Synchronization and auditing of zone configuration data in storage-area networks

• US 7,904,599 B1
• Filed: 03/28/2003
• Issued: 03/08/2011
• Est. Priority Date: 03/28/2003
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Bennett, Steven James
• Primary Examiner(s): Follansbee; John
• Assistant Examiner(s): Tran; Nghi V
• Application Number:
  US10/402,199
• Time in Patent Office: 2,902 Days
• Field of Search: 709/249, 709/232, 709/246
• US Class Current: 709/249
• CPC Class Codes: H04L 67/1097 for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]

Abstract

Many storage-area networks (SANs) are structured so that an end-user or client-computer can access data on one or more target storage devices through a storage router and a separate Fiber Channel (FC) switch. However, the conventional use of a separate FC switch to couple the storage router makes it difficult and time consuming to restore zone configuration of the FC switch. Accordingly, the present inventor devised, among other things, an exemplary method of automatically maintaining and synchronizing a copy of zone configuration data for an FC switch. Through these and/or other features, the exemplary embodiment ultimately reduces the cost and complexities associated with implementing storage-area networks.

Claims

1. A method of operating a storage-area network including at least one FC-compliant switch having a first zone configuration data set, the method comprising:

detecting a change in a zone, an alias, or a zone set definition in the first zone configuration data set;

updating a second zone configuration data set in response to detecting a change in the first zone configuration data set, the updating of the second zone configuration data set comprises;

appending a complete and date-stamped copy of first zone configuration data from the first zone configuration data set to the second zone configuration data set, the second zone configuration data set being located in a memory device in a storage router coupled to the at least one FC-compliant switch

determining whether the detected change in the first zone configuration data set was made by an authorized changer; and

updating the second zone configuration data set if the determination is that the detected change was made by the authorized changer; and

restoring the first zone configuration data set for the at least one FC-compliant switch from the second zone configuration data set, the restoration comprising isolating the at least one FC-compliant switch.

2. The method of claim 1, further comprising reconfiguring the FC-compliant switch based on contents of the second zone configuration data set.

3. The method of claim 1, wherein the storage router and the FC-compliant switch are mounted to a common circuit board.

4. The method of claim 1, wherein determining whether a detected change in the first zone configuration data set was made by an authorized changer, comprises:

determining whether the detected change was initiated by a command from a user interface for the storage router coupled to the FC-compliant switch.

5. A non-transitory machine-readable medium comprising instructions for performing the method of claim 1.

6. The method of claim 1, wherein the isolating comprises clearing a current zone configuration data set from a memory device in the at least one FC-compliant switch.

7. Apparatus for a storage-area network, comprising:

a non-transitory machine-readable medium carrying a set of coded instructions for;

updating a first zone configuration data set in a first memory device in an iSCSI-compliant storage router in the network based on detection of changes made to a zone, an alias, or a zone set definition in a second zone configuration data set stored in a second memory device in an FC-compliant switch in the network, the updating of the first zone configuration data comprises;

appending a complete and date-stamped copy of second zone configuration data from the second zone configuration data set to the first zone configuration data set;

determining whether the detected changes were made by an authorized changer; and

updating the first zone configuration data if the determination is that the detected changes were made by the authorized changer; and

restoring the first zone configuration data set for the FC-compliant switch from the second zone configuration data set, the restoration comprising isolating the FC-compliant switch.

8. The apparatus of claim 7, wherein the iSCSI-compliant storage router includes the non-transitory machine-readable medium.

9. The apparatus of claim 7, further comprising:

a common circuit board supporting the iSCSI-compliant storage router and the FC-compliant switch.

10. The apparatus of claim 7, wherein the iSCSI-compliant storage router includes a command-line interface module and a graphical-user interface module to allow saving the first zone configuration data set to the first memory device.

11. Apparatus for a storage-area network, comprising:

an IP port for receiving and outputting iSCSI-compliant input-output commands and associated data;

an FC port for receiving and outputting FC-compliant input-output commands and any associated data, based on the received iSCSI-compliant input-output commands and associated data;

an integrated router-switch coupled to the IP port and the FC port and including a router portion coupled to a switch portion through a router-to-switch interface;

the switch portion including a FC switch coupled between the router-to-switch interface and the FC port;

a first memory included in the FC switch for storing a first zone configuration data for the FC switch;

a second memory included in the router portion for storing a second zone configuration data for the FC switch;

a set of machine-readable instructions for;

updating the second zone configuration data based on a detection of changes made to a zone, an alias, or a zone set definition in the first zone configuration data, the updating of the second zone configuration data comprises;

appending a complete and date-stamped copy of the first zone configuration data to the second zone configuration data;

determining whether the detected changes were made by an authorized changer; and

updating the second zone configuration data if the determination is that the detected changes were made by the authorized changer; and

restoring the first zone configuration data for the FC switch from the second zone configuration data, the restoration comprising isolating the FC switch; and

a common circuit board supporting the IP port, the FC port, and the integrated router-switch including the router portion, the router-to-switch interface, and the switch portion including the FC switch.

