w indow , and then closes the A dd/Change Hos t Grou p dialog box . CA UTION: The OK b utton a pplies t he settings t o the V olume Sec urity w indo w , but does not appl y the s ettings to t he stor age sy stem .
Figur e 10 The Add/Change LDEV Group Dialog Bo x Description Item Indicate s the number of the selec ted LDK C. LDK C A list of LDEV gr oup s in the LDK C. LDEV Gr oup L ist When c reating a ne w LDEV gr oup , yo u enter the name of the LDEV gr oup in this Enter LDEV Group te xt box .
Description Item This butto n applies settings in the A dd/Change LDEV Gr oup dialog bo x to the V olume Sec urity w indow , and then closes the A dd/Change LDEV Gr oup dialog bo x . CA UTION: The OK b utton a pplies t he settings t o the V olume Sec urity w indo w , but does not appl y the s ettings to t he stor age sy stem .
Description Item Spec ify the name of the host gr ou p in whic h hosts w ill be r egister ed. Host Group List Host inf ormati on. • No. A s equential n umber assoc iated w ith a hos t. NO TE: Ea ch ta ble r o w usuall y sho ws inf orm ation a bout a ho st .
Description Item Applie s settings in the Add/Change Ho st dialog bo x to the V olume Secur ity windo w , and then clo ses the dialog bo x . CA UTION: Cli cking OK ap plies t he settings t o the V olume Secur ity w indo w , but does n ot appl y the setting s to the st or age s ys tem .
Description Item Lis ts volume s regist ered in the LDEV gr oup . One ta ble ro w indicate s one volume . • The LDE V column indicates LDEV n umbers. NO TE: If a vo lume ID is displa yed w ith a poun d sign (f or ex am ple , 00#) , the v olume is an e xter nal vo lume.
Figur e 13 The Select P ort Dialog Box Description Item Indicate s the number of the selec ted LDK C LDK C Spec ifi es a host gr ou p in whic h ports will be r egiste red . Host Group Sho ws the r egister ed ports in the host gr oup: • LDEV displa ys the LDEV n umbers.
Description Item Applie s settings in the Select P ort dialog bo x to the V olume Secur ity windo w , and then clo ses the Selec t P ort dialog bo x. CA UTION: Cli cking OK ap plies t he settings t o the V olume Secur ity w indo w , but does n ot appl y the se ttings to th e stor age s y stem .
Description Item Discar ds settings in the Spec ify Sec urity Gr oup dialog bo x and clo ses the dialog bo x. Cancel T he Hos t to Sec ur it y Gr o up Dialog Bo x The Ho st to Sec ur ity Group di alog.
Description Item Pr ov ides inf ormati on about a hos t, w her e the number gr oups , fr om left to r ight , indicate: • First : T he T ype/Model the type and model n umber of a host (o r a channel e xtender ) . • Second : The Node ID of a h ost (or a c hannel exte nder).
Figur e 16 The Host to LDEV Dialog Bo x Description Item Indicate s the number of the selec ted LDK C LDK C Pr ov ides inf ormati on about a hos t, w her e the number gr oups , fr om left to r ight , indicate: • First : T he T ype/Model the type and model n umber of a host (o r a channel e xtender ) .
Figur e 17 The Host Group to Security Gr oup Dialog Box Description Item Indicate s the number of the selec ted LDK C LDK C Spec ifi es a host gr ou p. Host Group Lis ts infor mation abou t the secur ity grou ps in whi ch the spec if ied host gr ou p is regist ered .
Figur e 18 The Host Group to P ort Dialog Box Description Item Indicate s the number of the selec ted LDK C. LDK C Pr ov ides inf ormati on about a hos t gro up, w her e the number gr oups , fr om left to r ight , indicate: • First : T he T ype/Model the type and model n umber of a host (o r a channel e xtender ) .
Figur e 19 The LDEV to Security Group Dialog Bo x Description Item Indicate s the number of the selec ted LDK C. LDK C Spec ifi es a CU image number . CU Desc ribes the a vailable LDEVs: • LDEV indicat es a number as signed to the LDEV . • Emulatio n indicates the em ulation types o f the volume .
