Emulex LP1150-F4 user manual HBAnyware Security, Removing Hosts, Introduction

6.A dialog box appears asking to save the IP ranges you searched. Click Yes to save the address ranges. If you save the address ranges, these address ranges will appear the next time you use the Add Range of IP Hosts dialog box. Click No if you do not want to save the address ranges.

The Save Ranges to A File button saves the specified range(s) to a file so that the same ranges can be automatically invoked when the HBAnyware utility is started again.

Removing Hosts

Periodically you may want to remove hosts that are no longer part of the network. You may want to remove a host when it is removed from the network or to detect hosts that are no longer being discovered. Removing hosts that can no longer be discovered improves the operation of the discovery server.

To remove hosts:

1.Start the HBAnyware utility.

2.From the Discovery menu, select Out-of-Band/Remove Host. The Remove Remote Hosts dialog box shows a list of discovered OOB hosts. Any host not currently discovered appears in red. Click Show Undiscovered Hosts Only to only display currently undiscovered hosts.

3.From the Remove Remote Hosts dialog box, select the hosts you wish to remove. You can select all the displayed hosts by clicking Select All.

4.Click OK to remove the selected hosts.

HBAnyware Security

Introduction

Initially, only the HBAnyware software package has been installed on all of the systems of a Fibre Channel network. Any of those systems can remotely access and manage the HBAs on any systems in the group. This may not be a desirable situation, because any system can perform actions such as resetting boards or downloading firmware. Figure 44 illustrates a system with no security.

Figure 44: Initial State - No Security

The HBAnyware security software consists of an application programming interface (API) containing a set of security management functions and a user interface (UI). Together these allow you to administer a security system configuration (SSC). HBAnyware security is system-based, not user-based.

SSC provides two main security features:

1.Prevents remote HBA management from systems that you do not want to have this capability.

2.Prevents an accidental operation (such as firmware download) on a remote HBA. In this case, you do not want to have access to HBAs in systems you are not responsible for maintaining.

SSC has several components that enable you to setup your environment in a secure way:

•Security association (SA) - A record consisting of a key and an access control record. Related components are the SA table, SA File and SA Identifier (SA_ID).

•SA table - a group of 256 Security Associations and a flag to enable/disable security.

•SA file - A locally encrypted file on each system that is part of the HBAnyware security environment that stores the SA table.

Solaris SFS Driver User Manual Page 80