•You can have multiple volumes and initiators in the HSG.
•If you create a volume on a host and you have no multipathing on the host, make sure the volume is on the preferred path. You can make sure the volume is on the preferred path by using SANtricity.
•The ID for a host security group changes when you rename the host security group.
•When creating a host security group, if you provide a volume, but not an initiator, the host security group is created, but the volume is part of the Default Group, not the group you created. This occurs because until a volume is assigned a host security group with an initiator, it is visible to all initiators and is assigned to the Default Group. To assign a volume to a specific host security group, you must add an initiator to that host security group.
EMC Symmetrix Storage Systems
If no LUN security is turned on for an FA port, all volumes assigned to the FC port are visible by hosts that are on the SAN and have been zoned by the SAN. All volumes assigned to the FC port appear in the mapped category.
When you create the HSG on a Symmetrix storage system, you are creating LUN mapping and masking in one step. In the native tools for Symmetrix storage systems, you will not see the HSG you created by using the management server. Instead you will see a volume binded to a port and a masked LUN to a host in the native tools.
•HSG is associated with individual ports
•HSGs only allow one initiator for host security masking.
•To create a host security group, you must specify a port, initiator and a volume.
•Every port has a LUN HSG, even if no LUNs are defined for that port. To bind a LUN to a port, edit the host security group and add the desired LUN to a port.
•You can also add LUNs to a Mask HSG. To add initiators, you need to create the HSG.
HDS Storage Systems
•FC port contains only volumes but no initiators (HBA WWN) assignment, the management server displays these volumes as unmapped since no external host can see these volumes yet.
•You can have 0 to multiple initiators in a host security group
•You can have 0 to multiple volumes in a host security group.
•Every HSG is only on one port on the array. You can have host security groups with the same name, as long as they are on different ports.
•Host security groups appear in the native tool for HDS storage systems in the logical view, listed by LDEV and in the physical view, listed by port.
•In the native tool for HDS storage systems, host security groups are referred to as a host security domain.
•When you use the management server to create a host security group, the newly created host security group is displayed by the “name” attribute. The “name” attribute is stored only in the HiCommand database and it is not stored in the HSG itself on the device. This is why the “name” attribute does not appear in the native tools. The name attribute can be 50 characters in length. Hitachi storage arrays contain HSG records on the device. These are identified by the “DisplayName” attribute that is read only. The DisplayName is displayed in the native tools. On
Storage Essentials 5.00.01 User Guide 331