Limited knowledge of configuration information of a FICON controller
View Patent ↗Method and apparatus for limiting access to control units channel-connected to host computers through a FICON switch. The control unit port of the FICON switch receives a requests from an attached host to provide configuration information regarding the switch ports. The control unit port deliberately misrepresents the port configuration of the switch by reporting that ports outside the zone of the requesting host are not installed, even though these ports may in fact be installed for use by other hosts that belong to other zones.
1. A method for limiting access to control units channel-connected to hosts through a FICON switch, comprising the steps of:
receiving a request from a first host for configuration information regarding switch ports of the FICON switch;
determining a first zone that includes the first host; and
for at least one switch port not in the first zone, sending to the first host an indication that the switch port is not installed, wherein the switch port is installed for use by a second host that is included in a second zone that differs from the first zone, wherein the indication includes a visibility mask; and wherein the method further comprising the steps of reading configuration information from a configuration table; reading visibility information from a visibility table; altering the read configuration information according to the read visibility information, to provide altered configuration information; and sending the altered configuration information to the first host.
2. A program storage device readable by a machine, storing a program of instructions executable by the machine to perform method steps for limiting access to control units channel-connected to hosts through a FICON switch, said method steps comprising:
receiving a request from a first host for configuration information regarding switch ports of the FICON switch;
determining a first zone that includes the first host; and
for at least one switch port not in the first zone, wherein the indication includes a visibility mask; reading configuration information from a configuration table; and wherein the method further the steps of reading visibility information from a visibility table; altering the read configuration information according to the read visibility information, to provide altered configuration information; and sending the altered configuration information to the first host, sending to the first host an indication that the switch port is not installed, wherein the switch port is installed for use by a second host that is included in a second zone that differs from the first zone.
3. A FICON switch for limiting unauthorized access to control units, comprising:
a switch fabric; and
logic for receiving a request from a first host for configuration information regarding ports of the switch fabric; determining a first zone that includes the first host; and, for at least one switch port not in the first zone, sending to the first host an indication that the switch port is not installed, wherein the switch port is installed for use by a second host that is included in a second zone that differs from the first zone, wherein the indication includes a visibility mask; and wherein the fabric switch further comprising logic for reading configuration information from a configuration table; logic for reading visibility information from a visibility table; logic for altering the read configuration information according to the read visibility information, to provide altered configuration information; and logic for sending the altered configuration information to the first host.
4. The FICON switch of claim 3 , wherein the logic is included in a name server of a FICON control unit port.