Hp STORAGEWORKS XP24000 User Manual

HP StorageWorksXP24000/XP20000 Volume Security User'sGuideAbstractThis document describes and provides instructions for configuring and performin

• The volume ldev4 is accessible only from host4 because ldev4 and host4 are registered in thesame access group.• The volume ldev5 does not belong to

Figure 2 Security Example 2If no ports are registered in a host group, hosts in the host group can access volumes via ports towhich the hosts are conn

volumes (vol_A and vol_B) in a pool group, all the mainframe hosts connected to your storage systemwill be unable to access vol_A and vol_B. To regist

When applying security, make sure that your security settings are correct. If incorrect security settingsare made, the system will be difficult or imp

• 3390-9, 3390-9A, 3390-9B, 3390-9C• 3390-L, 3390-LA, 3390-LB, 3390-LC• 3390-M, 3390-MA, 3390-MB, 3390-MC• PCB types: Volume Security supports the fol

3 Using the Volume Security GUIThis chapter explains Volume Security window and dialog boxes.The Volume Security WindowThe Volume Security window (Fig

Figure 4 The Volume Security WindowDescriptionItemDisplays the security, host, and LDEV groups assigned to each LDKC defined on thestorage system. For

• Double-click Security Group and a list of security groups appears. Then select a host group orLDEV group in that security group.• Double-click Host

DescriptionIconIndicates that the security settings in this security group are currently disabled. If you enablethe security settings, this security g

Figure 6 Hosts TableDescriptionColumnA sequential number associated with a host (or channel extender).No.Type and model number of a host (or a channel

Legal and notice information© Copyright 2008-2009 Hewlett-Packard Development Company, L.P.Confidential computer software. Valid license from HP requi

Figure 7 LDEV tableDescriptionColumnThe volume ID (in hexadecimal from 00 to FF)NOTE:A volume ID ending in # (for example, 00#) indicates , the volume

Figure 8 The Add/Change Security Group Dialog BoxDescriptionItemIndicates the selected LDKC number.LDKCDescriptive information about the security grou

DescriptionItemWhen creating a new security group, you enter the name of the security group in this EnterSecurity Group text box. When renaming an exi

DescriptionItemWhen settings of the selected security groups are changed, click Change to make the changesappear in the Security Group List table.Chan

Figure 9 The Add/Change Host Group Dialog BoxDescriptionItemIndicates the selected LDKC number.LDKCA list of host groups in the LDKC.Host Group ListWh

DescriptionItemThis button applies settings in the Add/Change Host Group dialog box to the VolumeSecurity window, and then closes the Add/Change Host

Figure 10 The Add/Change LDEV Group Dialog BoxDescriptionItemIndicates the number of the selected LDKC.LDKCA list of LDEV groups in the LDKC.LDEV Grou

DescriptionItemThis button applies settings in the Add/Change LDEV Group dialog box to the VolumeSecurity window, and then closes the Add/Change LDEV

DescriptionItemSpecify the name of the host group in which hosts will be registered.Host GroupListHost information.• No. A sequential number associate

DescriptionItemApplies settings in the Add/Change Host dialog box to the Volume Security window, andthen closes the dialog box.CAUTION:Clicking OK app

Contents1 Overview of Volume Security ... 7Overview ...

DescriptionItemLists volumes registered in the LDEV group. One table row indicates one volume.• The LDEV column indicates LDEV numbers.NOTE:If a volum

Figure 13 The Select Port Dialog BoxDescriptionItemIndicates the number of the selected LDKCLDKCSpecifies a host group in which ports will be register

DescriptionItemApplies settings in the Select Port dialog box to the Volume Security window, and thencloses the Select Port dialog box.CAUTION:Clickin

DescriptionItemDiscards settings in the Specify Security Group dialog box and closes the dialog box.CancelThe Host to Security Group Dialog BoxThe Hos

DescriptionItemProvides information about a host, where the number groups, from left to right, indicate:• First: The Type/Model the type and model num

Figure 16 The Host to LDEV Dialog BoxDescriptionItemIndicates the number of the selected LDKCLDKCProvides information about a host, where the number g

Figure 17 The Host Group to Security Group Dialog BoxDescriptionItemIndicates the number of the selected LDKCLDKCSpecifies a host group.Host GroupList

Figure 18 The Host Group to Port Dialog BoxDescriptionItemIndicates the number of the selected LDKC.LDKCProvides information about a host group, where

Figure 19 The LDEV to Security Group Dialog BoxDescriptionItemIndicates the number of the selected LDKC.LDKCSpecifies a CU image number.CUDescribes th

• when you right-click an item in the tree view and then select List -> LDEV to Host from the pop-upmenu. The List ->LDEV to Host pop-up command

Locating Ports through Which Hosts Can Access Volumes ... 45Locating Security Groups that Contain

DescriptionItemLists hosts in the security group in which the specified volume is registered.• No. A sequential number associated with a host.NOTE:Eac

Figure 21 The LDEV Group to Security Group Dialog BoxDescriptionItemIndicates the number of the selected LDKC.LDKCSpecifies an LDEV group.LDEV GroupLi

