Emulex LP1150-F4 user manual Reserved Indices Examples, ASG Creation Example

5.Click OK in the New Access Sub-Group dialog box. The ASG is created. The following process sets up the ASG (see Figure 61)

a.The SSC utility runs.

b.A new ASG is created with Systems 2 and 15 as clients.

c.A new SA_ID is selected for System 2, and a new SA_ID is selected for System 15.

d.SA file updates are sent to each system in the ASGs. In Figure 61, System 2 has remote access to systems 3 through 9. System 15 has remote access to systems 8 through 15. System 2 and System 15 have remote access to systems 8 and 9.

Figure 61: ASG Creation Example

Reserved Indices - Examples

A particular security installation can support the creation of several hundred access groups (ACGs and ASGs). When you create each new access group, you allocate some number of 'indices' to the client system of the new ASG. This number reflects the number of subsequent 'child' ASGs that can subsequently be created at the new client's system.

•If zero indices are reserved, you cannot create any lower-level ASG under the client of the new ASG. Thus, for example, if you want to implement a multi-tiered security architecture consisting of many ASGs, and you wanted to create them all from the Master Security Client (MSC), zero indices would be allocated to each of the new ASGs client platforms when they are created.

•If you create an ASG, and you reserve 25 indices for the new ASG client platform, a child ASG created by this platform will have a maximum of only 24 indices available to be reserved (one is taken by the creation of the child ASG itself). This continues down the ASG hierarchy as each lower level ASG is created.

•When you create an ASG from the MSC, a maximum of 50 indices (or less if fewer are available) can be reserved. For all other clients, the maximum depends on how many indices were reserved to that client when its ASG was created, and on how many it has subsequently allocated to its ASGs.

Solaris SFS Driver User Manual Page 94