• whe n you r igh t -cli ck an ite m in the tree v ie w and then se lect List -> LDEV t o Host fro m the pop-up menu . T he List ->LDEV t o Host pop-up command does not displa y if y ou double -cli ck a sec ur ity gr oup and then r ight-cli ck a ho st gr oup or LDEV gr oup f ro m immediatel y belo w the secur ity gr oup .
Description Item Lis ts hosts in the sec ur ity group in w hic h the spec ified v olume is r egister ed. • No . A sequen tial number as soci ated w ith a host .
Figur e 21 The LDEV Gr oup to Security Group Dialog Box Description Item Indicate s the number of the selec ted LDK C. LDK C Spec ifi es an LDEV gr oup . LDEV Gr oup Lis ts infor mation abou t the secur ity grou ps in whi ch the spec if ied LDEV gr oup is r e - gister ed .
Figur e 22 T he Error Detail Dialog Bo x Description Item Lis ts the number of the ho st av ailable on the selec ted LDK C w hich ar e perfo rming I/O oper ations.
4 P er for ming V olume Sec urity O per ations This c hapter e xplains the f ollow ing V olume Sec urity oper ations: • La unching V olume Sec urity (see L aunching V olume Sec ur it y , page 43) .
• Locating P or ts thr ough Whic h Hosts C an Acces s V olume s (see “ Locating P or ts thr ough Whic h Hosts C an Acces s V olume s ” on page 45) • Locating S ecur ity Gro ups that Co ntain a.
The Ho st to LDEV dialog bo x appear s ( F igur e 16 ) . The di alog box dis play s a list of v olumes . 3. R igh t -cli ck an ar ro w at the r ight end o f the CU drop-do w n list , and then see ho w man y CU image number s appear . • If only o ne CU image number appear s, the table in the di alog box dis play s all the vo lumes that y ou want .
2. F r om the pop-up men u , select L ist -> LDEV to Security Group . The LDEV t o Secur ity Gr oup dialog bo x appears ( F igure 19 ). The ta ble on the ri ght displa ys the sec urity gr oups that y ou w ant . If the desir ed vo lume is not displa yed in the lo w er -ri ght table: 1.
L ocating Sec ur ity Gro ups that C ontain a S pec if ied LDEV Gr oup T o specify an LDEV gr oup and then f ind sec urity gr oups in w hic h the spec if ied LDEV gr oup is r egister ed , fo llow the pr ocedur e belo w: 1.
The A dd/Change Hos t Grou p dialog bo x ( F igur e 9 ) appears . 5 . In the Enter Host Group box , enter the name o f the host gr oup that y ou w ant to c r eate, and the n cli ck the Add bu tton. NO TE: Host gr o up names can be u p to ei ght ch arac ter s and ar e case-sensiti v e.
If no ports ar e regis ter ed in the display ed hos t gro up , yo u can regist er the follo w ing hos ts: • hos ts that do not belong to an y hos t gro up • hos ts belonging to hos t gro ups in whi ch n o ports are r egister ed Ho we v er , you cann ot regis ter hos ts belonging to hos t gr oups in w hic h ports are r egister ed .
If hos ts regist er ed in the host gr oup ar e also r egiste red in ano ther host gr ou p, y ou canno t regis ter ports in the P ort list in the Register ed port box , and thus y ou cannot imple ment port-leve l sec urity . 6. Cli ck OK in the S elect P ort dialog bo x.
CA UTION: Her e , the se ttings in the w indo w hav e not bee n appli ed to the st or age s y stem . 7 . Clic k Apply in the V olume Sec urity w indow ( F igure 4 ). A message a ppears and asks if y ou w ant to appl y the settings to the st orage s y stem .
A mess age appears and asks if y ou w ant to appl y the settings to the st orage s y stem . 10. Cli ck Y es . The s ettings are a pplied to the st orage s y stem . Cr eating a Sec ur ity Gr oup f or Us e As an Acce ss Gr ou p T o make sec ur ity settings, y ou mus t cr eate sec ur ity group s.
R egister ing a Ho st Gr ou p and an LDEV Gr oup in a S ec urity Gr ou p No w that yo u hav e classif ied y our sec ur ity grou p as an access gr oup , y our ne xt (and the last) ta sk is to r egister y our ho st gr oup and LDEV gr oup into the s ecur ity gr oup .
