Method and apparatus for setting access restriction information

• US 8,156,561 B2
• Filed: 09/15/2005
• Issued: 04/10/2012
• Est. Priority Date: 11/26/2003
• Status: Expired due to Fees

• Current Assignee: Hitachi, Ltd.
• Original Assignee: Hitachi, Ltd.
• Inventors: Mimatsu, Yasuyuki, Shimooka, Kenichi, Yamamoto, Masayuki
• Primary Examiner(s): Flynn, Nathan
• Assistant Examiner(s): Doan, Trang
• Application Number:
  US11/226,333
• Publication Number:
  US 20060010502A1
• Time in Patent Office: 2,399 Days
• Field of Search: 709/213, 711/114, 713164-167, 713/193
• US Class Current: 726/26
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: G06F 3/0607 by facilitating the process of upgrading existing storage systems, e.g. for improving compatibility between host and storage device
• CPC Class Codes: G06F 3/0647 Migration mechanisms
• CPC Class Codes: G06F 3/0659 Command handling arrangements, e.g. command buffers, queues, command scheduling
• CPC Class Codes: G06F 3/067 Distributed or networked storage systems, e.g. storage area networks [SAN], network attached storage [NAS]
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: Y10S 707/99936 Pattern matching access
• CPC Class Codes: Y10S 707/99939 Privileged access
• CPC Class Codes: Y10S 707/9994 Distributed or remote access

Abstract

Access restriction information that an old storage device has is transferred to a new storage device. A management server 2200 obtains a port management TL 2445 that the old storage device 2400 has, through a LAN 2600 which is separated from a Fiber Channel network which is utilized for data communication. Also, through the LAN 2600, a port list TL 2555 is obtained from the new storage device 2500. And, then, on the basis of the port list TL 2555, a port of the new storage device 2500, which is utilized for an access to a volume of the old storage device, is selected. And, on the basis of the port management TL 2445, on a port of the selected new storage device 2500, it is set up that access restriction information of a port of the old storage device 2400 to which a volume, of which the port is utilized for an access, is assigned.

Claims

1. A first storage device coupled to a computer and a second storage device, comprising:

a first port coupled to the computer and being operated as a target port;

a second port coupled to the second storage device and being operated as an initiator port;

a processor coupled to the first port and the second port; and

a volume management information which is set based on port management information by the processor,

wherein a first volume controlled by the first storage device is assigned to the first port,

wherein a second volume is included in the second storage device so that the second volume is virtualized as the first volume by the first storage device,

wherein the port management information is related to an access restriction of the second storage device,

wherein the volume management information includes a volume identifier, an initiator port identifier and an external port identifier, and

wherein upon receiving a write request to the first volume, if access to the first volume is permitted based on the volume management information, data of the write request is outputted to the second volume.

2. The first storage device according to claim 1,

wherein the port management information includes a port identifier of the second storage device, an access restriction to the second volume and a port identifier permitted to access from the computer to the second storage device.

3. The first storage device according to claim 1,

wherein the second port controls a first access request for the second volume from the computer based on whether or not the computer is inhibited to access to the second volume.

4. The first storage device according to claim 3,

wherein the processor relays the first access request received at the first port to the second storage device via the second port if the first port accepts the first access request.

5. The first storage device according to claim 4,

wherein the identifiers of the port are World Wide Names.

6. The first storage device according to claim 5 further comprising a memory coupled to the processor,

wherein the memory stores information of relationship between the first volume and the second volume.

7. A first storage device coupled to a computer and a second storage device comprising:

a first port coupled to the computer and being operated as a target port;

a second port coupled to the second storage device and being operated as an initiator port;

a processor coupled to the first port and the second port; and

a volume management information which is set based on port management information by the processor,

wherein a first volume controlled by the first storage device is related to the first port, and

wherein a second volume is included in the second storage device so that the first storage device provides the first volume as a virtualized volume of the second volume for the computer,

wherein the port management information is related to an access restriction of the second storage device,

wherein the volume management information includes a volume identifier, an initiator port identifier and an external port identifier, and

wherein the first port controls a first access request for the first volume from the computer based on the volume management information.

8. The first storage device according to claim 7,

wherein the access restriction information includes information as to whether or not the computer is permitted to access to the first volume via the second port.

9. The first storage device according to claim 8,

wherein the port management information includes a port identifier of the second storage device, an access restriction to the second volume and a port identifier permitted to access from the computer to the second storage device.

10. The first storage device according to claim 9,

wherein the processor relays the first access request received at the first port to the second storage device via the second port if the first port accepts the first access request.

11. The first storage device according to claim 10,

wherein the identifiers of the ports are World Wide Names.

12. The first storage device according to claim 11 further comprising a memory coupled to the processor,

wherein the memory stores information of a relationship between the first volume and the second volume.

13. A system coupled to host computers comprising:

a first storage device comprising first volumes, first ports and a first memory storing volume management information;

a second storage device, coupled to the first storage device, comprising second ports and a second memory storing port management information; and

a management computer coupled to the first storage device and to the second storage device;

wherein the port management information is related to an access restriction of the second storage device,

wherein the volume management information includes a volume identifier, an initiator port identifier and an external port identifier, and

wherein the management computer selects a first port A of the first ports as a target port which is used to receive an access request from the host computers and selects a first port B of the first ports as an initiator port which is used to send an access request to the second ports;

wherein the management computer controls to change the volume management information so as to indicate that an access request from the host computer to the second volume via the first port B is permitted and an access request from another device to the second volume via the first port B is not permitted;

wherein the management computer controls to set the port management information so as to indicate that an access request from the host computer to the second volume via a second port of said second ports is permitted and an access request from the another device to the second volume via the second port is not permitted.

14. The system according to claim 13,

wherein the first storage device is able to be connected to the host computers;

and

wherein, if the first storage device is connected to the host computers, the first storage device is able to provide the first volumes with combination of port identifiers of the first ports and LUNs of the first volumes, the LUNs on each first port being numbered from 0;

wherein the second storage device manages the second volumes using second volume IDs used to identify each of second volumes uniquely in the second storage device;

wherein the first storage device receives the second volume IDs from the host computers;

wherein, if the first volume A is assigned to plural combinations of port identifier and LUN, the first storage device recognizes the first volume A as one first volume by using a first volume identifier of the first volume A and assigns one second volume ID, which is used to identify each of the first volumes in the first storage device, to the first volume A.

15. The system according to claim 13,

wherein the first storage device relays a first access request to the second storage device via the second port and the first port A, if the volume management information indicates that the first access request is permitted.

16. The system according to claim 13,

wherein the port management information includes relationships among identifiers of the second volumes, identifiers of second ports and identifiers of the host computers.