Storage area network (SAN) management system for discovering SAN components using a SAN management server

• US 7,194,538 B1
• Filed: 06/17/2002
• Issued: 03/20/2007
• Est. Priority Date: 06/04/2002
• Status: Expired due to Fees

• Current Assignee: Veritas Technologies, LLC (Whitehouse Group Ltd.)
• Original Assignee: Veritas Operating Corporation (Gen Digital Inc.)
• Inventors: Rabe, Bruce R., Clifford, Mark, Miles, Norm
• Primary Examiner(s): Dharia; Rupal
• Assistant Examiner(s): Nguyen; Quang N.
• Application Number:
  US10/173,401
• Time in Patent Office: 1,737 Days
• Field of Search: 709/216, 709/221, 709/223, 709/224, 709/220, 719/310, 345/734, 711/112, 711/170
• US Class Current: 709/224
• CPC Class Codes: G06F 3/0605 by facilitating the interaction with a user or administrator
• CPC Class Codes: G06F 3/0637 Permissions
• CPC Class Codes: G06F 3/067 Distributed or networked storage systems, e.g. storage area networks [SAN], network attached storage [NAS]
• CPC Class Codes: H04L 41/0213 Standardised network management protocols, e.g. simple network management protocol [SNMP]
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 67/1097 for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]
• CPC Class Codes: H04L 67/125 involving control of end-device applications over a network
• CPC Class Codes: H04L 67/75 Indicating network or usage conditions on the user display

Abstract

Embodiments of a LUN security utility which provides LUN security operations including, but not limited to, searching for and locating one or more LUNs, LUN selection, LUN to disk array port binding, LUN masking and fabric zoning operations in one utility. Embodiments may provide a central user interface that guides a user through configuring LUN security operations and allows the user to execute the configured LUN security operations with a single operation. Embodiments may provide a central point from which to perform LUN security operations including one or more of, but not limited to, LUN binding, LUN masking and fabric zoning. Using embodiments, LUN security operations may be performed as a single operation from the perspective of the user.

Claims

1. A computer-implemented method, comprising:

discovering, by a SAN management server, a plurality of storage area network (SAN) components including;

one or more storage systems comprising addressable storage units and fabric ports for coupling to the SAN;

one or more host systems comprising host adapter ports for coupling to the SAN; and

in response to a single request, the SAN management server is further configured to perform;

creating an access path between a selected one of the addressable storage units and a selected one of the fabric ports for one of the storage systems;

enabling access to the selected addressable storage unit for a selected one of the host adapter ports; and

zoning the selected storage system fabric port to a common fabric zone with the selected host adapter port.

2. The method as recited in claim 1, wherein said creating an access path comprises binding a LUN (logical unit number) for the selected addressable storage unit to the selected fabric port within the corresponding storage system.

3. The method as recited in claim 1, wherein said enabling access to the selected addressable storage unit comprises masking a LUN (logical unit number) for the selected addressable storage unit to the selected host adapter port.

4. The method as recited in claim 3, wherein said masking comprises adding an identifier for the selected host adapter port to an access control list for the selected addressable storage unit LUN, wherein host adapter ports not identified on the access control list are prevented from accessing the LUN.

5. The method as recited in claim 1, wherein said zoning comprises instructing one or more fabric switches in the SAN to allow communication between the selected host adapter port and the selected storage system fabric port.

6. The method as recited in claim 1, wherein said zoning comprises configuring a fabric for the SAN to make the selected storage system fabric port visible to the selected host adapter port in the SAN.

7. The method as recited in claim 1, wherein said discovering a plurality of SAN components comprises discovering at least two storage systems having different interfaces for configuring each respective storage system for access on the SAN.

8. The method as recited in claim 1, wherein said discovering a plurality of SAN components comprises discovering at least two fabric switches having different SAN configuration interfaces.

9. The method as recited in claim 1, further comprising a SAN manager client accessing SAN discovery information from the SAN management server and displaying the SAN discovery information through a common user interface for selecting said selected addressable storage unit.

10. The method as recited in claim 9, further comprising the SAN manager client receiving the single user request through the common user interface and interacting with the SAN management server to perform said creating, said enabling and said zoning.