The f ollo w ing procedur e e xplains ho w to cr eate an LDEV gr oup . For de tails on ho w to r egister v olumes in an LDEV gr oup , see “ R egister ing V olumes in an LDEV Gr oup ” on page 54.
CA UTION: When r egister ing vo lumes in an LDEV gr oup , y ou ar e str ongl y r ecommended t o cli ck the Appl y butto n in the V olume Sec urity w indo w , as des cr ibed in the la st step o f the f ollo wing p r ocedur e.
4. Select A dd/Change fro m the pop-up menu . The A dd/Change Sec ur ity Group di alog box ( F igure 8 ) a ppears. 5 . In the Enter Security G roup bo x, en ter the name of the sec ur ity group that y ou w ant to c r eate. NO TE: Secur ity gr oup n ames can be up to e igh t char acte rs and ar e ca se-sensitiv e .
5. U se the Select Sec urity Group dr op-dow n list to s elect a sec ur ity group in w hic h y ou want t o regis ter an LDEV gr oup . 6. Us e the LDEV Group dr op-dow n list to s elect an LDEV gr oup that y ou w ant to r egister in the sec ur ity gr oup , and then cli ck OK .
TIP: T o make v olumes in y our sec ur it y gr ou p usab le as secon dary volumes (t hat is, cop y de stinatio n vo lumes) fo r cop y oper atio ns, y ou mu st selec t the sec urity gr ou p in the Add/C hange Sec urity Gr ou p dialog bo x ( F i gur e 8 ) and then se lect Enable in the T - V OL/R- V OL bo x.
E diting Sec ur ity Gr oup s This s ection e xplains the f ollo wing oper ati ons, w hic h allow y ou to edit y our sec ur ity grou ps: • Unr egister ing a hos t grou p fr om a sec ur ity group (s e.
CA UTION: Her e , the c hanges in the w indo w ha ve no t been app lied to th e stor age s y stem . 6. Cli ck Appl y in the V olume Secur ity windo w ( F i gure 4 ). A mess age appears and asks if y ou w ant to appl y the changes to the s tor age sy st em.
Deleting Sec ur ity Gr oup s T o delete a sec urity gr oup , tak e the follo w ing step s: T o delete a sec urity gr oup: 1. Ensur e that you ar e in Modify mode . 2. In the V olume Sec urity w indo w ( F igur e 4 ) , double -cli ck an LDK C number . 3.
D M=CPU This co mmand display s the type , the model numbe r , the node ID and the logical partition number of the ho st . W r ite do wn the inf ormati on on a paper s o that you w ill not f or get it . F or details on the s y stem co mmand, see the doc umentati on f or sy ste m commands.
3. R igh t -cli ck a ho st gr oup . A pop-up menu a ppears. 4. Select Specify and then Host f ro m the pop-up menu . The A dd/Change Hos t dialog bo x ( F igur e 11 ) appears and displa y s a list of ho sts. T he icons and indicate hos ts regis ter ed in the spec ifi ed host gr oup .
CA UTION: Her e , the se ttings in the w indo w hav e not bee n appli ed to the st or age s y stem . 7 . Clic k Apply in the V olume Sec urity w indow ( F igure 4 ). A mess age appears and asks if y ou w ant to appl y the settings to the st orage s y stem .
Deleting Hos t Gr oup s T o delete a host gr oup , tak e the f ollo wing s teps . T o delete a host gr oup: 1. Ensur e that you ar e in Modify mode . 2. In the V olume Sec urity w indo w ( F igur e 4 ) , double -cli ck an LDK C number . 3. Do e ither of the f ollo wing: • R ight-cli ck a hos t gro up in the tr ee vi ew .
The tw o bo xes be low the dr op-do wn lis t display s v olumes in the spec if ied CU image . • The R egistered in LDEV gr oup bo x displa ys v olumes r egister ed in the LDEV gr oup . • The Not r egistered in LDEV gr oup box displa ys v olumes that ar e not r egist ered in the LDE V gr oup .
CA UTION: Her e , the c hange in the w indo w has n ot been app lied to t he stor age s y ste m. 9 . Cli ck Appl y in the V olume S ecur ity windo w ( F i gure 4 ). A message a ppears and asks if y ou w ant to appl y the change to the s torage s y stem .
