HP StorageWorks XP Remote Web Console Software - Manual (Page 18)

18 LUN Manager for the XP1024/XP128
LUN Security
To protect data from unauthorized access, apply security policies to LUNs. LUN Manager can apply LUN
security to ports to safeguard LUs. If a port has the External attribute, you cannot apply LUN security to the
port.
If LUN security is applied, it limits which host can access which LUs. A host can only access LUs
associated with its host group. Hosts cannot access LUs associated with other host groups.
In
Figure 5 , the hosts in the hpux-G01 group can access LUN0 and LUN1 associated with the same host
group, but cannot access LUN0 and LUN1 in the winG02 host group. The hosts in hpuxG01 can only
access the two LUs, identified by 01:05 and 02:01; the hosts cannot access the LUs 02:00 and 02:02.
Figure 5 Host group example 3 (LUN security)
If LUN security is disabled, the hosts will not be able to access most of the LUs. Hosts will have access to
only those LUs defined in host group 0.
By default, LUN security is disabled on a port, so host group 0 is the only accessible host group reserved
for the port. Initially it contains no LUs or WWNs.
When security is disabled, only LUs defined in host group 0 are accessible to hosts connected to the port,
regardless of any WWNs that may be defined for a host group. After security is enabled, WWNs are
used, permitting or restricting access based on WWN.
If you have more than one host group defined on a port, you can locate host group 0 by disabling LUN
security from the port. When done, the tree display will “gray” out all host groups except host group 0.
RAID Manager command devices
To use RAID Manager commands for Business Copy XP and Continuous Access XP operations, you must
designate at least one LDEV on the disk array as a command device. A command device receives RAID
Manager commands entered from hosts. When you enter a RAID Manager command from a host, the
command is transferred to the target device via the command device.
If you want to restrict access to LUs and by RAID Manager, you can apply command device security in
LUN Manager.
Restrictions
You cannot use the following LDEVs as command devices:
• Volumes that do not have read/write access
• Volumes reserved by Auto LUN XP