Registering a Host Group and an LDEV Group in a Security Group

Now that you have classified your security group as an access group, your next (and the last) task is to register your host group and LDEV group into the security group. When you finish registration, the volumes in the LDEV group are secured and can only be accessed by hosts in the host group. Other hosts cannot access the volumes.

To register a host group and an LDEV group into a security group:

1.Ensure that you are in Modify mode.

2.In the Volume Security window (Figure 4), double-click an LDKC number.

3.Right-click a security group. A pop-up menu appears.

4.Select Specify and then Security Group from the pop-up menu. The Specify Security Group dialog box (Figure 14) appears.

5.Use the Select Security Group drop-down list to select the security group in which you want to register a host group and an LDEV group.

6.Use the Host Group drop-down list to select the host group that you want to register in the security group.

7.Use the LDEV Group drop-down list to select the LDEV group that you want to register in the se- curity group, and then click OK.

8.Click Apply in the Volume Security window (Figure 4).

A message appears and asks if you want to apply the settings to the storage system.

9.Click Yes.

The settings are applied to the storage system.

CAUTION:

If the Error Detail dialog box (section “The Error Detail Dialog Box” on page 41) appears, see the Caution in “Port-Level Security Implementation” on page 10 and then remove errors.

Prohibiting Host Access

Volume Security enables you to prohibit all the hosts from accessing the specified volumes. To do this, take the following major steps:

•Creating an LDEV group (see “Creating an LDEV Group” on page 53)

•Registering volumes in the LDEV group (see “Registering Volumes in an LDEV Group” on page 54)

•Creating a security group and classifying the security group as a pool group (see “Creating a Security Group for Use As a Pool Group” on page 55)

•Registering the LDEV group in the security group

(“Registering an LDEV Group in a Security Group” on page 56)

Creating an LDEV Group

To specify volumes that should be secured, you must create an LDEV group and then register the volumes in the LDEV group.

XP24000/XP20000 Volume Security User's Guide

53