P erforming V olume Secur ity Oper ations 6 8.
5 T r oubleshooting T r ou bleshooting V olume Sec ur it y The Er r or Detail dialog bo x ( F igur e 2 2 ) ma y appear whe n you atte mpt to appl y secur ity settings . The pr obable caus es of the er ror ar e: • Some ho sts in one sec ur ity group ar e acces sing volume s in another sec ur it y gr oup .
• The co ntent of an y er ro r message(s) displa y ed on the Remo te W eb C onsole com puter . • The S tor age Nav igato r confi gurati on infor mation (u se the FD Dump T ool) . • The s ervice inf ormati on mess ages (SIMs), including r ef ere nce codes and se ver ity lev els, dis play ed by the R emote W eb Cons ole compute r .
6 Suppor t and Ot her Resour ces R elated Doc umentati on • HP Sto rage W orks XP2 4000/XP20000 Disk Arr a y Owne r's Guide • Hitac hi Shado wImage ™ for Mainf rame Us er's Guide • Hitac hi T r ueCop y ™ for Mainf rame U ser's Guide Y ou can f ind these doc uments on the HP Manuals w ebsit e: http://www .
• Err or mes sages • Oper ating sy st em type and r ev ision le v el • Detailed ques tions Sub sc r ipti on Se r v i ce HP r ecommends that y ou r egister y our pr oduct at the Sub scr iber ’ s C hoi ce for Bu siness w ebsite: http://www .
A Ac r on yms and Abbr e v iations T able 1 Acron yms and Abbre viations logical de vi ce LDEV logical disk contr oller LDK C main vo lume M- V OL Multiple Virtual St orage (IB M) MVS perso nal comput.
Ac ron y ms and Abbr ev iatio ns 7 4.
Inde x A access gr oup , 9 Add/C hange Host dialog bo x , 2 7 Add/C hange Host Gr oup dialog bo x , 2 4 Add/C hange LDEV Grou p dialog bo x, 2 6 Add/C hange Secur ity Gr oup dialog bo x , 21 C con ven.
P pool gr oup , 11 port-leve l secur ity o verv ie w , 10 R R -V OL , 12 r elated doc umentatio n, 71 S secondary vo lume, 12 Sec urity disabling , 5 8 polic y , 7 sec urity enabling the spec if ied h.
Un point important après l'achat de l'appareil (ou même avant l'achat) est de lire le manuel d'utilisation. Nous devons le faire pour quelques raisons simples:
Si vous n'avez pas encore acheté HP (Hewlett-Packard) XP20000 c'est un bon moment pour vous familiariser avec les données de base sur le produit. Consulter d'abord les pages initiales du manuel d'utilisation, que vous trouverez ci-dessus. Vous devriez y trouver les données techniques les plus importants du HP (Hewlett-Packard) XP20000 - de cette manière, vous pouvez vérifier si l'équipement répond à vos besoins. Explorant les pages suivantes du manuel d'utilisation HP (Hewlett-Packard) XP20000, vous apprendrez toutes les caractéristiques du produit et des informations sur son fonctionnement. Les informations sur le HP (Hewlett-Packard) XP20000 va certainement vous aider à prendre une décision concernant l'achat.
Dans une situation où vous avez déjà le HP (Hewlett-Packard) XP20000, mais vous avez pas encore lu le manuel d'utilisation, vous devez le faire pour les raisons décrites ci-dessus,. Vous saurez alors si vous avez correctement utilisé les fonctions disponibles, et si vous avez commis des erreurs qui peuvent réduire la durée de vie du HP (Hewlett-Packard) XP20000.
Cependant, l'un des rôles les plus importants pour l'utilisateur joués par les manuels d'utilisateur est d'aider à résoudre les problèmes concernant le HP (Hewlett-Packard) XP20000. Presque toujours, vous y trouverez Troubleshooting, soit les pannes et les défaillances les plus fréquentes de l'apparei HP (Hewlett-Packard) XP20000 ainsi que les instructions sur la façon de les résoudre. Même si vous ne parvenez pas à résoudre le problème, le manuel d‘utilisation va vous montrer le chemin d'une nouvelle procédure – le contact avec le centre de service à la clientèle ou le service le plus proche.