11. The method as recited in claim 9, wherein one of the host systems comprises said SAN management server.

12. The method as recited in claim 1, further comprising searching the addressable storage units for one or more addressable storage units matching one or more specified properties.

13. The method as recited in claim 12, wherein the one or more specified properties are selected from one or more of vendor name, storage capacity, storage type, array configuration, location, and cost.

14. The method as recited in claim 12, wherein the selected addressable storage unit is selected from the result of said searching.

15. A storage area network (SAN) management system, comprising:

a SAN management server coupled to a SAN, wherein the SAN management server is configured for discovering a plurality of storage area network (SAN) components including;

one or more storage systems comprising addressable storage units and fabric ports for coupling to the SAN;

one or more host systems comprising host adapter ports for coupling to the SAN; and

a SAN manager client coupled to said SAN management server, wherein the SAN manager client is configured to provide a user interface to select one of the addressable storage units to be made available to a selected one of the host adapter ports and communicate with the SAN management server for;

creating an access path between the selected addressable storage unit and a selected one of the fabric ports for one of the storage systems;

enabling access to the selected addressable storage unit for the selected host adapter port; and

zoning the selected storage system fabric port in a common fabric zone with the selected host adapter port.

16. The system as recited in claim 15, wherein said creating an access path comprises binding a LUN (logical unit number) for the selected addressable storage unit to the selected fabric port within the corresponding storage system.

17. The system as recited in claim 15, wherein said enabling access to the selected addressable storage unit comprises masking a LUN (logical unit number) for the selected addressable storage unit to the selected host adapter port.

18. The system as recited in claim 17, wherein said masking comprises adding an identifier for the selected host adapter port to an access control list for the selected addressable storage unit LUN, wherein host adapter ports not identified on the access control list are prevented from accessing the LUN.

19. The system as recited in claim 15, wherein said zoning comprises instructing one or more fabric switches in the SAN to allow communication between the selected host adapter port and the selected storage system fabric port.

20. The system as recited in claim 15, wherein said zoning comprises configuring a fabric for the SAN to make the selected storage system fabric port visible to the selected host adapter port in the SAN.

21. The system as recited in claim 15, wherein said discovering a plurality of SAN components comprises discovering at least two storage systems having different interfaces for configuring each respective storage system for access on the SAN.

22. The system as recited in claim 15, wherein said discovering a plurality of SAN components comprises discovering at least two fabric switches having different SAN configuration interfaces.

23. The system as recited in claim 15, wherein the SAN manager client id configured for searching the addressable storage units for one or more addressable storage units matching one or more specified properties.

24. The system as recited in claim 23, wherein the one or more specified properties are selected from one or more of vendor name, storage capacity, storage type, array configuration, location, and cost.

25. The system as recited in claim 23, wherein the selected addressable storage unit is selected from the result of said searching.

26. The system as recited in claim 15, wherein one of the host systems comprises said SAN management server.

27. A storage area network (SAN) management system, comprising:

a SAN management server configured for discovering SAN components including;

a plurality of storage systems comprising addressable storage units and fabric ports for coupling to the SAN, wherein at least two of the storage systems have different SAN management interfaces;

one or more host systems comprising host adapter ports for coupling to the SAN; and

a SAN manager client coupled to said SAN management server, wherein the SAN manager client is configured to provide a SAN management interface for selecting one of the addressable storage units and selecting one of the host adapter ports, wherein the SAN manager client is further configured to communicate with the SAN management server in response to a single request to initiate a sequence of SAN management operations to make the selected addressable storage unit available for the selected host adapter port.

28. The system as recited in claim 27, wherein said sequence of SAN management operations comprises a LUN (logical unit number) binding operation for creating an access path between the selected addressable storage unit and a selected fabric port within the corresponding storage system according to the SAN management interface for that storage system.

29. The system as recited in claim 27, wherein said sequence of SAN management operations comprises a LUN (logical unit number) masking operation for enabling access to the selected addressable storage unit for the selected host adapter port.

30. The system as recited in claim 29, wherein said LUN masking operation comprises adding an identifier for the selected host adapter port to an access control list for the selected addressable storage unit LUN, according to the SAN management interface for that storage system.

31. The system as recited in claim 27, wherein said sequence of SAN management operations comprises a zoning operation for instructing one or more fabric switches in the SAN to allow communication between the selected host adapter port and the selected storage system fabric port.

