2–Planning Security

Consider the devices, switches, and management agents and evaluate the need for authorization and authentication. Also consider whether the security database is to be distributed on the switches or centralized on a RADIUS server and how many servers to configure.

The following examples illustrate how to configure a security database:

Security Example: Switches and HBAs with Authentication

Security Example: RADIUS Server

Security Example: Host Authentication

Security Example: Switches and HBAs with Authentication

Consider the fabric shown in Figure 2-2. In this fabric, Switch_1, HBA_1, and Switch_2 support authentication while the JBOD and HBA_2 do not. The objective is to secure F_Ports and E_Ports in the fabric. To do this, configure security on the devices that support security: Switch_1, Switch_2, and HBA_1.

Device: HBA_1

Device: HBA_2

WWN: 10:00:00:c0:dd:07:c3:4d

WWN: 10:00:00:c0:dd:07:c3:4f

Security: Yes

Security: No

F_Port

Device: JBOD

 

WWNS:10:00:00:d1:ee:18:d4:5e

 

10:00:00:d1:ee:18:d4:5f

 

10:00:00:d1:ee:18:d4:5g

 

Security: No

 

FL_Port

 

 

F_Port

 

E_Port

Device: Switch_1

Device: Switch_2

WWN: 10:00:00:c0:dd:07:e3:4c

WWN: 10:00:00:c0:dd:07:e3:4e

Security: Yes

Security: Yes

Figure 2-2 Security Example: Switches and HBAs

59229-05 A

2-15

Page 51
Image 51
Q-Logic 59229-05 A, 9100 manual Security Example Switches and HBAs with Authentication

59229-05 A, 9100 specifications

The Q-Logic 9100,59229-05 A is a high-performance networking solution designed to empower data centers and enterprise environments with optimal connectivity and exceptional throughput. As an essential component in modern IT infrastructures, this product stands out due to its advanced feature set and robust technology.

One of the main features of the Q-Logic 9100,59229-05 A is its support for Fibre Channel technology, which is widely recognized for its reliability and speed in storage area networks (SANs). This networking solution facilitates seamless data transfer at high rates, significantly enhancing the performance of storage systems.

Another notable characteristic of the Q-Logic 9100,59229-05 A is its compatibility with various operating systems and virtualization platforms. This versatility allows organizations to integrate it easily into their existing infrastructure, ensuring a smooth transition and minimal downtime. The product also supports multiple protocols, enhancing its utility in diverse environments.

The Q-Logic 9100,59229-05 A employs cutting-edge technologies such as offload capabilities, which reduce CPU overhead, allowing servers to focus on critical applications. By offloading certain tasks from the server's main processor, this solution improves overall system performance and efficiency, aiding in quicker data processing and reduced latency.

Additionally, security features embedded within the Q-Logic 9100,59229-05 A help safeguard sensitive information as it traverses networks. It supports encryption and secure data transportation protocols, ensuring that corporate data remains protected against unauthorized access and breaches.

The adaptability of the Q-Logic 9100,59229-05 A is further exhibited through its support for multiple speeds, allowing organizations to choose the bandwidth that best fits their current needs while maintaining the potential for future upgrades as demands grow.

In conclusion, the Q-Logic 9100,59229-05 A not only excels in speed and performance but also offers a versatile and secure solution suitable for a wide range of data center applications. Its blend of advanced features, robust technology, and adaptability positions it as a valuable asset for organizations looking to enhance their network connectivity and storage capabilities in an increasingly data-driven world.