Figure 22 The Error Detail Dialog BoxDescriptionItemLists the number of the host available on the selected LDKC which are performing I/Ooperations.Hos

4 Performing Volume Security OperationsThis chapter explains the following Volume Security operations:• Launching Volume Security (see Launching Volum

• Locating Ports through Which Hosts Can Access Volumes (see“Locating Ports through Which Hosts Can Access Volumes” on page 45)• Locating Security Gro

The Host to LDEV dialog box appears (Figure 16). The dialog box displays a list of volumes.3. Right-click an arrow at the right end of the CU drop-dow

2. From the pop-up menu, select List -> LDEV to Security Group.The LDEV to Security Group dialog box appears (Figure 19). The table on the right di

Locating Security Groups that Contain a Specified LDEV GroupTo specify an LDEV group and then find security groups in which the specified LDEV group i

The Add/Change Host Group dialog box (Figure 9) appears.5. In the Enter Host Group box, enter the name of the host group that you want to create, and

If no ports are registered in the displayed host group, you can register the following hosts:• hosts that do not belong to any host group• hosts belon

FiguresSecurity Example 1 ... 101Security Example 2 ...

If hosts registered in the host group are also registered in another host group, you cannot registerports in the Port list in the Registered port box,

CAUTION:Here, the settings in the window have not been applied to the storage system.7. Click Apply in the Volume Security window (Figure 4).A message

A message appears and asks if you want to apply the settings to the storage system.10. Click Yes.The settings are applied to the storage system.Creati

Registering a Host Group and an LDEV Group in a Security GroupNow that you have classified your security group as an access group, your next (and the

The following procedure explains how to create an LDEV group. For details on how to register volumesin an LDEV group, see “Registering Volumes in an L

CAUTION:When registering volumes in an LDEV group, you are strongly recommended to click the Apply buttonin the Volume Security window, as described i

4. Select Add/Change from the pop-up menu.The Add/Change Security Group dialog box (Figure 8) appears.5. In the Enter Security Group box, enter the na

5. Use the Select Security Group drop-down list to select a security group in which you want to registeran LDEV group.6. Use the LDEV Group drop-down

TIP:To make volumes in your security group usable as secondary volumes (that is, copy destinationvolumes) for copy operations, you must select the sec

Editing Security GroupsThis section explains the following operations, which allow you to edit your security groups:• Unregistering a host group from

TablesAcronyms and Abbreviations ... 7316

CAUTION:Here, the changes in the window have not been applied to the storage system.6. Click Apply in the Volume Security window (Figure 4).A message

Deleting Security GroupsTo delete a security group, take the following steps:To delete a security group:1. Ensure that you are in Modify mode.2. In th

D M=CPUThis command displays the type, the model number, the node ID and the logical partition numberof the host. Write down the information on a pape

3. Right-click a host group.A pop-up menu appears.4. Select Specify and then Host from the pop-up menu.The Add/Change Host dialog box (Figure 11) appe

CAUTION:Here, the settings in the window have not been applied to the storage system.7. Click Apply in the Volume Security window (Figure 4).A message

Deleting Host GroupsTo delete a host group, take the following steps.To delete a host group:1. Ensure that you are in Modify mode.2. In the Volume Sec

The two boxes below the drop-down list displays volumes in the specified CU image.• The Registered in LDEV group box displays volumes registered in th

CAUTION:Here, the change in the window has not been applied to the storage system.9. Click Apply in the Volume Security window (Figure 4).A message ap

Performing Volume Security Operations68

5 TroubleshootingTroubleshooting Volume SecurityThe Error Detail dialog box (Figure 22) may appear when you attempt to apply security settings. Thepro

1 Overview of Volume SecurityUnless otherwise specified, the term storage system in this guide refers to the following disk arrays:• HP StorageWorks X

• The content of any error message(s) displayed on the Remote Web Console computer.• The Storage Navigator configuration information (use the FD Dump

6 Support and Other ResourcesRelated Documentation• HP StorageWorks XP24000/XP20000 Disk Array Owner's Guide• Hitachi ShadowImage™ for Mainframe

• Error messages• Operating system type and revision level• Detailed questionsSubscription ServiceHP recommends that you register your product at the

A Acronyms and AbbreviationsTable 1 Acronyms and Abbreviationslogical deviceLDEVlogical disk controllerLDKCmain volumeM-VOLMultiple Virtual Storage (I

Acronyms and Abbreviations74

IndexAaccess group, 9Add/Change Host dialog box, 27Add/Change Host Group dialog box, 24Add/Change LDEV Group dialog box, 26Add/Change Security Group d

Ppool group, 11port-level securityoverview, 10RR-VOL, 12related documentation, 71Ssecondary volume, 12Securitydisabling, 58policy, 7securityenabling t

referred to as S-VOLs, or source volumes. Secondary volumes are often referred to as T-VOLs, ortarget volumes.Overview of Volume Security8

2 About Volume Security OperationsOverview of Volume Security FunctionsThe Volume Security feature protects data in your storage system from I/O opera