Determination and display of LUN encryption paths
View Patent ↗A management station which manages the encryption devices in a SAN to set up encrypted LUNs. In setting up the encryption, the source and target ports are identified, along with the target LUN. LUN serial numbers used to identify unique LUNs. As paths to a given LUN are defined, the management station compares the path to existing paths and provides an indication if there is a mismatch in the encryption policies or keys being applied to the LUN over the various paths. This allows the administrator to readily identify when there is a problem with the paths to an encrypted LUN and then take steps to cure the problem. By determining the paths and then comparing them, the management station greatly simplifies setting up multipath I/O to an encrypted LUN or access by multiple hosts to an encrypted LUN.
1. A method for managing a storage area network, the method comprising:
determining multiple paths from a host to a target logical unit (LUN) across the storage area network, comprising:
indicating available targets;
receiving a selection of a target;
indicating available hosts;
receiving a selection of a host;
indicating available LUNs for a host-target combination;
receiving a selection of a LUN; and
defining a path after receiving the selection of a LUN, the path being one path of the multiple paths;
determining an encryption mode for each of the multiple paths, wherein the encryption mode comprises one or more of encryption keys and encryption policies;
identifying a mismatch in encryption modes corresponding to the multiple paths to the LUN; and
presenting the identified mismatch in a user interface that allows correction of the identified mismatch.
2. A management system for a storage area network, the system comprising:
a computer; and
software stored on and executed by the computer, the software comprising instructions that when executed by the computer, cause the computer to:
determine multiple paths from a host to a target logical unit (LUN) across a storage area network, comprising instructions that when executed cause the computer to:
indicate available targets;
receive a selection of a target;
indicate available hosts;
receive a selection of a host;
indicate available LUNs for a host-target combination;
receive a selection of a LUN; and
define a path after receiving the selection of a LUN, the path being one path of the multiple paths;
determine an encryption mode for each of the multiple paths, wherein the encryption mode comprises one or more of encryption keys and encryption policies;
identify a mismatch in encryption modes corresponding to the multiple paths to the LUN; and
present the identified mismatch in a user interface that allows correction of the identified mismatch.
3. A non-transitory machine-readable medium, upon which are stored instructions, comprising instructions that when executed cause a machine to:
determine multiple paths from hosts to a target logical unit (LUN) across a storage area network, comprising instructions that when executed cause the computer to:
indicate available targets;
receive a selection of a target;
indicate available hosts;
receive a selection of a host;
indicate available LUNs for a host-target combination;
receive a selection of a LUN; and
define a path after receiving the selection of a LUN, the path being one path of the multiple paths;
determine an encryption mode for each of the multiple paths, wherein the encryption mode comprises one or more of encryption keys and encryption policies;
identify a mismatch in encryption modes corresponding to the multiple paths to the LUN;
presenting the identified mismatch in a user interface; and
allow correction of the identified mismatch through the user interface.