12. The apparatus of claim 11, wherein the set of machine-readable instructions for updating the second zone data comprises instructions for:

detecting a change in the first zone configuration data;

determining whether the detected change in the first zone configuration data was made by an authorized changer; and

updating the second zone data if the determination is that the detected change was made by an authorized changer.

13. The apparatus of claim 12, wherein determining whether a detected change in the first zone configuration data was made by an authorized changer, comprises:

determining whether the detected change was initiated by a command from a user interface for the storage router coupled to the FC switch.

14. Apparatus for use in a storage-area network, comprising:

first means for receiving and outputting iSCSI-compliant input-output commands and associated data;

second means for selectively providing FC-compliant input-output commands and any associated data, based on the received iSCSI-compliant input-output commands and associated data, to a subset of two or more FC-compliant ports;

an FC switch coupled between the first means and the second means;

first memory means for storing first zone configuration data for the FC switch;

second memory means for storing second zone configuration data for the FC switch;

third memory means for updating the second zone configuration data based on a detection of changes made to a zone, an alias, or a zone set definition in the first zone configuration data, the third memory means for updating the second zone configuration data comprises;

appending a complete and date-stamped copy of the first zone configuration data to the second zone configuration data;

determining whether the detected changes were made by an authorized changer; and

updating the second zone configuration data if the determination is that the detected changes were made by the authorized changer;

fourth memory means for restoring the first zone configuration data for the FC switch from the second zone configuration data, the fourth memory means for the restoration further comprising means for isolating the FC switch; and

a common circuit board supporting the first and second means.

15. The apparatus of claim 14, further comprising a 1U rack-mountable enclosure enclosing the first and second means and the common circuit board.

16. A system comprising:

at least one iSCSI host computer; and

apparatus comprising;

an IP port for receiving and outputting iSCSI-compliant input-output commands and associated data from the iSCSI host computer;

an FC port for receiving and outputting FC-compliant input-output commands and any associated data, based on the received iSCSI-compliant input-output commands and associated data;

a FC switch coupled between the IP port and the FC port;

first memory means for storing first zone configuration data for the FC switch;

second memory means for storing second zone configuration data for the FC switch;

a set of machine-readable instructions for;

updating the second zone configuration data based on a detection of changes made to a zone, an alias, or a zone set definition in the first zone configuration data, the updating of the second zone configuration data comprises;

appending a complete and date-stamped copy of the first zone configuration data to the second zone configuration data;

determining whether the detected changes were made by an authorized changer; and

updating the second zone configuration data if the determination is that the detected changes were made by the authorized changer; and

restoring the first zone configuration data for the FC switch from the second zone configuration data, the restoration comprising isolating the FC switch;

a common circuit board supporting the IP port, the FC port, and the FC switch; and

at least one target storage device coupled to the FC port.

17. A method comprising:

providing a FC switch having first zone configuration data stored in a memory device in the FC switch;

detecting a change in a zone, an alias, or a zone set definition in the first zone configuration data;

automatically updating a backup zone configuration data for the FC switch in a storage router external to the FC switch in response to the detecting the change in the first zone configuration data, the updating of the backup zone configuration data comprises;

appending a complete and data-stamped copy of the first zone configuration data to the backup zone configuration data;

determining whether the detected change in the first zone configuration data was made by an authorized changer; and

updating the backup zone configuration data if the determination is that the detected change was made by the authorized changer; and

restoring the first zone configuration data for the FC switch from the backup zone configuration data, the restoration comprising isolating the FC switch.

18. The method of claim 17, further comprising:

updating the first zone configuration data based on the backup zone configuration data.

19. The method of claim 17, wherein the storage router external to the FC switch comprises an iSCSI-compliant storage router.

20. The method of claim 19, wherein the FC switch and the iSCSI-compliant storage router are supported by a common circuit board.