where information lives

ESN Manager
Overview

1
 where information lives

Whats in ESN Manager?

Hardware support
External switches
Brocade a2.3.0 firmware
McData/Connectrix Manager 2.x, 3.0, 4.0
Firmware 3.00, 3.01 and 1.12
New Connectrix Models ED-64M, DS-32M, DS-16M
DS-32M and DS-16M need to be connected to a Service Processor
McData-Brocade Interoperability - ED-1032 and DS-16
Compatible with the 4 Port ESCON Director

OS Support
Solaris 2.6, 7, 8
Windows NT 4.0 (SP6a), 2000 (SP1)
HP/UX 11.0 (CLI only)
AIX 4.3.3 (CLI only)

2
 where information lives

Whats in ESN Manager?

Enhanced security
SID Lock Down feature
Eliminates the potential for HBA WWN spoofing
When implemented with the VCMDB Access Feature, access control is administered
at both the hardware and software leve

3
 where information lives

SID Lock Down

What is WWN spoofing?
Spoofing refers to changing an HBAs WWN to match the current WWN of another
HBA
Changing the WWN of an HBA may allow an unauthorized user access to a
restricted zone

SID Lock Down prevents spoofing

When enabled, the Source ID (SID) of the switch port that the protected HBA is
connected to is added to the VCMDB record
Once an association between the HBAs WWN, the SID, and the FA port is created,
the HBA is considered locked
No user with a spoofed WWN can log in if a SID is locked. If a user with a spoofed
WWN is already logged in, that user loses all access through that HBA
Enabling SID Lock Down and VCMDB Access Feature together provides highest
level of security

4
 where information lives

SID Lock Down

5
 where information lives

Using ESN Manager to Setup Access Control

Planning Plan configuration
Identify which host needs access to what
volumes through what FA port
Install ESN Manager Plan physical connections

Login & Configure ESN Mgr. Verify prerequisites

Symmetrix bin file configured and volumes
Discover Topology and presented to FA ports
Identify WWN VCMDB configured and presented to all
FAs
Configure Zone for ESN Mgr. HBAs installed and configured
Workstation HBA and Symmetrix cabled to switch

Configure Access Control Access Control includes both zoning

and volume access configuration
Backup Databases and
Print Reports

6
 where information lives

ESN Manager Startup Screen

First step in
initial setup

Shortcut Bar

7
 where information lives

Managing Zones

Topology
View

Zoning
Tree

Zone details

Zoning Tool

8
 where information lives

Creating Zones Creating

Zones and
Zone Sets

Complete list
of available
members

Members selected
for the new zone
9
 where information lives

Managing Volume Access

Volume Access Tool

Symmetrix
volumes

VCMDB Database

10
 where information lives

Using the Autopathing Feature

Path Selection
Policy

Number of
paths to create

11
 where information lives

Filtering

Display options

12
 where information lives

Create Reports
Report types

Print, Preview, or
Export with
comma-delimited
format

13
 where information lives

ESN Manager Report Example

14
 where information lives

ESN Manager simplifies storage network management

ESN Manager provides a single point of management for access control

Displays SAN topology at high level or in detail
View and manage volume access configuration
View and configure zoning for multi-vendor switches

Quickly and easily configure and manage access to volumes

Partition the fabric into logical zones to control access
Generate reports for documentation or troubleshooting

15
where information lives

16