32. The system as recited in claim 27, wherein said sequence of SAN management operations comprises a zoning operation for configuring a fabric for the SAN to make the selected storage system fabric port visible to the selected host adapter port in the SAN.

33. The system as recited in claim 27, wherein said discovering a plurality of SAN components comprises discovering at least two fabric switches having different SAN configuration interfaces.

34. The system as recited in claim 27, wherein one of the host systems comprises said SAN management server.

35. The system as recited in claim 27, wherein the SAN manager client is configured for searching SAN discovery information from the SAN management server for one or more addressable storage units matching one or more specified properties.

36. The system as recited in claim 35, wherein the one or more specified properties are selected from one or more of vendor name, storage capacity, storage type, array configuration, location, and cost.

37. The system as recited in claim 35, wherein the selected addressable storage unit is selected from the result of said searching.

38. A storage area network (SAN), comprising:

a plurality of storage systems, wherein each of the storage systems comprises one or more fabric ports for coupling the storage system to a fabric, and a plurality of addressable storage units;

a plurality of host systems each comprising one or more host adapter ports for coupling to the fabric, wherein the fabric is configured to provide an interconnect between the storage systems and the hosts; and

a SAN management system coupled to the fabric, wherein the SAN management system is configured to provide a common user interface for selecting one or more of the addressable storage units of one or more of the storage systems, and selecting one or more of the host adapter ports;

wherein, in response to a single user request, the SAN management system is further configured to;

instruct the one or more storage systems for the selected addressable storage units to allow access to the selected addressable storage units for the selected host adapter ports; and

instruct the fabric to allow communication between the selected host adapter ports and the one or more storage arrays for the selected addressable storage units.

39. The SAN as recited in claim 38, wherein to instruct the one or more storage systems for the selected addressable storage units to allow access to the selected addressable storage units for the selected host adapter ports, the SAN management system is configured to instruct the storage system for one of the selected addressable storage units to enable an access path between the selected addressable storage unit and a selected fabric port of the storage system.

40. The SAN as recited in claim 38, wherein to instruct the one or more storage systems for the selected addressable storage units to allow access to the selected addressable storage units for the selected host adapter ports, the SAN management system is configured to bind a SCSI LUN (logical unit number) for one of the selected addressable storage units to a selected fabric port of the corresponding storage system.

41. The SAN as recited in claim 38, wherein to instruct the one or more storage systems for the selected addressable storage units to allow access to the selected addressable storage units for the selected host adapter ports, the SAN management system is configured to add an identifier for one of the selected host adapter ports to an access control list for one of the selected addressable storage units, wherein host adapter ports not identified on the access control list are prevented from communicating with the addressable unit corresponding to the access control list.

42. The SAN as recited in claim 38, wherein to instruct the one or more storage systems for the selected addressable storage units to allow access to the selected addressable storage units for the selected host adapter ports, the SAN management system is configured to mask a SCSI LUN (logical unit number) for one of the selected addressable storage units to one of the selected host adapter ports.

43. The SAN as recited in claim 38, wherein to instruct the fabric to allow communication between the selected host adapter ports and the one or more storage arrays for the selected addressable storage units, the SAN management system is configured to instruct one or more switches in the fabric to allow communication between one of the selected host adapter ports and the storage system for a selected one of the addressable units.

44. The SAN as recited in claim 38, wherein to instruct the fabric to allow communication between the selected host adapter ports and the one or more storage arrays for the selected addressable storage units, the SAN management system is configured to zone one of the selected host adapter ports in a same zone with a select fabric port for the storage system for a selected one of the addressable units.

45. The SAN as recited in claim 38, wherein the plurality of storage systems comprise at least two storage systems having different command interfaces for configuring each respective storage system for access on the fabric, wherein to instruct the one or more storage systems for the selected addressable storage units to allow access to the selected addressable storage units for the selected host adapter ports, the SAN management system is configured to instruct the storage systems according to their respective command interfaces.

46. The SAN as recited in claim 38, wherein the fabric comprises at least two switches having different fabric configuration interfaces, wherein to instruct the fabric to allow communication between the selected host adapter ports and the one or more storage arrays for the selected addressable storage units, the SAN management system is configured to instruct the switches according to their respective fabric configuration interfaces.

