Method and device for controlling safety access to storage network and switching equipment

Abstract

The invention discloses a method and a device for controlling safety access to a storage network, and switching equipment, which are used for enhancing safety and reliability of the storage network. The method for controlling safety access to the storage network includes the steps: after receiving a connection establishment request message transmitted from initiating-end equipment to target-end equipment, acquiring access authority control information between the initiating-end equipment and the target-end equipment; judging whether the initiating-end equipment has the authority to access to the target-end equipment or not according to the access authority control information; allowing the initiating-end equipment to access to the target-end equipment if the initiating-end equipment has the authority to access to the target-end equipment; and forbidding the initiating-end equipment to access to the target-end equipment if the initiating-end equipment has no authority to access to the target-end equipment.

Description

technical field [0001] The invention relates to the technical field of computer communication, in particular to a storage network security access control method, device and switching equipment. Background technique [0002] A Storage Area Network (SAN, Storage Area Network) is a high-speed network or sub-network that provides data transmission between a server and a storage device. A storage device refers to one or more disk devices used to store data. A SAN network consists of a communication structure responsible for network connections, a management layer responsible for organizing connections, storage components, and computer systems to ensure the security of data transmission. At present, the mainstream SAN support technology includes Fiber Channel (Fiber Channel) technology. FC defines a set of protocol stacks that follow the OSI model. Through FC-related protocol standards, the mutual access technology of SAN network servers and storage devices is realized. FC-related...

AI Technical Summary

Problems solved by technology

[0023] In the implementation mechanism of the Zone function, the behavior of the Name Server is mainly controlled. When the server queries the switching device for the FC ID address of the storage device, it does not notify the server of the FC ID address of the storage device that it does not have permission to access. The server cannot discover the storage device, so it cannot perform read and write operations

However, if the server obtains the FC ID address of a storage device that it does not have permission to access through other methods, it can directly establish a connection with the storage device and perform read and write operations. Therefore, the security risk of the FC network is increased and the FC network reliability

Images