NOTE: For the Volume Creation and LUN Security option in Path Provisioning, the All Ports node is not shown because volumes cannot be placed inside host security groups for All Ports.

Each storage system treats host security groups differently. See the following sections for more information.

Host Security Groups on EMC CLARiiON and Sun 6130 Storage Systems

Keep in mind the following rules for host security groups on EMC CLARiiON and Sun 6130 storage systems

When a volume is created, by default it is assigned to one of the two controllers. Even though this volume is mapped to a controller, it is not visible from the outside world by a host. The management server reports this volume as unmapped since it is not visible by a host initiator.

Volumes can be only on SPA or SPB because CLARiiON is active/passive storage, which means it can have only one active path to a volume. Addition of initiators to any of the ports on a storage processor is listed for all ports of that storage processor.

The host security group is created on all ports of the processor you select unless you select an initiator that uses a different processor and does not belong to a host security group. For example, assume you select processor SPA, and then you select an initiator that belongs to SPB buts does not belong to a host security group. The host security group is created for all ports on SPB.

Host security groups can consist of initiators (WWNs) only. You do not need to specify volumes. The initiator is shown in both host security groups SPA and SPB.

Host security groups can consist of volumes (LUNs) only. You do not need to specify initiators.

When you select an initiator for the host security group, the initiator has to be registered with the CLARiiON storage system.

You can have more than one initiator in a security group if you have the proper multipathing software installed on the particular host where the initiator is located.

Host Security Groups on LSI Storage Systems

Keep in mind the following rules for host security groups on LSI storage systems.

When you create a host security group using the management server, the host security group appears as a host, with its volumes and ports displayed underneath the tree in SANtricity.

When you create a host security group using the management server, you can specify the controller, but not the port, for the host security group.

In SANtricity, an initiator is equivalent to a host port.

You can have multiple volumes and initiators in the host security group.

If you create a volume on a host that does not have multipathing, make sure the volume is on the preferred path. Use SANtricity to make sure the volume is on the preferred path.

The ID for a host security group changes when you rename the host security group.

HP Storage Essentials SRM 6.0 User Guide 553