47. The SAN as recited in claim 38, wherein the SAN management system comprises:

a SAN manager client configured to provide said common user interface; and

a SAN management server coupled to said SAN manager client and to the fabric, wherein one of the host systems comprises the SAN management server.

48. The SAN as recited in claim 47, wherein the SAN management server is configured to discover SAN components including the storage systems, wherein SAN manager client is configured to display through the common user interface information discovered by the SAN management server for said selecting one or more of the addressable storage units and said selecting one or more of the host adapter ports.

49. The SAN as recited in claim 38, wherein the common user interface provided by the SAN management system is further configured for searching for addressable storage units matching one or more specified properties.

50. The SAN as recited in claim 49, wherein the one or more specified properties are selected from one or more of vendor name, storage capacity, storage type, array configuration, location, and cost.

51. The SAN as recited in claim 49, wherein said selecting one or more of the addressable storage units and said selecting one or more of the host adapter ports are performed for addressable units found by said searching.

52. A computer-accessible storage medium comprising program instructions, wherein the program instructions are computer-executable and configured to implement:

discovering, by a SAN management server, a plurality of storage area network (SAN) components including;

one or more storage systems comprising addressable storage units and fabric ports for coupling to the SAN;

one or more host systems comprising host adapter ports for coupling to the SAN; and

in response to a single request, the SAN management server is further configured to perform;

creating an access path between a selected one of the addressable storage units and a selected one of the fabric ports for one of the storage systems;

enabling access to the selected addressable storage unit for a selected one of the host adapter ports; and

zoning the selected storage system fabric port to a common fabric zone with the selected host adapter port.

53. The computer-accessible storage medium as recited in claim 52, wherein, in said creating an access path, the program instructions are further configured to implement binding a LUN (logical unit number) for the selected addressable storage unit to the selected fabric port within the corresponding storage system.

54. The computer-accessible storage medium as recited in claim 52, wherein, in said enabling access to the selected addressable storage unit, the program instructions are further configured to implement masking a LUN (logical unit number) for the selected addressable storage unit to the selected host adapter port.

55. The computer-accessible storage medium as recited in claim 54, wherein, in said masking, the program instructions are further configured to implement adding an identifier for the selected host adapter port to an access control list for the selected addressable storage unit LUN, wherein host adapter ports not identified on the access control list are prevented from accessing the LUN.

56. The computer-accessible storage medium as recited in claim 52, wherein, in said zoning, the program instructions are further configured to implement instructing one or more fabric switches in the SAN to allow communication between the selected host adapter port and the selected storage system fabric port.

57. The computer-accessible storage medium as recited in claim 52, wherein, in said zoning, the program instructions are further configured to implement configuring a fabric for the SAN to make the selected storage system fabric port visible to the selected host adapter port in the SAN.

58. The computer-accessible storage medium as recited in claim 52, wherein, in said discovering a plurality of SAN components, the program instructions are further configured to implement discovering at least two storage systems having different interfaces for configuring each respective storage system for access on the SAN.

59. The computer-accessible storage medium as recited in claim 52, wherein, in said discovering a plurality of SAN components, the program instructions are further configured to implement discovering at least two fabric switches having different SAN configuration interfaces.

60. The computer-accessible storage medium as recited in claim 52, wherein the program instructions are further configured to implement a SAN manager client accessing SAN discovery information from the SAN management server and displaying the SAN discovery information through a common user interface for selecting said selected addressable storage unit.

61. The computer-accessible storage medium as recited in claim 60, wherein the program instructions are further configured to implement the SAN manager client receiving the single user request through the common user interface and interacting with the SAN management server to perform said creating, said enabling and said zoning.

62. The computer-accessible storage medium as recited in claim 60, wherein one of the host systems comprises said SAN management server.

63. The computer-accessible storage medium as recited in claim 52, wherein the program instructions are further configured to implement searching the addressable storage units for one or more addressable storage units matching one or more specified properties.

64. The computer-accessible storage medium as recited in claim 63, wherein the one or more specified properties are selected from one or more of vendor name, storage capacity, storage type, array configuration, location, and cost.

65. The computer-accessible storage medium as recited in claim 63, wherein the selected addressable storage unit is selected from the result of said searching.